Commit Graph

5658 Commits

Author SHA1 Message Date
Tim W 0807de6b0f Land #15917, fix readline error when two options only differ in case 2021-12-01 06:01:38 +00:00
Tim W 0d5eef029a let the user know the powershell script must end in .ps1 on failure 2021-11-30 06:17:48 +00:00
Ashley Donaldson 5e05ce872e Added tab completion to powershell import command 2021-11-30 09:46:12 +11:00
Ashley Donaldson 607ff2727a Resolve readline error when two options differ only in case 2021-11-29 12:47:28 +11:00
sjanusz ce3215e35b Fix broken files check, make return dirs consistent 2021-11-26 12:51:07 +00:00
dwelch-r7 afb9cbfb77 Only normalize new/updated hosts after nmap import 2021-11-25 13:46:57 +00:00
Grant Willcox 0007887a0c Land #15898, trade URI.encode & URI.escape for Ruby 3 2021-11-23 12:07:48 -06:00
dwelch-r7 b83e8a2fa7 Tell the user about shell -it 2021-11-23 12:23:03 +00:00
Jeffrey Martin 21a6a18d92 trade URI.encode & URI.escape for Ruby 3
Ruby 3 removed the `URI.escape` methods however access to
the a parse for the same RFC is stil available at `URI::DEFAULT_PARSER.escape`.

Per the Ruby forum [comment](https://bugs.ruby-lang.org/issues/17309#note-1) this should equal.
2021-11-22 14:11:03 -06:00
Grant Willcox 7f6d661ff7 Land #15866, Add Exploit For CVE-2021-38294 (Apache Storm Nimbus getTopologyHistory RCE) 2021-11-18 17:02:50 -06:00
Grant Willcox 7b06ee9701 Land #15889, Add validation for resizeable interactive shells 2021-11-18 14:12:56 -06:00
dwelch-r7 3b74021e19 Add validation for resizable interactive shells 2021-11-18 13:05:01 +00:00
Ashley Donaldson 81338225f0 Respect path expansion when performing path-based tab completion 2021-11-18 14:50:22 +11:00
Grant Willcox 9023c61ac8 Land #15851, User Agent Refresh 2021-11-17 15:08:52 -06:00
Ashley Donaldson f020c99a85 Implement suggestions from code review 2021-11-16 11:07:48 +11:00
Grant Willcox e65b10c57c Land #15862, Expand environment variables on Linux Meterpreter 2021-11-15 14:15:41 -06:00
Grant Willcox e6f38b3226 Rename dir parameter in Dir.match to match_dir to make more sense with new changes 2021-11-15 10:50:11 -06:00
Ashley Donaldson 7bf75c0de5 Better support tab completing through a series of directories when using meterpreter 2021-11-15 17:22:38 +11:00
Ashley Donaldson 90695e8399 Use expand_path in other file/directory-based meterpreter commands 2021-11-15 12:18:56 +11:00
Ashley Donaldson 32bf9f60d1 Explicitly select platforms to manually perform path expansion 2021-11-15 11:44:08 +11:00
Spencer McIntyre 0b3f95abca Writeup the module docs and move the protocol code 2021-11-12 15:15:51 -05:00
Spencer McIntyre 40a4d09c26 Fix SSL support in Meterpreter's TCP server 2021-11-12 09:16:22 -05:00
Spencer McIntyre fba2330f0b Support SSL TCP server channels in Meterpreter 2021-11-12 09:05:17 -05:00
Ashley Donaldson ebd927da44 Apply suggestions from code review
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com>
2021-11-12 11:56:49 +11:00
Ashley Donaldson 7e2c6edb64 Expand paths for linux platforms 2021-11-11 20:14:06 +11:00
Ashley Donaldson 935eff899a Only perform deduplication if a value is actually returned 2021-11-11 13:17:35 +11:00
Ashley Donaldson 4986583f41 Fix bug in tab completion in case-sensitive situations
Includes a fix for a crash caused when tab completing.
This crash is the result of a bug in rb-readline when the only remaining options
provided in the tab completion procedure are identical. The bug is only triggered
when going case-insensitive, but we can avoid it by de-duping the list sent back to
rb-readline.
2021-11-11 12:09:59 +11:00
Tim W 3066c5b05e Revert "Fix bug in tab completion in case-sensitive situations"
This reverts commit 22fb90b258.
2021-11-10 16:44:29 +00:00
Tim W 3cce6dac07 Land #15847, fix meterpreter case sensitive tab completion 2021-11-10 16:20:12 +00:00
adfoster-r7 1bff0bebf4 Land #15820, Fix named pipe pivoting 2021-11-10 12:09:43 +00:00
Ashley Donaldson 2447ce3eba Use a random, modern UA string for HTTP payloads 2021-11-10 10:40:32 +11:00
Ashley Donaldson cab04d33f5 Use existing Rex::UserAgent class; keep UA string consistent across an MSF session 2021-11-10 10:05:45 +11:00
Tim W 1a2ff7ff3d Land #15846, fix meterpreter > download tab completion 2021-11-09 16:54:44 +00:00
Ashley Donaldson 839722720a Updated the default metasploit user agent string to be more modern
Selected from a set of currently-modern browser UA strings
2021-11-09 18:20:41 +11:00
Ashley Donaldson d4b0b9c4ab Don't getsystem if we are already SYSTEM 2021-11-09 16:03:55 +11:00
Ashley Donaldson 35a6622318 Tab-complete for file downloads 2021-11-09 10:42:11 +11:00
Ashley Donaldson 22fb90b258 Fix bug in tab completion in case-sensitive situations 2021-11-09 10:18:02 +11:00
Ashley Donaldson 937e208de8 Give warning rather than failure when running DCSync as SYSTEM 2021-11-08 15:56:29 +11:00
Spencer McIntyre bdb497ddd4 Dedent the websocket module 2021-11-05 10:41:07 -04:00
Spencer McIntyre a85cd3d5f6 Add logging to get_wsframe 2021-11-03 11:26:31 -04:00
dwelch-r7 d6c08831d6 Fix named pipe pivoting 2021-11-03 14:14:39 +00:00
Spencer McIntyre 3d2fd9bc90 Don't process partial WS frames 2021-11-02 17:13:26 -04:00
Spencer McIntyre 6930200422 Fix partial bindata reads within web sockets 2021-11-02 17:13:13 -04:00
adfoster-r7 63da82d1f9 Fix iis internal ip module crash 2021-10-26 12:52:26 +01:00
Tim W e52083a65c Land #15785, add command name to meterpreter packet inspect 2021-10-21 12:14:17 +01:00
adfoster-r7 2f86b332f5 Land #15733, Add Module For Kubernetes Pod Authenticated Code Execution 2021-10-21 10:46:20 +01:00
alanfoster ae3efa0589 Add command name to Meterpreter packet inspect 2021-10-21 02:08:39 +01:00
dwelch-r7 2c8ef87649 Add flag for running command in pty 2021-10-18 14:31:30 +01:00
Spencer McIntyre e04882689a Support an explicit HTTP comm 2021-09-30 16:54:01 -04:00
Spencer McIntyre 099b47b6d5 Synchronize the WebSocket interface 2021-09-30 16:53:24 -04:00