Adam Cammack
e11de696d4
Make msftidy happy
2019-08-02 11:17:41 -05:00
bwatters-r7
20438614bb
Stupid extra line....
2019-08-02 11:11:19 -05:00
bwatters-r7
c6defb0264
Rubocop complaints and require_size additions
2019-08-02 11:09:14 -05:00
NickTyrer
f675a974a6
implement changes suggested by @cbrnrd
2019-08-02 16:29:08 +01:00
bwatters-r7
14ee5c4a4f
Update Windows payloads to support exitfunk
2019-08-02 10:28:57 -05:00
Adam Cammack
cf9b94a964
Set needs_cleanup flag for exploits that need it
...
The `needs_cleanup` flag needs to be set per-module when an exploit
needs an interactive session to clean up. Some `FileDropper` exploits
need additional cleanup to what the mixin provides, but since all
`FileDropper`s already mark themselves as needing cleanup those are not
covered here. A few of these could potentially be refactored to use the
original exploitation method to clean up or to compile the list of
files/commands to clean up ahead of time, but that is out of the scope
of this fix.
2019-08-02 10:23:53 -05:00
Adam Cammack
5e64f8560a
Fix whitespace
2019-08-02 10:23:41 -05:00
Quentin Kaiser
8085ad3046
Set default payload based on chosen target.
2019-08-02 10:47:28 +02:00
Quentin Kaiser
610bed8fd9
&& is preferred over and.
2019-08-02 10:41:14 +02:00
Jacob Robles
c4c0ed9187
Land #12155 , Fix printed CVE number
2019-08-01 18:01:53 -05:00
Jacob Robles
bbf0cb4d9d
Land #11653 , Apache Tika CVE-2018-1335 RCE
2019-08-01 17:43:57 -05:00
Metasploit
0e5a1278d4
Bump version of framework to 5.0.40
2019-08-01 14:56:07 -07:00
William Vu
178339db70
Rescue EOFError in quick check for patch
...
Thank you to @cnotin for noticing this case.
2019-08-01 15:03:36 -05:00
NickTyrer
af5e071abe
update documentation
2019-08-01 20:46:09 +01:00
Jacob Robles
ed0c064a24
Fix printed CVE number
2019-08-01 09:57:48 -05:00
NickTyrer
107bb3e9ff
add documentation
2019-08-01 09:06:35 +01:00
NickTyrer
c8050adab2
add module applocker_evasion_presentationhost
2019-08-01 08:40:30 +01:00
William Vu
8d2b29024a
Fix typo
2019-07-31 17:44:10 -05:00
Wei Chen
abc85e4266
Land #12130 , Add evasion module applocker_evasion_msbuild
5.0.39
2019-07-31 16:32:29 -05:00
Wei Chen
3a4ec6fe82
Cosmetic changes
2019-07-31 16:31:44 -05:00
Shelby Pace
bc3f87a950
add login and device id code
2019-07-31 16:31:22 -05:00
William Vu
ae13736d50
Rescue EOFError in cve_2019_0708_bluekeep get_once
2019-07-31 16:01:20 -05:00
Jeffrey Martin
2e06b4e93f
Land #12126 , Implement "set PAYLOAD" by index
2019-07-31 14:50:20 -05:00
Jeffrey Martin
a3245f5ac9
Land #12150 , Accidentally removed include that is sort of imperative....
2019-07-31 09:09:53 -05:00
bwatters-r7
36ae16df74
Accidentally removed include that is sort of imperative....
2019-07-31 08:46:01 -05:00
LoadLow
8e8e6a2cf7
Fixes indent
2019-07-31 00:14:08 +02:00
Brent Cook
6bd7f6cb4a
Land #12148 , lock bcrypt to arm compatibe version
2019-07-30 17:07:34 -05:00
LoadLow
88f3ff9d59
Updates references
2019-07-31 00:00:30 +02:00
Jeffrey Martin
e6c025811b
Lock bcrypt gem until armhf support is restored.
...
Updates in 3.1.13 can cause native gem compile to fail due to
https://github.com/codahale/bcrypt-ruby/issues/201 .
2019-07-30 16:47:26 -05:00
LoadLow
97589e534e
Updates documentation for libreoffice_logo_exec
2019-07-30 23:37:06 +02:00
LoadLow
b2dcaf6c4a
Adds documentation for libreoffice_logo_exec
2019-07-30 23:34:54 +02:00
LoadLow
5f478b7fd6
Adds exploit module for CVE-2019-9848
...
uses on dom-loaded event (triggered just after opening the document) and still working on 6.2.5
2019-07-30 23:07:20 +02:00
h00die
060183c034
tika 1.15-1.17
2019-07-30 16:55:06 -04:00
bwatters-r7
fb7f30e60d
Land #12129 , Add Pingback Payloads
...
Merge branch 'land-12129' into upstream-master
2019-07-30 12:06:57 -05:00
Adam Cammack
517d32b082
Update payload cache sizes
2019-07-30 10:34:47 -05:00
Adam Cammack
23ea772076
Golf Ruby pingback payload syntax
2019-07-30 10:32:31 -05:00
Adam Cammack
e6ea0c9fd7
Use binascii for Python pingback UUID encoding
...
This gives us compatibility for Python 3.x and 1.x
2019-07-30 10:18:24 -05:00
Adam Cammack
3cb1b4588b
Golf Python payload variable names
2019-07-30 10:14:41 -05:00
h00die
f053768801
restrict tika versions
2019-07-30 07:32:30 -04:00
bwatters-r7
79e17d0dda
Remove unsupported options
2019-07-29 21:38:20 -05:00
bwatters-r7
05ffa6e4a0
More updates, optimizations, and style fixes
2019-07-29 16:29:32 -05:00
NickTyrer
4f7e9bd47c
update file creation
2019-07-29 20:29:11 +01:00
bwatters-r7
d6dc397b21
Fix bugs introduced by syntax changes.
2019-07-29 14:00:09 -05:00
bwatters-r7
6bf10e1f91
Fixups for syntax
2019-07-29 11:55:51 -05:00
h00die
8f95ccc83d
Land #12135 move docs to right locations
2019-07-29 12:15:31 -04:00
h00die
4ad1eaebd9
docs touchup
2019-07-29 12:09:47 -04:00
Shelby Pace
1faa1786c6
add test request
2019-07-29 10:28:07 -05:00
Metasploit
bd2a1812a6
automatic module_metadata_base.json update
2019-07-28 21:21:14 -07:00
Brent Cook
5b8a75f544
Land #12119 , Add OS X post module to manage Sonic Pi
2019-07-28 23:12:26 -05:00
Metasploit
d08a1d1ac0
automatic module_metadata_base.json update
2019-07-28 20:09:16 -07:00