1b562dd02b
Revert "Improve AMSI bypass on new Windows"
...
This reverts commit f97ab80224c8f942cc03
2023-06-21 16:35:41 -05:00
9776a6eb4a
Land #18078 , add SID support for icpr_cert
...
pulls in latest changes
2023-06-15 13:39:31 -05:00
5b77805d68
Land #18078 , add support for SID in icpr_cert
2023-06-15 13:17:09 -05:00
6988227ee4
Fix AS-REQ with PKINIT and NTDS_CA_SECURITY_EXT
2023-06-14 16:18:04 -04:00
3ee02a0e41
Add the ALT_SID datastore option
2023-06-14 16:17:58 -04:00
f97ab80224
Land #17942 , Improve AMSI bypass on new Windows
...
The script generated by the web_delivery module is blocked
by the Antimalware Scan Interface (AMSI) on newer versions
of windows. This PR allows the script to bypass AMSI.
2023-06-12 18:50:48 -04:00
834ad18d28
Land #18069 , Handle LDAP UnbindRequest
...
Remote::JndiInjection: handle LDAP UnbindRequest
2023-06-12 09:53:38 -04:00
4c817ce1de
Land #17946 , CVE-2023-21839 - Oracle Weblogic RCE
...
CVE-2023-21839 - Oracle Weblogic PreAuth Remote Command Execution via ForeignOpaqueReference IIOP Deserialization
2023-06-09 14:55:43 -04:00
694c1006e4
Add more IPv6 support in to the module
2023-06-09 12:24:35 -05:00
2acc014014
Fix AS-REQ with PKINIT and NTDS_CA_SECURITY_EXT
2023-06-08 15:10:35 -04:00
47835b57a7
Add the ALT_SID datastore option
2023-06-08 15:10:27 -04:00
451735ad15
Fix exception handler & add doc
2023-06-06 17:43:22 +02:00
e6b1ae2af8
Remote::JndiInjection: handle LDAP UnbindRequest
2023-06-06 00:54:40 -04:00
0f71613b66
Land #18056 , Modify command stagers to not go over 100%
2023-06-01 16:06:13 -05:00
96f2c96a75
modify command stagers to not go over 100%
2023-06-01 12:07:07 -05:00
9349dd24e3
Add a proper definition for NtdsCaSecurityExt
2023-05-31 17:31:33 -04:00
7bde39ae73
Fixes from code review
2023-05-30 13:26:56 +02:00
9528339761
Fix missing return in HTTP CmdStagers
...
Fetch payloads are cooler, but this was missed in https://github.com/rapid7/metasploit-framework/pull/13426 .
2023-05-25 22:22:23 -05:00
d8255157c9
Land #18021 , Fix #cd for Powershell Sessions
2023-05-25 14:26:01 -04:00
afb31b0f21
Add a function to escaple cmd.exe string literals
2023-05-23 15:17:39 -04:00
60f6574bf3
Land #17965 , add module for AD CS cert management
2023-05-22 09:50:53 -05:00
dcbc6d19c5
Update #validate_query_result!
...
The function required a filter argument, but not every query has a
filter. By removing it, we can reuse the same logic for other operations
including modifications.
2023-05-22 09:21:20 -04:00
f464401dde
Land #17782 , Add fetch payloads
...
Add http wget cmd based fetch payload for Linux and Windows
2023-05-18 12:18:27 -04:00
548a2d7ab4
Add fetch payloads for Windows and Linux x64
2023-05-18 10:47:29 -05:00
eb959e2e40
Land #17060 , GSoC Project: Implement HTTP-Trace enabled login scanners
2023-05-11 15:45:01 +01:00
b8856bbb87
fix capitalization of Htlm_fileName JSON parram
2023-05-05 09:59:11 +03:00
adec2f4fbb
Update the login.rb code so we aren't as strict on cookies since older versions sometimes use JSESSIONIDADAPSSO instead of JSESSIONIDSSO for login cookies
2023-05-04 15:40:39 -05:00
8c7ae1b6bb
Minor update to comments for clarity
2023-05-04 15:12:32 -05:00
c088430bd9
improve sanity checks in login method and other code review fixes
2023-05-04 15:12:31 -05:00
f27fc28411
Perform review updates
2023-05-04 15:12:31 -05:00
9b596b3efd
minor changes
2023-05-04 15:12:31 -05:00
1c6c1dffc6
final code review fixes
2023-05-04 15:12:31 -05:00
9fe7db4648
improve status codes handling
2023-05-04 15:12:30 -05:00
aede036b02
additional changes from code review
2023-05-04 15:12:30 -05:00
ba687c49aa
Fix a few typos
2023-05-04 15:12:29 -05:00
a5e86a0c51
code review improvements, including renaming silent param
2023-05-04 15:12:29 -05:00
0fd743d851
Add in fixes from code review
2023-05-04 15:12:29 -05:00
dd075d5c99
library improvements after code review, module update
2023-05-04 15:12:28 -05:00
a2cf29ab98
partial fixes after library code review
2023-05-04 15:12:28 -05:00
61d1cf1460
Fix up things identified during review
2023-05-04 15:12:28 -05:00
e639460b9f
fix library comments for json_post_data.rb
2023-05-04 15:12:27 -05:00
47d374497a
create adaudit plus mixin and move some stuff there
2023-05-04 15:12:27 -05:00
62806caeae
Update web_delivery
2023-04-28 16:09:51 +02:00
cda2e9610b
Land #17820 , optimising the nagiosxi modules
...
This PR refactors the authenticated nagiosxi modules and mixins..
2023-04-14 16:21:26 -04:00
275963eca2
Land #17353 , Persist icpr cert as pkcs12 credential
2023-04-12 13:16:18 +01:00
a6b478e046
Land #17832 , Two modules for UniRPC - CVE-2023-28502 and CVE-2023-28503
2023-04-12 11:43:13 +02:00
875ad34b62
Persist icpr cert as pkcs12 credential
...
Update creds command to support pkcs12
2023-04-11 16:25:25 +01:00
ce111f158a
Better error handling
2023-04-06 10:35:33 -07:00
c345fe78b8
Fix up error handling and other comments from the PR
2023-04-05 15:13:35 -07:00
04a9ae7335
Add check methods
2023-04-05 10:55:28 -07:00
Jeffrey Martin