1013ca6298
Merge pull request #10 from wvu-r7/pr/3394
...
Fix invalid URL in splat
2014-12-22 18:27:29 +01:00
93be828738
Fix invalid URL in splat
2014-12-22 11:26:20 -06:00
2035f606c1
Merge pull request #9 from wvu-r7/pr/3394
...
Align shellcode in bind_hidden_tcp
2014-12-22 18:18:56 +01:00
f1b9862665
Align shellcode in bind_hidden_tcp
2014-12-22 11:17:14 -06:00
7efa85ea3f
Merge pull request #8 from wvu-r7/pr/3394
...
Readd block_hidden_bind_tcp.asm
2014-12-22 18:15:18 +01:00
e34c37042a
Readd block_hidden_bind_tcp.asm
...
Because stager_hidden_bind_tcp.asm includes it.
2014-12-22 11:13:07 -06:00
25fabfcab1
Merge pull request #7 from wvu-r7/pr/3394
...
Add bind_hidden_tcp to payload spec
2014-12-22 17:45:03 +01:00
e4191866d9
Add bind_hidden_tcp to payload spec
2014-12-22 10:37:46 -06:00
9a7e431a4a
New block_api applied
2014-12-22 17:21:13 +01:00
42636fb3c0
Handler and block_hidden_bind_tcp deleted
2014-12-22 17:21:13 +01:00
fa8e944e34
AHOST OptAddress moved to the payload
2014-12-22 17:21:11 +01:00
c0fa8c0e3f
Add stager for hidden bind shell payload
2014-12-22 17:21:11 +01:00
416483415a
Land #4450 , MSB reference fix
2014-12-22 05:28:48 -06:00
44084b4ef6
Correct Microsoft security bulletin for ppr_flatten_rec
2014-12-22 10:40:23 +00:00
2e4ac41548
Land #4437 , msfvenoms new output switch
2014-12-21 20:48:33 +01:00
ded1765d73
Land #4439 , rm Redmine references in code
2014-12-20 17:19:55 -06:00
80d3c5b757
Normalize links to metakitty, unleashed, and wiki
2014-12-20 12:53:34 -06:00
067bda43e7
Updating lockfile post MDM version bump
2014-12-19 20:58:09 -06:00
c8d80d5de5
Lands #4436 , latest version of MDM
...
Fixes an issue with protocol inclusion when adding an NX console
2014-12-19 20:56:02 -06:00
1213aa1875
Missed one in CONTRIBUTING.md
2014-12-19 17:32:28 -06:00
d3050de862
Remove references to Redmine in code
...
See #4400 . This should be all of them, except for, of course, the module
that targets Redmine itself.
Note that this also updates the README.md with more current information
as well.
2014-12-19 17:27:08 -06:00
fb35a4574f
Well, should be -1
2014-12-19 16:36:05 -06:00
cd444ed2db
No point to save if there's no payload
2014-12-19 16:35:17 -06:00
3c03f3697a
Land #4433 - Update mailmap
2014-12-19 16:29:14 -06:00
c2bc182db5
Fix #4430 - Add support for -o to save the payload to disk
...
Fix #4430
2014-12-19 16:14:43 -06:00
337b2d784f
Land #4416 , define rails version dep in one place
...
* Bump rails to 3.2.21
2014-12-19 15:17:54 -06:00
82e7cd99b5
pull latest mdm
2014-12-19 14:58:01 -06:00
fffa8cfdd1
Lands #4426 by cleaning up the module description
2014-12-19 14:54:17 -06:00
9ede2c2ca5
Lands #4429 by fixing windows/messagebox with EXITFUNC=none
2014-12-19 14:51:57 -06:00
85ec71bd1e
Land #4434 , fix for metasm invalid opcode
2014-12-19 14:43:55 -06:00
24527d7a55
Land #4427 , Misfortune Cookie Scanner
...
lands Jhart's scanner module for the RomPager
Misofrtune Cookie vuln.
2014-12-19 14:03:00 -06:00
db0aeb2a05
Make the version constraint a range
2014-12-19 13:54:13 -06:00
38a4776b39
Add and sort other contributors in mailmap
2014-12-19 13:41:06 -06:00
df4f86047d
Add new/updated r7 employees to mailmap
2014-12-19 13:39:42 -06:00
650a68c994
Fix jcxz to jecxz for x86_64 in metasm
...
This fixes "invalid opcode near 'jecxz'" for x64 metasm encoding.
2014-12-19 13:34:56 -06:00
c493ccfc06
Define the Rails version constraint in a library constant
2014-12-19 11:46:39 -06:00
2c0c732967
Fix #4414 & #4415 - exitfunc and proper null-terminated string
...
This patch fixes the following for messagebox.rb
Issue 1 (#4415 )
When exitfunc is none, the payload will not be able to generate
due to an "invalid opcode" error.
Issue 2: (#4414 )
After "user32.dll" is pushed onto the stack for the LoadLibrary
call, the payload does not actually ensure bl is a null byte, it
just assumes it is and uses it to modify the stack to get a
null-terminated string.
Fix #4414
Fix #4415
2014-12-19 03:19:06 -06:00
8d2bd74d31
Add preliminary module to cover 'Misfortune Cookie', CVE-2014-9222
2014-12-18 17:21:26 -08:00
c15bad44a6
Be clearer on backslash usage.
...
See #4282
2014-12-18 16:16:02 -06:00
723998e1d4
Land #4425 , jobs tab completion NilClass fix
2014-12-18 15:25:57 -06:00
400bd9a094
Fix jobs NilClass tab complete bug
2014-12-18 15:43:04 -05:00
153d7e273d
Land #4420 , tentative "fix" for EXE spec
2014-12-18 13:55:56 -06:00
db474adc7b
Remove the helper as well.
...
See #3807 .
Again, happy to have working tests that actually test validity. But,
these ain't them.
2014-12-18 13:28:04 -06:00
144daaa6bb
Land #4421 - add a deprecation message for msfcli
...
please make your way to msfconsole
2014-12-18 10:28:31 -06:00
60099d42cf
Add deprecation warning to msfcli, 6 months
...
See #3802
2014-12-18 09:39:50 -06:00
80cd04d76a
Land #4332 , test optimization for Cucumber
...
* Make Cuke run faster on TravisCI
2014-12-18 09:34:55 -06:00
270debea32
Remove the EXE file test spec
...
This thing has been a problem since forever, given cross-platform
issues and random collisions with other file magic signatures.
See #3807 and #2793 and the even earlier redmine bug.
This should not close the bug, since we're merely avoiding the random
fails by not testing at all. We /should/ test, but in the meantime, we
can't suffer these failures that throw me (at least) into a panic every
time.
2014-12-18 09:18:24 -06:00
dcf23172be
Land #4418 , threads tab completion NilClass fix
2014-12-17 22:13:17 -06:00
d41dc0d88e
Land #4419 , msfbinscan NameError fix
2014-12-17 22:00:25 -06:00
9f0bf85ec1
Fix typo in msfbinscan
2014-12-18 02:43:24 +01:00
Borja Merino