Commit Graph

3133 Commits

Author SHA1 Message Date
wchen-r7 e8a32bdd10 Make MaxSessions/RealList/Custom404 work better 2015-05-22 12:40:56 -05:00
wchen-r7 2bb6f390c0 Add session limiter and fix a race bug in notes removal 2015-05-22 12:22:41 -05:00
wchen-r7 c29bb35e28 Change datastore name 2015-05-21 10:15:03 -05:00
wchen-r7 3ee02d3626 Hmm bug 2015-05-21 00:36:40 -05:00
wchen-r7 31c60b48c8 Don't forget to doc 2015-05-21 00:08:04 -05:00
wchen-r7 6e8ee2f3ba Add whitelist feature 2015-05-21 00:05:14 -05:00
RageLtMan 27e12754fe Import Powershell libraries and sample post module
Sync critical functionality from Rex and Msf namespaces dealing
with encoding and processing of powershell script for exploit
or post namespaces.

Import Post module. Primarily adds a psh_exec method which will be
replaced in the next PR with @benpturner's work integrated into
the Post module namespace.

Provide a sample metasploit windows post module to show the
execution pipeline - entire subs process can be removed and the
module reduced to a psh_exec(datastore['SCRIPT']).

This commit is designed to provide sync between the SVIT fork and
upstream. Pending commits to be based on this work will provide
access to .NET compiler in the Post namespace to be used for
dynamic persistent payload creation on target and the import of
@benpturner's work.
2015-05-20 18:18:51 -04:00
wchen-r7 93900087c7 Resolve #5219, user-configurable HTTP timeout
Resolve #5219
2015-05-20 13:30:45 -05:00
wchen-r7 46f389fecd Documentation 2015-05-18 18:41:37 -05:00
wchen-r7 fbbd25f4bc I never use this thing 2015-05-18 17:56:17 -05:00
wchen-r7 89be3fc1f2 Do global requirement comparison in BAP 2015-05-18 16:27:18 -05:00
jvazquez-r7 ea8e62f0fb Add #file_dropper_file_exist? 2015-05-18 14:13:12 -05:00
jvazquez-r7 129ed7fb7a Add yard documentation 2015-05-18 10:27:04 -05:00
wchen-r7 2d310a473b Do some documentation 2015-05-14 23:32:11 -05:00
wchen-r7 8bcdd08f34 Some basic code in place for real-time exploit list generation 2015-05-14 19:09:38 -05:00
wchen-r7 104e0456ec Do cleanup for jobs 2015-05-13 23:41:05 -05:00
wchen-r7 a2ebfe2bf8 Make parse_rank a little bit smarter 2015-05-13 18:05:10 -05:00
wchen-r7 1a8ab91ce3 Configurable max exploits 2015-05-13 16:23:22 -05:00
wchen-r7 7617217eff Add ability to exclude 2015-05-13 15:55:19 -05:00
wchen-r7 66391493f4 Pass only the datastore options we need 2015-05-13 15:34:01 -05:00
wchen-r7 e4fed019ac Hide exploit paths
As an user, you shouldn't be using exploit paths so we hide them
by default.
2015-05-13 13:51:59 -05:00
wchen-r7 a7e265b07e Proper cleanup for notes 2015-05-13 13:46:06 -05:00
wchen-r7 605e492781 Avoid #create if possible 2015-05-12 01:55:22 -05:00
wchen-r7 9bba95c2a3 Include more options 2015-05-12 01:47:03 -05:00
jvazquez-r7 0fb21af247 Verify deletion at on_new_session moment 2015-05-11 18:56:18 -05:00
wchen-r7 c5be193357 Maybe put custom content at the bottom? 2015-05-11 18:21:50 -05:00
jvazquez-r7 b1dd2a63fc On new session, check if file has been REALLY deleted 2015-05-11 17:14:42 -05:00
jvazquez-r7 ecb23d09cc Do initial fix 2015-05-11 15:02:46 -05:00
wchen-r7 12038ed3e1 Fix #5244, Remove unnecessary check for mysql_drop_and_create_sys_exec
Fix #5244, MySQL is always return OK so it doesn't seem to be so
important to check res for DROP FUNCTION IF EXISTS sys_exe
2015-05-11 14:17:51 -05:00
wchen-r7 30b1c508f1 javascript portion 2015-05-10 16:50:32 -05:00
wchen-r7 2ea5d49902 Update set payload description 2015-05-08 00:53:25 -05:00
wchen-r7 785a1f4205 Modify set payload 2015-05-08 00:48:04 -05:00
wchen-r7 2e2b536e8f Update 2015-05-08 00:28:46 -05:00
wchen-r7 8e86a92210 Update 2015-05-08 00:25:34 -05:00
wchen-r7 8cd2d442ff Modify show options 2015-05-07 20:54:30 -05:00
wchen-r7 95f087ffd3 Some progress 2015-05-07 19:26:38 -05:00
wchen-r7 97807e09ca Lad #5125, Group Policy startup exploit 2015-05-06 11:17:01 -05:00
jvazquez-r7 0ca0d3d045 Improve nt_create_andx path parsing 2015-05-04 15:20:51 -05:00
wchen-r7 35f564d03e I just shaved off 8 seconds, oh yeah 2015-04-30 00:32:33 -05:00
wchen-r7 62e3f5e56a Small cleanup 2015-04-29 23:15:56 -05:00
wchen-r7 a34531ba5d Msgpack cannot handle symbols, so we're forced to strings 2015-04-29 23:14:52 -05:00
wchen-r7 3fef6362bd Fix sorting 2015-04-29 21:55:21 -05:00
wchen-r7 ca32db3e23 Merge branch 'upstream-master' into BAPv2 2015-04-29 18:53:37 -05:00
wchen-r7 f3e026db6c Profile sharing works for the first time 2015-04-29 18:45:08 -05:00
wchen-r7 c18c5c7b6e Actually take apart profiling? 2015-04-29 11:06:00 -05:00
wchen-r7 943fc18092 Take apart browser profiling 2015-04-29 11:04:54 -05:00
wchen-r7 9cebe769c2 Change plan 2015-04-29 01:29:24 -05:00
wchen-r7 39663a7e18 Some progress 2015-04-29 01:19:39 -05:00
wchen-r7 65b7659d27 Some progress 2015-04-29 01:01:36 -05:00
wchen-r7 43f5323e8d More progress 2015-04-28 21:26:31 -05:00