Commit Graph

9290 Commits

Author SHA1 Message Date
h00die 189f29e534 Land #10572 eaton ssh private key scanner 2018-11-15 17:16:36 -05:00
h00die de014f0599 remove variable only used once 2018-11-15 17:14:13 -05:00
h00die 8b4cf2c3e2 Merge branch 'master' of https://github.com/rapid7/metasploit-framework into capture_docs2 2018-11-15 17:02:50 -05:00
h00die 3d53170694 fail_with instead of error and return 2018-11-15 17:01:52 -05:00
Christopher Lee 38bea6c29c Added msmailprobe to msf 2018-11-14 16:15:11 -06:00
Chris Higgins 4987f67b9b Land #10925, smb_login error/status message 2018-11-14 13:19:04 -06:00
BrianWGray 3849d5de18 resolve description update request 2018-11-13 16:21:43 -05:00
Brent Cook f2712ecdf6 Land #10607, Add External Module: office365userenum.py 2018-11-13 10:57:05 -06:00
Green-m 7a4770790c Land #10938, add docs for modules and fix bug.
Add docs for auxiliary module http_basic/imap/mysql, and fix a bug
in modules/auxiliary/server/capture/mysql.rb
2018-11-13 16:22:03 +08:00
thomas.labadie 11a2fa7f0d Space at EOL removed from description 2018-11-13 00:23:21 +01:00
thomas.labadie 9d1554498d WP GDPR Compliance plugin exploit - privsec to admin registering 2018-11-12 23:33:47 +01:00
BrianWGray 1c2da8a5c8 correct trailing space issue 2018-11-10 15:40:03 -05:00
BrianWGray 33f624bbb2 Module updated to reflect requested changes 2018-11-10 14:36:06 -05:00
h00die bf15fa0770 hash not password for mysql 2018-11-09 18:32:21 -05:00
h00die c31c75c790 fix mysql capture store creds 2018-11-09 18:18:50 -05:00
h00die 792b451f40 capture server docs and updates 2018-11-08 21:23:27 -05:00
root f192b50a8e Catch exceptions 2018-11-08 18:47:56 +00:00
root 1fbf779f9c Added more verbose output 2018-11-08 18:35:15 +00:00
root 88e4d384d2 increased default timeout value 2018-11-08 16:13:55 +00:00
h00die 3c6f2157ae land #10895 fix vmware_http_login undefined variables 2018-11-07 08:45:51 -05:00
Jacob Robles 682433f62e smb_login error/status message 2018-11-05 17:49:58 -06:00
Brent Cook cb229411bc Land #10888, Fix Net::SSH::CommandStream session open failure 2018-11-05 11:15:09 -06:00
Green-m 708d067e65 Land #10919, Add doc for ftp capture module.
And add a custom option banner for it.
2018-11-05 14:15:52 +08:00
h00die 04218cff39 ftp capture 2018-11-04 21:46:01 -05:00
Shaksham Jaiswal e3246a9b88 made fixes 2018-11-04 18:07:43 +05:30
William Vu e9b3502f98 Fix Net::SSH::CommandStream session open failure
I suspected this might be a problem for libssh servers.
2018-11-02 01:08:05 -05:00
Brendan Coles a80e571355 Update style 2018-11-01 07:26:12 +00:00
Brendan Coles ca16e93200 rescue => e 2018-11-01 07:24:28 +00:00
Brendan Coles ffecd189ee Report rhost, as ip is undefined 2018-11-01 07:23:44 +00:00
root b705059bca Added channel name length check 2018-10-28 20:18:58 +00:00
root 60aa1181ca Add IBM WebSphere MQ Login Bruteforce module
Used to bruteforce usernames that can connect to the Queue Manager. The name of a valid server-connection channel without SSL configured is required, as well as a list of usernames to try.

* IBM Downloads page: https://developer.ibm.com/messaging/mq-downloads/
* Tested on IBM MQ 7.5, 8 and 9
* Usage:
  * Download and install MQ Server from the above link
  * Create a new Queue Manager
  * Create a new channel (without SSL)
  * Allow remote connections for admin users by removing the CHLAUTH record that denies all users or configure access for a specific username.
  * Run the module
2018-10-28 19:29:45 +00:00
pkb1s 92d5ab469c Update ibm_mq_channel_brute.rb 2018-10-28 18:21:54 +00:00
Brendan Coles 296d9a08eb Removing unnecessary line
Co-Authored-By: pkb1s <petkoutroubis@gmail.com>
2018-10-28 18:10:51 +00:00
Brendan Coles 3e3be18189 Using print_line instead of print("\n")
Co-Authored-By: pkb1s <petkoutroubis@gmail.com>
2018-10-28 18:10:14 +00:00
Brendan Coles f8c829dc81 Using print_line instead of print("\n")
Co-Authored-By: pkb1s <petkoutroubis@gmail.com>
2018-10-28 18:10:09 +00:00
Brendan Coles 67e8a7ce13 Changing CHANNELS_FILE option type
Co-Authored-By: pkb1s <petkoutroubis@gmail.com>
2018-10-28 18:08:12 +00:00
Brendan Coles f51a95465e Changed http to https in metasploit url
Co-Authored-By: pkb1s <petkoutroubis@gmail.com>
2018-10-28 18:07:20 +00:00
pkb1s a6135e3738 Added "increase timeout" message 2018-10-28 17:48:15 +00:00
root 02d9d0f006 Add IBM WebSphere MQ Queue Manager Name and MQ Version Enumeration module
Run this auxiliary against the listening port of an IBM MQ Queue Manager to identify its name and version. Any channel type can be used to get this information as long as the name of the channel is valid.

* IBM Downloads page: https://developer.ibm.com/messaging/mq-downloads/
* Tested on IBM MQ 7.5, 8 and 9
* Usage:
  * Download and install MQ Server from the above link
  * Create a new Queue Manager
  * Create a new channel (without SSL)
  * Run the module
2018-10-28 16:09:17 +00:00
root a23cb7dfe8 Add IBM WebSphere MQ Channel Name Bruteforce module
Uses a dictionary to bruteforce MQ channel names. For all identified channels it also returns if SSL is used and whether it is a server-connection channel.

* IBM Downloads page: https://developer.ibm.com/messaging/mq-downloads/
* Tested on IBM MQ 7.5, 8 and 9
* Usage:
** Download and install MQ Server
** Create a Queue Manager
** Create a new channel (without SSL)
** Run the module
2018-10-28 15:22:27 +00:00
William Vu e1a7c35834 Clean up check_banner 2018-10-25 05:20:20 -05:00
Green-m f90992dc08 Fix typo. 2018-10-25 17:55:01 +08:00
Green-m 760b14e71d Update the version match code. 2018-10-25 15:33:54 +08:00
Wei Chen 2ab9a003d4 Land #10864, Add Cisco WebEx RCE Modules 2018-10-24 16:20:00 -05:00
Wei Chen f52cbdf9d7 Change option types 2018-10-24 16:18:17 -05:00
Wei Chen 4ec7e41f9e Change option type 2018-10-24 16:16:03 -05:00
Shelby Pace 3729e9ed7b added description, references 2018-10-24 09:46:00 -05:00
egre55 d1111ace5d fixes 2018-10-23 17:19:14 -04:00
Shelby Pace 34ae9c38f9 added WebEx modules, arch check 2018-10-23 15:51:23 -05:00
William Vu 9c49acb924 Fail scanner instead of returning 2018-10-23 10:07:38 -05:00