infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

minor fixups

unstable
David Maloney 2012-10-30 11:08:57 -05:00 committed by sinn3r
parent 09195ad9a7
commit 8711484438
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
modules/auxiliary/scanner/winrm/winrm_wql.rb
View File

@ -27,7 +27,7 @@ class Metasploit3 < Msf::Auxiliary
'Name' => 'WinRM WQL Query Runner',
'Version' => '$Revision$',
'Description' => %q{
This module runs WQL queries against remote WinRM Services.
This module runs WQL queries against remote WinRM Services.
Authentication is required. Currently only works with NTLM auth.
},
'Author' => [ 'thelightcosine' ],
@ -48,8 +48,12 @@ class Metasploit3 < Msf::Auxiliary
print_error "The Remote WinRM server (#{ip} does not appear to allow Negotiate(NTLM) auth"
return
end
resp,c = send_request_ntlm(winrm_wql_msg(datastore['WQL']))
if resp.nil?
print_error "Got no reply from the server"
return
end
if resp.code == 401
print_error "Login Failure! Recheck the supplied credentials."
return
@ -61,7 +65,8 @@ class Metasploit3 < Msf::Auxiliary
end
resp_tbl = parse_wql_response(resp)
print_good resp_tbl.to_s
store_loot("winrm.wql_results", "text/csv", ip, resp_tbl.to_csv, "winrm_wql_results.csv", "WinRM WQL Query Results")
path = store_loot("winrm.wql_results", "text/csv", ip, resp_tbl.to_csv, "winrm_wql_results.csv", "WinRM WQL Query Results")
print_status "Results saved to #{path}"
end