bwatters-r7
fcc579377f
Land #9565 , Reverse TCP x64 RC4 via max3raza's rc4_x64 asm
2018-03-02 07:34:45 -06:00
Jon Hart
f446f726ad
Land #9596 , fixes #9592 , broken NTP DRDoS modules
2018-03-01 17:12:00 -08:00
christopher lee
4f6b1de9a3
Merge branch 'master' into goliath
2018-03-01 14:14:39 -06:00
Sonny Gonzalez
883654f0ea
Land #9653 , fix Y2k38 issue (until Jan 1, 2038)
2018-03-01 09:13:41 -06:00
Brent Cook
4fec2e758d
make fix more precise, based on https://github.com/rapid7/metasploit-framework/pull/2343
2018-03-01 08:59:55 -06:00
Brent Cook
27bd2a4a9f
workaround Y2k38 issues in java certificate generation
2018-03-01 08:41:28 -06:00
James Barnett
06d2482e86
Implement services update
...
NOTE: This changes functionality for the services command flags.
Previously -s and -p were used for searching for services.
Now the commands will only be used for adds/updates.
If you would like to search, please use -s and pass a search string
2018-02-28 15:12:23 -06:00
Matthew Kienow
2d5f089ee6
Land #9646 , fix stale module cache issue
2018-02-28 15:17:00 -05:00
Jeffrey Martin
425f949bf8
Land #9638 , treat 'password must change' as a successful login
2018-02-28 11:28:38 -06:00
christopher lee
0949e0a501
Don't munch exception
2018-02-28 11:28:07 -06:00
christopher lee
cea61e7aa4
Fix bug with remove_from_cache
2018-02-28 11:21:34 -06:00
christopher lee
1686b82a40
Adhere to style guide by using unless
2018-02-28 11:11:26 -06:00
christopher lee
8b4c7b886f
Updated to use delete_if
2018-02-28 11:00:40 -06:00
christopher lee
964be3b5f0
Fix problem with stale module cache
2018-02-28 08:41:14 -06:00
James Barnett
dffbc67e71
Implement service delete
...
Also fix bug searching for services by host address
2018-02-27 17:17:07 -06:00
Brent Cook
9597e5294d
treat MUST_CHANGE + PASSWORD_EXPIRED as valid
2018-02-27 15:21:21 -06:00
James Barnett
c90fabee60
Implement remote service create
2018-02-27 14:20:43 -06:00
James Barnett
96709600e1
Condense services to use opts instead of individual params
2018-02-27 13:38:50 -06:00
James Barnett
9dc6089fcf
Merge branch 'goliath' into MS-2909
2018-02-27 11:14:15 -06:00
Jon Hart
f09c5eafc7
Appease hound
2018-02-27 04:12:58 -06:00
Jon Hart
46299dff00
The DRDOS mixin operates on strings, so make the bindata'd NTP classes cooperate
2018-02-27 04:12:57 -06:00
Jon Hart
d7853aaf60
Revert "update NTP drdos lib to use correct method on bindata objects"
...
This reverts commit 166070e9c37a4130f976f806116881c70a8401c6.
2018-02-27 04:12:57 -06:00
Brent Cook
bcf5918fb6
update NTP drdos lib to use correct method on bindata objects
2018-02-27 04:12:57 -06:00
Brent Cook
66e3ac4c76
treat 'password must change' as a successful login
2018-02-26 17:57:31 -06:00
William Vu
0e4fc48df4
Fix #9602 , a little defensive programming
...
Check for a nil message and unnecessary auth failures while looping.
2018-02-26 16:52:25 -06:00
James Barnett
847b9ba0d0
Add option to delay between runthroughs
2018-02-26 16:27:03 -06:00
Auxilus
4b0cb7631c
Update pipe_auditor.rb
2018-02-25 02:18:15 +05:30
Auxilus
3f93055a72
Add pipe_auditor
2018-02-24 11:14:03 +05:30
Auxilus
be77cb2a2b
Add pipe_auditor
2018-02-24 11:04:41 +05:30
James Barnett
1c9c1dc1fc
Add password spray option to brute force
2018-02-23 12:30:11 -06:00
h00die
c7bbc6eca4
juniper post enum module
2018-02-22 21:08:21 -05:00
UserExistsError
e19a071910
add bind_named_pipe x86
2018-02-22 19:03:37 -07:00
Matthew Kienow
ecad74cf99
Add cmd_vulns search and delete operations
2018-02-22 19:05:18 -05:00
James Barnett
1cee532526
Merge branch 'rapid7/master' into goliath
2018-02-22 14:49:45 -06:00
Matthew Kienow
22752518ea
WIP remote vuln read, update, delete
2018-02-22 13:53:22 -05:00
Matthew Kienow
7ad7188824
Fix comment typo
2018-02-22 11:29:44 -05:00
Jacob Robles
738d6ab33a
Land #9604 , Fix logged errors when running without Python 3.6 / gmpy2
2018-02-22 08:11:30 -06:00
Brent Cook
3f88e59516
handle Python 3.5/3.6 differences so we always have a UTF-8 string
2018-02-21 21:54:27 -06:00
William Vu
3880f6a65e
Finally fix "Unknown admin user ''" after 2yrs
...
The failed password auth was necessary after all. I misread the PoC. :'(
Apparently the password auth sets the username, while the backdoored
keyboard-interactive auth sets the password.
2018-02-21 20:44:35 -06:00
James Barnett
d4440d049d
Merge branch 'goliath' of github.com:clee-r7/metasploit-framework into goliath
2018-02-21 11:16:31 -06:00
James Barnett
3005a8b7ce
Merge branch 'rapid7/master' into goliath
2018-02-21 11:16:05 -06:00
Brent Cook
78822fd799
Land #9524 , prefer 'shell' channels over 'exec' channels for ssh CommandStream
2018-02-21 06:59:09 -06:00
Matthew Kienow
31cc516395
Merge branch 'goliath' into standardize_proxy_errors
2018-02-20 16:47:34 -05:00
James Barnett
b3642b1079
Address PR comments
2018-02-20 15:30:37 -06:00
James Barnett
3c9092f9a6
Complete services GET
2018-02-20 14:41:49 -06:00
James Barnett
09ae4ac8ac
Add more info to console output
2018-02-20 13:34:33 -06:00
Brent Cook
99965c142b
remove duplicate check
2018-02-20 04:42:49 -06:00
Brent Cook
bb3a11dd20
use ctrl-d to cancel input instead
2018-02-20 04:40:00 -06:00
Tim W
5083150002
fix #9112 , improve error message on failure
2018-02-20 18:06:03 +08:00
Brent Cook
f5f7b4d25a
handle sessions still open
2018-02-20 03:31:20 -06:00