diff --git a/lib/utils/hash.py b/lib/utils/hash.py index 9976a7aa7..951156f46 100644 --- a/lib/utils/hash.py +++ b/lib/utils/hash.py @@ -248,7 +248,8 @@ def attackCachedUsersPasswords(): for (user, hash_, password) in results: for i in xrange(len(kb.data.cachedUsersPasswords[user])): - if kb.data.cachedUsersPasswords[user][i] and hash_.lower() in kb.data.cachedUsersPasswords[user][i].lower(): + if kb.data.cachedUsersPasswords[user][i] and hash_.lower() in kb.data.cachedUsersPasswords[user][i].lower()\ + and 'clear-text password' not in kb.data.cachedUsersPasswords[user][i].lower(): kb.data.cachedUsersPasswords[user][i] += "%s clear-text password: %s" % ('\n' if kb.data.cachedUsersPasswords[user][i][-1] != '\n' else '', password) def attackDumpedTable():