-
Notifications
You must be signed in to change notification settings - Fork 14.1k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
0 parents
commit 2db9a0c
Showing
3,189 changed files
with
2,090,318 additions
and
0 deletions.
The diff you're trying to view is too large. We only load the first 3000 changed files.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1 @@ | ||
docs.metasploit.com |
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,28 @@ | ||
{ | ||
"required_lines": [ | ||
{ | ||
"values": [ | ||
" Username Hash" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
" -------- ----" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
"(?-mix: postgres \\w+)" | ||
], | ||
"options": { | ||
} | ||
} | ||
], | ||
"known_failures": [ | ||
|
||
] | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,28 @@ | ||
{ | ||
"required_lines": [ | ||
{ | ||
"values": [ | ||
" Username Hash" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
" -------- ----" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
"(?-mix: postgres \\w+)" | ||
], | ||
"options": { | ||
} | ||
} | ||
], | ||
"known_failures": [ | ||
|
||
] | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,21 @@ | ||
{ | ||
"required_lines": [ | ||
{ | ||
"values": [ | ||
"Query Text: 'select version()'" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
"(?-mix:PostgreSQL \\d+.\\d+)" | ||
], | ||
"options": { | ||
} | ||
} | ||
], | ||
"known_failures": [ | ||
|
||
] | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
## Load test modules | ||
loadpath test/modules | ||
|
||
## Session module | ||
use auxiliary/scanner/postgres/postgres_login | ||
|
||
## Set global datastore | ||
irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
|
||
## Run command | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
|
||
|
||
## Replication commands | ||
use auxiliary/admin/postgres/postgres_sql | ||
run session=5 Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
## Load test modules | ||
loadpath test/modules | ||
|
||
## Session module | ||
use auxiliary/scanner/postgres/postgres_login | ||
|
||
## Set global datastore | ||
irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
|
||
## Run command | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
|
||
|
||
## Replication commands | ||
use auxiliary/scanner/postgres/postgres_version | ||
run session=2 Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,28 @@ | ||
{ | ||
"required_lines": [ | ||
{ | ||
"values": [ | ||
" Username Hash" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
" -------- ----" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
"(?-mix: postgres \\w+)" | ||
], | ||
"options": { | ||
} | ||
} | ||
], | ||
"known_failures": [ | ||
|
||
] | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
## Load test modules | ||
loadpath test/modules | ||
|
||
## Session module | ||
use auxiliary/scanner/postgres/postgres_login | ||
|
||
## Set global datastore | ||
irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
|
||
## Run command | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
|
||
|
||
## Replication commands | ||
use auxiliary/admin/postgres/postgres_sql | ||
run session=1 Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,22 @@ | ||
use auxiliary/scanner/postgres/postgres_hashdump | ||
Stopping all jobs... | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_hashdump[0m) [0m> run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 Verbose=true | ||
[*] New in Metasploit 6.4 - This module can target a SESSION or an RHOST | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_hashdump[0m) [0m> [+] 127.0.0.1:5432 Postgres - Logged in to 'postgres' with 'postgres':'password' | ||
[*] 127.0.0.1:5432 Postgres - querying with 'SELECT usename, passwd FROM pg_shadow' | ||
[!] No active DB -- Credential data will not be saved! | ||
[+] Query appears to have run successfully | ||
[+] Postgres Server Hashes | ||
====================== | ||
|
||
Username Hash | ||
-------- ---- | ||
postgres md532e12f215ba27cb750c9e093ce4b5127 | ||
|
||
[*] 127.0.0.1:5432 Postgres - Disconnected | ||
[*] Scanned 1 of 1 hosts (100% complete) | ||
[*] Auxiliary module execution completed | ||
sessions -K | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_hashdump[0m) [0m> jobs -K | ||
[*] Killing all sessions... | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_hashdump[0m) [0m> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,33 @@ | ||
use auxiliary/scanner/postgres/postgres_login | ||
Stopping all jobs... | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_hashdump[0m) [0m> irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
[*] New in Metasploit 6.4 - The CreateSession option within this module can open an interactive session | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run PASS_FILE= USER_FILE= CreateSession=true username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> [!] No active DB -- Credential data will not be saved! | ||
[+] 127.0.0.1:5432 - Login Successful: postgres:password@template1 | ||
[*] PostgreSQL session 5 opened (127.0.0.1:42963 -> 127.0.0.1:5432) at 2024-06-06 08:36:19 +0000 | ||
use auxiliary/admin/postgres/postgres_sql | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:admin@template1 (Incorrect: Invalid username or password) | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:password@template1 (Incorrect: Invalid username or password) | ||
[*] Scanned 1 of 1 hosts (100% complete) | ||
[*] Bruteforce completed, 1 credential was successful. | ||
[*] 1 Postgres session was opened successfully. | ||
[*] Auxiliary module execution completed | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run session=5 Verbose=true | ||
[*] New in Metasploit 6.4 - This module can target a SESSION or an RHOST | ||
[4mmsf6[0m auxiliary([1m[31madmin/postgres/postgres_sql[0m) [0m> [*] 127.0.0.1:5432 Postgres - querying with 'select version()' | ||
[*] 127.0.0.1:5432 Rows Returned: 1 | ||
Query Text: 'select version()' | ||
============================== | ||
|
||
version | ||
------- | ||
PostgreSQL 9.4.26 on x86_64-pc-linux-gnu (Debian 9.4.26-1.pgdg90+1), compiled by gcc (Debian 6.3.0-18+deb9u1) 6.3.0 20170516, 64-bit | ||
|
||
[+] 127.0.0.1:5432 Postgres - Command complete. | ||
[*] Auxiliary module execution completed | ||
[4mmsf6[0m auxiliary([1m[31madmin/postgres/postgres_sql[0m) [0m> sessions -K | ||
jobs -K | ||
[*] Killing all sessions... | ||
[*] 127.0.0.1 - PostgreSQL session 5 closed. | ||
[4mmsf6[0m auxiliary([1m[31madmin/postgres/postgres_sql[0m) [0m> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,22 @@ | ||
use auxiliary/scanner/postgres/postgres_hashdump | ||
Stopping all jobs... | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_hashdump[0m) [0m> run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 Verbose=true | ||
[*] New in Metasploit 6.4 - This module can target a SESSION or an RHOST | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_hashdump[0m) [0m> [+] 127.0.0.1:5432 Postgres - Logged in to 'postgres' with 'postgres':'password' | ||
[*] 127.0.0.1:5432 Postgres - querying with 'SELECT usename, passwd FROM pg_shadow' | ||
[!] No active DB -- Credential data will not be saved! | ||
[+] Query appears to have run successfully | ||
[+] Postgres Server Hashes | ||
====================== | ||
|
||
Username Hash | ||
-------- ---- | ||
postgres SCRAM-SHA-256$4096:/HdR6A+1v85DLIStFCHVmg==$iZGC1iMjz6OcAPDkj22QM/tZOc0jaSBmWfCvT1X9jYw=:IL/ZlnpjI5BeQk6Mej9ABIEtG6lEggIJeZii+xgBBww= | ||
|
||
[*] 127.0.0.1:5432 Postgres - Disconnected | ||
[*] Scanned 1 of 1 hosts (100% complete) | ||
[*] Auxiliary module execution completed | ||
sessions -K | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_hashdump[0m) [0m> jobs -K | ||
[*] Killing all sessions... | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_hashdump[0m) [0m> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,43 @@ | ||
Calling `DidYouMean::SPELL_CHECKERS.merge!(error_name => spell_checker)' has been deprecated. Please call `DidYouMean.correct_error(error_name, spell_checker)' instead. | ||
Calling `DidYouMean::SPELL_CHECKERS.merge!(error_name => spell_checker)' has been deprecated. Please call `DidYouMean.correct_error(error_name, spell_checker)' instead. | ||
Overriding user environment variable 'OPENSSL_CONF' to enable legacy functions. | ||
[4mmsf6[0m [0m> loadpath test/modules | ||
Loaded 43 modules: | ||
14 auxiliary modules | ||
13 exploit modules | ||
16 post modules | ||
[4mmsf6[0m [0m> features set postgresql_session_type true | ||
postgresql_session_type => true | ||
[!] Run the save command and restart the console for this feature to take effect. | ||
[4mmsf6[0m [0m> use auxiliary/scanner/postgres/postgres_login | ||
[*] New in Metasploit 6.4 - The CreateSession option within this module can open an interactive session | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run PASS_FILE= USER_FILE= CreateSession=true username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
[!] No active DB -- Credential data will not be saved! | ||
[+] 127.0.0.1:5432 - Login Successful: postgres:password@template1 | ||
[*] PostgreSQL session 1 opened (127.0.0.1:34071 -> 127.0.0.1:5432) at 2024-06-06 08:36:18 +0000 | ||
use auxiliary/admin/postgres/postgres_sql | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:admin@template1 (Incorrect: FATAL VFATAL C28P01 Mpassword authentication failed for user "admin" Fauth.c L323 Rauth_failed) | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:password@template1 (Incorrect: FATAL VFATAL C28P01 Mpassword authentication failed for user "admin" Fauth.c L323 Rauth_failed) | ||
[*] Scanned 1 of 1 hosts (100% complete) | ||
[*] Bruteforce completed, 1 credential was successful. | ||
[*] 1 Postgres session was opened successfully. | ||
[*] Auxiliary module execution completed | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run session=1 Verbose=true | ||
[*] New in Metasploit 6.4 - This module can target a SESSION or an RHOST | ||
[4mmsf6[0m auxiliary([1m[31madmin/postgres/postgres_sql[0m) [0m> [*] 127.0.0.1:5432 Postgres - querying with 'select version()' | ||
[*] 127.0.0.1:5432 Rows Returned: 1 | ||
Query Text: 'select version()' | ||
============================== | ||
|
||
version | ||
------- | ||
PostgreSQL 16.2 (Debian 16.2-1.pgdg120+2) on x86_64-pc-linux-gnu, compiled by gcc (Debian 12.2.0-14) 12.2.0, 64-bit | ||
|
||
[+] 127.0.0.1:5432 Postgres - Command complete. | ||
[*] Auxiliary module execution completed | ||
sessions -K | ||
[4mmsf6[0m auxiliary([1m[31madmin/postgres/postgres_sql[0m) [0m> jobs -K | ||
[*] Killing all sessions... | ||
[*] 127.0.0.1 - PostgreSQL session 1 closed. | ||
[4mmsf6[0m auxiliary([1m[31madmin/postgres/postgres_sql[0m) [0m> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,21 @@ | ||
{ | ||
"required_lines": [ | ||
{ | ||
"values": [ | ||
"(?-mix:root:x:\\d+:\\d+:root:)" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
"(?-mix:postgres:x:\\d+:\\d+::)" | ||
], | ||
"options": { | ||
} | ||
} | ||
], | ||
"known_failures": [ | ||
|
||
] | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,21 @@ | ||
{ | ||
"required_lines": [ | ||
{ | ||
"values": [ | ||
"Query Text: 'select version()'" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
"(?-mix:PostgreSQL \\d+.\\d+)" | ||
], | ||
"options": { | ||
} | ||
} | ||
], | ||
"known_failures": [ | ||
|
||
] | ||
} |
Oops, something went wrong.