86b7ec4518
Address comments from the review
2023-10-12 09:50:19 -04:00
de8e392b7b
Only randomize the URI once
2023-10-12 09:50:19 -04:00
5577413bd9
Add additional classes for payload loading
...
This fixes the java/shell_reverse_tcp payload
2023-10-12 09:27:26 -04:00
f712c67441
Support URIPATH in Java::HTTP::ClassLoader
...
The URIPATH must end with / due to how the package names are requested
from the web server in a nested directory structure. #on_request_uri
also needed to be updated to check for the relative resource.
2023-10-12 09:27:26 -04:00
1b172768b4
Use upstream ruby-mysql in Remote::MYSQL
...
* ... and dependents
2023-10-12 13:08:35 +02:00
1071341b23
Changes from code review
2023-10-09 10:31:36 +11:00
7876912eab
Changes-as-per-comments
2023-10-08 02:49:46 -04:00
4d87d4e114
Save Kerberos tickets in the MSF cache upon a successful login
2023-10-03 13:45:41 +11:00
185cba04c3
Support validating partial handshakes
2023-10-03 10:19:26 +11:00
ea189d6c34
Changes-to-the-helper-lib
2023-10-02 13:35:28 -04:00
5087e0ffe3
Land #18197 , Ldap login scanner module
...
Adds a new login scanner module for LDAP
2023-10-02 10:56:56 -04:00
587c327944
Correctly align sec trailer and stub along a 16-byte boundary
2023-09-28 17:25:22 +10:00
1bd229056e
Support Kerberos auth for DCERPC
2023-09-28 16:26:06 +10:00
1a3b00e593
shifting-appropriate-methods-to-auth-lib
2023-09-27 12:23:29 +00:00
2232877d03
Properly clone the path strings before storing them
2023-09-26 13:26:02 +02:00
c1abf37d0c
Use passed in workspace if available, default to current workspace
2023-09-25 13:30:18 +01:00
d64ed33cdf
code spell for a bunch of modules
2023-09-24 17:42:00 -04:00
6a04f5ed3d
Be less strict on hostname matching for ccache credentials
2023-09-18 14:54:20 +01:00
c1a44c8b7f
Land #18359 , Forge ticket fix
2023-09-18 13:05:25 +01:00
5c93b3880a
Don't add extra PACs for silver tickets
2023-09-13 15:41:09 +10:00
6b8fe05865
Add new PAC types required by DCs for accepting TGTs as valid
2023-09-12 17:19:10 +10:00
1af852b240
Add remote ldap specs
2023-09-11 16:33:01 +01:00
80757fc717
Add missing require
2023-09-11 16:33:01 +01:00
fc89c9939a
Add LDAP login scanner
2023-09-11 16:33:01 +01:00
8f013d7aef
Add ldap login scanner module
2023-09-11 16:33:01 +01:00
235c142274
Merge remote-tracking branch 'origin/flask_unsign' into flask_unsign
2023-09-11 10:27:00 -04:00
40716cb28b
Make the separator configurable
2023-09-08 08:56:45 -04:00
143e1c82b5
Add validation functionality to FlaskUnsign
2023-09-07 16:19:58 -04:00
213b9f9589
Merge remote-tracking branch 'upstream/master' into flask_unsign
2023-09-06 15:39:37 -04:00
f467e0747a
review comments
2023-08-28 17:39:02 -04:00
1bd14dd8f4
error handling for apache modules
2023-08-21 18:12:26 -04:00
ceb46cc2ef
lib and spec updates
2023-08-20 20:07:42 -04:00
a45792877a
lib and spec updates
2023-08-20 19:37:22 -04:00
d84c15cf21
lib and spec updates
2023-08-17 15:29:20 -04:00
f125ad8870
review comments
2023-08-08 17:44:35 -04:00
7b024f21bd
apache nifi h2 rce
2023-08-08 17:44:35 -04:00
5cdac38ac0
apache nifi h2 rce
2023-08-08 17:44:35 -04:00
f287f50be7
Land #18187 , Fixes incorrect usage of pack/unpack directives
2023-07-21 11:40:02 +01:00
1af22cfd22
Land #18096 , Add initial proxies datastore support for kerberos workflows
2023-07-21 11:37:04 +01:00
08a2a293a9
Add proxies datastore support to kerberos
2023-07-21 11:19:50 +01:00
8e0a909b18
Fixes incorrect usage of pack/unpack directives
2023-07-19 11:39:00 +01:00
2c2f855e20
working cookies for superset
2023-07-06 07:12:39 -04:00
c9249fd9b7
basics
2023-07-02 12:37:58 -04:00
36e0d8f915
Land #18121 , Add proper SubjectAltName parsing
2023-06-27 16:54:33 +01:00
e298788a28
Land #18049 , Update jenkins login scanner to work with newer versions
2023-06-22 14:04:24 +01:00
1b562dd02b
Revert "Improve AMSI bypass on new Windows"
...
This reverts commit f97ab80224c8f942cc03
2023-06-21 16:35:41 -05:00
0609d246f3
adds more future proofing to implementation
2023-06-21 14:19:24 +01:00
0ca978fe9d
Return arrays of values where applicable
...
Return arrays of values where applicable and update method docs.
2023-06-16 12:19:11 -04:00
0555b4ada0
Add SAN parsing with a proper ASN.1 definition
...
The ORAddress field is left out because it's significantly more
complicated than the rest and doesn't appear to be necessary at this
time.
2023-06-15 15:57:02 -04:00
9776a6eb4a
Land #18078 , add SID support for icpr_cert
...
pulls in latest changes
2023-06-15 13:39:31 -05:00
Spencer McIntyre