b0b4da543d
Land #18400 , Kerberos ticket_search fix passing in a workspace
2023-10-23 16:17:24 +02:00
77a8b0efa2
Land #18421 , Save Kerberos tickets in the MSF cache upon a successful login
2023-10-23 15:25:09 +02:00
30e1930444
Bump version of framework to 6.3.40
2023-10-19 12:08:32 -05:00
7baabd08db
Land #18364 , Add support for filtering sessions
2023-10-19 16:40:42 +01:00
b4b73529d3
add -e flag for stale sessions
...
remove single flag
pivot to search flag
added support for search session type
adds search session id support
remove stale references
reshuffle code
fix time parsing, add command support
fix search list, reduce duplicated code
testing added
killall with search lists table of killed sessions
sessions are no longer represented by ids
addresses feedback on code structure and search behavior
some test reshuffling, switch raised errors to printed ones
add checkin validation, rest of cmd_sessions tests
add time parsing test
refactoring
test reformatting and adjusted error validation
make error handling more explicit, add test context
fixes
sub quotes, make constant
rubocopping
switch before and after to greater than and less than
mbetter incorporate constants
update example
2023-10-19 09:41:18 -05:00
941c44f9ad
Update creds cracked password to work with remote database
2023-10-13 12:30:27 +01:00
bb19151891
Land #17689 , adding a new column cracked password in creds command to show cracked passwords
2023-10-13 12:25:51 +01:00
44e5a93add
Land #18442 , Improve stability of msfdb initialization on windows environments
2023-10-13 12:21:02 +01:00
5f6b8dc7ef
Land #18381 , Add option to reload all libs when calling run or check on a module
2023-10-13 11:06:10 +01:00
03433652e8
Land #18443 , Fix reverse ssh handler warnings on windows bootup
2023-10-13 10:24:31 +01:00
05dd2e1473
Land #18351 , Apache Superset RCE (CVE-2023-37941)
2023-10-12 17:10:10 -04:00
fb77febe3e
Bump version of framework to 6.3.39
2023-10-12 12:08:36 -05:00
80d2fa738d
Land #18296 , update more mysql modules to support newer authentication methods
2023-10-12 17:19:02 +01:00
86b7ec4518
Address comments from the review
2023-10-12 09:50:19 -04:00
de8e392b7b
Only randomize the URI once
2023-10-12 09:50:19 -04:00
5577413bd9
Add additional classes for payload loading
...
This fixes the java/shell_reverse_tcp payload
2023-10-12 09:27:26 -04:00
f712c67441
Support URIPATH in Java::HTTP::ClassLoader
...
The URIPATH must end with / due to how the package names are requested
from the web server in a nested directory structure. #on_request_uri
also needed to be updated to check for the relative resource.
2023-10-12 09:27:26 -04:00
1b172768b4
Use upstream ruby-mysql in Remote::MYSQL
...
* ... and dependents
2023-10-12 13:08:35 +02:00
874366588c
Update metasploit side for java metasploit-payloads fix
2023-10-11 15:00:19 -04:00
6c33bf95f1
Land #18411 , Fix incorrect scope condition when populating RHOSTS using services command
2023-10-11 13:29:31 +01:00
6af8d3f6e6
Land #18431 , Fix how port forwards are listed
...
Merge branch 'land-18431' into upstream-master
2023-10-10 16:56:11 -05:00
47b0c01d58
Make the add_equals_to_base64 function private
2023-10-10 14:16:56 -04:00
59da2865d9
Use an exec-in-place gadget for Python
...
This adds a Python deserialization gadget that will exec arbitrary
Python code in place. It is only compatible with Python 3.x due to
differences in Python's exec function and statement between 2 and 3.
2023-10-10 14:01:24 -04:00
0c407945a0
Fix reverse ssh handler warnings on windows bootup
2023-10-10 15:26:24 +01:00
723557365a
Improve stability of msfdb initialization on windows environments
2023-10-10 15:25:10 +01:00
93fb0dd3b3
Land #18171 , Enable using modules when deferred loading is turned on
2023-10-06 17:41:18 +01:00
ef871685af
Revert accidental changes
2023-10-06 16:04:38 +01:00
9eb4385a25
Get stats from the cache instead of from frameworks list of loaded modules
2023-10-06 16:04:38 +01:00
d60993f7e8
Enable using modules when deferred loading is turned on
2023-10-06 16:04:34 +01:00
d11f15b9af
Update gem dependencies
2023-10-06 15:49:06 +01:00
88c849de74
Add pin to rails 7.0.x
2023-10-06 14:08:57 +01:00
d46e80f17f
Fix how port forwards are listed
...
Fixes #18291
2023-10-06 09:04:28 -04:00
ec33707381
Bump version of framework to 6.3.38
2023-10-05 12:08:28 -05:00
faa3dd6b85
Land #18372 , Fix error downloading a file from generic shell
2023-10-05 17:47:27 +01:00
dff907b6ca
Land #18425 , Add history support to nasm and metasm shells
2023-10-05 17:20:31 +01:00
1f6009333e
Add history support to nasm and metasm shells
2023-10-04 22:36:19 +01:00
1ee7f03a2b
Land #18420 , Update user agent strings
...
Merge branch 'land-18420' into upstream-master
2023-10-04 14:13:04 -05:00
a16379b2a7
Land #17919 , Post::Windows::Service: Support start/stop service on shell sessions
...
Merge branch 'land-17919' into upstream-master
2023-10-04 13:51:25 -05:00
81e4f94869
Land #18412 , Add a couple tips to metasploit
2023-10-04 13:45:33 -04:00
126c19890a
Add option to reload all libs when running a module
2023-10-04 14:59:36 +01:00
6aeffa5a17
Land #18363 , Add support to msfvenom for "-f octal
...
Merge branch 'land-18363' into upstream-master
2023-10-03 16:21:57 -05:00
14c42fcefc
Land #18405 , Show errors on inaccessible payload files
2023-10-03 12:22:04 +01:00
4d87d4e114
Save Kerberos tickets in the MSF cache upon a successful login
2023-10-03 13:45:41 +11:00
2deb3a831a
Update user agent strings
2023-10-03 11:47:23 +11:00
3baf867c76
Update lib/msf/ui/tip.rb
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2023-10-02 16:38:26 -04:00
50e4269c05
Land #18338 , Get crackable ASREP hashes
...
This PR fixes the ASREP roasting workflow and resolves
issue #17988 .
2023-10-02 13:26:43 -04:00
5087e0ffe3
Land #18197 , Ldap login scanner module
...
Adds a new login scanner module for LDAP
2023-10-02 10:56:56 -04:00
e70f356239
Show errors on inaccessible payload files
2023-10-02 14:46:25 +01:00
76a25c6937
Don't store creds for successful schannel ldap auth
2023-10-02 13:42:25 +01:00
5aee82e35a
Add a couple of tips
2023-09-29 11:47:27 -04:00
Christophe De La Fuente