Commit Graph

7956 Commits

Author SHA1 Message Date
Brent Cook 6fb6570f99 delete old feature detection code from exploit base
This deletes some old code that apparently has been broken and somewhat unused for many years.

The 'derived_implementor?' method for modules relies on the debug output from Ruby in order to tell of a class implements a method, but the regex it used didn't work properly with any modern Ruby version until 2.5.x. This caused a random sleep to get inserted into certain payload staging operations, which actively breaks staging in certain scenarios (I'm not trying to address that here).

This also removes some ancient module feature detection code, which also is entirely unused today.
2018-04-07 12:47:42 -05:00
cbrnrd 04d5e8a765 Switch text processing to ruby
Also add pidof() and command_exists?()
2018-04-06 23:31:11 -04:00
Brent Cook 7a95024062 remove more ring operations 2018-04-06 13:49:16 -05:00
Brent Cook 730010aa06 remove RingBuffer from interactive command shells, fix token handling 2018-04-06 13:49:13 -05:00
scriptjunkie c303859c11 Fix #9827 2018-04-06 11:06:52 -05:00
cbrnrd c97eb42eba Finish up additions and add doc 2018-04-06 12:04:35 -04:00
Jon Hart 1cc16a55a8 Add other linux kernel post helpers 2018-04-06 08:28:53 -07:00
Brendan Coles ba88118d7a Update kernel_modules method to return Array 2018-04-06 15:02:43 +00:00
thecarterb a85f118bf2 Begin adding functions to Msf::Post::Linux::System 2018-04-05 21:32:58 -04:00
William Vu 7cc82a14b6 Update exploit driver with correct method 2018-04-05 18:56:19 -05:00
William Vu 17ed88b766 Fix backgrounded aggressive exploits
Any exploit that includes an aggressive stance is aggressive, regardless
of whether or not it has passive components.

This fix should prevent known-aggressive exploits from backgrounding.
2018-04-05 18:34:36 -05:00
James Barnett fe224f628b Remove update_host_via_sysinfo since it is unused 2018-04-05 14:20:25 -05:00
Brendan Coles 499b0a857f Add kernel_modules method 2018-04-05 05:25:36 +00:00
James Barnett 852bc3d237 Dont inject :workspace into every HTTP request. 2018-04-04 16:30:25 -05:00
James Barnett 6a02712674 Merge remote-tracking branch 'mkienow/MS-3061-remote-notes-read-update-delete' into MS-3062_workspaces 2018-04-04 16:03:43 -05:00
Jon Hart bc81cfad1f Fix error handling when trying to delete non-existent workspace 2018-04-04 11:40:21 -07:00
Jon Hart 63aabc00f1 etcd rubocop style 2018-04-04 11:01:38 -07:00
Jon Hart a6c31aceb2 Refactor common etc capabilities; add separate version scanner 2018-04-04 10:48:27 -07:00
Brendan Coles 6d92c319f8 Add Msf::Post::Linux::Kernel lib 2018-04-04 17:13:49 +00:00
bwatters-r7 d9039d43ef Land #9734, Remove unwanted 'pop RAX' from windows/x64/reverse_(win)http 2018-04-03 14:23:41 -05:00
Brent Cook 226ef160ff Land #9748, Convert the smbloris DoS into an external module
Help reliability and performance. This some Ruby-specific external module
tooling as a result as well.
2018-04-02 23:25:10 -05:00
Brent Cook b445583a14 Land #9774, use correct whitespace when patching python meterpreter 2018-04-02 23:07:36 -05:00
James Barnett e892911fbe Use a constant for default workspace name 2018-04-02 17:02:14 -05:00
Brent Cook fa34f3e0a4 Land #9718, Add get_user_spns 'kerberoasting' module 2018-04-02 10:04:44 -05:00
christopher lee 3aed6d6666 Initial 2018-04-02 08:08:23 -05:00
scriptjunkie 774ef22d08 Fix upts -> opts 2018-03-30 22:26:53 -05:00
Matthew Kienow cb2366d2eb Fix regex search for serialized data column 2018-03-30 19:25:38 -04:00
James Barnett 7d58b0a5f4 Merge branch 'goliath' into MS-3062_workspaces 2018-03-30 16:35:26 -05:00
James Barnett ecbbf1d940 Pass workspace when using db_nmap 2018-03-30 15:27:32 -05:00
zerosum0x0 3a266d93b6 support for ARM 2018-03-29 15:11:27 -06:00
James Barnett f41490728b Process workspace when importing nmap data 2018-03-29 11:46:34 -05:00
James Barnett 1b6aa86d92 Merge remote-tracking branch 'mkienow/MS-3061-remote-notes-read-update-delete' into MS-3062_workspaces 2018-03-27 15:57:41 -05:00
Matthew Kienow 0b5d3d31f9 WIP remote note read, update, delete 2018-03-27 16:36:56 -04:00
Jeffrey Martin b509c14851 detect the whitespace needed when patching meterpreter 2018-03-27 13:24:44 -05:00
James Barnett 9559c06c10 Land #9762, Fix OpenSSL deprecation in Ruby 2.5
This PR replaces a deprecated method in the Ruby 2.5
OpenSSL library. It also bumps the ruby-version to use 2.5.

Fixes #9576
2018-03-27 11:02:44 -05:00
christopher lee abf16a4469 fix workspace tests 2018-03-27 10:41:08 -05:00
William Vu 862a3ff74d Land #9618, pipe auditing improvements 2018-03-26 17:01:48 -05:00
James Barnett 83f2052ee7 Accidentally q 2018-03-26 16:09:56 -05:00
James Barnett cfa03a999c Finish moving current_workspace tracking to client 2018-03-26 15:58:47 -05:00
Brent Cook 3fb5137c2d use Rex::Socket::SslTcp.supported_ssl_methods for SSLVersion option 2018-03-26 03:40:49 -05:00
andrea 38af667094 Support for Ruby 2.5.0 fixing OpenSSL warnings 2018-03-26 02:52:02 -05:00
Adam Cammack 71149e9c68 Remove executable Ruby files from classic loading 2018-03-23 14:49:06 -05:00
Adam Cammack 133f982f7c Add external module bridge for Ruby
This runs Ruby external modules with the same Ruby that is running MSF,
so it might even work on Windows!
2018-03-23 14:46:40 -05:00
James Barnett def0e4d93b Merge branch 'goliath' into MS-3062_workspaces 2018-03-23 11:37:01 -05:00
James Barnett 6b3a4a56dc Merge branch 'rapid7/master' into goliath 2018-03-23 11:26:31 -05:00
James Barnett ed5b22a541 Address more code review comments 2018-03-22 21:47:59 -05:00
James Barnett 6c5a7a663a Merge branch 'goliath' into MS-2879_db_export 2018-03-22 21:22:23 -05:00
James Barnett 466c97f114 WIP: move tracking active workspace to client side
* Move the @current_workspace tracking to workspace proxy
* Create helper for handling workspace value in opts
* Call framework.db.proxy across dbmanager files now that active ws is tracked in proxy

NOTE: This commit throws an exception when adding a remote data service.
2018-03-22 21:00:06 -05:00
Jeffrey Martin b9fc786d24 Land #9744, Add synchronization around public module metadata cache methods 2018-03-22 17:24:39 -05:00
William Vu 23a7444646 Add PipeAuditor mixin to Psexec_MS17_010 mixin 2018-03-22 15:37:44 -05:00