dledda-r7
bcbbc91621
fix(core): fix migrate to pass the debug_build flag.
...
Co-authored-by: dwelch-r7 <dean_welch@rapid7.com >
2024-08-01 09:27:12 -04:00
adeherdt-r7
c5717d42d6
MS-9457 Support NO_AUTH_REQUIRED
...
Support the `NO_AUTH_REQUIRED` condition and terminate the scan to avoid further unneeded attempts.
2024-07-02 14:09:01 +02:00
adeherdt-r7
52142f280f
MS-9454 Redis Scanner: Support versions
...
Updating the Redis Login Scanner to properly support all versions of Redis and their implementations to handle the `AUTH` command.
2024-06-28 15:25:49 +02:00
dledda-r7
8a432fb292
fix: default is_weak_key is nil; handling of empty key_dec_data
2024-06-21 04:00:02 -04:00
dledda-r7
80e942b76d
fix: better implementation of negotiate_tlv_encryption
2024-06-17 10:57:17 -04:00
dledda-r7
1a8746f076
fix: updated warning messages, inverted is_weak_key logic
2024-06-14 10:19:56 -04:00
dledda-r7
acfaf52611
feat(meterpreter): display a warning when a weak encryption aes_key is used. skip module loading if encryption is weak.
2024-06-13 09:30:17 -04:00
sjanusz-r7
91cb94e725
Add _close method to history manager, use generic method for Msf Config history file
2024-06-03 17:23:51 +01:00
sjanusz-r7
487faf9a1a
Allow History Manager writer thread to exit when queue is empty
2024-05-28 15:37:43 +01:00
sjanusz-r7
82c43c3154
Allow HistoryManager to mock input library history
2024-05-23 17:50:19 +01:00
sjanusz-r7
60c09e5ca3
SQL sessions have correct history manager support
2024-05-23 13:57:31 +01:00
Dean Welch
68f7334348
Fix kerberos auth and missing method error when querying with -a
2024-05-15 16:11:40 +01:00
Dean Welch
29c79fb499
Add handling of dead ldap sessions
2024-05-15 15:12:51 +01:00
Dean Welch
0cea2cba75
Add guard clause to not print out session info unless the session is enabled
2024-05-15 15:12:51 +01:00
Dean Welch
7cdea94000
Convert ldap modules to use the new ldap session type
2024-05-15 15:12:51 +01:00
Dean Welch
e693b9588c
Update ldap modules to support an ldap session
2024-05-15 15:12:51 +01:00
Dean Welch
df32ce2db9
Add ldap query support to the ldap session
2024-05-15 15:12:51 +01:00
Dean Welch
9e4f958af7
keep ldap connection open for use in a session
2024-05-15 15:12:51 +01:00
Dean Welch
3cedb20f75
Add initial ldap session support
2024-05-15 15:12:51 +01:00
Spencer McIntyre
66d5e89046
Update ChannelBinding to check the algorithm
2024-05-08 16:30:29 -04:00
Spencer McIntyre
69e35005ee
Add TLS channel binding for kerberos
2024-05-08 16:30:24 -04:00
Spencer McIntyre
942d47bec5
Add TLS channel binding for NTLM
2024-05-08 16:24:48 -04:00
Christophe De La Fuente
8c76143a9d
Land #19127 , Ldap signing
2024-05-07 17:28:36 +02:00
Spencer McIntyre
69d603e6fc
Switch to an enum option for the signing
2024-05-03 10:27:10 -04:00
adfoster-r7
4c84f8830f
Land #18907 , add mssql_version module
2024-05-03 14:33:35 +01:00
Zach Goldman
6547fdb4c4
adds pattern to catch other arch and platform values
2024-05-03 07:05:35 -05:00
Zach Goldman
c382066be8
cache prelogin packet
2024-05-02 12:51:33 -05:00
Zach Goldman
d8c7a26565
add unit test, clean up data hash
2024-04-24 15:06:36 -04:00
Zach Goldman
d0a714d1e8
refactor packet parsing code
2024-04-24 15:06:36 -04:00
Zach Goldman
ae091bf17d
add encryption detection, reporting to mssql_version
2024-04-24 15:06:36 -04:00
Zach Goldman
6fd8c8b903
add session support, dry out code, update descriptions to be more specific
2024-04-24 15:06:36 -04:00
Zach Goldman
3897b49ca6
add mssql_version module
2024-04-24 15:06:36 -04:00
Ashley Donaldson
68966b86f1
Give warning on invalid config (SSL and REQUIRE_SIGNING both set to true)
2024-04-24 15:05:03 +10:00
Ashley Donaldson
ec44cb1e2e
Fix interface of block cipher base
2024-04-24 14:01:45 +10:00
Ashley Donaldson
9aead31bb9
Support encrypted LDAP (ldap signing) over Kerberos and NTLM
2024-04-24 12:56:06 +10:00
Jack Heysel
e3625307b3
Land #18914 , Add OpenVAS import improvement
...
This PR adds functionality so that CVE and URL references will be
imported from an OpenVAS XML report by default. DNF-CERT and CERT-BUND
references can also be collected by sending additional flags to the
db_import command
2024-04-22 18:11:33 -07:00
Simon Janusz
248291ae16
Land #19113 , Revert "Sql sessions have correct history manager"
2024-04-19 17:11:41 +01:00
cgranleese-r7
aa3181cc26
Land #19112 , add arch and platform detection for mssql sessions
2024-04-19 16:33:28 +01:00
adfoster-r7
cff93390c7
Land #19080 , Add arch/platform detection for Postgres
2024-04-19 15:46:58 +01:00
Zach Goldman
0c6af95164
adjust mysql logic for unknown platform arch
2024-04-19 09:23:04 -05:00
Zach Goldman
5c89b6aa0e
add arch and platform detection for mssql sessions
2024-04-19 08:54:27 -05:00
Zach Goldman
b4dccdfcd6
add more datatypes
2024-04-19 08:38:22 -05:00
adfoster-r7
376bdefefb
Land #19054 , Add NText column parsing to MSSQL
2024-04-19 14:17:50 +01:00
adfoster-r7
b488cebeba
Revert "Sql sessions have correct history manager"
2024-04-19 11:59:30 +01:00
cgranleese-r7
b83f2e3e6c
Updates handling of arm for both PostgreSQL and MySQL
2024-04-19 11:11:12 +01:00
Zach Goldman
d35748497c
adds ntext parsing to mssql
2024-04-18 16:41:37 -05:00
sjanusz-r7
c576db98b5
Populate SMB shares if they're empty
2024-04-10 14:21:13 +01:00
cgranleese-r7
53efed1606
Land #19022 , Add MySQL Arch & Platform detection by query
2024-04-10 12:24:08 +01:00
sjanusz-r7
a862b16286
Add MySQL Arch & Platform detection by query
2024-04-09 13:38:07 +01:00
Ashley Donaldson
4557de9a72
Changes from code review
2024-04-08 11:47:09 +10:00