Commit Graph

13785 Commits

Author SHA1 Message Date
William Vu b4ff3b544f Add CMDSTAGER::SSL datastore option
It has come to my attention that since I added the HTTP(S) command
stagers, no one has used HTTPS. This is probably why.

The CmdStager options hash takes precedence over any datastore options.
2018-12-21 14:51:49 -06:00
William Vu 5cff330a38 Land #11128, Rex::Exploitation::CmdStagerFetch 2018-12-21 14:16:57 -06:00
Garvit Dewan 3021a05553 Fix typo in report.rb 2018-12-21 17:51:46 +05:30
Green-m 06de47ce68 Enhance the command auto-complete in aux. 2018-12-21 18:03:57 +08:00
Wei Chen f7eb3452be Land #11083, set user agent in Windows reverse_http(s) stagers 2018-12-19 11:38:12 -06:00
Brent Cook 09f9b887b9 don't bother handholding the empty string 2018-12-19 10:52:51 -06:00
Brendan Coles 8d93812c0a Add Rex::Exploitation::CmdStagerFetch 2018-12-15 03:30:00 +00:00
asoto-r7 a2a38bb72f ysoserial: Distracted halfway through a comment 🙃 2018-12-14 15:07:13 -06:00
asoto-r7 74b4ba1c50 ysoserial: Change class name to camelcase to align with Ruby style guide 2018-12-14 14:44:58 -06:00
asoto-r7 212454b1fb ysoserial: Support larger payloads, Randomize fingerprintable string 2018-12-14 14:43:30 -06:00
asoto-r7 fa74a1839a Initial support for dynamic ysoserial Java serialization payloads 2018-12-14 12:51:08 -06:00
Matthew Kienow eec7a3dafc Remove debug code 2018-12-14 13:33:16 -05:00
Matthew Kienow a683cedcce Enhance race condition workaround in report_host 2018-12-14 12:28:16 -05:00
Matthew Kienow c2af36f405 Use update_session rather than Mdm save method
The changes ensure that updates to an Mdm::Session are reflected on a
remote data service.
2018-12-14 12:22:49 -05:00
Matthew Kienow b6cdf7aa9d Add update_session method 2018-12-14 12:04:55 -05:00
Matthew Kienow 3f9b2dadc8 Remove unnecessary single object selection 2018-12-14 11:20:19 -05:00
Matthew Kienow 4cefb8d06e Fix typo 2018-12-14 11:19:40 -05:00
Jeffrey Martin 288cbd2386 add analyze command 2018-12-13 18:21:00 -06:00
Jeffrey Martin 4963647bf6 remove call to method not defined 2018-12-13 17:00:41 -06:00
bwatters-r7 564814c4db Land #10676, Add support for ext_server_unhook
Merge branch 'land-10676' into upstream-master
2018-12-13 09:46:37 -06:00
William Vu a415063acd Reword CreateSession option description 2018-12-12 15:32:31 -06:00
Stephen Haywood eceb47a9da Move CREATE_SESSION option to advanced option CreateSession 2018-12-12 15:32:31 -06:00
Stephen Haywood 8a7187ad79 Add CREATE_SESSION option to CommanShell
Register the CREATE_SESSION option in command_shell_options so it
can be used with all modules that use start_session.
Modify ssh_login.rb, ssh_login_pubkey.rb, and telnet_login.rb to
use the new CREATE_SESSION option.
When CREATE_SESSION is set to true (default) a new session is
created with each successful login. When set to false a new session
is not created but the successful login is still registered in the
credentials database.
2018-12-12 15:32:31 -06:00
Brent Cook 43842ad41d Land #11082, Update show plugins to show all available plugins as well 2018-12-10 10:20:51 -06:00
Brent Cook 733c2f637d Land #11081, Add Msf::Post::Linux::Kernel.lkrg_installed? method 2018-12-08 09:14:57 -06:00
Brent Cook 3dca52510d pass NULL if the UA field is empty 2018-12-08 06:23:35 -06:00
Brent Cook 6f8fc55b86 set user agent in Windows reverse_http(s) stagers 2018-12-07 14:03:03 -06:00
Garvit Dewan 42c5a7d245 Update show plugins to show all available plugins as well as the loaded ones.
Fixes #11051
2018-12-08 01:19:44 +05:30
Brent Cook df76521100 Land #11066, add rpc output locking, fix logging 2018-12-07 13:49:10 -06:00
Brent Cook 09ffce4ec5 fix mutex locking, push to rpcSend 2018-12-07 13:28:34 -06:00
Brendan Coles 80d83720df Add Msf::Post::Linux::Kernel.lkrg_installed? method 2018-12-07 14:42:16 +00:00
Brent Cook 9e110eb9fc Land #10940, add default service mapping to imports 2018-12-06 21:04:05 -06:00
Brent Cook f4282bfb56 Land #11064, Add Msf::Post::Linux::Kernel.kernel_config method 2018-12-06 20:52:12 -06:00
Brent Cook 310d6f0170 Land #11068, Update db_connect help text 2018-12-06 20:32:13 -06:00
James Barnett e36e27d91a Port is optional for HTTP data services 2018-12-05 16:05:09 -06:00
James Barnett 1e57f025d9 Update db_connect help 2018-12-05 14:52:26 -06:00
Christopher Lee b0560c1ec8 Centralize logging sync, fix minor logging issues 2018-12-05 12:42:44 -06:00
Brendan Coles 25e4c4734f return nil rather than empty array 2018-12-05 23:44:13 +11:00
Brendan Coles 9d690f4f8c Add Msf::Post::Linux::Kernel.kernel_config method 2018-12-05 11:19:36 +00:00
Brendan Coles 6040f779c5 Supress 'Permission denied' error in get_suid_files 2018-12-05 00:35:32 +00:00
Matthew Kienow c7acbc08ab Land #11058, fix SSH key displayed by creds cmd 2018-12-04 15:25:51 -06:00
James Barnett 5e29d1206d Land #11059, provide meaningful error when workspace doesnt exist 2018-12-04 14:53:43 -06:00
Brent Cook 55a9a12670 Land #10964, add initial golang modules for enumerating owa/o365 2018-12-04 10:33:37 -06:00
Matthew Kienow 4f08243af9 Raise exception if workspace not found 2018-12-03 17:24:36 -06:00
Matthew Kienow 74a5d816be Fix parentheses around args of method invocations 2018-12-03 17:19:59 -06:00
James Barnett d41f48853a Use to_s when printing credential private 2018-12-03 16:46:30 -06:00
Brent Cook 042a793648 Land #11050, Add protection checks to Msf::Post::Linux::Kernel lib 2018-12-03 13:16:46 -06:00
Brent Cook 6574ceaab8 Land #11053, Add Openwall detection to Linux system lib 2018-12-03 12:46:36 -06:00
Christopher Lee b11bcd92a4 Broken into 3 modules, addressed review comments 2018-12-03 10:25:21 -06:00
Jeffrey Martin ab1bea1b22 Land #10798, Cisco device manager update 2018-12-03 01:39:19 -06:00