b0b4da543d
Land #18400 , Kerberos ticket_search fix passing in a workspace
2023-10-23 16:17:24 +02:00
77a8b0efa2
Land #18421 , Save Kerberos tickets in the MSF cache upon a successful login
2023-10-23 15:25:09 +02:00
80d2fa738d
Land #18296 , update more mysql modules to support newer authentication methods
2023-10-12 17:19:02 +01:00
86b7ec4518
Address comments from the review
2023-10-12 09:50:19 -04:00
de8e392b7b
Only randomize the URI once
2023-10-12 09:50:19 -04:00
5577413bd9
Add additional classes for payload loading
...
This fixes the java/shell_reverse_tcp payload
2023-10-12 09:27:26 -04:00
f712c67441
Support URIPATH in Java::HTTP::ClassLoader
...
The URIPATH must end with / due to how the package names are requested
from the web server in a nested directory structure. #on_request_uri
also needed to be updated to check for the relative resource.
2023-10-12 09:27:26 -04:00
1b172768b4
Use upstream ruby-mysql in Remote::MYSQL
...
* ... and dependents
2023-10-12 13:08:35 +02:00
4d87d4e114
Save Kerberos tickets in the MSF cache upon a successful login
2023-10-03 13:45:41 +11:00
5087e0ffe3
Land #18197 , Ldap login scanner module
...
Adds a new login scanner module for LDAP
2023-10-02 10:56:56 -04:00
c1abf37d0c
Use passed in workspace if available, default to current workspace
2023-09-25 13:30:18 +01:00
d64ed33cdf
code spell for a bunch of modules
2023-09-24 17:42:00 -04:00
c1a44c8b7f
Land #18359 , Forge ticket fix
2023-09-18 13:05:25 +01:00
5c93b3880a
Don't add extra PACs for silver tickets
2023-09-13 15:41:09 +10:00
6b8fe05865
Add new PAC types required by DCs for accepting TGTs as valid
2023-09-12 17:19:10 +10:00
1af852b240
Add remote ldap specs
2023-09-11 16:33:01 +01:00
80757fc717
Add missing require
2023-09-11 16:33:01 +01:00
fc89c9939a
Add LDAP login scanner
2023-09-11 16:33:01 +01:00
8f013d7aef
Add ldap login scanner module
2023-09-11 16:33:01 +01:00
235c142274
Merge remote-tracking branch 'origin/flask_unsign' into flask_unsign
2023-09-11 10:27:00 -04:00
40716cb28b
Make the separator configurable
2023-09-08 08:56:45 -04:00
143e1c82b5
Add validation functionality to FlaskUnsign
2023-09-07 16:19:58 -04:00
213b9f9589
Merge remote-tracking branch 'upstream/master' into flask_unsign
2023-09-06 15:39:37 -04:00
f467e0747a
review comments
2023-08-28 17:39:02 -04:00
1bd14dd8f4
error handling for apache modules
2023-08-21 18:12:26 -04:00
ceb46cc2ef
lib and spec updates
2023-08-20 20:07:42 -04:00
a45792877a
lib and spec updates
2023-08-20 19:37:22 -04:00
d84c15cf21
lib and spec updates
2023-08-17 15:29:20 -04:00
f125ad8870
review comments
2023-08-08 17:44:35 -04:00
7b024f21bd
apache nifi h2 rce
2023-08-08 17:44:35 -04:00
5cdac38ac0
apache nifi h2 rce
2023-08-08 17:44:35 -04:00
f287f50be7
Land #18187 , Fixes incorrect usage of pack/unpack directives
2023-07-21 11:40:02 +01:00
1af22cfd22
Land #18096 , Add initial proxies datastore support for kerberos workflows
2023-07-21 11:37:04 +01:00
08a2a293a9
Add proxies datastore support to kerberos
2023-07-21 11:19:50 +01:00
8e0a909b18
Fixes incorrect usage of pack/unpack directives
2023-07-19 11:39:00 +01:00
2c2f855e20
working cookies for superset
2023-07-06 07:12:39 -04:00
c9249fd9b7
basics
2023-07-02 12:37:58 -04:00
36e0d8f915
Land #18121 , Add proper SubjectAltName parsing
2023-06-27 16:54:33 +01:00
e298788a28
Land #18049 , Update jenkins login scanner to work with newer versions
2023-06-22 14:04:24 +01:00
1b562dd02b
Revert "Improve AMSI bypass on new Windows"
...
This reverts commit f97ab80224c8f942cc03
2023-06-21 16:35:41 -05:00
0609d246f3
adds more future proofing to implementation
2023-06-21 14:19:24 +01:00
0ca978fe9d
Return arrays of values where applicable
...
Return arrays of values where applicable and update method docs.
2023-06-16 12:19:11 -04:00
0555b4ada0
Add SAN parsing with a proper ASN.1 definition
...
The ORAddress field is left out because it's significantly more
complicated than the rest and doesn't appear to be necessary at this
time.
2023-06-15 15:57:02 -04:00
9776a6eb4a
Land #18078 , add SID support for icpr_cert
...
pulls in latest changes
2023-06-15 13:39:31 -05:00
5b77805d68
Land #18078 , add support for SID in icpr_cert
2023-06-15 13:17:09 -05:00
6988227ee4
Fix AS-REQ with PKINIT and NTDS_CA_SECURITY_EXT
2023-06-14 16:18:04 -04:00
3ee02a0e41
Add the ALT_SID datastore option
2023-06-14 16:17:58 -04:00
f97ab80224
Land #17942 , Improve AMSI bypass on new Windows
...
The script generated by the web_delivery module is blocked
by the Antimalware Scan Interface (AMSI) on newer versions
of windows. This PR allows the script to bypass AMSI.
2023-06-12 18:50:48 -04:00
834ad18d28
Land #18069 , Handle LDAP UnbindRequest
...
Remote::JndiInjection: handle LDAP UnbindRequest
2023-06-12 09:53:38 -04:00
4c817ce1de
Land #17946 , CVE-2023-21839 - Oracle Weblogic RCE
...
CVE-2023-21839 - Oracle Weblogic PreAuth Remote Command Execution via ForeignOpaqueReference IIOP Deserialization
2023-06-09 14:55:43 -04:00
Christophe De La Fuente