Postgres Password Hashdump | Metasploit Exploit Database (DB)

Postgres Password Hashdump

This module extracts the usernames and encrypted password hashes from a Postgres server and stores them for later cracking.

Search Other Modules


Rank

  • Normal

Authors

  • TheLightCosine < thelightcosine [at] metasploit.com >

Development


Similar Modules


Usage Information

$ msfconsole

                ##                          ###           ##    ##
 ##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use auxiliary/scanner/postgres/postgres_hashdump
msf auxiliary(postgres_hashdump) > set RHOSTS [TARGET HOST RANGE]
msf auxiliary(postgres_hashdump) > run


Module Options

DATABASE The database to authenticate against (default: postgres)
PASSWORD The password for the specified username. Leave blank for a random password. (default: )
RHOSTS The target address range or CIDR identifier
RPORT The target port (default: 5432)
THREADS The number of concurrent threads (default: 1)
USERNAME The username to authenticate as (default: postgres)
ShowProgress Display progress messages during a scan
ShowProgressPercent The interval in percent that progress should be shown
WORKSPACE Specify the workspace for this module