Ashley Donaldson
78295b654b
Land #14702 , Add module Redis extractor
2021-04-29 11:02:38 +10:00
Tim W
142ba7f123
Fix #15097 , fix unreliable sessions -c output
2021-04-28 19:06:29 +01:00
cgranleese-r7
7e2485260f
Fixes meterpreter tab completion issue
2021-04-28 10:52:05 +01:00
Ashley Donaldson
facb6d99c6
Fixed unit test failure
2021-04-28 17:54:19 +10:00
Ashley Donaldson
06f3785ec3
Various changes from code review
...
* Remove use of member variable for storing state
* Display Redis hashes as Ruby hashes
* Rubifying code
2021-04-28 17:12:56 +10:00
Ashley Donaldson
54923c971b
Use new parsing code in most requests in the module
2021-04-28 16:23:19 +10:00
Ashley Donaldson
dc24800407
Robustness improvements to Redis extractor module
...
* Use RESP's information about bulk string and array lengths
* Iterative rather than recursive approach
2021-04-28 11:17:48 +10:00
Spencer McIntyre
e6910da0c0
Land #15094 , Fix sessions -c to use a subshell
...
Fixes #15091
2021-04-27 15:51:53 -04:00
adfoster-r7
16923f4962
Land #15042 , avoid side effects on db interaction argument hash
2021-04-27 10:26:11 +01:00
Ashley Donaldson
a640443cab
Land #15014 , Added string PKey support for ssh module
...
Able to specify an individual private key as a string parameter into the module
2021-04-27 15:42:37 +10:00
Spencer McIntyre
31bfd16979
Stop short-circuiting the check for ARCH_CMD
...
No post module uses ARCH_CMD right now so this is only used by some
local exploits in which case the platform check should still be run.
2021-04-26 15:39:13 -04:00
Spencer McIntyre
9738320a90
Print why the session is incompatible
2021-04-26 15:36:28 -04:00
pingport80
c7b7c6b6de
Update docs
2021-04-26 13:35:29 -05:00
Grant Willcox
74624c0758
Strip history lines before comparing to ensure more accurate comparisons. Also change logic so that lines that start with a space aren't logged to the history, giving users an option to optionally not log sensitive commands to the history file
2021-04-26 13:35:06 -05:00
pingport80
8894d4bf12
Remove leading and trailing spaces from readline input
2021-04-26 13:34:42 -05:00
Spencer McIntyre
7dce66be0d
Automatically load required Meterpreter extensions
2021-04-26 13:50:50 -04:00
Spencer McIntyre
677af54106
Log unmatched wildcards
2021-04-26 12:28:23 -04:00
Spencer McIntyre
da01a839d1
Set required commands spec for all post mixins
2021-04-26 12:28:18 -04:00
dwelch-r7
5154000f6e
Add support for standalone db
2021-04-26 02:24:11 +01:00
Tim W
26ce3964ea
Fix #15091 , fix sessions -c to use a subshell
2021-04-23 22:36:32 +01:00
bwatters
619e01bfa3
Land #11257 , Add PSH generation methods to Util::Exe
...
Merge branch 'land-11257' into upstream-master
2021-04-23 13:52:53 -05:00
bwatters
63e14cf69f
Update method options, method comments, and comment on to_win32pe_psh_rc4 behavior
2021-04-23 13:51:01 -05:00
pingport80
cdcff2f0b2
fix msftidy err
2021-04-23 15:53:51 +05:30
pingport80
c2f145af89
add locale independent check
2021-04-23 14:32:10 +05:30
Spencer McIntyre
fede87ca1f
Raise an exception when a wildcard is invalid
2021-04-22 17:57:59 -04:00
Spencer McIntyre
14a35a0bb3
Add documentation to the two Meterpreter mappers
2021-04-22 17:54:27 -04:00
Spencer McIntyre
1c8dcc357b
Work around an old Windows Meterpreter bug
2021-04-22 17:54:21 -04:00
Cooper Travis
9bfcbc8a2e
Added string PKey support for ssh module
...
* Implemented command shell session reporting
* Updated ssh login pubkey module documentation
2021-04-22 14:49:45 -05:00
Metasploit
8961976607
Bump version of framework to 6.0.42
2021-04-22 12:08:34 -05:00
Gaurav Purswani
b1a73c888e
Update lib/msf/base/sessions/command_shell.rb
...
Co-authored-by: acammack-r7 <adam_cammack@rapid7.com >
2021-04-22 19:10:56 +05:30
Ashley Donaldson
80c3d82a94
Land #15051 , automatically verify shell sessions
2021-04-22 13:32:25 +10:00
Spencer McIntyre
8186a75235
Add meterpreter command compatibility to modules
2021-04-21 18:22:15 -04:00
Spencer McIntyre
a16e248d45
Add the new Meterpreter command mapper
2021-04-21 15:53:06 -04:00
Spencer McIntyre
397530c554
Add meterpreter command compat to module info
2021-04-21 14:24:01 -04:00
Spencer McIntyre
69c525c2f7
Update the minimum WfsDelay setting
...
Now there's a minimum WfsDelay of 3 seconds with the user-configurable
value being added to it.
2021-04-20 13:05:37 -04:00
Jeffrey Martin
2e99760298
guard ssh connection reset
...
When attempting a login a remote reset should not error the scanner.
2021-04-20 10:12:53 -05:00
A Galway
1b02344b55
consider vhost & expand tests
2021-04-20 15:12:54 +01:00
dwelch-r7
e5efcc5f3b
remove _db suffix
2021-04-20 14:02:34 +01:00
dwelch-r7
ee7ad8cef3
add requirements check
2021-04-20 13:47:47 +01:00
dwelch-r7
45db5c178a
move db helpers to /lib folder
2021-04-20 12:26:42 +01:00
A Galway
5df0f0b164
improvements to tests and api
2021-04-19 15:13:42 +01:00
A Galway
88f17c5128
cleanup and removes cookies filtering
2021-04-16 17:31:11 +01:00
A Galway
fc55d74b80
http-client cookie jar support and tests
2021-04-16 12:24:21 +01:00
Alan Foster
7fe97cfda2
Add health check functionality
2021-04-16 01:59:22 +01:00
Metasploit
a098a36ead
Bump version of framework to 6.0.41
2021-04-15 14:07:18 -05:00
Spencer McIntyre
66bc7a3800
Land #15047 , Correct DNS PTR record crash
2021-04-15 12:30:00 -04:00
Grant Willcox
90f225ac25
Land #15049 , Raise more descriptive Meterpreter related error messages
2021-04-15 11:02:50 -05:00
Spencer McIntyre
4978ad1f13
Be backwards compatible with the Windows Meterpreter
...
The older Windows Meterpreter had a bug where the core command IDs would
not be properly returned and added to the command array. Until the major
version of the payloads gem is bumped to ensure that all instances have
that change, skip validating Windows core command IDs. Any commands that
skip the proactive validation and fail, will continue to fail as they
did before.
2021-04-15 11:12:50 -04:00
Spencer McIntyre
c886af2e6d
Allow disabling shell session verification
2021-04-15 10:33:42 -04:00
Jeffrey Martin
e50f015b5d
Land #14996 , hashcat logic fixes for crackers
2021-04-15 08:43:53 -05:00