Commit Graph

2790 Commits

Author SHA1 Message Date
h00die 54718c7a12 sticky keys as persistence 2025-12-05 07:07:30 -05:00
Christophe De La Fuente 3b727fbaf2 Code review 2025-10-14 16:25:43 +02:00
Christophe De La Fuente 0a755ea03a Add references to MITRE ATT&CK T1021 - Remote Services 2025-10-14 16:25:30 +02:00
msutovsky-r7 86381a6394 Land #20412, swaps to psh_exec in powershell/exec_powershell
Remove errant write_log call and swap to the all-in-one psh_exec rath…
2025-09-25 12:49:33 +02:00
Martin Sutovsky 5260da1867 Removes redundant variables 2025-09-23 16:22:40 +02:00
Martin Sutovsky 6e01e7a5f6 Minor code changes 2025-09-23 16:16:41 +02:00
Christophe De La Fuente 788b9c27b4 Use sub-technique and add missing modules 2025-09-16 18:39:23 +02:00
Christophe De La Fuente 7ce2bdc979 Add T1003 "OS credential dumping" MITRE technique 2025-09-09 10:45:46 +02:00
bwatters-r7 090743abbd Update error message when there may be a timeout 2025-08-27 11:04:43 -05:00
Dean Welch 0ce1617288 Bump rails to 7.2 2025-07-28 12:29:58 +01:00
bwatters-r7 dcfa448cf8 Remove now unused timeout 2025-07-23 10:40:24 -05:00
bwatters-r7 07692ff241 Remove errant write_log call and swap to the all-in-one psh_exec rather than execute_script 2025-07-23 09:40:35 -05:00
cgranleese-r7 a4b14d8b64 Runs Rubocop to fix layout in modules 2025-06-20 15:18:01 +01:00
adfoster-r7 fb02b4ade5 Revert "Bump rails version to 7.2" 2025-06-17 12:20:49 +01:00
Dean Welch 62f357207c Minor bug fixes 2025-06-12 16:41:10 +01:00
Lukas Johannes Möller 39bbf4ba05 fix #20280 2025-06-03 19:51:16 +02:00
Lukas Johannes Möller d9e96f91ca see https://github.com/rapid7/metasploit-framework/pull/20273#issuecomment-2932671250 2025-06-03 11:21:07 +02:00
Lukas Johannes Möller 9cccad015d fix(post/windows/manage/remove_host): handle whitespace parsing robustly
See #20157
2025-05-31 12:47:33 +02:00
cgranleese-r7 f6faa5598b Fixes modules to now correctly use a hash with report note 2025-05-22 10:59:50 +01:00
bcoles 943c94774a Modules: Resolve Rubocop Lint/Syntax violations 2025-05-21 18:27:24 +10:00
Brendan 1982d81e22 Merge pull request #20098 from smashery/execute-assembly32
Execute assembly32
2025-05-13 16:49:25 -05:00
bcoles 5abf5480d5 modules/post/windows/gather/credentials: Update PackRat module descriptions 2025-05-13 23:10:04 +10:00
bcoles 81a405355c modules/post: Resolve RuboCop violations and typos 2025-05-13 09:23:28 +10:00
Spencer McIntyre 9ee2ec861f Merge pull request #20120 from bcoles/rubocop-modules-post-windows
modules/post/windows: Resolve RuboCop violations
2025-05-09 09:33:17 -04:00
bcoles 45336dd612 modules/post/windows: Resolve RuboCop violations 2025-05-09 10:51:17 +10:00
bcoles a99333a9ca Modules: Remove quotes surrounding quoted license constant 2025-05-03 12:57:40 +10:00
bcoles 7b8cf0bfbb modules/post/windows/gather: Resolve RuboCop violations 2025-04-30 11:23:07 +10:00
Ashley Donaldson 6ec67d6a26 32-bit .NET working 2025-04-29 09:44:03 +10:00
bcoles 333c38b39e modules/post/windows/gather/credentials: Resolve RuboCop violations 2025-04-28 09:08:33 +10:00
adfoster-r7 afbf9af930 Merge pull request #19600 from adfoster-r7/mark-enum-chrome-as-superseded
Mark older browser modules for windows as superceded
2024-10-31 11:33:03 +00:00
adfoster-r7 5e217fb93a Mark enum_chrome as superceded 2024-10-30 16:21:05 +00:00
adfoster-r7 7b745b2dcb Merge pull request #19506 from xaitax/enum_browsers
Add Browser Data Extraction for Chromium- and Gecko-based Browsers
2024-10-30 15:30:56 +00:00
Alex 6fb49a27e0 [Added] Improvements after review 2024-10-24 13:48:50 +02:00
adfoster-r7 88825a022c Remove trailing whitespace 2024-10-23 23:41:20 +01:00
Alex 1fa9c6a774 [Fixed] Opera Support 2024-10-21 17:03:37 +02:00
Alex e6aa695e99 Update enum_browsers.rb 2024-10-21 09:48:24 +02:00
Alex ecd9f99d16 [Added] Extract Browser Cache 2024-10-20 23:15:18 +02:00
Alex a2d8d7dd76 [Added] Extract Installed Browser Extensions (Name & Version) 2024-10-20 21:23:06 +02:00
Alex 6d272759dc Add Browser Version Detection and display System Information 2024-10-11 12:13:48 +02:00
Alex 91beef1dbb Add BROWSER_TYPE option to choose between Chromium, Gecko, or both for data extraction 2024-10-10 20:08:14 +02:00
Alex 47c4679d6b Fixed migration logic 2024-10-10 19:28:03 +02:00
Alex d3ae5a9ab0 Abort when session is running under SYSTEM privileges. 2024-10-10 13:25:11 +02:00
Alex cd487715c4 [Added] Migration to explorer.exe for user-context based extraction 2024-10-10 12:32:19 +02:00
GhostlyBox 967f7c30a0 Update enum_unattend.rb
Included checks for '.vmimport' files which may have been created by the AWS EC2 VMIE service which will still contain cleartext credentials.
2024-10-07 17:58:30 +01:00
Alex 9eda0338af Improved readability and other small fixes 2024-10-06 10:19:10 +02:00
Alex 6d28e4b350 Update modules/post/windows/gather/enum_browsers.rb
Co-authored-by: Valentin Lobstein <88535377+Chocapikk@users.noreply.github.com>
2024-09-27 08:03:02 +02:00
Alex 4a9754313a Update modules/post/windows/gather/enum_browsers.rb
Co-authored-by: Valentin Lobstein <88535377+Chocapikk@users.noreply.github.com>
2024-09-27 08:02:57 +02:00
Alex 1e67d200d2 Update modules/post/windows/gather/enum_browsers.rb
Co-authored-by: Valentin Lobstein <88535377+Chocapikk@users.noreply.github.com>
2024-09-27 08:02:48 +02:00
Alex 78f7327ea7 Update enum_browsers.rb 2024-09-26 20:49:42 +02:00
Alex 6cc6841821 Update modules/post/windows/gather/enum_browsers.rb
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
2024-09-26 20:44:45 +02:00