metasploit-framework
https://github.com/rapid7/metasploit-framework
Ruby
Metasploit Framework
MetasploitModule#hash_password
The Javascript code sends all passwords in the form:
form.setAction('/index/login.cgi');
form.addParameter('Username', Username.value);
form.addParameter('Password', base64encode(SHA256(Password.value)));
Do the same base64 encoding and SHA-256 hashing here.Edit
git clone [email protected]:rapid7/metasploit-framework.git
cd metasploit-framework
open modules/exploits/linux/http/huawei_hg532n_cmdinject.rb
Contribute
# Make a new branchgit checkout -b -your-name--update-docs-MetasploitModule-hash_password-for-pr
# Commit to gitgit add modules/exploits/linux/http/huawei_hg532n_cmdinject.rbgit commit -m "better docs for MetasploitModule#hash_password"
# Open pull requestgem install hub # on a mac you can `brew install hub`
hub fork
git push <your name> -your-name--update-docs-MetasploitModule-hash_password-for-pr
hub pull-request
# Celebrate!