Allow new password to be specified as an option

Author: jhart-r7

modules/auxiliary/gather/bmc_trackit_passwd_reset.rb

@@ -35,6 +35,7 @@ def initialize(info = {})
       [
         OptString.new('TARGETURI', [true, 'The path to BMC TrackIt!', '/']),
         OptString.new('LOCALUSER', [true, 'The local user to change password for', 'Administrator']),
+        OptString.new('LOCALPASS', [false, 'The password to set for the local user (blank for random)', '']),
         OptString.new('DOMAIN', [false, 'The domain of the user. By default the local user\'s computer name will be autodetected', ''])
       ], self.class)
   end
@@ -142,7 +143,13 @@ def run_host(ip)
     end
 
     vprint_status("#{peer}: changing password for #{full_user}")
-    password = Rex::Text.rand_text_alpha(10) + "!1"
+
+    if datastore['LOCALPASS'].blank?
+      password = Rex::Text.rand_text_alpha(10) + "!1"
+    else
+      password = datastore['LOCALPASS']
+    end
+
     res = send_request_cgi(
       'uri' => normalize_uri(target_uri.path, 'PasswordReset', 'Application', 'ResetPassword'),
       'method' => 'POST',