jheysel-r7
841fd12519
Update modules/post/windows/gather/enum_av.rb
...
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com >
2022-04-21 09:23:11 -07:00
RageLtMan
ce76f0e62e
Upcase error check for consistency
2022-04-16 07:27:36 -04:00
jerrelgordon
92a1e207db
Update modules/post/windows/gather/get_bookmarks.rb
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2022-04-13 14:50:07 -04:00
RageLtMan
d06a5db6d6
Enumerate Windows AV via WMI root\SecurityCenter2
...
Query WMI via shell or meterpreter session for deployed AV products
from the root\SecurityCenter2 namespace; record results as notes.
2022-04-09 12:06:41 -04:00
jerrelgordon
32edc6c5b5
variable name changes
2022-04-07 10:23:54 -04:00
jerrelgordon
aa7cba7b72
included store_loot and string interpolation
2022-04-05 16:50:51 -04:00
jerrelgordon
d96c3df3e7
Ran rubocop and added notes
2022-04-05 16:09:37 -04:00
space-r7
1a48bccb42
Land #16403 , improve Qemu / KVM detection
2022-04-05 14:58:16 -05:00
jerrelgordon
d3e32eca5b
Style fixes
2022-04-05 12:59:01 -04:00
jerrelgordon
476ff36d8d
Bug fixes
...
*fixed typo for "browser"
*modified to use read_file instead of file.open to read files
2022-04-03 11:52:20 -04:00
jerrelgordon
587096f15d
Create get_bookmarks.rb
...
Metasploit Module that retrieves bookmarks from the following browsers: Google Chrome, Opera & Microsoft Edge.
2022-04-03 03:57:17 -04:00
RageLtMan
35bd113952
Improve Qemu/KVM detection for BOCHS HW
...
Does what it says:
```
[*] Checking if the target is a Virtual Machine ...
[+] This is a Qemu/KVM Virtual Machine
[*] Post module execution completed
```
2022-04-02 10:43:57 -04:00
space-r7
79df6190e6
call chocopath once, return nil instead of false
2022-04-01 10:56:11 -05:00
RadioLogic
eb54081a62
Made table regex properly only grab lines that are start lines
2022-04-01 11:31:23 -04:00
RadioLogic
6f933291be
Made chocopath give false if all other alternatives dont work
2022-03-31 11:32:43 -04:00
RadioLogic
c6c77b9c7e
Merge branch 'enum_chocolatey_applications' of github.com:rad10/metasploit-framework into enum_chocolatey_applications
2022-03-31 11:27:06 -04:00
RadioLogic
2ed4a4a6e9
Used fail statements where exit should fail
2022-03-31 11:27:02 -04:00
RadioLogic
8177b101e5
Made chocopath correctly get choco based on where results
2022-03-31 11:26:39 -04:00
RadioLogic
f9156acb49
Make chocolatey? act like correct bool function
2022-03-31 11:25:33 -04:00
RadioLogic
6c92509877
Apply suggestions from code review
...
Changed at symbol in author
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-03-31 11:01:00 -04:00
RadioLogic
d361ce961e
Update modules/post/windows/gather/enum_chocolatey_applications.rb
...
Added spelling corrections to descriptions
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-03-31 10:56:19 -04:00
RadioLogic
ddf96d44e7
Added unique data to notes
2022-03-28 13:45:34 -04:00
RadioLogic
dcec540c5d
Cleaned with rubocop
2022-03-28 13:44:45 -04:00
RadioLogic
447a3d47ea
Replaced loot with notes
2022-03-28 13:39:23 -04:00
RadioLogic
ec3a5b9db6
Made module not executable
2022-03-28 13:23:28 -04:00
RadioLogic
6ef3cf7ed0
Added better separation between chocolatey 1.0 and newer chocolatey versions
2022-03-27 15:04:06 -04:00
RadioLogic
8607fd766f
Added side effects back in since descriptions want them
2022-03-27 15:03:37 -04:00
RadioLogic
86266ad5bd
Updated info values to allow info to work
2022-03-27 14:42:44 -04:00
RadioLogic
d65a2fd687
Removed use of powershell since its unnecessary
2022-03-27 14:16:04 -04:00
RadioLogic
9cc6944c18
Added option to change chocolatey path location in case its not on path
2022-03-27 14:14:02 -04:00
RadioLogic
0489655c72
Added notes on stability
2022-03-26 13:32:11 -04:00
RadioLogic
2ae6d1f655
Renamed havechocolatey
2022-03-26 13:31:58 -04:00
RadioLogic
8248c1d0b8
Formatted document with rubocop
2022-03-26 13:26:22 -04:00
RadioLogic
840d26aa2d
Added module to enumerate through chocolatey applications
2022-03-25 13:13:15 -04:00
sjanusz
bbf9e3163a
Fix file reads on Windows for binary files
2022-03-21 12:47:39 +00:00
Brendan Coles
ef4e7b2165
post/windows/manage/persistence_exe: Replace IO.read with File.binread
2022-03-05 13:24:55 +00:00
Grant Willcox
585b470703
Land #16093 , Fix URL refs for various modules and improve tools/modules/module_reference.rb code
2022-02-23 17:04:26 -06:00
Grant Willcox
5f672019ac
Add in RuboCop fixes before final land
2022-02-23 16:27:12 -06:00
adfoster-r7
5e4f7a1707
Land #16200 , fix post/windows/enum_chrome on Chrome > 80
2022-02-21 11:38:47 +00:00
Tim W
526f1be891
run rubocop on enum_chrome.rb
2022-02-18 02:45:09 +00:00
h00die
d5ba1afbec
fix URLs not resolving
...
fix URLs not resolving
add csv export to references
fix URLs not resolving
pdf not pd
missed a url change
remove extra recirectedfrom fields
remove extra file
fix ovftool url accidental replacement
2022-02-16 17:22:40 -06:00
Tim W
f5c17a0d00
use LocalAlloc instead of process.open
2022-02-16 21:27:26 +00:00
Tim W
9211838a62
fix #16134 , fix post/windows/enum_chrome on Chrome > 80
2022-02-16 21:27:15 +00:00
Spencer McIntyre
50d78e035d
Remove the deprecated VSS modules
2022-02-15 08:49:11 -05:00
Brendan Coles
04552d7998
windows/gather/enum_domains: Return early if no domains are found
2022-01-28 11:06:53 +00:00
Spencer McIntyre
3cd2b1b929
Update naming for consistency and the module
2022-01-24 10:35:40 -06:00
Brendan Coles
c29e30c58e
local_admin_search_enum: Fix typo: @domain_controller
2022-01-18 15:08:30 +00:00
Jake Baines
e7810acb1e
Pulled offsets out of dll into module. Auto-find lsass.exe when pid is 0
2021-12-18 10:56:46 -08:00
Jake Baines
deab4ce90e
Initial commit of Dellicious port
2021-12-08 07:33:16 -08:00
dwelch-r7
73e55fcaee
Land #15665 , Add Meterpreter compatibility metadata
2021-10-29 12:45:26 +01:00