metasploit-framework

Commit Graph

Author	SHA1	Message	Date
HD Moore	96766edfd0	Permission changes (to sync)	2011-11-10 19:48:32 -06:00
Tod Beardsley	0b6c44b2cb	Adding reporting to postgres_login. Logging version info more verbosely for authenticated login, since it's way useful. git-svn-id: file:///home/svn/framework3/trunk@8408 4d416f70-5f16-0410-b530-b9f4589650da	2010-02-08 17:35:58 +00:00
Tod Beardsley	6e8e6ef16a	Fixes #769 by implementing a brute force module for Postgres. A couple notes: If you guess wrong at the database name, you still can try to login with a username and password -- you'll get a successful auth, but then get disconnected. So, that's pretty neat. Also, since Postgres-PR uses the stock TCPSocket object, connection timeouts and other errors take forever. This is avoided in the brute forcer by pre-validating the connection with Rex::Socket, but this is a hack -- it would be better to convert Postgres-PR to a Rex::Socket flavor, so you also get nicer error messages and what all. I did fork it off the main distribute it already anyway, so may as well will open a feature bug on this, but it's pretty low priority. git-svn-id: file:///home/svn/framework3/trunk@8366 4d416f70-5f16-0410-b530-b9f4589650da	2010-02-03 21:45:13 +00:00

Author

SHA1

Message

Date

HD Moore

96766edfd0

Permission changes (to sync)

2011-11-10 19:48:32 -06:00

Tod Beardsley

0b6c44b2cb

Adding reporting to postgres_login. Logging version info more verbosely for authenticated login, since it's way useful.

git-svn-id: file:///home/svn/framework3/trunk@8408 4d416f70-5f16-0410-b530-b9f4589650da

2010-02-08 17:35:58 +00:00

Tod Beardsley

6e8e6ef16a

Fixes #769 by implementing a brute force module for Postgres. A couple notes: If you guess wrong at the database name, you still can try to login with a username and password -- you'll get a successful auth, but then get disconnected. So, that's pretty neat.

Also, since Postgres-PR uses the stock TCPSocket object, connection timeouts and other errors take forever. This is avoided in the brute forcer by pre-validating the connection with Rex::Socket, but this is a hack -- it would be better to convert Postgres-PR to a Rex::Socket flavor, so you also get nicer error messages and what all. I did fork it off the main distribute it already anyway, so may as well will open a feature bug on this, but it's pretty low priority.




git-svn-id: file:///home/svn/framework3/trunk@8366 4d416f70-5f16-0410-b530-b9f4589650da

2010-02-03 21:45:13 +00:00

3 Commits (51a89c3c2cd75142a8bec1ea3ba45aca4e2e95f3)