kalidor
b292586fb3
Avoid exception 'TypeError exception class/object expected'
2022-06-09 11:58:01 +02:00
Grant Willcox
63822f6e37
Land #16651 , [SQLi library] Ensure the encoder is always used in the #test_vulnerable methods
2022-06-08 17:15:22 -05:00
Redouane NIBOUCHA
88036a7f1f
Check for nil before using the decoder in test_vulnerable
2022-06-08 22:00:03 +02:00
Jack Heysel
67ea2bc23c
Land #16630 Fix duplicate ntlm hash storage
...
Net-NTLM (v1 and v2) hashes were being duplicated when
stored in the database due to the unique data in the challenge
dispite being the same. This fixes that issue
2022-06-08 14:07:34 -04:00
jheysel-r7
1a7cbe5b4f
Update lib/msf/core/exploit/remote/smb/server/hash_capture.rb
2022-06-08 13:45:57 -04:00
Grant Willcox
a983bbd8ba
Land #16615 , Solicited multicast-address creation bugfix
2022-06-07 14:41:52 -05:00
jheysel-r7
2b99967d0c
Merge branch 'master' into fix/duplicate-netntlm
2022-06-07 11:42:51 -04:00
Redouane NIBOUCHA
5331c343a0
Use the encoder in all the #test_vulnerable methods from the common class
2022-06-06 23:13:26 +02:00
Redouane NIBOUCHA
6d9c789f4d
Add method #read_from_file for MSSQL and PostgreSQL, and update the MySQL #read_from_file method
2022-06-06 23:07:25 +02:00
bwatters
670288a939
Fix issue where reverse_tcp did not work because of double length prepend
2022-06-06 09:10:57 -05:00
adfoster-r7
6e9765992c
Fix smb named pipe pivot crash
2022-06-06 13:00:42 +01:00
Metasploit
e79161c236
Bump version of framework to 6.2.2
2022-06-02 12:05:08 -05:00
Jack Heysel
8ccc1ebf91
Land PR #16628 , Log ntlm_session hashes
...
This PR fixes the logging and storing of
NTLM session hashes
2022-06-02 11:20:37 -04:00
Grant Willcox
44a22ab720
Land #16640 , Patch LDAP for sychronous reads
2022-06-01 16:12:09 -05:00
space-r7
6d3ccab1be
Land #16435 , add Microsoft SQL Server sqli support
2022-06-01 10:27:48 -05:00
bwatters
0c65559e83
Add a better error message when the handler fails because the shellcode file is nil
2022-05-31 14:32:22 -05:00
Christophe De La Fuente
dac355d9cf
Land #16492 , nfs_mount more intelligent mountability
2022-05-31 11:56:19 +02:00
h00die
b8cebe0dbe
nfs mount more intelligent
2022-05-30 09:47:00 -04:00
h00die
264085b63c
juniper lib updates
2022-05-29 15:55:18 -04:00
Spencer McIntyre
adcf45b0ff
Fix the arch in #handle_connection too
...
This fixes an issue with the adated peinject stage which supported both
x86 and x64 via a library that checked its own #arch.
2022-05-27 16:42:14 -04:00
Spencer McIntyre
a47b3fe694
Don't report duplicate Net-NTLM hashes
2022-05-27 14:13:06 -04:00
Spencer McIntyre
0c481ed9c9
Patch LDAP for synchronous reads
2022-05-27 10:57:28 -04:00
Spencer McIntyre
1e5f86703f
Report the correct JtR type
2022-05-27 10:16:02 -04:00
Spencer McIntyre
862c6a94a2
Log ntlm_session hashes too
...
Despite being called ntlm_session, these hashes are capable of being
cracked as the John 'netntlm' format. Additionally the format is
reported as NTLMv1-SSP in similar tools.
2022-05-27 10:07:39 -04:00
bwatters
0201693519
Rebase and update with Spencer's collab branch
2022-05-26 18:31:37 -05:00
Metasploit
a1613d6070
Bump version of framework to 6.2.1
2022-05-26 12:04:57 -05:00
Spencer McIntyre
ba9ac52b2c
Land #16622 , Bump Metasploit version to 6.2.0
2022-05-26 11:59:09 -04:00
Spencer McIntyre
5f5444936f
Land #16488 , Windows Task Scheduler Mixin
2022-05-25 12:37:03 -04:00
adfoster-r7
d225d4663c
Land #16413 , update local exploit suggester
2022-05-25 13:24:11 +01:00
adfoster-r7
c4f004423e
Bump Metasploit framework version to 6.2.0
2022-05-25 12:32:58 +01:00
bwatters
41a5891627
Add x64 reverse_winhttp support for custom stagers
2022-05-24 16:13:01 -05:00
bwatters
4426a10dd7
Add x86 reverse_winhttp support
2022-05-24 16:13:01 -05:00
bwatters
e312619418
Add support for 64-bit, rubocop, and some requested changes
2022-05-24 16:13:01 -05:00
bwatters
681455dec3
Add a custom stager type for x86 windows
2022-05-24 16:09:47 -05:00
Christophe De La Fuente
2bf0107865
Update the cmd_exec_with_result documentation
2022-05-24 17:22:07 +02:00
NikitaKovaljov
c33f284786
change from lambda to line by line logic
2022-05-24 16:24:15 +03:00
Spencer McIntyre
e4947cd127
Add ownership check for testing file writability
2022-05-24 08:44:12 -04:00
Christophe De La Fuente
63dea932ad
Land #16481 , Update Msf::Exploit::Remote::SMB::Server::Share
2022-05-24 11:50:06 +02:00
Spencer McIntyre
2c323ae4db
Move a library function to where it's needed
2022-05-23 12:36:07 -04:00
NikitaKovaljov
7f9ead454e
bugfix of improper solicited address creation
2022-05-23 15:25:53 +03:00
kalidor
e09169b281
Raise Error::SERVICE_ALREADY_RUNNING
2022-05-20 22:41:27 +02:00
kalidor
677b16e09c
Fix error when service is already running
2022-05-20 22:13:17 +02:00
Spencer McIntyre
886f031daa
Set @staged for adapted payloads when necessary
2022-05-19 16:30:54 -04:00
Spencer McIntyre
a8a9b4bbe1
Update the #generate signature to take opts
2022-05-19 16:30:54 -04:00
Spencer McIntyre
08266beac3
Pass around the conf and opts to share the arch
2022-05-19 16:30:54 -04:00
Spencer McIntyre
9a345052b6
Set the arch while generating
2022-05-19 16:30:52 -04:00
Metasploit
a2dc366eb4
Bump version of framework to 6.1.44
2022-05-19 12:04:44 -05:00
sjanusz
7103a619c2
Add validation opts, tables, custom stylers to exploit suggester
2022-05-19 16:22:47 +01:00
Christophe De La Fuente
5fd18ef864
Fixes from review
2022-05-19 14:54:07 +02:00
Christophe De La Fuente
5d637b5292
Small fixes and improvements found while writing specs
2022-05-18 15:49:57 +02:00