Corrected for console width errors causing erroneous carriage returns, resulting in incorrect hash extraction on ms sql server 2012

2016-07-04 16:23:07 -04:00 · 2016-07-04 16:23:07 -04:00 · 9d13df3a25
parent 12812650c0
commit 9d13df3a25
1 changed files with 6 additions and 1 deletions
--- a/modules/post/windows/gather/credentials/mssql_local_hashdump.rb
+++ b/modules/post/windows/gather/credentials/mssql_local_hashdump.rb
@ -116,7 +116,12 @@ class MetasploitModule < Msf::Post

    if get_hash_result.include?('0x')
      # Parse Data
-      hash_array = get_hash_result.split("\r\n").grep(/0x/)
+      if hash_type == "mssql12"
+        crlfRepair = get_hash_result.unpack('H*')[0].gsub("200d0a","PLACEHOLDER").gsub("0d0a","").gsub("PLACEHOLDER","0d0a").gsub(/../) { |pair| pair.hex.chr }
+        hash_array = crlfRepair.split("\r\n").grep(/0x/)
+      else
+        hash_array = get_hash_result.split("\r\n").grep(/0x/)
+      end

      store_hashes(hash_array, hash_type)
    else