Commit Graph

7956 Commits

Author SHA1 Message Date
William Vu c7ba2ade65 Convert to mixin 2019-05-22 17:27:11 -05:00
asoto-r7 865f214a85 Remove workspace dependency for creating and locating payloads 2019-05-22 13:32:00 -05:00
William Vu 3ffd6363f3 Add comment 2019-05-21 14:34:27 -05:00
William Vu bb5ce078f3 Fix style 2019-05-21 01:23:26 -05:00
Thom Morgan 7325ea669f Update pipe_auditor.rb 2019-05-20 14:35:32 -04:00
Thom Morgan 4d9ae525c2 Update lib/msf/core/exploit/smb/client/pipe_auditor.rb
Co-Authored-By: bcoles <bcoles@gmail.com>
2019-05-20 13:58:22 -04:00
NoodleOfDeath f656638f94 smb client now preprends named pipes with missing backslash during check named pipes enumeration 2019-05-20 13:47:18 -04:00
William Vu a57923ee64 Improve logic 2019-05-16 13:25:00 -05:00
Jeffrey Martin 53dc118d28 Land #11819, Implement module use by previous search index 2019-05-14 10:39:03 -05:00
William Vu 6ea1e7aed2 Handle TypeError in case of nil 2019-05-13 17:32:54 -05:00
William Vu 249d3551ae Be good in other places 2019-05-13 17:15:31 -05:00
Brent Cook 745645d7ca make encoded payloads a little less special-case
Just operate on the raw_payload buffer so we always have the same thing to look
at in the end of generation.
2019-05-07 13:48:24 -05:00
Brent Cook ad8188ff51 throw exception on actual payload size violation, not formatted output size 2019-05-07 13:12:58 -05:00
Brent Cook def3112dde Land #11786, Fix issues with DP RPC commands 2019-05-01 13:20:56 -05:00
bigendiansmalls 3289d89836 Added Extended passive mode to the core ftp module.
Extended passive mode (EPSV), as documented in RFC2428
is similar to the PASSive mode in that it requests that
the server open a port and wait for a data connection.
However, in unlike PASSive mode, Extended Passive mode
returns only the port on which the server listens for
the data connection, not the IP + Port.  The client is
expected to use the existing IP (e.g. the one it used to
create the initial control channel connection) to connect
to the new data port.

Where this becomes important is if the server is behind
some type of natting device, EPSV will work in this case,
PASS may not.
2019-04-30 12:41:11 -05:00
Matthew Kienow fbf7668889 Fix delete vuln
Convert fetched Mdm::Vuln::ActiveRecord_Associations_CollectionProxy to
an Array as the code only expects to process an Mdm::Vuln or Array.
2019-04-26 14:44:37 -04:00
Matthew Kienow a393e3f71f Fix finding a service to return
Convert fetched Mdm::Service::ActiveRecord_Associations_CollectionProxy
to an Array as the code only expects to process an Mdm::Service or
Array.
2019-04-26 14:40:49 -04:00
Matthew Kienow 8173fd5d8a Update opts usage to match the method comment
Conditions assignment is to the singular hosts.address, so the plural
addresses doesn't make sense.
2019-04-26 14:34:40 -04:00
Matthew Kienow 7a0681f816 Fix incorrect method comments and examples 2019-04-26 14:30:28 -04:00
Shelby Pace a97cee4c91 add ternary expression to set options 2019-04-25 15:36:09 -05:00
Jacob Robles 39aae367a5 Land #11765, Update NUUO mixin, move code to Rex 2019-04-25 09:35:47 -05:00
Brent Cook 98146fe419 Land #11771, Force UTF-8 for more module metadata fields 2019-04-24 20:23:51 -05:00
Jacob Robles f3a820b475 Remove protocol option
Only tcp is supported for the mixin.
2019-04-24 14:24:30 -05:00
Adam Cammack 40c083b894 Force UTF-8 for more module fields 2019-04-24 09:30:38 -05:00
Jacob Robles acf7e58e8e Nuuo mixin handle connection errors 2019-04-24 07:00:53 -05:00
William Vu 9420b04dd9 Support generic payloads 2019-04-23 15:14:14 -05:00
William Vu e12b19a507 Enhance compatible_payloads to use module cache 2019-04-23 13:57:39 -05:00
Jacob Robles aba88243d7 Add nuuo resposne string 2019-04-23 10:47:40 -05:00
Jacob Robles d4728c9bc7 Call correct function 2019-04-22 10:16:05 -05:00
Jacob Robles a7d02d49d8 Update mixin and client for response 2019-04-19 14:24:37 -05:00
Tim W 31eab90c74 fix mettle cmd_exec 2019-04-18 15:30:26 +08:00
James Barnett 0c1d63c0ce Update comments as regex is no longer supported 2019-04-17 13:00:42 -05:00
James Barnett 681a4c43c6 Make user and pass options on cred lookup literal
Fixes #11555
2019-04-17 12:37:59 -05:00
Brent Cook b35a1be946 Land #11724, Improve 'use' command to automatically search and fuzzy-match if possible 2019-04-17 02:38:29 -05:00
Sonny Gonzalez cf7096f8ba Target path normalization fixed 2019-04-15 16:35:15 -05:00
William Vu 23f28e8337 Implement "intelligent" use command with search -u 2019-04-12 18:06:08 -05:00
Jacob Robles 028890ec51 Move ncs mixin code to rex 2019-04-12 15:12:09 -05:00
Sonny Gonzalez 04dcd8a1f9 A more robust path resolution
and better readable is_child_of? method
2019-04-12 11:01:14 -05:00
Sonny Gonzalez 6bf824d200 Zip import directory traversal mitigation 2019-04-11 19:08:37 -05:00
Brent Cook 0308f80c0e fix Failure scoping (needed for libraries) 2019-04-08 09:57:22 -05:00
Matthew Kienow 337e061a77 Skip operation if there is no active database 2019-03-27 13:03:37 -04:00
Brent Cook b2d047b0b1 Land #11622, merge common hash identifier code between modules 2019-03-26 13:12:00 -05:00
Matthew Kienow cf42f47e5b Check that payload was returned before processing 2019-03-26 11:41:27 -04:00
Matthew Kienow dc3be3378d Process workspace for use in the create operation 2019-03-25 19:41:51 -04:00
Matthew Kienow 6278563f25 Remove unused code 2019-03-25 19:38:28 -04:00
h00die 5ea406cd4c create hash identifier library 2019-03-23 14:02:34 -04:00
Brent Cook 6218d8920d Land #11615, allow exporting creds to a JTR-compatible format 2019-03-23 09:08:35 -05:00
h00die aada613cff Merge branch 'master' of https://github.com/rapid7/metasploit-framework into jtrout 2019-03-22 21:26:36 -04:00
Matt Robinson 771cd60a5e Add missing get_payload() method 2019-03-22 21:25:23 -04:00
h00die f00c38cfe2 make creds exporter for jtr format 2019-03-22 15:04:58 -04:00