cgranleese-r7
0e9cad6d45
Adds MySQL session type
2024-02-02 14:39:37 +00:00
Jeffrey Martin
bed552d26e
set error on unsupported LDAP auth
2024-02-02 08:36:00 -06:00
adfoster-r7
48221e594d
Land #18704 , Leverage the module metadata cache in the module_sets
2024-02-02 14:16:46 +00:00
adfoster-r7
7ac4387d35
Land #18696 , Convert MSSQL mixin to class
2024-02-02 14:14:34 +00:00
Zach Goldman
35778e92b2
client consolidation
...
convert first module from remote to client
move client to rex
remove metasploit mixin
2024-02-01 17:23:55 -06:00
Jack Heysel
3c46f51924
Land #18753 , Fix typo in alloc_and_write_wstring
...
The method str_to_uniz_a was being called but does not exist.
The actual method name is str_to_uni_z, this PR fixes that typo.
2024-02-01 15:09:16 -05:00
Jeffrey Martin
1c334ad670
address stack trace noticed in testing
2024-02-01 08:49:16 -06:00
Jeffrey Martin
e5b5f12a4e
add missing sasl mechanism constant
...
* support mechanism reported as NTLM or GSS-SPNEGO
* return ResultCodeAuthMethodNotSupported for unknown bindRequest auth
2024-02-01 08:44:55 -06:00
adfoster-r7
4d0ba2fa1d
Land #18742 , Memory search module improvements
2024-01-30 17:39:12 +00:00
bwatters
d05b85de50
Land #18680 , Shared SMB Service
...
Merge branch 'land-18680' into upstream-master
2024-01-26 14:42:11 -06:00
upsidedwn
9391e11202
Fix typo in alloc_and_write_wstring calling non-existent method
...
`str_to_uniz_a` does not exist, updated to `str_to_uni_z`. Looking at cross-references, only two modules use this method to convert from ruby strings to null-terminated WCHARs. Updated the comments to clarify usage of this method and fixed the typo.
2024-01-27 00:01:03 +08:00
Jeffrey Martin
4cb18483d6
cleanup LDAP NTLM type2 response
2024-01-25 10:56:25 -06:00
sjanusz-r7
aac74778b9
Move memory search method to Meterpreter stdapi
2024-01-24 19:53:30 +00:00
adfoster-r7
4784afae6a
Land #18741 , add ntpath tests
2024-01-24 12:48:47 +00:00
Dean Welch
f2a1d16fbc
Verify ntpath works as expected
2024-01-24 11:59:31 +00:00
adfoster-r7
15d0d4f0df
Land #18663 , Add new PostgreSQL Session Type
2024-01-24 10:46:26 +00:00
sjanusz-r7
73dbe2e89d
Add PostgreSQL multi-line query transform tests
2024-01-23 17:03:16 +00:00
sjanusz-r7
9de20d3c7f
Add additional comments to PostgreSQL cmd_run_help
2024-01-22 14:02:10 +00:00
sjanusz-r7
7f0f65d867
Align PostgreSQL Shell REPL output with psql utility
2024-01-22 13:56:09 +00:00
adfoster-r7
f56c9fc9ac
Land #18662 , Fix dns resolution skipping over nameservers with valid responses
2024-01-19 16:44:16 +00:00
sjanusz-r7
23a9938283
Add PostgreSQL session type
2024-01-19 10:29:37 +00:00
Dean Welch
2cf045d3c4
Leverage the module metadata cache in the module_sets
2024-01-15 14:56:46 +00:00
Jeffrey Martin
5a14575a31
Adjustment for extra knobs to tweak during auth
...
* clarify the NTLM SASL challenge
* add default case for unsuppoted SASL types
* implement unknown method to support override
2024-01-11 10:30:58 -06:00
Spencer McIntyre
caf26fbe55
Fix up old references to HTTP code
2024-01-11 10:56:40 -05:00
Spencer McIntyre
ad10cb84a9
Shorten the gss portion of the hardcore alias
...
Drop keys whose values are empty to shorten the string
2024-01-09 14:00:41 -05:00
Spencer McIntyre
024bdaec6d
Add a proper rex-based service for the SMB server
2024-01-08 16:54:22 -05:00
adfoster-r7
b4a043f511
Fix incorrect severity_code check in drda proto implementation
2024-01-08 10:57:43 +00:00
h00die
6a851855a8
spelling fixes for lib folder
2024-01-06 15:54:49 -05:00
Spencer McIntyre
b10e8d566b
Initial Rex SMB service to allow sharing
2024-01-05 17:18:08 -05:00
Dean Welch
4bdff53358
Refactor dns send_tcp
2024-01-05 10:38:31 +00:00
Dean Welch
f92b2662c4
Fix dns resolution skipping over nameservers with valid responses
2024-01-04 14:10:45 +00:00
Jeffrey Martin
2ab1b7a310
adjustments to NTLM LDAP support
...
* invert storage test for callback
* do not override service instance domain and hostname
* remove wrapping `Array` on `context_data` in response
* generate NTLM Type1 message instead of hardcoded blob
2024-01-02 13:08:48 -06:00
cgranleese-r7
5f396245f2
Land #18539 , Add Smb session type
2023-12-12 11:45:19 +00:00
Dean Welch
fb815f5faf
Code review changes
2023-12-12 10:46:40 +00:00
Jack Heysel
3bad98afc6
Land #18488 , add kerberos_tickets post module
...
Adds a module to manage kerberos tickets from a compromised
host. This PR also includes rail gun enhancements.
2023-12-07 19:12:48 -05:00
Dean Welch
82b9fda14e
Get address/port from socket rather than the smb client
2023-12-05 14:14:03 +00:00
Dean Welch
25b34101f1
use session instead of client
2023-12-04 17:55:15 +00:00
Dean Welch
4026d99d0f
Add smb session tests
2023-12-04 17:55:15 +00:00
Dean Welch
cd8cc75cf3
Add smb session type
2023-12-04 17:55:11 +00:00
Spencer McIntyre
708c795890
Land #18560 , Forging diamond and sapphire tickets
2023-11-28 11:14:15 -05:00
Christophe De La Fuente
0d591a3136
Land #18526 , Add a command to customise DNS resolution
2023-11-23 17:46:16 +01:00
Ashley Donaldson
473ded345b
Fix UDP detection when DNS resolution is not on
2023-11-23 10:34:09 +11:00
Spencer McIntyre
e9d6bab975
Move the ServerClient code into a dedicated file
2023-11-22 13:34:18 -05:00
Ashley Donaldson
ef9a165d22
Changes from code review
2023-11-22 16:43:02 +11:00
Ashley Donaldson
34bd661d3f
Fall back to other server if first one fails
2023-11-22 09:06:06 +11:00
adfoster-r7
7f8da5a121
Land #18558 , Support x64 in enum_chrome
2023-11-21 15:26:56 +00:00
adfoster-r7
d98a1e9aaa
Land #18548 , Refactor the ghostcat module to use the AJP definitions provided by Rex::Proto
2023-11-21 13:29:11 +00:00
Spencer McIntyre
9d757990fe
Fix LocalAlloc/LocalFree definitions
...
Railgun should not be using DWORD for pointer sizes because it breaks
things on 64-bit sessions.
Fixes #18544
2023-11-20 16:23:33 -05:00
Spencer McIntyre
69e5caa1a0
Refactor the ghostcat module to use the AJP defs
2023-11-17 12:58:05 -05:00
Ashley Donaldson
9d873cb7ac
Fix bug in writing UpnDnsInfo structure, and include in sapphire PAC
2023-11-17 13:49:55 +11:00