Commit Graph

2721 Commits

Author SHA1 Message Date
jheysel-r7 841fd12519 Update modules/post/windows/gather/enum_av.rb
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
2022-04-21 09:23:11 -07:00
RageLtMan ce76f0e62e Upcase error check for consistency 2022-04-16 07:27:36 -04:00
jerrelgordon 92a1e207db Update modules/post/windows/gather/get_bookmarks.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
2022-04-13 14:50:07 -04:00
RageLtMan d06a5db6d6 Enumerate Windows AV via WMI root\SecurityCenter2
Query WMI via shell or meterpreter session for deployed AV products
from the root\SecurityCenter2 namespace; record results as notes.
2022-04-09 12:06:41 -04:00
jerrelgordon 32edc6c5b5 variable name changes 2022-04-07 10:23:54 -04:00
jerrelgordon aa7cba7b72 included store_loot and string interpolation 2022-04-05 16:50:51 -04:00
jerrelgordon d96c3df3e7 Ran rubocop and added notes 2022-04-05 16:09:37 -04:00
space-r7 1a48bccb42 Land #16403, improve Qemu / KVM detection 2022-04-05 14:58:16 -05:00
jerrelgordon d3e32eca5b Style fixes 2022-04-05 12:59:01 -04:00
jerrelgordon 476ff36d8d Bug fixes
*fixed typo for "browser"
*modified to use read_file instead of file.open to read files
2022-04-03 11:52:20 -04:00
jerrelgordon 587096f15d Create get_bookmarks.rb
Metasploit Module that retrieves bookmarks from the following browsers: Google Chrome, Opera & Microsoft Edge.
2022-04-03 03:57:17 -04:00
RageLtMan 35bd113952 Improve Qemu/KVM detection for BOCHS HW
Does what it says:
```
[*] Checking if the target is a Virtual Machine ...
[+] This is a Qemu/KVM Virtual Machine
[*] Post module execution completed

```
2022-04-02 10:43:57 -04:00
space-r7 79df6190e6 call chocopath once, return nil instead of false 2022-04-01 10:56:11 -05:00
RadioLogic eb54081a62 Made table regex properly only grab lines that are start lines 2022-04-01 11:31:23 -04:00
RadioLogic 6f933291be Made chocopath give false if all other alternatives dont work 2022-03-31 11:32:43 -04:00
RadioLogic c6c77b9c7e Merge branch 'enum_chocolatey_applications' of github.com:rad10/metasploit-framework into enum_chocolatey_applications 2022-03-31 11:27:06 -04:00
RadioLogic 2ed4a4a6e9 Used fail statements where exit should fail 2022-03-31 11:27:02 -04:00
RadioLogic 8177b101e5 Made chocopath correctly get choco based on where results 2022-03-31 11:26:39 -04:00
RadioLogic f9156acb49 Make chocolatey? act like correct bool function 2022-03-31 11:25:33 -04:00
RadioLogic 6c92509877 Apply suggestions from code review
Changed at symbol in author

Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2022-03-31 11:01:00 -04:00
RadioLogic d361ce961e Update modules/post/windows/gather/enum_chocolatey_applications.rb
Added spelling corrections to descriptions

Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2022-03-31 10:56:19 -04:00
RadioLogic ddf96d44e7 Added unique data to notes 2022-03-28 13:45:34 -04:00
RadioLogic dcec540c5d Cleaned with rubocop 2022-03-28 13:44:45 -04:00
RadioLogic 447a3d47ea Replaced loot with notes 2022-03-28 13:39:23 -04:00
RadioLogic ec3a5b9db6 Made module not executable 2022-03-28 13:23:28 -04:00
RadioLogic 6ef3cf7ed0 Added better separation between chocolatey 1.0 and newer chocolatey versions 2022-03-27 15:04:06 -04:00
RadioLogic 8607fd766f Added side effects back in since descriptions want them 2022-03-27 15:03:37 -04:00
RadioLogic 86266ad5bd Updated info values to allow info to work 2022-03-27 14:42:44 -04:00
RadioLogic d65a2fd687 Removed use of powershell since its unnecessary 2022-03-27 14:16:04 -04:00
RadioLogic 9cc6944c18 Added option to change chocolatey path location in case its not on path 2022-03-27 14:14:02 -04:00
RadioLogic 0489655c72 Added notes on stability 2022-03-26 13:32:11 -04:00
RadioLogic 2ae6d1f655 Renamed havechocolatey 2022-03-26 13:31:58 -04:00
RadioLogic 8248c1d0b8 Formatted document with rubocop 2022-03-26 13:26:22 -04:00
RadioLogic 840d26aa2d Added module to enumerate through chocolatey applications 2022-03-25 13:13:15 -04:00
sjanusz bbf9e3163a Fix file reads on Windows for binary files 2022-03-21 12:47:39 +00:00
Brendan Coles ef4e7b2165 post/windows/manage/persistence_exe: Replace IO.read with File.binread 2022-03-05 13:24:55 +00:00
Grant Willcox 585b470703 Land #16093, Fix URL refs for various modules and improve tools/modules/module_reference.rb code 2022-02-23 17:04:26 -06:00
Grant Willcox 5f672019ac Add in RuboCop fixes before final land 2022-02-23 16:27:12 -06:00
adfoster-r7 5e4f7a1707 Land #16200, fix post/windows/enum_chrome on Chrome > 80 2022-02-21 11:38:47 +00:00
Tim W 526f1be891 run rubocop on enum_chrome.rb 2022-02-18 02:45:09 +00:00
h00die d5ba1afbec fix URLs not resolving
fix URLs not resolving

add csv export to references

fix URLs not resolving

pdf not pd

missed a url change

remove extra recirectedfrom fields

remove extra file

fix ovftool url accidental replacement
2022-02-16 17:22:40 -06:00
Tim W f5c17a0d00 use LocalAlloc instead of process.open 2022-02-16 21:27:26 +00:00
Tim W 9211838a62 fix #16134, fix post/windows/enum_chrome on Chrome > 80 2022-02-16 21:27:15 +00:00
Spencer McIntyre 50d78e035d Remove the deprecated VSS modules 2022-02-15 08:49:11 -05:00
Brendan Coles 04552d7998 windows/gather/enum_domains: Return early if no domains are found 2022-01-28 11:06:53 +00:00
Spencer McIntyre 3cd2b1b929 Update naming for consistency and the module 2022-01-24 10:35:40 -06:00
Brendan Coles c29e30c58e local_admin_search_enum: Fix typo: @domain_controller 2022-01-18 15:08:30 +00:00
Jake Baines e7810acb1e Pulled offsets out of dll into module. Auto-find lsass.exe when pid is 0 2021-12-18 10:56:46 -08:00
Jake Baines deab4ce90e Initial commit of Dellicious port 2021-12-08 07:33:16 -08:00
dwelch-r7 73e55fcaee Land #15665, Add Meterpreter compatibility metadata 2021-10-29 12:45:26 +01:00