Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request - update metasploit::credential::core to support target service metadata #166

Open
adfoster-r7 opened this issue Nov 9, 2022 · 0 comments

Comments

@adfoster-r7
Copy link
Contributor

Request:

Update metasploit::credential::core to contain references to services where the credential can be used against.

I think this metadata is different to metasploit::credential::login - which verifies whether the creds works or not, versus this feature request of allowing cores to differentiate between where creds came from and where they could be used against (verified or not)

Context:

The requirement originally came when adding support for Kerberos tickets #165 - which allows you to authenticate with kerberos, and receive a ticket that can be used against a different target system.

This scenario also comes up when running post modules against targets, i.e.:

  • a .env file containing database credentials that exist on a different service to the origin that the creds were found
  • Finding ssh creds on a compromised host that should work against known targets, but they haven't been verified
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant