Commit Graph

4625 Commits

Author SHA1 Message Date
Grant Willcox e0a9cbbd8d Fix up several null pointer dereference issues as well as some other locations where we should have called fail_with to properly terminate the program and raise the appropriate messages and status codes 2020-11-03 14:51:45 -06:00
Grant Willcox 7b72120016 Land #14252, Update Avira password gatherer module and associated libaries and add in documentation 2020-11-02 14:37:47 -06:00
Grant Willcox 46c937089d Fix up regex to properly match on Raw-MD5u only, and fix up refname to be self.refname to fit in with other modules in this directory 2020-10-30 12:37:35 -05:00
b4rtik ddd9af83b9 Update 2020-10-29 22:49:41 +01:00
Quentin Kaiser 8750ae5712 Add CVE identifier and references to blog post and security advisory from Pulse. 2020-10-27 20:12:19 +01:00
Quentin Kaiser d54be7d007 Merge branch 'master' into enum_pulsesecure 2020-10-27 20:07:25 +01:00
Quentin Kaiser 3864f980d3 That email address won't be read in the foreseeable future. 2020-10-27 20:05:36 +01:00
HuskyHacks 3a66984808 Update enum_putty_saved_sessions.rb
updating enum_putty_saved_sesssion.rb with additional fields
2020-10-25 15:45:33 -04:00
Jared Stroud 24c2235c3f Updated w/ fail msg if dump is not created 2020-10-23 16:02:52 -04:00
b4rtik 9779bbef77 Fix parameter managing
Fix a problem running assemblies with Main signature (string[] args) and no passed parameters
2020-10-23 21:14:10 +02:00
Jared Stroud 6cd4ffeffa removing support for shell from options 2020-10-22 20:00:45 -04:00
Jared Stroud 9bee758af9 Updating execution based on bcoles feedback 2020-10-22 19:46:32 -04:00
Jared Stroud ff220946e3 Updating loot placeholder to take memdump 2020-10-21 23:36:51 -04:00
Jared Stroud cb3e7b326d Updated to store content in loot db 2020-10-21 23:10:10 -04:00
Jared Stroud 9be68defc7 Initial commit of Avast memory dumping post-module 2020-10-21 22:58:24 -04:00
h00die 39a623f3e0 docs for domain post modules 2020-10-11 18:53:28 -04:00
h00die f75367d8bd docs and rubocop 2020-10-11 17:44:21 -04:00
h00die 3b5e05aff4 update avira password gather, add raw-md5u processing 2020-10-10 11:47:41 -04:00
Grant Willcox 71b9b5c2e7 Land #14235, Patch smart_hashdump so it doesn't skip RID 1001 when dumping hashes 2020-10-08 14:51:52 -05:00
Grant Willcox 69c68823d2 Land #14226, convert myworkspace.id to myworkspace_id for no db compat 2020-10-08 08:49:53 -05:00
0x44434241 4e40ae5d92 Spelling fix; 'controler' -> 'controller'. 2020-10-08 13:13:15 +09:00
0x44434241 659138d6ef Removing unused variables as per rubocop suggestions. 2020-10-08 12:24:58 +09:00
0x44434241 fb04106c2f Applying suggested rubocop formatting fixes. 2020-10-08 12:22:34 +09:00
0x44434241 ac4159b657 Removing 'skip rid 1001' from hashdump loop as per issue #14094. 2020-10-08 10:50:40 +09:00
Grant Willcox 339c1941ef Add in myworkspace.id patch for the other missing modules 2020-10-07 17:08:00 -05:00
Alan Foster 30809787c4 Convert disclosure dates to iso8601 2020-10-02 21:00:37 +01:00
Grant Willcox fb73be7e35 Land #14199, Fix SecureCRT missing registry key bug 2020-09-30 13:17:06 -05:00
Grant Willcox b0bad9fc85 Fix up small issue with one of the checks and update the documentation with the new SESSION_PATH option 2020-09-30 12:26:32 -05:00
cn-kali-team dce8bdc19a Check that the folder does not exist 2020-09-30 07:39:33 +08:00
Christophe De La Fuente 59fff3d7fe Land #14161, VyOS config processor 2020-09-28 13:02:19 +02:00
h00die 362ba1b235 more reviews 2020-09-27 08:17:32 -04:00
Tim W bb04041c93 Land #14172, Fix #14170, Add option to disable autorun in persistence_exe 2020-09-25 13:16:51 +08:00
Tim W 77b7cf4f65 make RUN_NOW a non-advanced option 2020-09-25 13:15:34 +08:00
Tim W 72111a9677 don't start service unless RUN_NOW is true 2020-09-25 13:15:30 +08:00
Shelby Pace 2f083b03dd Land #14140, add software enumeration module 2020-09-23 18:43:28 -05:00
Shelby Pace 1b66f4a9de include Android::Priv mixin 2020-09-23 18:42:07 -05:00
Grant Willcox 35fec19faa Fix Android code so that if we have root permissions we use dumpsys to get the package versions, otherwise just enumerate the installed software, but not the versions as we did before, but this time print out a warning. 2020-09-23 12:05:04 -05:00
Grant Willcox 8951b2a0d2 Add additional support for two other common MacOS package managers, HomeBrew and MacPorts 2020-09-23 11:46:08 -05:00
h00die 92e41b2678 review comments 2020-09-23 10:36:26 -04:00
ingroxd 62481f0159 Changed DisableExec with RUN_NOW for consistency 2020-09-23 09:12:31 +00:00
Grant Willcox 13bf1b7711 Land #14118, SecureCRT Session Credential Grabber, try 2 2020-09-22 15:38:25 -05:00
Grant Willcox a96827a823 Land #14118, SecureCRT Session Credential Grabber 2020-09-22 15:17:04 -05:00
Grant Willcox b9fa36c89b Add in option to decrypt Login Script V3 within session files and also update some of the existing regex to fix some minor mistakes 2020-09-22 14:47:28 -05:00
ingroxd e6978d7ef9 Added option to spik execution 2020-09-22 12:21:27 +00:00
Grant Willcox 67d43bcc15 Add in RuboCop fixes 2020-09-21 13:49:05 -05:00
Grant Willcox 9b1fec069f Add in final touch up fixes to make sure that securecrt_store_config checks its input correctly, and to fix up some further mistakes found whilst reviewing the code for nil errors that could be fixed 2020-09-21 13:15:03 -05:00
Grant Willcox ba76eabc72 Fix potential nil error with filling in the protocol field in enum_session_file 2020-09-21 12:23:23 -05:00
Grant Willcox 966ae4a6a3 Fix up the logic for calling securecrt_store_config 2020-09-21 12:10:12 -05:00
h00die 610d4d86d2 initial vyos implementation 2020-09-20 19:48:20 -04:00
cn-kali-team dadd0fef89 Simplify the code 2020-09-19 10:09:42 +08:00