Commit Graph

20644 Commits

Author SHA1 Message Date
Ashley Donaldson 78295b654b Land #14702, Add module Redis extractor 2021-04-29 11:02:38 +10:00
Tim W 142ba7f123 Fix #15097, fix unreliable sessions -c output 2021-04-28 19:06:29 +01:00
cgranleese-r7 7e2485260f Fixes meterpreter tab completion issue 2021-04-28 10:52:05 +01:00
Ashley Donaldson facb6d99c6 Fixed unit test failure 2021-04-28 17:54:19 +10:00
Ashley Donaldson 06f3785ec3 Various changes from code review
* Remove use of member variable for storing state
* Display Redis hashes as Ruby hashes
* Rubifying code
2021-04-28 17:12:56 +10:00
Ashley Donaldson 54923c971b Use new parsing code in most requests in the module 2021-04-28 16:23:19 +10:00
Ashley Donaldson dc24800407 Robustness improvements to Redis extractor module
* Use RESP's information about bulk string and array lengths
* Iterative rather than recursive approach
2021-04-28 11:17:48 +10:00
Spencer McIntyre e6910da0c0 Land #15094, Fix sessions -c to use a subshell
Fixes #15091
2021-04-27 15:51:53 -04:00
adfoster-r7 16923f4962 Land #15042, avoid side effects on db interaction argument hash 2021-04-27 10:26:11 +01:00
Ashley Donaldson a640443cab Land #15014, Added string PKey support for ssh module
Able to specify an individual private key as a string parameter into the module
2021-04-27 15:42:37 +10:00
Spencer McIntyre 31bfd16979 Stop short-circuiting the check for ARCH_CMD
No post module uses ARCH_CMD right now so this is only used by some
local exploits in which case the platform check should still be run.
2021-04-26 15:39:13 -04:00
Spencer McIntyre 9738320a90 Print why the session is incompatible 2021-04-26 15:36:28 -04:00
pingport80 c7b7c6b6de Update docs 2021-04-26 13:35:29 -05:00
Grant Willcox 74624c0758 Strip history lines before comparing to ensure more accurate comparisons. Also change logic so that lines that start with a space aren't logged to the history, giving users an option to optionally not log sensitive commands to the history file 2021-04-26 13:35:06 -05:00
pingport80 8894d4bf12 Remove leading and trailing spaces from readline input 2021-04-26 13:34:42 -05:00
Spencer McIntyre 7dce66be0d Automatically load required Meterpreter extensions 2021-04-26 13:50:50 -04:00
Spencer McIntyre 677af54106 Log unmatched wildcards 2021-04-26 12:28:23 -04:00
Spencer McIntyre da01a839d1 Set required commands spec for all post mixins 2021-04-26 12:28:18 -04:00
dwelch-r7 5154000f6e Add support for standalone db 2021-04-26 02:24:11 +01:00
Tim W 26ce3964ea Fix #15091, fix sessions -c to use a subshell 2021-04-23 22:36:32 +01:00
bwatters 619e01bfa3 Land #11257, Add PSH generation methods to Util::Exe
Merge branch 'land-11257' into upstream-master
2021-04-23 13:52:53 -05:00
bwatters 63e14cf69f Update method options, method comments, and comment on to_win32pe_psh_rc4 behavior 2021-04-23 13:51:01 -05:00
pingport80 cdcff2f0b2 fix msftidy err 2021-04-23 15:53:51 +05:30
pingport80 c2f145af89 add locale independent check 2021-04-23 14:32:10 +05:30
Spencer McIntyre fede87ca1f Raise an exception when a wildcard is invalid 2021-04-22 17:57:59 -04:00
Spencer McIntyre 14a35a0bb3 Add documentation to the two Meterpreter mappers 2021-04-22 17:54:27 -04:00
Spencer McIntyre 1c8dcc357b Work around an old Windows Meterpreter bug 2021-04-22 17:54:21 -04:00
Cooper Travis 9bfcbc8a2e Added string PKey support for ssh module
* Implemented command shell session reporting
  * Updated ssh login pubkey module documentation
2021-04-22 14:49:45 -05:00
Metasploit 8961976607 Bump version of framework to 6.0.42 2021-04-22 12:08:34 -05:00
Gaurav Purswani b1a73c888e Update lib/msf/base/sessions/command_shell.rb
Co-authored-by: acammack-r7 <adam_cammack@rapid7.com>
2021-04-22 19:10:56 +05:30
Ashley Donaldson 80c3d82a94 Land #15051, automatically verify shell sessions 2021-04-22 13:32:25 +10:00
Spencer McIntyre 8186a75235 Add meterpreter command compatibility to modules 2021-04-21 18:22:15 -04:00
Spencer McIntyre a16e248d45 Add the new Meterpreter command mapper 2021-04-21 15:53:06 -04:00
Spencer McIntyre 397530c554 Add meterpreter command compat to module info 2021-04-21 14:24:01 -04:00
Spencer McIntyre 69c525c2f7 Update the minimum WfsDelay setting
Now there's a minimum WfsDelay of 3 seconds with the user-configurable
value being added to it.
2021-04-20 13:05:37 -04:00
Jeffrey Martin 2e99760298 guard ssh connection reset
When attempting a login a remote reset should not error the scanner.
2021-04-20 10:12:53 -05:00
A Galway 1b02344b55 consider vhost & expand tests 2021-04-20 15:12:54 +01:00
dwelch-r7 e5efcc5f3b remove _db suffix 2021-04-20 14:02:34 +01:00
dwelch-r7 ee7ad8cef3 add requirements check 2021-04-20 13:47:47 +01:00
dwelch-r7 45db5c178a move db helpers to /lib folder 2021-04-20 12:26:42 +01:00
A Galway 5df0f0b164 improvements to tests and api 2021-04-19 15:13:42 +01:00
A Galway 88f17c5128 cleanup and removes cookies filtering 2021-04-16 17:31:11 +01:00
A Galway fc55d74b80 http-client cookie jar support and tests 2021-04-16 12:24:21 +01:00
Alan Foster 7fe97cfda2 Add health check functionality 2021-04-16 01:59:22 +01:00
Metasploit a098a36ead Bump version of framework to 6.0.41 2021-04-15 14:07:18 -05:00
Spencer McIntyre 66bc7a3800 Land #15047, Correct DNS PTR record crash 2021-04-15 12:30:00 -04:00
Grant Willcox 90f225ac25 Land #15049, Raise more descriptive Meterpreter related error messages 2021-04-15 11:02:50 -05:00
Spencer McIntyre 4978ad1f13 Be backwards compatible with the Windows Meterpreter
The older Windows Meterpreter had a bug where the core command IDs would
not be properly returned and added to the command array. Until the major
version of the payloads gem is bumped to ensure that all instances have
that change, skip validating Windows core command IDs. Any commands that
skip the proactive validation and fail, will continue to fail as they
did before.
2021-04-15 11:12:50 -04:00
Spencer McIntyre c886af2e6d Allow disabling shell session verification 2021-04-15 10:33:42 -04:00
Jeffrey Martin e50f015b5d Land #14996, hashcat logic fixes for crackers 2021-04-15 08:43:53 -05:00