 bcoles
|
81a405355c
|
modules/post: Resolve RuboCop violations and typos
|
2025-05-13 09:23:28 +10:00 |
|
|
bcoles
|
ec484f97c6
|
modules/post/linux: Resolve RuboCop violations
|
2025-05-02 23:29:48 +10:00 |
|
|
adfoster-r7
|
1b3ad5050d
|
Merge pull request #20093 from jvoisin/fix_typo
Fix an unfortunate typo
|
2025-04-27 23:10:40 +01:00 |
|
|
jvoisin
|
085f0380c3
|
Fix an unfortunate typo
|
2025-04-27 20:37:15 +02:00 |
|
|
bcoles
|
394e7a1ba2
|
modules/post/linux/gather: Resolve RuboCop violations
|
2025-04-27 12:23:56 +10:00 |
|
|
jvoisin
|
c3c62e5fdd
|
Improve a bit modules/post/linux/gather/enum_protections.rb
- Use proper names instead of executable names
- Add a file-based detection method, with the list taken from https://github.com/hackerschoice/hackshell/issues/6
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2025-04-11 14:34:56 +02:00 |
|
|
jvoisin
|
debb01062d
|
Improve a bit modules/post/linux/gather/checkvm.rb
Based on some old notes that I never bothered to upstream into metasploit.
|
2024-08-22 23:19:09 +02:00 |
|
|
adfoster-r7
|
62a3f73e70
|
Update rubocop target ruby version
|
2024-07-24 16:47:17 +01:00 |
|
|
h00die
|
eb0933fc9a
|
Update apache_nifi_credentials algo regex
|
2024-06-28 10:36:35 -04:00 |
|
|
Spencer McIntyre
|
47c8d7252b
|
Land #18519, Docker kernel module escape
|
2024-05-06 09:08:08 -04:00 |
|
|
RadioLogic
|
53ac5118cd
|
Added report host to virtualization check
|
2024-04-26 21:58:43 -04:00 |
|
|
RadioLogic
|
b51d1b9017
|
Made shared function with checkcontainer
|
2024-04-26 21:32:20 -04:00 |
|
|
Spencer McIntyre
|
f579ec7a1a
|
Clean table printing, document tested version
|
2024-04-10 11:31:55 -04:00 |
|
|
h00die
|
251aa021e1
|
rancher audit logs module
|
2024-03-13 16:42:51 -04:00 |
|
|
Jack Heysel
|
024b855231
|
Land #18628, Add Puppet post module
This PR adds a post gather module to get
Puppet configs and sensitive files.
|
2024-01-30 19:20:48 -05:00 |
|
|
h00die
|
68f333cb7b
|
review comments for puppet module
|
2024-01-29 19:18:54 -05:00 |
|
|
sjanusz-r7
|
f496a71cf0
|
Make mimipenguin work with updated memory search API
|
2024-01-24 19:53:57 +00:00 |
|
|
h00die
|
56a9beb39d
|
ansible review
|
2024-01-15 17:18:49 -05:00 |
|
|
h00die
|
b031311892
|
ansible review
|
2024-01-10 17:29:15 -05:00 |
|
|
h00die
|
e711c9ea43
|
ansible review
|
2024-01-10 17:16:57 -05:00 |
|
|
h00die
|
357bdc8c10
|
ansible post library
|
2023-12-24 11:49:27 -05:00 |
|
|
h00die
|
11c12fcb6d
|
review comments
|
2023-12-23 13:23:34 -05:00 |
|
|
h00die
|
c911ec1413
|
ansible collection
|
2023-12-16 07:16:26 -05:00 |
|
|
h00die
|
1749fa1e50
|
store module loot
|
2023-12-13 07:37:24 -05:00 |
|
|
h00die
|
8eefea76ce
|
puppet post gather module
|
2023-12-13 07:12:17 -05:00 |
|
|
jheysel-r7
|
7331db43dd
|
Update print statement
|
2023-11-07 18:55:42 -05:00 |
|
|
h00die
|
87cd4aac5e
|
spelling fix
|
2023-11-07 05:04:31 -05:00 |
|
|
h00die
|
f1317fa050
|
review comments
|
2023-11-06 18:34:36 -05:00 |
|
|
h00die
|
0ce7b03397
|
update nifi credentials post module
|
2023-11-06 14:50:02 -05:00 |
|
|
h00die
|
42cf28dbbe
|
nifi creds stealer
|
2023-11-02 06:56:33 -04:00 |
|
|
jvoisin
|
b79549f178
|
Use a better detection method for Xen
Based on @adfoster-r7's feedback.
|
2023-08-22 12:36:48 +02:00 |
|
|
jvoisin
|
126b5441c9
|
Add a bunch of virtio modules to detect KVM
|
2023-08-22 12:34:42 +02:00 |
|
|
jvoisin
|
995dcfd753
|
Be a bit more stealthy when looking at kernel modules
No need to run a binary if reading a file is enough
|
2023-08-22 12:34:42 +02:00 |
|
|
jvoisin
|
bee2b6b381
|
Add detection via /proc/cpuinfo
|
2023-08-22 12:34:42 +02:00 |
|
|
jvoisin
|
2a5595037f
|
Add detection via /sys/devices/virtual/dmi/id/bios_vendor
|
2023-08-22 12:34:42 +02:00 |
|
|
jvoisin
|
cd1fc1a79c
|
Add another Hyper-V detection
|
2023-08-22 12:34:42 +02:00 |
|
|
jvoisin
|
0af4e98eb6
|
Add some process-based detection
|
2023-08-22 12:34:42 +02:00 |
|
|
jvoisin
|
95b964a2f4
|
Add some more virtualbox kernel modules
Taken from https://www.virtualbox.org/wiki/Guest_resizing
and https://linuxconfig.org/install-virtualbox-guest-additions-on-linux-guest
|
2023-08-22 12:34:42 +02:00 |
|
|
jvoisin
|
f84cbab0c4
|
Add some Hyper-v kernel modules
Taken from https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/manage-hyper-v-integration-services
|
2023-08-22 12:34:41 +02:00 |
|
|
jvoisin
|
af22ca9253
|
Add detection of Xen via /proc/xen/capabilities
Xen's dom0 has `control_d` in its /proc/xen/capabilities
|
2023-08-22 12:34:41 +02:00 |
|
|
jvoisin
|
26b6ad2948
|
Add a comment
|
2023-08-22 12:34:41 +02:00 |
|
|
jvoisin
|
4027a6edce
|
Add detection via /sys/class/dmi/id/sys_vendor
|
2023-08-22 12:34:41 +02:00 |
|
|
jvoisin
|
0df2f57124
|
Fix a typo
|
2023-07-19 19:47:17 +02:00 |
|
|
Julien Voisin
|
d5ca174e1e
|
Apply suggestions from code review
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2023-07-19 17:46:27 +00:00 |
|
|
jvoisin
|
2efcbbb772
|
Add docker detection via the old .dockerinit file
|
2023-07-16 18:12:11 +02:00 |
|
|
jvoisin
|
1f2112c5c1
|
Add podman detection via an environment variable
|
2023-07-16 18:11:11 +02:00 |
|
|
jvoisin
|
f46641f479
|
Improve LXC detection
See https://github.com/silverwind/ansible/commit/d649d24be2ed36ff8da7ecbd57b6bb25a9a3b745
|
2023-07-16 18:07:59 +02:00 |
|
|
jvoisin
|
2e26e7c98c
|
Add detection for WSL
|
2023-07-16 18:04:12 +02:00 |
|
|
jvoisin
|
04438920d5
|
Add Podman detection
See https://github.com/containers/podman/issues/3586#issuecomment-661918679
|
2023-07-16 18:01:06 +02:00 |
|
|
adfoster-r7
|
8e2169ed47
|
Ensure identify hashes helper is accessible to modules
|
2023-04-12 13:28:56 +01:00 |
|