cn-kali-team
a248983ca8
Change the get_domain function to optional
2020-02-29 15:25:41 +08:00
cn-kali-team
1420fa9d8b
Add Function
2020-02-29 00:14:55 +08:00
cn-kali-team
87ee307183
Add New Function
2020-02-25 19:59:36 +08:00
bwatters-r7
fb5c896d40
Streamline Checks and error for channelized comms before injection
2019-12-12 15:19:17 -06:00
bwatters-r7
cc25a30d1a
Move dpendency to mixin and adjust print statements
2019-12-04 09:00:03 -06:00
bwatters-r7
2a14332f20
First try at adding error handling and offloading methods to the
...
Post::Windows::Process mixin for resusability and deduplication
2019-12-03 14:11:50 -06:00
Brendan Coles
e00b21d319
2019
2019-03-17 06:43:43 +00:00
Brendan Coles
bc9fcf40d4
2016
2018-08-03 07:07:21 +00:00
Clément Notin
79527809e2
Fix is_system? in Msf::Post::Windows::Priv for non-English systems
...
Switch to comparing the SID string, instead of comparing the resolved user name
2018-05-17 10:08:56 +02:00
Brent Cook
a347dee372
Land #9150 , fix broken and simplify unusual RuntimeError exceptions
2017-11-01 06:03:36 -05:00
Brent Cook
90766ceceb
remove more unusual raise RuntimeError patterns
2017-11-01 05:59:12 -05:00
h00die
3b8ef02c29
sid vs side
2017-10-29 08:36:05 -04:00
Brent Cook
29c48f9d8d
cleanup accounts post API
2017-08-21 23:00:57 -05:00
Brent Cook
e3a9ddfc22
fix retry case for acquiring security descriptor
2017-08-21 22:52:53 -05:00
Brent Cook
0d17e94f54
handle unmapped sids consistently
2017-08-21 22:36:26 -05:00
Spencer McIntyre
0da9f4d64a
Refactor railgun "DLL" references to library
2017-06-27 17:34:06 -04:00
Spencer McIntyre
f39e378496
Land #8330 , fix ps_wmi_exec and psh staging
2017-05-13 14:26:47 -04:00
Spencer McIntyre
3cbeebe3af
Rename env_ variable to be more accurately named
2017-05-13 14:24:00 -04:00
Brandon Knight
f8fb03682a
Fix issue in ps_wmi_exec and powershell staging
...
The staging function in the post/windows/powershell class was broken
in a previous commit as the definition for env_variable was removed and
env_prefix alone is now used. This caused an error to be thrown when
attempting to stage the payload. This changes the reference from
env_variable to env_prefix.
Additionally, the ps_wmi_exec module created a powershell script to be
run that was intended to be used with the EncodedCommand command line
option; however the script itself was never actually encoded. This
change passes the compressed script to the encode_script function to
resolve that issue.
2017-04-28 03:31:56 -04:00
Spencer McIntyre
3cc089bcef
Support loading platform specific railgun defs
2017-04-24 19:46:56 -04:00
Spencer McIntyre
03698ec214
Fix how the psh mixing issues meterpreter commands
2017-03-16 08:45:10 -04:00
Brent Cook
836da6177f
Cipher::Cipher is deprecated
2017-01-22 10:20:03 -06:00
Brent Cook
f69b4a330e
handle Ruby 2.4 Fixnum/Bignum -> Integer deprecations
2017-01-22 10:20:03 -06:00
OJ
0737d7ca12
Tidy code, remove regex and use comparison for platform checks
2016-10-29 13:41:20 +10:00
OJ
1d617ae389
Implement first pass of architecture/platform refactor
2016-10-28 07:16:05 +10:00
Brent Cook
63bf93be1b
code and style cleanups
2016-10-08 21:04:15 -05:00
Pearce Barry
3f5ed75198
Relocate Rex::Platform:Windows content (fixes MS-1714)
2016-09-19 14:34:44 -05:00
wchen-r7
265adebd50
Fix typo
2016-08-19 10:44:24 -05:00
wchen-r7
0f4d26af19
Update yard doc
2016-08-18 17:18:16 -05:00
wchen-r7
2a61450511
Add new POST exploitation APIs for stealing a token
2016-08-18 17:08:21 -05:00
Brendan
b25b2a5188
Cleaned up code per suggestions in the PR
2016-08-16 16:16:25 -05:00
Brendan
0778b77f7b
Cleaned up a little
2016-08-15 12:20:28 -07:00
Brendan
7730e0eb27
Added ability to retrieve .NET versions
2016-08-15 11:29:00 -07:00
wchen-r7
e08c4a8bef
Remove .Net check
...
cmd_exec doesn't seem to be the best way to go because there is
some issue grabbing the output sometimes.
2016-08-11 10:49:06 -05:00
wchen-r7
3851db7bcb
Use powershell when possible
2016-08-10 15:14:11 -05:00
wchen-r7
766c0cc539
return nil if no .Net is installed
2016-08-05 11:36:32 -05:00
wchen-r7
11f94a6efc
Do a different wmic query for newer systems
2016-08-04 14:50:46 -05:00
wchen-r7
3ea3d95744
Add methods to check .Net and Powershell versions
2016-08-03 17:49:15 -05:00
Brent Cook
194a84c793
Modify stdapi so it also uses exist? over exists? for ruby parity
...
Also add an alias for backward compatibility.
2016-04-23 17:31:22 -04:00
OJ
3898d11aa7
Add Windows 10 entry to the version check regex
2016-04-13 08:23:01 +10:00
jvazquez-r7
d5a010c230
Add support for registry_key_exist?
2015-10-22 16:07:38 -05:00
jvazquez-r7
53f995b9c3
Do first prototype
2015-09-10 19:35:26 -05:00
HD Moore
a2d5511e39
Land #5379 , new post modules to load into powershell sessions
2015-08-26 17:11:40 -05:00
HD Moore
b14889ad5c
Small typo fix
2015-08-26 17:09:33 -05:00
Meatballs
ef33f36bda
Remove untrusted il
2015-08-01 23:20:00 +01:00
Meatballs
2d9bc64457
Fix WMIC Post Library for SYSTEM
...
SYSTEM doesn't have a proper clipboard?
2015-08-01 23:11:09 +01:00
Meatballs
5bcb63476d
Add high integrity level check
2015-08-01 23:10:51 +01:00
Mo Sadek
366d42a0d8
Land #5609 , Fuzzer.rb and file_info.rb YARD doc update
2015-07-06 14:12:55 -05:00
jvazquez-r7
02cd2a9cd9
Fix #3951 Update Windows::Registry to use cmd_exec
2015-06-29 12:07:37 -05:00
wchen-r7
1d9caeffc0
Update documentation for fuzzer.rb and file_info.rb
...
See #5599
2015-06-26 11:22:30 -05:00