Commit Graph

246 Commits (f26447e02100ae519bb7d44cfbb23d5d78b0355a)

Author SHA1 Message Date
Carlos Perez ef808f20e8 Post module for enumerating on a host that is part of the domain domain members in its local groups, impersonation tokens of domain accounts and processes that run under domain accounts and on all cases checks if those domain accounts are part of the Domain Admins group
git-svn-id: file:///home/svn/framework3/trunk@14087 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-27 00:54:54 +00:00
Wei Chen 587f0fb4d6 This picasa module steals passwords, therefore should go to the credentials section
git-svn-id: file:///home/svn/framework3/trunk@14045 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-24 05:09:47 +00:00
Wei Chen 70c4061c64 These are the "myca" modules by Nick Freeman. Feature #5503
git-svn-id: file:///home/svn/framework3/trunk@14037 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-23 17:17:32 +00:00
Joshua Drake 62c8c6ea9f big msftidy pass, ping me if there are issues
git-svn-id: file:///home/svn/framework3/trunk@14034 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-23 11:56:13 +00:00
Carlos Perez 88dbc6adee Accidental assignment
git-svn-id: file:///home/svn/framework3/trunk@14005 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-19 13:04:40 +00:00
Carlos Perez a5dc422f9a Windows Credential Store enumeration and decryption module by Kx499
git-svn-id: file:///home/svn/framework3/trunk@14000 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-18 23:25:28 +00:00
Wei Chen 975cc52bac Fix spelling errors
git-svn-id: file:///home/svn/framework3/trunk@13983 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-18 00:54:05 +00:00
Wei Chen 6e3b36e142 path could be nil but only checked using empty?. Defaulting value to ''
git-svn-id: file:///home/svn/framework3/trunk@13979 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 16:35:53 +00:00
Wei Chen 87ec1c390e We caught a problem with the module timing out (execution expired), this is an attempt to handle that more gracefully.
git-svn-id: file:///home/svn/framework3/trunk@13977 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 15:38:09 +00:00
Jonathan Cran bbfbb38a5f wording fix.
git-svn-id: file:///home/svn/framework3/trunk@13973 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 08:56:07 +00:00
Tod Beardsley c336d063da Mostly file format (unix linefeeds) and File.open() calls using binary. Fixed ranking for mozilla_nstreerange and disclosure and BID # for tugzip.
git-svn-id: file:///home/svn/framework3/trunk@13971 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 04:20:53 +00:00
Tod Beardsley 3c36b0c975 Msftidy: knocking out all those trailing spaces. Screw those guys.
git-svn-id: file:///home/svn/framework3/trunk@13967 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 03:49:49 +00:00
Wei Chen 4c6a1923e7 Fix bug #5687
git-svn-id: file:///home/svn/framework3/trunk@13966 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 03:32:43 +00:00
Wei Chen 6194486a4c Fix bug #5689 (it needs a 'rescue' in order to catch an exception)
git-svn-id: file:///home/svn/framework3/trunk@13965 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 03:27:58 +00:00
Wei Chen d159937df6 If you don't have a 'rescue', you're not really catching an exception
git-svn-id: file:///home/svn/framework3/trunk@13964 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 03:25:12 +00:00
Tod Beardsley ea2c9d1a46 Adding missing Id and Rev SVN keywords.
git-svn-id: file:///home/svn/framework3/trunk@13961 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 01:27:28 +00:00
Wei Chen 6e6b5aa926 Apply fixes by jabra
git-svn-id: file:///home/svn/framework3/trunk@13960 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 00:21:37 +00:00
HD Moore 6620476744 More consistency fixes for modules titles
git-svn-id: file:///home/svn/framework3/trunk@13932 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-15 19:41:40 +00:00
Chao Mu 4b9346e40e Switching my BSD modules to MSF_LICENSE to make life easier. Resistance is Futile! Assimilate!
git-svn-id: file:///home/svn/framework3/trunk@13925 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-14 23:29:52 +00:00
Carlos Perez c0910add22 keywords
git-svn-id: file:///home/svn/framework3/trunk@13920 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-14 02:44:30 +00:00
Carlos Perez e4ce0bcb42 Added additional product keys
git-svn-id: file:///home/svn/framework3/trunk@13919 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-14 02:42:54 +00:00
Carlos Perez ab8b8802b5 issue with none domain machines fixed and added host resolution and reporting on domain controller using some of Mubix railgun fu
git-svn-id: file:///home/svn/framework3/trunk@13895 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-12 23:15:07 +00:00
Wei Chen 9a00527114 Check nil
git-svn-id: file:///home/svn/framework3/trunk@13881 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 21:57:20 +00:00
Wei Chen 39049a71ca Chk nil for user in case it returns nil, but password doesn't
git-svn-id: file:///home/svn/framework3/trunk@13880 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 21:55:30 +00:00
Wei Chen f1f1d16f8b handle possible nil return value
git-svn-id: file:///home/svn/framework3/trunk@13879 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 21:01:22 +00:00
Wei Chen 4a73a21277 registry_getvaldata might return nil due to a RequestError. Need to handle those before printing the values.
git-svn-id: file:///home/svn/framework3/trunk@13878 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 20:27:52 +00:00
Wei Chen d49ffd3fc8 Fix naming style, and some other format problems.
git-svn-id: file:///home/svn/framework3/trunk@13877 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 20:08:11 +00:00
Wei Chen 60296e9cf2 Change naming style for consistency
git-svn-id: file:///home/svn/framework3/trunk@13876 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 20:03:40 +00:00
Wei Chen 2d3a431fc2 FTP Navigator post module (Feature #5419)
git-svn-id: file:///home/svn/framework3/trunk@13869 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 05:45:03 +00:00
Wei Chen be4f473cfa Rename meebo for consistency
git-svn-id: file:///home/svn/framework3/trunk@13866 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 00:38:50 +00:00
Wei Chen 50d4e85c57 "bug" #5583 - Dyn-DNS client password extractor
git-svn-id: file:///home/svn/framework3/trunk@13863 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 21:41:36 +00:00
HD Moore 43e6b3066b Fix errant spaces, closes #5666, thanks jjarmoc!
git-svn-id: file:///home/svn/framework3/trunk@13858 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 21:07:55 +00:00
Wei Chen e1e74de44a Add enum_ie.rb (feature #5251)
git-svn-id: file:///home/svn/framework3/trunk@13834 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-07 21:02:05 +00:00
Wei Chen 5cf6ddc322 Add Windows enum domain post module
git-svn-id: file:///home/svn/framework3/trunk@13812 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-03 21:05:54 +00:00
Wei Chen d1a0a66a9d Add post module enum domain admin tokens (by jabra)
git-svn-id: file:///home/svn/framework3/trunk@13804 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-29 08:18:13 +00:00
David Rude 99d86fc9b7 Adds recording screenshots to disk in non-clobbering way
git-svn-id: file:///home/svn/framework3/trunk@13798 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-27 15:26:03 +00:00
Carlos Perez c1446fa4d7 Migration of wmic script to post module
git-svn-id: file:///home/svn/framework3/trunk@13725 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-12 23:33:09 +00:00
Carlos Perez b7ed699abf Avoid using session.sock.peerhost to set host in reporting since this will return nil when working thru a pivot, use the address returned by session.tunnel_peer instead
git-svn-id: file:///home/svn/framework3/trunk@13716 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-11 03:10:14 +00:00
David Rude fafa615d46 Adds store_loot support for cached credentials
git-svn-id: file:///home/svn/framework3/trunk@13712 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-09 18:43:59 +00:00
James Lee e31acef6e9 whitespace cleanup
git-svn-id: file:///home/svn/framework3/trunk@13702 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-07 15:30:08 +00:00
Wei Chen eae3f97bfe Should have deleted this. The replacement for it is enum_devices.rb
git-svn-id: file:///home/svn/framework3/trunk@13692 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-04 17:22:50 +00:00
Wei Chen 3260721d6f Add post module that retrieves MS product key
git-svn-id: file:///home/svn/framework3/trunk@13686 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-03 04:16:42 +00:00
Carlos Perez 6de16f055a Fix formating problem when saving to file
git-svn-id: file:///home/svn/framework3/trunk@13671 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-31 17:20:16 +00:00
HD Moore 160e473943 Minor style tweaks
git-svn-id: file:///home/svn/framework3/trunk@13653 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-29 00:59:21 +00:00
HD Moore d2e0060417 Ruby is not Python
git-svn-id: file:///home/svn/framework3/trunk@13652 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-29 00:26:42 +00:00
David Rude 6146d0ab0f remove some extra whitespace
git-svn-id: file:///home/svn/framework3/trunk@13651 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-28 22:40:32 +00:00
David Rude 57814c4012 Add nbd_server post module and move forensics modules into a seperate directory
git-svn-id: file:///home/svn/framework3/trunk@13650 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-28 22:38:59 +00:00
David Rude 052feebc29 Adds Google Picasa Password Extractor Post module
git-svn-id: file:///home/svn/framework3/trunk@13643 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-26 18:32:42 +00:00
Carlos Perez 110094de1b Post module for gathering Autologin User Credentials by Myo Soe
git-svn-id: file:///home/svn/framework3/trunk@13608 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-22 00:37:09 +00:00
David Rude 3792a8f4b7 Added enum_dirperms post module
git-svn-id: file:///home/svn/framework3/trunk@13603 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-21 05:58:38 +00:00
Carlos Perez db57999246 Reverse lookup module using Railgun, written by Mubix
git-svn-id: file:///home/svn/framework3/trunk@13594 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-20 01:23:24 +00:00
Chao Mu c77dfcc48e fixes #5232 Add DLL definition for crypt32. I removed a custom add too
git-svn-id: file:///home/svn/framework3/trunk@13560 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-14 21:08:55 +00:00
Wei Chen 20df63a94e enum_pci_devices.rb is now enum_devices.rb because it enums more than just PCI info
git-svn-id: file:///home/svn/framework3/trunk@13559 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-14 00:36:06 +00:00
Wei Chen ca569ef26f Apply changes to enum more items
git-svn-id: file:///home/svn/framework3/trunk@13558 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-14 00:34:03 +00:00
David Rude a1fdb3063f move credential collection modules to the new dir structure
git-svn-id: file:///home/svn/framework3/trunk@13529 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 18:18:48 +00:00
David Rude 1c008f3996 Add Meebo Notifier Password Collection post module by silent_dream
git-svn-id: file:///home/svn/framework3/trunk@13526 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 17:06:56 +00:00
James Lee ad941c67ad move the password-stealing modules into their own directory
git-svn-id: file:///home/svn/framework3/trunk@13512 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 17:48:30 +00:00
Wei Chen 89bc8ce10a Apply patch by David Maloney
git-svn-id: file:///home/svn/framework3/trunk@13504 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 01:42:59 +00:00
James Lee ca14e50290 fix syntax errors in 1.9+ Ruby is not python.
git-svn-id: file:///home/svn/framework3/trunk@13500 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-09 19:21:33 +00:00
David Rude b17248c911 Add forensic modules from Wesley McGrew
git-svn-id: file:///home/svn/framework3/trunk@13499 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-09 16:49:12 +00:00
Carlos Perez dca3aa9d6a Remove null bytes from passwords returned
git-svn-id: file:///home/svn/framework3/trunk@13478 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-03 00:48:35 +00:00
Wei Chen 1373d1043d Indent level fix
git-svn-id: file:///home/svn/framework3/trunk@13477 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-02 22:42:26 +00:00
Wei Chen 5db12c65eb Avoid trying to decode empty passwords
git-svn-id: file:///home/svn/framework3/trunk@13476 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-02 21:46:51 +00:00
Wei Chen e231ac7681 Name change
git-svn-id: file:///home/svn/framework3/trunk@13474 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-02 21:35:06 +00:00
Wei Chen 1b326839c9 Consistent naming style
git-svn-id: file:///home/svn/framework3/trunk@13456 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 19:16:00 +00:00
Wei Chen 2078b874af Wrong order. Should check nil first, and then ""
git-svn-id: file:///home/svn/framework3/trunk@13454 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 19:02:40 +00:00
Wei Chen c59a51667d return value for registry_enumkeys() should be checked
git-svn-id: file:///home/svn/framework3/trunk@13453 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:55:38 +00:00
Wei Chen 9d1bcc2cb2 return value from registry_enumkeys should be checked
git-svn-id: file:///home/svn/framework3/trunk@13452 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:52:19 +00:00
Wei Chen 50c9bc83cf Name change
git-svn-id: file:///home/svn/framework3/trunk@13451 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:47:11 +00:00
HD Moore ea2326fc3c Get the actual order right
git-svn-id: file:///home/svn/framework3/trunk@13450 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:28:46 +00:00
Wei Chen 730e41263f Consistent naming
git-svn-id: file:///home/svn/framework3/trunk@13445 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 06:17:00 +00:00
Wei Chen 14dfc34930 This time should fix the issue with ruby 1.8 vs 1.9
git-svn-id: file:///home/svn/framework3/trunk@13444 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 05:40:08 +00:00
Wei Chen 7ff785f886 syntax change to make ruby 1.8 and 1.9 happy
git-svn-id: file:///home/svn/framework3/trunk@13443 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 05:05:26 +00:00
Carlos Perez 49fb90b835 Service enumeration module by Keith Faber
git-svn-id: file:///home/svn/framework3/trunk@13423 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 15:11:52 +00:00
Wei Chen 973c6fdfc7 Change where print_good() is used.
git-svn-id: file:///home/svn/framework3/trunk@13406 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 06:26:22 +00:00
Wei Chen a64e223062 Indentation fix, and svn propset
git-svn-id: file:///home/svn/framework3/trunk@13401 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 02:17:54 +00:00
Wei Chen 625f8c8591 Add Trillian Instant Messenger password decoder (post module)
git-svn-id: file:///home/svn/framework3/trunk@13400 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 02:14:59 +00:00
Wei Chen 5d38a47fc6 Indentation fix for metadata
git-svn-id: file:///home/svn/framework3/trunk@13399 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:29:15 +00:00
Wei Chen b6c09d17a9 creds shouldn't have to re-initialize all the time
git-svn-id: file:///home/svn/framework3/trunk@13398 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:22:00 +00:00
Wei Chen e7622da121 Better use of print_good()
git-svn-id: file:///home/svn/framework3/trunk@13397 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:19:33 +00:00
Wei Chen 7e01518b69 Minor indentation fix
git-svn-id: file:///home/svn/framework3/trunk@13396 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:18:02 +00:00
Wei Chen c07a891476 Add Nimbuzz Instant Messenger post module
git-svn-id: file:///home/svn/framework3/trunk@13395 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:14:03 +00:00
Carlos Perez 1d879e39df Added patch from thelightcosine for profile mixin
git-svn-id: file:///home/svn/framework3/trunk@13393 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 22:56:40 +00:00
Carlos Perez f0877e1c5b Applied patch from lightcosine for profile mixin, minor fixes and some code standard changes
git-svn-id: file:///home/svn/framework3/trunk@13386 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 12:35:50 +00:00
Carlos Perez f685e179cd Do not error if time can not be obtained
git-svn-id: file:///home/svn/framework3/trunk@13383 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 21:31:21 +00:00
Carlos Perez 2a6b9957d0 fixed problem with the command execution
git-svn-id: file:///home/svn/framework3/trunk@13377 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 19:37:43 +00:00
Carlos Perez eedc77e2ba fixed problem where it looped when ran as system
git-svn-id: file:///home/svn/framework3/trunk@13370 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 15:44:29 +00:00
David Rude 5b7a8ad6a3 Fix a stack trace when loading sqlite gem
git-svn-id: file:///home/svn/framework3/trunk@13369 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 15:35:35 +00:00
Wei Chen f3fecacc0f Fix bug #5066
git-svn-id: file:///home/svn/framework3/trunk@13366 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 14:38:19 +00:00
Carlos Perez 3b85b2d08b check for empty keys returning nil
git-svn-id: file:///home/svn/framework3/trunk@13364 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 13:51:37 +00:00
Carlos Perez 49d1bbe9d2 make sure nil is not returned for systems with no share history
git-svn-id: file:///home/svn/framework3/trunk@13361 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 13:14:11 +00:00
Wei Chen 41f72deee2 Add PCI devices enum post module
git-svn-id: file:///home/svn/framework3/trunk@13358 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 04:53:14 +00:00
Tod Beardsley c41d60ab1b Description clean up and a tiny bit of whitespace changes. Also changed one use of eql?() to == since that's nearly always better, says me.
git-svn-id: file:///home/svn/framework3/trunk@13357 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 02:39:49 +00:00
Wei Chen eced6619e9 I believe I meant 'next', not 'break'
git-svn-id: file:///home/svn/framework3/trunk@13344 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 16:25:42 +00:00
Wei Chen f15dc33ae6 Add store_loot feature
git-svn-id: file:///home/svn/framework3/trunk@13343 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 01:49:51 +00:00
Wei Chen 4793cd9aed ugh, I gots to fix my Engrish
git-svn-id: file:///home/svn/framework3/trunk@13340 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-25 22:55:40 +00:00
Wei Chen d56ba5d645 Add Ipswitch iMail user data enumeration post module
git-svn-id: file:///home/svn/framework3/trunk@13339 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-25 22:44:51 +00:00
David Rude e0430ee69b Remote the Post::File mixin its not needed
git-svn-id: file:///home/svn/framework3/trunk@13335 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-25 15:29:18 +00:00
Wei Chen 2ed6d1e0ac report_auth_info() should not be used because we're not storing host IP
git-svn-id: file:///home/svn/framework3/trunk@13298 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 23:09:04 +00:00
Wei Chen 21aae8f749 Exercising my author e-mail format dictatorship for some of the win gather post mods
git-svn-id: file:///home/svn/framework3/trunk@13296 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 20:09:26 +00:00