Spencer McIntyre
19a9ff1198
Update a couple of modules for the new SMB server
2022-05-16 14:39:45 -04:00
Spencer McIntyre
e0b9002238
Fix an SMB relay bug
2022-05-16 14:39:45 -04:00
Spencer McIntyre
f14f8da1df
Use the new thread_factory
2022-05-16 14:39:45 -04:00
Spencer McIntyre
b79b550d6c
Centralize the log adapter
...
This should eventually be updated to map the levels to the framework
logger and appropriate module-print_* function.
2022-05-16 14:39:45 -04:00
Spencer McIntyre
7c15b144c4
Update the SMB capture server
2022-05-16 14:39:44 -04:00
Spencer McIntyre
22993e910e
Move server code into the server mixin
2022-05-16 14:39:44 -04:00
Spencer McIntyre
c39fd87073
Finish removing unneeded server code
2022-05-16 14:39:44 -04:00
Spencer McIntyre
475f6eee8c
Capture hash when serving files over SMB
2022-05-16 14:39:44 -04:00
Spencer McIntyre
d740786211
Add the on_client_connect callback
...
Also update the group_policy_startup module.
2022-05-16 14:39:44 -04:00
Spencer McIntyre
317516d90f
Enable guest access
2022-05-16 14:39:44 -04:00
Spencer McIntyre
882bcf08f7
Fix bugs when stopping the service
2022-05-16 14:39:44 -04:00
Spencer McIntyre
09dc65eb6a
Remove the FILE_CONTENTS datastore option
...
None of the 14 modules use this option, they all deregister it.
2022-05-16 14:39:44 -04:00
Spencer McIntyre
63af7cdef7
Initial update to the RubySMB share server
2022-05-16 14:39:44 -04:00
Spencer McIntyre
013a819cff
Out with the old
2022-05-16 14:39:44 -04:00
Spencer McIntyre
879591f686
Land #16499 , Specify peer hostname for SNI
2022-05-16 14:21:57 -04:00
adfoster-r7
0196b6fa75
Land #16555 , move duplicated retry_until_truthy code into centralized location
2022-05-16 18:31:57 +01:00
adfoster-r7
db694efd36
Improve relative redirect handling
2022-05-16 12:03:24 +01:00
Spencer McIntyre
1aceb71971
Rename the function to emphasize truthy
2022-05-13 09:16:01 -04:00
Spencer McIntyre
3d37f2f811
Change the timeout value to be nil
2022-05-13 09:14:23 -04:00
adfoster-r7
739c0fcad1
Specify peer hostname for ssl connections
2022-05-13 13:55:43 +01:00
dwelch-r7
c0c02e56ba
Land #16430 , Improve kerberos user enum module
2022-05-13 12:17:26 +01:00
Spencer McIntyre
05fcbd803e
Add a new Retry mixin
2022-05-11 15:41:37 -04:00
dwelch-r7
a76600f4a9
Land #16462 , add support for armle/aarch64 architectures
2022-05-03 15:48:50 +01:00
Brendan Coles
02d911e655
gdb_server_exec: Cleanup and add support for armle/aarch64 architectures
2022-04-25 19:25:06 +00:00
Jack Heysel
4417a335ff
Land #16379 , Make SSH defaults widely used
...
Refactored a number of modules to use ssh_client_defaults
2022-04-19 22:08:45 -07:00
Jack Heysel
0d3f50522d
Land #16318 Add support to old KEX algorithms
...
This commit fix the issue #16138 by adding
support to old key exchange algorithms in
the net/ssh lib by defining the
append_all_supported_algorithms to true.
2022-04-14 11:29:39 -07:00
Jack Heysel
04f042ae47
Land #16221 , a wordpress_scanner bug fix
...
Adjust wordpress_url_rest_api definition to support
sites that don't place REST API under /index.php/
2022-04-13 14:22:17 -07:00
Heyder Andrade
0eb9d68319
Added support to depecreted key exchange algorithms
2022-04-13 18:53:50 +02:00
adfoster-r7
a53be3184a
Improving error handling of Kerberos
2022-04-08 20:48:10 +01:00
dwelch-r7
a82c936613
Land #16373 , Add initial ruby 3.1 support
2022-04-07 16:44:02 +01:00
usiegl00
8495bff61c
Merge master and update the smb_shadow module
...
Add comments detailing the technique used to attack SMBv3. Remove some
comments that are no longer needed. Fix Gemfile.lock conflict.
2022-04-06 07:06:45 +09:00
usiegl00
09ae52fecd
Update smb_shadow and shadow_mitm_dispatcher
...
Remove duplicated print_status messages. Use respond_to? instead of
methods.include?. Simplify payload generation. Fix naming for the rst
capture thread.
2022-04-05 20:03:14 +09:00
usiegl00
7e010cbde2
Merge master and update smb_shadow + dispatcher
...
The smb_shadow module can confirm the server smb version supported with
the ConfirmServerDialect option. The shadow_mitm_dispatcher closes each
stream before opening a new one to prevent leaking file descriptors.
2022-04-02 10:39:02 +09:00
Brendan Coles
283dda8172
Land #16386 , Exploit::Remote::SocketServer: Wait if service is running
2022-03-28 03:41:06 +00:00
adfoster-r7
c4b6eb0165
Fix java rmi service undefined method wait
2022-03-27 17:01:43 +01:00
Heyder Andrade
79783bbe9b
Checking if datastore is defined
2022-03-25 16:32:58 +01:00
adfoster-r7
76ede9ef8f
Add ruby 3.1 support
2022-03-24 21:59:02 +00:00
Heyder Andrade
ee8618e68a
Handling undefined local variable
...
Auxiliary failed: NameError undefined local variable or method `datastore'
for #<Metasploit::Framework::LoginScanner::SSH
2022-03-24 22:57:27 +01:00
Grant Willcox
bf88b7f618
Land #16325 - Replace IO read on binary files with File binread
2022-03-24 10:08:40 -05:00
Spencer McIntyre
ff0ecfa49e
Display the HTTP port when necessary
2022-03-21 20:11:31 -04:00
Spencer McIntyre
aca272dd76
Always return a comm from #_determine_server_comm
...
Instead of returning nil from Rex::Socket::SwitchBoard.best_comm, return
the local comm which Rex::Socket will defer to anyways.
2022-03-21 11:47:56 -04:00
Spencer McIntyre
551f159993
Don't pass nill to #best_comm
...
It'll crash if you do
2022-03-21 11:47:56 -04:00
Spencer McIntyre
0ab97b858f
Update the TCP server and HTTP server mixins
2022-03-21 11:47:56 -04:00
Spencer McIntyre
2e4f04a804
Add and use the new bindhost/bindport options
2022-03-21 11:47:55 -04:00
sjanusz
bbf9e3163a
Fix file reads on Windows for binary files
2022-03-21 12:47:39 +00:00
Spencer McIntyre
da1e4853b8
Land #16317 , Free UDP ports after use
2022-03-17 16:39:09 -04:00
Grant Willcox
ce062973cb
Make changes from review process, redo code for module to make it make less requests, and generally improve overal operations.
2022-03-17 11:29:05 -05:00
Grant Willcox
c1d6dced8d
Update library code to read exchange versions from exchange_versions.json and populate exchange_versions.json with initial info
2022-03-17 11:29:01 -05:00
Grant Willcox
419c9ea554
Fix review comments to simplify regex, and also add in new is_exchange? function to check if a target is running Exchange Server or not.
2022-03-17 11:29:00 -05:00
Grant Willcox
1f53e9d1c4
Rubocop and fix a mistake on commenting too much of the code out from testing
2022-03-17 11:29:00 -05:00