Commit Graph

3586 Commits

Author SHA1 Message Date
Shelby Pace d1da7d84db added metadata and main function 2018-10-29 15:26:26 -05:00
bwatters-r7 b4c005c4d4 Land #10561, Add Windows local privilege escalation - CVE-2018-0824
Merge branch 'land-10561' into upstream-master
2018-10-25 13:22:31 -05:00
bwatters-r7 569c2e03c9 Fix exploit relics and documentation 2018-10-23 17:15:34 -05:00
bwatters-r7 927a29530b Remove duplicated files 2018-10-23 12:31:18 -05:00
Spencer McIntyre c71bbc1019 Remove spaces that msftidy caught 2018-10-23 10:13:44 -04:00
Spencer McIntyre 15e67de8fc Add the EMBED option for play_youtube.rb 2018-10-22 19:51:41 -04:00
Luisco100 74683ce951 Add Windows Post Module to disable Windows Defender signatures 2018-10-21 12:07:54 -05:00
bwatters-r7 47353553e5 Get everything together finally (still needs cleanup) 2018-10-19 18:15:44 -05:00
Spencer McIntyre 65d26d3a1e Use the DISPLAY environment variable when available 2018-10-19 14:35:35 -04:00
Brent Cook ff0ee51da1 Land #10686, ARGS, TIMEOUT, and output to upload_exec module
Merge remote-tracking branch 'upstream/pr/10686' into upstream-master
2018-10-04 04:28:02 -05:00
William Vu e0a664c0cd Improve prints, use FileDropper, and bump TIMEOUT 2018-10-02 21:53:18 -05:00
Brent Cook faae2ac2f9 Land #10725, move post/android/gather/subinfo 2018-10-02 05:14:41 -05:00
Brent Cook 2c0d4de70b Land #10732, add api key for android wlan_geolocate 2018-10-02 05:09:10 -05:00
Tim W 6dd36bd8da Land #10427, add OSX VNC password gather module 2018-10-02 14:47:51 +08:00
Tim W b5cf682169 cleanup post/osx/gather/vnc_password_osx and add loot/credentials 2018-10-02 14:22:09 +08:00
Tim W b993d74f6c minor tweak 2018-10-02 11:41:58 +08:00
Tim W 5cfc19b804 fix post/multi/gather/wlan_geolocate on Android 2018-10-02 11:35:47 +08:00
Tim W 37dc0ce64d fix post/android/gather/subinfo.rb path 2018-10-01 16:54:46 +08:00
Agora Security b678db8bb6 Remove spaces at EOL 2018-09-29 15:29:51 -04:00
Agora Security 8d1d6ff29f Create PureVPN Credential Collector Post Explotation Module 2018-09-28 12:00:34 -04:00
William Vu 3bda794f00 Update upload_exec with chmod 2018-09-26 18:46:43 -05:00
Tim W 4adca52103 create chmod helper function 2018-09-26 18:46:42 -05:00
William Vu 81d020f810 Add a couple more Unix platforms
This is so we don't trigger the session compatibility warning. These
platforms have been worked on most recently.
2018-09-26 18:46:42 -05:00
William Vu a119465495 Tell the user when there's blank output 2018-09-26 18:46:42 -05:00
William Vu 6dd6e8abcb Change vprint to print because we test output
Fewer surprises this way when people don't set VERBOSE.
2018-09-26 18:46:42 -05:00
William Vu 42fab6266d Prefer vprint_line for better formatting 2018-09-26 18:46:42 -05:00
William Vu 40f19efe2c Don't use cmd.exe /c start so we can fetch output 2018-09-26 18:46:42 -05:00
William Vu dc1fddd31e Move chmod so Windows doesn't do it 2018-09-26 18:46:42 -05:00
William Vu d5f5ef103f Refactor everything and add command output 2018-09-26 18:46:42 -05:00
William Vu 410abdca80 Tweak TIMEOUT to match cmd_exec's default 2018-09-26 18:46:42 -05:00
William Vu 1df6c43b12 Add ARGS and TIMEOUT options to upload_exec
Credit to @bcoles for the initial patch.
2018-09-26 18:46:42 -05:00
Brent Cook f08cb18afd Land #10594, Fix hashdump and user enumeration on new macOS versions 2018-09-24 22:18:24 -05:00
Brent Cook 3e61a98f25 use non-system users for hashdump 2018-09-24 22:17:58 -05:00
h00die ee0776b095 print when not verbose 2018-09-20 20:54:41 -04:00
h00die 44304d33b9 fix travis issues 2018-09-15 07:59:53 -04:00
h00die af7d76b52d changes from first review 2018-09-14 20:10:59 -04:00
h00die 900ea620c7 msftidy 2018-09-13 21:28:49 -04:00
h00die 6cef61ddbc finish srsexec add docs 2018-09-13 21:20:09 -04:00
h00die 2f53e370c9 srsexec working properly 2018-09-13 16:37:25 -04:00
h00die 4a2f2107e5 move gather to escalate 2018-09-13 14:07:50 -04:00
h00die 4bb16f96a7 debugging srsexec 2018-09-13 14:07:50 -04:00
h00die 1af1895ac8 first attempt at srsexec 2018-09-13 14:07:50 -04:00
William Vu 87eb600510 Land #10611, mRemote creds gather module fixes
Also update #10612 to align with these changes.
2018-09-10 15:25:09 -05:00
William Vu 93a73f5e71 Fix store_loot OID
It's supposed to be a loot type, not the filename (now stored).
2018-09-10 15:19:28 -05:00
William Vu 8b4820004d Land #10612, store_loot text/xml ctype fixes 2018-09-10 15:07:06 -05:00
William Vu 3ec4d2f22b Normalize loot type OID
1. Include the vendor, product, and technology
2. Content type is already reported, extension changed
3. Original filename including extension is also reported

Can we get some sort of standard on the OID?
2018-09-10 15:06:07 -05:00
h00die 39a2d9d2a8 save xml files as xml 2018-09-09 21:24:39 -04:00
h00die 0072d9b9b1 save as xml since it is 2018-09-09 21:22:15 -04:00
h00die 70e22707c0 vi loves tabs but i dont 2018-09-09 21:19:17 -04:00
h00die f926f6e9af fix pathing in mremoteng 2018-09-09 21:07:47 -04:00