Shelby Pace
9f2dae38c8
Land #15079 , add meterpreter compat requirements
2021-05-24 16:00:08 -05:00
Spencer McIntyre
48272435c2
Fix a bug in GraphML parser for escaped strings
...
The GraphML parser was failing to properly handle escaped strings within
XML nodes. The #characters method was being called multiple times
causing the preceding value to be overwritten rather than appended to.
2021-05-19 12:44:37 -04:00
Ashley Donaldson
278c6532d0
Implemented suggested changes.
...
Download directly to loot directory.
2021-05-07 09:28:31 +10:00
Spencer McIntyre
92d981fff2
Land #15111 , Fix unreliable sessions -c output
...
Fixes #15097
2021-05-05 09:27:49 -04:00
Ashley Donaldson
a47b1af60b
Added module to dump memory for processes, using Windows Meterpreter
2021-05-05 18:12:40 +10:00
Tim W
5f92746b7d
add Process.capture_output
2021-05-04 20:48:58 +01:00
Spencer McIntyre
fdf6f20e44
Remove the static command maps
...
I didn't know we had command name maps already defined when I wrote the
class that did it all dynamically. Since it's done though I think it
makes sense to keep the dynamic version to avoid repetition.
2021-04-29 16:26:55 -04:00
Jeffrey Martin
cf6a401b9d
more flexible time parse
...
Acunetix reports may serialize time in multiple patterns
Previously
```
<StartTime><![CDATA[8/5/2016, 23:45:12]]></StartTime>
```
Recently
```
<StartTime><![CDATA[2021-03-29T01:23:45.112233+01:00]]></StartTime>
```
2021-04-29 10:28:44 -05:00
Tim W
142ba7f123
Fix #15097 , fix unreliable sessions -c output
2021-04-28 19:06:29 +01:00
cgranleese-r7
7e2485260f
Fixes meterpreter tab completion issue
2021-04-28 10:52:05 +01:00
Grant Willcox
74624c0758
Strip history lines before comparing to ensure more accurate comparisons. Also change logic so that lines that start with a space aren't logged to the history, giving users an option to optionally not log sensitive commands to the history file
2021-04-26 13:35:06 -05:00
pingport80
8894d4bf12
Remove leading and trailing spaces from readline input
2021-04-26 13:34:42 -05:00
Spencer McIntyre
da01a839d1
Set required commands spec for all post mixins
2021-04-26 12:28:18 -04:00
Spencer McIntyre
14a35a0bb3
Add documentation to the two Meterpreter mappers
2021-04-22 17:54:27 -04:00
Spencer McIntyre
1c8dcc357b
Work around an old Windows Meterpreter bug
2021-04-22 17:54:21 -04:00
Spencer McIntyre
a16e248d45
Add the new Meterpreter command mapper
2021-04-21 15:53:06 -04:00
Spencer McIntyre
4978ad1f13
Be backwards compatible with the Windows Meterpreter
...
The older Windows Meterpreter had a bug where the core command IDs would
not be properly returned and added to the command array. Until the major
version of the payloads gem is bumped to ensure that all instances have
that change, skip validating Windows core command IDs. Any commands that
skip the proactive validation and fail, will continue to fail as they
did before.
2021-04-15 11:12:50 -04:00
Spencer McIntyre
f941ccaf1c
Raise more descriptive meterpreter related error messages
2021-04-14 12:42:33 -04:00
dwelch-r7
c267a7fc2d
Fix issue with Rex::Proto::NTP namespacing
2021-04-06 14:45:11 +01:00
Alan Foster
2e92bd1227
Fix switching between pry and irb
2021-03-25 20:08:26 +00:00
Grant Willcox
26055e12ff
Land #14934 , Fix encoding issues when downloading a utf-8 directory directly within Meterpreter
2021-03-23 14:04:41 -05:00
Tim W
95c384c0cb
fix downloading utf-8 file into a ascii name
2021-03-23 17:35:25 +00:00
Spencer McIntyre
79967f2179
Land #14844 , Move on_session_open event to after the session has been bootstrapped
2021-03-23 08:50:18 -04:00
Tim W
afecde20d5
Fix #14888 , fix downloading a utf-8 directory directly
2021-03-22 22:16:32 +00:00
cgranleese-r7
799ea56316
replace ::Rex::Socket.gethostbyname with Socket.getaddrinfo
2021-03-19 11:01:27 +00:00
Grant Willcox
50ef32c121
Land #14888 , Fix #13798 and #14128 by fixing unicode issues on Meterpreter caused by unicode file/directory names
2021-03-15 16:46:21 -05:00
adfoster-r7
ce48d758b4
Land #14887 , Fix RequestError class undefined method issue
2021-03-15 15:20:58 +00:00
dwelch-r7
6aaf44c902
rubocop files and make the exclusions more localised
2021-03-15 13:27:37 +00:00
Tim W
54c07c301a
Fix #13798 , Fix #14128 , fix meterpreter > ls within a unicode directory
2021-03-13 10:58:04 +00:00
Shelby Pace
f46c7b81fe
convert const name to str before check
2021-03-12 18:01:22 -06:00
Tim W
1a7704787f
Fix #13798 , Fix #14128 , fix meterpreter > download * on utf-8 filenames
2021-03-12 19:51:40 +00:00
dwelch-r7
a4dec77536
replace print_error with print_warning when loading duplicate extensions
2021-03-10 12:11:48 +00:00
Alan Foster
af330874f5
Prefix time module with namespace resolution operator
2021-03-04 13:19:09 +00:00
Grant Willcox
5576a2c4e9
Land #14843 , Extract PseudoShell into its own file for zeitwerk
2021-03-03 16:57:27 -06:00
dwelch-r7
1e8ec469fb
Extract PseudoShell into it's own file for zeitwerk to pick it up properly
2021-03-02 12:39:41 +00:00
Shelby Pace
0d8df5e0bf
allow searches to start from root path
2021-02-26 15:53:33 -06:00
dwelch-r7
a6461a0cfe
rubocop
2021-02-25 16:47:49 +00:00
dwelch-r7
319f15d938
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
dwelch-r7
9eeb793bfd
Add missing requires for scoks proxy
2021-02-25 14:16:17 +00:00
dwelch-r7
2ec29f3fe2
Wrap kiwi cmd arguments in quotes
2021-02-24 17:27:21 +00:00
dwelch-r7
0cb2bdf9db
Revert accidental commit
2021-02-24 14:28:13 +00:00
dwelch-r7
36abf40d54
quote kiwi arguments
2021-02-24 14:22:48 +00:00
Spencer McIntyre
f2e1afed79
Fix session verification by checking TLV negotiation
2021-02-22 11:19:31 -05:00
Spencer McIntyre
7c51dd0b68
Always define the detach and ssl_verify commands in the cmds hash
...
Defining the commands in the cmds hash is necessary for them to be
filtered and then reported to the user as incompatible when applicable.
This moves their special compatibility checks into the actual command
handler.
2021-02-19 15:51:41 -06:00
Spencer McIntyre
8a0a56f584
Use a more descriptive status indicator for command routines
2021-02-19 15:51:41 -06:00
Spencer McIntyre
97479066ba
Disabling filtering via command IDs on Windows for now
...
Filtering via command IDs would be a backwards incompatible change, so
skip it on Windows until the payloads gem has had a major version bump.
2021-02-19 15:51:41 -06:00
Spencer McIntyre
2bc8ff8db7
Consistently return nil when an id or name fails to resolve
2021-02-19 15:51:40 -06:00
Spencer McIntyre
8a8994bb57
Raise a more specific error when loading an unsupported extension
2021-02-19 15:51:40 -06:00
Spencer McIntyre
a587c166cb
Add and use a callback to report meterpreter commands that are disabled
2021-02-19 15:51:40 -06:00
Spencer McIntyre
b983365665
Filter Meterpreter commands based on support instead of fingerprinting
2021-02-19 15:51:39 -06:00