Spencer McIntyre
3684bc6f30
Land #14661 , payload/x86/exec with metasm conversoin and NULL free variant
2021-03-12 12:02:44 -05:00
Geyslan G. Bem
dc6dac3af1
payload/x86/exec.rb - logic inverted for readability
...
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com >
2021-03-11 19:11:34 -03:00
Geyslan G. Bem
1da8c111b7
payloads/x86/exec.rb - set NullFreeVersion as required
...
Set NullFreeVersion as a required option.
Remove nullfreeversion redundant assignment.
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com >
2021-03-11 18:31:35 -03:00
Tim W
f3eafc22a2
Land #14685 , linux/x64/shell_bind_tcp_random_port improvements
2021-02-05 17:14:50 +00:00
Tim W
4a68ef17fd
update mettle payload cached sizes
2021-02-01 11:50:35 -05:00
Geyslan G. Bem
ab307fbd87
payload/x64: shell_bind_tcp_random_port improvement
...
This patch reduces the payload to 52 bytes while preserving its functionality
using coordinated xchg instructions.
It also guarantees dup2 call without garbage in rax.
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com >
2021-01-29 16:58:14 -03:00
Geyslan G. Bem
4ed8bd8052
payloads/x86/exec.rb - new NullFreeVersion advanced option
...
This patch adds the OptBool NullFreeVersion advanced option.
Its default value is false. When set as true, generate will output a
self included null-free version of the payload without need of encoding.
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com >
2021-01-26 14:24:03 -03:00
Geyslan G. Bem
34223874b6
payloads/x86/exec.rb - metasm, refactoring
...
This patch converts shellcode to metasm and adds new behaviour to CMD option.
Now if CMD is empty or unset, a 20 byte not null-free execve payload is build.
The arbitrary command option continues the same when CMD is set.
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com >
2021-01-26 11:09:25 -03:00
bwatters
1ad7ae2707
Land #14621 , Refactor (reduce) linux/x64/shell_bind_tcp_random_port
...
Merge branch 'land-14621' into upstream-master
2021-01-21 12:38:53 -06:00
adfoster-r7
da7a51fbca
Land #14584 , implement the zeitwerk autoloader within lib/msf/base
2021-01-18 13:11:08 +00:00
Geyslan G. Bem
d0cf0ef0e9
get rid of tabs
...
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com >
2021-01-17 11:18:59 -03:00
Geyslan G. Bem
5edb4cd135
reduce to 53 bytes and refactor to embed nasm
...
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com >
2021-01-17 11:11:07 -03:00
Spencer McIntyre
65dfaf9453
Update the metasploit-payloads and mettle gems
2021-01-14 10:16:17 -05:00
dwelch-r7
bad5ccbc49
Remove msf/base requires
2021-01-05 14:59:46 +00:00
dwelch-r7
1617b3ec9b
Use zeitwerk for lib/msf/core folder
2020-12-07 10:31:45 +00:00
Jeffrey Martin
f69dedf40b
update payload sizes for mettle 1.0.2 gem
2020-08-03 12:32:33 -05:00
Spencer McIntyre
dc9764a6ff
Bump metasploit-payloads to 2.0.5 and updates payload sizes
2020-06-19 12:20:01 -04:00
Brent Cook
6ec8e942c2
update sizes
2020-06-09 08:59:51 +10:00
Tim W
def95c41ce
update payload cached sizes
2020-03-30 16:12:42 +08:00
Brent Cook
4c93933b6e
HTTP pivot fixes for Meterpreter
2020-03-24 05:40:02 -05:00
Brent Cook
40cc170578
bump payload sizes
2020-03-05 10:12:14 -06:00
Shelby Pace
bcd181c87d
require bind tcp
2019-09-03 09:14:34 -05:00
bwatters-r7
6bf10e1f91
Fixups for syntax
2019-07-29 11:55:51 -05:00
bwatters-r7
79b7bbd2cf
Update payload cache size and fix import bug
2019-07-26 13:52:36 -05:00
bwatters-r7
2f804faed9
Rubocop and @acammack cleanup suggestions
2019-07-26 12:36:59 -05:00
bwatters-r7
7c2d214af2
Clean up debugging, move options to one place and delete superflous file
...
change the uuid handing to prevent changes to it when it gets put in payloads
2019-07-25 19:45:05 -05:00
bwatters-r7
6ae3f97c4a
Maybe include the super pingback type in the payloads?
2019-07-25 19:44:11 -05:00
bwatters-r7
39f193e649
Stupid last trailing space
2019-07-25 19:43:13 -05:00
bwatters-r7
3e765090e2
Fix some spacing
2019-07-25 19:43:13 -05:00
bwatters-r7
08a765df81
Shut up, nmsftidy.... I hope
2019-07-25 19:42:51 -05:00
asoto-r7
247f246475
Linux pingback payloads
2019-07-25 19:42:26 -05:00
CCob
aaa017e9cd
Fix issue where Linux x64 shell_find_port did not set the sockaddr_len value
2019-06-02 09:23:09 +01:00
苇子
8af7ed9526
Update shell_bind_tcp.rb
...
fix a mistake in payloads/singles/linux/armle/shell_bind_tcp.rb
2019-05-25 17:51:30 +08:00
bwatters-r7
068ba6e3f2
Update Payload cache sizes
2019-05-21 12:40:27 -05:00
Brent Cook
930952e994
Land #11374 , add super-small version of bind tcp random payload
2019-05-17 03:13:40 -07:00
Brent Cook
9ae01c98c9
merge super-tiny payload into tiny payload, invoke on available size
2019-05-17 03:12:01 -07:00
Brent Cook
5f75dd1bd2
bump payload sizes
2019-04-18 09:40:12 -05:00
Brent Cook
e7974e4955
bump mettle and other gems
2019-04-11 17:26:15 -05:00
bcoles
1e3be0fd3f
Update modules/payloads/singles/linux/x86/shell_bind_tcp_super_small_random_port.rb
...
Co-Authored-By: Ekzorcist <infosecurity@ya.ru >
2019-02-10 22:32:00 +03:00
bcoles
346a73d52a
Update modules/payloads/singles/linux/x86/shell_bind_tcp_super_small_random_port.rb
...
Co-Authored-By: Ekzorcist <infosecurity@ya.ru >
2019-02-10 22:31:23 +03:00
Ekzorcist
0b768d32be
Add metasm format of code for Super small Shell Bind TCP Random Port Payload
2019-02-09 15:28:56 +03:00
Ekzorcist
d327dc79f0
Add Super Small Shell Bind TCP Random Port Payload (x86)
2019-02-08 15:46:31 +03:00
Brent Cook
4a344093a4
bump payloads
2019-02-06 22:32:24 -06:00
bwatters
239cce53ea
Land #11039 , Add linux x64 ipv6 reverse shell
...
Merge branch 'land-11039' into upstream-master
2019-02-01 16:21:24 -06:00
Jeffrey Martin
5a63e629e4
update payload sizes for mettle 0.5.4
2019-01-31 00:12:45 -06:00
bwatters
6c9a5b3fea
Update Cache Sizes
2019-01-28 15:53:19 -06:00
bwatters
9e109c7e7c
Update cache size
2018-12-28 16:08:15 -06:00
epi
cb3ea8dfed
Remove binding.pry from bind payload.
...
In response to
https://github.com/rapid7/metasploit-framework/pull/11039#discussion_r241890477 .
2018-12-14 16:32:19 -06:00
Brent Cook
0345c8f66c
update mettle payloads
...
This is a large update to mettle payloads including:
* Adds globbing support to the `ls` command (https://github.com/rapid7/mettle/pull/139 )
* Fixes crashes on iOS platforms when cryptTLV is enabled (https://github.com/rapid7/mettle/pull/142 )
* Fixes display of the OS version on macOS and iOS (https://github.com/rapid7/mettle/pull/143 )
* Fixes the local port handling for pivoted client network connections (https://github.com/rapid7/mettle/pull/144 )
* Fixes an unaligned memory access in TLV packet handling, needed for some CPUs (https://github.com/rapid7/mettle/pull/145 )
* Fixes some compatibility issues building on Solaris (https://github.com/rapid7/mettle/pull/147 )
* Updated libpcap, mbedtls, and libcurl to the latest versions (https://github.com/rapid7/mettle/pull/146 )
2018-12-06 21:16:41 -06:00
epi
c3a40d3752
Remove trailing whitespace at EOL.
2018-12-06 20:18:21 -06:00