632f1a1205
Update json rpc process request error handling
2020-07-21 18:39:02 +01:00
d494eb046d
Fix RPC support by raising instead of returning
2020-07-20 14:04:38 -05:00
f70043bf4e
check if a module has a check method first
...
Currently, if you run 'check' on a module that does not have a check
method, it will first complain that you have not set the 'RHOSTS'
option, whether it's an exploit module or a scanner. Then, once you set
RHOSTS (or whatever else it needs), it will then say 'Psych! I didn't
have a method in the first place!'.
This switches that logic around so that it first alerts you that the
module doesn't have support in the first place. It also similarizes more
logic between aux and exploit for some future convergence possibility.
2020-07-20 11:09:46 -05:00
2d55b0d2e7
Bump version of framework to 5.0.100
2020-07-16 12:06:38 -05:00
b2b88fe902
Land #13841 , add Msf::Post::Unix.is_root? method
2020-07-13 16:23:58 +00:00
090b80eea7
Add Msf::Post::Unix.is_root? method
2020-07-12 00:47:56 +00:00
384a71b06a
Land #13271 , Update auxiliary/server/capture/smtp to store credentials
2020-07-11 17:30:06 +00:00
85bd740640
review comments
2020-07-11 15:19:16 -04:00
f6d21abb51
require instead of autoload for exploit mixin
2020-07-10 22:15:12 -05:00
c61f34ed16
Land #13596 , [GSoC] SQLi library with support to MySQL (and MariaDB)
2020-07-10 13:45:47 -05:00
8926b1893e
Bump version of framework to 5.0.99
2020-07-09 12:06:13 -05:00
71f10eeeb0
Bump version of framework to 5.0.98
2020-07-07 13:38:22 -05:00
4c229c0a24
Add method for writing to files using SQL injection
2020-07-06 16:53:46 +02:00
0308d3822c
Bump version of framework to 5.0.97
2020-07-02 12:03:56 -05:00
4950c2dacf
Fix minor bugs, in safe mode, and in the name of the attribute passed to attr_accessor
2020-07-01 23:00:23 +02:00
f5e50eb4b0
Land #13795 , helpful "use" tip when running search
2020-07-01 14:52:18 -05:00
8186270538
Fix whitespace
2020-07-01 14:52:07 -05:00
ffc07d6c8f
Merge remote-tracking branch 'upstream/master' into pr/13787
2020-07-01 14:42:16 -05:00
89f7be3ef0
Improve error message
2020-07-01 14:20:04 -05:00
b79c08772a
Add note about using a module after searching
2020-07-01 19:21:34 +01:00
3737c6810c
Fix typo in debug command
2020-07-01 14:18:51 +01:00
f9ade608b5
minor change: add default value to some arguments
2020-07-01 02:56:01 +02:00
4b78de5416
Refactor AutoCheck a bit more
2020-06-30 11:58:42 -05:00
0680113288
get rid of database parameter in MySQLi methods
2020-06-30 18:49:13 +02:00
b230adebba
Add check for positional arguments on class constructor (SQLi::Common)
2020-06-30 16:16:35 +02:00
b841246536
Update autocheck to use prepend instead of include, add ForceExploit functionality
2020-06-30 11:40:46 +01:00
d513ff32d7
Land #13782 , Allow a jsonrpc token to be used when a database is present
2020-06-29 18:27:30 +01:00
babaee8c8e
adds debug command with spec tests
2020-06-29 15:38:56 +01:00
bc74900a41
🐛 fix #13781 set token from environment var
2020-06-29 15:07:33 +08:00
878c1a56df
fix session abort with Ctrl C
2020-06-29 12:35:02 +08:00
6e56fb5fe1
Remove debug print from session/interactive.rb
2020-06-28 22:52:42 -05:00
440294ff07
make some attributes writable, and specify its the SQLi library in any verbose message
2020-06-27 18:28:12 +02:00
2c4ca04dca
Rename the factory method for SQLi classes, and add a check on the class to instanciate
2020-06-27 14:51:54 +02:00
aa6c037dbd
refactor mixin as factory for sqli classes
2020-06-26 15:09:01 -05:00
6bbce9e73c
Land #13601 , Add custom service name support to msfvenom's exe-service generator
2020-06-26 19:00:33 +01:00
34e8eae471
move hex_encode_strings to MySQLi::Common, as it is specific to MySQL
2020-06-26 16:04:51 +02:00
a1d547fdfe
Bump version of framework to 5.0.96
2020-06-25 12:04:52 -05:00
7291a77807
minor fix to verbose logging / some comments
2020-06-25 12:46:05 +02:00
fcf2068bec
Check single result, once more with feeling
2020-06-23 22:07:13 -05:00
f89f80be47
add default value for options of SQLi constructors, and fix eyesofnetwork module
2020-06-24 00:38:13 +02:00
b28d9517bc
Exclude multi from automatic PAYLOAD selection
2020-06-23 16:12:28 -05:00
c94bd3b2d8
remove verbose prints in blind injections
2020-06-23 21:33:03 +02:00
2bdc693930
Replace puts with print_status and similar
2020-06-23 21:25:59 +02:00
2439342aba
Add consistent error logging for module loading
2020-06-23 11:15:08 +01:00
fceb96e659
Land #13608 , update elog calls to be consistent across
2020-06-23 09:47:01 +01:00
aaa38a3188
Fix formatting
2020-06-22 17:41:20 +02:00
fba2d2e7be
inject the datastore into the SQLi library, and register advanced options
2020-06-22 17:36:38 +02:00
1a2bf98222
creates standard elog & updates exisiting usages
2020-06-22 12:48:39 +01:00
4f756ba229
replace some classes with modules
2020-06-20 21:09:13 +02:00
d38dcb349f
Land #13600 , fixes a crash when killing jobs such as auxiliary servers
2020-06-19 19:49:22 +01:00
Alan Foster