Feature #1975
pull hashes / passwords from mssql, mysql, postgres and oracle
| Status: | Closed | Start date: | 05/17/2010 | |
|---|---|---|---|---|
| Priority: | Normal | Due date: | ||
| Assignee: | sinn3r . | % Done: | 100% |
|
| Category: | - | |||
| Target version: | - | |||
| Resolution: | How To Use: | |||
| Release Note: |
Description
There should be an easy method to extract the hashes/passwords from the most popular databases.
Related issues
History
Updated by James Lee over 1 year ago
There's a good list of how to get hashes out of various DBMSs at http://pentestmonkey.net/cheat-sheets/
Updated by Chris Gates over 1 year ago
given an account with appropriate permissions, carlos' oraenum module will get the password hashes for oracle. you can also just run the sql query with the oracle_sql module.
Updated by Tod Beardsley over 1 year ago
- Assignee set to Tod Beardsley
Updated by Tod Beardsley over 1 year ago
- Target version changed from Metasploit 3.5.0 to Metasploit 3.5.1
Updated by James Lee about 1 year ago
- Target version changed from Metasploit 3.5.1 to 54
Feature that didn't make it into 3.5.1; pushing.
Updated by James Lee about 1 year ago
- Target version changed from 54 to Metasploit 3.6
Updated by sinn3r . 4 months ago
- Status changed from New to Assigned
- Assignee changed from Tod Beardsley to sinn3r .
- Target version deleted (
Metasploit 3.6) - 10 set to 0
The following db hashdump modules have already been committed:
MySQL: r13567
MS SQ: r13490
Other modules (Oracle and Postgres) that haven't been committed:
https://dev.metasploit.com/redmine/issues/5404
Updated by sinn3r . 4 months ago
- Status changed from Assigned to Resolved
- % Done changed from 0 to 100
Oracle and Postgres hashdump modules added:
Postgres: r13854
Oracle: r13854
Thx tod!
Updated by Jonathan Cran about 1 month ago
- Status changed from Resolved to Closed