Commit Graph

20644 Commits

Author SHA1 Message Date
adfoster-r7 63da82d1f9 Fix iis internal ip module crash 2021-10-26 12:52:26 +01:00
Christophe De La Fuente 1befd545e3 Land #15558, add module to access a sessions filesystem in a browser 2021-10-25 18:37:42 +02:00
Tim W 86d1e3cb0a fix get_drives format 2021-10-25 17:30:47 +01:00
adfoster-r7 9bafafde21 Land #15788, Remove the AMSI bypass when necessary 2021-10-25 15:46:58 +01:00
Ashley Donaldson 71d7e80529 Extend StreamServer to provide callbacks required by some modules 2021-10-25 12:38:45 +11:00
Ashley Donaldson b9e3f1951d Return immediately once the reverse listener is established 2021-10-25 12:38:45 +11:00
Ashley Donaldson e9386add64 Handle race condition whereby a port forward succeeds after we've exceeded our timeout.
Neatly cleans up the port.
2021-10-25 12:38:45 +11:00
Ashley Donaldson 68a074231e Use logging rather than printing 2021-10-25 12:38:44 +11:00
Ashley Donaldson dba6ce56bc Timeout is cursed - let's remove it 2021-10-25 12:38:44 +11:00
Ashley Donaldson 5a332b511e Fixed rubocop errors 2021-10-25 12:38:44 +11:00
Ashley Donaldson 10421dcc08 Report peer info of connections to SSH reverse port forwards 2021-10-25 12:38:43 +11:00
Ashley Donaldson 99309bab29 Fix reliability issue with SSH reverse listener 2021-10-25 12:38:43 +11:00
Ashley Donaldson fdfecdc8ff Initial work on reverse pivoting through SSH 2021-10-25 12:38:42 +11:00
Spencer McIntyre 78d2389cb2 Switch the prepend_protections_bypass
Switch to setting Powershell::prepend_protections_bypass to be
automatically determined by the module. If the generated command is too
large, disable the setting and regenerate the command.
2021-10-21 16:42:04 -04:00
Spencer McIntyre 48a89d7c9a Don't encode the final powershell command
It's unnecessary to encode the final Powershell command in this context
because the modified YSoSerial payload will properly treat the entire
string as the OS command to run.
2021-10-21 16:40:21 -04:00
Metasploit c7fd990633 Bump version of framework to 6.1.12 2021-10-21 12:03:56 -05:00
Spencer McIntyre 93105f009b Land #15786, Add kubernetes enum module 2021-10-21 09:15:38 -04:00
adfoster-r7 9a50668c5b Fix tunnel info crash when running the sessions command with a websocket based session 2021-10-21 13:06:22 +01:00
Tim W e52083a65c Land #15785, add command name to meterpreter packet inspect 2021-10-21 12:14:17 +01:00
adfoster-r7 b306641755 Print token claims 2021-10-21 11:05:51 +01:00
adfoster-r7 f28ced60ee Correctly store extracted loot 2021-10-21 11:02:10 +01:00
adfoster-r7 adbe6070ab PR feedback 2021-10-21 11:02:09 +01:00
adfoster-r7 c0ba4bd619 Add kubernetes enum module 2021-10-21 11:01:25 +01:00
adfoster-r7 2f86b332f5 Land #15733, Add Module For Kubernetes Pod Authenticated Code Execution 2021-10-21 10:46:20 +01:00
alanfoster ae3efa0589 Add command name to Meterpreter packet inspect 2021-10-21 02:08:39 +01:00
Matthew Dunn b5ea7efdf7 Add updated error message 2021-10-19 08:22:47 -04:00
Matthew Dunn faa33ab238 Add nil check on the vuln in case the vuln fails to get added to the database 2021-10-19 07:03:13 -04:00
adfoster-r7 e417a36fed Land #15760, Honor json extension in store loot 2021-10-19 11:39:10 +01:00
adfoster-r7 3f64406255 Land #15732, Add flag for running command in pty 2021-10-18 23:52:10 +01:00
dwelch-r7 2c8ef87649 Add flag for running command in pty 2021-10-18 14:31:30 +01:00
William Vu 3e168149ca Increase AutoVerifySession timeout for PSH shells
The sweet spot is five seconds, which is also the default.
2021-10-14 16:58:04 -05:00
Metasploit d5cbb26f09 Bump version of framework to 6.1.11 2021-10-14 12:06:52 -05:00
dwelch-r7 dcb42da269 Land #15612, Add multiple moodle modules 2021-10-11 23:18:55 +01:00
adfoster-r7 25834f019b Honor json extension in store loot 2021-10-11 12:01:31 +01:00
Grant Willcox 8b9b1092f6 Land #15706, Display TCP forwarding information for sessions and jobs for reverse shells 2021-10-07 13:23:06 -05:00
Grant Willcox cf479725b2 Add in string option for ReverseListenerComm to reverse_udp.rb so we don't encounter errors when calling select_com in lib/msf/core/handler/reverse/comm.rb 2021-10-07 12:07:24 -05:00
Metasploit 4440af5365 Bump version of framework to 6.1.10 2021-10-07 12:05:24 -05:00
Ashley Donaldson 5196071c22 Keep other instances of via_string to the same convention 2021-10-04 23:51:57 +11:00
Ashley Donaldson 71aab90b53 Added TCP pivot details for reverse_tcp_double handlers 2021-10-04 23:07:15 +11:00
Ashley Donaldson c9499fc70c Show TCP forwarding information for UDP jobs and shells 2021-10-04 22:43:12 +11:00
Ashley Donaldson 0df82e9a21 HTTP payload listeners support ReverseListenerComm param, and display of the session it transits over 2021-10-04 20:27:06 +11:00
Grant Willcox 6541b85449 Land #15735, Update call to deprecated connection_config 2021-10-03 21:02:31 -05:00
Grant Willcox 2881adff04 Land #15737, Fix action handling for auxiliary modules 2021-10-03 20:31:10 -05:00
adfoster-r7 c19e4ad43c Fix tab completion for action commands 2021-10-03 02:45:15 +01:00
adfoster-r7 84be79fa12 Fix action handling for auxiliary modules 2021-10-02 19:47:47 +01:00
jaydesl 6d2d680b5b fix: update call to deprecated connection_config 2021-10-02 09:22:37 +01:00
Ashley Donaldson ef8628f1ad Avoid modifying payload_uri, which may be used elsewhere 2021-10-02 14:57:26 +10:00
Spencer McIntyre d8f2b18649 Implement review feedback 2021-10-01 14:44:13 -04:00
Spencer McIntyre 32540247cb Move the Kubernetes client into a library file 2021-10-01 10:32:12 -04:00
Spencer McIntyre e04882689a Support an explicit HTTP comm 2021-09-30 16:54:01 -04:00