Commit Graph

58926 Commits

Author SHA1 Message Date
dwelch-r7 1617b3ec9b Use zeitwerk for lib/msf/core folder 2020-12-07 10:31:45 +00:00
Metasploit d7852716f9 automatic module_metadata_base.json update 2020-12-06 01:34:10 -06:00
Grant Willcox a96a290d32 Land #14467, Add missing CheckCode::Unknown return code if the response object is empty to fix #14462 2020-12-06 01:25:17 -06:00
Grant Willcox 02ebe745d9 Improve the CheckCode::Unknown No Response error message to make it clearer to users 2020-12-06 01:24:51 -06:00
Metasploit 59f42314ac automatic module_metadata_base.json update 2020-12-06 00:02:43 -06:00
Grant Willcox e26d6ca683 Land #14458, Add auxiliary support to autocheck mixin 2020-12-05 23:54:41 -06:00
Grant Willcox b6f342c3ab Land #14460, Bump payloads gem to 2.0.24 to fix issue #14428, a unicode character error in stdapi sys.process.execute 2020-12-05 21:34:30 -06:00
Brendan Coles eb7514d94d nimcontroller_bof: return CheckCode::Unknown if response is empty 2020-12-06 03:16:39 +00:00
Metasploit 0c48ae86bf automatic module_metadata_base.json update 2020-12-05 08:28:39 -06:00
cgranleese-r7 96c62aea20 Lands #14411 Fixes eternalblue-win8 to run only with python3 2020-12-05 14:22:32 +00:00
Grant Willcox 9376accc05 Land #14410, Add synchronization to the DLL payload template 2020-12-04 16:08:18 -06:00
Metasploit 7ef0dd40b1 Bump version of framework to 6.0.21 2020-12-04 11:39:09 -06:00
Grant Willcox fd4749488f Land #14445, Update XML import to utilize base64 decoding on the body 6.0.20 2020-12-04 11:06:12 -06:00
Metasploit 5716b53803 automatic module_metadata_base.json update 2020-12-04 10:11:49 -06:00
Grant Willcox 5961bf700d Land #14314, Pulse Secure Connect Client Credentials Gatherer 2020-12-04 10:04:43 -06:00
Tim W 12607d0a34 Land #14449, allow running local exploits from meterpreter prompt 2020-12-04 14:38:49 +00:00
Spencer McIntyre e66df07324 Merge pull request #13 from timwr/pr-14449
fix meterpreter > run tab completion
2020-12-03 18:13:17 -05:00
Tim W 00bd024da2 fix #14428, fix execute files with unicode characters in stdapi sys.process.execute 2020-12-03 15:30:23 -06:00
Metasploit 5a80d3d649 Bump version of framework to 6.0.20 2020-12-03 11:53:31 -06:00
Tim W 52a0ccd58d fix meterpreter > run tab completion 2020-12-03 16:48:47 +00:00
A Galway c83c21bcea additional string to byte conversions 2020-12-03 16:21:55 +00:00
Matthew Hagan a232839a81 Update Unserialized Body For Binary Type
Co-authored-by: acammack-r7 <adam_cammack@rapid7.com>
2020-12-03 09:18:16 -07:00
Metasploit 0e67748326 automatic module_metadata_base.json update 6.0.19 2020-12-03 10:03:35 -06:00
adfoster-r7 cd032278ba Land #14437, ensure the module cache doesn't mutate module's strings when using force_encoding 2020-12-03 15:57:26 +00:00
Spencer McIntyre 2b48c4234c Land #14442, fix the session cookie for the Simple PHP Blog exploit 2020-12-03 08:47:20 -05:00
Quentin Kaiser e8ea9e56ee Print a status message when no credentials are found. 2020-12-03 10:19:56 +01:00
Quentin Kaiser c8f534e420 Merge branch 'enum_pulsesecure' of github.com:QKaiser/metasploit-framework into enum_pulsesecure 2020-12-03 10:12:54 +01:00
Quentin Kaiser 4f947ac2cb Properly close files that we open and properly capture file open error in get_username. 2020-12-03 10:12:33 +01:00
Alan Foster 76e967353e Add auxiliary support to autocheck mixin 2020-12-03 01:09:06 +00:00
bwatters 9abf199fbe Lands #14337, Ref #14336 : Fix Windows PingBack_Reverse_TCP Payload
Merge branch 'land-14337' into upstream-master
2020-12-02 16:39:19 -06:00
Quentin Kaiser 585bc99903 Proper return values
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com>
2020-12-02 21:34:56 +01:00
Quentin Kaiser f4bb5f7e10 Uniform error handling applied to all functions interacting with 'session' object. 2020-12-02 20:51:29 +01:00
Quentin Kaiser 94af390649 Document Ruby construct that might be unclear to newcomers. 2020-12-02 20:43:39 +01:00
Quentin Kaiser dbd3f2e1bf Revert back on AutoCheck. 2020-12-02 20:42:05 +01:00
Spencer McIntyre a322647913 Change the cookie to PHPSESSID from my_id for the Simple PHP blog exploit 2020-12-02 10:09:05 -05:00
bwatters 5d7014bf39 Land #14298, Windows post-exploitation gather module - Memory dumping via Avast AvDump utility
Merge branch 'land-14298' into upstream-master
2020-12-02 08:30:38 -06:00
adfoster-r7 2b3d4b986f Land #14447, add additional exempt labels to stale bot 2020-12-02 09:21:23 +00:00
Quentin Kaiser bf0d4b4c3f Better regular expression for version line. 2020-12-02 10:05:17 +01:00
Quentin Kaiser 5d89b32f58 prepend class rather than import it 2020-12-02 10:03:38 +01:00
Quentin Kaiser 8edcae4bb7 Handle a case where Pulse Secure is installed but no saved entry exists in the registry. Handle a case where the session runs as system on an affected version. 2020-12-02 09:57:28 +01:00
Spencer McIntyre 7303975377 Initialize the exploit UI earlier on so error messages are displayed 2020-12-01 16:36:39 -05:00
Spencer McIntyre 35362b2503 Set a default payload when running local exploit modules 2020-12-01 16:30:29 -05:00
Spencer McIntyre 2b1d7f18ec Tab complete local exploits when running modules from within meterpreter
This does slow down tab completion so maybe it should be left out?
2020-12-01 16:01:57 -05:00
Spencer McIntyre f82ce5335d Support running local exploits from the meterpreter context 2020-12-01 15:22:48 -05:00
dwelch-r7 6f0bf7d2a6 Add more exempt labels 2020-12-01 13:20:14 +00:00
adfoster-r7 2cb2e38c49 Land #14443, Add explicit requires for python payloads to avoid NameError exceptions 2020-11-30 09:50:36 +00:00
dwelch-r7 c92d97ef7d Add requires for python payloads 2020-11-30 05:36:30 +00:00
dwelch-r7 3824f3923f Land #14394, Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion
Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion
2020-11-30 05:15:29 +00:00
SunCSR Team 3fbe851d71 Update tomcat_ghostcat.rb 2020-11-30 08:33:32 +07:00
justinopatrny c200a274b2 Corrected headers check for retrieved cookie
Previous get_cookies method not working properly
2020-11-29 19:07:44 -06:00