51f26a91c0
rename singles to match staged payloads
2019-11-21 05:19:39 -06:00
3fa9e9b0a8
add Dependencies array with mingw arch class
2019-11-18 09:35:18 -06:00
bfa27e6bed
add flag, use DefaultOptions for linker script
2019-11-07 15:33:31 -06:00
706bb89777
Add cmd/unix/bind_jjs payload
2019-11-06 07:58:31 +00:00
19dba2f243
Add cmd/unix/reverse_jjs payload
2019-11-06 07:57:46 +00:00
1717001be1
attribution
2019-11-01 09:01:14 -05:00
8bb1c5102b
opt for inline asm instead of pre-compiled object
2019-10-31 11:55:40 -05:00
a04291678f
add require, fix module context generate
2019-10-29 08:35:04 -05:00
b85b799d4f
Update CachedSize of payload.
2019-10-13 19:09:07 +08:00
0a9ca5554a
Print command when start handler, more friendly.
2019-10-13 17:04:00 +08:00
43609965e5
Fix cert verify bug of reverse SSL payload.
2019-10-13 17:01:06 +08:00
85a39f75d8
Use a larger payload size to include the UUID
2019-10-10 22:08:26 -04:00
b674f3dda3
add AlignRSP call, remove begin from linker script
2019-10-10 12:16:10 -05:00
bb742771e5
add stager and stage for x64 arch
2019-10-10 12:16:10 -05:00
c3a7d377f4
add payload for X64 arch
2019-10-10 12:16:10 -05:00
c7b42f71a0
change description
2019-10-10 12:16:10 -05:00
3e6283c193
add staged payload
2019-10-10 12:16:10 -05:00
f32c33ce13
fix careless mistakes
2019-10-10 12:16:09 -05:00
f95f952b65
fix separated spelling
2019-10-05 14:13:38 -04:00
3c0cb29a7c
Add Proxy/header opts to windows/python stageless
2019-09-23 08:45:43 +10:00
21dd5f438d
Address some of @bcoles comments
2019-09-15 01:14:04 -04:00
ee660d61ea
Land #12275 , Update payloads to 1.3.77
...
Merge branch 'land-12275' into upstream-master
2019-09-10 11:14:56 -05:00
598cf35e1e
Land #12271 , Don't mangle staged x86, x64 payloads
2019-09-05 11:18:45 -05:00
2ee5ec97e4
Use smallest stager size
...
Since these stagers can shrink based on the expected size of the next
stage, do our best to anticipate a small size. This makes the cached
payload size consistent for now, though if the x64 mettle stager grows
past 128 bytes I think we'll see the stager start oscillating in size
again. If you run into that and are reading this, sorry :(
2019-09-04 16:06:44 -05:00
4d89dd83e3
Update payload cached size
...
For real this time?
2019-09-04 15:17:34 -05:00
de554b315a
Update cached size
2019-09-04 14:56:12 -05:00
49c7fe8906
Update payload cache size
2019-09-03 18:25:26 -05:00
e091c8f248
Add port KWA to shell version of ruby ssh payload
2019-09-03 17:41:27 -04:00
bcd181c87d
require bind tcp
2019-09-03 09:14:34 -05:00
97943261ed
Linux x86 reverse_tcp should read known # of bytes
...
See notes for x64.
This part does not appear to be working properly yet - stages
generated with this commit recv 102b on the first call to read(),
but subsequently things seem to go off the rails after the
intermediate stage is loaded.
Needs testing and fixup at present for x86 (no worse than before
in terms of success rate however).
2019-09-03 01:55:12 -04:00
05944ba8c1
Linux x64 reverse_tcp should read known # of bytes
...
The linux x64 reverse tcp stager is hardcoded to read 4K off the
socket. When a small intermediate stager is used, this can result
in reading part of the next stage as well, which means that the
intermediate stager will never recv the # of bytes it needs and
hang indefinitely.
Break out the mettle piece to use separate methods for assembly and
binary payload generation as well as actually putting the product
on the existing session socket.
Change the first part of the stage to check for the intermediate
stager generation method, and use the size of the produced stager
in the recvfrom call or fall back to the prior 4K read size.
Testing:
None yet
Ping @bcook-r7, @acammack-r7, @OJ, @ZeroSteiner
2019-09-03 01:27:27 -04:00
32334c2386
Update all module splats from http:// to https://
2019-08-15 18:10:44 -05:00
8833bddd91
Fix options in ssh command
2019-08-15 07:13:59 -05:00
c9d2013ddb
Change generate method to match single payloads.
2019-08-02 15:47:36 -05:00
20438614bb
Stupid extra line....
2019-08-02 11:11:19 -05:00
c6defb0264
Rubocop complaints and require_size additions
2019-08-02 11:09:14 -05:00
14ee5c4a4f
Update Windows payloads to support exitfunk
2019-08-02 10:28:57 -05:00
517d32b082
Update payload cache sizes
2019-07-30 10:34:47 -05:00
23ea772076
Golf Ruby pingback payload syntax
2019-07-30 10:32:31 -05:00
e6ea0c9fd7
Use binascii for Python pingback UUID encoding
...
This gives us compatibility for Python 3.x and 1.x
2019-07-30 10:18:24 -05:00
3cb1b4588b
Golf Python payload variable names
2019-07-30 10:14:41 -05:00
05ffa6e4a0
More updates, optimizations, and style fixes
2019-07-29 16:29:32 -05:00
d6dc397b21
Fix bugs introduced by syntax changes.
2019-07-29 14:00:09 -05:00
6bf10e1f91
Fixups for syntax
2019-07-29 11:55:51 -05:00
cec29c6473
More fixes for syntax
2019-07-26 14:51:44 -05:00
79b7bbd2cf
Update payload cache size and fix import bug
2019-07-26 13:52:36 -05:00
2f804faed9
Rubocop and @acammack cleanup suggestions
2019-07-26 12:36:59 -05:00
7c2d214af2
Clean up debugging, move options to one place and delete superflous file
...
change the uuid handing to prevent changes to it when it gets put in payloads
2019-07-25 19:45:05 -05:00
6ae3f97c4a
Maybe include the super pingback type in the payloads?
2019-07-25 19:44:11 -05:00
9b6d4587a4
cmd/unix/pingback_bind: Add resiliency to netcat, per wvu's suggestion
2019-07-25 19:43:14 -05:00
Brent Cook