We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents c75f48b + d70d2c4 commit 6ecaabcCopy full SHA for 6ecaabc
modules/post/windows/gather/credentials/spark_im.rb
@@ -52,7 +52,7 @@ def decrypt(hash)
52
password = cipher.update encrypted
53
password << cipher.final
54
55
- password = password.encode('UTF-8')
+ password = ::Rex::Text.to_utf8(password)
56
57
credentials = password.split("\u0001")
58
print_good("Decrypted Username #{credentials[0]} Password: #{credentials[1]}")
@@ -101,7 +101,8 @@ def run
101
end
102
103
# store the hash close the file
104
- hash = password[1].split("password").join.chomp
+ password = password.delete_if {|e| e !~ /password.+=.+=\r/}
105
+ hash = password[0].split("password").join.chomp
106
print_status("Spark password hash: #{hash}") if datastore['VERBOSE']
107
config.close
108
0 commit comments