a89d9cd188
Update reflective_dll_inject.rb
2020-02-03 20:21:16 +01:00
f3e6f562a1
add docs, fix module location
2020-02-03 13:16:53 -06:00
97f5f37344
Land #12807 , Install OpenSSH for Windows
2020-02-03 14:50:30 +00:00
1072694130
Update reflective_dll_inject.rb
2020-02-03 13:04:14 +01:00
4f94593264
Update reflective_dll_inject.rb
2020-02-02 10:43:54 +01:00
3dd68849c5
Update reflective_dll_inject.rb
2020-02-02 10:08:34 +01:00
ca70cc2d27
Update reflective_dll_inject.rb
2020-02-02 01:08:48 +01:00
483c36e54d
Update reflective_dll_inject.rb
2020-02-02 00:59:29 +01:00
9314e8b65b
Reference URL is broken
...
The URL http://www.fishnetsecurity.com/6labs/blog/post-exploitation-using-netntlm-downgrade-attacks redirects to the www.optiv.com homepage.
The correct current URL is https://www.optiv.com/blog/post-exploitation-using-netntlm-downgrade-attacks
2020-01-28 20:35:57 +11:00
0d8d17c63d
Land #12736 , Add support for PPID spoofing
2020-01-24 08:49:51 -06:00
fcf366e7ce
fix up enum_patches
2020-01-23 20:59:20 -05:00
32dafcc9f6
Update reflective_dll_inject.rb
2020-01-20 23:19:03 +01:00
4e75f1862a
Update reflective_dll_inject.rb
2020-01-20 23:11:16 +01:00
7cb3ca96e1
Create reflective_dll_inject.rb
2020-01-20 23:07:41 +01:00
34d77e8b11
Align
2020-01-20 22:59:15 +01:00
5d7c50e3ed
updated to use Msf::Post::Windows::Powershell mixin
2020-01-19 19:51:44 -05:00
c4d6feb0aa
Land #12721 , windows post module docs
2020-01-16 08:50:19 -05:00
7eeb8c33eb
Added new post exploitation module: 'Install OpenSSH for Windows'
2020-01-09 19:58:31 -05:00
988971bd94
Update shellcode_inject.rb
2019-12-18 16:05:37 +01:00
f22c6f2f63
add support for PPID spoofing to migrate
2019-12-17 16:39:18 +01:00
f9d2f9fa2e
Update shellcode_inject.rb
2019-12-17 01:42:52 +01:00
cbd225dfed
Update shellcode_inject.rb
2019-12-17 01:34:12 +01:00
5c7c071094
add support for PPID spoofing to shellcode_inject
2019-12-17 01:31:40 +01:00
eb8814d5fe
Land #12697 , module docs
2019-12-15 06:25:44 -05:00
3257b8b4cc
enum_patches
2019-12-14 15:58:45 -07:00
6be4729a02
Land #12391 , Add shellcode_inject post module
...
Merge branch 'land-12391' into upstream-master
2019-12-12 15:20:51 -06:00
fb5c896d40
Streamline Checks and error for channelized comms before injection
2019-12-12 15:19:17 -06:00
c4e304574c
Update enum_applications.rb
2019-12-11 14:10:48 -07:00
0a31e3b909
Update bitlocker_fvek.rb
...
Fix spelling errors.
2019-12-11 13:39:25 -07:00
cc25a30d1a
Move dpendency to mixin and adjust print statements
2019-12-04 09:00:03 -06:00
2a14332f20
First try at adding error handling and offloading methods to the
...
Post::Windows::Process mixin for resusability and deduplication
2019-12-03 14:11:50 -06:00
f5fbdcacc3
Add support for shell sessions to post/windows/gather/enum_hostfile
2019-11-16 04:07:01 +00:00
2549de809d
fix bug in PID check
2019-11-07 12:57:05 +01:00
e992480b5c
Update shellcode_inject.rb
2019-10-17 16:02:59 +02:00
74ae445128
Add AUTOUNHOOK support for shellcode_inject post module
...
The module will now first inject the unhook dll and then the provided shellcode.
2019-10-10 16:35:57 +02:00
47dd96df68
Remove duplicate module in the wrong place
2019-10-08 08:48:11 -05:00
905eb17132
begining to fix spelling errors
2019-10-05 14:26:34 -04:00
f95f952b65
fix separated spelling
2019-10-05 14:13:38 -04:00
bc4f706b0d
Execute Assembly
2019-10-05 12:47:03 +02:00
dd9fb2d9d6
Add shellcode_inject post module
...
This module injects an arbitrary shellcode into a target process.
2019-10-03 16:47:10 +02:00
c86511722a
Land #12258 , Update gpp.rb to display GPO name
2019-09-26 03:36:28 -05:00
a587668b9e
Remove Default targets from aux modules
2019-09-24 12:15:43 +01:00
fe2b3f8f29
Remove targets from post modules
2019-09-23 17:26:36 +01:00
795e0ebeb5
Restore a "print" to "print_good"
...
Aesthetics modification
2019-09-07 09:02:04 +02:00
a2d2475618
Fixed wrong previous commit
2019-09-05 22:12:33 +02:00
88d424cf3f
Make the modification suggested by @acammack-r7
...
Directly insert the new value in the "table", instead of modifying the screen output manually. Simpler and cleaner, thanks @acammack-r7 !
2019-09-05 21:44:18 +02:00
13560e93c0
Improve ADSI GPO filter to return only one result
2019-09-02 20:15:00 +02:00
71b825ee06
Update gpp.rb to display GPO name
...
GPO files on SYSVOL do only include the GPO GUID, not the GPO name defined by the administrator. This modification makes this gpp module make an ADSI query to retrieve all of the domain's GPOs, and compare their GUID. If one GUID matches, then we know the GPO name and we can display it. On a pentest, a client is much more interested by knowing the GPO name rather than the obscure GUID. The ADSI query relies on meterpreter "extapi" extension.
2019-08-31 12:37:49 +02:00
b6b3a54b79
fix typo in payload_inject
...
:)
2019-07-27 19:02:33 +02:00
f874f50748
Update Author fields for several modules
...
Add hirura to authors list for the Ruby reverse_ssh payloads.
Update all modules with author-per-line name references to be
consistent (useful given the difference in names between commiter
in git log and GitHub account).
Next steps:
See if HrrRbSsh client-side implementation can be fleshed out
enough to create alternative payload outputs for both of the Ruby
modules (using TARGET/ACTION to select between net/ or hrr_).
2019-06-25 20:49:26 -04:00
b4rtik