 adfoster-r7
|
0557d63127
|
Add database ref opts for kerberos and pkcs12
|
2025-08-18 15:56:47 +01:00 |
|
|
Spencer McIntyre
|
13b3af325f
|
Apply the ACEs for Authenticated Users
|
2025-08-15 11:57:30 -04:00 |
|
|
cgranleese-r7
|
c843e36402
|
Merge pull request #20469 from adfoster-r7/improve-kerberos-file-load-error-messages
Improve Kerberos file load error messages
|
2025-08-15 12:51:52 +01:00 |
|
|
adfoster-r7
|
bebb43f8f6
|
Improve kerberos file load error messages
|
2025-08-15 12:38:45 +01:00 |
|
|
Diego Ledda
|
487c204b52
|
Merge pull request #20381 from h00die/persistence_phase_1
Persistence libraries/Mixins
|
2025-08-15 12:40:55 +02:00 |
|
|
jheysel-r7
|
4200f51fdf
|
Merge pull request #20445 from zeroSteiner/feat/lib/ldap-adds/2
Don't look up the local system SID
|
2025-08-12 07:59:10 -07:00 |
|
|
adfoster-r7
|
332a55cb4f
|
Fix error in kerberos authenticator
|
2025-08-11 16:48:37 +01:00 |
|
|
adfoster-r7
|
ced20bf15a
|
Consolidate pkcs12 cert file reads
|
2025-08-11 14:28:47 +01:00 |
|
|
Tanush-Jain
|
becdda1591
|
added fixed pkinit file
|
2025-08-04 17:51:36 -04:00 |
|
|
Spencer McIntyre
|
90b60c78ac
|
Don't look up the local system SID
|
2025-08-01 17:37:29 -04:00 |
|
|
Jack Heysel
|
e88883c82b
|
ESC9, ESC10 ESC16 exploit support
|
2025-07-30 15:08:14 -07:00 |
|
|
Jack Heysel
|
a1c95e64ba
|
Fixed unnecesary merge conflict additions
|
2025-07-30 11:59:51 -07:00 |
|
|
Jack Heysel
|
8179de6cea
|
ESC9 ESC10 and ESC16 detection
|
2025-07-30 11:46:57 -07:00 |
|
|
Dean Welch
|
0ce1617288
|
Bump rails to 7.2
|
2025-07-28 12:29:58 +01:00 |
|
|
h00die
|
dcde8d1580
|
adjust spaces and review comments for persistence lib
|
2025-07-27 19:07:39 -04:00 |
|
|
jheysel-r7
|
05f2012ccc
|
Merge pull request #20338 from Chocapikk/xorcom
Add auxiliary and exploit modules for Xorcom CompletePBX 5.2.35 CVEs (2025-2292, 30004, 30005)
|
2025-07-22 08:19:36 -07:00 |
|
|
Valentin Lobstein
|
56f6a65e21
|
Update lib/msf/core/exploit/remote/http/xorcom_complete_pbx.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-07-19 04:04:25 +02:00 |
|
|
Valentin Lobstein
|
4a1f9e541e
|
Update lib/msf/core/exploit/remote/http/xorcom_complete_pbx.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-07-19 04:04:14 +02:00 |
|
|
Chocapikk
|
4e70dfe70d
|
Rename mixin
|
2025-07-16 22:40:27 +02:00 |
|
|
Chocapikk
|
1863eddcd4
|
chore: add magic encoding comment to Ruby files
|
2025-07-16 22:32:20 +02:00 |
|
|
Chocapikk
|
1fb6d488a8
|
Rename file
|
2025-07-16 22:30:28 +02:00 |
|
|
Chocapikk
|
7ddae3ec3f
|
refactor(xorcom): rename helper to completepbx? + pass creds to completepbx_login
|
2025-07-16 21:48:34 +02:00 |
|
|
Chocapikk
|
b06903810c
|
feat(xorcom): add shared CompletePBX mixin, refactor modules, update docs
|
2025-07-16 21:25:17 +02:00 |
|
|
h00die
|
f9a804d649
|
persistence libraries
|
2025-07-11 17:35:06 -04:00 |
|
|
Spencer McIntyre
|
566020abbf
|
Cache the result of whoami
|
2025-07-08 15:43:41 -04:00 |
|
|
Spencer McIntyre
|
23c02d6873
|
Note the permissions required for checking permissions
|
2025-07-08 15:01:54 -04:00 |
|
|
Spencer McIntyre
|
2650956fce
|
Add special handling for more groups
Add handling for the special `Authenticated Users` and `Users` groups.
|
2025-07-08 15:01:54 -04:00 |
|
|
Spencer McIntyre
|
a93d20ccfe
|
Add some basic tests
|
2025-07-08 15:01:54 -04:00 |
|
|
Spencer McIntyre
|
d0d3a2719d
|
Add some commented code for debugging
Squash me
|
2025-07-08 15:01:54 -04:00 |
|
|
Spencer McIntyre
|
7cacc4cd45
|
Update the ad_cs_cert_template module too
|
2025-07-08 15:01:54 -04:00 |
|
|
Spencer McIntyre
|
c2a06e341d
|
Expand on the matcher logic
|
2025-07-08 15:01:46 -04:00 |
|
|
Spencer McIntyre
|
23c85a26fe
|
Add some documentation for the methods
|
2025-06-24 11:27:52 -04:00 |
|
|
Spencer McIntyre
|
b8ecd50f32
|
Add and use a generic LDAP entry cache
|
2025-06-24 11:27:52 -04:00 |
|
|
Spencer McIntyre
|
cf53956128
|
Add a method to get domain info
|
2025-06-24 11:27:52 -04:00 |
|
|
Spencer McIntyre
|
7b1af9fc09
|
Initial implementation of #adds_sd_grants_permissions?
|
2025-06-24 11:27:52 -04:00 |
|
|
Spencer McIntyre
|
70f7dfebc3
|
Initial commit of AD DS LDAP mixin
|
2025-06-24 11:27:52 -04:00 |
|
|
adfoster-r7
|
fb02b4ade5
|
Revert "Bump rails version to 7.2"
|
2025-06-17 12:20:49 +01:00 |
|
|
Dean Welch
|
b87ef99cd8
|
Bump rails version to 7.2
|
2025-06-12 16:41:10 +01:00 |
|
|
Spencer McIntyre
|
f3b650a409
|
Major refactoring of PHP payloads and related exploits
|
2025-05-30 09:06:38 -04:00 |
|
|
Spencer McIntyre
|
dcaeb5266c
|
Define the system_block module function
|
2025-05-30 09:06:38 -04:00 |
|
|
bcoles
|
5aa91bd57c
|
Rubocop: Resolve Rubocop Style/RedundantRegexpArgument violations
|
2025-05-24 13:34:32 +10:00 |
|
|
cgranleese-r7
|
f6faa5598b
|
Fixes modules to now correctly use a hash with report note
|
2025-05-22 10:59:50 +01:00 |
|
|
Spencer McIntyre
|
57c69049f7
|
Merge pull request #20175 from smashery/ruby-kerberoasting
Ruby kerberoasting
|
2025-05-16 10:28:52 -04:00 |
|
|
Brendan
|
13d18f2c83
|
Update lib/msf/core/exploit/remote/http/wordpress/login.rb
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
|
2025-05-13 17:32:48 -05:00 |
|
|
bwatters-r7
|
ce8ceaddbc
|
Change check for redirect to be less specific
|
2025-05-13 10:59:16 -05:00 |
|
|
Ashley Donaldson
|
6d3fc7b732
|
Neatening kerberoasting modifications
|
2025-05-13 18:26:25 +10:00 |
|
|
Ashley Donaldson
|
abba784190
|
Fix AES kerberoast hashcat format. Change when hashes are displayed in module.
|
2025-05-13 18:26:25 +10:00 |
|
|
Ashley Donaldson
|
365db3c52e
|
Support different hash type JTR formats
|
2025-05-13 18:26:25 +10:00 |
|
|
Ashley Donaldson
|
1e56168905
|
Move kerberoasting to Ruby code
|
2025-05-13 18:26:25 +10:00 |
|
|
Spencer McIntyre
|
be8f4f929c
|
Fix an issue in the ESC8 module
|
2025-05-05 13:40:33 -04:00 |
|