 Spencer McIntyre
|
f3b650a409
|
Major refactoring of PHP payloads and related exploits
|
2025-05-30 09:06:38 -04:00 |
|
|
Spencer McIntyre
|
dcaeb5266c
|
Define the system_block module function
|
2025-05-30 09:06:38 -04:00 |
|
|
Spencer McIntyre
|
9220360ed0
|
Add an ARCH_PHP -> ARCH_CMD adapter
|
2025-05-30 09:06:20 -04:00 |
|
|
Martin Sutovsky
|
126b155d6e
|
Adding uuid for cmd
|
2025-05-27 16:31:33 +02:00 |
|
|
Martin Sutovsky
|
3b1bfe8aba
|
Fixing meterpreter session
|
2025-05-27 16:30:53 +02:00 |
|
|
bcoles
|
5aa91bd57c
|
Rubocop: Resolve Rubocop Style/RedundantRegexpArgument violations
|
2025-05-24 13:34:32 +10:00 |
|
|
bwatters-r7
|
6b220ba603
|
Reclaim character a la jvoisin
|
2025-04-09 08:56:11 -05:00 |
|
|
bwatters-r7
|
2459fa771c
|
Add solution for pipe uri generation and update docs
|
2025-04-08 16:03:54 -05:00 |
|
|
bwatters-r7
|
044200325a
|
Add more suggested changes
|
2025-04-03 15:02:37 -05:00 |
|
|
bwatters-r7
|
8cfcfa3f78
|
Add Spencer suggestions
|
2025-04-01 16:58:23 -05:00 |
|
|
bwatters-r7
|
d1c6a6e82e
|
Add Windows pipe fetch support and clean up options
|
2025-04-01 16:38:29 -05:00 |
|
|
bwatters-r7
|
23f06f28bd
|
Put support check before command generation, too
|
2025-04-01 14:12:36 -05:00 |
|
|
bwatters-r7
|
37175955cd
|
Fix some https bugs and generate non-piped commands properly
|
2025-04-01 11:16:21 -05:00 |
|
|
bwatters-r7
|
d897ba86c7
|
Rebase and add support for piped fetch commands
|
2025-04-01 11:15:37 -05:00 |
|
|
Martin Sutovsky
|
ae8591f2a3
|
More clear specification of Python version
|
2025-03-10 15:51:56 +01:00 |
|
|
Martin Sutovsky
|
426d74be68
|
Changing options to enumeration, removing whitespaces
|
2025-03-07 13:39:12 +01:00 |
|
|
Martin Sutovsky
|
35afdb0033
|
Add more explanatory description
|
2025-03-06 09:07:44 +01:00 |
|
|
Martin Sutovsky
|
531fbd3abe
|
Specifying Python version
|
2025-03-05 13:34:16 +01:00 |
|
|
Martin Sutovsky
|
114ab6006b
|
Adding Python3 option for fileless ELF execution
|
2025-03-05 13:32:59 +01:00 |
|
|
Martin Sutovsky
|
dddcdccbef
|
Fixing generating certutil fetch command
|
2025-02-16 20:31:24 +01:00 |
|
|
bwatters-r7
|
46e97e3776
|
Slight fixes and prep for adding piped fetch payloads
|
2025-02-13 11:35:06 -06:00 |
|
|
Martin Sutovsky
|
881ae72550
|
Optimizing execution of fetch command in bash
|
2025-02-09 09:17:19 +01:00 |
|
|
Martin Sutovsky
|
ed648e9eca
|
Adding more reliable fileless fetch payload
|
2025-02-07 10:12:28 +01:00 |
|
|
Martin Sutovsky
|
6d073540e8
|
More elegant way of generating fileless payload, code refactor based on comments
|
2025-02-06 19:22:36 +01:00 |
|
|
Martin Sutovsky
|
50c95af7e0
|
Refactoring fileless execution, adjusting generating fetch commands
|
2025-02-06 11:28:05 +01:00 |
|
|
Martin Sutovsky
|
e3bb4791e1
|
Refactoring based on comments
|
2025-02-05 13:55:58 +01:00 |
|
|
Martin Sutovsky
|
0d558a1f71
|
Fileless execution condition specified
|
2025-02-05 09:08:34 +01:00 |
|
|
Martin Sutovsky
|
b678126361
|
Code factor, adding comments
|
2025-02-05 07:33:42 +01:00 |
|
|
Martin Sutovsky
|
a2044acc42
|
Bug fixed
|
2025-02-04 15:38:59 +01:00 |
|
|
Martin Sutovsky
|
b98fb7553d
|
Adding FETCH_FILELESS option
|
2025-02-04 13:26:50 +01:00 |
|
|
msutovsky-r7
|
20d2a6c7a7
|
Merge branch 'rapid7:master' into fileless_elf_execution
|
2025-02-04 09:47:02 +01:00 |
|
|
dledda-r7
|
763ff9275e
|
fix(payloads): fix x86 prepends
|
2025-01-17 02:04:13 -05:00 |
|
|
dledda-r7
|
4565a04510
|
fix(payloads): updating prepend mixin in payloads
|
2025-01-14 09:31:03 -05:00 |
|
|
dledda-r7
|
edf4fca476
|
chore: rubocop format fix
|
2025-01-10 07:55:34 -05:00 |
|
|
Martin Sutovsky
|
05bd95c23f
|
Init new method for Unix fileless ELF execution
|
2025-01-02 12:56:55 +01:00 |
|
|
dledda-r7
|
ead6af8cbc
|
feat: add PrependSetresuid for linux/aarch64
|
2024-12-20 10:16:46 -05:00 |
|
|
dledda-r7
|
aca6613a3e
|
feat: add PrependSetreuid for linux/aarch64
|
2024-12-20 09:46:38 -05:00 |
|
|
dledda-r7
|
30e13c9040
|
fix: fix mismatch between prepend name and stub in linux/armle
|
2024-12-20 08:14:09 -05:00 |
|
|
dledda-r7
|
647972b7c8
|
feat: add PrependSetuid for linux/aarch64
|
2024-12-20 08:13:09 -05:00 |
|
|
dledda-r7
|
4d304c65b5
|
fix: remove x64 directory flatting in Linux payloads
|
2024-12-20 04:15:41 -05:00 |
|
|
dledda-r7
|
0d632777fc
|
fix: splitting linux prepends to arch-specific mixins
|
2024-12-19 10:54:29 -05:00 |
|
|
Martin Sutovsky
|
4a13b09767
|
Land #19719, Fix bug in fetch payload when FETCH_DELETE set to true
|
2024-12-17 08:42:47 +01:00 |
|
|
pczinser
|
8af31e6b01
|
updated the inline asm to use User Agent
|
2024-12-14 15:39:16 -05:00 |
|
|
bwatters-r7
|
0334109994
|
Streamline command
|
2024-12-13 16:43:17 -06:00 |
|
|
bwatters-r7
|
594946db47
|
Add sleep to prevent race condition, remove unneeded spaces
|
2024-12-13 10:31:10 -06:00 |
|
|
bwatters-r7
|
2faa33ed8e
|
Fix bug in the way we are executing fetch payload when FETCH_DLETE is set to true
|
2024-12-12 09:08:52 -06:00 |
|
|
dledda-r7
|
4468d3bc79
|
fix(payloads): removing hardcoded block-api hash from reverse_tcp_dns
|
2024-11-29 07:55:49 -05:00 |
|
|
dledda-r7
|
00707a8a11
|
fix(payloads): removing hardcoded block-api asm and hashes from PrependMigrate mixin
|
2024-11-26 12:07:31 -05:00 |
|
|
dledda-r7
|
e7c23e4a65
|
fix(payloads): removing hardcoded block-api hashes
|
2024-11-26 12:07:30 -05:00 |
|
|
dledda-r7
|
3fe1ffb6f3
|
fix(payloads): removing hardcoded block-api hashes
|
2024-11-26 12:07:29 -05:00 |
|