Commit Graph

20644 Commits

Author SHA1 Message Date
dwelch-r7 be9dda40bd Land #15327, Update rpc analyze command to support latest functionality 2021-08-09 18:32:00 +01:00
Jeffrey Martin d240292253 move web service api code into library path 2021-08-09 12:22:43 -05:00
Jeffrey Martin 1555160acd Rails 6.1 upgrade represents a minor version bump
Due to compatibility requirements this upgrade needs an explicit version bump.
2021-08-09 12:22:42 -05:00
Jeffrey Martin 8d66913c00 guard hrr_rb_ssh from zeitwerk eager loading
if/when eager loading is enabled any class or top level require
will be exercised during the process.  Since the ruby builtin PTY
does not function in Windows, defer requires that inveract with symbols
in the `hrr_rb_ssh` gem to ensure they load only during runtime.
2021-08-09 12:22:13 -05:00
Alan Foster c8cc111318 Rename class.parents to class.module_parents 2021-08-09 12:16:13 -05:00
Jeffrey Martin 1fe26b8c6c connection_config is deprecated 2021-08-09 12:16:11 -05:00
Jeffrey Martin 047a1eba07 Rails 6.1 upgrade 2021-08-09 12:16:08 -05:00
Christophe De La Fuente 07c9350733 Land #15430, Support for SSH pivoting 2021-08-09 18:34:08 +02:00
adfoster-r7 fade59dc64 Add missing command names to session compatibility warning 2021-08-09 17:13:26 +01:00
Gaurav Purswani 300328fafe Update lib/msf/core/post/file.rb
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
2021-08-09 20:19:12 +05:30
Spencer McIntyre 06b671e710 Add the SSLVersion datastore option for servers
Requires rapid7/rex-socket#37 for the option to be honored.
2021-08-06 14:44:53 -05:00
Spencer McIntyre c43d55068c Add the SSLVersion datastore option for handlers
Requires rapid7/rex-socket#37 for the option to be honored.
2021-08-06 14:44:48 -05:00
Alan Foster 2c73c14931 Update rpc analyze command to support latest functionality 2021-08-05 20:18:31 +01:00
Metasploit 056859364e Bump version of framework to 6.0.57 2021-08-05 12:05:02 -05:00
adfoster-r7 520440e6ba Land #15500, Cookie jar fix for gitlab and cacti exploit module issues 2021-08-04 11:50:27 +01:00
test 97bef87197 Updated Output for clarity 2021-08-03 20:43:06 -04:00
test 0a749df4fe Made console messages clearer 2021-08-03 20:40:01 -04:00
A Galway 5e732ddd42 changes parse to take an origin and updates tests 2021-08-03 18:22:23 +01:00
pingport80 4fbf532faf fix one error in offset value 2021-08-02 20:12:25 +05:30
pingport80 d590702922 fix variable names 2021-08-02 18:44:03 +05:30
pingport80 92e13d10f1 fragement the file into small parts 2021-08-02 18:39:16 +05:30
kensh1ro 907be4418e Added module syscall_inject with documentation 2021-08-01 19:22:32 +03:00
A Galway ff111ecd13 remove silent catches of http-cookie argument errs 2021-07-30 17:33:04 +01:00
agalway-r7 3668230d44 reposition self return in add
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com>
2021-07-30 16:16:12 +01:00
agalway-r7 33a34af0df improve error handling
Co-authored-by: dwelch-r7 <Dean_Welch@rapid7.com>
2021-07-30 16:06:53 +01:00
sjanusz 8cb3731e46 Add support for negative session and job ids 2021-07-30 10:22:44 +01:00
Metasploit f30e7df229 Bump version of framework to 6.0.56 2021-07-29 12:04:20 -05:00
test e926886e88 Updated search functionality. 2021-07-28 17:20:10 -04:00
pingport80 d7112d0d33 add gzip compression for read file powershell 2021-07-28 20:49:46 +05:30
A Galway 5219c980f7 adds origin values to cookies without domain 2021-07-28 14:08:25 +01:00
A Galway c7d4155511 add origin to httpcookie and supporting tests 2021-07-28 14:04:48 +01:00
pingport80 4dd0a5f8be change method name to _read_file_powershell 2021-07-27 20:17:04 +05:30
pingport80 2cd20e5698 add support for binary files for powershell session types 2021-07-26 23:52:20 +05:30
Spencer McIntyre 50bf0d4075 Land #15460, Fix localization issue in copy_file 2021-07-26 12:03:22 -04:00
A Galway 80f809bc78 handled cookies without valid domain value 2021-07-26 14:29:03 +01:00
Spencer McIntyre 426898e065 Add a tip and note in the module docs 2021-07-26 09:13:11 -04:00
Grant Willcox 51e02a9ede Remove userinit.exe from list of random processes for execute_dll as its somewhat unreliable and spawns noticeable processes 2021-07-23 12:34:32 -05:00
Grant Willcox 31b82452ec Fix up Spencer's comments from review to correctly pass in parameters to execute_dll() as some calls were passing the wrong set of parameters 2021-07-23 12:34:25 -05:00
Grant Willcox fabc566402 Improve process.rb's execute_dll to now automatically detect the architecture of the target and of the DLL and then appropriately decide if it needs to launch a WoW64 process to inject into. 2021-07-23 12:33:41 -05:00
Grant Willcox bc0439fc47 Improve the list of potential processes to spawn and inject into to be more believable 2021-07-23 12:33:16 -05:00
Grant Willcox 96b15c9650 Update process.rb to support injecting into a random process and not just notepad.exe all the time to improve signature evasion. Also support injecting into one's own Meterpreter process for further stealth. Finally update one module to showcase off how these changes look like on a real module. 2021-07-23 12:33:01 -05:00
Spencer McIntyre e4100c8018 Fix rubocop issues in the handler file 2021-07-23 11:12:46 -04:00
Spencer McIntyre a13acf9647 Fix rubocop issues in channel files 2021-07-23 11:09:09 -04:00
Spencer McIntyre 0314569e3d Fix rubocop issues in session files 2021-07-23 10:58:13 -04:00
adfoster-r7 a24d2f0a10 Land #15464, Add missing rex requires 2021-07-23 15:40:20 +01:00
cgranleese-r7 2844792484 Adds requires to support meterpreter_commands_dependencies.rb rubocop rule 2021-07-23 14:58:26 +01:00
cgranleese-r7 9e7859ed25 Reformats some modules so they can be run with new meterpreter_commands_dependencies.rb Rubocop rule 2021-07-23 14:40:19 +01:00
pingport80 46051d5bf4 fix localization issue in copy_file method 2021-07-23 10:20:31 +05:30
Spencer McIntyre 73380be4ab Land #15444, Add additional powershell support 2021-07-22 13:58:07 -04:00
Metasploit e635a9655a Bump version of framework to 6.0.55 2021-07-22 12:04:19 -05:00