Description
This module will read the first line of a file based on an error message from ansible-playbook with sudo privileges. ansible-playbook takes a yaml file as input, and if there is an error, such as a non-yaml file, it outputs the line where the error occurs. This can be exploited to read the first line of the file, which we'll typically want to read /etc/shadow to obtain root's hash.
Module options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use post/linux/gather/ansible/playbook_error_message_file_readermsf undefined(playbook_error_message_file_reader) > show actions ...actions...msf undefined(playbook_error_message_file_reader) > set ACTION < action-name >msf undefined(playbook_error_message_file_reader) > show options ...show and set options...msf undefined(playbook_error_message_file_reader) > runPrioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub