8010c58220
add module documentation to swagger (WIP)
2018-07-18 17:36:31 -05:00
612959d9ab
Land #10323 , add authentication to REST API
2018-07-18 17:29:22 -05:00
1371fc6daf
Fix regexed integer RPORT for module search
2018-07-18 17:24:05 -05:00
de23559491
Add check for check to module cache
2018-07-18 16:40:52 -05:00
ee6de3da39
Make endpoint plural and uniform with the others
2018-07-18 17:35:47 -04:00
98d6d4cbcd
Add check for check to info command
2018-07-18 16:33:30 -05:00
5fa1ddf4eb
Remove default check method
2018-07-18 16:25:46 -05:00
93ce09cbd2
indicate private methods
2018-07-18 15:55:25 -05:00
6955a9a58b
filter search result using comma delimited fields
2018-07-18 15:52:47 -05:00
4da27d2bff
Enable GET for /endpoint/ID for each model
2018-07-18 15:18:22 -05:00
389b015047
fix typo (reference -> references)
2018-07-18 15:10:11 -05:00
257a05d5d7
Add long port option for data_services cmd
2018-07-18 14:29:32 -04:00
3147b8307b
Fix issue when adding authenticated data service
...
Add authentication to MsfServlet as a simple workaround to an issue
that occurs when data_services cmd is used to add a remote service
that requires an API token and no token or an invalid token are
provided.
2018-07-18 14:08:30 -04:00
4ff39e3799
Fix error code returned by authentication failure
...
Previously an authentication failure message would indicate that the
error was permissions related yet the error code remained 401. The fix
allows the Authentication::Strategies classes to specify an error code
that is returned to the user.
2018-07-18 14:04:09 -04:00
08b53a1ef7
Homogenize GET requests
2018-07-18 12:43:48 -05:00
a2da40a104
refactor endpoint under /v1/modules/
2018-07-18 12:06:25 -05:00
64fff449f8
refactor platform/target search
2018-07-18 10:59:46 -05:00
9d2bed2596
Fix grep's prompt rewriting
...
Missed in #9261 .
2018-07-17 21:08:21 -05:00
94297de256
Add grep -C to msfconsole
2018-07-17 20:52:46 -05:00
38daeb1b9f
Fix #10283 , SOUNDTRACK and LOGO refs
...
Some dupe code came in from master. Fixing and refactoring.
2018-07-17 19:36:35 -05:00
6a38b36a45
Land #10283 , SOUNDTRACK and LOGO refs
...
:'(
2018-07-17 19:11:52 -05:00
07203dccc6
Clean up some things
2018-07-17 19:11:26 -05:00
d5ed70417b
bind_named_pipe payload for ruby_smb
2018-07-17 17:46:10 -06:00
ad74ab7cf9
proof of concept searching with query params
2018-07-17 17:29:12 -05:00
39e381049a
Remove unnecessary include
2018-07-17 15:36:23 -05:00
59278aef99
Add command dispatcher for developer commands
2018-07-17 15:07:50 -05:00
dc4e438c04
Add multiple commands' tabs
2018-07-17 06:27:51 -04:00
5d048a6eb2
Use a class variable for auth initialized flag
2018-07-16 18:22:47 -04:00
65c290fa39
Make API token optional on data_services cmd
2018-07-16 16:44:44 -04:00
d5814ae9f6
Use the unpkg hosted versions of SwaggerUI
2018-07-16 15:16:27 -05:00
70104ab25e
Rename request env variables to conform with Rack
2018-07-16 15:04:05 -04:00
f7a4c577d6
Add UserServlet and admin_api scope
2018-07-16 12:56:43 -04:00
4680455041
Implement report_user and password hashing
2018-07-16 12:55:00 -04:00
67721bc616
Refactor strategies to support admin token role
2018-07-16 12:51:41 -04:00
4e5ad576b2
Land #10267 , defer bind payload connections until exploit has run
2018-07-13 17:35:27 -05:00
c8891206af
Add vprint_status back to bind_named_pipe
...
I thought it was redundant with the improved handler start message, but
it broke consistency with the other print statements. Fixing.
2018-07-13 17:29:52 -05:00
2c9d85606c
Refactor and add error messages
2018-07-13 16:29:09 -05:00
bf53896aa7
Rex::Compat.getenv
2018-07-14 06:24:04 +10:00
3cec9026ae
Add janky console command to display framework.log
...
Works best with alternate screen enabled...
2018-07-13 06:11:32 -05:00
f5b8b4dd7c
Update send_request_cgi/raw
2018-07-12 23:51:41 -04:00
65627e06e2
Update send_request_cgi/raw
2018-07-12 23:51:18 -04:00
104e4cee2e
Merge branch 'master' into soundtrack_logo_module_refs
2018-07-13 03:01:33 +10:00
147f59836a
Fuel the hype machine
2018-07-12 11:34:09 -05:00
e72b873f56
Fire off bind handlers when session_created? runs
...
Also refactor because bind handlers don't use setup_handler.
2018-07-12 10:45:59 -05:00
5b60a91b66
Style and code optimization changes
2018-07-12 13:54:47 +02:00
5b36515947
Merge remote-tracking branch 'origin/master' into vpef
2018-07-12 13:23:44 +02:00
adff986908
Land #10287 , Add advanced option to skip WP checks
2018-07-11 14:25:19 -05:00
df2f58fb08
Add WPCHECK (Bool) advanced option to Exploit::Remote::HTTP::Wordpress
2018-07-11 07:09:28 +00:00
26c505e336
[+] Update resource meta command help info
...
Signed-off-by: WangYihang <wangyihanger@gmail.com >
2018-07-11 13:06:33 +08:00
e7ddb6fdf5
Add API docs for logins endpoints
2018-07-10 14:21:19 -05:00
Erin Bleiweiss