65 lines
1.6 KiB
Ruby
65 lines
1.6 KiB
Ruby
##
|
|
# $Id$
|
|
##
|
|
|
|
##
|
|
# This file is part of the Metasploit Framework and may be subject to
|
|
# redistribution and commercial restrictions. Please see the Metasploit
|
|
# web site for more information on licensing and terms of use.
|
|
# http://metasploit.com/
|
|
##
|
|
|
|
require 'msf/core'
|
|
require 'msf/core/post/windows/accounts'
|
|
|
|
class Metasploit3 < Msf::Post
|
|
|
|
include Msf::Post::Windows::Accounts
|
|
|
|
def initialize(info={})
|
|
super( update_info( info,
|
|
'Name' => 'Windows Gather Local User Account SID Lookup',
|
|
'Description' => %q{ This module prints information about a given SID from the perspective of this session },
|
|
'License' => MSF_LICENSE,
|
|
'Author' => [ 'chao-mu'],
|
|
'Version' => '$Revision$',
|
|
'Platform' => [ 'win' ],
|
|
'SessionTypes' => [ 'meterpreter' ]
|
|
))
|
|
register_options(
|
|
[
|
|
OptString.new('SID', [ true, 'SID to lookup' ]),
|
|
OptString.new('SYSTEM_NAME', [ false, 'Where to search. If undefined, first local then trusted DCs' ]),
|
|
], self.class)
|
|
|
|
end
|
|
|
|
def run
|
|
sid = datastore['SID']
|
|
target_system = datastore['SYSTEM_NAME']
|
|
|
|
info = resolve_sid(sid, target_system ? target_system : nil)
|
|
|
|
if info.nil?
|
|
print_error 'Unable to resolve SID. Giving up.'
|
|
return
|
|
end
|
|
|
|
sid_type = info[:type]
|
|
|
|
if sid_type == :invalid
|
|
print_error 'Invalid SID provided'
|
|
return
|
|
end
|
|
|
|
unless info[:mapped]
|
|
print_error 'No account found for the given SID'
|
|
return
|
|
end
|
|
|
|
print_status "SID Type: #{sid_type.to_s}"
|
|
print_status "Name: #{info[:name]}"
|
|
print_status "Domain: #{info[:domain]}"
|
|
end
|
|
end
|