William Vu
c7ba2ade65
Convert to mixin
2019-05-22 17:27:11 -05:00
asoto-r7
865f214a85
Remove workspace dependency for creating and locating payloads
2019-05-22 13:32:00 -05:00
William Vu
3ffd6363f3
Add comment
2019-05-21 14:34:27 -05:00
William Vu
bb5ce078f3
Fix style
2019-05-21 01:23:26 -05:00
Thom Morgan
7325ea669f
Update pipe_auditor.rb
2019-05-20 14:35:32 -04:00
Thom Morgan
4d9ae525c2
Update lib/msf/core/exploit/smb/client/pipe_auditor.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-05-20 13:58:22 -04:00
NoodleOfDeath
f656638f94
smb client now preprends named pipes with missing backslash during check named pipes enumeration
2019-05-20 13:47:18 -04:00
William Vu
a57923ee64
Improve logic
2019-05-16 13:25:00 -05:00
Jeffrey Martin
53dc118d28
Land #11819 , Implement module use by previous search index
2019-05-14 10:39:03 -05:00
William Vu
6ea1e7aed2
Handle TypeError in case of nil
2019-05-13 17:32:54 -05:00
William Vu
249d3551ae
Be good in other places
2019-05-13 17:15:31 -05:00
Brent Cook
745645d7ca
make encoded payloads a little less special-case
...
Just operate on the raw_payload buffer so we always have the same thing to look
at in the end of generation.
2019-05-07 13:48:24 -05:00
Brent Cook
ad8188ff51
throw exception on actual payload size violation, not formatted output size
2019-05-07 13:12:58 -05:00
Brent Cook
def3112dde
Land #11786 , Fix issues with DP RPC commands
2019-05-01 13:20:56 -05:00
bigendiansmalls
3289d89836
Added Extended passive mode to the core ftp module.
...
Extended passive mode (EPSV), as documented in RFC2428
is similar to the PASSive mode in that it requests that
the server open a port and wait for a data connection.
However, in unlike PASSive mode, Extended Passive mode
returns only the port on which the server listens for
the data connection, not the IP + Port. The client is
expected to use the existing IP (e.g. the one it used to
create the initial control channel connection) to connect
to the new data port.
Where this becomes important is if the server is behind
some type of natting device, EPSV will work in this case,
PASS may not.
2019-04-30 12:41:11 -05:00
Matthew Kienow
fbf7668889
Fix delete vuln
...
Convert fetched Mdm::Vuln::ActiveRecord_Associations_CollectionProxy to
an Array as the code only expects to process an Mdm::Vuln or Array.
2019-04-26 14:44:37 -04:00
Matthew Kienow
a393e3f71f
Fix finding a service to return
...
Convert fetched Mdm::Service::ActiveRecord_Associations_CollectionProxy
to an Array as the code only expects to process an Mdm::Service or
Array.
2019-04-26 14:40:49 -04:00
Matthew Kienow
8173fd5d8a
Update opts usage to match the method comment
...
Conditions assignment is to the singular hosts.address, so the plural
addresses doesn't make sense.
2019-04-26 14:34:40 -04:00
Matthew Kienow
7a0681f816
Fix incorrect method comments and examples
2019-04-26 14:30:28 -04:00
Shelby Pace
a97cee4c91
add ternary expression to set options
2019-04-25 15:36:09 -05:00
Jacob Robles
39aae367a5
Land #11765 , Update NUUO mixin, move code to Rex
2019-04-25 09:35:47 -05:00
Brent Cook
98146fe419
Land #11771 , Force UTF-8 for more module metadata fields
2019-04-24 20:23:51 -05:00
Jacob Robles
f3a820b475
Remove protocol option
...
Only tcp is supported for the mixin.
2019-04-24 14:24:30 -05:00
Adam Cammack
40c083b894
Force UTF-8 for more module fields
2019-04-24 09:30:38 -05:00
Jacob Robles
acf7e58e8e
Nuuo mixin handle connection errors
2019-04-24 07:00:53 -05:00
William Vu
9420b04dd9
Support generic payloads
2019-04-23 15:14:14 -05:00
William Vu
e12b19a507
Enhance compatible_payloads to use module cache
2019-04-23 13:57:39 -05:00
Jacob Robles
aba88243d7
Add nuuo resposne string
2019-04-23 10:47:40 -05:00
Jacob Robles
d4728c9bc7
Call correct function
2019-04-22 10:16:05 -05:00
Jacob Robles
a7d02d49d8
Update mixin and client for response
2019-04-19 14:24:37 -05:00
Tim W
31eab90c74
fix mettle cmd_exec
2019-04-18 15:30:26 +08:00
James Barnett
0c1d63c0ce
Update comments as regex is no longer supported
2019-04-17 13:00:42 -05:00
James Barnett
681a4c43c6
Make user and pass options on cred lookup literal
...
Fixes #11555
2019-04-17 12:37:59 -05:00
Brent Cook
b35a1be946
Land #11724 , Improve 'use' command to automatically search and fuzzy-match if possible
2019-04-17 02:38:29 -05:00
Sonny Gonzalez
cf7096f8ba
Target path normalization fixed
2019-04-15 16:35:15 -05:00
William Vu
23f28e8337
Implement "intelligent" use command with search -u
2019-04-12 18:06:08 -05:00
Jacob Robles
028890ec51
Move ncs mixin code to rex
2019-04-12 15:12:09 -05:00
Sonny Gonzalez
04dcd8a1f9
A more robust path resolution
...
and better readable is_child_of? method
2019-04-12 11:01:14 -05:00
Sonny Gonzalez
6bf824d200
Zip import directory traversal mitigation
2019-04-11 19:08:37 -05:00
Brent Cook
0308f80c0e
fix Failure scoping (needed for libraries)
2019-04-08 09:57:22 -05:00
Matthew Kienow
337e061a77
Skip operation if there is no active database
2019-03-27 13:03:37 -04:00
Brent Cook
b2d047b0b1
Land #11622 , merge common hash identifier code between modules
2019-03-26 13:12:00 -05:00
Matthew Kienow
cf42f47e5b
Check that payload was returned before processing
2019-03-26 11:41:27 -04:00
Matthew Kienow
dc3be3378d
Process workspace for use in the create operation
2019-03-25 19:41:51 -04:00
Matthew Kienow
6278563f25
Remove unused code
2019-03-25 19:38:28 -04:00
h00die
5ea406cd4c
create hash identifier library
2019-03-23 14:02:34 -04:00
Brent Cook
6218d8920d
Land #11615 , allow exporting creds to a JTR-compatible format
2019-03-23 09:08:35 -05:00
h00die
aada613cff
Merge branch 'master' of https://github.com/rapid7/metasploit-framework into jtrout
2019-03-22 21:26:36 -04:00
Matt Robinson
771cd60a5e
Add missing get_payload() method
2019-03-22 21:25:23 -04:00
h00die
f00c38cfe2
make creds exporter for jtr format
2019-03-22 15:04:58 -04:00