fa7d677d45
Consolidate and improve LDAP error handling
2022-10-31 10:56:17 -04:00
2269fec099
Initial working RBCD module
2022-10-31 10:56:17 -04:00
31e2ab683c
Update samr_computer to show the SID when adding
2022-10-31 10:56:17 -04:00
4ec7eea436
Fixes from code review
2022-10-28 15:33:34 +02:00
06e0be0a3d
Land #17128 , Adds support to specify a shared directory to iterate through and highlight keywords
2022-10-27 16:07:12 +01:00
2bd90079a2
Adds support to specify a shared directory to iterate through and highlighting keywords
2022-10-27 12:49:02 +01:00
51829c5ce9
Add in inital copy of ms_dtyp.rb library and use the definitions there to replace our custom unpack solutions with proper BinData approaches. Also rename some variables to use more appropriate names
2022-10-25 11:29:22 -05:00
8bc2e647eb
More updates
2022-10-25 10:14:41 -05:00
87aa5d5266
Handle attributes with whitespace better. Also handle isSingleValue correctly now for the certificate values we have at the moment
2022-10-25 10:12:37 -05:00
42463ac3b6
Rework logic so we can now only query once to retrieve the info on the attributes we are examining, instead of once per entry returned
2022-10-25 10:12:37 -05:00
78f5ae47d4
Fix up some improper practices and convert entry_list to a hash
2022-10-25 10:12:36 -05:00
a698145334
Add in better coding practices for certain elements n RuboCop the file
2022-10-25 10:12:36 -05:00
6682eff259
Add in the data type checker feature for checking the data type of attributes retrieved
2022-10-25 10:12:36 -05:00
9bef925e57
Add support for decoding password ages to time strings, Windows timestamps to time strings, and system flags to strings
2022-10-25 10:12:35 -05:00
20c07eafe7
Add support for SID decoding
2022-10-25 10:12:35 -05:00
93e53e0429
Add in support for GUIDs and certificate handling
2022-10-25 10:12:34 -05:00
f1639797b9
Rubocop updates
2022-10-21 17:17:06 +02:00
52904b8cb6
Add support to Kerberos
...
- Add kerberos authenticator to `scanner/smb/smb_login` and the
corresponding login scanner library
- Add new options: `UseCachedCredentials` and `StoreCredentialCache`
- Add `use_cached_credentials` attribute to
Kerberos::ServiceAuthenticator::Base. This enables/disables the use of
cached Kerberos credentials from the database.
- Add `store_credential_cache` attribute to
Kerberos::ServiceAuthenticator::Base. This enables/disables storing
Kerberos TGS MIT Credential Cache to the database.
2022-10-21 16:16:10 +02:00
43f7d7b73e
Land #17098 , Hikvision camera unauthenticated information disclosure
2022-10-20 16:20:12 +02:00
15d81ca04c
Land #17135 , Add namespace to identify.rb
2022-10-19 10:48:25 +02:00
c0403af25e
Address two more imports, use described_class per review
2022-10-18 08:47:24 -04:00
1e50ba3415
Move to Hashes module, address requested changes
...
Fix rubocop
Move identify to hashes module up one layer, use full reference to identify_hash instead of full include
Fix SMTP require
Remove hashes require statement
Remove hashes require statement
Remove hashes require statement
Remove hashes require statement
Address remaining requested changes, reference constants directly
Add all the missing direct references
Co-Authored-By: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-17 17:28:31 -04:00
8b5223f53b
Modularize Identify, Update referenced use cases
...
Modularize Identity.rb
Include new module style Identify
Update juniper.rb
Fix inadvertent change
Add new module to identify spec
Put the require back
Put back require line for juniper
2022-10-17 17:28:30 -04:00
4615e2f9fb
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-10-17 19:54:26 +04:00
bc6d63e6e8
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-10-17 19:54:18 +04:00
09e740d48d
Changes from code review
2022-10-17 17:19:50 +11:00
4cda8a9d23
Add hashes and better error handling to wmiexec
2022-10-15 16:42:30 -04:00
ab6ede8ded
version based on cdelafuente-r7 comments
2022-10-15 10:45:40 +00:00
2e9a235ece
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-10-14 18:47:40 +04:00
32acf526b0
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-10-14 18:14:33 +04:00
ade8b87e26
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-10-14 18:12:12 +04:00
6a682f4fe6
Land #16982 , Update Dell iDRAC login scanner to work with v8 and v9
2022-10-14 01:40:35 +01:00
ae0f94beb7
Addressed all commit suggestions
2022-10-09 15:49:58 +00:00
462b80cf6f
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:59:59 +04:00
2b4785915d
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:59:40 +04:00
7bae00975a
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:59:23 +04:00
c280e2d57b
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:59:08 +04:00
c1dd09771f
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:58:36 +04:00
afb87ee87d
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:58:28 +04:00
b37c26da87
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:58:15 +04:00
b11dbc90a9
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:58:04 +04:00
cbab556e7d
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:57:54 +04:00
784393e41e
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:57:45 +04:00
11f5cff45d
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:57:30 +04:00
316c3f5302
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:57:17 +04:00
a14ded588b
Update modules/auxiliary/gather/hikvision_info_disclosure_cve_2017_7921.rb
...
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-09 14:57:04 +04:00
793a05f9f3
Added comments for new functions
2022-10-07 11:55:47 +11:00
b5a076a1f1
Neaten parameter and error handling
2022-10-07 11:24:39 +11:00
063a768959
Store ccache
2022-10-07 09:56:11 +11:00
6db965cf72
Land #17075 , windows_secrets_dump non-admin fix
...
The module was failing early for non-administrative users.
This fixes the issue so the module now throws warnings where
it was previously failing early.
2022-10-06 17:31:15 -04:00
Spencer McIntyre