Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Creds export to jtr format #11615

Merged
merged 5 commits into from Mar 23, 2019
Merged

Creds export to jtr format #11615

merged 5 commits into from Mar 23, 2019

Conversation

@h00die
Copy link
Contributor

h00die commented Mar 23, 2019

Fixes #11575

This allow creds -o to now export to John the Ripper format if a '.jtr' extension is put on the output file name. Will allow for additional overloading if say hashcat functionality is ever added

I thought this was more graceful than changing to a creds export type syntax.

msf5 > creds -o /tmp/csv
[*] Wrote creds to /tmp/csv
msf5 > head /tmp/csv
[*] exec: head /tmp/csv

host,origin,service,public,private,realm,private_type,JtR Format
"","","","des_password","password","","Password",""
"","","","des_password","rEK1ecacw.7.c","","Nonreplayable hash","des"
"","","","md5_password","password","","Password",""
"","","","md5_password","$1$O3JMY.Tw$AdLnLjQ/5jXF9.MTp3gHv/","","Nonreplayable hash","md5"
"","","","bsdi_password","password","","Password",""
"","","","bsdi_password","_J9..K0AyUubDrfOgO4s","","Nonreplayable hash","bsdi"
"","","","sha256_password","password","","Password",""
"","","","sha256_password","$5$MnfsQ4iN$ZMTppKN16y/tIsUYs/obHlhdP.Os80yXhTurpBMUbA5","","Nonreplayable hash","sha256,crypt"
"","","","sha512_password","password","","Password",""
msf5 > creds -o /tmp/hashes.jtr
[*] Wrote creds to /tmp/hashes.jtr
msf5 > head /tmp/hashes.jtr
[*] exec: head /tmp/hashes.jtr

des_password:rEK1ecacw.7.c:::::4:
md5_password:$1$O3JMY.Tw$AdLnLjQ/5jXF9.MTp3gHv/:::::5:
bsdi_password:_J9..K0AyUubDrfOgO4s:::::6:
sha256_password:$5$MnfsQ4iN$ZMTppKN16y/tIsUYs/obHlhdP.Os80yXhTurpBMUbA5:::::7:
sha512_password:$6$zWwwXKNj$gLAOoZCjcr8p/.VgV/FkGC3NX7BsXys3KHYePfuIGMNjY83dVxugPYlxVg/evpcVEJLT/rSwZcDMlVVf/bhf.1:::::8:
blowfish_password:$2a$05$bvIG6Nmid91Mu9RcmmWZfO5HJIMCT8riNW0hEp8f6/FuA2/mHZFpe:::::9:
mssql05_toto:0x01004086CEB6BF932BC4151A1AF1F13CD17301D70816A8886908:12:
mssql_foo:0x0100A607BA7C54A24D17B565C59F1743776A10250F581D482DA8B6D6261460D3F53B279CC6913CE747006A2E3254:13:
mssql12_Password1!:0x0200F733058A07892C5CACE899768F89965F6BD1DED7955FE89E1C9A10E27849B0B213B5CE92CC9347ECCB34C3EFADAF2FD99BFFECD8D9150DD6AACB5D409A9D2652A4E0AF16:14:
mysql_probe:445ff82636a7ba59:15:
msf5 > 
@busterb busterb self-assigned this Mar 23, 2019
@busterb

This comment has been minimized.

Copy link
Member

busterb commented Mar 23, 2019

Maybe of interest in this area, there is now support for writing 'command docs' in msfconsole as well, #11498.

Writing format by extension seems alright, and especially the functionality is welcome.

@busterb busterb merged commit 82a7913 into rapid7:master Mar 23, 2019
3 checks passed
3 checks passed
Metasploit Automation - Sanity Test Execution Successfully completed all tests.
Details
Metasploit Automation - Test Execution Successfully completed all tests.
Details
continuous-integration/travis-ci/pr The Travis CI build passed
Details
busterb added a commit that referenced this pull request Mar 23, 2019
@busterb

This comment has been minimized.

Copy link
Member

busterb commented Mar 23, 2019

Release Notes

This allows exporting credentials in a John the Ripper-compatible format by specifying the .jtr extension in the filename.

@busterb busterb added the msf5 label Mar 23, 2019
@h00die h00die deleted the h00die:jtrout branch Nov 9, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked issues

Successfully merging this pull request may close these issues.

None yet

2 participants
You can’t perform that action at this time.