646c10ff02
Disable RuboCop Security/Eval the non-hacky way
...
Hat tip @adfoster-r7!
2020-05-11 12:05:38 -05:00
f346b1b001
Add SaltStack Salt root key disclosure module
...
Also adds a new ZeroMQ mixin, mainly for use with Salt modules.
2020-05-11 12:05:38 -05:00
0df2cfd5a1
Little bit of code golf
2020-05-11 20:49:39 +10:00
1c0d76e482
Include a horrible custom DER/RSA implementation
...
I'm sorry, but I'm also not sorry.
2020-05-11 19:08:37 +10:00
1214ac17a7
Refactor Msf::Exploit::CmdStager::HTTP
...
Minor updates to align with current style.
2020-05-10 04:12:45 -05:00
683ecb7b8d
Tweak handling of the DnsNote option
2020-05-08 12:21:52 -04:00
6be4b5431c
Remove the TLD wordlist option for now
2020-05-08 12:21:52 -04:00
0a8cb83e7f
Fix TXT records, the DNS port, and messages for cloud_lookup
2020-05-08 12:21:52 -04:00
715dfc13f8
Refactor the auxiliary mixin to an enumeration exploit mixin
2020-05-08 12:21:52 -04:00
09ded72247
migrate enum_dns to mixin (add. TLDs wordlist) and update cloud_lookup
2020-05-08 12:21:52 -04:00
578a13732d
add. move DNS functions into a mixin
2020-05-08 12:21:52 -04:00
f118589bba
Use squiggly heredoc
2020-05-08 02:55:26 -05:00
5f8181efa7
Avoid auto-encoding payloads free of badchars
...
Payloads without any of the specified badchars will no longer be encoded
by default. This should hopefully lead to less surprising results when
using simple payloads (especially commands. Things that had incomplete
badchar analysis may break as a result, since not everything will be
encoded by default anymore. Sorry in advance if they do.
2020-05-07 10:58:03 -05:00
9769e04b6e
Land #13322 , CVE-2020-0668 Service tracing file junction overwrite
2020-05-07 09:47:20 -04:00
97fc253077
Last effort at payload size reduction
2020-05-07 18:52:01 +10:00
c0f32e59d0
Another interim commit while reducing the payload size
2020-05-07 18:38:07 +10:00
9d4ef13a84
First pass of python TLV encryption support
...
More info to come, but this does a few things with magic!~
2020-05-07 18:28:13 +10:00
f897806589
use python squiggly heredoc
2020-05-07 14:21:36 +08:00
a5fe498610
Update ARCH handling, suggested changes, and last-minute fixes
2020-05-06 15:36:53 -05:00
c42db7959b
Use OptAddressLocal for SRVHOST to specify by interface name instead of IP
2020-05-06 19:51:13 +02:00
d313f196d9
Add Post::Windows::Services.service_exists? method
2020-05-06 15:26:52 +00:00
48f9d1a223
Land #13386 , Raise exception for stageless android payload -x option
2020-05-06 14:58:23 +01:00
8ac04d5312
Land #13367 , Surface helpful error messages to users
2020-05-06 14:40:21 +01:00
2c8b5c2647
Fix edge cases in raising metasploit exceptions
2020-05-05 20:18:04 +01:00
437a056f67
Land #13364 , .NET deserialization tool
2020-05-05 11:02:31 -05:00
f5a432d328
Land #13313 , warn users to change RPORT with SSL
2020-05-04 15:45:07 +01:00
b991042c4a
add base64 encoding stub
2020-05-04 15:43:40 +08:00
2b8568b487
fix #10181 , add error when an android stageless payload is used with apk injection
2020-05-04 15:36:20 +08:00
c367258826
Remove static off variable, inline its 0 declariation
2020-05-03 20:37:13 -05:00
9501ec0b1b
RuboCop alpanum.rb code
2020-05-02 21:48:31 -05:00
60ac7773d6
Fix up typo and some double quote RuboCop issues
2020-05-02 21:16:08 -05:00
41718a6f71
Fix up Alan's patch to detect a changed value
2020-05-02 19:59:36 -05:00
5faf446a38
Warn when the SSL value changes
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2020-05-02 19:59:36 -05:00
35016713d4
Warn the user to set RPORT if SSL is enabled
2020-05-02 19:59:36 -05:00
778a66191a
Land #13373 , Improvements to "No DB Connected" error message
2020-05-01 15:39:59 -05:00
c27269105e
Rename CmdStager to psh_invokewebrequest
2020-05-01 12:31:53 -05:00
9adaa08ddd
Use new PowerShell Invoke-WebRequest CmdStager
2020-05-01 12:19:12 -05:00
5630b36d5f
Update PaX detection
...
The use of paxctld makes paxctl unnecessary.
2020-05-01 13:54:08 +00:00
eb39c14a53
Fix Events rest api Encoding
2020-05-01 21:45:38 +08:00
a53a1520c1
add setup guide link to db connection error msg
2020-05-01 12:22:58 +01:00
57b7f8995f
Surface developer provided exception messages to users
2020-04-30 14:56:55 +01:00
3132115d49
Fix typos
2020-04-30 07:55:37 -05:00
35913c829e
add mkdir and other suggested fixes
2020-04-30 07:47:57 -05:00
197365b610
Finish up the .NET deserialization tool
2020-04-29 17:50:07 -04:00
91c317f7b5
Rubocop autocorrect
2020-04-29 11:01:29 -05:00
2a7203831c
Convert to library
2020-04-29 10:37:20 -05:00
219125b393
Credit cdelafuente-r7
2020-04-29 10:35:43 -05:00
191044cdad
Final fixes and documentation
2020-04-29 10:18:22 -05:00
beb6edada2
add python-reflection to Msf::Util::Exe
2020-04-29 19:02:00 +08:00
0a12522445
Add the initial YSoSerial.NET tool
2020-04-28 20:46:07 -04:00
William Vu