Commit Graph

2396 Commits

Author SHA1 Message Date
Christophe De La Fuente 1885b650ba Fix ldap_login and smb_login 2025-01-29 11:10:30 +01:00
Spencer McIntyre 04c9106303 Add the spec for the new int range option 2024-12-19 09:29:05 -05:00
Spencer McIntyre 72c7f4ace2 Add the NTPHeader specs 2024-12-19 09:29:05 -05:00
cgranleese-r7 90066b3b45 Land #19660, Make enum options case normalizing 2024-12-13 12:00:43 +00:00
Spencer McIntyre d22c6996be Merge pull request #18877 from h00die/xspy
New module to replicate xspy tool (and X11 library)
2024-12-02 13:38:37 -05:00
Spencer McIntyre 6c76dcb20c Merge pull request #19651 from smashery/smb_version_update
Give likely Windows versions for SMB v2-3
2024-11-26 09:05:10 -05:00
h00die 4ff389762d xspy updates 2024-11-20 19:35:19 -05:00
Spencer McIntyre 96a7a3269e Make enum options case normalizing 2024-11-18 14:20:14 -05:00
Christophe De La Fuente 7bab1c1980 Fix specs and add algorithm argument 2024-11-18 17:17:58 +01:00
Ashley Donaldson 9bd27e431d Give specific version details when the version matches perfectly 2024-11-15 14:54:57 +11:00
Ashley Donaldson 8891c56211 Give likely Windows versions for SMB v2-3 2024-11-11 14:00:53 +11:00
cgranleese-r7 96f6f66429 Land #19550, Fix username/password generation in case both PASSWORD_SPRAY and USER_AS_PASS are enabled 2024-11-06 13:56:05 +00:00
Spencer McIntyre e709a18128 Merge pull request #19404 from bwatters-r7/smb2http_relay
SMB to NTLM HTTP Relay with ESC8 module
2024-11-05 14:12:08 -05:00
Spencer McIntyre 316a967414 Update the ESC8 module for the new changes 2024-11-04 09:37:08 -05:00
Spencer McIntyre b2075e5e6b Merge pull request #19553 from smashery/offered-etype-fix
Only retrieve cached credentials that match the requested KrbOfferedEncryptionTypes
2024-10-28 09:47:26 -04:00
adfoster-r7 26e041dbfe Merge pull request #19108 from smashery/new_cmd_exec
New process launch API
2024-10-17 00:08:06 +01:00
Ashley Donaldson 9972587fef Handle weird PowerShell edge case 2024-10-16 16:04:39 +11:00
Ashley Donaldson 205adfe2fd Handle edge case in command shell when input contains backslash-quote combination already 2024-10-16 10:26:29 +11:00
Ashley Donaldson 0cf227ff00 Change API. Support backwards compatibility for PHP 2024-10-12 14:36:09 +11:00
Ashley Donaldson 0ab16ae3af Fix bug when no arguments are present 2024-10-12 14:36:08 +11:00
Ashley Donaldson d9ed8ec4dc Rework unix command line based on testing 2024-10-12 14:36:08 +11:00
Ashley Donaldson 7d30c67b01 Fix error sending legacy args 2024-10-12 14:36:08 +11:00
Ashley Donaldson 85d019cd3c Handle CommandLineToArgv behaviour 2024-10-12 14:36:08 +11:00
Ashley Donaldson e9f86c4865 Reworked unix create_process, as it was buggy 2024-10-12 14:36:08 +11:00
Ashley Donaldson e0aca71029 Add unix shell to create_process API 2024-10-12 14:36:08 +11:00
Ashley Donaldson 72e657a19c Implement new cmd_exec API for Windows cmd 2024-10-12 14:36:08 +11:00
Ashley Donaldson 955c675334 Implement new cmd_exec API for PowerShell 2024-10-12 14:36:08 +11:00
Ashley Donaldson 617270265d Only retrieve cached credentials that match the requested OfferedEncryptionTypes 2024-10-11 16:23:26 +11:00
Ashley Donaldson fa2b7e54a6 Fix unit tests 2024-10-11 08:22:40 +11:00
Mathieu 8c5bead4a0 Added spec to reproduce the username/password generation error in case PASSWORD_SPRAY and USER_AS_PASS are both enabled
Added minimal code to fix the issue, extracting the code to generate username:username credentials in the PASSWORD_SPRAY case
2024-10-10 21:15:50 +02:00
Simon Janusz a31261ecf2 Revert "Replace Readline with Reline" 2024-10-02 13:15:12 +01:00
sjanusz-r7 10dee226c6 Replace Readline with Reline 2024-09-04 16:39:41 +01:00
adfoster-r7 604227fb4d Update rpc compatible modules to handle unknown sessions 2024-07-15 10:38:56 +01:00
h00die a93a6dddf9 Merge branch 'rapid7:master' into xspy 2024-07-12 06:49:52 -04:00
h00die 04f4990318 Further x11 updates 2024-07-11 18:28:50 +00:00
h00die 05fb1d3eaa x11 library update 2024-07-11 12:34:49 +00:00
dledda-r7 1e0db9ec83 Land #10113, Azure CLI steal tokens post module. 2024-07-03 11:32:04 -04:00
adeherdt-r7 c5717d42d6 MS-9457 Support NO_AUTH_REQUIRED
Support the `NO_AUTH_REQUIRED` condition and terminate the scan to avoid further unneeded attempts.
2024-07-02 14:09:01 +02:00
adeherdt-r7 52142f280f MS-9454 Redis Scanner: Support versions
Updating the Redis Login Scanner to properly support all versions of Redis and their implementations to handle the `AUTH` command.
2024-06-28 15:25:49 +02:00
adfoster-r7 afa973e05e Fix reids_login scanner when auth is enabled 2024-06-26 13:32:16 +01:00
h00die b4975f6a23 updates to azure cli creds 2024-06-24 17:06:04 -04:00
Spencer McIntyre a6fd6defcb Escape LDAP query strings 2024-06-18 17:47:56 -04:00
h00die 434455757d tested azure_cli_creds against data files 2024-06-16 20:25:47 -04:00
h00die 6dffb3aed5 Update azure_spec.rb 2024-06-07 08:54:17 -04:00
h00die 7594a4103c moving azure_cli_files around and stubbing out content
Update azure lib with process_context_contents

Update azure_spec.rb

Update azure.rb

Update azure_spec.rb

Update azure_cli_creds.rb

fix lint warning

add function to print consolehost_history

print_consolehost_history spec updates

fixing azure_cli spec, and errors
2024-06-06 17:31:19 -04:00
sjanusz-r7 adad32d442 Remove redundant 'require' for History Manager specs 2024-06-05 14:05:40 +01:00
sjanusz-r7 91cb94e725 Add _close method to history manager, use generic method for Msf Config history file 2024-06-03 17:23:51 +01:00
sjanusz-r7 82c43c3154 Allow HistoryManager to mock input library history 2024-05-23 17:50:19 +01:00
sjanusz-r7 60c09e5ca3 SQL sessions have correct history manager support 2024-05-23 13:57:31 +01:00
Dean Welch ce49fa4e76 don't show regular option groups when viewing advanced options 2024-05-17 15:47:02 +01:00