rapid7/metasploit-framework — pull request #3169 by jemjensen (2014-04-01 18:55:25+00:00)
Title: Remove trailing colon and GID from password and unlink temp files

Bug leaves trailing :(GID) on passwords and does not remove temporary wordlist and hashlist files.

Tested against latest, fully updated AMD64 Kali release on 01 Apr 2014.

Steps to duplicate bugs:
1. Install Kali and update to the latest version
2. load msfconsule
a. use auxiliary/scanner/ssh/ssh_login
i. set username root
ii. set passwoed toor
iii. set rhosts (local IP address, not loopback)
b. exploit -j
c. use post/linux/gather/hashdump
d. set session 1
e. exploit -j
f. use auxiliary/analyze/jtr_linux
g. set crypt true
h. exploit -j
i. creds

Note that creds will now show a password of "toor:0" for root. Also note that there are now 2 temporary files in /tmp/ beginning with jtrtmp.