Commit Graph

23956 Commits

Author SHA1 Message Date
AlbertoCoding 96cd65a205 Added new whoami module and some fixes 2018-06-01 02:57:03 +02:00
root 6df8e28f7e Some syntax fixes and name changes 2018-06-01 02:06:25 +02:00
root c9a4cc47f7 Initial upload of Vulnerateca Post-Exploitation Framework (VPEF) 2018-05-31 18:05:33 +02:00
Brent Cook fad5a99c7d fix incorrect disclosure date 2018-05-25 02:59:08 -05:00
Brent Cook 86a5b951aa Land #9990, add SOCKS5 proxy support 2018-05-23 17:31:09 -05:00
Brent Cook bc5c7a15e5 remove single-entry OptEnum from module, since there is only one possible TECHNIQUE 2018-05-23 13:44:53 -05:00
Jan Rude 567e2dbc7e Update telpho10_credential_dump.rb
Current version still vulnerable, developer ignores mails. It seems like this is going to be a 'won´t fix'
2018-05-23 09:32:41 +02:00
Aaron Soto 72efe66403 Refactored for better logging, IPv6 support, and prep for auth 2018-05-22 18:57:00 -05:00
James Barnett 0472b9df3f Land #10024, Fix find_or_create_* methods for remote data service
This PR updates the find_or_create_* methods associated with each model to
no longer just proxy to the report_* model. It now performs a lookup through
the DataProxy and returns the found object if it exists, or creates a new
record if needed.
2018-05-22 17:08:46 -05:00
Brendan Coles 15e472637a Land #10070, Fix cleanup in exploits/osx/local/rootpipe_entitlements 2018-05-22 21:52:24 +00:00
Brendan Coles b14e354b25 Land #10048, Make shell and meterpreter sessions consistent with cmd_exec 2018-05-22 21:26:47 +00:00
bwatters-r7 40d5f46277 Lad #10017, D-Link DSL-2750B Unauthenticated OS Command Injection
Merge branch 'land-10017' into upstream-master
2018-05-22 10:54:33 -05:00
lucyoa 6cc1a8dcbd Rubocop fixes 2018-05-22 10:34:05 -04:00
Matthew Kienow 4ecc1ff551 Modify loots, notes and services search methods
Modify loots and services method signatures. Remove workspace as a
positional argument, move into opts hash argument and update callers.
Made host search for these models more uniform. Update find_or_create
methods to handle difference in opts between find and report
operations.
2018-05-21 17:37:51 -04:00
bwatters-r7 75562e2bbc Land #10044, Fix is_system? in Msf::Post::Windows::Priv for non-English
Merge branch 'land-10044' into upstream-master
2018-05-21 14:24:26 -05:00
Tim W 88ab836e15 Land #9987, AF_PACKET chocobo_root exploit 2018-05-21 17:05:53 +08:00
Tim W 9e9dff8b6a fix file cleanup on failed exploitation 2018-05-21 16:47:09 +08:00
Tim W cd0161ada2 fix gcc for shell_reverse_tcp payloads on ubuntu 2018-05-21 16:46:42 +08:00
lucyoa 6ae55aadd4 Fixing documentation, improving exploits code 2018-05-20 12:55:46 -04:00
Brendan Coles aa033bf5c1 Fix cleanup 2018-05-20 16:19:25 +00:00
Clément Notin a8fcd9d275 Fix display of uid in post/windows/gather/win_privs
`inspect` is not necessary and triggers display of Unicode characters as "\x.." instead of printing their value.
As discussed in PR #10044
2018-05-19 01:35:19 +02:00
bwatters-r7 294b263159 Land #9966, Add Reliable Datagram Sockets (RDS) Privilege Escalation exploit
Merge branch 'land-9966' into upstream-master
2018-05-18 17:06:04 -05:00
Brent Cook 7af7587519 Land #9999, Optionally test empty group in cisco_ssl_vpn 2018-05-18 10:57:15 -05:00
Brent Cook 37f1e44a12 Land #10009, Add initial check support to external modules 2018-05-18 09:31:31 -05:00
Brendan Coles eb3733ffb4 unless 2018-05-17 17:42:55 +00:00
Brent Cook 520b8bc3c0 remove many duplicate code paths 2018-05-17 08:14:32 -05:00
Tim W a3879f0109 Land #9956, add module to extract wireless credentials on Android 2018-05-17 21:04:56 +08:00
Brent Cook 5c3cb097fb Land #10047, remove invalid timeout argument on cmd_exec 2018-05-17 07:41:14 -05:00
Brent Cook 406f1fe165 fix #10046, remove invalid timeout argument on cmd_exec 2018-05-17 07:38:22 -05:00
Tim W 6594cbb5cc Land #9947, AF_PACKET packet_set_ring exploit 2018-05-17 18:43:52 +08:00
Tim W dc227153c4 fix gcc on shell_reverse_tcp session 2018-05-17 18:43:27 +08:00
Aaron Soto c35c8e9c75 Update module name, per a good catch by @bcook 2018-05-16 13:55:45 -05:00
Tim W ce5b24eda0 fork early and cleanup files in module 2018-05-17 00:32:01 +08:00
Jacob Robles 999b895735 Land #9816, Add the scanner/smb/impacket/dcomexec module 2018-05-16 07:15:32 -05:00
William Vu eb0ac79143 Land #9975, local_exploit_suggester fixes 2018-05-16 06:48:02 -05:00
William Vu 739d58135f Move EXE generation in struts_code_exec_parameters 2018-05-16 06:15:40 -05:00
William Vu 6ec0272ff5 Land #8727, CVE-2017-9791 exploit 2018-05-16 05:41:26 -05:00
William Vu eaec1d7486 Clean up module 2018-05-16 05:39:17 -05:00
William Vu 436e414b93 Land #7815, CVE-2016-9299 exploit 2018-05-16 05:29:41 -05:00
William Vu 959cbde6eb Clean up module 2018-05-16 05:29:25 -05:00
William Vu 908857b563 Land #10036, reverse_bash_telnet_ssl fixes 2018-05-16 04:10:36 -05:00
William Vu 3810803276 Land #10035, awk payload improvements 2018-05-16 04:10:21 -05:00
William Vu 6723de2659 Land #10031, zsh payload improvements 2018-05-16 04:10:00 -05:00
William Vu c2c46586cd Land #10030, reverse_ksh payload 2018-05-16 04:08:17 -05:00
William Vu 6abd0d068a Nix explicit return 2018-05-16 04:06:58 -05:00
Brendan Coles c5f980f633 GoodRanking 2018-05-16 02:38:19 +00:00
William Vu 3ea4548343 Fix PayloadType in reverse_bash_telnet_ssl
It should not be cmd_bash, since it doesn't rely on being in bash.
2018-05-15 20:50:30 -05:00
William Vu 49bfa3b707 Update CachedSize 2018-05-15 20:07:14 -05:00
William Vu a19c5f723b Improve bind_awk payload (credit @bcoles) 2018-05-15 20:01:57 -05:00
William Vu 5d229abf72 Improve reverse_awk payload (credit @bcoles) 2018-05-15 20:01:32 -05:00