William Vu
b4ff3b544f
Add CMDSTAGER::SSL datastore option
...
It has come to my attention that since I added the HTTP(S) command
stagers, no one has used HTTPS. This is probably why.
The CmdStager options hash takes precedence over any datastore options.
2018-12-21 14:51:49 -06:00
William Vu
5cff330a38
Land #11128 , Rex::Exploitation::CmdStagerFetch
2018-12-21 14:16:57 -06:00
Garvit Dewan
3021a05553
Fix typo in report.rb
2018-12-21 17:51:46 +05:30
Green-m
06de47ce68
Enhance the command auto-complete in aux.
2018-12-21 18:03:57 +08:00
Wei Chen
f7eb3452be
Land #11083 , set user agent in Windows reverse_http(s) stagers
2018-12-19 11:38:12 -06:00
Brent Cook
09f9b887b9
don't bother handholding the empty string
2018-12-19 10:52:51 -06:00
Brendan Coles
8d93812c0a
Add Rex::Exploitation::CmdStagerFetch
2018-12-15 03:30:00 +00:00
asoto-r7
a2a38bb72f
ysoserial: Distracted halfway through a comment 🙃
2018-12-14 15:07:13 -06:00
asoto-r7
74b4ba1c50
ysoserial: Change class name to camelcase to align with Ruby style guide
2018-12-14 14:44:58 -06:00
asoto-r7
212454b1fb
ysoserial: Support larger payloads, Randomize fingerprintable string
2018-12-14 14:43:30 -06:00
asoto-r7
fa74a1839a
Initial support for dynamic ysoserial Java serialization payloads
2018-12-14 12:51:08 -06:00
Matthew Kienow
eec7a3dafc
Remove debug code
2018-12-14 13:33:16 -05:00
Matthew Kienow
a683cedcce
Enhance race condition workaround in report_host
2018-12-14 12:28:16 -05:00
Matthew Kienow
c2af36f405
Use update_session rather than Mdm save method
...
The changes ensure that updates to an Mdm::Session are reflected on a
remote data service.
2018-12-14 12:22:49 -05:00
Matthew Kienow
b6cdf7aa9d
Add update_session method
2018-12-14 12:04:55 -05:00
Matthew Kienow
3f9b2dadc8
Remove unnecessary single object selection
2018-12-14 11:20:19 -05:00
Matthew Kienow
4cefb8d06e
Fix typo
2018-12-14 11:19:40 -05:00
Jeffrey Martin
288cbd2386
add analyze command
2018-12-13 18:21:00 -06:00
Jeffrey Martin
4963647bf6
remove call to method not defined
2018-12-13 17:00:41 -06:00
bwatters-r7
564814c4db
Land #10676 , Add support for ext_server_unhook
...
Merge branch 'land-10676' into upstream-master
2018-12-13 09:46:37 -06:00
William Vu
a415063acd
Reword CreateSession option description
2018-12-12 15:32:31 -06:00
Stephen Haywood
eceb47a9da
Move CREATE_SESSION option to advanced option CreateSession
2018-12-12 15:32:31 -06:00
Stephen Haywood
8a7187ad79
Add CREATE_SESSION option to CommanShell
...
Register the CREATE_SESSION option in command_shell_options so it
can be used with all modules that use start_session.
Modify ssh_login.rb, ssh_login_pubkey.rb, and telnet_login.rb to
use the new CREATE_SESSION option.
When CREATE_SESSION is set to true (default) a new session is
created with each successful login. When set to false a new session
is not created but the successful login is still registered in the
credentials database.
2018-12-12 15:32:31 -06:00
Brent Cook
43842ad41d
Land #11082 , Update show plugins to show all available plugins as well
2018-12-10 10:20:51 -06:00
Brent Cook
733c2f637d
Land #11081 , Add Msf::Post::Linux::Kernel.lkrg_installed? method
2018-12-08 09:14:57 -06:00
Brent Cook
3dca52510d
pass NULL if the UA field is empty
2018-12-08 06:23:35 -06:00
Brent Cook
6f8fc55b86
set user agent in Windows reverse_http(s) stagers
2018-12-07 14:03:03 -06:00
Garvit Dewan
42c5a7d245
Update show plugins to show all available plugins as well as the loaded ones.
...
Fixes #11051
2018-12-08 01:19:44 +05:30
Brent Cook
df76521100
Land #11066 , add rpc output locking, fix logging
2018-12-07 13:49:10 -06:00
Brent Cook
09ffce4ec5
fix mutex locking, push to rpcSend
2018-12-07 13:28:34 -06:00
Brendan Coles
80d83720df
Add Msf::Post::Linux::Kernel.lkrg_installed? method
2018-12-07 14:42:16 +00:00
Brent Cook
9e110eb9fc
Land #10940 , add default service mapping to imports
2018-12-06 21:04:05 -06:00
Brent Cook
f4282bfb56
Land #11064 , Add Msf::Post::Linux::Kernel.kernel_config method
2018-12-06 20:52:12 -06:00
Brent Cook
310d6f0170
Land #11068 , Update db_connect help text
2018-12-06 20:32:13 -06:00
James Barnett
e36e27d91a
Port is optional for HTTP data services
2018-12-05 16:05:09 -06:00
James Barnett
1e57f025d9
Update db_connect help
2018-12-05 14:52:26 -06:00
Christopher Lee
b0560c1ec8
Centralize logging sync, fix minor logging issues
2018-12-05 12:42:44 -06:00
Brendan Coles
25e4c4734f
return nil rather than empty array
2018-12-05 23:44:13 +11:00
Brendan Coles
9d690f4f8c
Add Msf::Post::Linux::Kernel.kernel_config method
2018-12-05 11:19:36 +00:00
Brendan Coles
6040f779c5
Supress 'Permission denied' error in get_suid_files
2018-12-05 00:35:32 +00:00
Matthew Kienow
c7acbc08ab
Land #11058 , fix SSH key displayed by creds cmd
2018-12-04 15:25:51 -06:00
James Barnett
5e29d1206d
Land #11059 , provide meaningful error when workspace doesnt exist
2018-12-04 14:53:43 -06:00
Brent Cook
55a9a12670
Land #10964 , add initial golang modules for enumerating owa/o365
2018-12-04 10:33:37 -06:00
Matthew Kienow
4f08243af9
Raise exception if workspace not found
2018-12-03 17:24:36 -06:00
Matthew Kienow
74a5d816be
Fix parentheses around args of method invocations
2018-12-03 17:19:59 -06:00
James Barnett
d41f48853a
Use to_s when printing credential private
2018-12-03 16:46:30 -06:00
Brent Cook
042a793648
Land #11050 , Add protection checks to Msf::Post::Linux::Kernel lib
2018-12-03 13:16:46 -06:00
Brent Cook
6574ceaab8
Land #11053 , Add Openwall detection to Linux system lib
2018-12-03 12:46:36 -06:00
Christopher Lee
b11bcd92a4
Broken into 3 modules, addressed review comments
2018-12-03 10:25:21 -06:00
Jeffrey Martin
ab1bea1b22
Land #10798 , Cisco device manager update
2018-12-03 01:39:19 -06:00