Skip to content

Commit e429d4c

Browse files
author
Tod Beardsley
committed
Add reference and description for PTH on Postgres
Dave and William did most of the work already over on PR rapid7#4871, this just points it out in the module.
1 parent 0c87e28 commit e429d4c

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

modules/auxiliary/scanner/postgres/postgres_login.rb

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,14 +21,16 @@ def initialize(info = {})
2121
'Description' => %q{
2222
This module attempts to authenticate against a PostgreSQL
2323
instance using username and password combinations indicated
24-
by the USER_FILE, PASS_FILE, and USERPASS_FILE options.
24+
by the USER_FILE, PASS_FILE, and USERPASS_FILE options. Note that
25+
passwords may be either plaintext or MD5 formatted hashes.
2526
},
2627
'Author' => [ 'todb' ],
2728
'License' => MSF_LICENSE,
2829
'References' =>
2930
[
3031
[ 'URL', 'http://www.postgresql.org' ],
31-
[ 'CVE', '1999-0502'] # Weak password
32+
[ 'CVE', '1999-0502'], # Weak password
33+
[ 'URL', 'https://hashcat.net/forum/archive/index.php?thread-4148.html' ] # Pass the Hash
3234
]
3335
))
3436

0 commit comments

Comments
 (0)