b58f963355
Land #18299 , extend error message for timeouts to include more detail to user
2023-10-26 00:21:22 +01:00
93645c23ac
Land #18403 , Fix FileDropper to properly clone string variables before storing them
2023-10-25 20:55:06 +01:00
862e738015
extend error message for timeouts to include more detail to user
...
initial functionality, testing/cleanup still needed
script and command functionality
remove unnecessary accessor
switch puts to print_error in proc
ensure proc is reset, run on every error, add yard docs
fix yard, refactor/remove dead code
rename on_error_proc
2023-10-25 11:08:00 -05:00
96a04265c7
Land #18470 , Adds wiki guide for session searching and killing stale sessions
2023-10-24 15:30:46 +01:00
8331f4d2ad
Adds wiki guide for session searching
...
Also tweaks an error message
add readme to directory
2023-10-23 15:33:53 -05:00
3bf880192e
review comments
2023-10-23 10:28:33 -04:00
0d2a5795fe
total to bottom
2023-10-23 10:28:33 -04:00
ed78df0f0f
add creds and klist to db_stats
2023-10-23 10:28:33 -04:00
7452cda2b1
db_stats review comments
2023-10-23 10:28:33 -04:00
5f2703f8c0
add stats command
2023-10-23 10:28:33 -04:00
b0b4da543d
Land #18400 , Kerberos ticket_search fix passing in a workspace
2023-10-23 16:17:24 +02:00
77a8b0efa2
Land #18421 , Save Kerberos tickets in the MSF cache upon a successful login
2023-10-23 15:25:09 +02:00
30e1930444
Bump version of framework to 6.3.40
2023-10-19 12:08:32 -05:00
7baabd08db
Land #18364 , Add support for filtering sessions
2023-10-19 16:40:42 +01:00
b4b73529d3
add -e flag for stale sessions
...
remove single flag
pivot to search flag
added support for search session type
adds search session id support
remove stale references
reshuffle code
fix time parsing, add command support
fix search list, reduce duplicated code
testing added
killall with search lists table of killed sessions
sessions are no longer represented by ids
addresses feedback on code structure and search behavior
some test reshuffling, switch raised errors to printed ones
add checkin validation, rest of cmd_sessions tests
add time parsing test
refactoring
test reformatting and adjusted error validation
make error handling more explicit, add test context
fixes
sub quotes, make constant
rubocopping
switch before and after to greater than and less than
mbetter incorporate constants
update example
2023-10-19 09:41:18 -05:00
0b7a1bfcf7
Use #dup instead of #clone #2
2023-10-17 12:39:23 +02:00
5f438f729d
Use #dup instead of #clone
2023-10-17 12:19:03 +02:00
941c44f9ad
Update creds cracked password to work with remote database
2023-10-13 12:30:27 +01:00
bb19151891
Land #17689 , adding a new column cracked password in creds command to show cracked passwords
2023-10-13 12:25:51 +01:00
44e5a93add
Land #18442 , Improve stability of msfdb initialization on windows environments
2023-10-13 12:21:02 +01:00
5f6b8dc7ef
Land #18381 , Add option to reload all libs when calling run or check on a module
2023-10-13 11:06:10 +01:00
03433652e8
Land #18443 , Fix reverse ssh handler warnings on windows bootup
2023-10-13 10:24:31 +01:00
05dd2e1473
Land #18351 , Apache Superset RCE (CVE-2023-37941)
2023-10-12 17:10:10 -04:00
fb77febe3e
Bump version of framework to 6.3.39
2023-10-12 12:08:36 -05:00
80d2fa738d
Land #18296 , update more mysql modules to support newer authentication methods
2023-10-12 17:19:02 +01:00
86b7ec4518
Address comments from the review
2023-10-12 09:50:19 -04:00
de8e392b7b
Only randomize the URI once
2023-10-12 09:50:19 -04:00
5577413bd9
Add additional classes for payload loading
...
This fixes the java/shell_reverse_tcp payload
2023-10-12 09:27:26 -04:00
f712c67441
Support URIPATH in Java::HTTP::ClassLoader
...
The URIPATH must end with / due to how the package names are requested
from the web server in a nested directory structure. #on_request_uri
also needed to be updated to check for the relative resource.
2023-10-12 09:27:26 -04:00
1b172768b4
Use upstream ruby-mysql in Remote::MYSQL
...
* ... and dependents
2023-10-12 13:08:35 +02:00
874366588c
Update metasploit side for java metasploit-payloads fix
2023-10-11 15:00:19 -04:00
6c33bf95f1
Land #18411 , Fix incorrect scope condition when populating RHOSTS using services command
2023-10-11 13:29:31 +01:00
6af8d3f6e6
Land #18431 , Fix how port forwards are listed
...
Merge branch 'land-18431' into upstream-master
2023-10-10 16:56:11 -05:00
47b0c01d58
Make the add_equals_to_base64 function private
2023-10-10 14:16:56 -04:00
59da2865d9
Use an exec-in-place gadget for Python
...
This adds a Python deserialization gadget that will exec arbitrary
Python code in place. It is only compatible with Python 3.x due to
differences in Python's exec function and statement between 2 and 3.
2023-10-10 14:01:24 -04:00
0c407945a0
Fix reverse ssh handler warnings on windows bootup
2023-10-10 15:26:24 +01:00
723557365a
Improve stability of msfdb initialization on windows environments
2023-10-10 15:25:10 +01:00
93fb0dd3b3
Land #18171 , Enable using modules when deferred loading is turned on
2023-10-06 17:41:18 +01:00
ef871685af
Revert accidental changes
2023-10-06 16:04:38 +01:00
9eb4385a25
Get stats from the cache instead of from frameworks list of loaded modules
2023-10-06 16:04:38 +01:00
d60993f7e8
Enable using modules when deferred loading is turned on
2023-10-06 16:04:34 +01:00
d11f15b9af
Update gem dependencies
2023-10-06 15:49:06 +01:00
88c849de74
Add pin to rails 7.0.x
2023-10-06 14:08:57 +01:00
d46e80f17f
Fix how port forwards are listed
...
Fixes #18291
2023-10-06 09:04:28 -04:00
ec33707381
Bump version of framework to 6.3.38
2023-10-05 12:08:28 -05:00
faa3dd6b85
Land #18372 , Fix error downloading a file from generic shell
2023-10-05 17:47:27 +01:00
dff907b6ca
Land #18425 , Add history support to nasm and metasm shells
2023-10-05 17:20:31 +01:00
1f6009333e
Add history support to nasm and metasm shells
2023-10-04 22:36:19 +01:00
1ee7f03a2b
Land #18420 , Update user agent strings
...
Merge branch 'land-18420' into upstream-master
2023-10-04 14:13:04 -05:00
a16379b2a7
Land #17919 , Post::Windows::Service: Support start/stop service on shell sessions
...
Merge branch 'land-17919' into upstream-master
2023-10-04 13:51:25 -05:00
adfoster-r7