From da5436e565363af9c6387bb159f6a994d20173b0 Mon Sep 17 00:00:00 2001 From: lmercer Date: Mon, 28 Jan 2013 23:29:50 -0500 Subject: [PATCH] Made changes as described in Redmine issue 7605 --- modules/post/windows/gather/cachedump.rb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/modules/post/windows/gather/cachedump.rb b/modules/post/windows/gather/cachedump.rb index dddf43ab7e..a6299a173b 100644 --- a/modules/post/windows/gather/cachedump.rb +++ b/modules/post/windows/gather/cachedump.rb @@ -516,9 +516,6 @@ class Metasploit3 < Msf::Post end end - store_loot("mscache.creds", "text/csv", session, @credentials.to_csv, - "mscache_credentials.txt", "MSCACHE Credentials") - print_status("John the Ripper format:") john.split("\n").each do |pass| @@ -527,8 +524,11 @@ class Metasploit3 < Msf::Post if( @vista == 1 ) print_status("Hash are in MSCACHE_VISTA format. (mscash2)") + store_loot("mscache2.creds", "text/csv", session, @credentials.to_csv, "mscache2_credentials.txt", "MSCACHE v2 Credentials") + else print_status("Hash are in MSCACHE format. (mscash)") + store_loot("mscache.creds", "text/csv", session, @credentials.to_csv, "mscache_credentials.txt", "MSCACHE v1 Credentials") end rescue ::Interrupt