f287f50be7
Land #18187 , Fixes incorrect usage of pack/unpack directives
2023-07-21 11:40:02 +01:00
1af22cfd22
Land #18096 , Add initial proxies datastore support for kerberos workflows
2023-07-21 11:37:04 +01:00
08a2a293a9
Add proxies datastore support to kerberos
2023-07-21 11:19:50 +01:00
8e0a909b18
Fixes incorrect usage of pack/unpack directives
2023-07-19 11:39:00 +01:00
36e0d8f915
Land #18121 , Add proper SubjectAltName parsing
2023-06-27 16:54:33 +01:00
e298788a28
Land #18049 , Update jenkins login scanner to work with newer versions
2023-06-22 14:04:24 +01:00
0609d246f3
adds more future proofing to implementation
2023-06-21 14:19:24 +01:00
0ca978fe9d
Return arrays of values where applicable
...
Return arrays of values where applicable and update method docs.
2023-06-16 12:19:11 -04:00
0555b4ada0
Add SAN parsing with a proper ASN.1 definition
...
The ORAddress field is left out because it's significantly more
complicated than the rest and doesn't appear to be necessary at this
time.
2023-06-15 15:57:02 -04:00
9776a6eb4a
Land #18078 , add SID support for icpr_cert
...
pulls in latest changes
2023-06-15 13:39:31 -05:00
5b77805d68
Land #18078 , add support for SID in icpr_cert
2023-06-15 13:17:09 -05:00
6988227ee4
Fix AS-REQ with PKINIT and NTDS_CA_SECURITY_EXT
2023-06-14 16:18:04 -04:00
3ee02a0e41
Add the ALT_SID datastore option
2023-06-14 16:17:58 -04:00
834ad18d28
Land #18069 , Handle LDAP UnbindRequest
...
Remote::JndiInjection: handle LDAP UnbindRequest
2023-06-12 09:53:38 -04:00
4c817ce1de
Land #17946 , CVE-2023-21839 - Oracle Weblogic RCE
...
CVE-2023-21839 - Oracle Weblogic PreAuth Remote Command Execution via ForeignOpaqueReference IIOP Deserialization
2023-06-09 14:55:43 -04:00
694c1006e4
Add more IPv6 support in to the module
2023-06-09 12:24:35 -05:00
2acc014014
Fix AS-REQ with PKINIT and NTDS_CA_SECURITY_EXT
2023-06-08 15:10:35 -04:00
47835b57a7
Add the ALT_SID datastore option
2023-06-08 15:10:27 -04:00
451735ad15
Fix exception handler & add doc
2023-06-06 17:43:22 +02:00
18ddd72285
Update jenkins login scanner to work with newer versions
2023-06-06 11:54:55 +01:00
e6b1ae2af8
Remote::JndiInjection: handle LDAP UnbindRequest
2023-06-06 00:54:40 -04:00
9349dd24e3
Add a proper definition for NtdsCaSecurityExt
2023-05-31 17:31:33 -04:00
d8255157c9
Land #18021 , Fix #cd for Powershell Sessions
2023-05-25 14:26:01 -04:00
afb31b0f21
Add a function to escaple cmd.exe string literals
2023-05-23 15:17:39 -04:00
60f6574bf3
Land #17965 , add module for AD CS cert management
2023-05-22 09:50:53 -05:00
dcbc6d19c5
Update #validate_query_result!
...
The function required a filter argument, but not every query has a
filter. By removing it, we can reuse the same logic for other operations
including modifications.
2023-05-22 09:21:20 -04:00
f464401dde
Land #17782 , Add fetch payloads
...
Add http wget cmd based fetch payload for Linux and Windows
2023-05-18 12:18:27 -04:00
548a2d7ab4
Add fetch payloads for Windows and Linux x64
2023-05-18 10:47:29 -05:00
eb959e2e40
Land #17060 , GSoC Project: Implement HTTP-Trace enabled login scanners
2023-05-11 15:45:01 +01:00
b8856bbb87
fix capitalization of Htlm_fileName JSON parram
2023-05-05 09:59:11 +03:00
adec2f4fbb
Update the login.rb code so we aren't as strict on cookies since older versions sometimes use JSESSIONIDADAPSSO instead of JSESSIONIDSSO for login cookies
2023-05-04 15:40:39 -05:00
8c7ae1b6bb
Minor update to comments for clarity
2023-05-04 15:12:32 -05:00
c088430bd9
improve sanity checks in login method and other code review fixes
2023-05-04 15:12:31 -05:00
f27fc28411
Perform review updates
2023-05-04 15:12:31 -05:00
9b596b3efd
minor changes
2023-05-04 15:12:31 -05:00
1c6c1dffc6
final code review fixes
2023-05-04 15:12:31 -05:00
9fe7db4648
improve status codes handling
2023-05-04 15:12:30 -05:00
aede036b02
additional changes from code review
2023-05-04 15:12:30 -05:00
ba687c49aa
Fix a few typos
2023-05-04 15:12:29 -05:00
a5e86a0c51
code review improvements, including renaming silent param
2023-05-04 15:12:29 -05:00
0fd743d851
Add in fixes from code review
2023-05-04 15:12:29 -05:00
dd075d5c99
library improvements after code review, module update
2023-05-04 15:12:28 -05:00
a2cf29ab98
partial fixes after library code review
2023-05-04 15:12:28 -05:00
61d1cf1460
Fix up things identified during review
2023-05-04 15:12:28 -05:00
e639460b9f
fix library comments for json_post_data.rb
2023-05-04 15:12:27 -05:00
47d374497a
create adaudit plus mixin and move some stuff there
2023-05-04 15:12:27 -05:00
cda2e9610b
Land #17820 , optimising the nagiosxi modules
...
This PR refactors the authenticated nagiosxi modules and mixins..
2023-04-14 16:21:26 -04:00
275963eca2
Land #17353 , Persist icpr cert as pkcs12 credential
2023-04-12 13:16:18 +01:00
a6b478e046
Land #17832 , Two modules for UniRPC - CVE-2023-28502 and CVE-2023-28503
2023-04-12 11:43:13 +02:00
875ad34b62
Persist icpr cert as pkcs12 credential
...
Update creds command to support pkcs12
2023-04-11 16:25:25 +01:00
adfoster-r7