98e588e066
Merge pull request #21410 from inkognitobo/fix/shiro-configurable-gadget-chain
...
Add configurable JAVA_GADGET_CHAIN option to Shiro module
2026-05-06 17:13:10 -04:00
b7e1d7ea77
ftp: replace @banner_version with banner_version helper method
2026-05-06 14:46:53 +01:00
48f178a93f
ftp_anonymous: Feedback fixes
2026-05-06 13:44:43 +01:00
ac20cf43e7
ftp_anonymous: Use FTP mixin
2026-05-06 13:32:13 +01:00
00c9e33a68
ftp_anonymous: report_service if missing banner
2026-05-06 13:32:13 +01:00
825e16bdc5
ftp_anonymous: report_host() when host up, service down
2026-05-06 13:32:13 +01:00
d647f5f768
ftp_anonymous: Make sure to always disconnect
2026-05-06 13:32:13 +01:00
1b1edf938a
ftp_anonymous: Clean up FTP banner
2026-05-06 13:32:13 +01:00
0f530ec016
ftp_anonymous: Make rubocop happy
2026-05-06 13:32:12 +01:00
51b4107dc7
ftp_anonymous: Update ruby code
2026-05-06 13:32:12 +01:00
0f696e572c
ftp_anonymous: Add notes
2026-05-06 13:32:12 +01:00
f6484ad724
ftp_anonymous: Store loot
2026-05-06 13:32:12 +01:00
a0a774e724
ftp_anonymous: Improve logic
2026-05-06 13:32:12 +01:00
efd59106a0
ftp_anonymous: Report vuln
2026-05-06 13:32:12 +01:00
3e320a9db3
ftp_anonymous: Report service
2026-05-06 13:32:12 +01:00
726d372257
ftp_anonymous: Remove line prefix
2026-05-06 13:32:12 +01:00
2c40a74483
ftp_anonymous: Add CVE
2026-05-06 13:32:12 +01:00
b40623a0e1
ftp_anonymous: Move module
2026-05-06 13:32:12 +01:00
c15d513766
Add configurable JAVA_GADGET_CHAIN option to Shiro module
...
The gadget chain was previously hardcoded to CommonsCollections2.
Add a JAVA_GADGET_CHAIN OptEnum so operators can select the chain
that matches the target's classpath without modifying the module.
Default remains CommonsCollections2 to preserve existing behaviour.
2026-05-05 17:55:20 +02:00
bc5347f464
automatic module_metadata_base.json update
Command Shell Acceptance / cmd windows-2022 (push) Has been cancelled
Command Shell Acceptance / linux ubuntu-latest (push) Has been cancelled
Command Shell Acceptance / powershell windows-2025 (push) Has been cancelled
LDAP Acceptance / LDAP Acceptance - ubuntu-latest - Ruby 3.2 (push) Has been cancelled
Lint / Lint msftidy (3.2) (push) Has been cancelled
Meterpreter Acceptance / build (push) Has been cancelled
MSSQL Acceptance / mcr.microsoft.com/mssql/server:2019-latest - ubuntu-latest - Ruby 3.2 (push) Has been cancelled
MSSQL Acceptance / mcr.microsoft.com/mssql/server:2022-latest - ubuntu-latest - Ruby 3.2 (push) Has been cancelled
MySQL Acceptance / mariadb:latest - ubuntu-latest - Ruby 3.2 (push) Has been cancelled
MySQL Acceptance / mysql:latest - ubuntu-latest - Ruby 3.2 (push) Has been cancelled
Postgres Acceptance / postgres:16.2 - ubuntu-latest - Ruby 3.2 (push) Has been cancelled
Postgres Acceptance / postgres:9.4 - ubuntu-latest - Ruby 3.2 (push) Has been cancelled
SMB Acceptance / build (push) Has been cancelled
Verify / Docker Build (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.2 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag content" MSF_FEATURE_DEFER_MODULE_LOADS=1 (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.2 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag content" REMOTE_DB=1 (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.2 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag content" (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.2 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag ~content" REMOTE_DB=1 (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.2 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag ~content" (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.3 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag content" REMOTE_DB=1 (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.3 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag content" (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.3 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag ~content" REMOTE_DB=1 (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.3 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag ~content" (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.4 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag content" REMOTE_DB=1 (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.4 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag content" (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.4 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag ~content" REMOTE_DB=1 (push) Has been cancelled
Verify / ubuntu-latest - Ruby 3.4 - bundle exec rake rspec-rerun:spec SPEC_OPTS="--tag ~content" (push) Has been cancelled
Command Shell Acceptance / Generate report (push) Has been cancelled
LDAP Acceptance / Generate report (push) Has been cancelled
MSSQL Acceptance / Generate report (push) Has been cancelled
MySQL Acceptance / Generate report (push) Has been cancelled
Postgres Acceptance / Generate report (push) Has been cancelled
2026-05-04 13:49:03 +00:00
edb6844c8f
Merge pull request #21404 from zeroSteiner/feat/cve-2026-31431
...
Fix ARMLE exec and add to Copy Fail
2026-05-04 09:37:28 -04:00
909c8df2cf
automatic module_metadata_base.json update
2026-05-01 13:50:15 +00:00
0c81638fff
Fix ARMLE exec and add to Copy Fail
2026-04-30 20:03:04 -04:00
557ff0d068
Defer loading dependencies
2026-05-01 00:07:59 +01:00
dc97d1e97e
Merge pull request #21395 from zeroSteiner/feat/cve-2026-31431
...
Add exploit for CVE-2026-31431 (Copy Fail)
2026-04-30 17:19:08 -05:00
66995d3987
Only allow x64 and AARCH64 for now
2026-04-30 17:51:30 -04:00
cdcdb5fe88
Normalize reported ARMLE architectures from Meterpreter
2026-04-30 17:09:33 -04:00
0e02f10078
Add support for more architectures
2026-04-30 17:09:32 -04:00
c0e5ceb531
Add an AARCH64 exec payload
2026-04-30 17:09:32 -04:00
e14ce079bb
Appease rubocop
2026-04-30 15:18:18 -04:00
22a9dc4522
Add docs
2026-04-30 14:54:09 -04:00
55f9216698
Finish the exploit check and cleanup methods
2026-04-30 14:39:46 -04:00
12e08fb451
Add an expanded check
2026-04-30 10:54:17 -04:00
3bee31ff5e
Update checkcodes and bug fixes
2026-04-30 15:42:10 +01:00
d0a205f776
Add the initial LPE exploit
2026-04-30 09:53:35 -04:00
49ea1a3391
Merge pull request #21359 from adfoster-r7/improve-checkcode-messages-12
...
Add human-readable descriptions to CheckCode returns in modules
2026-04-30 10:46:41 +01:00
b3fbeced43
Merge pull request #21355 from adfoster-r7/improve-checkcode-messages-8
...
Add human-readable descriptions to CheckCode returns in modules
2026-04-30 10:44:04 +01:00
7b3aef8ede
Merge pull request #21353 from adfoster-r7/improve-checkcode-messages-6
...
Add human-readable descriptions to CheckCode returns in modules
2026-04-30 10:43:21 +01:00
b59ced5057
Add human-readable descriptions to CheckCode returns in multi/http exploit modules (A-O)
2026-04-30 00:25:30 +01:00
0bf595c2ec
Add human-readable descriptions to CheckCode returns in unix/webapp exploit modules
2026-04-30 00:16:04 +01:00
2634142f0d
Merge pull request #21323 from jheysel-r7/feat/http_to_ldap
...
HTTP to LDAP Relay Module
2026-04-29 15:20:10 -04:00
4847d88441
HTTP to LDAP Relay Module and Supporting Libraries
...
Remove unnecessary code
Remove commented out code
Added documentation
Responded to Spencer and Copilot
Add anonymous identity check
Doc update
Warning surpression
Renamed ldap_client to relayed_connection
Comments
2026-04-29 07:48:42 -07:00
41a937c70c
automatic module_metadata_base.json update
2026-04-27 11:20:38 +00:00
63f4f358c7
Merge pull request #21092 from sjanusz-r7/fix-macos-mingw-syscall_inject-compilation
...
Fix syscall_inject compilation errors on MacOS with MinGW 15
2026-04-27 12:09:19 +01:00
1e3727ba87
Add human-readable descriptions to CheckCode returns in remaining multi exploit modules
2026-04-25 10:52:11 +01:00
e00515c172
Update logic for aux modules having called report_vuln already
2026-04-24 16:26:49 +01:00
3ecbadd032
Improve vuln and vuln attempt tracking
2026-04-24 16:26:49 +01:00
7c4f15a024
Merge pull request #21354 from adfoster-r7/improve-checkcode-messages-7
...
Add human-readable descriptions to CheckCode returns in modules
2026-04-24 16:13:19 +01:00
7479078bf1
Merge pull request #21356 from adfoster-r7/improve-checkcode-messages-9
...
Add human-readable descriptions to CheckCode returns in modules
2026-04-24 15:25:45 +01:00
b09686efaf
Merge pull request #21357 from adfoster-r7/improve-checkcode-messages-10
...
Add human-readable descriptions to CheckCode returns in modules
2026-04-24 15:25:19 +01:00
Spencer McIntyre