Christophe De La Fuente
|
7bab1c1980
|
Fix specs and add algorithm argument
|
2024-11-18 17:17:58 +01:00 |
|
Christophe De La Fuente
|
24e19e4ebb
|
Update the ESC8 relay module to use the new helper
It also fixes some unrelated minor issues found in the module and the documentation
|
2024-11-12 18:23:31 +01:00 |
|
Christophe De La Fuente
|
35bb832b7c
|
Add create_csr helper under Rex::Proto
Also update `ms_icpr.rb` to use it
|
2024-11-12 12:34:20 +01:00 |
|
Christophe De La Fuente
|
422ecd8d3f
|
Remove setting version for CSR
|
2024-11-12 12:34:20 +01:00 |
|
adfoster-r7
|
abfc24efdc
|
Fix Kerberos cache storage exception
|
2024-11-08 11:25:28 +00:00 |
|
Ashley Donaldson
|
2470a45eb1
|
Fix out of scope variable with original behaviour
|
2024-11-06 18:33:34 +11:00 |
|
Spencer McIntyre
|
e709a18128
|
Merge pull request #19404 from bwatters-r7/smb2http_relay
SMB to NTLM HTTP Relay with ESC8 module
|
2024-11-05 14:12:08 -05:00 |
|
Spencer McIntyre
|
e130092d87
|
Add a missing require statement
|
2024-11-04 09:37:12 -05:00 |
|
Spencer McIntyre
|
7d8baee574
|
Add some error handling and more logging
|
2024-11-04 09:37:12 -05:00 |
|
Spencer McIntyre
|
80d883b55e
|
Consistently use strings for HTTP request options
|
2024-11-04 09:37:12 -05:00 |
|
Spencer McIntyre
|
4a4ec9aea4
|
Add some more logging
|
2024-11-04 09:37:12 -05:00 |
|
Spencer McIntyre
|
316a967414
|
Update the ESC8 module for the new changes
|
2024-11-04 09:37:08 -05:00 |
|
Spencer McIntyre
|
b2075e5e6b
|
Merge pull request #19553 from smashery/offered-etype-fix
Only retrieve cached credentials that match the requested KrbOfferedEncryptionTypes
|
2024-10-28 09:47:26 -04:00 |
|
Spencer McIntyre
|
27d5c95323
|
Refactor into an SMB server relay mixin
|
2024-10-24 16:25:40 -04:00 |
|
Spencer McIntyre
|
9822f3e812
|
Decouple the NTLM relaying logic
|
2024-10-24 16:25:40 -04:00 |
|
Spencer McIntyre
|
8ba0019ca0
|
Refactor the existing relay target client code
|
2024-10-24 16:25:40 -04:00 |
|
bwatters-r7
|
a18b2b3671
|
code cleanup and documentation
|
2024-10-24 15:23:10 -05:00 |
|
bwatters
|
dff4a8ba7c
|
Updates per Spencer
|
2024-10-24 15:23:10 -05:00 |
|
bwatters
|
c4c1aae565
|
Update smb thread logging, fix control flow, use RELAY_TARGET, other suggestions
|
2024-10-24 15:23:10 -05:00 |
|
bwatters
|
74f6bc7d13
|
Remove Rescues and Rubocop
|
2024-10-24 15:23:10 -05:00 |
|
bwatters
|
6dcf63267b
|
Fix rescue clauses
|
2024-10-24 15:23:10 -05:00 |
|
bwatters
|
0b94fdf75f
|
Fix up suggestions from Spencer et al.
|
2024-10-24 15:23:10 -05:00 |
|
bwatters
|
1fb0b728a8
|
Fix timeout, add query_only mode and allow skipping the termplate query
|
2024-10-24 15:23:10 -05:00 |
|
bwatters
|
4c598c1981
|
Move ESC8 logic to module and limit debug printing
|
2024-10-24 15:23:09 -05:00 |
|
bwatters
|
5b1746f73f
|
Add support for multiple certs
|
2024-10-24 15:23:09 -05:00 |
|
bwatters
|
0ba3db9466
|
Working, but ugly
|
2024-10-24 15:23:09 -05:00 |
|
bwatters
|
af25c94e6a
|
Change to send_request_raw
|
2024-10-24 15:23:09 -05:00 |
|
bwatters
|
d94081faf1
|
Not working; need to checnge to send_request_raw?
|
2024-10-24 15:23:09 -05:00 |
|
bwatters
|
2c760bd842
|
Tracking down hash issues
|
2024-10-24 15:23:09 -05:00 |
|
bwatters
|
7d86c99ba6
|
Currently getting a bad username/password message
|
2024-10-24 15:23:09 -05:00 |
|
Spencer McIntyre
|
2e4315b3c9
|
Add support to icpr_cert for ESC15
|
2024-10-17 11:23:31 -04:00 |
|
adfoster-r7
|
b281d46c2d
|
Merge pull request #19495 from cdelafuente-r7/fix/pkinit/san_extension
Fix crash in `Kerberos::Client::Pkinit#extract_user_and_realm` with specific SAN extension
|
2024-10-16 23:10:38 +01:00 |
|
dwelch-r7
|
9cb3fefb40
|
Land #19539, Keep LDAP sessions alive
|
2024-10-15 11:28:08 +01:00 |
|
Diego Ledda
|
d2b4175f49
|
Land #19497, add Wordpress SQLi Mixin
Land #19497, add Wordpress SQLi Mixin
|
2024-10-14 13:13:52 +02:00 |
|
Ashley Donaldson
|
617270265d
|
Only retrieve cached credentials that match the requested OfferedEncryptionTypes
|
2024-10-11 16:23:26 +11:00 |
|
Ashley Donaldson
|
c732fed617
|
Feedback from code review
|
2024-10-11 08:22:39 +11:00 |
|
Ashley Donaldson
|
22cf3f05d5
|
Send a benign LDAP request every 10 minutes to keep sessions alive
|
2024-10-11 08:22:39 +11:00 |
|
Valentin Lobstein
|
c259ce090a
|
Update lib/msf/core/exploit/remote/http/wordpress/sqli.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2024-10-09 17:22:33 +02:00 |
|
Valentin Lobstein
|
c15f186311
|
Update lib/msf/core/exploit/remote/http/wordpress/sqli.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2024-10-09 00:04:54 +02:00 |
|
Valentin Lobstein
|
fb35f6709a
|
Update lib/msf/core/exploit/remote/http/wordpress/sqli.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2024-10-09 00:04:44 +02:00 |
|
Valentin Lobstein
|
94145eafe9
|
Update lib/msf/core/exploit/remote/http/wordpress/sqli.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2024-10-09 00:04:32 +02:00 |
|
Valentin Lobstein
|
6c048df53f
|
Update lib/msf/core/exploit/remote/http/wordpress/sqli.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2024-10-09 00:04:23 +02:00 |
|
Valentin Lobstein
|
de5324e160
|
Update lib/msf/core/exploit/remote/http/wordpress/sqli.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2024-10-09 00:04:13 +02:00 |
|
Valentin Lobstein
|
3987a761e7
|
Update lib/msf/core/exploit/remote/http/wordpress/sqli.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2024-10-09 00:04:01 +02:00 |
|
Valentin Lobstein
|
31a66d537b
|
Update lib/msf/core/exploit/remote/http/wordpress/sqli.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2024-10-09 00:03:52 +02:00 |
|
Valentin Lobstein
|
c1521633f4
|
Update lib/msf/core/exploit/remote/http/wordpress/sqli.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2024-10-09 00:03:42 +02:00 |
|
Valentin Lobstein
|
8cbe572f49
|
Update lib/msf/core/exploit/remote/http/wordpress/sqli.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2024-10-09 00:03:32 +02:00 |
|
Valentin Lobstein
|
d01e8d4dd5
|
Update lib/msf/core/exploit/remote/http/wordpress/sqli.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2024-10-09 00:03:23 +02:00 |
|
Chocapikk
|
05c579fd65
|
Add report_host, report_service and report_vuln
|
2024-10-03 16:12:37 +02:00 |
|
Chocapikk
|
f52cd8ba57
|
Add coding: binary header
|
2024-09-30 13:01:25 +02:00 |
|