Commit Graph

388 Commits

Author SHA1 Message Date
bwatters 88f14950a0 Land #16688, Add Mimipenguin
Merge branch 'land-16688' into upstream-master
2022-09-19 12:43:16 -05:00
space-r7 beb08e1130 add arm support 2022-09-08 08:48:33 -05:00
luisfso 3ddf761f4b Update enum_system.rb
the command "find / -xdev -type f -perm +6000 -perm -1 2> /dev/null" don't work in new linux systems

-perm +mode
       Deprecated,  old  way  of  searching  for  files with any of the permission bits in mode set.  You
       should use -perm /mode instead. Trying to use the  `+'  syntax  with  symbolic  modes  will  yield
       surprising results.  For example, `+u+x' is a valid symbolic mode (equivalent to +u,+x, i.e. 0111)
       and will therefore not be evaluated as -perm +mode but instead as the exact mode  specifier  -perm
       mode  and  so  it  matches files with exact permissions 0111 instead of files with any execute bit
       set.  If you found this paragraph confusing, you're not alone - just use -perm /mode.   This  form
       of  the  -perm test is deprecated because the POSIX specification requires the interpretation of a
       leading `+' as being part of a symbolic mode, and so we switched to using `/' instead.
2022-09-01 14:56:28 -03:00
space-r7 90c220a39f fix failing hash checks 2022-08-29 17:50:49 -05:00
space-r7 8094c67465 switch to hash, reorder args 2022-07-01 13:05:38 -05:00
space-r7 b21abbfb18 address review
includes using python on target for yescrypt
support, not failing on unsupported hash types,
documentation updates, etc
2022-07-01 12:56:44 -05:00
Shelby Pace e1e6089e25 Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:44 -05:00
Shelby Pace 4557c86fbb Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:44 -05:00
Shelby Pace 555b2a394c Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:44 -05:00
Shelby Pace 9b50612b84 Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:43 -05:00
Shelby Pace be61ad0171 Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:43 -05:00
Shelby Pace 49818b41ab Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:43 -05:00
space-r7 69342f5431 add docs and mixin 2022-07-01 12:56:43 -05:00
space-r7 0cb1b5b56f fail on unsupported hash types 2022-07-01 12:56:43 -05:00
space-r7 73f6d1ab87 check all processes, handle unsupported hash types 2022-07-01 12:56:42 -05:00
space-r7 045d9f7645 get adjacent regions, add method for addr format 2022-07-01 12:56:42 -05:00
space-r7 bcc45b1a9c check more regions 2022-07-01 12:56:42 -05:00
space-r7 47f8d3acae rename tlvs, add improvements 2022-07-01 12:56:42 -05:00
space-r7 6c6ad38b7a hash text and test against passwords 2022-07-01 12:56:42 -05:00
space-r7 075a40eb27 search adjacent regions, add processes 2022-07-01 12:56:41 -05:00
space-r7 6e8016541a add initial code for module 2022-07-01 12:56:41 -05:00
adfoster-r7 28eab4d871 Add Meterpreter compatibility metadata 2021-10-06 13:54:51 +01:00
Grant Willcox cec3a4bc46 Land #15601, Add Geutebruck Post Exploitation Module 2021-09-14 10:03:21 -05:00
adfoster-r7 1499b1988e Land #15609, Add Meterpreter compatibility commands 2021-09-13 15:21:03 +01:00
adfoster-r7 46718e3390 Run Rubocop layout rules on modules 2021-09-10 12:53:39 +01:00
adfoster-r7 059e39a6f0 Specify meterpreter compatibility command requirements 2021-09-08 22:59:25 +01:00
Your Name ad2cc6a1fe Fixed Module logic 2021-09-03 12:55:52 -05:00
Grant Willcox e62f5e3011 Update documentation to reflect latest changes and update module to check files exist and bail if they don't, including when uploading a custom image 2021-09-03 12:55:45 -05:00
Grant Willcox 059198095a First round of edits to module from review process 2021-09-03 12:55:44 -05:00
Your Name 817904a916 Add Geutebruck Post Exploitation Module 2021-09-03 12:55:39 -05:00
adfoster-r7 4a9a15e638 Run Rubocop layout rules on modules 2021-08-27 17:19:43 +01:00
pingport80 bc23658123 minor sytling changes 2021-08-09 15:53:58 +05:30
pingport80 815ecd27c3 minor changes 2021-08-06 22:35:05 +05:30
pingport80 d2c2f66374 fix localization issue in linux_enum_network 2021-08-06 22:13:25 +05:30
cgranleese-r7 9e7859ed25 Reformats some modules so they can be run with new meterpreter_commands_dependencies.rb Rubocop rule 2021-07-23 14:40:19 +01:00
pingport80 8d57d9cfec fix localization issue in module linux/gather/ppp_chap_secrets 2021-06-01 21:33:33 +05:30
Spencer McIntyre 8d834afeae Land #15236, Add additional Xen check to checkvm 2021-05-25 11:15:14 -04:00
Shelby Pace 9f2dae38c8 Land #15079, add meterpreter compat requirements 2021-05-24 16:00:08 -05:00
Sean M c484391949 Update checkvm.rb
Removed spaces at end of lines 99/110 from msftidy complaints
2021-05-23 13:16:22 -04:00
Sean M 5d61ce4a0b Update checkvm.rb
Extended Xen VM identification - AWS Xen VMs are now detected new  kernel modules.
2021-05-23 10:23:56 -04:00
Spencer McIntyre da01a839d1 Set required commands spec for all post mixins 2021-04-26 12:28:18 -04:00
Spencer McIntyre 8186a75235 Add meterpreter command compatibility to modules 2021-04-21 18:22:15 -04:00
pingport80 f6cb88b642 remove is_root check from linux_hashdump 2021-04-21 10:19:30 +05:30
Tim W deaa241ca5 Land #15065, fix post/linux/gather/checkvm 2021-04-20 17:02:45 +01:00
pingport80 a4cfc3684e remove ls_pci_data initialization 2021-04-20 21:26:21 +05:30
pingport80 32bfa887da rubocop fixes 2021-04-20 21:23:24 +05:30
pingport80 43f4ec921d update docs and remove lscpu check 2021-04-20 21:12:27 +05:30
pingport80 490e49acdb fix msftidy warning 2021-04-20 20:58:04 +05:30
pingport80 673084b65c remove sys/bus/xen check and add /sys/class/dmi/id/product_name check 2021-04-20 20:51:04 +05:30
pingport80 cde5c83517 add nil check and remove readable? 2021-04-20 18:44:38 +05:30