dwelch-r7
8717e91a3c
Land #18823 , Fix module metadata platform list comparison
2024-02-12 17:31:46 +00:00
Spencer McIntyre
d67aa2e250
Fix a bug where clean up was not being invoked
2024-02-12 17:24:24 +00:00
cgranleese-r7
982f92b9b6
Improve error message for incompatible sessions
2024-02-12 17:02:42 +00:00
Christophe De La Fuente
a90ff41f71
Use casecmp? instead of casecmp
2024-02-12 16:20:12 +01:00
Spencer McIntyre
7e5938061c
Fix a bug where clean up was not being invoked
2024-02-12 08:51:10 -05:00
adfoster-r7
5fa1ce8ed2
Add support for newer sqlcmd versions
2024-02-12 11:51:02 +00:00
Zach Goldman
94223f05fc
update relevant modules to work with sessions
...
separate out optional session logic
fixing session handling
2024-02-09 13:18:49 -06:00
sjanusz-r7
30fc29e0f5
Use PostgreSQL session type for modules
2024-02-09 15:38:06 +00:00
adfoster-r7
9caa2fac17
Land #18747 , Add new mssql session type
2024-02-09 15:27:43 +00:00
Zach Goldman
2c60780dc0
Add MSSQL session Type
2024-02-09 07:27:01 -06:00
Spencer McIntyre
11ca24e290
Specify the record type for PTR lookups
2024-02-08 11:22:33 -05:00
adfoster-r7
8b71afdd53
Land #18759 , Updates MySQL modules to now support the new MySQL session type
2024-02-08 12:39:51 +00:00
cgranleese-r7
02ae96edb0
Addresses RPORT not defaulting correctly
2024-02-07 16:07:15 +00:00
Dean Welch
792708c07b
Remove all references to Msf::SymbolicModule
2024-02-07 15:08:47 +00:00
cgranleese-r7
b060809a8d
Addresses logoff PR feedback
2024-02-07 12:51:04 +00:00
cgranleese-r7
e80f0ef8cd
Removes session logic from mixins and uses client instead of datastore for rhost and rport
2024-02-06 14:11:16 +00:00
cgranleese-r7
0e9cad6d45
Adds MySQL session type
2024-02-02 14:39:37 +00:00
adfoster-r7
48221e594d
Land #18704 , Leverage the module metadata cache in the module_sets
2024-02-02 14:16:46 +00:00
adfoster-r7
7ac4387d35
Land #18696 , Convert MSSQL mixin to class
2024-02-02 14:14:34 +00:00
adfoster-r7
372b792b8c
Land #18761 , Add alert to show user the new session options available in Metasploit 6.4
2024-02-02 10:25:32 +00:00
Zach Goldman
35778e92b2
client consolidation
...
convert first module from remote to client
move client to rex
remove metasploit mixin
2024-02-01 17:23:55 -06:00
Dean Welch
10dfe9c428
Remove prefix from alerts
2024-02-01 17:33:31 +00:00
Dean Welch
764a87fda8
nil check and fix mock
2024-01-30 17:51:40 +00:00
adfoster-r7
4d0ba2fa1d
Land #18742 , Memory search module improvements
2024-01-30 17:39:12 +00:00
Dean Welch
1abaef4945
Move new session information alerts behind a feature flag
2024-01-30 16:38:00 +00:00
Spencer McIntyre
44916e67d5
Check if the SMB share exists before overwriting
2024-01-29 16:55:25 -05:00
Spencer McIntyre
3d476f4ef3
Add the missing #on_client_connect method
2024-01-29 16:44:32 -05:00
Spencer McIntyre
b9cf7ba894
Fix an issue where info would raise an exception
...
Fix instances where the `info` command would raise an exception while
generating the payload to calculate its length.
2024-01-29 16:44:32 -05:00
Spencer McIntyre
1c36d89942
Fix a double deref issue with the HTTP service
2024-01-29 16:44:32 -05:00
Spencer McIntyre
96316a94fe
Initial SMB server for fetch payloads
2024-01-29 16:44:28 -05:00
Spencer McIntyre
b5906418c2
Update the HashCapture mixin
...
Use #srvport instead of the datastore and pull in upstream chanes for
the metasploit-credential gem to enable use within payloads.
2024-01-29 13:35:56 -05:00
Spencer McIntyre
33306fa4dd
The SRVPORT is already registered
...
The SRVPORT datastore option is registered by the Remote::SMB::Server
mixin so including it here is redundant.
2024-01-29 13:35:54 -05:00
Spencer McIntyre
a8c240f671
Refactor existing fetch work
...
* Build the HTTPS server on top of HTTP instead of the other way around
* Set the fetch service to nil after it has been cleaned up
* Don't capitalize the H in the word handler
* Check if the fetch_service is truthy before cleaning it up
* Remove the unused FetchServerName datastore option
* Fixup the description text
* Don't allow slashes in fetch file names
* Also add the #fetch_bindnetloc method
Fix a problem in fetch/tftp.rb
2024-01-29 13:34:56 -05:00
Dean Welch
9a2ec90c16
Add alert to show user the new session options available in Metasploit 6.4
2024-01-29 17:06:21 +00:00
bwatters
d05b85de50
Land #18680 , Shared SMB Service
...
Merge branch 'land-18680' into upstream-master
2024-01-26 14:42:11 -06:00
Gaurav Jain
38c9185564
Add reviewed changes
2024-01-26 22:58:00 +05:30
sjanusz-r7
aac74778b9
Move memory search method to Meterpreter stdapi
2024-01-24 19:53:30 +00:00
adfoster-r7
15d0d4f0df
Land #18663 , Add new PostgreSQL Session Type
2024-01-24 10:46:26 +00:00
Jack Heysel
904e34434e
Land #18626 , SaltStack Minion Deployer
...
This PR adds an exploit module which allows for
a user who has compromised a host acting as a
SaltStack Master to deploy payloads to the Minions
attached to that Master.
2024-01-23 11:58:38 -05:00
bwatters
583d39b038
Land #18720 , Mark unix encoders as compatible with linux
...
Merge branch 'land-18720' into upstream-master
2024-01-23 09:45:42 -06:00
adfoster-r7
4921f6bbd1
Land #18712 , Fix undefined method error in /api/v1/modules endpoint
2024-01-22 15:06:52 +00:00
sjanusz-r7
1fe448f2f4
Revert remote/postgres verbosity changes
2024-01-22 14:27:38 +00:00
Dean Welch
82e9c2703f
Improve module ranking performance
2024-01-22 12:40:24 +00:00
Spencer McIntyre
b31abcc9b2
Mark unix encoders as compatible with linux
...
Fixes #18572
2024-01-19 13:40:43 -05:00
Dean Welch
334a469d2c
rank modules consistently
2024-01-19 17:50:31 +00:00
Dean Welch
391bc4e69e
shuffle platform parsing and code quality
2024-01-19 14:30:34 +00:00
sjanusz-r7
fbdb025542
Notify user on failed Postgres connection
2024-01-19 10:29:44 +00:00
sjanusz-r7
a4305f0ca0
Allow PostgreSQL lib to use session client
2024-01-19 10:29:44 +00:00
sjanusz-r7
23a9938283
Add PostgreSQL session type
2024-01-19 10:29:37 +00:00
Gaurav Jain
97ef243d2e
Add Splunk library
2024-01-18 22:47:13 +05:30