pass-station 1.2.2 → 1.2.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7ec0b0404526c7b3184c441897083e2024404e7f22b4ac2851292d81f69cda25
-  data.tar.gz: b27776bfc51827851cc6ef60ce4c378f0fa9ec923f104109abb66733df5ba5d3
+  metadata.gz: ae09b43b764e460c230fd29723ef4293c7624808a7d4cd7511789b3a0a087a0c
+  data.tar.gz: 02b004b539741d6d678579b480cfedf314c7ede04886bf956c111ba1ab69a21c
 SHA512:
-  metadata.gz: 26891a1b483d324034656b3921dc2684938972ce18f6f39d7746f6aaa3f387bcff6fb4964a45160c87c98f6bdaaf26eb93f0ccc935f8573867cc4fa63f345bad
-  data.tar.gz: 6728d55a675019cd612162b1f5c10f142a0f14008429984681fa3c939422c8ebf0ebdab0afb08d85cb5e3678a2e2e4a743771b24a2645be24c591bf94b0f89f5
+  metadata.gz: ef336e447a6dbf9267f1aa3f249e6928b533b414833f925ca834fee7407369284e9ef94ad6c32347241af0e6dac31cae6ed6724a4dcdb3b83577574f99266a9b
+  data.tar.gz: a4d82db3a4db21bdbb29661a1ae4bbf44ad9586dd744548875d17ad528ff3ba4d4e7eb38cf1c9f294ae05af27ef1252c84f34d76d59c503619490642a35db704

data/LICENSE

@@ -1,5 +1,6 @@
 MIT License
 
+Copyright (c) 2021 Alexandre ZANNI
 Copyright (c) 2021 Alexandre ZANNI at SEC-IT
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -18,4 +19,4 @@ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+SOFTWARE.

data/bin/pass-station

@@ -11,11 +11,11 @@ require 'docopt'
 require 'paint'
 
 doc = <<~DOCOPT
-  Pass Station
+  Pass Station v#{PassStation::VERSION}
 
   Usage:
-    pass-station list [--sort <col> --output <format>] [--debug]
-    pass-station search <term> [--field <col> --sort <col> --sensitive --output <format>] [--no-color --debug]
+    pass-station list [--sort <col> --output <format>] [--source <id> --debug]
+    pass-station search <term> [--field <col> --sort <col> --sensitive --output <format>] [--source <id> --no-color --debug]
     pass-station update ([--force] <path> | --check) [--debug]
     pass-station -h | --help
     pass-station --version
@@ -24,10 +24,10 @@ doc = <<~DOCOPT
 
   Output options: can be used with list and search commands
     -o <format>, --output <format>  Output format: JSON, CSV, YAML, table, pretty-table [default: pretty-table]
-    -s <col>, --sort <col>          Sort by column: productvendor | username | password [default: productvendor]
+    -s <col>, --sort <col>          Sort by column (see documentation, columns depends on the database source)
 
   Search options:
-    --field <col>   Search in column: productvendor | username | password | all [default: productvendor]
+    --field <col>   Search in column: column name (see documentation, columns depends on the database source) or all
     --sensitive     Search is case sensitive (case insensitive by default)
 
   Update options: update the password database (replace Pass Station DB with upstream DB, use with care)
@@ -35,10 +35,11 @@ doc = <<~DOCOPT
     -c, --check   Check for possible update
 
   Other options:
-    --no-color  Disable colorized output
-    --debug     Display arguments
-    -h, --help  Show this screen
-    --version   Show version
+    --source <id> Credentials source database: 1 (Default Credentials Cheat Sheet), 2 (Many passwords) [default: 1]
+    --no-color    Disable colorized output
+    --debug       Display arguments
+    -h, --help    Show this screen
+    --version     Show version
 DOCOPT
 
 begin
@@ -47,14 +48,17 @@ begin
   pp args if args['--debug']
   if args['update']
     if args['<path>']
-      opts = {}
-      opts[:sha256] = args['--force'] ? nil : PassStation::DB::UPSTREAM_DATABASE[:HASH]
-      puts '[+] Updating database'
-      path = PassStation::DB.download_upstream(args['<path>'], opts)
-      if path
-        puts "[+] Database updated #{path}"
-      else
-        puts '[+] Database already up to date'
+      PassStation::DB::UPSTREAM_DATABASE[:MAPPING].each do |k, v|
+        opts = {}
+        opts[:sha256] = args['--force'] ? nil : PassStation::DB::UPSTREAM_DATABASE[v][:HASH]
+        puts "[+] Updating database: #{v}"
+        opts[:source_db] = k
+        path = PassStation::DB.download_upstream(args['<path>'], opts)
+        if path
+          puts "[+] Database updated: #{v} (#{path})"
+        else
+          puts "[+] Database #{v} already up to date"
+        end
       end
     elsif args['--check']
       if PassStation::DB.check_for_update
@@ -64,13 +68,16 @@ begin
       end
     end
   elsif args['list']
-    ps = PassStation::DB.new
-    ps.parse(args['--sort'].to_sym)
+    db = args['--source'].nil? ? nil : args['--source'].to_i
+    ps = PassStation::DB.new(db)
+    args['--sort'].nil? ? ps.parse : ps.parse(args['--sort'].to_sym)
     puts ps.output_list(args['--output'])
   elsif args['search']
-    ps = PassStation::DB.new
-    ps.parse(args['--sort'].to_sym)
-    ps.search(args['<term>'], args['--field'].to_sym, sensitive: args['--sensitive'])
+    db = args['--source'].nil? ? nil : args['--source'].to_i
+    ps = PassStation::DB.new(db)
+    args['--sort'].nil? ? ps.parse : ps.parse(args['--sort'].to_sym)
+    field = args['--field'].nil? ? nil : args['--field'].to_sym
+    ps.search(args['<term>'], field, sensitive: args['--sensitive'])
     output = ps.output_search(args['--output'])
     puts '[-] No result' if output.empty?
     puts ps.highlight_found(args['<term>'], output, args['--sensitive'])

data/data/DefaultCreds-Cheat-Sheet.csv

@@ -1503,8 +1503,6 @@ Lanier,supervisor,<blank>
 LANSA,admin,admin
 LANSA,dev,dev
 LANSA,WEBADM,password
-Lantronics,<blank>,access
-Lantronics,<blank>,system
 Lantronix,<blank>,access
 Lantronix,<blank>,admin
 Lantronix,<blank>,<blank>
@@ -1516,6 +1514,7 @@ Lasa AIMS (mssql),ADMIN,AIMS
 Lasa AIMS (mssql),FB,AIMS
 latis network,<blank>,<blank>
 LAXO,admin,admin
+ldap account manager(lam),lam,lam
 Leading Edge,<blank>,MASTER
 Lenel,admin,admin
 Lenel OnGuard (mssql),LENEL,MULTIMEDIA
@@ -1734,9 +1733,6 @@ Netcomm,user,password
 Netcordia,admin,admin
 netcore (ssh),admin,admin
 netcore (ssh),guest,guest
-netgar (ssh),admin,1234
-netgar (ssh),admin,admin
-netgar (ssh),admin,<blank>
 Netgear,admin,1234
 Netgear,admin,admin
 Netgear,admin,<blank>
@@ -1931,6 +1927,7 @@ Nullsoft,admin,changeme
 Nurit,$system,<blank>
 Nuxeo Server (general),Administrator,Administrator
 OCE,<blank>,0 and the number of OCE printer
+OCS Inventory,admin,admin
 Odoo (general),admin,admin
 Odoo (general),demo,demo
 ODS,ods,ods
@@ -2212,7 +2209,6 @@ Oracle,WWWUSER,WWWUSER
 Oracle,WWW,WWW
 Oracle,XPRT,XPRT
 Orange,admin,admin
-orange livebox4  (web),admin,(blank)
 orange livebox4  (web),admin,<blank>
 Orange,root,1234
 Osicom,debug,d.e.b.u.g
@@ -2236,6 +2232,7 @@ ovislink,root,<blank>
 Pacific Micro Data,pmd,<blank>
 Packard Bell,<blank>,bell9
 Packeteer,<blank>,touchpwd=
+Palo Alto GlobalProtect Gateway,admin,admin
 Panasonic,admin,1234
 Panasonic,admin,12345
 Panasonic,<blank>,1234
@@ -2341,6 +2338,7 @@ publicprivate (snmp),<blank>,private
 publicprivate (snmp),<blank>,public
 Pyramid Computer,admin,admin
 Pyramid Computer,admin,gnumpf
+qBittorrent Web UI,admin,adminadmin
 QDI,<blank>,lesarotl
 QDI,<blank>,password
 QDI,<blank>,QDI
@@ -2355,6 +2353,7 @@ Questra Corporation,guest,guest
 Questra Corporation,questra,questra
 Quest Software,TOAD,TOAD
 Quintum Technologies Inc.,admin,admin
+RabbitMQ,guest,guest
 Radio Shack,<blank>,744
 Radio Shack,[MULTIPLE],744
 Radvision,admin,<blank>
@@ -2397,7 +2396,6 @@ Research,<blank>,Col2ogro2
 Research Machines,manager,changeme
 Resumix,root,resumix
 Ricoh,admin,<blank>
-Ricoh,admin,no password
 Ricoh,admin,password
 Ricoh,<blank>,password
 Ricoh,<blank>,sysadm
@@ -2749,7 +2747,6 @@ SolarWinds,whd,whd
 Solution 6,aaa,often blank
 Solwise,root,same as webui pwd
 SonarQube (web),admin,admin
-Sonicwall,admin,password
 SonicWALL,admin,password
 Sonic-X,root,admin
 Sonus,admin,Sonus12345