2578d824db
Fix bug where vhost wasn't being set correctly when using rhost http url
2021-01-13 14:41:45 +00:00
54f5e565fa
Land #14330 , SpamTitan Gateway Remote Code Execution
...
Merge branch 'land-14330' into upstream-master
2021-01-04 12:14:12 -06:00
afea5cd74e
Use opts['RHOST'] and opts['RPORT'] to creating the SNMP::Manager instance in connect_snmp
2020-12-16 15:15:27 +01:00
9452c1dcfa
Fix merge conflict from #14202 , in linear history
2020-12-09 17:24:29 -06:00
90a99ae7c3
Land #14423 , Expand wordpress_scanner to look for themes & plugins
2020-12-09 09:12:28 -05:00
1617b3ec9b
Use zeitwerk for lib/msf/core folder
2020-12-07 10:31:45 +00:00
1a2bf98222
creates standard elog & updates exisiting usages
2020-06-22 12:48:39 +01:00
028890ec51
Move ncs mixin code to rex
2019-04-12 15:12:09 -05:00
733f784472
add bcoles suggestions
2019-02-04 21:55:40 -06:00
c09515da82
Update nuuo.rb
2019-01-24 07:52:56 +07:00
b5dbacc42f
Update lib/msf/core/exploit/remote/nuuo.rb
...
Co-Authored-By: pedrib <pedrib@gmail.com >
2019-01-23 16:09:43 +07:00
08aa1c3ed0
Update lib/msf/core/exploit/remote/nuuo.rb
...
Co-Authored-By: pedrib <pedrib@gmail.com >
2019-01-23 15:32:15 +07:00
d8f9e41686
Update lib/msf/core/exploit/remote/nuuo.rb
...
Co-Authored-By: pedrib <pedrib@gmail.com >
2019-01-23 14:13:31 +07:00
3b98add519
Update nuuo.rb
2019-01-23 11:16:41 +07:00
9375ee2ffc
Change only the last methods to private
2019-01-23 11:00:42 +07:00
0562aa50b4
Update nuuo.rb
2019-01-22 12:45:18 +07:00
94f5b4081f
Fix file download / upload bug
2019-01-22 11:17:47 +07:00
72a55fe0fc
Add nuuo NUCS core lib
2019-01-21 16:39:16 +07:00
f27ef55391
Land #7992 , Improve Signature Evasions for browser exploits
2017-02-23 16:32:49 -06:00
e3f613ecc6
Bypass: Metasploit OS detection
...
SEP is triggering on HTTP POSTs which start with `os_name`
2017-02-23 15:42:04 -05:00
84ab3c66cc
Use obfuscated JS in BES
2017-02-22 12:47:36 -05:00
5fd531028c
ome minor guards and spec fixes
...
some minor conditional guards and spec fixes
2017-01-03 14:38:51 -06:00
390f69313a
Fix grammar in browser_exploit_server
2016-07-21 11:51:10 -05:00
ff4d150449
Show IP for print_*
2016-05-24 14:12:54 -05:00
3bc020178f
use the correct variable for cookie expiration
2016-05-24 07:16:55 -05:00
5e36a3128c
Fix #5197 , Fixed yard doc errors
...
Fix #5197 Fixed issues that caused errors during yard doc generation
2016-04-21 13:06:00 -05:00
85acfabfca
remove various library workarounds for the datastore not preserving types
2016-03-05 23:10:57 -06:00
1f58ad15ac
Browser::Exploit::Server needs to have vprint*
2016-02-15 16:21:24 -06:00
0582e7e3ca
Return nil instead of "null"
...
A scenario is when FF disables Flash, BES returns "null", and when
modules try to use Gem::Version, the "null" is considered a malformed
data and it won't be able to continue.
2015-07-14 01:25:41 -05:00
8384be6466
Fix rand_text_alpha and bump max exploit count to 21
2015-07-14 01:02:01 -05:00
d6565a9aee
Merge branch 'bes_flash' into bapv2_flash_test
2015-07-14 00:34:54 -05:00
8fb6bedd94
Delete as3 detecotr
2015-07-13 18:23:39 -05:00
8928c5529c
Fix Javascript code
2015-07-13 17:43:04 -05:00
244d9bae64
Add max timeout
2015-07-13 16:52:25 -05:00
9116460cb0
Add prototype with AS3
2015-07-13 16:33:55 -05:00
21e44f235e
Example of doing Flash detection with Flash
2015-07-08 13:18:57 -05:00
dc0ce88279
We're note actually using Mubex, it might be causing a crash too
...
A problem we are seeing is that sometimes when BAP terminates
(ie: jobs -K), we hit a deadlock while jobs are trying to cleanup,
and sometimes that might cause msfconsole to crash and terminate.
We suspect this Mubex is a contributing factor but it has been hard
to prove because it's very hard to reproduce the crash.
2015-07-07 00:32:20 -05:00
7858d63036
Typo
2015-07-02 15:34:44 -05:00
43d47ad83e
Port BAPv2 to Auxiliary
2015-07-02 15:29:24 -05:00
6e31b9ef53
Initialize and rename the BES mutex
2015-07-02 15:11:03 -05:00
c5c7de0091
Rework browser profiles, get back to functional mode
2015-07-02 14:58:43 -05:00
c0969d4497
Fix module.uuid references
2015-07-02 13:45:38 -05:00
0e7f610836
Finish browser profile rework in BES
2015-07-02 12:58:21 -05:00
b9a8308138
Replace BAP profiles with a framework-instance hash
2015-07-02 12:53:24 -05:00
e549580ad2
Linux doesn't like the uppercase
2015-06-18 00:40:47 -05:00
188b15b17f
Fix the symbol vs string prob
2015-06-05 16:18:56 -05:00
ecdeeea5c6
Make sure super is called
2015-06-05 11:11:40 -05:00
7f4b51f0ff
Fix nil bug
2015-05-23 02:08:51 -05:00
60b0be8e3f
Fix a lot of bugs
2015-05-23 01:59:29 -05:00
2d310a473b
Do some documentation
2015-05-14 23:32:11 -05:00
dwelch-r7