Commit Graph

2038 Commits

Author SHA1 Message Date
William Vu 87eb600510 Land #10611, mRemote creds gather module fixes
Also update #10612 to align with these changes.
2018-09-10 15:25:09 -05:00
William Vu 93a73f5e71 Fix store_loot OID
It's supposed to be a loot type, not the filename (now stored).
2018-09-10 15:19:28 -05:00
William Vu 3ec4d2f22b Normalize loot type OID
1. Include the vendor, product, and technology
2. Content type is already reported, extension changed
3. Original filename including extension is also reported

Can we get some sort of standard on the OID?
2018-09-10 15:06:07 -05:00
h00die 39a2d9d2a8 save xml files as xml 2018-09-09 21:24:39 -04:00
h00die 0072d9b9b1 save as xml since it is 2018-09-09 21:22:15 -04:00
h00die 70e22707c0 vi loves tabs but i dont 2018-09-09 21:19:17 -04:00
h00die f926f6e9af fix pathing in mremoteng 2018-09-09 21:07:47 -04:00
bwatters-r7 20daba6e2d fix line endings 2018-08-28 11:33:17 -05:00
alpiste f1e4079641 move add_thread code to lib/rex/post/meterpreter/extensions/peinjector/peinjector.rb 2018-08-28 09:02:21 -05:00
alpiste 015abca8af MSFTidy module 2018-08-28 09:02:21 -05:00
alpiste bb151bb727 MSFTidy module 2018-08-28 09:02:21 -05:00
alpiste 2251c4a712 Add peinjector post module 2018-08-28 09:02:21 -05:00
Brendan Coles a020d48caf Move module documentation to documentation directory 2018-07-13 04:46:25 +00:00
William Vu dbb0748c1c Land #9998, customizable golden ticket duration 2018-06-27 15:51:56 -05:00
William Vu d7770a98b2 s/Seperated/Separated/ 2018-06-27 15:36:41 -05:00
Jacob Robles c4bf12cbe0 ntds_grabber msftidy fixes 2018-06-26 08:22:11 -05:00
William Vu 14da99bb3d Fix missing RequestError in a few post modules
Should be Rex::Post::Meterpreter::RequestError.
2018-06-12 17:11:29 -05:00
Clément Notin a8fcd9d275 Fix display of uid in post/windows/gather/win_privs
`inspect` is not necessary and triggers display of Unicode characters as "\x.." instead of printing their value.
As discussed in PR #10044
2018-05-19 01:35:19 +02:00
Hypnoze57 08b81a418f Customization of Golden Ticket Duration
- Post exploitation module updated
- Kiwi extention updated

Using mimikatz /startoffset and /endin params
Duration in hours, default already 10 years
2018-05-09 17:44:55 +02:00
Borja Merino 916dfa56fe Add author name to the wlan_probe_request post-exploitation module 2018-05-03 11:41:09 +02:00
bwatters-r7 f12f6d54a5 Land #9862, Post-exploitation module for meterpreter (Windows) to send wireless probe requests
Merge branch 'land-9862' into upstream-master
2018-04-20 14:32:01 -05:00
Borja Merino 2d33320921 Added a post-exploitation module to send wireless probe requests 2018-04-11 16:43:33 +02:00
Aaron Soto be18930f12 Cleaned up output, only querying for %WINDIR% if necessary 2018-04-09 15:27:50 -05:00
Auxilus c07f2f1a09 Update run_as.rb 2018-04-09 21:24:16 +05:30
Auxilus c34b796f13 Remove temp file from dist after cmd execution
https://github.com/rapid7/metasploit-framework/issues/9830
2018-04-09 20:14:01 +05:30
bwatters-r7 0faf2f4e04 Land # 8007, Added NTDSgrab module to metasploit.
Merge branch 'land-8007' into upstream-master
2018-04-03 15:56:37 -05:00
bwatters-r7 e17be05e6a Land #9595, Add post module RID Hijacking on Windows 2018-04-03 14:12:34 -05:00
r4wd3r d6dc0a2d4f Adjust rid_hijack.rb code style with rubocop recommendations. 2018-04-03 04:57:41 +02:00
Jacob Robles 57b048fbf7 Remove requires, changed in-place modification 2018-03-26 17:46:18 -05:00
Green-m 18a1593de7 Clean up registry and fix bug when cleaning the windows local file 2018-03-02 02:31:09 -05:00
Green-m d1e91dfdfd Fix bug 2018-03-01 22:19:03 -05:00
Green-m 2bb8fc7325 Fix bug 2018-03-01 22:16:59 -05:00
Green-m 174c47195a Add options LocalExePath, StartupName, ServiceDescription 2018-02-27 05:32:07 -05:00
Green-m fcd6e8acab Add options LocalExePath, StartupName, ServiceDescription 2018-02-27 05:27:32 -05:00
Green-m 553a82a408 Add options LEXEPATH, STARTUP_NAME, SERVICE_DESC 2018-02-26 02:39:11 -05:00
Green-m f786a1cfb9 Add options LEXEPATH, STARTUP_NAME, SERVICE_DESC 2018-02-26 01:59:49 -05:00
Rob Fuller 0c82b0a922 Support Windows 2008/7 and above
Probably about time that we supported versions less than 10 years old :)
2018-02-24 16:06:55 -05:00
r4wd3r 4ce7468fbe Added rid_hijack post module. Found at post/windows/manage 2018-02-20 22:29:23 +01:00
Agahlot de24451035 Correct Typo 2018-02-13 15:57:09 +05:30
Aaron Soto 9328374155 Update 'author' field of metadata 2018-01-17 16:43:37 -06:00
Aaron Soto 10cf327c26 Improve Hyper-V tests in checkvm
All Win10 machines, physical and virtual, were being reported as 'Hyper-V' (false positives)

Added functionality to extract hostname of physical hypervisor from VM registry
2018-01-17 14:29:03 -06:00
bwatters-r7 83c228f3b8 Make rubocop less mad 2017-11-15 14:06:36 -06:00
bwatters-r7 33a07beb30 Fix whitespace issues 2017-11-15 12:26:49 -06:00
bwatters-r7 53a068d13f Add error handling for failed hashdumps 2017-11-15 11:08:35 -06:00
David Maloney 8b9e091e70 remove humorous typo 2017-11-15 11:08:25 -06:00
David Maloney 7162765b57 load extapi in domain_hashdump
domain hashdump always needs to load extapi to work
2017-11-15 11:08:17 -06:00
David Maloney ad98c9c156 fix Windows server 2016 support for domain_hashdump
The domain hashdump psot module should now work
against Server 2016 DCs.
2017-11-15 11:08:06 -06:00
William Webb d9e0d891a1 Land #9010, Remove checks for hardcoded SYSTEM account name 2017-10-06 13:42:18 -05:00
Christian Mehlmauer 41e3895424 remove checks for hardcoded name 2017-09-27 07:41:06 +02:00
Jannis Pohl 48188e999e post/windows/manage/persistence_exe: fix service creation
Fixes service creation when in post/windows/manage/persistence_exe
2017-09-23 23:48:50 +02:00