## # $Id$ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # Framework web site for more information on licensing and terms of use. # http://metasploit.com/framework/ ## require 'msf/core' require 'msf/core/post/windows/accounts' class Metasploit3 < Msf::Post include Msf::Post::Windows::Accounts def initialize(info={}) super( update_info( info, 'Name' => 'Windows Manage Local User Account Deletion', 'Description' => %q{ This module deletes a local user account from the specified server, or the local machine if no server is given.}, 'License' => BSD_LICENSE, 'Author' => [ 'chao-mu'], 'Version' => '$Revision$', 'Platform' => [ 'windows' ], 'SessionTypes' => [ 'meterpreter' ] )) register_options( [ OptString.new('USERNAME', [ true, 'The username of the user to delete (not-qualified, e.g. BOB)' ]), OptString.new('SERVER_NAME', [ false, ' DNS or NetBIOS name of remote server on which to delete user' ]), ], self.class) end def run username = datastore['USERNAME'] target_server = datastore['SERVER_NAME'] status = delete_user(username, target_server ? target_server : nil) case status when :success print_status 'User was deleted!'; when :invalid_server print_error 'The server you specified was invalid'; when :not_on_primary print_error 'You must be on the primary domain controller to do that'; when :user_not_found print_error 'User did not exist!'; when :access_denied print_error 'Sorry, you do not have permission to delete that user' when nil print_error 'Something horrible just happened. Sorry.' else print_error 'This module is out of date' end end end