Adrian Șendroiu
c2ce203281
lib/msf/base/sessions/meterpreter.rb: Use &. across the entire chain when handling datastore['AutoLoadExtensions']
2025-10-24 14:30:56 +03:00
Brendan
10d1f53692
Merge pull request #19975 from dledda-r7/feat/split-stdapi
...
Split Stdapi
2025-10-08 13:00:04 -05:00
dledda-r7
5f2adab0e7
fix: updated stdapi loading logic
2025-10-03 09:53:50 -04:00
Diego Ledda
4ede319b0a
fix: review changes
2025-09-05 15:21:49 +02:00
Diego Ledda
55d8a3f33c
fix: adding issue reference
2025-09-04 14:36:55 +02:00
dledda-r7
96c6a14e95
fix: removing unhook extension autoload
2025-09-03 11:22:02 -04:00
msutovsky-r7
e8b441a5d3
Land #20012 , MeterpreterOptions break-up and default extension loading removal
...
MeterpreterOptions break-up and default extension loading removal
2025-08-07 15:28:56 +02:00
adfoster-r7
c5e342d874
Fix show options crash
2025-08-06 10:26:56 +01:00
Diego Ledda
8985cd773d
Update lib/msf/base/sessions/meterpreter_options/osx.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-08-04 14:59:20 +02:00
Diego Ledda
25e053804e
Update lib/msf/base/sessions/meterpreter_options/php.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-08-04 14:59:09 +02:00
Diego Ledda
ee05f88770
Update lib/msf/base/sessions/meterpreter_options/python.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-08-04 14:59:01 +02:00
Diego Ledda
56fc33f7f2
Update lib/msf/base/sessions/meterpreter_options/windows.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-08-04 14:58:50 +02:00
Diego Ledda
d45193b7ac
Update lib/msf/base/sessions/meterpreter_options/java.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-08-04 14:58:25 +02:00
Diego Ledda
fa68bd8353
Update lib/msf/base/sessions/meterpreter_options/bsd.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-08-04 14:58:16 +02:00
Diego Ledda
2fac43c3ed
Update lib/msf/base/sessions/meterpreter_options/apple_ios.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-08-04 14:57:59 +02:00
Diego Ledda
9e10d243b9
Update lib/msf/base/sessions/meterpreter_options/android.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-08-04 14:57:49 +02:00
Diego Ledda
ef6e59dcc3
Update lib/msf/base/sessions/meterpreter_options/linux.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-08-04 14:57:40 +02:00
dledda-r7
f18787e5c5
fix: addressing review comments
2025-08-04 08:35:23 -04:00
dledda-r7
5e3e975b7d
fix: renaming Osx to OSX for autoload support
2025-06-02 09:22:46 -04:00
dledda-r7
c4ca4d6999
fix: re-include OSX specific option
2025-06-02 08:14:59 -04:00
dledda-r7
70bafdfcd8
fix: delete of meterpreter_options.rb
2025-06-02 08:07:14 -04:00
dledda-r7
e44043b88a
fix: restored deleted comments
2025-06-02 08:07:13 -04:00
dledda-r7
a7f4da5431
feat: split platform-specific meterpreter options on different modules, adding AutoLoadExtensions option (AppleIos,Php,Python,Java,Osx,Android)
2025-06-02 08:07:06 -04:00
dledda-r7
44617cbe37
feat: split platform-specific meterpreter options on different modules, adding AutoLoadExtensions option (Windows, Linux)
2025-06-02 08:06:05 -04:00
Christophe De La Fuente
4ccab4543d
Register VulnAttempts for both Exploit and Auxiliary modules
2025-05-28 18:19:12 +02:00
bcoles
5aa91bd57c
Rubocop: Resolve Rubocop Style/RedundantRegexpArgument violations
2025-05-24 13:34:32 +10:00
Ashley Donaldson
b0f8df0894
Flow the action through to the exploit class
2025-04-29 17:13:02 +10:00
sjanusz-r7
bb510bf256
Fix check_simple arg & searching by port integer
2025-04-08 15:41:39 +01:00
Spencer McIntyre
468f168f04
Call LDAP whoami when the username is not present
2025-03-27 15:00:53 -04:00
adfoster-r7
95e8b31d4b
Merge pull request #19925 from zeroSteiner/fix/auxiliary/validate
...
Call #validate in run_simple like it is in call_simple
2025-03-05 18:29:01 +00:00
msutovsky-r7
7a1892e6e7
Land #19745 , applying argument escaping to other shells
...
Apply escaping args to other command shells
2025-03-05 09:24:15 +01:00
Ashley Donaldson
fa4dd1d420
Add error handling on unknown shell type
2025-03-05 18:16:31 +11:00
Spencer McIntyre
f2bcf34d51
Apply the same refactoring to exploits
2025-03-04 17:01:46 -05:00
Spencer McIntyre
f12ddc7252
Apply the same refactoring to posts
2025-03-04 17:01:46 -05:00
Spencer McIntyre
8d3d8d8662
Call #validate in run_simple like it is in call_simple
2025-03-04 13:05:56 -05:00
adfoster-r7
8e9c144e2c
Consolidate datastore with fallbacks logic
2025-02-09 20:26:52 +00:00
jheysel-r7
6861b1fb67
Merge pull request #19729 from sempervictus/bug/shell_command_overlap
...
Fix overlap of shell built-in commands with host's
2025-02-06 10:27:12 -08:00
Ashley Donaldson
e024c115f3
Don't do any escaping on platforms with unknown escaping
2025-01-10 11:20:28 +11:00
Ashley Donaldson
851beb77b0
Change from code review
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2024-12-20 08:48:38 +11:00
Ashley Donaldson
25cb21908a
Apply escaping args to other command shells
2024-12-18 10:44:38 +11:00
Ashley Donaldson
40f2eaaab1
Recognise broken SMB sessions and close them
2024-12-16 19:52:19 +11:00
RageLtMan
df6bd846e5
Add . prefix tip to shell command help
2024-12-15 18:28:18 -05:00
RageLtMan
54bec338c3
Fix overlap of shell built-in commands with host's
...
When a shell session is established against a system which offers
limited shells, its very common to run into something like "help"
being a native command in the target. MSF now intercepts those as
built-ins and presents the MSF shell help instead of letting the
user see the relevant output from the target.
Implement a fix by allowing the user to prepend built-ins with '.'
to pass-through execution of the intended command (such as '.help'
being executed as 'help') to the target.
Testing:
Local testing with racadm SSH shell - works as intended
2024-12-15 18:06:33 -05:00
sjanusz-r7
566e12b69e
Add error_callback to SSH Command Stream
2024-11-25 16:43:59 +00:00
sjanusz-r7
358e79bd3c
Handle SSH errors by closing the session
2024-11-17 14:53:42 +00:00
adfoster-r7
26e041dbfe
Merge pull request #19108 from smashery/new_cmd_exec
...
New process launch API
2024-10-17 00:08:06 +01:00
Ashley Donaldson
9972587fef
Handle weird PowerShell edge case
2024-10-16 16:04:39 +11:00
Ashley Donaldson
205adfe2fd
Handle edge case in command shell when input contains backslash-quote combination already
2024-10-16 10:26:29 +11:00
Ashley Donaldson
1c4b22028d
Comment neatening from code review
2024-10-12 14:36:09 +11:00
Ashley Donaldson
0cf227ff00
Change API. Support backwards compatibility for PHP
2024-10-12 14:36:09 +11:00