adfoster-r7
eb959e2e40
Land #17060 , GSoC Project: Implement HTTP-Trace enabled login scanners
2023-05-11 15:45:01 +01:00
Spencer McIntyre
d8dd9bbe79
Move the publish timeout logic ( #40 )
...
This makes it accessible from enum_ssm so Linux sessions can be opened.
2023-05-11 09:58:16 -04:00
Spencer McIntyre
e92695149d
Fix linux tests, remove Windows support ( #39 )
...
* Revert "shell_command_token_base get 0th output index"
This reverts commit 3a4cb3560f .
* Correct the order of arguments to #set_term_size
* Fix paths for directory checks
The path C:\ ends with a trailing backslash which will cause bash to
wait for another line if input. This places the shell in an undesirable
state.
* Fix post module tests for Linux
* Remove the command document
This hasn't been tested and it's unclear under what conditions this
would be used.
* Fix Windows SSM sessions
---------
Co-authored-by: Spencer McIntyre <zeroSteiner@gmail.com >
2023-05-10 17:48:53 -04:00
RageLtMan
62e59e6250
Replace [System.IO.File]::Exists with Test-Path
...
The exists? method in post/file has a different implementation for
PSH sessions than other shells which are testing for the existence
of a path, not the presence of a file.
Fix this by replacing [System.IO.File]::Exists with Test-Path.
Testing:
```
PS C:\Windows\system32> [System.IO.File]::Exists("C:\")
False
PS C:\Windows\system32>test-path C:\
PS C:\Windows\system32> test-path C:\
True
```
2023-05-10 11:10:08 -04:00
adfoster-r7
069ad805c1
Fix ruby 3.1 crashes when garbage collecting meterpreter resources
2023-05-05 14:04:17 +01:00
ErikWynter
b8856bbb87
fix capitalization of Htlm_fileName JSON parram
2023-05-05 09:59:11 +03:00
Grant Willcox
adec2f4fbb
Update the login.rb code so we aren't as strict on cookies since older versions sometimes use JSESSIONIDADAPSSO instead of JSESSIONIDSSO for login cookies
2023-05-04 15:40:39 -05:00
jvoisin
3b66b3416f
Golf a bit the php payload
...
- Put all the error-disabling statements on a single line
- Remove some useless spaces
- Use `stristr(…)` (available since PHP4) instead of `strpos(strtolower(…))`
- Use `&&` instead of `and`
- Use backticks instead of `passthru`, since they're equivalent: https://www.php.net/manual/en/language.operators.execution.php
2023-05-04 22:25:32 +02:00
Grant Willcox
8c7ae1b6bb
Minor update to comments for clarity
2023-05-04 15:12:32 -05:00
ErikWynter
c088430bd9
improve sanity checks in login method and other code review fixes
2023-05-04 15:12:31 -05:00
Grant Willcox
f27fc28411
Perform review updates
2023-05-04 15:12:31 -05:00
ErikWynter
9b596b3efd
minor changes
2023-05-04 15:12:31 -05:00
ErikWynter
1c6c1dffc6
final code review fixes
2023-05-04 15:12:31 -05:00
ErikWynter
9fe7db4648
improve status codes handling
2023-05-04 15:12:30 -05:00
ErikWynter
aede036b02
additional changes from code review
2023-05-04 15:12:30 -05:00
Grant Willcox
ba687c49aa
Fix a few typos
2023-05-04 15:12:29 -05:00
ErikWynter
a5e86a0c51
code review improvements, including renaming silent param
2023-05-04 15:12:29 -05:00
Grant Willcox
0fd743d851
Add in fixes from code review
2023-05-04 15:12:29 -05:00
ErikWynter
dd075d5c99
library improvements after code review, module update
2023-05-04 15:12:28 -05:00
ErikWynter
a2cf29ab98
partial fixes after library code review
2023-05-04 15:12:28 -05:00
Grant Willcox
61d1cf1460
Fix up things identified during review
2023-05-04 15:12:28 -05:00
ErikWynter
e639460b9f
fix library comments for json_post_data.rb
2023-05-04 15:12:27 -05:00
ErikWynter
47d374497a
create adaudit plus mixin and move some stuff there
2023-05-04 15:12:27 -05:00
adfoster-r7
3bf01f2cf2
Land #17911 , Update setting missing datastore values to a warning instead of an error
2023-05-03 13:04:03 +01:00
cgranleese-r7
67694c1ef7
Removes return false
2023-05-03 11:41:11 +01:00
Christophe De La Fuente
62806caeae
Update web_delivery
2023-04-28 16:09:51 +02:00
bcoles
71f938682c
Post::Windows::Service: Support start/stop service on shell sessions
2023-04-28 18:44:11 +10:00
space-r7
03fcfa7559
Land #17914 , fix paths for directory checks
2023-04-26 12:20:46 -05:00
adfoster-r7
e7c05eabe3
Fix deadlock regression when printing multiple lines to console
2023-04-25 00:39:44 +01:00
RageLtMan
3a4cb3560f
shell_command_token_base get 0th output index
2023-04-22 18:00:44 -04:00
Spencer McIntyre
8c15c31b56
Fix paths for directory checks
...
The path C:\ ends with a trailing backslash which will cause bash to
wait for another line if input. This places the shell in an undesirable
state.
2023-04-21 14:39:00 -04:00
Spencer McIntyre
2e3a2b6f6d
Combine AWS SSM modules, autodetect platform
2023-04-19 18:05:50 -04:00
Spencer McIntyre
59b3c0e945
Set the platform in enum_ssm
...
Update the enum_ssm module to use the correct session type with the
appropriate platform. Also set the session information to the same
string which also removes the eye sore that is the shell banner.
2023-04-19 18:05:50 -04:00
Spencer McIntyre
a7d8bc6757
Fix sessions opening over and over again
...
Also make some code cleanups
2023-04-19 18:05:50 -04:00
adfoster-r7
1b72de063e
Land #17903 , Add missing fields when reading metadata cache
2023-04-18 11:48:05 +01:00
Dean Welch
7667499011
Update comment and correctly format date
2023-04-18 11:06:19 +01:00
Dean Welch
d17ab39748
Remove active database check for module cache rebuild
2023-04-17 23:55:37 +01:00
Dean Welch
e874731781
Pull out autofilter_ports and autofilter_services from metadata cache
2023-04-17 23:45:19 +01:00
bcoles
1e23dffc5b
Msf::Ui::Console::CommandDispatcher::Core: Fix 'help setg' output
2023-04-15 20:35:15 +10:00
Jack Heysel
cda2e9610b
Land #17820 , optimising the nagiosxi modules
...
This PR refactors the authenticated nagiosxi modules and mixins..
2023-04-14 16:21:26 -04:00
dwelch-r7
f9d5459a9c
Land #17872 , Ensure identify hashes helper is accessible to modules
2023-04-13 16:20:20 +01:00
adfoster-r7
8e2169ed47
Ensure identify hashes helper is accessible to modules
2023-04-12 13:28:56 +01:00
dwelch-r7
275963eca2
Land #17353 , Persist icpr cert as pkcs12 credential
2023-04-12 13:16:18 +01:00
Christophe De La Fuente
a6b478e046
Land #17832 , Two modules for UniRPC - CVE-2023-28502 and CVE-2023-28503
2023-04-12 11:43:13 +02:00
cgranleese-r7
e6c1aecd26
Land #17502 , Adds SCTP Sessions
2023-04-12 10:15:43 +01:00
Christophe De La Fuente
59ff65d58d
Land #17821 , DBManager: Import: Add Nuclei JSON database import
2023-04-11 17:51:22 +02:00
adfoster-r7
875ad34b62
Persist icpr cert as pkcs12 credential
...
Update creds command to support pkcs12
2023-04-11 16:25:25 +01:00
bcoles
3b7cf035ea
DBManager: Import: Add Nuclei JSON database import
2023-04-10 22:22:19 +10:00
bcoles
8525849763
Msf::Payload::Apk: Bump apktool minimum required version to 2.7.0
2023-04-10 21:07:25 +10:00
Ron Bowes
ce111f158a
Better error handling
2023-04-06 10:35:33 -07:00