metasploit-framework

https://github.com/rapid7/metasploit-framework

Ruby

Metasploit Framework

MetasploitModule#hash_password

The Javascript code sends all passwords in the form:
     form.setAction('/index/login.cgi');
     form.addParameter('Username', Username.value);
     form.addParameter('Password', base64encode(SHA256(Password.value)));
Do the same base64 encoding and SHA-256 hashing here.

Source | Google | Stack overflow

Edit

git clone [email protected]:rapid7/metasploit-framework.git

cd metasploit-framework

open modules/exploits/linux/http/huawei_hg532n_cmdinject.rb

Contribute

# Make a new branch

git checkout -b -your-name--update-docs-MetasploitModule-hash_password-for-pr


# Commit to git

git add modules/exploits/linux/http/huawei_hg532n_cmdinject.rbgit commit -m "better docs for MetasploitModule#hash_password"


# Open pull request

gem install hub # on a mac you can `brew install hub`

hub fork

git push <your name> -your-name--update-docs-MetasploitModule-hash_password-for-pr

hub pull-request


# Celebrate!