f27ef55391
Land #7992 , Improve Signature Evasions for browser exploits
2017-02-23 16:32:49 -06:00
e3f613ecc6
Bypass: Metasploit OS detection
...
SEP is triggering on HTTP POSTs which start with `os_name`
2017-02-23 15:42:04 -05:00
84ab3c66cc
Use obfuscated JS in BES
2017-02-22 12:47:36 -05:00
5fd531028c
ome minor guards and spec fixes
...
some minor conditional guards and spec fixes
2017-01-03 14:38:51 -06:00
390f69313a
Fix grammar in browser_exploit_server
2016-07-21 11:51:10 -05:00
ff4d150449
Show IP for print_*
2016-05-24 14:12:54 -05:00
3bc020178f
use the correct variable for cookie expiration
2016-05-24 07:16:55 -05:00
5e36a3128c
Fix #5197 , Fixed yard doc errors
...
Fix #5197 Fixed issues that caused errors during yard doc generation
2016-04-21 13:06:00 -05:00
85acfabfca
remove various library workarounds for the datastore not preserving types
2016-03-05 23:10:57 -06:00
1f58ad15ac
Browser::Exploit::Server needs to have vprint*
2016-02-15 16:21:24 -06:00
0582e7e3ca
Return nil instead of "null"
...
A scenario is when FF disables Flash, BES returns "null", and when
modules try to use Gem::Version, the "null" is considered a malformed
data and it won't be able to continue.
2015-07-14 01:25:41 -05:00
8384be6466
Fix rand_text_alpha and bump max exploit count to 21
2015-07-14 01:02:01 -05:00
d6565a9aee
Merge branch 'bes_flash' into bapv2_flash_test
2015-07-14 00:34:54 -05:00
8fb6bedd94
Delete as3 detecotr
2015-07-13 18:23:39 -05:00
8928c5529c
Fix Javascript code
2015-07-13 17:43:04 -05:00
244d9bae64
Add max timeout
2015-07-13 16:52:25 -05:00
9116460cb0
Add prototype with AS3
2015-07-13 16:33:55 -05:00
21e44f235e
Example of doing Flash detection with Flash
2015-07-08 13:18:57 -05:00
dc0ce88279
We're note actually using Mubex, it might be causing a crash too
...
A problem we are seeing is that sometimes when BAP terminates
(ie: jobs -K), we hit a deadlock while jobs are trying to cleanup,
and sometimes that might cause msfconsole to crash and terminate.
We suspect this Mubex is a contributing factor but it has been hard
to prove because it's very hard to reproduce the crash.
2015-07-07 00:32:20 -05:00
7858d63036
Typo
2015-07-02 15:34:44 -05:00
43d47ad83e
Port BAPv2 to Auxiliary
2015-07-02 15:29:24 -05:00
6e31b9ef53
Initialize and rename the BES mutex
2015-07-02 15:11:03 -05:00
c5c7de0091
Rework browser profiles, get back to functional mode
2015-07-02 14:58:43 -05:00
c0969d4497
Fix module.uuid references
2015-07-02 13:45:38 -05:00
0e7f610836
Finish browser profile rework in BES
2015-07-02 12:58:21 -05:00
b9a8308138
Replace BAP profiles with a framework-instance hash
2015-07-02 12:53:24 -05:00
e549580ad2
Linux doesn't like the uppercase
2015-06-18 00:40:47 -05:00
188b15b17f
Fix the symbol vs string prob
2015-06-05 16:18:56 -05:00
ecdeeea5c6
Make sure super is called
2015-06-05 11:11:40 -05:00
7f4b51f0ff
Fix nil bug
2015-05-23 02:08:51 -05:00
60b0be8e3f
Fix a lot of bugs
2015-05-23 01:59:29 -05:00
2d310a473b
Do some documentation
2015-05-14 23:32:11 -05:00
a2ebfe2bf8
Make parse_rank a little bit smarter
2015-05-13 18:05:10 -05:00
a7e265b07e
Proper cleanup for notes
2015-05-13 13:46:06 -05:00
2e2b536e8f
Update
2015-05-08 00:28:46 -05:00
35f564d03e
I just shaved off 8 seconds, oh yeah
2015-04-30 00:32:33 -05:00
62e3f5e56a
Small cleanup
2015-04-29 23:15:56 -05:00
a34531ba5d
Msgpack cannot handle symbols, so we're forced to strings
2015-04-29 23:14:52 -05:00
ca32db3e23
Merge branch 'upstream-master' into BAPv2
2015-04-29 18:53:37 -05:00
f3e026db6c
Profile sharing works for the first time
2015-04-29 18:45:08 -05:00
c18c5c7b6e
Actually take apart profiling?
2015-04-29 11:06:00 -05:00
943fc18092
Take apart browser profiling
2015-04-29 11:04:54 -05:00
9cebe769c2
Change plan
2015-04-29 01:29:24 -05:00
39663a7e18
Some progress
2015-04-29 01:19:39 -05:00
4224008709
Delete print_debug/vprint_debug
2015-04-21 11:14:03 -05:00
51dd88114b
Fix grammer in comments
2015-04-13 13:21:41 +05:00
8f03cadb92
Forgot to remove print_debug
2015-03-25 16:08:47 -05:00
3c4da5c3ff
Update BES rspec
2015-03-24 00:10:18 -05:00
2900f57afd
It looks like this works
2015-03-23 16:46:53 -05:00
e520ace1f1
Stash
2015-03-23 14:21:46 -05:00
wchen-r7