Commit Graph

5658 Commits

Author SHA1 Message Date
Shelby Pace 9f2dae38c8 Land #15079, add meterpreter compat requirements 2021-05-24 16:00:08 -05:00
Spencer McIntyre 48272435c2 Fix a bug in GraphML parser for escaped strings
The GraphML parser was failing to properly handle escaped strings within
XML nodes. The #characters method was being called multiple times
causing the preceding value to be overwritten rather than appended to.
2021-05-19 12:44:37 -04:00
Ashley Donaldson 278c6532d0 Implemented suggested changes.
Download directly to loot directory.
2021-05-07 09:28:31 +10:00
Spencer McIntyre 92d981fff2 Land #15111, Fix unreliable sessions -c output
Fixes #15097
2021-05-05 09:27:49 -04:00
Ashley Donaldson a47b1af60b Added module to dump memory for processes, using Windows Meterpreter 2021-05-05 18:12:40 +10:00
Tim W 5f92746b7d add Process.capture_output 2021-05-04 20:48:58 +01:00
Spencer McIntyre fdf6f20e44 Remove the static command maps
I didn't know we had command name maps already defined when I wrote the
class that did it all dynamically. Since it's done though I think it
makes sense to keep the dynamic version to avoid repetition.
2021-04-29 16:26:55 -04:00
Jeffrey Martin cf6a401b9d more flexible time parse
Acunetix reports may serialize time in multiple patterns
Previously
```
<StartTime><![CDATA[8/5/2016, 23:45:12]]></StartTime>
```
Recently
```
<StartTime><![CDATA[2021-03-29T01:23:45.112233+01:00]]></StartTime>
```
2021-04-29 10:28:44 -05:00
Tim W 142ba7f123 Fix #15097, fix unreliable sessions -c output 2021-04-28 19:06:29 +01:00
cgranleese-r7 7e2485260f Fixes meterpreter tab completion issue 2021-04-28 10:52:05 +01:00
Grant Willcox 74624c0758 Strip history lines before comparing to ensure more accurate comparisons. Also change logic so that lines that start with a space aren't logged to the history, giving users an option to optionally not log sensitive commands to the history file 2021-04-26 13:35:06 -05:00
pingport80 8894d4bf12 Remove leading and trailing spaces from readline input 2021-04-26 13:34:42 -05:00
Spencer McIntyre da01a839d1 Set required commands spec for all post mixins 2021-04-26 12:28:18 -04:00
Spencer McIntyre 14a35a0bb3 Add documentation to the two Meterpreter mappers 2021-04-22 17:54:27 -04:00
Spencer McIntyre 1c8dcc357b Work around an old Windows Meterpreter bug 2021-04-22 17:54:21 -04:00
Spencer McIntyre a16e248d45 Add the new Meterpreter command mapper 2021-04-21 15:53:06 -04:00
Spencer McIntyre 4978ad1f13 Be backwards compatible with the Windows Meterpreter
The older Windows Meterpreter had a bug where the core command IDs would
not be properly returned and added to the command array. Until the major
version of the payloads gem is bumped to ensure that all instances have
that change, skip validating Windows core command IDs. Any commands that
skip the proactive validation and fail, will continue to fail as they
did before.
2021-04-15 11:12:50 -04:00
Spencer McIntyre f941ccaf1c Raise more descriptive meterpreter related error messages 2021-04-14 12:42:33 -04:00
dwelch-r7 c267a7fc2d Fix issue with Rex::Proto::NTP namespacing 2021-04-06 14:45:11 +01:00
Alan Foster 2e92bd1227 Fix switching between pry and irb 2021-03-25 20:08:26 +00:00
Grant Willcox 26055e12ff Land #14934, Fix encoding issues when downloading a utf-8 directory directly within Meterpreter 2021-03-23 14:04:41 -05:00
Tim W 95c384c0cb fix downloading utf-8 file into a ascii name 2021-03-23 17:35:25 +00:00
Spencer McIntyre 79967f2179 Land #14844, Move on_session_open event to after the session has been bootstrapped 2021-03-23 08:50:18 -04:00
Tim W afecde20d5 Fix #14888, fix downloading a utf-8 directory directly 2021-03-22 22:16:32 +00:00
cgranleese-r7 799ea56316 replace ::Rex::Socket.gethostbyname with Socket.getaddrinfo 2021-03-19 11:01:27 +00:00
Grant Willcox 50ef32c121 Land #14888, Fix #13798 and #14128 by fixing unicode issues on Meterpreter caused by unicode file/directory names 2021-03-15 16:46:21 -05:00
adfoster-r7 ce48d758b4 Land #14887, Fix RequestError class undefined method issue 2021-03-15 15:20:58 +00:00
dwelch-r7 6aaf44c902 rubocop files and make the exclusions more localised 2021-03-15 13:27:37 +00:00
Tim W 54c07c301a Fix #13798, Fix #14128, fix meterpreter > ls within a unicode directory 2021-03-13 10:58:04 +00:00
Shelby Pace f46c7b81fe convert const name to str before check 2021-03-12 18:01:22 -06:00
Tim W 1a7704787f Fix #13798, Fix #14128, fix meterpreter > download * on utf-8 filenames 2021-03-12 19:51:40 +00:00
dwelch-r7 a4dec77536 replace print_error with print_warning when loading duplicate extensions 2021-03-10 12:11:48 +00:00
Alan Foster af330874f5 Prefix time module with namespace resolution operator 2021-03-04 13:19:09 +00:00
Grant Willcox 5576a2c4e9 Land #14843, Extract PseudoShell into its own file for zeitwerk 2021-03-03 16:57:27 -06:00
dwelch-r7 1e8ec469fb Extract PseudoShell into it's own file for zeitwerk to pick it up properly 2021-03-02 12:39:41 +00:00
Shelby Pace 0d8df5e0bf allow searches to start from root path 2021-02-26 15:53:33 -06:00
dwelch-r7 a6461a0cfe rubocop 2021-02-25 16:47:49 +00:00
dwelch-r7 319f15d938 Handle nil versions for rubygems 4 2021-02-25 16:47:49 +00:00
dwelch-r7 9eeb793bfd Add missing requires for scoks proxy 2021-02-25 14:16:17 +00:00
dwelch-r7 2ec29f3fe2 Wrap kiwi cmd arguments in quotes 2021-02-24 17:27:21 +00:00
dwelch-r7 0cb2bdf9db Revert accidental commit 2021-02-24 14:28:13 +00:00
dwelch-r7 36abf40d54 quote kiwi arguments 2021-02-24 14:22:48 +00:00
Spencer McIntyre f2e1afed79 Fix session verification by checking TLV negotiation 2021-02-22 11:19:31 -05:00
Spencer McIntyre 7c51dd0b68 Always define the detach and ssl_verify commands in the cmds hash
Defining the commands in the cmds hash is necessary for them to be
filtered and then reported to the user as incompatible when applicable.
This moves their special compatibility checks into the actual command
handler.
2021-02-19 15:51:41 -06:00
Spencer McIntyre 8a0a56f584 Use a more descriptive status indicator for command routines 2021-02-19 15:51:41 -06:00
Spencer McIntyre 97479066ba Disabling filtering via command IDs on Windows for now
Filtering via command IDs would be a backwards incompatible change, so
skip it on Windows until the payloads gem has had a major version bump.
2021-02-19 15:51:41 -06:00
Spencer McIntyre 2bc8ff8db7 Consistently return nil when an id or name fails to resolve 2021-02-19 15:51:40 -06:00
Spencer McIntyre 8a8994bb57 Raise a more specific error when loading an unsupported extension 2021-02-19 15:51:40 -06:00
Spencer McIntyre a587c166cb Add and use a callback to report meterpreter commands that are disabled 2021-02-19 15:51:40 -06:00
Spencer McIntyre b983365665 Filter Meterpreter commands based on support instead of fingerprinting 2021-02-19 15:51:39 -06:00