8b1ff6d44e
change bloodhound OutputDirectory to OptString
...
OptPath is intended for a local path and performs validation. Attempting to set it to a target path that doesn't exist on the local fails.
2024-02-29 07:12:37 -06:00
5fa1ce8ed2
Add support for newer sqlcmd versions
2024-02-12 11:51:02 +00:00
48221e594d
Land #18704 , Leverage the module metadata cache in the module_sets
2024-02-02 14:16:46 +00:00
024b855231
Land #18628 , Add Puppet post module
...
This PR adds a post gather module to get
Puppet configs and sensitive files.
2024-01-30 19:20:48 -05:00
68f333cb7b
review comments for puppet module
2024-01-29 19:18:54 -05:00
502511a71a
memory_search module improvements
2024-01-24 19:55:53 +00:00
f496a71cf0
Make mimipenguin work with updated memory search API
2024-01-24 19:53:57 +00:00
904e34434e
Land #18626 , SaltStack Minion Deployer
...
This PR adds an exploit module which allows for
a user who has compromised a host acting as a
SaltStack Master to deploy payloads to the Minions
attached to that Master.
2024-01-23 11:58:38 -05:00
a25b0ee5e0
Land #18713 , Add generic memory search post/multi module
2024-01-23 12:57:24 +00:00
2bd93ae72c
Use a glob for memory_search PROCESS_NAMES_GLOB
2024-01-22 16:53:32 +00:00
f8bdb02593
Validate memory_search PROCESS_IDS using regex
2024-01-22 16:53:00 +00:00
6ca4c113ee
Get memory match length from buffer TLV length for Mettle
2024-01-18 11:08:38 +00:00
337400b9b8
Remove AARCH64 reference
2024-01-18 11:08:38 +00:00
1e7b74a0e5
Correctly use process glob when searching for processes
2024-01-18 11:08:34 +00:00
977a9f3cd4
Add generic memory search module for supported Meterpreter sessions
2024-01-17 15:55:23 +00:00
a8d46b3e7a
Land #18627 , Ansible: post gather module, payload deployer, and file reader
2024-01-17 15:26:25 +01:00
56a9beb39d
ansible review
2024-01-15 17:18:49 -05:00
2cf045d3c4
Leverage the module metadata cache in the module_sets
2024-01-15 14:56:46 +00:00
b031311892
ansible review
2024-01-10 17:29:15 -05:00
e711c9ea43
ansible review
2024-01-10 17:16:57 -05:00
57c882cab5
Land #18604 , Add Post Windows Gather to perform Mikrotik Winbox "Keep Password" credentials extraction
...
Merge branch 'land-18604' into upstream-master
2024-01-09 15:38:35 -06:00
dc6d84d823
Update modules/post/windows/gather/credentials/winbox_settings.rb
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2024-01-09 00:43:10 +01:00
a0bc08c6ec
Quick change to add support for more sessions and to only read the file once
2024-01-05 17:33:54 -06:00
a9f5c11d68
Land #18484 , add ability to follow payload override in shell to meterpreter
2024-01-03 12:05:29 +00:00
357bdc8c10
ansible post library
2023-12-24 11:49:27 -05:00
b654275ec4
add saltstack lib
2023-12-23 13:52:52 -05:00
11c12fcb6d
review comments
2023-12-23 13:23:34 -05:00
c911ec1413
ansible collection
2023-12-16 07:16:26 -05:00
1749fa1e50
store module loot
2023-12-13 07:37:24 -05:00
8eefea76ce
puppet post gather module
2023-12-13 07:12:17 -05:00
90d3d6fc0a
testing for opt_enum changes
2023-12-11 09:08:54 -06:00
3bad98afc6
Land #18488 , add kerberos_tickets post module
...
Adds a module to manage kerberos tickets from a compromised
host. This PR also includes rail gun enhancements.
2023-12-07 19:12:48 -05:00
48e2e09dfc
msftidy fix
2023-12-07 19:23:33 +01:00
05800296f3
RuboCop fixes and msftidy fixes
2023-12-07 13:45:19 +01:00
4039ea523a
RuboCop Fixes
2023-12-07 13:19:13 +01:00
32e5dfb12d
Windows gather credentials for Mikrotik Winbox 'Keep Password' feature
2023-12-07 13:14:37 +01:00
56afed78ff
fix optenum, add documentation, fix issue with unset values
2023-12-04 18:03:28 -06:00
095540cea6
Enhance ability to follow payload override in shell to meterpreter
...
Update modules/post/multi/manage/shell_to_meterpreter.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
payload override
2023-12-04 12:01:28 -06:00
13ae9fcded
Refactor things in #decrypt_data
...
* Check that the initial memory was actually allocated before writing to
it
* Don't pass 16 to CryptUnprotectData as the ppszDataDescr parameter
because it is not a valid LPWSTR
* Don't leak memory in the event that CryptUnprotectData by ensuring mem
and addr are always free'ed
* Combine free calls into one for speed
* Don't assume the sessions is ARCH_X64 if it is not ARCH_X86 because
that may change some day
2023-11-20 16:40:42 -05:00
b5aeab0c9f
Merge #18491 , Add Module for PL/SQL Developer to gather credentials
...
Merge branch 'land-18491' into upstream-master
2023-11-09 11:18:52 -06:00
893da00c6a
Modify Table DisplayName and password matching regex
2023-11-09 13:58:14 +08:00
a4750b11bc
Optimize AES key
2023-11-09 05:26:20 +08:00
9c23f86d83
Add support for v15 new encryption algorithm
2023-11-09 05:08:27 +08:00
06369281b9
Land #18503 , Apache Nifi Cred Stealer Post Module
...
This PR adds a post module to steal config and credential
information for Apache NiFi.
2023-11-07 20:05:10 -05:00
7331db43dd
Update print statement
2023-11-07 18:55:42 -05:00
d4166098a8
Update to be compatible for PL/SQL 14
2023-11-08 01:15:22 +08:00
87cd4aac5e
spelling fix
2023-11-07 05:04:31 -05:00
f1317fa050
review comments
2023-11-06 18:34:36 -05:00
0ce7b03397
update nifi credentials post module
2023-11-06 14:50:02 -05:00
ce5188a76c
Land #18218 , improve Windows checkvm post module
...
This PR includes a number of enhancements to the windows
checkvm post module, including reducing the number of requests
set to the targets among other things.
2023-11-03 12:17:06 -04:00
Patrick Double