Commit Graph

301 Commits

Author SHA1 Message Date
bwatters 88f14950a0 Land #16688, Add Mimipenguin
Merge branch 'land-16688' into upstream-master
2022-09-19 12:43:16 -05:00
space-r7 beb08e1130 add arm support 2022-09-08 08:48:33 -05:00
luisfso 3ddf761f4b Update enum_system.rb
the command "find / -xdev -type f -perm +6000 -perm -1 2> /dev/null" don't work in new linux systems

-perm +mode
       Deprecated,  old  way  of  searching  for  files with any of the permission bits in mode set.  You
       should use -perm /mode instead. Trying to use the  `+'  syntax  with  symbolic  modes  will  yield
       surprising results.  For example, `+u+x' is a valid symbolic mode (equivalent to +u,+x, i.e. 0111)
       and will therefore not be evaluated as -perm +mode but instead as the exact mode  specifier  -perm
       mode  and  so  it  matches files with exact permissions 0111 instead of files with any execute bit
       set.  If you found this paragraph confusing, you're not alone - just use -perm /mode.   This  form
       of  the  -perm test is deprecated because the POSIX specification requires the interpretation of a
       leading `+' as being part of a symbolic mode, and so we switched to using `/' instead.
2022-09-01 14:56:28 -03:00
space-r7 90c220a39f fix failing hash checks 2022-08-29 17:50:49 -05:00
space-r7 8094c67465 switch to hash, reorder args 2022-07-01 13:05:38 -05:00
space-r7 b21abbfb18 address review
includes using python on target for yescrypt
support, not failing on unsupported hash types,
documentation updates, etc
2022-07-01 12:56:44 -05:00
Shelby Pace e1e6089e25 Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:44 -05:00
Shelby Pace 4557c86fbb Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:44 -05:00
Shelby Pace 555b2a394c Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:44 -05:00
Shelby Pace 9b50612b84 Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:43 -05:00
Shelby Pace be61ad0171 Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:43 -05:00
Shelby Pace 49818b41ab Update modules/post/linux/gather/mimipenguin.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2022-07-01 12:56:43 -05:00
space-r7 69342f5431 add docs and mixin 2022-07-01 12:56:43 -05:00
space-r7 0cb1b5b56f fail on unsupported hash types 2022-07-01 12:56:43 -05:00
space-r7 73f6d1ab87 check all processes, handle unsupported hash types 2022-07-01 12:56:42 -05:00
space-r7 045d9f7645 get adjacent regions, add method for addr format 2022-07-01 12:56:42 -05:00
space-r7 bcc45b1a9c check more regions 2022-07-01 12:56:42 -05:00
space-r7 47f8d3acae rename tlvs, add improvements 2022-07-01 12:56:42 -05:00
space-r7 6c6ad38b7a hash text and test against passwords 2022-07-01 12:56:42 -05:00
space-r7 075a40eb27 search adjacent regions, add processes 2022-07-01 12:56:41 -05:00
space-r7 6e8016541a add initial code for module 2022-07-01 12:56:41 -05:00
adfoster-r7 059e39a6f0 Specify meterpreter compatibility command requirements 2021-09-08 22:59:25 +01:00
adfoster-r7 4a9a15e638 Run Rubocop layout rules on modules 2021-08-27 17:19:43 +01:00
pingport80 bc23658123 minor sytling changes 2021-08-09 15:53:58 +05:30
pingport80 815ecd27c3 minor changes 2021-08-06 22:35:05 +05:30
pingport80 d2c2f66374 fix localization issue in linux_enum_network 2021-08-06 22:13:25 +05:30
cgranleese-r7 9e7859ed25 Reformats some modules so they can be run with new meterpreter_commands_dependencies.rb Rubocop rule 2021-07-23 14:40:19 +01:00
pingport80 8d57d9cfec fix localization issue in module linux/gather/ppp_chap_secrets 2021-06-01 21:33:33 +05:30
Spencer McIntyre 8d834afeae Land #15236, Add additional Xen check to checkvm 2021-05-25 11:15:14 -04:00
Shelby Pace 9f2dae38c8 Land #15079, add meterpreter compat requirements 2021-05-24 16:00:08 -05:00
Sean M c484391949 Update checkvm.rb
Removed spaces at end of lines 99/110 from msftidy complaints
2021-05-23 13:16:22 -04:00
Sean M 5d61ce4a0b Update checkvm.rb
Extended Xen VM identification - AWS Xen VMs are now detected new  kernel modules.
2021-05-23 10:23:56 -04:00
Spencer McIntyre da01a839d1 Set required commands spec for all post mixins 2021-04-26 12:28:18 -04:00
Spencer McIntyre 8186a75235 Add meterpreter command compatibility to modules 2021-04-21 18:22:15 -04:00
pingport80 f6cb88b642 remove is_root check from linux_hashdump 2021-04-21 10:19:30 +05:30
Tim W deaa241ca5 Land #15065, fix post/linux/gather/checkvm 2021-04-20 17:02:45 +01:00
pingport80 a4cfc3684e remove ls_pci_data initialization 2021-04-20 21:26:21 +05:30
pingport80 32bfa887da rubocop fixes 2021-04-20 21:23:24 +05:30
pingport80 43f4ec921d update docs and remove lscpu check 2021-04-20 21:12:27 +05:30
pingport80 490e49acdb fix msftidy warning 2021-04-20 20:58:04 +05:30
pingport80 673084b65c remove sys/bus/xen check and add /sys/class/dmi/id/product_name check 2021-04-20 20:51:04 +05:30
pingport80 cde5c83517 add nil check and remove readable? 2021-04-20 18:44:38 +05:30
pingport80 61d4ab4e26 fix linux checkvm bug 2021-04-20 09:40:11 +05:30
Christophe De La Fuente e48ebe6659 Update haserl_read module documentation (again)
- Add CVE and Ref.
- Add fixed version
2021-04-09 13:24:49 +02:00
Christophe De La Fuente 586d033909 Land #14833, haserl-based exploit for Alpine linux 2021-04-09 13:07:47 +02:00
jvoisin 943698ef19 Add an haserl-based exploit for Alpine linux 2021-04-02 13:43:52 +02:00
Alan Foster f5edb5a105 Remove redundant rubocop disables 2021-03-11 17:23:44 +00:00
Alan Foster b06c5c12aa Rubocop recently landed modules continued 2021-02-25 14:13:40 +00:00
Alan Foster 30809787c4 Convert disclosure dates to iso8601 2020-10-02 21:00:37 +01:00
stealthcopter 2cb1eb9fb3 rubocop changes 2020-08-06 09:31:17 +01:00