Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Group Policy Preferences (creds) support to db_import #10507

Merged
merged 5 commits into from
Aug 28, 2018
Merged

Add Group Policy Preferences (creds) support to db_import #10507

merged 5 commits into from
Aug 28, 2018

Commits on Aug 22, 2018

  1. Add Group Policy Preferences support to db_import 

    And take the Jaden Smith approach, as @busterb quipped to me. :)

This one's a little weird, since you normally import scans into
Metasploit, but now that creds are first-class in the database, it makes
more sense to be able to import them.

Currently, your alternatives are post/windows/gather/credentials/gpp,
which requires a session, and auxiliary/scanner/smb/smb_enum_gpp, which
requires a network scan.
    @wvu
    wvu committed Aug 22, 2018
    Configuration menu
    Copy the full SHA
    b1c633f View commit details
    Browse the repository at this point in the history

  2. Store parsed GPP data as a note 

    And refactor slightly.
    @wvu
    wvu committed Aug 22, 2018
    Configuration menu
    Copy the full SHA
    6fa0495 View commit details
    Browse the repository at this point in the history

  3. Revert report_note, since it added nothing 

    A bit of misunderstanding. We're in agreement that loot was enough.
    @wvu
    wvu committed Aug 22, 2018
    Configuration menu
    Copy the full SHA
    1e4eb0e View commit details
    Browse the repository at this point in the history

  4. Clarify what is being imported currently 

    Since the parser is focused on creds.
    @wvu
    wvu committed Aug 22, 2018
    Configuration menu
    Copy the full SHA
    2891255 View commit details
    Browse the repository at this point in the history

  5. Add additional root tags for GPP XML 

    Finally ran through all the samples and cross-referenced with MS14-025.

https://msdn.microsoft.com/en-us/library/cc232650.aspx
https://support.microsoft.com/en-us/help/2962486/ms14-025-vulnerability-in-group-policy-preferences-could-allow-elevati
    @wvu
    wvu committed Aug 22, 2018
    Configuration menu
    Copy the full SHA
    9b3e0d8 View commit details
    Browse the repository at this point in the history