Commit Graph

247 Commits

Author SHA1 Message Date
Spencer McIntyre 3684bc6f30 Land #14661, payload/x86/exec with metasm conversoin and NULL free variant 2021-03-12 12:02:44 -05:00
Geyslan G. Bem dc6dac3af1 payload/x86/exec.rb - logic inverted for readability
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-03-11 19:11:34 -03:00
Geyslan G. Bem 1da8c111b7 payloads/x86/exec.rb - set NullFreeVersion as required
Set NullFreeVersion as a required option.
Remove nullfreeversion redundant assignment.

Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-03-11 18:31:35 -03:00
Tim W f3eafc22a2 Land #14685, linux/x64/shell_bind_tcp_random_port improvements 2021-02-05 17:14:50 +00:00
Tim W 4a68ef17fd update mettle payload cached sizes 2021-02-01 11:50:35 -05:00
Geyslan G. Bem ab307fbd87 payload/x64: shell_bind_tcp_random_port improvement
This patch reduces the payload to 52 bytes while preserving its functionality
using coordinated xchg instructions.
It also guarantees dup2 call without garbage in rax.

Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-01-29 16:58:14 -03:00
Geyslan G. Bem 4ed8bd8052 payloads/x86/exec.rb - new NullFreeVersion advanced option
This patch adds the OptBool NullFreeVersion advanced option.

Its default value is false. When set as true, generate will output a
self included null-free version of the payload without need of encoding.

Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-01-26 14:24:03 -03:00
Geyslan G. Bem 34223874b6 payloads/x86/exec.rb - metasm, refactoring
This patch converts shellcode to metasm and adds new behaviour to CMD option.

Now if CMD is empty or unset, a 20 byte not null-free execve payload is build.
The arbitrary command option continues the same when CMD is set.

Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-01-26 11:09:25 -03:00
bwatters 1ad7ae2707 Land #14621, Refactor (reduce) linux/x64/shell_bind_tcp_random_port
Merge branch 'land-14621' into upstream-master
2021-01-21 12:38:53 -06:00
adfoster-r7 da7a51fbca Land #14584, implement the zeitwerk autoloader within lib/msf/base 2021-01-18 13:11:08 +00:00
Geyslan G. Bem d0cf0ef0e9 get rid of tabs
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-01-17 11:18:59 -03:00
Geyslan G. Bem 5edb4cd135 reduce to 53 bytes and refactor to embed nasm
Signed-off-by: Geyslan G. Bem <geyslan@gmail.com>
2021-01-17 11:11:07 -03:00
Spencer McIntyre 65dfaf9453 Update the metasploit-payloads and mettle gems 2021-01-14 10:16:17 -05:00
dwelch-r7 bad5ccbc49 Remove msf/base requires 2021-01-05 14:59:46 +00:00
dwelch-r7 1617b3ec9b Use zeitwerk for lib/msf/core folder 2020-12-07 10:31:45 +00:00
Jeffrey Martin f69dedf40b update payload sizes for mettle 1.0.2 gem 2020-08-03 12:32:33 -05:00
Spencer McIntyre dc9764a6ff Bump metasploit-payloads to 2.0.5 and updates payload sizes 2020-06-19 12:20:01 -04:00
Brent Cook 6ec8e942c2 update sizes 2020-06-09 08:59:51 +10:00
Tim W def95c41ce update payload cached sizes 2020-03-30 16:12:42 +08:00
Brent Cook 4c93933b6e HTTP pivot fixes for Meterpreter 2020-03-24 05:40:02 -05:00
Brent Cook 40cc170578 bump payload sizes 2020-03-05 10:12:14 -06:00
Shelby Pace bcd181c87d require bind tcp 2019-09-03 09:14:34 -05:00
bwatters-r7 6bf10e1f91 Fixups for syntax 2019-07-29 11:55:51 -05:00
bwatters-r7 79b7bbd2cf Update payload cache size and fix import bug 2019-07-26 13:52:36 -05:00
bwatters-r7 2f804faed9 Rubocop and @acammack cleanup suggestions 2019-07-26 12:36:59 -05:00
bwatters-r7 7c2d214af2 Clean up debugging, move options to one place and delete superflous file
change the uuid handing to prevent changes to it when it gets put in payloads
2019-07-25 19:45:05 -05:00
bwatters-r7 6ae3f97c4a Maybe include the super pingback type in the payloads? 2019-07-25 19:44:11 -05:00
bwatters-r7 39f193e649 Stupid last trailing space 2019-07-25 19:43:13 -05:00
bwatters-r7 3e765090e2 Fix some spacing 2019-07-25 19:43:13 -05:00
bwatters-r7 08a765df81 Shut up, nmsftidy.... I hope 2019-07-25 19:42:51 -05:00
asoto-r7 247f246475 Linux pingback payloads 2019-07-25 19:42:26 -05:00
CCob aaa017e9cd Fix issue where Linux x64 shell_find_port did not set the sockaddr_len value 2019-06-02 09:23:09 +01:00
苇子 8af7ed9526 Update shell_bind_tcp.rb
fix a mistake in payloads/singles/linux/armle/shell_bind_tcp.rb
2019-05-25 17:51:30 +08:00
bwatters-r7 068ba6e3f2 Update Payload cache sizes 2019-05-21 12:40:27 -05:00
Brent Cook 930952e994 Land #11374, add super-small version of bind tcp random payload 2019-05-17 03:13:40 -07:00
Brent Cook 9ae01c98c9 merge super-tiny payload into tiny payload, invoke on available size 2019-05-17 03:12:01 -07:00
Brent Cook 5f75dd1bd2 bump payload sizes 2019-04-18 09:40:12 -05:00
Brent Cook e7974e4955 bump mettle and other gems 2019-04-11 17:26:15 -05:00
bcoles 1e3be0fd3f Update modules/payloads/singles/linux/x86/shell_bind_tcp_super_small_random_port.rb
Co-Authored-By: Ekzorcist <infosecurity@ya.ru>
2019-02-10 22:32:00 +03:00
bcoles 346a73d52a Update modules/payloads/singles/linux/x86/shell_bind_tcp_super_small_random_port.rb
Co-Authored-By: Ekzorcist <infosecurity@ya.ru>
2019-02-10 22:31:23 +03:00
Ekzorcist 0b768d32be Add metasm format of code for Super small Shell Bind TCP Random Port Payload 2019-02-09 15:28:56 +03:00
Ekzorcist d327dc79f0 Add Super Small Shell Bind TCP Random Port Payload (x86) 2019-02-08 15:46:31 +03:00
Brent Cook 4a344093a4 bump payloads 2019-02-06 22:32:24 -06:00
bwatters 239cce53ea Land #11039, Add linux x64 ipv6 reverse shell
Merge branch 'land-11039' into upstream-master
2019-02-01 16:21:24 -06:00
Jeffrey Martin 5a63e629e4 update payload sizes for mettle 0.5.4 2019-01-31 00:12:45 -06:00
bwatters 6c9a5b3fea Update Cache Sizes 2019-01-28 15:53:19 -06:00
bwatters 9e109c7e7c Update cache size 2018-12-28 16:08:15 -06:00
epi cb3ea8dfed Remove binding.pry from bind payload.
In response to
https://github.com/rapid7/metasploit-framework/pull/11039#discussion_r241890477.
2018-12-14 16:32:19 -06:00
Brent Cook 0345c8f66c update mettle payloads
This is a large update to mettle payloads including:

 * Adds globbing support to the `ls` command (https://github.com/rapid7/mettle/pull/139)
 * Fixes crashes on iOS platforms when cryptTLV is enabled (https://github.com/rapid7/mettle/pull/142)
 * Fixes display of the OS version on macOS and iOS (https://github.com/rapid7/mettle/pull/143)
 * Fixes the local port handling for pivoted client network connections (https://github.com/rapid7/mettle/pull/144)
 * Fixes an unaligned memory access in TLV packet handling, needed for some CPUs (https://github.com/rapid7/mettle/pull/145)
 * Fixes some compatibility issues building on Solaris (https://github.com/rapid7/mettle/pull/147)
 * Updated libpcap, mbedtls, and libcurl to the latest versions (https://github.com/rapid7/mettle/pull/146)
2018-12-06 21:16:41 -06:00
epi c3a40d3752 Remove trailing whitespace at EOL. 2018-12-06 20:18:21 -06:00