Commit Graph

20644 Commits

Author SHA1 Message Date
Metasploit eb4969937f Bump version of framework to 6.1.31 2022-02-17 12:10:25 -06:00
Tim W 480c44e9cb refactor DEBUG_EXPLOIT code into mixin 2022-02-16 11:38:04 +00:00
bwatters 0239ef1cc6 Land #16117, Updates for Log4Shell 2022-02-15 16:39:00 -06:00
space-r7 99226f1a5c add definitions for winspool and spoolss libs 2022-02-15 15:51:22 -06:00
adfoster-r7 18b4ce8a13 Update replicant pattern to increment refs 2022-02-15 16:08:35 +00:00
Jeffrey Martin af3fa09896 refactor smtp delivery to support continuation
When dealing with SMTP servers the communication needs to flow
a known protocol. To ensure the socket is in the correct state
after a send and receive it needs to be read until a line return
a response code followed by a `space` and additional data and `\r\n`
or the response code immediately followed by `\r\n` is returned.
2022-02-14 16:55:49 -06:00
Simon Janusz 732bd3a71c Land #16173, Add readline option to msfconsole
Add readline option to msfconsole
2022-02-14 16:11:15 +00:00
Tim W e9758f33b5 Land #16175, order the loadpath summary in alphabetical order 2022-02-14 09:52:19 +00:00
alanfoster d45783a5a0 Add readline option to msfconsole 2022-02-13 23:47:08 +00:00
Spencer McIntyre 683d4ac471 Add support for staged python command payloads 2022-02-13 12:03:08 -05:00
usiegl00 881805c543 Update ShadowMitmDispatcher fix PacketFu timeout
Setting the timeout to 0 was causing packet capturing issues in
PacketFu. Using cap.stream.each_data instead of cap.next reduces cpu
usage.
2022-02-13 21:24:57 +09:00
Tim W a13ae3882b Land #16174, fix specifying the mode on File.read for ruby 3 on multiple modules 2022-02-13 12:08:13 +00:00
alanfoster ec2ae16135 Order loadpath summary output 2022-02-12 21:47:35 +00:00
alanfoster 395ab1d77e Specify mode rb on file reads 2022-02-12 21:39:12 +00:00
Tim W c2cacffee9 Land #16170, fix java native_arch 2022-02-12 06:13:48 +00:00
Grant Willcox cfa3d15cee Land #16161, Update user agent strings 2022-02-11 16:28:14 -06:00
Grant Willcox 47fea63fdf One more update to address Apple bumping some versions at the very last minute 2022-02-11 15:57:09 -06:00
space-r7 db00991f26 Land #16150, add nagios xi web shell upload 2022-02-11 11:45:06 -06:00
usiegl00 72a0732009 Update ShadowMitmDispatcher to reduce ip lookups
The ShadowMitmDispatcher must be initialized with an interface, mac, and
ip address as keyword arguments. This prevents dispatchers from
retrieving the same network configuration multiple times.
2022-02-11 22:35:40 +09:00
sjanusz 2b281dce5c Add support for Java Meterpreter's native_arch 2022-02-11 11:43:35 +00:00
Jeffrey Martin 5bc60f5bf7 clear any additional response on smtp connect
When connecting to an SMTP server after `HELO` and auth
complete there can be additional data sent from the client
that sits in the socket queue. Adding a `get_once` after connection
has settled ensure any pending for extension responses are cleared.
2022-02-10 14:25:05 -06:00
Metasploit 0ee0e3959d Bump version of framework to 6.1.30 2022-02-10 12:06:14 -06:00
bwatters 9635fde12d Add support and templates for aarch64 targets 2022-02-10 10:49:02 -06:00
usiegl00 8558f88a14 Update the Shadow Dispatcher for portability
Use PacketFu::Utils.whoami? instead of PacketFu::Utils.default_int to
retrieve the ip address for a network interface. The Exploit class for
the Shadow Dispatcher is now a module.
2022-02-10 22:42:25 +09:00
Grant Willcox 425e57b88b Land #16163, Add the ClaimsPrincipal .NET gadget chain 2022-02-09 14:46:38 -06:00
Spencer McIntyre e6c1d20c5d Add the ClaimsPrincipal .NET gadget chain 2022-02-09 14:38:51 -05:00
space-r7 47c74a0037 Land #16121, fix rhost exception due to no session 2022-02-09 10:38:34 -06:00
Tim W a50f39ac12 return super if no session 2022-02-09 10:08:02 +00:00
Spencer McIntyre 72ca957285 Don't use default values 2022-02-08 17:40:03 -05:00
Ashley Donaldson 1f60303772 Updated user agent strings as of 9 Feb 2022 2022-02-09 08:39:05 +11:00
Spencer McIntyre 1fe01087b6 Remove trailing whitespace from command output 2022-02-08 15:37:11 -05:00
Spencer McIntyre 7d9e6c2bb9 Don't crash when the hostname can't be determined
This fixes a framework-level crash when msfconsole initializes and the
HOSTNAME environment variable is not set and the hostname binary is
missing.
2022-02-08 15:14:36 -05:00
adfoster-r7 4294dcbc80 Land #16143, Fix unknown platform error against windows when using SSH login
Fix unknown platform error against Windows when using SSH Login
2022-02-07 11:50:02 +00:00
Jake Baines 9758251278 Initial commit of CVE-2021-37343 2022-02-05 18:21:18 -08:00
sjanusz 3c6cd7cc0a Make platform check case-insensitive 2022-02-04 15:47:15 +00:00
adfoster-r7 4f69089690 Fix to_handler case sensitivity issue 2022-02-04 13:39:07 +00:00
Spencer McIntyre 965493191f Add and use a Log4Shell mixin 2022-02-03 16:09:49 -05:00
Metasploit c89ecd9c75 Bump version of framework to 6.1.29 2022-02-03 12:07:08 -06:00
adfoster-r7 f16815e776 Land #16066, Fix params not being passed to scripts 2022-02-03 12:28:59 +00:00
sjanusz d854751f82 Fix params not being passed to scripts 2022-02-03 11:13:27 +00:00
adfoster-r7 5647e1a94f Add service manager commands to msfconsle 2022-02-02 22:26:41 +00:00
adfoster-r7 d9876e889a Land #15994, fix console.read does not return command output 2022-02-01 23:44:48 +00:00
Jeffrey Martin 5c47ff0e47 Land #16132, [MySQL injection library] Avoid the use of '<>' 2022-02-01 14:50:55 -06:00
adfoster-r7 8ab102e72c Land #16014, Change custom parsers to Rex Parser and add long arguments 2022-02-01 17:38:51 +00:00
sjanusz c4700ab2f4 Add state to workspace command, extract sevices columns, correct tab-complete 2022-02-01 17:09:17 +00:00
usiegl00 8bf51dd1d8 Update smb_shadow and shadow_mitm_dispatcher
The dispatcher no longer uses an override flag, Instead the smb_shadow
module explicitly sets the attributes.
2022-01-31 14:49:18 +09:00
Redouane NIBOUCHA 51814a4a8b Refactor the code, using if(CONDITION,sleep(...),0) only 2022-01-30 23:49:07 +00:00
Redouane NIBOUCHA e329d78a46 Use = instead of <> for blind queries (fixes some wordpress plugin SQLis) 2022-01-30 23:01:08 +00:00
Tim W 613e06a8df Fix exception in rhost during staging 2022-01-29 07:59:22 +00:00
Spencer McIntyre d46822184f Updates for Log4Shell 2022-01-28 14:56:44 -05:00