Updates Postgres hashdump module to now work with newer versions of Postgres

[cgranleese-r7]

This PR updates the modules/auxiliary/scanner/postgres/postgres_hashdump.rb module to now work with newer versions of Postgres.

The code changes allow for backwards compatibility, it checks is the password contains md5, if so it will set the :private_type to what the module originally set it to. Otherwise it will set the :private_type to :nonreplayable_hash.

Result when md5

=> {:complete=>
  #<Msf::Db::PostgresPR::Connection::Result:0x00007fbff4be5738
   @cmd_tag="SELECT 1",
   @fields=
    [#<struct Msf::Db::PostgresPR::RowDescription::FieldInfo name="usename", oid=11658, attr_nr=1, type_oid=19, typlen=64, atttypmod=-1, formatcode=0>,
     #<struct Msf::Db::PostgresPR::RowDescription::FieldInfo name="passwd", oid=11658, attr_nr=7, type_oid=25, typlen=-1, atttypmod=-1, formatcode=0>],
   @rows=[["postgres", "md532e12f215ba27cb750c9e093ce4b5127"]]>}

Result when SCRAM-SHA

=> {:complete=>
  #<Msf::Db::PostgresPR::Connection::Result:0x00007fbfe21b0b58
   @cmd_tag="SELECT 1",
   @fields=
    [#<struct Msf::Db::PostgresPR::RowDescription::FieldInfo name="usename", oid=12005, attr_nr=1, type_oid=19, typlen=64, atttypmod=-1, formatcode=0>,
     #<struct Msf::Db::PostgresPR::RowDescription::FieldInfo name="passwd", oid=12005, attr_nr=7, type_oid=25, typlen=-1, atttypmod=-1, formatcode=0>],
   @rows=[["postgres", "SCRAM-SHA-256$4096:98tzQSwW0EZx1b8hSpPj6A==$xcbEuyt7zXYRj5MvdcTwzWYfBkKuXd+7Po/7J1/BcKE=:udUcLosdUtGuV4d4TNqRg3ID7hdBxh6OIakBGXawJcM="]]>}

Before

Raised the following error:

[*] Error: 127.0.0.1: ActiveRecord::RecordInvalid Validation failed: Data is not in Postgres MD5 Hash format

After

msf6 auxiliary(scanner/postgres/postgres_hashdump) > run session=-1

[*] 127.0.0.1:5432 Postgres - querying with 'SELECT usename, passwd FROM pg_shadow'
[+] Query appears to have run successfully
[+] Postgres Server Hashes
======================

 Username  Hash
 --------  ----
 postgres  SCRAM-SHA-256$4096:98tzQSwW0EZx1b8hSpPj6A==$xcbEuyt7zXYRj5MvdcTwzWYfBkKuXd+7Po/7J1/BcKE=:udUcLosdUtGuV4d4TNqRg3ID7hdBxh6OIakBGXawJcM=

[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed

Verification

• Start msfconsole
• Run use postgres_login
• Run use scanner/postgres/postgres_hashdump
• Verify that the module no longer complains about hashing formats
• Verify this works with both the database connected, as well as not connected

[adfoster-r7]

Release Notes

Updates Postgres hashdump module to now work with newer versions of Postgres