[FixRM #4398] Report credentials to database

bug/bundler_fix
jvazquez-r7 2013-10-25 16:19:47 -05:00
parent df83114f0b
commit 9276a839d4
1 changed files with 10 additions and 0 deletions

View File

@ -7,6 +7,7 @@ require 'msf/core'
class Metasploit3 < Msf::Auxiliary
include Msf::Auxiliary::Report
include Msf::Exploit::Remote::MYSQL
def initialize(info = {})
@ -85,6 +86,15 @@ class Metasploit3 < Msf::Auxiliary
print_status("\tList of Accounts with Password Hashes:")
res.each do |row|
print_status("\t\tUser: #{row[0]} Host: #{row[1]} Password Hash: #{row[2]}")
report_auth_info({
:host => rhost,
:port => rport,
:user => row[0],
:pass => row[2],
:type => "hash",
:sname => "mysql",
:active => true
})
end
end
# Only list accounts that can log in with SSL if SSL is enabled