Yes I do!


On Wed, Nov 27, 2013 at 11:31 AM, Josh <notifications@github.com> wrote:

> In modules/post/windows/gather/forensics/gather_browser_history.rb:
>
> > +class Metasploit3 < Msf::Post
> > +
> > +  include Msf::Post::File
> > +  include Msf::Post::Windows::UserProfiles
> > +  include Msf::Post::Windows::Registry
> > +
> > +  def initialize(info={})
> > +    super( update_info( info,
> > +        'Name' => 'Windows Gather Skype, Firefox, and Chrome Artifacts',
> > +        'Description' => %q{'Gathers Skype chat logs, Firefox history, and Chrome history data from the victim machine.'},
> > +        'License' => MSF_LICENSE,
> > +        'Author' => [ 'Joshua Harper (@JonValt) <josh at radixtx dot com>'],
> > +        'Platform' => %w{ win },
> > +        'SessionTypes' => [ 'meterpreter' ]
> > +      ))
> > +    register_advanced_options([], self.class)
>
> Josh, Do you do any *nix forensics? I have a forensics'y module I started
> for *nix which is pretty interesting. I haven't touched it in quite a while
> tho
> … <#1429a9d50a30e1cc_>
> -Josh
> On Nov 27, 2013, at 11:18 AM, Joshua Harper PI GCFE GCFA GSEC <
> notifications@github.com> wrote: In
> modules/post/windows/gather/forensics/gather_browser_history.rb: > +class
> Metasploit3 < Msf::Post > + > + include Msf::Post::File > + include
> Msf::Post::Windows::UserProfiles > + include Msf::Post::Windows::Registry >
> + > + def initialize(info={}) > + super( update_info( info, > + 'Name' =>
> 'Windows Gather Skype, Firefox, and Chrome Artifacts', > + 'Description' =>
> %q{'Gathers Skype chat logs, Firefox history, and Chrome history data from
> the victim machine.'}, > + 'License' => MSF_LICENSE, > + 'Author' => [
> 'Joshua Harper (@JonValt <https://github.com/JonValt>) <josh at radixtx
> dot com>'], > + 'Platform' => %w{ win }, > + 'SessionTypes' => [
> 'meterpreter' ] > + )) > + register_advanced_options([], self.class)
> Everything cool with this now? Is there anything else I need to tweak? :-)
> … — Reply to this email directly or view it on GitHub.
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/rapid7/metasploit-framework/pull/2675/files#r7963975>
> .
>



-- 
Joshua Harper GCFE GCFA GSEC PI
Digital Forensic Analyst, Radix Forensics LLC
Austin, TX

http://www.RadixForensics.com
http://www.facebook.com/RadixForensics