From 8a3873d730bb16ba8c3eba4425a39878d0f41f1c Mon Sep 17 00:00:00 2001 From: Meatballs Date: Thu, 2 Jul 2015 09:53:08 +0100 Subject: [PATCH] Tweak filter to reduce empty results --- modules/post/windows/gather/credentials/enum_laps.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/post/windows/gather/credentials/enum_laps.rb b/modules/post/windows/gather/credentials/enum_laps.rb index ccbe8dc996..c2d6e418dc 100644 --- a/modules/post/windows/gather/credentials/enum_laps.rb +++ b/modules/post/windows/gather/credentials/enum_laps.rb @@ -39,7 +39,7 @@ class Metasploit3 < Msf::Post OptString.new('LOCAL_ADMIN_NAME', [true, 'The username to store the password against', 'Administrator']), OptBool.new('STORE_DB', [true, 'Store file in loot.', false]), OptBool.new('STORE_LOOT', [true, 'Store file in loot.', true]), - OptString.new('FILTER', [true, 'Search filter.', '(objectCategory=Computer)']) + OptString.new('FILTER', [true, 'Search filter.', '(&(objectCategory=Computer)(ms-MCS-AdmPwd=*))']) ], self.class) deregister_options('FIELDS')