f6faa5598b
Fixes modules to now correctly use a hash with report note
2025-05-22 10:59:50 +01:00
be8f4f929c
Fix an issue in the ESC8 module
2025-05-05 13:40:33 -04:00
b3de2516bd
Merge branch 'master' into get_naa_creds_via_relay
2025-03-21 10:43:20 -07:00
87a17424af
Suggestions from code review
2025-03-21 10:34:08 -07:00
0f65539bb5
Apply suggestions from code review
...
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com >
2025-03-21 08:53:53 -07:00
f8760a9e3b
Update from code review
2025-03-14 15:28:39 +01:00
d4fd890fed
Add the smb_to_ldap relay module and documentation
2025-03-14 15:28:39 +01:00
fdf4531c10
Add SMB to HTTP relay support for get_naa_creds
2025-03-13 10:59:59 -07:00
c3ffdb12f5
Merge pull request #19946 from zeroSteiner/feat/mod/relay/ms08-068-warning
...
Add a warning for MS08-068 when applicable
2025-03-05 11:11:20 -08:00
b43dc8be08
Switch relay modules, add ESC8 check method
2025-03-05 13:44:33 -05:00
dbce82416c
Add a warning for MS08-068 when applicable
2025-03-05 13:31:26 -05:00
11818c2812
Switch to using Rex's Crypto module
2025-02-27 10:52:09 -05:00
8e68d1d5f2
Fixed spacing
2025-01-28 10:40:13 -08:00
9d50fb66bc
Fix jtr_format assignment in HashCapture module
2025-01-28 10:14:36 -08:00
8b93f1a087
Merge branch 'master' into smb_change_pw
2024-12-09 09:37:45 -05:00
8158cf5bae
Add Reset and Change_NTLM actions
2024-11-20 12:13:41 +11:00
24e19e4ebb
Update the ESC8 relay module to use the new helper
...
It also fixes some unrelated minor issues found in the module and the documentation
2024-11-12 18:23:31 +01:00
e130092d87
Add a missing require statement
2024-11-04 09:37:12 -05:00
7d8baee574
Add some error handling and more logging
2024-11-04 09:37:12 -05:00
4a4ec9aea4
Add some more logging
2024-11-04 09:37:12 -05:00
316a967414
Update the ESC8 module for the new changes
2024-11-04 09:37:08 -05:00
27d5c95323
Refactor into an SMB server relay mixin
2024-10-24 16:25:40 -04:00
9822f3e812
Decouple the NTLM relaying logic
2024-10-24 16:25:40 -04:00
8ba0019ca0
Refactor the existing relay target client code
2024-10-24 16:25:40 -04:00
a18b2b3671
code cleanup and documentation
2024-10-24 15:23:10 -05:00
dff4a8ba7c
Updates per Spencer
2024-10-24 15:23:10 -05:00
c4c1aae565
Update smb thread logging, fix control flow, use RELAY_TARGET, other suggestions
2024-10-24 15:23:10 -05:00
74f6bc7d13
Remove Rescues and Rubocop
2024-10-24 15:23:10 -05:00
6dcf63267b
Fix rescue clauses
2024-10-24 15:23:10 -05:00
0b94fdf75f
Fix up suggestions from Spencer et al.
2024-10-24 15:23:10 -05:00
1fb0b728a8
Fix timeout, add query_only mode and allow skipping the termplate query
2024-10-24 15:23:10 -05:00
4c598c1981
Move ESC8 logic to module and limit debug printing
2024-10-24 15:23:09 -05:00
5b1746f73f
Add support for multiple certs
2024-10-24 15:23:09 -05:00
0ba3db9466
Working, but ugly
2024-10-24 15:23:09 -05:00
af25c94e6a
Change to send_request_raw
2024-10-24 15:23:09 -05:00
d94081faf1
Not working; need to checnge to send_request_raw?
2024-10-24 15:23:09 -05:00
2c760bd842
Tracking down hash issues
2024-10-24 15:23:09 -05:00
7d86c99ba6
Currently getting a bad username/password message
2024-10-24 15:23:09 -05:00
d569077564
Refactor smb_lookupsid module to use RubySMB
2024-05-17 10:59:37 +01:00
a008288e05
Readd support for multiple ports
2024-04-22 13:45:20 -04:00
2292da9164
Add the UNC loading technique too
2024-03-29 09:33:47 -04:00
131585235b
Update SMB Login to support additional configuration
2024-02-28 20:24:06 +00:00
b5906418c2
Update the HashCapture mixin
...
Use #srvport instead of the datastore and pull in upstream chanes for
the metasploit-credential gem to enable use within payloads.
2024-01-29 13:35:56 -05:00
33306fa4dd
The SRVPORT is already registered
...
The SRVPORT datastore option is registered by the Remote::SMB::Server
mixin so including it here is redundant.
2024-01-29 13:35:54 -05:00
024bdaec6d
Add a proper rex-based service for the SMB server
2024-01-08 16:54:22 -05:00
b10e8d566b
Initial Rex SMB service to allow sharing
2024-01-05 17:18:08 -05:00
5f396245f2
Land #18539 , Add Smb session type
2023-12-12 11:45:19 +00:00
9f126a4d24
Land #18446 , Make DomainControllerRhost optional
...
This PR makes the DomainControllerRhosts option optional,
even when auth is set to kerberos. This change requires
rapid7/rex-socket#64 which was released in the rex-socket 1.5.5 gem.
2023-12-05 17:47:45 -05:00
f000c39b4a
Update to mark DomainControllerRhost as optional
2023-12-05 16:23:35 -05:00
cd8cc75cf3
Add smb session type
2023-12-04 17:55:11 +00:00
cgranleese-r7