dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Truncate private data at 88 chars 

Truncating at 87 was the exact length to trim the last byte of an AES256
kerberos key. Furthermore, adding the (TRUNCATED) string to the end
caused the resuting value to be larger than the original trucated value.
This commit is contained in:
Spencer McIntyre 2024-02-23 09:46:44 -05:00
parent 06b3004af4
commit ca562a95d8
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/msf/ui/console/command_dispatcher/creds.rb
View File

@ -477,8 +477,8 @@ class Creds
else
private_val = ''
end
if truncate && private_val.to_s.length > 87
private_val = "#{private_val[0,87]} (TRUNCATED)"
if truncate && private_val.to_s.length > 88
private_val = "#{private_val[0,76]} (TRUNCATED)"
end
realm_val = core.realm ? core.realm.value : ''
human_val = core.private ? core.private.class.model_name.human : ''