adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
73,452 Commits 27 Branches 1,043 Tags
3da170a43c7f288fe9bc88fe325da488733acac3
Commit Graph

35981 Commits

Author SHA1 Message Date
A Galway ccf5c36c44 combine both verseions of eb into a single module 2021-07-08 17:42:35 +01:00
A Galway 88e64fcfae eternalblue_win8 ported from python to ruby 2021-07-08 17:42:30 +01:00
Yann Castel 38cdad47c0 initial commit 2021-07-08 16:53:37 +02:00
Spencer McIntyre dc9c0035ab Land #15371, check if apport-cli is in $PATH 
Fixes #15370
 2021-07-08 09:28:35 -04:00
Spencer McIntyre 636b790acb Update to using the AutoCheck mixin 2021-07-08 09:03:42 -04:00
William Vu fc1a34d7b1 Improve here doc formatting 2021-07-08 01:19:21 -05:00
Grant Willcox e9c748cccc Land #15385, Add Module For CVE-2021-1675 / CVE-2021-34527 AKA PrintNightmare 2021-07-07 17:05:40 -05:00
Grant Willcox 70fd9376e3 Final documentation improvements to explain SMB setup and improvements to module to fix one minor error output 2021-07-07 17:05:22 -05:00
Spencer McIntyre f42aa3742c Automatically reconnect to the named pipe 2021-07-07 13:25:51 -04:00
William Vu af986380d3 Fix CheckCode 
It's closer to CheckCode::Appears than CheckCode::Vulnerable.
 2021-07-06 22:22:27 -05:00
Spencer McIntyre f74903178e Add a check method that detects the service 2021-07-06 17:29:08 -04:00
Spencer McIntyre d5d48949b2 Update PrintNightmare module docs 2021-07-06 16:30:51 -04:00
Spencer McIntyre a0bd903b50 Update module docs and the TARGETURI option 2021-07-06 15:52:50 -04:00
Spencer McIntyre bfc45359ff More documentation updates and address PR feedback 2021-07-06 11:27:06 -04:00
agalway-r7 410493f729 Land #15318, NSClient priv esc post module 2021-07-06 16:07:30 +01:00
Spencer McIntyre 0f9b913b0f Remove the RPORT redefinition 2021-07-06 09:29:01 -04:00
Hakyac 8b0c4a1042 Update modules/exploits/windows/local/nscp_pe.rb 
Co-authored-by: agalway-r7 <agalway@rapid7.com>
 2021-07-06 11:18:56 +02:00
Yann Castel 1a057d321b rhost is working 2021-07-05 10:24:49 +02:00
bwatters 0a43ec7e4a Add module for CVE-2021-35464; pre-auth RCE in ForgeRock OpenAM server 2021-07-02 16:05:39 -05:00
Spencer McIntyre 9c6b023b0d Add PrintNightmare module docs 2021-07-02 16:00:39 -04:00
Spencer McIntyre dfa91961f7 Use enumeration to find target directories 2021-07-02 15:39:00 -04:00
Spencer McIntyre d9ecfb823f Add DCERPC plumbing for EnumPrinterDrivers 2021-07-02 12:10:00 -04:00
Spencer McIntyre b9830487de Add targets for older versions of Windows 2021-07-01 17:48:21 -04:00
Spencer McIntyre 9dea8b5f99 Define necessary flags and print target info 2021-07-01 16:01:07 -04:00
Spencer McIntyre f6279ee9bc Randomize the name and catch some errors 2021-07-01 14:00:51 -04:00
Spencer McIntyre e44eb0005e Initial PrintNightmare PoC 2021-07-01 12:32:43 -04:00
Hakyac 2085c2db13 Update modules/exploits/windows/local/nscp_pe.rb 
Co-authored-by: agalway-r7 <agalway@rapid7.com>
 2021-06-30 20:28:35 +02:00
Christophe De La Fuente daa5b32393 Update from review 
- Remove `MeterpreterTryToFork` option logic
- Add `Prepend` code directly under `Payload` info
- Rebase to use the updated `PrependFork`
- Add logic to verify that shells specified in the options really exist
  on the remote host
 2021-06-30 18:13:35 +02:00
Spencer McIntyre f66a64d2fb Update the ssh_login_pubkey module 2021-06-30 09:51:52 -04:00
Christophe De La Fuente eca20bec92 Update from code review 
- Fix documentation typos
- Rename `MeterpreterBackground` Mettle option to `MeterpreterTryToFork`
 2021-06-30 11:02:11 +02:00
Christophe De La Fuente ccaedd6c9a Last additions and improvements 
- add binaries
- add documentation
- backup `runc` binary in the exploit C file
- add `MeterpreterBackground` options to set Mettle `background` option
- add `WsfDelay` logic
- refactor code
- add cleanup logic
- add restore `runc` binary logic
 2021-06-30 11:02:11 +02:00
Christophe De La Fuente 1b59b8c83e Rebase and fix conflicts in lib/msf/core/post/common.rb 2021-06-30 11:02:11 +02:00
Spencer McIntyre 51f8808bed Fix the representation of IPv6 addresses 2021-06-29 14:21:36 -04:00
adfoster-r7 2067e1177e Land #15363, Fix ipmi_dumphashes - session refused after few failed attempts 2021-06-28 10:50:41 +01:00
Hynek Petrak 50a24bf198 handle raw-sha256, ignore *LK*, *NP* 2021-06-28 10:41:45 +02:00
Hynek Petrak 059189d4a4 fix ipmi disconnects after few failed attemts 2021-06-27 22:53:27 +02:00
Hynek Petrak 348c5e2e30 remove null character from base_dn 2021-06-27 22:51:39 +02:00
Spencer McIntyre 10ad84434c Initial support for pivoting over SSH 2021-06-25 21:19:05 -04:00
Shelby Pace a2a1b91a69 Land #15341, add wpdiscuz exploit 2021-06-25 16:22:02 -05:00
Shelby Pace f24a01945c fix rubocop error 2021-06-25 15:33:45 -05:00
Alexandre ZANNI 167e33dac0 safe navigation operator on res 2021-06-25 17:09:20 +02:00
Shelby Pace 6d13f0627e formatting changes 2021-06-25 16:20:42 +02:00
Shelby Pace 1194e7d0f3 add guards, adjust formatting, add docs 2021-06-25 16:20:42 +02:00
Brendan Coles d40656b852 apport_abrt_chroot_priv_esc: check if apport-cli is in $PATH 2021-06-25 11:48:16 +00:00
Hakyac 6cacc9d686 Update modules/auxiliary/gather/http/cve_2021_27850_apache_tapestry_hmac_key.rb 
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
 2021-06-25 10:40:34 +02:00
Hakyac 719cbc175a Update modules/auxiliary/gather/http/cve_2021_27850_apache_tapestry_hmac_key.rb 
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
 2021-06-25 10:38:24 +02:00
Hakyac 5aaaf1e1f1 Update modules/auxiliary/gather/http/cve_2021_27850_apache_tapestry_hmac_key.rb 
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
 2021-06-25 10:33:11 +02:00
Hakyac d5f0bf8425 Update modules/auxiliary/gather/http/cve_2021_27850_apache_tapestry_hmac_key.rb 
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
 2021-06-25 10:33:03 +02:00
Hakyac f961b534b0 Update modules/auxiliary/gather/http/cve_2021_27850_apache_tapestry_hmac_key.rb 
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
 2021-06-25 10:32:46 +02:00
Hakyac 79e83f1010 Update modules/auxiliary/gather/http/cve_2021_27850_apache_tapestry_hmac_key.rb 
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
 2021-06-25 10:31:06 +02:00