Fix metadata

bug/bundler_fix
jvazquez-r7 2015-08-04 16:28:50 -05:00
parent d3902771b6
commit 0e3434ebad
No known key found for this signature in database
GPG Key ID: 38D99152B9352D83
1 changed files with 30 additions and 31 deletions

View File

@ -6,38 +6,37 @@ class Metasploit3 < Msf::Auxiliary
def initialize(info = {}) def initialize(info = {})
super(update_info(info, super(update_info(info,
'Name' => 'Lansweeper Collector', 'Name' => 'Lansweeper Collector',
'Description' => %q( 'Description' => %q(
Lansweeper stores the credentials it uses to scan the computers Lansweeper stores the credentials it uses to scan the computers in its MSSQL database.
in its MSSQL database. The passwords are XTea-encrypted with a The passwords are XTea-encrypted with a 68 character long key, which first 8 character
68 character long key, which first 8 character is stored with the are stored with the password in the database, and the other 60 is static. Lansweeper by
password in the database, and the other 60 is static. Lansweeper by default creates an MSSQL user "lansweeperuser" whose password is "mysecretpassword0*",
default creates an MSSQL user "lansweeperuser" whose password is and stores its data in a database called "lansweeperdb". This module will query the MSSQL
"mysecretpassword0*", and stores its data in a database called database for the credentials.
"lansweeperdb". ),
This module will query the MSSQL database for the credentials. 'Author' =>
), [
'Author' => [ 'sghctoma <tamas.szakaly[at]praudit.hu>', # Lansweeper RCE + Metasploit implementation
# Lansweeper RCE + Metasploit implementation 'eq <balazs.bucsay[at]praudit.hu>', # Lansweeper RCE + discovering default credentials
'sghctoma <tamas.szakaly [at] praudit [dot] hu>', 'calderpwn <calderon[at]websec.mx>' # Module for lansweeper (5.3.0.8)
# Lansweeper RCE + discovering default credentials ],
'eq <balazs.bucsay [at] praudit [dot] hu>', 'License' => MSF_LICENSE,
# Module for lansweeper (5.3.0.8) 'DefaultOptions' =>
'calderpwn <calderon [at] websec [dot] mx>' {
], 'USERNAME' => 'lansweeperuser',
'License' => MSF_LICENSE, 'PASSWORD' => 'mysecretpassword0*'
'References' => [ },
[ 'URL', 'http://www.lansweeper.com'], 'References' =>
[ 'URL', 'http://www.praudit.hu/prauditeng/index.php/blog/a-lansweeper-es-a-tea'] [
] ['URL', 'http://www.lansweeper.com'],
) ['URL', 'http://www.praudit.hu/prauditeng/index.php/blog/a-lansweeper-es-a-tea']
) ]))
register_options([
OptString.new('DATABASE', [true, 'The Lansweeper database', 'lansweeperdb'])
], self.class)
register_options([
OptString.new('USERNAME', [ true, 'The username to authenticate as', 'lansweeperuser' ]),
OptString.new('PASSWORD', [ false, 'The password for the specified username', 'mysecretpassword0*' ]),
OptString.new('DATABASE', [ true, 'The Lansweeper database', 'lansweeperdb'])
], self.class)
end end
def uint32(n) def uint32(n)