Commit Graph

13785 Commits

Author SHA1 Message Date
Spencer McIntyre 0f344b0661 Land #14265, Add SharePoint Server-Side Include (SSI) and ViewState RCE (CVE-2020-16952) 2020-10-19 10:27:58 -04:00
h00die 4eac4882b5 more accurate external loader error 2020-10-18 21:03:13 -04:00
dwelch-r7 1b28d21f0e Land #14240, Add tab completion for run command
Add tab completion for run command
2020-10-16 11:24:56 +01:00
Jeffrey Martin 56a07259a7 Guard and notify for missing encoders
When an encoder module is incorrectly entered or does not exist
continue the encoding process and log the invalid entry to console.
2020-10-15 15:02:02 -05:00
Alan Foster 832e2263b0 Ensure consistent tab completes 2020-10-15 19:55:54 +01:00
Tim W 12c5f4f916 CVE-2019-1458 chrome sandbox escape initial commit 2020-10-15 10:57:46 -05:00
William Vu 1a341ae931 Add SharePoint SSI and ViewState RCE
CVE-2020-16952
2020-10-14 17:45:15 -05:00
Grant Willcox d79537e88c Fix up the DNS enumeration library so that AXFR records don't have stray [ and ] characters printed in the output 2020-10-09 14:01:09 -05:00
cgranleese-r7 9e16fb8c4f Add module option tab completion to run command 2020-10-09 14:35:48 +01:00
Grant Willcox f5dded2274 Land #14233, Always show module actions within the info command 2020-10-08 11:03:18 -05:00
Grant Willcox 69c68823d2 Land #14226, convert myworkspace.id to myworkspace_id for no db compat 2020-10-08 08:49:53 -05:00
Alan Foster a933e10252 Show actions within info command 2020-10-07 23:20:31 +01:00
Grant Willcox a69ce8ae04 Add missing Juniper case 2020-10-07 17:03:34 -05:00
Spencer McIntyre 9cb3d3e091 Land #14070, Tab-completion improvements for modules with conditional OPTIONS 2020-10-07 16:33:55 -04:00
Spencer McIntyre e1b4d17de6 Use Array#delete_if like suggested 2020-10-07 15:57:28 -04:00
h00die 58cc9ca403 convert myworkspace.id to myworkspace_id for no db compat 2020-10-06 20:06:13 -04:00
Spencer McIntyre efc8485c86 Fill out module metadata and improve the check method 2020-10-06 18:00:13 -04:00
Spencer McIntyre f77bdcd855 Add the mixed_mode option when generating DLL EXEs 2020-10-05 15:49:06 -04:00
h00die 3999fe3517 add . to md5 charset 2020-10-04 12:54:08 -04:00
kalba-security 997fc4c7cc Use split without specifying newlines 2020-10-01 14:31:16 -04:00
Jeffrey Martin 03a30d80ef creds need web service to support request by :id 2020-10-01 11:13:38 -05:00
Spencer McIntyre 69f0234e48 Use #address as the host address instead of the MDM object 2020-09-30 14:28:09 -04:00
Spencer McIntyre c0b42ff7a2 Land #13995, Add a Windows Secrets Dump module 2020-09-30 11:47:59 -04:00
Grant Willcox 5986bc98f1 Land #14171, Replace erroneous calls to get_service with calls to service 2020-09-30 10:05:13 -05:00
Christophe De La Fuente 94796f5c91 Updates from review #2 2020-09-30 15:01:54 +02:00
kalba-security 26f113d154 Fix help message for the favorite command 2020-09-30 08:36:44 -04:00
kalba-security 5d99eda74b Add and command 2020-09-29 18:35:08 -04:00
Spencer McIntyre 16dd4fbb6f Use nil for default registry values instead of 'default' 2020-09-29 16:50:38 -04:00
bwatters d9b121b50d Land #14177, Reserve space for the encoder when generating payloads
Merge branch 'land-14177' into upstream-master
2020-09-29 08:02:55 -05:00
adfoster-r7 0785e535aa Land #14183, update the debug command to additionally extract the web server logs 2020-09-29 12:48:55 +01:00
Christophe De La Fuente 9cb419ae8c Resync with master branch 2020-09-28 15:45:02 +02:00
Christophe De La Fuente 59fff3d7fe Land #14161, VyOS config processor 2020-09-28 13:02:19 +02:00
h00die 362ba1b235 more reviews 2020-09-27 08:17:32 -04:00
h00die 2c9e2f79d9 optional user level 2020-09-25 15:48:31 -04:00
Adam Galway bccc17e4ae updates tests to consider msf-ws.log 2020-09-25 14:45:33 +01:00
Adam Galway 5100767985 change msf-ws.log log line total to 150 2020-09-25 13:11:24 +01:00
Adam Galway b23b7d8e5c includes contents of msf-ws.log in debug -e 2020-09-25 13:04:50 +01:00
Adam Galway e0e8ac3b7c includes contents of msf-ws.log in debug -l 2020-09-25 13:00:59 +01:00
Shelby Pace 6c76442639 Land #14153, display SRVHOST SRVPORT opts w/auto 2020-09-24 11:12:08 -05:00
Spencer McIntyre aa1e4dbf5c Only propagate space information when it's set 2020-09-23 16:21:12 -04:00
Grant Willcox d66aaf9bee Fix a very horrible merge mistake 2020-09-23 14:48:42 -05:00
RageLtMan 2c83cde6a8 Add PSH generation methods to Util::Exe
MSIL generation was never added to util, and the pending rc4
generator should be accessible from here as well. Add both to the
end of the powershell generators section.

Add rc4 to the powershell method enum in opts which is passed
into rex-powershell.
2020-09-23 14:41:10 -05:00
h00die 92e41b2678 review comments 2020-09-23 10:36:26 -04:00
Spencer McIntyre 61f5879b2f Reserve some space when a payload needs to be encoded 2020-09-23 10:26:13 -04:00
Alan Foster 94fcd808fb Show correct rank for show exploits command 2020-09-23 11:34:46 +01:00
William Vu f74eba731e Land #14151, Zerologon (CVE-2020-1472) module 2020-09-22 14:02:23 -05:00
Adam Galway 571504642a fixes get_service calls 2020-09-22 12:54:58 +01:00
Adam Galway a0d6431ed5 adds protocol to search terms 2020-09-22 12:44:32 +01:00
h00die 5eb2884c7e fix tests 2020-09-21 19:35:46 -04:00
h00die 610d4d86d2 initial vyos implementation 2020-09-20 19:48:20 -04:00