Commit Graph

16492 Commits

Author SHA1 Message Date
h00die 93f66a1f22 uppercase 2019-01-15 08:04:11 -05:00
h00die 4d847e97fc ... over -1 2019-01-14 22:41:11 -05:00
h00die 509b4e979d max_length -1 2019-01-14 22:28:46 -05:00
h00die 2c02dbc8a6 add max_length to wordlist generation 2019-01-14 22:20:33 -05:00
asoto-r7 ddd9ab2041 Fixed an off-by-one error in the fingerprinting randomization 2019-01-14 17:42:59 -06:00
James Barnett e168458861 Make calls to get the associated host when getting loot 2019-01-14 15:51:51 -06:00
Brendan Coles 2543d60465 Use 'to_s.strip' for Msf::Post::File.pwd output 2019-01-12 08:47:23 +00:00
William Vu e9a8d5708a Land #11234, @bcoles revisionism 2019-01-11 20:15:34 -06:00
Brendan Coles a575c6d7c3 revisionism 2019-01-11 16:52:26 +00:00
Green-m 462f779bda Fix conflict. 2019-01-11 11:39:16 +08:00
Green-m 96173c101a Fix bug when the cidr of rhosts is 32. 2019-01-11 11:31:54 +08:00
Green-m 689355e47f Support multiple rhosts for auxiliary modules. 2019-01-11 11:31:28 +08:00
Erin Bleiweiss d18c6bd158 Land #11188, Correct authentication logic in host and event servlets 2019-01-10 13:09:26 -06:00
Metasploit 16f152f6e3 Bump version of framework to 5.0.1 2019-01-10 09:41:50 -08:00
James Barnett 65f127a66f Land #11222, Display error when update operation has invalid fields 2019-01-10 11:33:22 -06:00
Erin Bleiweiss 0435d7e1d6 Return the updated objects 2019-01-10 11:04:42 -06:00
Erin Bleiweiss 5055e421f5 Add ! to cred update 2019-01-10 10:56:28 -06:00
Erin Bleiweiss 0ad89528ea Update pattern for creds 2019-01-10 10:55:36 -06:00
Brent Cook f125526e09 Land #11207, implement db_import for web service 2019-01-10 10:28:29 -06:00
Brent Cook d686303cff Land #11228, Move msfdb_ws to tools/dev since it is deprecated by msfdb 2019-01-10 09:28:34 -06:00
James Barnett 4074913b60 Dont log every request when using HTTP data service 2019-01-10 00:30:54 -06:00
James Barnett 43f8a543e1 Land #11213, enable starting JSONRPC server from msfrpcd 2019-01-09 23:37:47 -06:00
Matthew Kienow c3f71a1692 Update Rspec expected thread count
When REMOTE_DB is set there is a thread for the web service, in
addition to the External modules thread manager, so there is one or two
threads by the end of the test run in addition to the main VM thread.
2019-01-09 23:56:16 -05:00
Jeffrey Martin 24f5422db9 use analyze.host to reflect final location of util 2019-01-09 16:59:50 -06:00
Jeffrey Martin f93497de8f refactor to allow analyze via rpc 2019-01-09 16:48:54 -06:00
Matthew Kienow f636982b09 Land #11211, change db_connect persistence logic 2019-01-09 15:11:08 -05:00
Matthew Kienow b6cfb5f697 Add Msf::Util::ServiceHelper class 2019-01-08 22:39:26 -05:00
James Barnett a2548fe92d Only lookup db connections by name
Matching on all attributes was causing issues when the connection
criteria would change for a db service at a host that already existed.
It would find the existing connection and load that outdated connection
and fail to connect.

The new functionality will save a new, valid connection with a randomly
generated name, unless the -n flag is specified to overwrite an existing
connection.
2019-01-08 15:21:14 -06:00
Matthew Kienow 84a8c9b638 Minor method comment change 2019-01-08 14:02:40 -05:00
Matthew Kienow 8c29319b25 Add session_events method 2019-01-08 14:02:40 -05:00
Matthew Kienow fa783256eb Remove unnecessary argument default value 2019-01-08 14:02:39 -05:00
Matthew Kienow d677eb16a9 Enhance session_events query 2019-01-08 14:02:32 -05:00
Matthew Kienow d117e6a1d1 Land #11142, use POST for API token generation 2019-01-08 11:59:30 -05:00
James Barnett 466b0004e1 Land #11163, add API endpoint for retrieving Mdm::Events 2019-01-08 09:26:53 -06:00
James Barnett 69ee3a4a26 Land #11187, Conform LoginServlet to API standards 2019-01-07 17:03:39 -06:00
James Barnett f23142c19c Land #11183, add authentication to LoginServlet endpoints 2019-01-07 17:02:31 -06:00
Erin Bleiweiss cfa22bb4ec Exclude key from VulnDetail update 2019-01-07 16:33:50 -06:00
Erin Bleiweiss 771469f4cd Update all Mdm::xx.update() instances 2019-01-07 16:24:13 -06:00
Erin Bleiweiss 6641c606b2 Add support for db import from remote data service 2019-01-07 14:32:27 -06:00
James Barnett 02fda8625a Address code review comments.
- Fix CSS on submit button
- Dont generate a new token when logging in to web form
- Also added text to account page to send the user to the login page when not logged in
2019-01-07 13:52:01 -06:00
asoto-r7 0ca4dd829e Fixed an off-by-one error in fingerprinting string randomization 2019-01-04 16:31:43 -06:00
James Barnett 101fbb7aa5 Address code review comments 2019-01-04 15:23:24 -06:00
James Barnett 83267d08e0 Update jquery version and use SRI 2019-01-04 15:23:24 -06:00
James Barnett 4bbf84b949 Update login test page to use POST for generate-token 2019-01-04 15:22:32 -06:00
James Barnett 60681e4385 Use POST for token generation 2019-01-04 15:22:32 -06:00
James Barnett 1b29e17827 Dont array wrap refs 2019-01-04 15:10:21 -06:00
James Barnett b875d391fc WIP: updating ref lookup based on code review comments 2019-01-04 15:10:20 -06:00
James Barnett 5f43ec0a79 Address code review comment 2019-01-04 15:10:20 -06:00
James Barnett 0281ddf78c Remove vuln_refs from Vuln JSON schema
This object is just a pointer between Vulns and refs. We don't need to surface it
2019-01-04 15:10:20 -06:00
James Barnett 10cceb0e9b Fix a couple of bugs introduced by symbolizing to_ar 2019-01-04 15:10:20 -06:00