cgranleese-r7
3da17d2775
Addresses PR feedback
2023-10-12 10:59:29 +01:00
cgranleese-r7
87d108aab5
Removes Meterpreter logic
2023-10-03 09:53:02 +01:00
cgranleese-r7
6fdcc43530
Removes mixin
2023-09-21 14:35:13 +01:00
cgranleese-r7
461e661d06
Makes improvement to enum_computers module
2023-09-20 12:50:39 +01:00
Jack Heysel
13174382d9
Land #18179 , improve windows checkvm post module
2023-09-06 14:07:50 -04:00
jvoisin
b79549f178
Use a better detection method for Xen
...
Based on @adfoster-r7's feedback.
2023-08-22 12:36:48 +02:00
jvoisin
126b5441c9
Add a bunch of virtio modules to detect KVM
2023-08-22 12:34:42 +02:00
jvoisin
995dcfd753
Be a bit more stealthy when looking at kernel modules
...
No need to run a binary if reading a file is enough
2023-08-22 12:34:42 +02:00
jvoisin
bee2b6b381
Add detection via /proc/cpuinfo
2023-08-22 12:34:42 +02:00
jvoisin
2a5595037f
Add detection via /sys/devices/virtual/dmi/id/bios_vendor
2023-08-22 12:34:42 +02:00
jvoisin
cd1fc1a79c
Add another Hyper-V detection
2023-08-22 12:34:42 +02:00
jvoisin
0af4e98eb6
Add some process-based detection
2023-08-22 12:34:42 +02:00
jvoisin
95b964a2f4
Add some more virtualbox kernel modules
...
Taken from https://www.virtualbox.org/wiki/Guest_resizing
and https://linuxconfig.org/install-virtualbox-guest-additions-on-linux-guest
2023-08-22 12:34:42 +02:00
jvoisin
f84cbab0c4
Add some Hyper-v kernel modules
...
Taken from https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/manage-hyper-v-integration-services
2023-08-22 12:34:41 +02:00
jvoisin
af22ca9253
Add detection of Xen via /proc/xen/capabilities
...
Xen's dom0 has `control_d` in its /proc/xen/capabilities
2023-08-22 12:34:41 +02:00
jvoisin
26b6ad2948
Add a comment
2023-08-22 12:34:41 +02:00
jvoisin
4027a6edce
Add detection via /sys/class/dmi/id/sys_vendor
2023-08-22 12:34:41 +02:00
jvoisin
86c868084c
Remove joesandbox and virtualpc
2023-08-11 14:42:51 +02:00
jvoisin
88a5a52c1a
Stringy arrays before checking anything
...
As suggested in https://github.com/rapid7/metasploit-framework/pull/18179#pullrequestreview-1533226875
2023-08-11 14:42:01 +02:00
jvoisin
9b87a9d4f1
Run HyperV check after Parallels
...
As suggested in https://github.com/rapid7/metasploit-framework/pull/18179#discussion_r1265637311
2023-08-11 14:42:01 +02:00
jvoisin
075a7e9a14
Narrow a virtualbox check
2023-08-11 14:42:01 +02:00
jvoisin
1188256260
Update the Description to add newly detected VM
2023-08-11 14:42:01 +02:00
jvoisin
89dd8ce930
Add some references
2023-08-11 14:42:01 +02:00
jvoisin
f439ca4fb7
Fix Multi String value issues
...
Spotted by @cdelafuente-r7
2023-08-11 14:42:01 +02:00
jvoisin
c3b77844cc
Improve Qemu detection
2023-08-11 14:42:01 +02:00
jvoisin
fd45073d36
Improve Xen detection
2023-08-11 14:42:01 +02:00
jvoisin
9bed3da364
Improve VirtualBox detection
2023-08-11 14:42:01 +02:00
jvoisin
29d9908f22
Improve virtualpc detection
2023-08-11 14:42:01 +02:00
jvoisin
fdd212625f
Improve VMWare detection
2023-08-11 14:42:01 +02:00
jvoisin
04da17fc7b
Add detection for JoeSandbox
2023-08-11 14:42:01 +02:00
jvoisin
dec237ce0a
Add Parallels detection
2023-08-11 14:42:01 +02:00
Jack Heysel
6e8d0b33df
Land #18191 , Improve post linux checkcontainer
...
This PR adds support for detecting whether a session is
running in a podman container and improves detection for
sessions running in Docker, LXC and WLS containers.
2023-08-08 13:26:01 -04:00
jvoisin
0df2f57124
Fix a typo
2023-07-19 19:47:17 +02:00
Julien Voisin
d5ca174e1e
Apply suggestions from code review
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-07-19 17:46:27 +00:00
cgranleese-r7
a0f04a7018
Land #17681 , Add datastore option for Jenkins home directory
2023-07-18 14:17:15 +01:00
Joshua Rogers
d9e23a5c67
Update modules/post/multi/gather/jenkins_gather.rb
...
Co-authored-by: cgranleese-r7 <69522014+cgranleese-r7@users.noreply.github.com >
2023-07-18 14:02:27 +02:00
jvoisin
2efcbbb772
Add docker detection via the old .dockerinit file
2023-07-16 18:12:11 +02:00
jvoisin
1f2112c5c1
Add podman detection via an environment variable
2023-07-16 18:11:11 +02:00
jvoisin
f46641f479
Improve LXC detection
...
See https://github.com/silverwind/ansible/commit/d649d24be2ed36ff8da7ecbd57b6bb25a9a3b745
2023-07-16 18:07:59 +02:00
jvoisin
2e26e7c98c
Add detection for WSL
2023-07-16 18:04:12 +02:00
jvoisin
04438920d5
Add Podman detection
...
See https://github.com/containers/podman/issues/3586#issuecomment-661918679
2023-07-16 18:01:06 +02:00
Ashley Donaldson
afe359281c
Remove manual signature handling, and figure it out for the user.
2023-06-28 09:22:01 +10:00
Spencer McIntyre
67f7a33d77
Land #18114 , .NET assembly execution enhancements
...
Allow .NET assembly execution within the meterpreter process
2023-06-27 09:32:43 -04:00
Spencer McIntyre
df0f7de098
Fix an ARGUMENT handling error
...
`datastore['ARGUMENT']` can be `nil` when it's been unset. Avoid an
error when appending it to cln_params by checking that it's present.
2023-06-27 09:29:59 -04:00
Ashley Donaldson
0d0906840e
Fix memory protection bug
2023-06-27 09:59:52 +10:00
Joshua Rogers
cac515b8db
Update jenkins_gather.rb
...
Change the default Windows location to C:\ProgramData\Jenkins\.jenkins\.
2023-06-26 21:27:59 +02:00
Ashley Donaldson
624643be4a
Catch errors and give meaningful error messages
2023-06-25 22:12:22 +10:00
dwelch-r7
d68eb84334
Land #18065 , Updates jenkins_gather module to work with newer version of Jenkins
2023-06-23 10:44:06 +01:00
cgranleese-r7
9176d0d3e0
Updates jenkins_gather to work with newer version of Jenkins
2023-06-23 10:02:03 +01:00
Ashley Donaldson
a7ce4c7fa8
Free memory from the C++ side, rather than the Ruby side.
2023-06-23 09:57:53 +10:00