adfoster-r7
f6ed9ef12d
Extract db command helpers to standalone module
2022-12-13 17:01:49 +00:00
adfoster-r7
7625d4b08b
Add ticket flags when outputting krb5 ccache
2022-12-13 12:19:16 +00:00
Spencer McIntyre
024fc87b4c
Land #17272 , Add F5 MCP post module
...
Add F5 MCP post module
2022-12-12 14:20:31 -05:00
Spencer McIntyre
34451940c7
Fix uploading from shell sessions
2022-12-12 12:02:33 -05:00
Spencer McIntyre
59d4f9b7e9
Fix downloading from shells to a directory
...
Prior to this change if the destination argument issued to a shell
session's internal `download` command was a directory, the command would
crash and the shell would be lost.
2022-12-12 10:42:11 -05:00
Spencer McIntyre
a9cdb77a72
Use consistent casing and fix typos
2022-12-12 10:30:50 -05:00
Spencer McIntyre
a80db73bab
Land #17325 , add impersonation for get_ticket
...
Enable the `get_ticket` module to impersonate a user with S4U2self and S4U2proxy
2022-12-12 09:10:37 -05:00
Christophe De La Fuente
86ec66c43d
Add decoding support
...
- for Rex::Proto::Kerberos::Model::Checksum
- for Rex::Proto::Kerberos::Model::PreAuthForUser
- add specs
2022-12-12 12:56:30 +01:00
adfoster-r7
2ea880c799
Show ssh key with verbose creds command
2022-12-10 00:08:54 +00:00
Grant Willcox
c84b2a67d7
Land #17345 , Update report api to return nil when no active db
2022-12-09 14:02:28 -06:00
Grant Willcox
b65b0a7bc5
Land #17352 , Fixes crash in meterp when file_version asks for a file that doesn't exist
2022-12-09 12:10:29 -06:00
Grant Willcox
e29d9effba
Land #17346 , Update rspec thread counting logic
2022-12-09 10:32:55 -06:00
whoot
771b7c58f9
change brute-forcer
2022-12-09 12:33:13 +01:00
Ashley Donaldson
99e576d023
Fixes crash in meterp when file_version asks for a file that doesn't exist
2022-12-09 11:55:29 +11:00
Metasploit
06b72a0b1c
Bump version of framework to 6.2.31
2022-12-08 12:12:22 -06:00
Spencer McIntyre
2fc8b0a7a6
Add GitHub refereces to the patch details
2022-12-08 10:47:44 -05:00
Dean Welch
fc3bb585be
Move TypeSerialization1 to it's own file
2022-12-08 13:20:41 +00:00
Dean Welch
1e1580e346
Move TypeSerialization1 to it's own file
2022-12-08 13:11:47 +00:00
adfoster-r7
aba9cba9dd
Update rspec thread counting logic
2022-12-08 00:28:00 +00:00
adfoster-r7
8f22d24577
Update report api to return nil when no active db
2022-12-07 23:09:59 +00:00
Grant Willcox
e7b20ad155
Add in monkey patch to the search method of Net::LDAP::Connection to allow us to use controls when search whilst we await an upstream patch in Net::LDAP
2022-12-07 15:17:52 -06:00
Heyder Andrade
cf6d5d3a14
It made the gadgets being used more readable
2022-12-06 17:47:49 +01:00
Dean Welch
d239e9b007
Don't autoload krb5Pac
2022-12-06 13:01:47 +00:00
Dean Welch
1e2ada3cce
Add options validation depending on action in forge_ticket.rb
2022-12-06 12:55:42 +00:00
bwatters
37540572e0
Land #17214 , add database functionality to vcenter post module
...
Merge branch 'land-17214' into upstream-master
2022-12-05 12:50:14 -06:00
Dean Welch
405271a52f
Add pac BinData Model
2022-12-05 14:03:21 +00:00
Christophe De La Fuente
6e7d4edf02
Land #16990 , Syncovery for Linux - Login brute-force utility
2022-12-05 14:39:29 +01:00
adfoster-r7
7a46cff0a1
Land #17305 , Adds support to RPC for automatically choosing module payload defaults
2022-12-05 12:59:21 +00:00
cgranleese-r7
4e539df3c3
Adds support to find default payloads
2022-12-05 11:52:11 +00:00
cn-kali-team
907612b41d
Dbeaver
2022-12-05 14:54:19 +08:00
Heyder Andrade
8aca86b816
Apply suggestions from code review
2022-12-04 17:29:05 +01:00
Heyder Andrade
5c3ac339d0
Apply suggestions from code review
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2022-12-04 12:13:50 +01:00
bcoles
431804ef15
Fix typos: Replace 'the the' with 'the'
2022-12-04 17:41:24 +11:00
Christophe De La Fuente
c6f8bae1ab
Fix from code review and updates the KrbUseCachedCredentials logic
2022-12-02 15:28:08 +01:00
whoot
b32ec581d8
apply suggestions
2022-12-02 10:33:25 +01:00
h00die
7ec7cdfb97
fix vcenter spec error
2022-12-01 16:43:58 -05:00
Christophe De La Fuente
cc61a26668
Add S4U2Self and S4U2Proxy support to impersonate a user
2022-12-01 20:42:13 +01:00
Metasploit
fbc842693f
Bump version of framework to 6.2.30
2022-12-01 12:10:26 -06:00
Christophe De La Fuente
d3057f15b2
Land #17275 , Add Exploit For CVE-2022-41082 (ProxyNotShell)
2022-11-30 18:16:19 +01:00
Ashley Donaldson
5fce80ed1d
Added comments to most functions
2022-11-30 11:53:57 +11:00
Ashley Donaldson
97aef31180
Removed vestigial code while we're at it
2022-11-30 11:31:27 +11:00
Ashley Donaldson
1231eefe55
Fixed WQL module while I'm at it
2022-11-30 10:26:19 +11:00
Heyder Andrade
704cee436b
Apply suggestions from code review
2022-11-29 15:25:14 +01:00
Heyder Andrade
c1236500f1
Apply suggestions from code review
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-11-29 14:12:39 +01:00
adfoster-r7
750192afa4
Add pkinit error codes
2022-11-29 10:36:10 +00:00
Spencer McIntyre
8ea8e2410d
Land #17299 , Fixes #17227
...
Fixes #17227 - polkit_dbus_auth_bypass module when run from a command…
2022-11-28 16:22:52 -05:00
Spencer McIntyre
cd828a82c8
Fix the DH key construction for OpenSSL3
2022-11-28 14:54:10 -05:00
Spencer McIntyre
abe0549db6
Land #17226 , Module to request TGT/TGS tickets
...
Module to request TGT/TGS Kerberos tickets from the KDC
2022-11-28 11:59:17 -05:00
Spencer McIntyre
f24df8a051
Change an exception class and drop DOMAIN passing
2022-11-28 10:06:14 -05:00
Spencer McIntyre
009c6c5350
Add the MaxBackendRetries datastore option
2022-11-28 09:45:04 -05:00