86381a6394
Land #20412 , swaps to psh_exec in powershell/exec_powershell
...
Remove errant write_log call and swap to the all-in-one psh_exec rath…
2025-09-25 12:49:33 +02:00
5260da1867
Removes redundant variables
2025-09-23 16:22:40 +02:00
6e01e7a5f6
Minor code changes
2025-09-23 16:16:41 +02:00
788b9c27b4
Use sub-technique and add missing modules
2025-09-16 18:39:23 +02:00
7ce2bdc979
Add T1003 "OS credential dumping" MITRE technique
2025-09-09 10:45:46 +02:00
090743abbd
Update error message when there may be a timeout
2025-08-27 11:04:43 -05:00
0ce1617288
Bump rails to 7.2
2025-07-28 12:29:58 +01:00
dcfa448cf8
Remove now unused timeout
2025-07-23 10:40:24 -05:00
07692ff241
Remove errant write_log call and swap to the all-in-one psh_exec rather than execute_script
2025-07-23 09:40:35 -05:00
a4b14d8b64
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
fb02b4ade5
Revert "Bump rails version to 7.2"
2025-06-17 12:20:49 +01:00
62f357207c
Minor bug fixes
2025-06-12 16:41:10 +01:00
39bbf4ba05
fix #20280
2025-06-03 19:51:16 +02:00
d9e96f91ca
see https://github.com/rapid7/metasploit-framework/pull/20273#issuecomment-2932671250
2025-06-03 11:21:07 +02:00
9cccad015d
fix(post/windows/manage/remove_host): handle whitespace parsing robustly
...
See #20157
2025-05-31 12:47:33 +02:00
f6faa5598b
Fixes modules to now correctly use a hash with report note
2025-05-22 10:59:50 +01:00
943c94774a
Modules: Resolve Rubocop Lint/Syntax violations
2025-05-21 18:27:24 +10:00
1982d81e22
Merge pull request #20098 from smashery/execute-assembly32
...
Execute assembly32
2025-05-13 16:49:25 -05:00
5abf5480d5
modules/post/windows/gather/credentials: Update PackRat module descriptions
2025-05-13 23:10:04 +10:00
81a405355c
modules/post: Resolve RuboCop violations and typos
2025-05-13 09:23:28 +10:00
9ee2ec861f
Merge pull request #20120 from bcoles/rubocop-modules-post-windows
...
modules/post/windows: Resolve RuboCop violations
2025-05-09 09:33:17 -04:00
45336dd612
modules/post/windows: Resolve RuboCop violations
2025-05-09 10:51:17 +10:00
a99333a9ca
Modules: Remove quotes surrounding quoted license constant
2025-05-03 12:57:40 +10:00
7b8cf0bfbb
modules/post/windows/gather: Resolve RuboCop violations
2025-04-30 11:23:07 +10:00
6ec67d6a26
32-bit .NET working
2025-04-29 09:44:03 +10:00
333c38b39e
modules/post/windows/gather/credentials: Resolve RuboCop violations
2025-04-28 09:08:33 +10:00
afbf9af930
Merge pull request #19600 from adfoster-r7/mark-enum-chrome-as-superseded
...
Mark older browser modules for windows as superceded
2024-10-31 11:33:03 +00:00
5e217fb93a
Mark enum_chrome as superceded
2024-10-30 16:21:05 +00:00
7b745b2dcb
Merge pull request #19506 from xaitax/enum_browsers
...
Add Browser Data Extraction for Chromium- and Gecko-based Browsers
2024-10-30 15:30:56 +00:00
6fb49a27e0
[Added] Improvements after review
2024-10-24 13:48:50 +02:00
88825a022c
Remove trailing whitespace
2024-10-23 23:41:20 +01:00
1fa9c6a774
[Fixed] Opera Support
2024-10-21 17:03:37 +02:00
e6aa695e99
Update enum_browsers.rb
2024-10-21 09:48:24 +02:00
ecd9f99d16
[Added] Extract Browser Cache
2024-10-20 23:15:18 +02:00
a2d8d7dd76
[Added] Extract Installed Browser Extensions (Name & Version)
2024-10-20 21:23:06 +02:00
6d272759dc
Add Browser Version Detection and display System Information
2024-10-11 12:13:48 +02:00
91beef1dbb
Add BROWSER_TYPE option to choose between Chromium, Gecko, or both for data extraction
2024-10-10 20:08:14 +02:00
47c4679d6b
Fixed migration logic
2024-10-10 19:28:03 +02:00
d3ae5a9ab0
Abort when session is running under SYSTEM privileges.
2024-10-10 13:25:11 +02:00
cd487715c4
[Added] Migration to explorer.exe for user-context based extraction
2024-10-10 12:32:19 +02:00
967f7c30a0
Update enum_unattend.rb
...
Included checks for '.vmimport' files which may have been created by the AWS EC2 VMIE service which will still contain cleartext credentials.
2024-10-07 17:58:30 +01:00
9eda0338af
Improved readability and other small fixes
2024-10-06 10:19:10 +02:00
6d28e4b350
Update modules/post/windows/gather/enum_browsers.rb
...
Co-authored-by: Valentin Lobstein <88535377+Chocapikk@users.noreply.github.com >
2024-09-27 08:03:02 +02:00
4a9754313a
Update modules/post/windows/gather/enum_browsers.rb
...
Co-authored-by: Valentin Lobstein <88535377+Chocapikk@users.noreply.github.com >
2024-09-27 08:02:57 +02:00
1e67d200d2
Update modules/post/windows/gather/enum_browsers.rb
...
Co-authored-by: Valentin Lobstein <88535377+Chocapikk@users.noreply.github.com >
2024-09-27 08:02:48 +02:00
78f7327ea7
Update enum_browsers.rb
2024-09-26 20:49:42 +02:00
6cc6841821
Update modules/post/windows/gather/enum_browsers.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2024-09-26 20:44:45 +02:00
f106f1cf2c
Add enum_browsers post exploitation module
...
This post-exploitation module extracts sensitive browser data from both Chromium-based and Gecko-based browsers on the target system. It supports the decryption of passwords and cookies using Windows Data Protection API (DPAPI) and can extract additional data such as browsing history, keyword search history, download history, autofill data, and credit card information.
2024-09-26 19:21:42 +02:00
62a3f73e70
Update rubocop target ruby version
2024-07-24 16:47:17 +01:00
f8c69e434d
Land #19173 , Add CarotDAV FTP PackRat module
...
Merge branch 'land-19173' into upstream-master
2024-05-17 16:49:33 -05:00
msutovsky-r7