sadshade / veeam-creds

Collection of scripts to retrieve stored passwords from Veeam Backup

Veeam Credential Recovery

This repository contains scripts for recovering passwords from the Veeam Backup and Replication credential manager.

Veeam-Get-Creds.ps1

A PowerShell script for getting and decrypting accounts directly from the Veeam's database.

Usage

1. Run as administrator (elevated) in PowerShell on a host in a Veeam server.

VeeamGetCreds.yaml

PowerShell Empire module with adapted Veeam-Get-Creds.ps1 script.

Usage

1. copy VeeamGetCreds.yaml to empire/server/modules/powershell/credentials/ folder
2. Run Empire server and client
3. Use as usual Empire module by name /powershell/credentials/VeeamGetCreds

veampot.py

Python script to emulate vSphere responses to retrieve stored credentials from Veeam.

Usage

1. Run the script ./veeampot.py
2. Start the VMware vSphere Server Add Wizard from the Infrastructure section
3. Enter the address and port (default 8443) of the host on which the script is running
4. Select an account and connect (ignore the message about the invalid certificate)
5. The script will print the credentials sent by Veeam

Warning

The script is written for educational purposes. Use only if you have permission to disclose credentials.

veeam-creds's Issues

Thx for awesome script. Gemme some advice pls. how to bypass certificate error. Thx so much.

After doing the connection from veeam console - Im got error on server side script veeampot.py
That thing about ssl cert.

Exception happened during processing of request from ('x.x.x.x.', xxxxx)
Traceback (most recent call last):
File "/usr/lib/python3.8/socketserver.py", line 316, in _handle_request_noblock
self.process_request(request, client_address)
File "/usr/lib/python3.8/socketserver.py", line 347, in process_request
self.finish_request(request, client_address)
File "/usr/lib/python3.8/socketserver.py", line 360, in finish_request
self.RequestHandlerClass(request, client_address, self)
File "/usr/lib/python3.8/socketserver.py", line 747, in init
self.handle()
File "/usr/lib/python3.8/http/server.py", line 427, in handle
self.handle_one_request()
File "/usr/lib/python3.8/http/server.py", line 415, in handle_one_request
method()
File "veeampot.py", line 43, in do_POST
print("Login: " + re.search('(.*)', post_data, re.IGNORECASE).group(1))
AttributeError: 'NoneType' object has no attribute 'group'

Thx a lot.

Could check if your script work with B&R 12 ?

Hi,
After upgrading on Veeam B&R 12, i try to execute the script, it failed.
The output :

" PS C:\Users\Administrator\Downloads\veeam-creds-main> .\Veeam-Get-Creds.ps1

Found Veeam DB on @, connecting...
Can't connect to DB, exit. "

Thanks,