You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Update metasploit::credential::core to contain references to services where the credential can be used against.
I think this metadata is different to metasploit::credential::login - which verifies whether the creds works or not, versus this feature request of allowing cores to differentiate between where creds came from and where they could be used against (verified or not)
Context:
The requirement originally came when adding support for Kerberos tickets #165 - which allows you to authenticate with kerberos, and receive a ticket that can be used against a different target system.
This scenario also comes up when running post modules against targets, i.e.:
a .env file containing database credentials that exist on a different service to the origin that the creds were found
Finding ssh creds on a compromised host that should work against known targets, but they haven't been verified
The text was updated successfully, but these errors were encountered:
Request:
Update metasploit::credential::core to contain references to services where the credential can be used against.
I think this metadata is different to metasploit::credential::login - which verifies whether the creds works or not, versus this feature request of allowing cores to differentiate between where creds came from and where they could be used against (verified or not)
Context:
The requirement originally came when adding support for Kerberos tickets #165 - which allows you to authenticate with kerberos, and receive a ticket that can be used against a different target system.
This scenario also comes up when running post modules against targets, i.e.:
.env
file containing database credentials that exist on a different service to the origin that the creds were foundssh
creds on a compromised host that should work against known targets, but they haven't been verifiedThe text was updated successfully, but these errors were encountered: