Commit Graph

3586 Commits

Author SHA1 Message Date
Auxilus ec55a631ef Check if the data is nil before pasisng to store_loot
when I ran this module for linux/aarch64/meterpreter_reverse_tcp for payload running in termux, it was obvious that without root the commands will return error, It still created empty files in `.msf4/loot`

```
msf5 post(linux/gather/enum_network) > run
                                                                                                  
[*] Running module against localhost.localdomain
[*] Module running as /system/bin/sh: /usr/bin/whoami: not found
[+] Info:
[+]
[+]     Linux localhost 3.10.84-perf+ #1 SMP PREEMPT Tue Oct 24 01:07:25 CST 2017 aarch64 Android
[*] Collecting data...
[+] /system/bin/sh: /sbin/route: not found
[-] Failed to open file: /etc/ssh/sshd_config: core_channel_open: Operation failed: 1
[-] unable to get data for Network config
[+] Network config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_735775.txt
[-] unable to get data for Route table                                                            
[+] Route table stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_599334.txt
[-] unable to get data for Firewall config
[+] Firewall config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_790893.txt
[-] unable to get data for DNS config
[+] DNS config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_867340.txt
[-] unable to get data for SSHD config                                                           
[+] SSHD config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_900906.txt                                                                  [-] unable to get data for Host file
[+] Host file stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_179877.txt
[-] unable to get data for Active connections                                                     
[+] Active connections stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_656035.txt                                                           [-] unable to get data for Wireless information
[+] Wireless information stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_168144.txt
[-] unable to get data for Listening ports                                                        
[+] Listening ports stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_999548.txt                                                              [-] unable to get data for If-Up/If-Down
[+] If-Up/If-Down stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_860869.txt
[*] Post module execution completed                                                               
msf5 post(linux/gather/enum_network) >
```
2018-05-05 10:52:08 +05:30
Brendan Coles cb29b4cf7a Update Local Exploit Suggester - Fix #9974 2018-05-05 04:41:58 +00:00
Borja Merino 916dfa56fe Add author name to the wlan_probe_request post-exploitation module 2018-05-03 11:41:09 +02:00
Auxilus 02920728a4 Update sub_info.rb 2018-05-03 02:51:39 +05:30
Auxilus 7a47e2aa25 Update sub_info.rb 2018-05-02 22:02:09 +05:30
Auxilus bd92d189f4 Update sub_info.rb 2018-05-02 21:48:01 +05:30
Auxilus e87116a5c1 Minor fixes 2018-05-02 20:51:30 +05:30
Auxilus 1c89bd80d9 Update sub_info.rb 2018-05-02 20:44:21 +05:30
Auxilus c6df12dccb Add android post module to extract subscriber info 2018-05-02 20:41:54 +05:30
Auxilus 98d81476f7 Fix get_password for pwds with ", = etc 2018-05-02 19:09:36 +05:30
Auxilus fa727f5394 Update wireless_ap.rb 2018-05-02 18:22:00 +05:30
Auxilus 773e06b3ca Update wireless_ap.rb 2018-05-02 01:28:15 +05:30
Auxilus 2817ff25cb Update wireless_ap.rb 2018-05-02 00:00:34 +05:30
Auxilus 614de11a9c Update wireless_ap.rb 2018-05-02 00:00:05 +05:30
Auxilus 9b00a5cffb store loot 2018-05-01 23:10:29 +05:30
Auxilus 29467c2e37 Stylize the output 2018-05-01 22:58:17 +05:30
Auxilus bc0cad43bc Update wireless_ap.rb 2018-04-30 19:19:12 +05:30
Auxilus ca7afae730 Add wireless_ap post module for Android
This module displays all the saved wireless AP creds in the target device
2018-04-30 19:02:30 +05:30
Brendan Coles 3351a59efb Update linux/gather/enum_protections 2018-04-29 06:52:47 +00:00
Chris Long 9ae0acd489 Removing debug statement 2018-04-28 15:56:56 -07:00
Chris Long c7caac627b Replacing Import with Fiddle, adding fork compatibility for High Sierra 2018-04-28 15:53:23 -07:00
bwatters-r7 f12f6d54a5 Land #9862, Post-exploitation module for meterpreter (Windows) to send wireless probe requests
Merge branch 'land-9862' into upstream-master
2018-04-20 14:32:01 -05:00
Tim W 1547a47026 Land #9784, add osx high sierra APFS password disclosure post module 2018-04-18 14:27:22 +08:00
Tim W 72cd97d3e4 minor documentation and comment tweaks 2018-04-18 14:22:32 +08:00
Chris Long b282db3c6a Fixing broken imports for keylog_recorder.rb and improving control chars 2018-04-12 02:08:53 -07:00
Borja Merino 2d33320921 Added a post-exploitation module to send wireless probe requests 2018-04-11 16:43:33 +02:00
Tim W ee6f83c281 match newfs_apfs regex 2018-04-10 14:45:14 +08:00
Aaron Soto be18930f12 Cleaned up output, only querying for %WINDIR% if necessary 2018-04-09 15:27:50 -05:00
Auxilus c07f2f1a09 Update run_as.rb 2018-04-09 21:24:16 +05:30
Auxilus c34b796f13 Remove temp file from dist after cmd execution
https://github.com/rapid7/metasploit-framework/issues/9830
2018-04-09 20:14:01 +05:30
thecarterb 3f40f43609 Make final output more readable 2018-04-07 11:05:47 -04:00
bwatters-r7 0faf2f4e04 Land # 8007, Added NTDSgrab module to metasploit.
Merge branch 'land-8007' into upstream-master
2018-04-03 15:56:37 -05:00
bwatters-r7 e17be05e6a Land #9595, Add post module RID Hijacking on Windows 2018-04-03 14:12:34 -05:00
cbrnrd 0806c0725f Fix some bugs with command exits
Also fix a bug in check()
2018-04-03 10:35:49 -04:00
r4wd3r d6dc0a2d4f Adjust rid_hijack.rb code style with rubocop recommendations. 2018-04-03 04:57:41 +02:00
cbrnrd c401872af6 Fix some logic flaws and other review things
Also make the output more reliable
2018-03-30 19:20:20 -07:00
cbrnrd 76af9d5a15 Add apfs_encrypted_volume_passwd.rb 2018-03-29 23:47:45 -07:00
Jacob Robles 26463b33a2 Land #9636, Improve post module persistence_exe 2018-03-26 17:48:53 -05:00
Jacob Robles 57b048fbf7 Remove requires, changed in-place modification 2018-03-26 17:46:18 -05:00
Brent Cook d6871f5733 Land #9614, Juniper post enum module 2018-03-06 10:29:56 -06:00
Green-m 18a1593de7 Clean up registry and fix bug when cleaning the windows local file 2018-03-02 02:31:09 -05:00
Green-m d1e91dfdfd Fix bug 2018-03-01 22:19:03 -05:00
Green-m 2bb8fc7325 Fix bug 2018-03-01 22:16:59 -05:00
Green-m 174c47195a Add options LocalExePath, StartupName, ServiceDescription 2018-02-27 05:32:07 -05:00
Green-m fcd6e8acab Add options LocalExePath, StartupName, ServiceDescription 2018-02-27 05:27:32 -05:00
Green-m 553a82a408 Add options LEXEPATH, STARTUP_NAME, SERVICE_DESC 2018-02-26 02:39:11 -05:00
Green-m f786a1cfb9 Add options LEXEPATH, STARTUP_NAME, SERVICE_DESC 2018-02-26 01:59:49 -05:00
Rob Fuller 0c82b0a922 Support Windows 2008/7 and above
Probably about time that we supported versions less than 10 years old :)
2018-02-24 16:06:55 -05:00
Brent Cook cd728defed Merge branch 'master' into land-9607- 2018-02-23 11:09:20 -06:00
h00die c7bbc6eca4 juniper post enum module 2018-02-22 21:08:21 -05:00