7175126319
Update title for smb_doublepulsar_rce
2020-02-03 11:19:20 -06:00
fa6573f8e7
Note arch in supported target
2020-02-03 11:16:16 -06:00
a3717e13f6
Unf*ck PAYLOAD being set for neutralization
2020-02-03 11:16:16 -06:00
e12d993027
Move SMB DOPU module to match new naming scheme
2020-02-03 11:16:16 -06:00
355ddba6c9
Prefer exploit.rb's rand_text wrapper
2020-01-22 16:37:36 -06:00
ce991071e4
Land #12524 , update most python code with python 3 compatibility
2019-12-23 14:49:08 -06:00
fde942bc37
Land #12517 , replace CheckScanner mixin with CheckModule, which works with anything
2019-12-16 17:40:10 -06:00
5fc561e916
Land #12661 , more docs
2019-12-13 17:42:36 -05:00
b6ac86dc23
Update group_policy_startup.rb
2019-12-11 09:41:08 -07:00
f0ac300338
h00die review
...
Thanks h00die for the in depth review, as always.
2019-12-10 13:37:13 -07:00
faadf8e283
Land #12646 , ms04_007 reliability and stability updates
2019-12-03 20:22:37 -05:00
d65757faa4
further killbill fixes
2019-12-03 20:22:05 -05:00
f56b262eec
Update modules
2019-12-03 10:36:34 -06:00
3e7857d146
Add reliability and stability notes to ms06_040_netapi
2019-12-03 06:32:02 +00:00
ba05e91d19
Add Reliability notes
2019-11-30 06:28:12 +00:00
a6723c12fb
Add stability notes to ms04_007_killbill
2019-11-30 06:16:41 +00:00
b22d2a1685
Update prints in DOUBLEPULSAR exploit check method
...
vprint_good should be print_warning, and most vprints should be print,
even if in check, since check is critical functionality.
2019-11-25 18:33:46 -06:00
45e2a3b229
Address RuboCop review
2019-11-13 02:10:03 -06:00
7a4c48ee27
Fix style in exploit/windows/smb/doublepulsar_rce
2019-11-13 02:04:14 -06:00
4877032e8a
Update exploit/windows/smb/doublepulsar_rce info
2019-11-13 00:30:09 -06:00
c9948c037d
Apply suggestions from code review
...
- Change executable in shebang from python3 to python
- Revert changes to files that will only run as python2
Co-Authored-By: acammack-r7 <adam_cammack@rapid7.com >
2019-11-01 19:20:22 -07:00
10b5df1c4f
Change all python2.7 shebangs to python3.
...
Remove utf-8 encoding declarations, as this is the default for python3.
2019-10-31 15:10:58 -07:00
8563a29003
Convert all python code to python3. Fixes #12506 .
2019-10-31 14:16:14 -07:00
905eb17132
begining to fix spelling errors
2019-10-05 14:26:34 -04:00
3edb0e3ef5
Reword module title and description
2019-09-30 14:28:53 -05:00
4b5c6002b4
Move implant neutralization code to method
2019-09-30 14:18:41 -05:00
d5a26b892a
Remove unused status codes in check
2019-09-30 14:18:41 -05:00
32728742ea
Clarify why we can't proceed
2019-09-30 14:18:41 -05:00
4975a24900
Refactor methods to use @tree_id ivar
...
Whoops, forgot this when I ivar'd it.
2019-09-30 14:18:41 -05:00
b1f2fa4e64
Don't hardcode body size
2019-09-30 14:18:41 -05:00
ed0b856aac
Prefer << over +=
...
Oops, spending too much time with Python.
2019-09-30 14:18:41 -05:00
255af7f2d3
Simplify data count calculation
2019-09-30 14:18:41 -05:00
ade715f88a
Update disclosure date to dump date
2019-09-30 14:18:41 -05:00
7417aa8a30
Rename module and note kill target in description
2019-09-30 14:18:41 -05:00
0392521887
Fix same multiplex ID meaning implant not detected
2019-09-30 14:18:41 -05:00
33d7a2a818
Remove SMB::Client::Authenticated
...
They're fine as advanced options, since this targets a null session.
2019-09-30 14:18:41 -05:00
6b4cf4970e
Don't support x86 at the moment
2019-09-30 14:18:41 -05:00
aa2f7d378a
Create method for kernel shellcode size
2019-09-30 14:18:41 -05:00
8190e7067a
Calculate kernel shellcode size
2019-09-30 14:18:41 -05:00
05b83ff5da
Calculate max payload size automagically
2019-09-30 14:18:41 -05:00
8cae04f194
Use constant for maximum shellcode size
2019-09-30 14:18:41 -05:00
fb1bb0fd2f
Don't use NOPs because Peter would be sad
2019-09-30 14:18:41 -05:00
530bf9bc0c
Finish RCE with Jacob's help
2019-09-30 14:18:41 -05:00
3a5a05f3a9
Use recently enhanced Rex::Text.xor
2019-09-30 14:18:41 -05:00
90cb0e039f
Add DOUBLEPULSAR payload execution
2019-09-30 14:18:41 -05:00
4d48515ae2
Disable a couple of modules for autoexploitation that produce false positives on newer systems.
2019-08-15 16:33:40 -05:00
0559fda9db
Land #11873 , allow calling methods across related modules
2019-05-23 13:56:27 -05:00
a0e90c0848
Remove references to doc.microsoft.com bulletin
...
MSB references point to this location
2019-05-23 07:01:21 -05:00
e836bdceca
Force check only in ETERNALBLUE
2019-05-22 20:07:56 -05:00
5064f2ce01
Add ForceExploit
2019-05-22 17:50:31 -05:00
William Vu