 jheysel-r7
|
6232463701
|
Merge pull request #19835 from cdelafuente-r7/fix/kerberos/ticket_lookup
Kerberos ticket lookup fix
|
2025-01-28 13:01:05 -08:00 |
|
|
Stephen Fewer
|
4c0f407b39
|
favor SecureRandom.bytes over Rex::Text.rand_text_alphanumeric
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com>
|
2025-01-24 16:15:16 +00:00 |
|
|
sfewer-r7
|
de6b14e506
|
change how a Sec-WebSocket-Key is computed to make connect_ws be spec compliant
|
2025-01-24 14:46:52 +00:00 |
|
|
Christophe De La Fuente
|
25bd5d736c
|
Fix comparision case for service name hostname
|
2025-01-24 14:26:58 +01:00 |
|
|
jheysel-r7
|
f7554d2467
|
Update lib/msf/core/exploit/remote/ms_icpr.rb
|
2025-01-16 09:36:30 -08:00 |
|
|
jheysel-r7
|
b5a116f85e
|
Update lib/msf/core/exploit/remote/ms_icpr.rb
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
|
2025-01-16 09:25:33 -08:00 |
|
|
Jack Heysel
|
42abf6be5b
|
Fix icpr_cert to error when ESC15 is patched
|
2025-01-13 17:51:21 -08:00 |
|
|
adfoster-r7
|
31930f47dd
|
Merge pull request #19700 from jheysel-r7/fix_send_request_cgi_bang
Fix query param in reconfig_redirect_opts!
|
2024-12-11 23:30:51 +00:00 |
|
|
Spencer McIntyre
|
f36d786736
|
Merge pull request #19696 from smashery/add_user_module
Add user module
|
2024-12-10 11:26:49 -05:00 |
|
|
Spencer McIntyre
|
8b93f1a087
|
Merge branch 'master' into smb_change_pw
|
2024-12-09 09:37:45 -05:00 |
|
|
Spencer McIntyre
|
909476ee64
|
Merge pull request #19671 from smashery/ldap_change_pw
LDAP Change Password module
|
2024-12-06 17:13:50 -05:00 |
|
|
Jack Heysel
|
c7b96f89b0
|
Unset opts query if no location.query
|
2024-12-05 18:24:12 -08:00 |
|
|
Jack Heysel
|
a544805659
|
Fix query in reconfig_redirect_opts!
|
2024-12-05 18:18:06 -08:00 |
|
|
Spencer McIntyre
|
d22c6996be
|
Merge pull request #18877 from h00die/xspy
New module to replicate xspy tool (and X11 library)
|
2024-12-02 13:38:37 -05:00 |
|
|
jheysel-r7
|
a230a353e4
|
Land #19613 Asterisk authenticated rce via AMI (CVE-2024-42365)
|
2024-12-02 08:21:35 -08:00 |
|
|
jheysel-r7
|
c4b7954f15
|
Land #19596, Wordpress Plugin Post SMTP Account Takeover
|
2024-11-29 09:05:03 -08:00 |
|
|
h00die
|
d13bccca05
|
peer review
|
2024-11-28 20:24:25 -05:00 |
|
|
Spencer McIntyre
|
cd4899da00
|
Refactor some X11 code around
Consistently refer to replys as responses
|
2024-11-27 15:19:26 -05:00 |
|
|
jheysel-r7
|
7de3d117b8
|
Land #19582 Acronis Cyber Backup/Protect Info Disclosure
|
2024-11-27 07:50:16 -08:00 |
|
|
h00die-gr3y
|
18c4e9c2f6
|
moved get_machine_info to the acronis_cyber mixin
|
2024-11-26 16:10:14 +00:00 |
|
|
h00die-gr3y
|
b6595eeaf0
|
added acronis cyber mixin
|
2024-11-26 15:49:57 +00:00 |
|
|
Ashley Donaldson
|
469671e59d
|
Added LDAP password change module
|
2024-11-21 17:34:21 +11:00 |
|
|
Ashley Donaldson
|
8158cf5bae
|
Add Reset and Change_NTLM actions
|
2024-11-20 12:13:41 +11:00 |
|
|
Christophe De La Fuente
|
7bab1c1980
|
Fix specs and add algorithm argument
|
2024-11-18 17:17:58 +01:00 |
|
|
Christophe De La Fuente
|
24e19e4ebb
|
Update the ESC8 relay module to use the new helper
It also fixes some unrelated minor issues found in the module and the documentation
|
2024-11-12 18:23:31 +01:00 |
|
|
Christophe De La Fuente
|
35bb832b7c
|
Add create_csr helper under Rex::Proto
Also update `ms_icpr.rb` to use it
|
2024-11-12 12:34:20 +01:00 |
|
|
Christophe De La Fuente
|
422ecd8d3f
|
Remove setting version for CSR
|
2024-11-12 12:34:20 +01:00 |
|
|
Ashley Donaldson
|
d396d06e35
|
Enable adding Users, not just computers (if permissions allow)
Also added extra error handling for when password is wrong or expired
|
2024-11-12 12:33:29 +11:00 |
|
|
adfoster-r7
|
abfc24efdc
|
Fix Kerberos cache storage exception
|
2024-11-08 11:25:28 +00:00 |
|
|
Ashley Donaldson
|
2470a45eb1
|
Fix out of scope variable with original behaviour
|
2024-11-06 18:33:34 +11:00 |
|
|
Spencer McIntyre
|
e709a18128
|
Merge pull request #19404 from bwatters-r7/smb2http_relay
SMB to NTLM HTTP Relay with ESC8 module
|
2024-11-05 14:12:08 -05:00 |
|
|
h00die
|
0de93eedb7
|
asterisk ami auth rce
|
2024-11-04 16:27:58 -05:00 |
|
|
Spencer McIntyre
|
e130092d87
|
Add a missing require statement
|
2024-11-04 09:37:12 -05:00 |
|
|
Spencer McIntyre
|
7d8baee574
|
Add some error handling and more logging
|
2024-11-04 09:37:12 -05:00 |
|
|
Spencer McIntyre
|
80d883b55e
|
Consistently use strings for HTTP request options
|
2024-11-04 09:37:12 -05:00 |
|
|
Spencer McIntyre
|
4a4ec9aea4
|
Add some more logging
|
2024-11-04 09:37:12 -05:00 |
|
|
Spencer McIntyre
|
316a967414
|
Update the ESC8 module for the new changes
|
2024-11-04 09:37:08 -05:00 |
|
|
h00die
|
2b593bcf54
|
wp_post_smtp_acct_takeover peer review
|
2024-11-03 13:52:55 -05:00 |
|
|
h00die
|
9cba5dad59
|
WIP for asterisk rce
|
2024-11-01 16:28:45 -04:00 |
|
|
h00die
|
41ed44864f
|
wp_post_smtp_acct_takeover
|
2024-10-29 16:44:20 -04:00 |
|
|
h00die
|
4feb12ab4a
|
untested code
|
2024-10-29 16:44:20 -04:00 |
|
|
Spencer McIntyre
|
b2075e5e6b
|
Merge pull request #19553 from smashery/offered-etype-fix
Only retrieve cached credentials that match the requested KrbOfferedEncryptionTypes
|
2024-10-28 09:47:26 -04:00 |
|
|
Spencer McIntyre
|
27d5c95323
|
Refactor into an SMB server relay mixin
|
2024-10-24 16:25:40 -04:00 |
|
|
Spencer McIntyre
|
9822f3e812
|
Decouple the NTLM relaying logic
|
2024-10-24 16:25:40 -04:00 |
|
|
Spencer McIntyre
|
8ba0019ca0
|
Refactor the existing relay target client code
|
2024-10-24 16:25:40 -04:00 |
|
|
bwatters-r7
|
a18b2b3671
|
code cleanup and documentation
|
2024-10-24 15:23:10 -05:00 |
|
|
bwatters
|
dff4a8ba7c
|
Updates per Spencer
|
2024-10-24 15:23:10 -05:00 |
|
|
bwatters
|
c4c1aae565
|
Update smb thread logging, fix control flow, use RELAY_TARGET, other suggestions
|
2024-10-24 15:23:10 -05:00 |
|
|
bwatters
|
74f6bc7d13
|
Remove Rescues and Rubocop
|
2024-10-24 15:23:10 -05:00 |
|
|
bwatters
|
6dcf63267b
|
Fix rescue clauses
|
2024-10-24 15:23:10 -05:00 |
|