b58f963355
Land #18299 , extend error message for timeouts to include more detail to user
2023-10-26 00:21:22 +01:00
93645c23ac
Land #18403 , Fix FileDropper to properly clone string variables before storing them
2023-10-25 20:55:06 +01:00
862e738015
extend error message for timeouts to include more detail to user
...
initial functionality, testing/cleanup still needed
script and command functionality
remove unnecessary accessor
switch puts to print_error in proc
ensure proc is reset, run on every error, add yard docs
fix yard, refactor/remove dead code
rename on_error_proc
2023-10-25 11:08:00 -05:00
96a04265c7
Land #18470 , Adds wiki guide for session searching and killing stale sessions
2023-10-24 15:30:46 +01:00
8331f4d2ad
Adds wiki guide for session searching
...
Also tweaks an error message
add readme to directory
2023-10-23 15:33:53 -05:00
3bf880192e
review comments
2023-10-23 10:28:33 -04:00
0d2a5795fe
total to bottom
2023-10-23 10:28:33 -04:00
ed78df0f0f
add creds and klist to db_stats
2023-10-23 10:28:33 -04:00
7452cda2b1
db_stats review comments
2023-10-23 10:28:33 -04:00
5f2703f8c0
add stats command
2023-10-23 10:28:33 -04:00
b0b4da543d
Land #18400 , Kerberos ticket_search fix passing in a workspace
2023-10-23 16:17:24 +02:00
77a8b0efa2
Land #18421 , Save Kerberos tickets in the MSF cache upon a successful login
2023-10-23 15:25:09 +02:00
7baabd08db
Land #18364 , Add support for filtering sessions
2023-10-19 16:40:42 +01:00
b4b73529d3
add -e flag for stale sessions
...
remove single flag
pivot to search flag
added support for search session type
adds search session id support
remove stale references
reshuffle code
fix time parsing, add command support
fix search list, reduce duplicated code
testing added
killall with search lists table of killed sessions
sessions are no longer represented by ids
addresses feedback on code structure and search behavior
some test reshuffling, switch raised errors to printed ones
add checkin validation, rest of cmd_sessions tests
add time parsing test
refactoring
test reformatting and adjusted error validation
make error handling more explicit, add test context
fixes
sub quotes, make constant
rubocopping
switch before and after to greater than and less than
mbetter incorporate constants
update example
2023-10-19 09:41:18 -05:00
0b7a1bfcf7
Use #dup instead of #clone #2
2023-10-17 12:39:23 +02:00
5f438f729d
Use #dup instead of #clone
2023-10-17 12:19:03 +02:00
941c44f9ad
Update creds cracked password to work with remote database
2023-10-13 12:30:27 +01:00
bb19151891
Land #17689 , adding a new column cracked password in creds command to show cracked passwords
2023-10-13 12:25:51 +01:00
5f6b8dc7ef
Land #18381 , Add option to reload all libs when calling run or check on a module
2023-10-13 11:06:10 +01:00
03433652e8
Land #18443 , Fix reverse ssh handler warnings on windows bootup
2023-10-13 10:24:31 +01:00
05dd2e1473
Land #18351 , Apache Superset RCE (CVE-2023-37941)
2023-10-12 17:10:10 -04:00
80d2fa738d
Land #18296 , update more mysql modules to support newer authentication methods
2023-10-12 17:19:02 +01:00
86b7ec4518
Address comments from the review
2023-10-12 09:50:19 -04:00
de8e392b7b
Only randomize the URI once
2023-10-12 09:50:19 -04:00
5577413bd9
Add additional classes for payload loading
...
This fixes the java/shell_reverse_tcp payload
2023-10-12 09:27:26 -04:00
f712c67441
Support URIPATH in Java::HTTP::ClassLoader
...
The URIPATH must end with / due to how the package names are requested
from the web server in a nested directory structure. #on_request_uri
also needed to be updated to check for the relative resource.
2023-10-12 09:27:26 -04:00
1b172768b4
Use upstream ruby-mysql in Remote::MYSQL
...
* ... and dependents
2023-10-12 13:08:35 +02:00
874366588c
Update metasploit side for java metasploit-payloads fix
2023-10-11 15:00:19 -04:00
6c33bf95f1
Land #18411 , Fix incorrect scope condition when populating RHOSTS using services command
2023-10-11 13:29:31 +01:00
59da2865d9
Use an exec-in-place gadget for Python
...
This adds a Python deserialization gadget that will exec arbitrary
Python code in place. It is only compatible with Python 3.x due to
differences in Python's exec function and statement between 2 and 3.
2023-10-10 14:01:24 -04:00
0c407945a0
Fix reverse ssh handler warnings on windows bootup
2023-10-10 15:26:24 +01:00
ef871685af
Revert accidental changes
2023-10-06 16:04:38 +01:00
9eb4385a25
Get stats from the cache instead of from frameworks list of loaded modules
2023-10-06 16:04:38 +01:00
d60993f7e8
Enable using modules when deferred loading is turned on
2023-10-06 16:04:34 +01:00
faa3dd6b85
Land #18372 , Fix error downloading a file from generic shell
2023-10-05 17:47:27 +01:00
a16379b2a7
Land #17919 , Post::Windows::Service: Support start/stop service on shell sessions
...
Merge branch 'land-17919' into upstream-master
2023-10-04 13:51:25 -05:00
81e4f94869
Land #18412 , Add a couple tips to metasploit
2023-10-04 13:45:33 -04:00
126c19890a
Add option to reload all libs when running a module
2023-10-04 14:59:36 +01:00
6aeffa5a17
Land #18363 , Add support to msfvenom for "-f octal
...
Merge branch 'land-18363' into upstream-master
2023-10-03 16:21:57 -05:00
14c42fcefc
Land #18405 , Show errors on inaccessible payload files
2023-10-03 12:22:04 +01:00
4d87d4e114
Save Kerberos tickets in the MSF cache upon a successful login
2023-10-03 13:45:41 +11:00
3baf867c76
Update lib/msf/ui/tip.rb
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2023-10-02 16:38:26 -04:00
5087e0ffe3
Land #18197 , Ldap login scanner module
...
Adds a new login scanner module for LDAP
2023-10-02 10:56:56 -04:00
e70f356239
Show errors on inaccessible payload files
2023-10-02 14:46:25 +01:00
5aee82e35a
Add a couple of tips
2023-09-29 11:47:27 -04:00
49786101f7
Fix incorrect scope condition
2023-09-29 13:51:14 +02:00
2232877d03
Properly clone the path strings before storing them
2023-09-26 13:26:02 +02:00
c1abf37d0c
Use passed in workspace if available, default to current workspace
2023-09-25 13:30:18 +01:00
d64ed33cdf
code spell for a bunch of modules
2023-09-24 17:42:00 -04:00
75e9a0a834
Add support for base32/64 comments.
...
* Explicitly documents lack of support for VB style comments.
2023-09-21 08:50:58 -06:00
adfoster-r7