Commit Graph

2373 Commits

Author SHA1 Message Date
Jeffrey Martin 5b3edd4cb2 still need to include Msf::Post::File
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
2021-05-25 08:35:55 -05:00
Jeffrey Martin 0cefd8eaa6 refactor post API for process lists 2021-05-24 18:39:16 -05:00
Shelby Pace 9f2dae38c8 Land #15079, add meterpreter compat requirements 2021-05-24 16:00:08 -05:00
Alan Foster 100da2f1b1 Enforce Style/RedundantBegin for new modules 2021-05-13 04:01:03 +01:00
pingport80 fd73b03239 add get_processes for windows in common.rb 2021-05-02 14:16:51 +05:30
pingport80 77b0b3e183 add shell support for win checkvm 2021-04-24 18:06:37 +05:30
Spencer McIntyre 8186a75235 Add meterpreter command compatibility to modules 2021-04-21 18:22:15 -04:00
Spencer McIntyre 397530c554 Add meterpreter command compat to module info 2021-04-21 14:24:01 -04:00
Grant Willcox 045367cff7 Apply RuboCop formatting to documentation and module 2021-04-12 13:52:00 -05:00
Grant Willcox 54aa9d42e9 Add one additional guard clause in to prevent outputting a message if the database isn't properly connected 2021-04-12 13:41:17 -05:00
Grant Willcox 0b06904dd0 Update module with more checks and replace the Process migration strategy with a PID migration strategy. Also update documentation accordingly 2021-04-12 13:05:26 -05:00
archcloudlabs 7a828b5884 updating w/ proc option to migrate into and proc check before auto migrate 2021-04-12 13:05:26 -05:00
bwatters 11b12e4c63 Land #14869, Add Windows post module for gathering Exchange mailboxes
Merge branch 'land-14869' into upstream-master
2021-03-26 15:08:06 -05:00
sophosyaniv d74fe1d6d8 randomize output delimiters 2021-03-25 20:12:58 -07:00
archcloudlabs 84ec2b1df7 avast_memory_dump path & function name mods 2021-03-21 12:45:13 -04:00
sophosyaniv 4673e85ec7 add new options, use pgets instead of readline 2021-03-19 19:39:48 -07:00
archcloudlabs 2bf44f972c Adding additional AVDump.exe paths 2021-03-14 12:23:34 -04:00
sophosyaniv b2f4df4148 fix lint 2021-03-09 19:33:08 -08:00
sophosyaniv be23957eb3 Add files via upload
add exchange.rb
2021-03-09 11:36:52 -08:00
Spencer McIntyre 53f4d3f193 Land #14792, Apply fixes for invalid architecture checks to affected modules
Fixes #14599
2021-03-05 09:24:34 -05:00
dwelch-r7 319f15d938 Handle nil versions for rubygems 4 2021-02-25 16:47:49 +00:00
Alan Foster b06c5c12aa Rubocop recently landed modules continued 2021-02-25 14:13:40 +00:00
Grant Willcox f65b4155e5 Fix up modules to use more explicit reference to ARCH_X64 and to correctly check sysinfo['Architecture'] as per #14599 2021-02-22 18:47:46 -06:00
agalway-r7 8a339f54c1 Land #14734, updates and runs rubocop against recent modules
Rubocop recently landed modules
2021-02-19 13:48:47 +00:00
agalway-r7 275e9c5454 Land #14696, Further Zeitwerk lands to improve boot speed
Zeitwerk rex folder
2021-02-19 10:33:37 +00:00
Alan Foster 5b3fde7735 Rubocop recently landed modules 2021-02-16 15:08:08 +00:00
Alan Foster bed7ae2c78 Add latest rubocop rules 2021-02-12 13:31:51 +00:00
dwelch-r7 b95be3ed10 Zeitwerk rex folder 2021-02-08 12:24:12 +00:00
Grant Willcox 90d9a5dcff Land #14682, Fix msftidy warnings 2021-01-29 11:30:52 -06:00
Grant Willcox a8b1bf17d0 Land #14593, OneDrive Sync Targets Enumeration Module 2021-01-29 10:20:01 -06:00
Alan Foster 91febcb194 Fix msftidy warnings 2021-01-29 16:19:13 +00:00
Grant Willcox fce3cf2ba2 Add in documentation updates and improve some areas of the module to remove false statements and clean up output and code styling 2021-01-29 10:17:48 -06:00
Stuart.Morgan 58f5fba22d Run rubocop 2021-01-28 15:56:48 +00:00
Stuart.Morgan 8e0bcabaa8 Added more verbose account checks as per gwilcox's request 2021-01-28 15:54:06 +00:00
Grant Willcox 760e4f6880 Add in first round of fixes for review comments 2021-01-27 16:54:24 -06:00
Spencer McIntyre 20590e91fb Land #14541, Create fanny_bmp_check.rb 2021-01-25 15:08:22 -05:00
Spencer McIntyre 3cd65606ee Update the fanny_bmp_check module and documentation 2021-01-25 14:54:44 -05:00
William Martens 4445812b60 Create fanny_bmp_check.rb
Update modules/post/windows/gather/forensics/fanny_bmp_check.rb

Thanks, I thought the comments on it would be needed/ (this is my first module)

Co-authored-by: bcoles <bcoles@gmail.com>

Update modules/post/windows/gather/forensics/fanny_bmp_check.rb

[+] thanks!

Co-authored-by: bcoles <bcoles@gmail.com>

Update modules/post/windows/gather/forensics/fanny_bmp_check.rb

Co-authored-by: bcoles <bcoles@gmail.com>

Update modules/post/windows/gather/forensics/fanny_bmp_check.rb

Co-authored-by: bcoles <bcoles@gmail.com>

Update modules/post/windows/gather/forensics/fanny_bmp_check.rb

[+] thanks for the sharp eye! It certainly does. I tried at my side to make it look as a "flow" but never really succeeded with it. Again, thanks!

Co-authored-by: bcoles <bcoles@gmail.com>

Update modules/post/windows/gather/forensics/fanny_bmp_check.rb

Co-authored-by: bcoles <bcoles@gmail.com>

Update modules/post/windows/gather/forensics/fanny_bmp_check.rb

Of course, this is my first module - I'm sorry, thanks for pointing it out!

Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>

Update fanny_bmp_check.rb

Changed
 ...on #{sysinfo['Computer']} for...
to
"Target #{match} result(s) found in
And as well as the + 'shell'  in the session types.
And, as well as  commented some stuff I will remove (the comments, that is) when this is done.
The URL (ref) at the Desc. of the module needs to be a bit more short. Will do this too.

Changed (if not already?) the src link.

Create fanny_bmp_check_Docs.md

Rename fanny_bmp_check_Docs.md to fanny_bmp_check.md

Docs ready to go, (msftidy_docs done[x])

 ./tools/dev/msftidy_docs.rb documentation/modules/post/windows/gather/forensics/fanny_bmp_check.md
(no results) - so It's ready to go

msftidy.rb Done [no errors)

msftidy.rb Done [no errors)

Update fanny_bmp_check.md

Update fanny_bmp_check.md

Removed References since they were not (really) meant for being included,  It was more of my own Notes/Comments that accidentally came with it. 👍

Indentation (2 spaces, + the 33 to 44 lineblock fixed[x])

Update modules/post/windows/gather/forensics/fanny_bmp_check.rb

Co-authored-by: bcoles <bcoles@gmail.com>

fanny_bmp_check.rb

Updated fanny_bmp_check.rb to use arrays instead.

Update fanny_bmp_check.rb

Rubocop fixed

Update fanny_bmp_check.rb

Added report_vuln()  as Jmartin suggested

Update fanny_bmp_check.rb

Update v2

Update modules/post/windows/gather/forensics/fanny_bmp_check.rb

Oh,  yes -  Thank you,  again - sorry

Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com>

Sorry for confusion; 2 problems(line 66+line 61) (work arounded for now)

2 Problems, first; it did not work with the info line (line 66, 61)
If It's still wrong ( the loop , which I have tried to fix)

I am not entirely sue what the problem is, because If I had the end there it was (commented out, line 61) - then it gets, unexpected 'end'  expecting end-of-input,

Coming back again, sorry for the confusion.

Update modules/post/windows/gather/forensics/fanny_bmp_check.rb

Ah, tried it over here - and it worked,  Thanks!

Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com>

Update documentation/modules/post/windows/gather/forensics/fanny_bmp_check.md

Of course,  thanks, committing this suggestion.

Regards

Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>

Update modules/post/windows/gather/forensics/fanny_bmp_check.rb

Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-01-25 14:54:37 -05:00
Spencer McIntyre 829bacbef6 Refactor and document some of the FileSystem mixin methods 2021-01-08 16:10:36 -05:00
Stuart.Morgan e82b5a15fe rubocop 2021-01-08 14:32:18 +00:00
Stuart.Morgan 4215339d34 Added checks for orphaned accounts and fixed a bug around CSV generation 2021-01-08 14:31:31 +00:00
Stuart.Morgan 535403bc30 rubocop 2021-01-07 21:02:04 +00:00
Stuart.Morgan 1cd21b5780 msftidy 2021-01-07 20:34:30 +00:00
Stuart.Morgan 589395989f fixed bug with multiple teamsites & improved formatting 2021-01-07 20:32:53 +00:00
Spencer McIntyre 104a9575d8 Use a regex to perform a check on the DEVICE option 2021-01-07 15:02:46 -05:00
Stuart.Morgan 79f6a098c8 save results into csv loot 2021-01-07 20:00:42 +00:00
Stuart.Morgan 1db79fc633 Tidied up business/personal discriminator 2021-01-07 19:34:11 +00:00
Stuart.Morgan b6cb636d20 Tidied up, presenting results 2021-01-07 19:24:56 +00:00
Stuart.Morgan 88ca57d8a0 passed msftidy 2021-01-07 18:58:50 +00:00
Stuart.Morgan 9ee46adde5 removed redundant code 2021-01-07 18:57:41 +00:00