520440e6ba
Land #15500 , Cookie jar fix for gitlab and cacti exploit module issues
2021-08-04 11:50:27 +01:00
5e732ddd42
changes parse to take an origin and updates tests
2021-08-03 18:22:23 +01:00
4fbf532faf
fix one error in offset value
2021-08-02 20:12:25 +05:30
d590702922
fix variable names
2021-08-02 18:44:03 +05:30
92e13d10f1
fragement the file into small parts
2021-08-02 18:39:16 +05:30
ff111ecd13
remove silent catches of http-cookie argument errs
2021-07-30 17:33:04 +01:00
3668230d44
reposition self return in add
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2021-07-30 16:16:12 +01:00
33a34af0df
improve error handling
...
Co-authored-by: dwelch-r7 <Dean_Welch@rapid7.com >
2021-07-30 16:06:53 +01:00
8cb3731e46
Add support for negative session and job ids
2021-07-30 10:22:44 +01:00
d7112d0d33
add gzip compression for read file powershell
2021-07-28 20:49:46 +05:30
5219c980f7
adds origin values to cookies without domain
2021-07-28 14:08:25 +01:00
c7d4155511
add origin to httpcookie and supporting tests
2021-07-28 14:04:48 +01:00
4dd0a5f8be
change method name to _read_file_powershell
2021-07-27 20:17:04 +05:30
2cd20e5698
add support for binary files for powershell session types
2021-07-26 23:52:20 +05:30
50bf0d4075
Land #15460 , Fix localization issue in copy_file
2021-07-26 12:03:22 -04:00
80f809bc78
handled cookies without valid domain value
2021-07-26 14:29:03 +01:00
426898e065
Add a tip and note in the module docs
2021-07-26 09:13:11 -04:00
51e02a9ede
Remove userinit.exe from list of random processes for execute_dll as its somewhat unreliable and spawns noticeable processes
2021-07-23 12:34:32 -05:00
31b82452ec
Fix up Spencer's comments from review to correctly pass in parameters to execute_dll() as some calls were passing the wrong set of parameters
2021-07-23 12:34:25 -05:00
fabc566402
Improve process.rb's execute_dll to now automatically detect the architecture of the target and of the DLL and then appropriately decide if it needs to launch a WoW64 process to inject into.
2021-07-23 12:33:41 -05:00
bc0439fc47
Improve the list of potential processes to spawn and inject into to be more believable
2021-07-23 12:33:16 -05:00
96b15c9650
Update process.rb to support injecting into a random process and not just notepad.exe all the time to improve signature evasion. Also support injecting into one's own Meterpreter process for further stealth. Finally update one module to showcase off how these changes look like on a real module.
2021-07-23 12:33:01 -05:00
e4100c8018
Fix rubocop issues in the handler file
2021-07-23 11:12:46 -04:00
0314569e3d
Fix rubocop issues in session files
2021-07-23 10:58:13 -04:00
9e7859ed25
Reformats some modules so they can be run with new meterpreter_commands_dependencies.rb Rubocop rule
2021-07-23 14:40:19 +01:00
46051d5bf4
fix localization issue in copy_file method
2021-07-23 10:20:31 +05:30
73380be4ab
Land #15444 , Add additional powershell support
2021-07-22 13:58:07 -04:00
c11ee468e0
Land #14683 , Add a check for EXE templates
2021-07-22 12:27:33 -04:00
57c35ee9c1
Update lib/msf/core/post/file.rb
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2021-07-22 20:07:06 +05:30
f49640f2b6
suggested changes by @smcintyre-r7
2021-07-22 19:16:06 +05:30
e8f1aa945d
update expand_path for powershell
2021-07-21 23:37:46 +05:30
84cb67ecc0
update expand_path (powershell)
2021-07-20 20:01:18 +05:30
e3dbd3a990
fixes bug caused by attrs with string keys
2021-07-20 15:02:41 +01:00
bd74afa785
add a check to see if src_file or dst_file a directory (copy_file method)
2021-07-20 19:31:21 +05:30
79c8f2a0f4
Ensure generated JSP variable names aren't Java keywords
2021-07-20 14:49:57 +01:00
0e2b048d56
Land #15445 , Fix the printed exploit target
2021-07-20 09:16:26 +01:00
36b8d6eb73
Fix the printed exploit target
2021-07-19 15:24:02 -04:00
43f58e5183
add quotes for path
2021-07-19 21:44:29 +05:30
efff8a61e7
normalize return value of cd
2021-07-19 20:40:13 +05:30
d7650e7055
minor fixes
2021-07-19 19:17:26 +05:30
c6da1c170a
add powershell support for some file system methods
2021-07-19 18:24:16 +05:30
44e5d48a46
add a condition to check if the session type is powershell
2021-07-16 22:05:30 +05:30
36abd5ea3c
add a check if file exists on the remote system
2021-07-16 00:52:47 +05:30
dd11752d04
remove powershell support from get_processes because it can be achieved from the platform specific commands too
2021-07-16 00:34:42 +05:30
ea09b035ea
Merge branch 'master' into powershell_session_type_improvements
2021-07-15 23:24:45 +05:30
fd32d38a34
change cmdlet used for file_exist?
2021-07-15 20:06:29 +05:30
0ca436d1e8
Land #15362 , fix cmd_exec write_file & append_file
2021-07-15 10:18:50 +01:00
0251dff80b
Add more descriptive error messages and logging
2021-07-14 14:38:33 -04:00
1ddcc9f12b
Remove the socket in psexec
...
PsExec needs the socket to remain open after the session is established
in order to rebove the service. Remote TCP exploits close and remove
their sockets by default which creates a race condition that can result
in failing to cleanup the service.
2021-07-14 11:00:45 -04:00
7aa44a9a80
Add a couple more socket methods
2021-07-14 11:00:34 -04:00
adfoster-r7