Skip to content

Commit a3b0f2e

Browse files
committed
Land rapid7#5175, Update mcafee_vse_hashdump description
2 parents 9a49538 + e3ce4eb commit a3b0f2e

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

modules/post/windows/gather/credentials/mcafee_vse_hashdump.rb

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,8 +20,11 @@ def initialize(info = {})
2020
info,
2121
'Name' => 'McAfee Virus Scan Enterprise Password Hashes Dump',
2222
'Description' => %q(
23-
This module extracts the password hash from McAfee Virus Scan
24-
Enterprise (VSE) used to lock down the user interface.
23+
This module extracts the password hash from McAfee Virus Scan Enterprise (VSE)
24+
used to lock down the user interface. Hashcat supports cracking this type of
25+
hash using hash type sha1($salt.unicode($pass)) (-m 140) and a hex salt
26+
(--hex-salt) of 01000f000d003300 (unicode "\x01\x0f\x0d\x33"). A dynamic
27+
format is available for John the Ripper at the referenced URL.
2528
),
2629
'License' => MSF_LICENSE,
2730
'Author' => [

0 commit comments

Comments
 (0)