loftwing
f777e2ab3b
Merge branch 'master' into fix_nmap_imports
...
bringing branch up to date
2017-09-27 12:52:27 -05:00
loftwing
51c1cddb5c
Removed requirement for a host to have ports
2017-09-27 12:43:50 -05:00
OJ
3068fb6e7e
Fix getprivs and getsystem
...
This is a fix for crap and stupid stuff that I did half way through the
packet pivot code. I was working on some priv stuff at the same time,
and when I realised that the work I was doing was not sensible as part
of the packet pivot PR, I failed to revert my changes properly.
As a result I broke `getprivs` and `getsystem`. I am sorry. And I'm
ashamed.
2017-09-27 16:31:42 +10:00
Christian Mehlmauer
81406a073e
tidy up code
2017-09-27 08:01:48 +02:00
Christian Mehlmauer
41e3895424
remove checks for hardcoded name
2017-09-27 07:41:06 +02:00
Brent Cook
0d31c1c9a8
Land #8945 , fix issue where we can call shutdown on a closed socket
2017-09-26 16:01:51 -05:00
Brent Cook
71f13db918
style updates
2017-09-26 15:58:43 -05:00
Adam Cammack
0408979e54
Land #9005 , Remove spurious commas
2017-09-26 15:36:33 -05:00
Brent Cook
cad36ee14e
Land #8952 , suhosin compatibility added to staged payload
2017-09-26 15:22:36 -05:00
James Barnett
0b29408aa2
Allow filtering of loot
2017-09-26 13:48:01 -05:00
Adam Cammack
968ae8e267
Land #8925 , Allow edit to optionally take a path
2017-09-26 13:32:39 -05:00
root
ec51ab2547
Exit function param bug
2017-09-26 11:16:41 +03:00
William Vu
d234409d40
Land #8918 , wp_admin_shell_upload multisite fix
2017-09-25 13:54:10 -05:00
Josh Hale
0e59f47095
Comments and whitespace check
2017-09-24 16:37:30 -05:00
Josh Hale
23e1b5b872
Add search term support
2017-09-24 16:25:27 -05:00
Josh Hale
664fd1f7e3
Support single file path
2017-09-24 16:13:26 -05:00
Josh Hale
9f0ff3f3a3
Add in sort and order options
2017-09-23 23:14:21 -05:00
Josh Hale
2068514800
Add initial lls command
2017-09-23 21:38:53 -05:00
Brent Cook
d73e95e7db
Land #8946 , fix #8879 , APK injection edge cases
2017-09-23 20:48:12 -04:00
James Barnett
ee3e354f4f
Get posting working with loot -a
2017-09-22 16:13:58 -05:00
James Barnett
40abbccb03
Merge remote-tracking branch 'rapid7/master' into proxy_loot
2017-09-22 14:10:02 -05:00
Pearce Barry
8853193542
Land #8987 , Fix opening non-existant files on unix
2017-09-22 13:15:44 -05:00
James Barnett
f87adf53c6
Print host with loot output
2017-09-22 13:06:44 -05:00
Metasploit
68fa3d45f3
Bump version of framework to 4.16.9
2017-09-22 10:05:19 -07:00
Adam Cammack
62aac450f8
Change confusing variable name
2017-09-22 11:43:26 -05:00
Adam Cammack
4ea8f639a3
Add host and service reporting to external modules
2017-09-22 11:42:32 -05:00
h00die
36fc01d375
check files before opening
2017-09-21 19:36:19 -04:00
James Barnett
812ad9f9cb
loot printing (maybe) working
2017-09-21 15:20:49 -05:00
James Barnett
9f95f88035
Fix a couple of bugs.
2017-09-19 16:35:18 -05:00
Brent Cook
d8ee4150e6
move client core constants closer to where they are actually used
2017-09-19 03:22:13 -05:00
Brent Cook
5b579baa33
remove unused Linux migration code
2017-09-19 03:04:43 -05:00
Brent Cook
0e15b2d002
remove unneeded METERPRETER_TRANSPORT constants
2017-09-19 02:59:05 -05:00
James Barnett
765ea01e9f
loot posting working
2017-09-18 15:58:40 -05:00
RageLtMan
271bd4c4fe
Rename METERPRETER_TRANSPORT_SSL to ..._TCP
...
Since OpenSSL is no longer packages with meterpreter, and transport
secrecy is handled at L7, the SSL cons name doesn't apply anymore.
Rename METERPRETER_TRANSPORT_SSL to METERPRETER_TRANSPORT_TCP for
consistency with wire-level implementation.
2017-09-17 14:31:15 -04:00
Metasploit
b2f5bd16e6
Bump version of framework to 4.16.8
2017-09-15 10:02:38 -07:00
christopher lee
2cd9649139
Added msf red connection mechanism
2017-09-14 12:57:03 -05:00
Tim
9afb09813f
update cmd_edit_help text
2017-09-13 14:54:35 +08:00
Anant Shrivastava
363d3c28d7
suhosin comaptibility added to staged payload
2017-09-12 08:49:53 +05:30
Craig Smith
b218cc3c7f
Merge branch 'master' into hw_auto_padding_fix
2017-09-11 18:30:34 -07:00
Craig Smith
ad9329993d
Added better padding and flowcontrol support.
2017-09-11 18:20:57 -07:00
Jeffrey Martin
a58552daad
Land #8825 , Handle missing util.pump in nodejs shell payloads
2017-09-11 15:32:21 -05:00
Tim
c3fa30707d
fix #8879 , fix APK injection edge cases
2017-09-11 12:03:20 +08:00
RageLtMan
8d60fdf9e7
Bug - HTTP Client can call :shutdown on closed IO
...
When running Rex HTTP client calls across pivots, pivot sockets
can get closed by the remote server, resulting in a closed :conn
object within the client object. The clients :close method calls
self.conn.shutdown which raises an 'IOError closed stream' on what
is effectively a TCPSocket object in a closed state (under the Rex
abstraction).
Resolve by moving the self.conn.closed? check into the conditional
just above the :shutdown call, and remove if from the underlying
:close call as calling :close on an already closed TCPSocket
returns nil as opposed to throwing an exception like the :shutdown
method.
2017-09-10 03:09:59 -04:00
Metasploit
faa84faf25
Bump version of framework to 4.16.7
2017-09-08 15:38:22 -07:00
Metasploit
f5a73f3efe
Bump version of framework to 4.16.6
2017-09-08 10:03:41 -07:00
christopher lee
000f561d6f
Added session data export
2017-09-08 11:09:15 -05:00
Brent Cook
b9fdca04a1
rework logical fix for #8884 to function with bootstrap code
2017-09-07 01:43:58 -05:00
Brent Cook
c365db135a
pull in GUID fixes from #8818
2017-09-07 01:39:49 -05:00
Brent Cook
9877a61eff
bump payloads
2017-09-07 01:36:25 -05:00
OJ
b38a962c09
Fix default session GUID when not specified
...
This resolves an issue with stategless HTTP sessions
2017-09-07 01:36:25 -05:00