Beispiel #1
0
    def run(self, software_name=None):
        if self.save_hives():
            isVistaOrHigher = False
            if float(get_os_version()) >= 6.0:
                isVistaOrHigher = True

            mscache = dump_file_hashes(constant.hives['system'],
                                       constant.hives['security'],
                                       isVistaOrHigher)
            if mscache:
                pwdFound = ['__MSCache__', mscache]
                return pwdFound
Beispiel #2
0
    def run(self, software_name=None):
        pwdFound = []

        path = build_path('Hives')
        if path:
            system = os.path.join(path, 'SYSTEM')
            security = os.path.join(path, 'SECURITY')

            if os.path.exists(system) and os.path.exists(security):
                if os.path.isfile(system) and os.path.isfile(security):
                    hashes = dump_file_hashes(system, security, True)
                    if hashes:
                        pwdFound = ['__MSCache__', hashes]

        return pwdFound
Beispiel #3
0
	def run(self, software_name=None):
		# save system hives
		if not self.save_hives():
			print_debug('ERROR', 'Failed to save system hives')
			return 

		isVistaOrHigher = True
		if float(get_os_version()) >= 6.0:
			isVistaOrHigher = True
		else:
			isVistaOrHigher = False
		
		password = dump_file_hashes(constant.hives['system'], constant.hives['security'], isVistaOrHigher)

		# remove hives files
		self.delete_existing_system_hives()

		pwdFound = ['__MSCache__', password]
		return pwdFound
    def run(self, software_name=None):
        # save system hives
        if not self.save_hives():
            print_debug('ERROR', 'Failed to save system hives')
            return

        isVistaOrHigher = True
        if float(get_os_version()) >= 6.0:
            isVistaOrHigher = True
        else:
            isVistaOrHigher = False

        password = dump_file_hashes(constant.hives['system'],
                                    constant.hives['security'],
                                    isVistaOrHigher)

        # remove hives files
        self.delete_existing_system_hives()

        pwdFound = ['__MSCache__', password]
        return pwdFound