pass-station 1.2.0 → 1.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: de78073153cfa19fcf83469e7071697028d293cda138bdbe8750f83accd1ab47
-  data.tar.gz: 1a9f43bae03edfe30496fd7a212ff3b40795d6abf3921b8eccd09b1d08c29056
+  metadata.gz: e5b31b81d976f3ffc9c63384b5bdcf829af5fca16bf28a955f5610c9b827125b
+  data.tar.gz: a498b1e9f6708cc4525135edadca428b5021c0832b38e6f8ae66ca873efb3157
 SHA512:
-  metadata.gz: acf4565ed065a7276f56d17fb35fac8db4f16564a69e787b634a040f5eebbe5b04af65fc512ab243f274dbc38bf3ad05137c6b1d4c981fbace0c7cc2dc182397
-  data.tar.gz: 287f4d46535d6d912595152ecfcba98e384f1a22310e372ce3b70ec09354c1ce43749049629658adefe6ac5a0945ab0a48982eb0a0ae21c9d7fcdf925d1f1448
+  metadata.gz: 46e3622f6afecdcf0125438a13ef399a11847aa08a3b45e1b4f1d98353926336b0bac82f5b76cd67a3f79265de927a569808f903e8ed68d19c4c9f202ab68d86
+  data.tar.gz: 6551999d9d796f61c9941fe8a120d53b0fcf4e6a59e5bb838c205f1fdc703871bcfaf53ccd9854072c408a7158322a2fed67fb8886d61d82d87d8028c9b970c8

data/LICENSE

@@ -1,5 +1,6 @@
 MIT License
 
+Copyright (c) 2021 Alexandre ZANNI
 Copyright (c) 2021 Alexandre ZANNI at SEC-IT
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -18,4 +19,4 @@ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+SOFTWARE.

data/bin/pass-station

@@ -11,11 +11,11 @@ require 'docopt'
 require 'paint'
 
 doc = <<~DOCOPT
-  Pass Station
+  Pass Station v#{PassStation::VERSION}
 
   Usage:
-    pass-station list [--sort <col> --output <format>] [--debug]
-    pass-station search <term> [--field <col> --sort <col> --sensitive --output <format>] [--no-color --debug]
+    pass-station list [--sort <col> --output <format>] [--source <id> --debug]
+    pass-station search <term> [--field <col> --sort <col> --sensitive --output <format>] [--source <id> --no-color --debug]
     pass-station update ([--force] <path> | --check) [--debug]
     pass-station -h | --help
     pass-station --version
@@ -24,21 +24,22 @@ doc = <<~DOCOPT
 
   Output options: can be used with list and search commands
     -o <format>, --output <format>  Output format: JSON, CSV, YAML, table, pretty-table [default: pretty-table]
-    -s <col>, --sort <col>          Sort by column: productvendor | username | password [default: productvendor]
+    -s <col>, --sort <col>          Sort by column (see documentation, columns depends on the database source)
 
   Search options:
-    --field <col>   Search in column: productvendor | username | password | all [default: productvendor]
-    --sensitive     Sarch is case sensitive (case insensitive by default)
+    --field <col>   Search in column: column name (see documentation, columns depends on the database source) or all
+    --sensitive     Search is case sensitive (case insensitive by default)
 
   Update options: update the password database (replace Pass Station DB with upstream DB, use with care)
     -f, --force   Bypass hash checking
     -c, --check   Check for possible update
 
   Other options:
-    --no-color  Disable colorized output
-    --debug     Display arguments
-    -h, --help  Show this screen
-    --version   Show version
+    --source <id> Credentials source database: 1 (Default Credentials Cheat Sheet), 2 (Many passwords) [default: 1]
+    --no-color    Disable colorized output
+    --debug       Display arguments
+    -h, --help    Show this screen
+    --version     Show version
 DOCOPT
 
 begin
@@ -47,14 +48,17 @@ begin
   pp args if args['--debug']
   if args['update']
     if args['<path>']
-      opts = {}
-      opts[:sha256] = args['--force'] ? nil : PassStation::DB::UPSTREAM_DATABASE[:HASH]
-      puts '[+] Updating database'
-      path = PassStation::DB.download_upstream(args['<path>'], opts)
-      if path
-        puts "[+] Database updated #{path}"
-      else
-        puts '[+] Database already up to date'
+      PassStation::DB::UPSTREAM_DATABASE[:MAPPING].each do |k, v|
+        opts = {}
+        opts[:sha256] = args['--force'] ? nil : PassStation::DB::UPSTREAM_DATABASE[v][:HASH]
+        puts "[+] Updating database: #{v}"
+        opts[:source_db] = k
+        path = PassStation::DB.download_upstream(args['<path>'], opts)
+        if path
+          puts "[+] Database updated: #{v} (#{path})"
+        else
+          puts "[+] Database #{v} already up to date"
+        end
       end
     elsif args['--check']
       if PassStation::DB.check_for_update
@@ -64,14 +68,18 @@ begin
       end
     end
   elsif args['list']
-    ps = PassStation::DB.new
-    ps.parse(args['--sort'].to_sym)
+    db = args['--source'].nil? ? nil : args['--source'].to_i
+    ps = PassStation::DB.new(db)
+    args['--sort'].nil? ? ps.parse : ps.parse(args['--sort'].to_sym)
     puts ps.output_list(args['--output'])
   elsif args['search']
-    ps = PassStation::DB.new
-    ps.parse(args['--sort'].to_sym)
-    ps.search(args['<term>'], args['--field'].to_sym, sensitive: args['--sensitive'])
+    db = args['--source'].nil? ? nil : args['--source'].to_i
+    ps = PassStation::DB.new(db)
+    args['--sort'].nil? ? ps.parse : ps.parse(args['--sort'].to_sym)
+    field = args['--field'].nil? ? nil : args['--field'].to_sym
+    ps.search(args['<term>'], field, sensitive: args['--sensitive'])
     output = ps.output_search(args['--output'])
+    puts '[-] No result' if output.empty?
     puts ps.highlight_found(args['<term>'], output, args['--sensitive'])
   end
 rescue Docopt::Exit => e

data/data/DefaultCreds-Cheat-Sheet.csv

@@ -68,6 +68,9 @@ Addon,admin,admin
 AddPac Technology,root,router
 ADIC,admin,password
 ADIC,admin,secure
+ADIP,adip,admin
+ADIP,adip,consul
+ADIP,adip,insta
 Adobe,admin,admin
 Adobe,anonymous,anonymous
 Adobe,aparker@geometrixx.info,aparker
@@ -533,6 +536,7 @@ CA APM Team Center (web),Guest,Guest
 Cable And Wireless,admin,1234
 Cabletron,<blank>,<blank>
 Cabletron,netman,<blank>
+caldera,admin,admin
 CA NetQoS (web),nqadmin,nq
 CA NetQoS (web),nquser,nq
 Canon,<blank>,0
@@ -552,6 +556,7 @@ CCH (mssql),sa,PracticeUser1
 Celerity,mediator,mediator
 Celerity,root,Mua'dib
 Cellit,cellit,cellit
+Centreon WebUI,admin,centreon
 Ceragon Networks,root,tooridu
 CGI World,<blank>,protection
 Chase Research,<blank>,iolan
@@ -694,6 +699,8 @@ cuproplus,<blank>,<blank>
 cyberguard,cgadmin,cgadmin
 Cyberguard,cgadmin,cgadmin
 CyberMax,<blank>,Congress
+CyberPower,cyber,cyber
+CyberPower,device,cyber
 Cyclades,root,<blank>
 Cyclades,root,tslinux
 Cyclades,super,surt
@@ -1022,6 +1029,7 @@ Gericom,Administrator,<blank>
 "GE Security,Inc.",install,install
 giga,Administrator,admin
 Gigabyte,admin,admin
+GigaFiber,admin,jiocentrum
 glftpd,glftpd,glftpd
 glFtpD,glftpd,glftpd
 Globespan Virata,DSL,DSL
@@ -1421,6 +1429,7 @@ Jenkins (web),<blank>,<blank>
 Jetform,Jetform,<blank>
 JetWay,<blank>,spooml
 JioFi,administrator,administrator
+JioFiber,admin,jiocentrum
 Johnson Controls,johnson,control
 Joss Technology,<blank>,57gbzb
 Joss Technology,<blank>,technolgi
@@ -1494,8 +1503,6 @@ Lanier,supervisor,<blank>
 LANSA,admin,admin
 LANSA,dev,dev
 LANSA,WEBADM,password
-Lantronics,<blank>,access
-Lantronics,<blank>,system
 Lantronix,<blank>,access
 Lantronix,<blank>,admin
 Lantronix,<blank>,<blank>
@@ -1507,6 +1514,7 @@ Lasa AIMS (mssql),ADMIN,AIMS
 Lasa AIMS (mssql),FB,AIMS
 latis network,<blank>,<blank>
 LAXO,admin,admin
+ldap account manager(lam),lam,lam
 Leading Edge,<blank>,MASTER
 Lenel,admin,admin
 Lenel OnGuard (mssql),LENEL,MULTIMEDIA
@@ -1725,9 +1733,6 @@ Netcomm,user,password
 Netcordia,admin,admin
 netcore (ssh),admin,admin
 netcore (ssh),guest,guest
-netgar (ssh),admin,1234
-netgar (ssh),admin,admin
-netgar (ssh),admin,<blank>
 Netgear,admin,1234
 Netgear,admin,admin
 Netgear,admin,<blank>
@@ -1749,6 +1754,7 @@ Netgear,Gearguy,Geardog
 Netgear,super,5777364
 Netgear,superman,21241036
 NetGenesis,naadmin,naadmin
+NETIO 4All PowerPDU,admin,admin
 Netopia,admin,<blank>
 Netopia,admin,noway
 Netopia,<blank>,<blank>
@@ -1921,6 +1927,7 @@ Nullsoft,admin,changeme
 Nurit,$system,<blank>
 Nuxeo Server (general),Administrator,Administrator
 OCE,<blank>,0 and the number of OCE printer
+OCS Inventory,admin,admin
 Odoo (general),admin,admin
 Odoo (general),demo,demo
 ODS,ods,ods
@@ -1958,6 +1965,7 @@ OpenMarket,user_expert,demo
 OpenMarket,user_marketer,demo
 OpenMarket,user_pricer,demo
 OpenMarket,user_publisher,demo
+OpenNetAdmin,admin,admin
 OPEN Networks,root,0P3N
 Openwave,cac_admin,cacadmin
 Openwave,sys,uplink
@@ -2201,7 +2209,6 @@ Oracle,WWWUSER,WWWUSER
 Oracle,WWW,WWW
 Oracle,XPRT,XPRT
 Orange,admin,admin
-orange livebox4  (web),admin,(blank)
 orange livebox4  (web),admin,<blank>
 Orange,root,1234
 Osicom,debug,d.e.b.u.g
@@ -2225,6 +2232,7 @@ ovislink,root,<blank>
 Pacific Micro Data,pmd,<blank>
 Packard Bell,<blank>,bell9
 Packeteer,<blank>,touchpwd=
+Palo Alto GlobalProtect Gateway,admin,admin
 Panasonic,admin,1234
 Panasonic,admin,12345
 Panasonic,<blank>,1234
@@ -2330,6 +2338,7 @@ publicprivate (snmp),<blank>,private
 publicprivate (snmp),<blank>,public
 Pyramid Computer,admin,admin
 Pyramid Computer,admin,gnumpf
+qBittorrent Web UI,admin,adminadmin
 QDI,<blank>,lesarotl
 QDI,<blank>,password
 QDI,<blank>,QDI
@@ -2344,6 +2353,7 @@ Questra Corporation,guest,guest
 Questra Corporation,questra,questra
 Quest Software,TOAD,TOAD
 Quintum Technologies Inc.,admin,admin
+RabbitMQ,guest,guest
 Radio Shack,<blank>,744
 Radio Shack,[MULTIPLE],744
 Radvision,admin,<blank>
@@ -2386,7 +2396,6 @@ Research,<blank>,Col2ogro2
 Research Machines,manager,changeme
 Resumix,root,resumix
 Ricoh,admin,<blank>
-Ricoh,admin,no password
 Ricoh,admin,password
 Ricoh,<blank>,password
 Ricoh,<blank>,sysadm
@@ -2738,7 +2747,6 @@ SolarWinds,whd,whd
 Solution 6,aaa,often blank
 Solwise,root,same as webui pwd
 SonarQube (web),admin,admin
-Sonicwall,admin,password
 SonicWALL,admin,password
 Sonic-X,root,admin
 Sonus,admin,Sonus12345
@@ -3114,6 +3122,7 @@ vacron (web),admin,admin
 Various,root,admin
 VASCO,admin,<blank>
 VBrick Systems,admin,admin
+vectr,admin,11_ThisIsTheFirstPassword_11
 Veramark,admin,password
 Verifone,<blank>,166816
 Verilink,<blank>,<blank>