Skip to content

Commit c5e737a

Browse files
author
jenkins-metasploit
committed
automatic module_metadata_base.json update
1 parent cef2625 commit c5e737a

1 file changed

Lines changed: 41 additions & 0 deletions

File tree

db/modules_metadata_base.json

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -294582,6 +294582,47 @@
294582294582
"needs_cleanup": null,
294583294583
"actions": []
294584294584
},
294585+
"post_linux/gather/tenable_security_center": {
294586+
"name": "Tenable Security Center",
294587+
"fullname": "post/linux/gather/tenable_security_center",
294588+
"aliases": [],
294589+
"rank": 300,
294590+
"disclosure_date": null,
294591+
"type": "post",
294592+
"author": [
294593+
"h00die"
294594+
],
294595+
"description": "This module collects credentials and setup information\n from Tenable Security Center. root or TNS user permissions\n are required. We don't utilize SC's builtin backup\n functionality as that requires SC to be shut down.\n The module works in 2 phases:\n\n Phase 1: gather all passwords which can be decrypted. These\n are non-user ones such as credentials used for scans, creds\n for the Nessus servers, SMTP, etc.\n\n Phase 2: handle hashed passwords processing. SC uses SHA-512\n and PBKDF2 according to the documentation, but the implementation\n (salt+hash vs hash+salt) is unknown due to the source code being\n protected by SourceGuardian. To get around this, we use a php\n script on server to brute force the passwords. Note this will\n use SC's resources. The crack attempt rate is ~6/sec on a test\n instance, so you'll want a small password list.\n\n Tested against SC 6.7.2 on RHEL9",
294596+
"references": [
294597+
"URL-https://docs.tenable.com/security-center/Content/EncryptionStrength.htm"
294598+
],
294599+
"platform": "Linux",
294600+
"arch": "",
294601+
"rport": null,
294602+
"autofilter_ports": null,
294603+
"autofilter_services": null,
294604+
"targets": null,
294605+
"mod_time": "2026-05-08 07:30:25 +0000",
294606+
"path": "/modules/post/linux/gather/tenable_security_center.rb",
294607+
"is_install_path": true,
294608+
"ref_name": "linux/gather/tenable_security_center",
294609+
"check": false,
294610+
"post_auth": false,
294611+
"default_credential": false,
294612+
"notes": {
294613+
"Stability": [
294614+
"crash-safe"
294615+
],
294616+
"SideEffects": [],
294617+
"Reliability": []
294618+
},
294619+
"session_types": [
294620+
"shell",
294621+
"meterpreter"
294622+
],
294623+
"needs_cleanup": null,
294624+
"actions": []
294625+
},
294585294626
"post_linux/gather/tor_hiddenservices": {
294586294627
"name": "Linux Gather TOR Hidden Services",
294587294628
"fullname": "post/linux/gather/tor_hiddenservices",

0 commit comments

Comments
 (0)