Commit Graph

16492 Commits

Author SHA1 Message Date
James Barnett e9931fa70e Fix bug when updating Mdm::Vuln.refs 2019-01-04 15:10:19 -06:00
James Barnett bcfe434d1e Update to_ar to use symbolized keys 2019-01-04 15:10:19 -06:00
Tim W f4e84da495 add comment 2019-01-03 18:00:06 +08:00
William Vu cfec99b1a8 Land #11154, tab completion for aux rerun/exploit 2019-01-02 18:44:04 -06:00
Tim W c0dd020ff5 fix linux meterpreter ls 2019-01-02 19:09:46 +08:00
Tim W 79c58cd786 fix #11158, fix multi line text in android send_sms 2019-01-02 03:51:59 +08:00
Tim W 05d78e23ea fix #11189, fix meterpreter ls handling of large files 2019-01-02 03:34:13 +08:00
Matthew Kienow 4fc65b39a1 Make position of warden call the same as others
Minor correction for consistent usage since a previous refactoring moved
the authenticate call into the begin block.
2018-12-31 16:38:26 -05:00
Matthew Kienow 7b22527f8f Make error message use same language as others 2018-12-31 16:37:08 -05:00
Matthew Kienow 05d810ac23 Add support for GET with ID in the path 2018-12-31 15:46:00 -05:00
Matthew Kienow 0e56c30ab2 Use data object wrapper for JSON response 2018-12-31 15:43:16 -05:00
Matthew Kienow 12f4222b2e Fix to ensure authentication 2018-12-28 16:29:33 -05:00
Matthew Kienow 8361dab983 Minor method comment change 2018-12-27 21:57:31 -05:00
Brent Cook 66505790f9 Land #11179, Replace Sysrandom with Ruby default SecureRandom 2018-12-27 11:33:29 -06:00
Matthew Kienow 34e99c3857 Modify GET error message to match other servlets 2018-12-26 22:45:33 -05:00
Brent Cook 0d0356ccdd Land #11126, Update sessions through the DBManager 2018-12-26 13:15:43 -06:00
Matthew Kienow ebc7a3a315 Replace sysrandom with ruby default securerandom 2018-12-26 13:40:44 -05:00
Wei Chen f5210abb55 Add rspec 2018-12-26 11:18:44 -06:00
Green-m 12a948dde5 Move down cmd_rerun to fix rspec issue. 2018-12-24 11:30:02 +08:00
Matthew Kienow b5bc65c3bd Add GET handler to query events 2018-12-21 22:18:10 -05:00
Matthew Kienow a448b26f73 Remove unnecessary argument default value 2018-12-21 22:13:52 -05:00
Matthew Kienow 5e971132f3 Enhance events method to fully query events 2018-12-21 22:07:43 -05:00
Matthew Kienow 7e10b38421 Add events method 2018-12-21 21:37:42 -05:00
Brent Cook 9736e8252c Merge branch 'master' into land-11038- 2018-12-21 16:31:53 -06:00
William Vu b4ff3b544f Add CMDSTAGER::SSL datastore option
It has come to my attention that since I added the HTTP(S) command
stagers, no one has used HTTPS. This is probably why.

The CmdStager options hash takes precedence over any datastore options.
2018-12-21 14:51:49 -06:00
William Vu 5cff330a38 Land #11128, Rex::Exploitation::CmdStagerFetch 2018-12-21 14:16:57 -06:00
Garvit Dewan 3021a05553 Fix typo in report.rb 2018-12-21 17:51:46 +05:30
Green-m 06de47ce68 Enhance the command auto-complete in aux. 2018-12-21 18:03:57 +08:00
Wei Chen f7eb3452be Land #11083, set user agent in Windows reverse_http(s) stagers 2018-12-19 11:38:12 -06:00
Brent Cook 09f9b887b9 don't bother handholding the empty string 2018-12-19 10:52:51 -06:00
Wei Chen 847e3232ab Land #11102, remove old metasm remnants 2018-12-18 08:53:53 -06:00
Brendan Coles 8d93812c0a Add Rex::Exploitation::CmdStagerFetch 2018-12-15 03:30:00 +00:00
asoto-r7 a2a38bb72f ysoserial: Distracted halfway through a comment 🙃 2018-12-14 15:07:13 -06:00
asoto-r7 74b4ba1c50 ysoserial: Change class name to camelcase to align with Ruby style guide 2018-12-14 14:44:58 -06:00
asoto-r7 212454b1fb ysoserial: Support larger payloads, Randomize fingerprintable string 2018-12-14 14:43:30 -06:00
asoto-r7 fa74a1839a Initial support for dynamic ysoserial Java serialization payloads 2018-12-14 12:51:08 -06:00
Matthew Kienow eec7a3dafc Remove debug code 2018-12-14 13:33:16 -05:00
Matthew Kienow ad6b80bd08 Remove unused session_dto flag 2018-12-14 13:01:20 -05:00
Matthew Kienow a683cedcce Enhance race condition workaround in report_host 2018-12-14 12:28:16 -05:00
Matthew Kienow c2af36f405 Use update_session rather than Mdm save method
The changes ensure that updates to an Mdm::Session are reflected on a
remote data service.
2018-12-14 12:22:49 -05:00
Matthew Kienow b6cdf7aa9d Add update_session method 2018-12-14 12:04:55 -05:00
Matthew Kienow a8ed971f12 Move convert_msf_session_to_hash to data proxy 2018-12-14 11:46:12 -05:00
Matthew Kienow 3f9b2dadc8 Remove unnecessary single object selection 2018-12-14 11:20:19 -05:00
Matthew Kienow 4cefb8d06e Fix typo 2018-12-14 11:19:40 -05:00
Jeffrey Martin 288cbd2386 add analyze command 2018-12-13 18:21:00 -06:00
Jeffrey Martin 4963647bf6 remove call to method not defined 2018-12-13 17:00:41 -06:00
bwatters-r7 564814c4db Land #10676, Add support for ext_server_unhook
Merge branch 'land-10676' into upstream-master
2018-12-13 09:46:37 -06:00
William Vu a415063acd Reword CreateSession option description 2018-12-12 15:32:31 -06:00
Stephen Haywood eceb47a9da Move CREATE_SESSION option to advanced option CreateSession 2018-12-12 15:32:31 -06:00
Stephen Haywood 8a7187ad79 Add CREATE_SESSION option to CommanShell
Register the CREATE_SESSION option in command_shell_options so it
can be used with all modules that use start_session.
Modify ssh_login.rb, ssh_login_pubkey.rb, and telnet_login.rb to
use the new CREATE_SESSION option.
When CREATE_SESSION is set to true (default) a new session is
created with each successful login. When set to false a new session
is not created but the successful login is still registered in the
credentials database.
2018-12-12 15:32:31 -06:00