Commit Graph

16492 Commits

Author SHA1 Message Date
Wei Chen 19e76329dc Add some checks in buffer.rb and fix option in msfvenom 2018-04-11 13:02:35 -05:00
Matthew Kienow 3db19fe4f2 Fix DBManager::Service use of services method
services method was previously modified to use a hash as the parameter,
but each_service was passing a workspace. Make each_service method
consistent with other DBManager modules.
2018-04-11 11:43:12 -04:00
cbrnrd 1e34a6d3c6 Add new functions and fix return bugs 2018-04-11 10:47:21 -04:00
Matthew Kienow e639fda53c Fix DB initialization with no database YAML 2018-04-11 09:15:38 -04:00
thecarterb 57e243ac49 Read from /proc/mounts instead of the mount command 2018-04-10 23:20:00 -04:00
scriptjunkie bc07ba3769 load only at use to break require loop 2018-04-10 21:05:41 -05:00
Wei Chen 13edf66fa3 Fix options 2018-04-10 18:57:02 -05:00
Brent Cook 41a21def80 Land #9857, Restore services search semantics 2018-04-10 17:25:48 -05:00
James Barnett cd48b47760 Fix failing tests.
-Was accidentally deleting opts[:workspace] instead of processing
-Update notes help text expectations
2018-04-10 17:10:32 -05:00
James Barnett e51f41fa34 Merge remote-tracking branch 'msf_jbarnett/fix_services_bugs' into MS-3062_workspaces 2018-04-10 13:35:33 -05:00
Auxilus f1240b0454 resolves #9855 2018-04-10 22:20:27 +05:30
Wei Chen b630d5c327 Add encryption support for shellcode 2018-04-10 11:14:14 -05:00
James Barnett 462db05f4c Re-enable port search functionality 2018-04-10 11:10:32 -05:00
Adam Cammack 4495eea1ca Land #9836, Force #! for external modules 2018-04-10 11:08:15 -05:00
Adam Cammack 81ec33b0e4 Refactor script path check into base module loader 2018-04-10 11:07:21 -05:00
James Barnett 48c0bbfa7a Only display the services for a given workspace 2018-04-10 10:28:02 -05:00
cbrnrd 07b3b576f5 Fix parsing in get_cpu_info 2018-04-10 06:03:16 -04:00
cbrnrd 1276960d88 Fix typo in raise call 2018-04-10 05:54:35 -04:00
cbrnrd 0a79c5a15b Add docs to nosuid? 2018-04-10 05:53:19 -04:00
cbrnrd 6e6bc9bc6b Add noexec and nosuid
Also fix some regex bugs
2018-04-10 05:51:57 -04:00
Brent Cook c525bc3c0a Land #9848, handle 'check' command on modules that do not implement it 2018-04-09 22:27:21 -05:00
scriptjunkie 2ea875d304 Fix issue preventing psexec against non-powershell targets 2018-04-09 22:01:49 -05:00
James Barnett 90542779ff Audit models to ensure :workspace is passed only when needed 2018-04-09 14:50:37 -05:00
William Vu e17a788ab5 Remove stray dlog filling framework.log 2018-04-09 13:58:10 -05:00
William Vu 924a336287 Fix unsupported check_simple method for modules 2018-04-09 13:43:22 -05:00
Brent Cook 7b85edfde5 Land #9822, Fix backgrounded aggressive exploits 2018-04-09 09:36:12 -05:00
h00die a473dd04a8 Land #9813, Add etcd library and version scanner 2018-04-08 07:05:31 -04:00
Brent Cook 07c9be5130 Land #9812, Add Msf::Post::Linux::Kernel lib 2018-04-08 00:40:03 -05:00
Brent Cook 6c8ea2d883 also be sure to load executable modules if they don't have #! 2018-04-07 21:15:51 -05:00
Brent Cook 28ebe9d102 sanity check that external modules start with #! before executing 2018-04-07 16:31:34 -05:00
Brent Cook 6fb6570f99 delete old feature detection code from exploit base
This deletes some old code that apparently has been broken and somewhat unused for many years.

The 'derived_implementor?' method for modules relies on the debug output from Ruby in order to tell of a class implements a method, but the regex it used didn't work properly with any modern Ruby version until 2.5.x. This caused a random sleep to get inserted into certain payload staging operations, which actively breaks staging in certain scenarios (I'm not trying to address that here).

This also removes some ancient module feature detection code, which also is entirely unused today.
2018-04-07 12:47:42 -05:00
cbrnrd 04d5e8a765 Switch text processing to ruby
Also add pidof() and command_exists?()
2018-04-06 23:31:11 -04:00
Matthew Kienow 5a693aa89c Fix recursive cleanup issue 2018-04-06 13:49:16 -05:00
Brent Cook b20666656f ensure cleanup commands only get invoked once 2018-04-06 13:49:16 -05:00
Brent Cook 7a95024062 remove more ring operations 2018-04-06 13:49:16 -05:00
Brent Cook 730010aa06 remove RingBuffer from interactive command shells, fix token handling 2018-04-06 13:49:13 -05:00
scriptjunkie c303859c11 Fix #9827 2018-04-06 11:06:52 -05:00
cbrnrd c97eb42eba Finish up additions and add doc 2018-04-06 12:04:35 -04:00
Jon Hart 1cc16a55a8 Add other linux kernel post helpers 2018-04-06 08:28:53 -07:00
Brendan Coles ba88118d7a Update kernel_modules method to return Array 2018-04-06 15:02:43 +00:00
thecarterb a85f118bf2 Begin adding functions to Msf::Post::Linux::System 2018-04-05 21:32:58 -04:00
William Vu 7cc82a14b6 Update exploit driver with correct method 2018-04-05 18:56:19 -05:00
William Vu 17ed88b766 Fix backgrounded aggressive exploits
Any exploit that includes an aggressive stance is aggressive, regardless
of whether or not it has passive components.

This fix should prevent known-aggressive exploits from backgrounding.
2018-04-05 18:34:36 -05:00
James Barnett fe224f628b Remove update_host_via_sysinfo since it is unused 2018-04-05 14:20:25 -05:00
Brendan Coles 499b0a857f Add kernel_modules method 2018-04-05 05:25:36 +00:00
James Barnett 852bc3d237 Dont inject :workspace into every HTTP request. 2018-04-04 16:30:25 -05:00
James Barnett 6a02712674 Merge remote-tracking branch 'mkienow/MS-3061-remote-notes-read-update-delete' into MS-3062_workspaces 2018-04-04 16:03:43 -05:00
Jon Hart bc81cfad1f Fix error handling when trying to delete non-existent workspace 2018-04-04 11:40:21 -07:00
Jon Hart 63aabc00f1 etcd rubocop style 2018-04-04 11:01:38 -07:00
Jon Hart a6c31aceb2 Refactor common etc capabilities; add separate version scanner 2018-04-04 10:48:27 -07:00