Commit Graph

1669 Commits

Author SHA1 Message Date
Spencer McIntyre 3684bc6f30 Land #14661, payload/x86/exec with metasm conversoin and NULL free variant 2021-03-12 12:02:44 -05:00
Geyslan G. Bem dc6dac3af1 payload/x86/exec.rb - logic inverted for readability
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-03-11 19:11:34 -03:00
Geyslan G. Bem 1da8c111b7 payloads/x86/exec.rb - set NullFreeVersion as required
Set NullFreeVersion as a required option.
Remove nullfreeversion redundant assignment.

Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-03-11 18:31:35 -03:00
Spencer McIntyre 9ef6bf384e Update payload cached sizes 2021-02-19 15:35:36 -05:00
agalway-r7 8a339f54c1 Land #14734, updates and runs rubocop against recent modules
Rubocop recently landed modules
2021-02-19 13:48:47 +00:00
Alan Foster 5b3fde7735 Rubocop recently landed modules 2021-02-16 15:08:08 +00:00
dwelch-r7 b95be3ed10 Zeitwerk rex folder 2021-02-08 12:24:12 +00:00
Tim W f3eafc22a2 Land #14685, linux/x64/shell_bind_tcp_random_port improvements 2021-02-05 17:14:50 +00:00
Tim W 4a68ef17fd update mettle payload cached sizes 2021-02-01 11:50:35 -05:00
Geyslan G. Bem ab307fbd87 payload/x64: shell_bind_tcp_random_port improvement
This patch reduces the payload to 52 bytes while preserving its functionality
using coordinated xchg instructions.
It also guarantees dup2 call without garbage in rax.

Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-01-29 16:58:14 -03:00
Geyslan G. Bem 4ed8bd8052 payloads/x86/exec.rb - new NullFreeVersion advanced option
This patch adds the OptBool NullFreeVersion advanced option.

Its default value is false. When set as true, generate will output a
self included null-free version of the payload without need of encoding.

Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-01-26 14:24:03 -03:00
Geyslan G. Bem 34223874b6 payloads/x86/exec.rb - metasm, refactoring
This patch converts shellcode to metasm and adds new behaviour to CMD option.

Now if CMD is empty or unset, a 20 byte not null-free execve payload is build.
The arbitrary command option continues the same when CMD is set.

Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-01-26 11:09:25 -03:00
bwatters 1ad7ae2707 Land #14621, Refactor (reduce) linux/x64/shell_bind_tcp_random_port
Merge branch 'land-14621' into upstream-master
2021-01-21 12:38:53 -06:00
adfoster-r7 da7a51fbca Land #14584, implement the zeitwerk autoloader within lib/msf/base 2021-01-18 13:11:08 +00:00
Geyslan G. Bem d0cf0ef0e9 get rid of tabs
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-01-17 11:18:59 -03:00
Geyslan G. Bem 5edb4cd135 reduce to 53 bytes and refactor to embed nasm
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-01-17 11:11:07 -03:00
Spencer McIntyre 65dfaf9453 Update the metasploit-payloads and mettle gems 2021-01-14 10:16:17 -05:00
Christophe De La Fuente 6092fa32ae Land #14515, fix reverse_awk and bind_awk exit behavior 2021-01-08 14:37:38 +01:00
dwelch-r7 c0912b358c Fix tests 2021-01-05 16:20:42 +00:00
dwelch-r7 bad5ccbc49 Remove msf/base requires 2021-01-05 14:59:46 +00:00
Shelby Pace 9e41dfec62 Land #14334, close socket in x86 bind payloads 2021-01-04 11:50:07 -06:00
adfoster-r7 28bcad82c8 Land #14528, Note that Meterpreter now requires Windows XP SP2 or newer 2020-12-18 16:50:34 +00:00
Shelby Pace 4fb8cc06c0 Land #14517, capture stderr and use metasm 2020-12-17 15:13:44 -06:00
Spencer McIntyre 900c4367ec Note that Meterpreter now requires Windows XP SP2 or newer 2020-12-17 14:32:28 -05:00
Alan Foster 00109a68be Eagerly load hrr_rb_ssh within reverse_ssh module 2020-12-16 16:55:15 +00:00
Tim W 8c7bffa229 fix #14516, fix stderr output in osx/x64/shell_reverse_tcp 2020-12-15 00:05:42 +00:00
Tim W bc4dc2df15 convert osx/x64/shell_reverse_tcp to Metasm 2020-12-15 00:04:05 +00:00
Tim W c7ca0e4ef5 Fix #14510, fix reverse_awk and bind_awk exit behavior 2020-12-14 17:10:07 +00:00
Tim W fd36ac6e24 convert bind_awk and reverse_awk payloads to squiggly heredoc 2020-12-14 16:09:10 +00:00
dwelch-r7 49a6b1b257 Remove requires that sneaked in while the PR was up 2020-12-07 11:02:10 +00:00
dwelch-r7 1617b3ec9b Use zeitwerk for lib/msf/core folder 2020-12-07 10:31:45 +00:00
bwatters 9abf199fbe Lands #14337, Ref #14336 : Fix Windows PingBack_Reverse_TCP Payload
Merge branch 'land-14337' into upstream-master
2020-12-02 16:39:19 -06:00
dwelch-r7 c92d97ef7d Add requires for python payloads 2020-11-30 05:36:30 +00:00
Spencer McIntyre 6bdc7a11a3 Tweak the Python single payload descriptions 2020-11-20 16:33:35 -05:00
Tim W 14048fc4f5 fix shell_reverse_udp payload cached size 2020-11-17 18:30:24 +08:00
Tim W 9613897294 fix python/shell_reverse_udp 2020-11-17 17:33:43 +08:00
Tim W 552cd5a2fc python code golf and convert to squiggly heredoc 2020-11-06 14:16:07 +08:00
Tim 856239f2a8 Apply code golf suggestions from acammack
Co-authored-by: acammack-r7 <adam_cammack@rapid7.com>
2020-11-06 12:41:36 +08:00
Tim W 65d1cc568e update compatibility in description 2020-11-05 18:19:05 +08:00
Tim W 06d109d2c5 update payload cached sizes 2020-11-05 18:11:14 +08:00
Tim W 766fbd98aa fix python/shell_bind_tcp on python3 2020-11-05 18:07:28 +08:00
Romain Lesteven 5132882c58 Ref #14333 : Fix Linux_BindTcp Payload 2020-11-03 13:11:32 +01:00
Romain Lesteven 1977419932 Ref #14336 : Fix Windows PingBack_Reverse_TCP Payload 2020-11-03 13:03:29 +01:00
Tim W 41d984e6cc fix #14207, fix python/shell_reverse_tcp on python3 2020-10-30 17:42:57 +08:00
Jeffrey Martin a8d41c59e2 update payload sizes from 2.0.22 gem 2020-10-21 16:35:43 -05:00
Spencer McIntyre f2e3480469 Just give travis the sizes it's expecting 2020-09-09 08:49:01 -04:00
Spencer McIntyre 1b77d01f23 Fix a payload cache size generation issue and bump the gem 2020-09-04 15:43:55 -04:00
Adam Galway 242656bc07 Land #13978, proxy support for Python Meterpreter 2020-09-04 10:50:41 +01:00
Spencer McIntyre c2d49384c0 Land #13980, Reflective PE Payloads Added 2020-09-02 13:22:30 -04:00
Spencer McIntyre 67df4ea672 Adjust verbiage and whitespace, remove a buggy asm instruction 2020-09-02 13:20:50 -04:00