Commit Graph

16937 Commits

Author SHA1 Message Date
Brendan Coles 09a766aed6 Land #13898, Fix error handling when an invalid API_KEY is specified
post/multi/gather/wlan_geolocate: Fix an issue where the API error
message is not parsed correctly when an invalid `API_KEY` is passed
to the geolocation API.
2020-07-26 04:38:25 +00:00
Tim W ac9c6174c6 fix #13779, fix error on invalid geolocation api key 2020-07-24 14:33:08 +08:00
Metasploit 1bd4a8d752 Bump version of framework to 5.0.101 2020-07-23 12:07:28 -05:00
William Vu e06511cb42 Land #13883, syntax error fix in Hardware Bridge 2020-07-23 10:07:33 -05:00
William Vu 93df021c4a Land #13884, Linux::Priv#download_cmd removal 2020-07-23 09:36:39 -05:00
William Vu 8e94fd55db Force OpenSSL::SSL::VERIFY_NONE
Thanks, @HynekPetrak!
2020-07-22 16:33:37 -05:00
William Vu f736b0192f Add LDAPS support and update vCenter vmdir modules 2020-07-22 14:23:00 -05:00
William Vu 41457b21d9 Land #13868, vCenter vmdir CVE-2020-3952 hash dump 2020-07-22 14:00:44 -05:00
William Vu 84c6b752ea Fix typo 2020-07-22 10:52:24 -05:00
Brendan Coles d986d27218 Remove Msf::Post::Linux::Priv.download_cmd 2020-07-22 15:45:50 +00:00
Brendan Coles 2f7cce9e41 hwbridge: fix syntax error introduced in aeed81de29 2020-07-22 15:30:47 +00:00
adfoster-r7 a7e12bfa50 Land #13822, update to the latest rubocop version 2020-07-22 10:18:31 +01:00
h00die 5d5ee4da36 add cracking support for dynamic_82 2020-07-21 18:59:31 -04:00
Alan Foster 632f1a1205 Update json rpc process request error handling 2020-07-21 18:39:02 +01:00
William Vu d494eb046d Fix RPC support by raising instead of returning 2020-07-20 14:04:38 -05:00
Brent Cook f70043bf4e check if a module has a check method first
Currently, if you run 'check' on a module that does not have a check
method, it will first complain that you have not set the 'RHOSTS'
option, whether it's an exploit module or a scanner. Then, once you set
RHOSTS (or whatever else it needs), it will then say 'Psych! I didn't
have a method in the first place!'.

This switches that logic around so that it first alerts you that the
module doesn't have support in the first place. It also similarizes more
logic between aux and exploit for some future convergence possibility.
2020-07-20 11:09:46 -05:00
Metasploit 2d55b0d2e7 Bump version of framework to 5.0.100 2020-07-16 12:06:38 -05:00
Brendan Coles b2b88fe902 Land #13841, add Msf::Post::Unix.is_root? method 2020-07-13 16:23:58 +00:00
Brendan Coles 090b80eea7 Add Msf::Post::Unix.is_root? method 2020-07-12 00:47:56 +00:00
Brendan Coles 384a71b06a Land #13271, Update auxiliary/server/capture/smtp to store credentials 2020-07-11 17:30:06 +00:00
h00die 85bd740640 review comments 2020-07-11 15:19:16 -04:00
Jeffrey Martin f6d21abb51 require instead of autoload for exploit mixin 2020-07-10 22:15:12 -05:00
Jeffrey Martin c61f34ed16 Land #13596, [GSoC] SQLi library with support to MySQL (and MariaDB) 2020-07-10 13:45:47 -05:00
Metasploit 8926b1893e Bump version of framework to 5.0.99 2020-07-09 12:06:13 -05:00
Metasploit 71f10eeeb0 Bump version of framework to 5.0.98 2020-07-07 13:38:22 -05:00
Alan Foster 4604488c05 Update rubocop version 2020-07-07 19:19:37 +01:00
Niboucha Redouane 4c229c0a24 Add method for writing to files using SQL injection 2020-07-06 16:53:46 +02:00
Metasploit 0308d3822c Bump version of framework to 5.0.97 2020-07-02 12:03:56 -05:00
Niboucha Redouane 4950c2dacf Fix minor bugs, in safe mode, and in the name of the attribute passed to attr_accessor 2020-07-01 23:00:23 +02:00
William Vu f5e50eb4b0 Land #13795, helpful "use" tip when running search 2020-07-01 14:52:18 -05:00
William Vu 8186270538 Fix whitespace 2020-07-01 14:52:07 -05:00
William Vu ffc07d6c8f Merge remote-tracking branch 'upstream/master' into pr/13787 2020-07-01 14:42:16 -05:00
William Vu 89f7be3ef0 Improve error message 2020-07-01 14:20:04 -05:00
Alan Foster b79c08772a Add note about using a module after searching 2020-07-01 19:21:34 +01:00
Alan Foster 3737c6810c Fix typo in debug command 2020-07-01 14:18:51 +01:00
Niboucha Redouane f9ade608b5 minor change: add default value to some arguments 2020-07-01 02:56:01 +02:00
William Vu 4b78de5416 Refactor AutoCheck a bit more 2020-06-30 11:58:42 -05:00
Niboucha Redouane 0680113288 get rid of database parameter in MySQLi methods 2020-06-30 18:49:13 +02:00
Niboucha Redouane b230adebba Add check for positional arguments on class constructor (SQLi::Common) 2020-06-30 16:16:35 +02:00
Alan Foster b841246536 Update autocheck to use prepend instead of include, add ForceExploit functionality 2020-06-30 11:40:46 +01:00
adfoster-r7 d513ff32d7 Land #13782, Allow a jsonrpc token to be used when a database is present 2020-06-29 18:27:30 +01:00
Adam Galway babaee8c8e adds debug command with spec tests 2020-06-29 15:38:56 +01:00
Akkuman bc74900a41 🐛 fix #13781 set token from environment var 2020-06-29 15:07:33 +08:00
Tim W 878c1a56df fix session abort with Ctrl C 2020-06-29 12:35:02 +08:00
William Vu 6e56fb5fe1 Remove debug print from session/interactive.rb 2020-06-28 22:52:42 -05:00
Niboucha Redouane 440294ff07 make some attributes writable, and specify its the SQLi library in any verbose message 2020-06-27 18:28:12 +02:00
Niboucha Redouane 2c4ca04dca Rename the factory method for SQLi classes, and add a check on the class to instanciate 2020-06-27 14:51:54 +02:00
Jeffrey Martin aa6c037dbd refactor mixin as factory for sqli classes 2020-06-26 15:09:01 -05:00
adfoster-r7 6bbce9e73c Land #13601, Add custom service name support to msfvenom's exe-service generator 2020-06-26 19:00:33 +01:00
Niboucha Redouane 34e8eae471 move hex_encode_strings to MySQLi::Common, as it is specific to MySQL 2020-06-26 16:04:51 +02:00