@@ -15,10 +15,10 @@ def initialize(info={})
15
15
super ( update_info ( info ,
16
16
'Name' => 'Multi Manage Dbvis Add Db Admin' ,
17
17
'Description' => %q{
18
- Dbvisulaizer offers a command line functionality to execute SQL pre-configured databases (With GUI).
19
- The remote database can be accessed from the command line without the need to authenticate.
20
- The module abuses this functionality to create an administrator in the database if DB user rights allow it.
21
- Supported databases : mysql (More supported soon) .
18
+ Dbvisulaizer offers a command line functionality to execute SQL pre-configured databases
19
+ (With GUI). The remote database can be accessed from the command line without the need
20
+ to authenticate, which can be abused to create an administrator in the database with the
21
+ proper database permissions. Note: This module currently only supports MySQL .
22
22
} ,
23
23
'License' => MSF_LICENSE ,
24
24
'Author' => [ 'David Bloom' ] , # Twitter: @philophobia78
@@ -29,11 +29,12 @@ def initialize(info={})
29
29
'Platform' => %w{ linux win } ,
30
30
'SessionTypes' => [ 'meterpreter' ]
31
31
) )
32
+
32
33
register_options (
33
34
[
34
- OptString . new ( 'DBALIAS' , [ true , 'Use dbvis_enum module to find out databases and aliases' , 'localhost' ] ) ,
35
- OptString . new ( 'DBUSERNAME' , [ true , 'The user you want to add to the remote database' , 'msf' ] ) ,
36
- OptString . new ( 'DBPASSWORD' , [ true , 'User password to set' , 'msfRocks' ] )
35
+ OptString . new ( 'DBALIAS' , [ true , 'Use dbvis_enum module to find out databases and aliases' , 'localhost' ] ) ,
36
+ OptString . new ( 'DBUSERNAME' , [ true , 'The user you want to add to the remote database' , 'msf' ] ) ,
37
+ OptString . new ( 'DBPASSWORD' , [ true , 'User password to set' , 'msfRocks' ] )
37
38
] , self . class )
38
39
39
40
end
0 commit comments