Commit Graph

9306 Commits

Author SHA1 Message Date
Brent Cook 37f1e44a12 Land #10009, Add initial check support to external modules 2018-05-18 09:31:31 -05:00
William Vu 9ad31bf70f Land #10037, warning for Mettle stage encoding 2018-05-17 11:01:01 -05:00
William Vu 1d6fae5db6 Drop "currently," since we're including stageless 2018-05-17 10:30:43 -05:00
William Vu 0cd085fb8b Try a better way with MettleConfig
This will obviously affect stageless payloads, but that's okay, since
there's no stage! Thanks to @mkienow-r7 for the nudge. <3
2018-05-17 10:14:52 -05:00
Aaron Soto 0b6c307c34 Land #10002, Add password reporting API to external modules 2018-05-17 09:04:05 -05:00
bwatters-r7 7e34f27004 Land #9246, Support RHOSTS for exploit modules 2018-05-16 14:40:25 -05:00
William Vu 30dcb78eb5 Land #10042, reload_lib improvements 2018-05-16 12:53:39 -05:00
William Vu 365289b19e Add janky regex check if we're reloading a module 2018-05-16 12:03:54 -05:00
William Vu 5addc54b4b Refactor reload_lib and add multiple file support 2018-05-16 11:23:16 -05:00
William Vu 54908021aa Update CommandDispatcher for target names, too 2018-05-16 10:39:22 -05:00
William Vu 2e002b24a0 Update Msf::Simple::Exploit for targeting by name
And accidentally add error checking.
2018-05-16 10:35:17 -05:00
Brent Cook b79b53c438 Land #9962, tab-complete target options 2018-05-15 16:41:55 -05:00
Adam Cammack ac03a0723a Factor external check shim into common template 2018-05-14 11:32:22 -05:00
Adam Cammack 1d168a84e5 Add 'unknown' fallback check status
`check` is not a fan of `fail_with`, so fallback when the external
module exits unsuccessfully.
2018-05-14 11:00:40 -05:00
Adam Cammack e0fb1365e6 Add soft_check capability to external modules
A `soft_check` is something designed to evaluate the vulnerability of a
remote system without exploiting it (ex. banner checks, non-intrusive
fingerprinting).
2018-05-11 12:42:31 -05:00
Adam Cammack 780b956dd1 Return results of external module runs
This will allow us to grab check results or more interesting things in
the future, if we decide that modules can have return values for more
types of things. Or this may go away and checks will use the reporting
interface like everything else.
2018-05-10 18:29:14 -05:00
Adam Cammack 147471fb79 Add constant for reverse check code lookup 2018-05-10 18:24:57 -05:00
Adam Cammack 271a2344db Refactor external module API to be more reliable
Also:
  Grabs exit status
  Less boilerplate required for modules
2018-05-09 13:30:13 -05:00
Brent Cook 4cf834d670 restore a few more mixin aliases for now 2018-05-08 17:10:01 -05:00
Brent Cook 25177ef9dc add local CONST definition 2018-05-08 17:08:05 -05:00
Aaron Soto 40f1bb223d Revert deleted code from #9986. See issue #9993 2018-05-08 16:40:49 -05:00
Adam Cammack a72ab10777 Add initial Python library for login scanners 2018-05-07 17:42:41 -05:00
Matthew Kienow 70be536b36 Land #9939, add remote data service rspec support 2018-05-07 18:07:02 -04:00
Adam Cammack ee9da87f1e Add shim for external login scanner modules 2018-05-07 15:05:44 -05:00
Adam Cammack ee1059312f Allow access to userpass_interval in AuthBrute 2018-05-07 14:41:48 -05:00
Adam Cammack 524661617c Allow DataStore to nest Arrays arbitrarily deep 2018-05-07 09:51:40 -05:00
Brent Cook 8463d94891 remove mostly unused shortcuts 2018-05-07 00:24:38 -05:00
Jacob Robles 534d05ff44 simpleclient versions option 2018-05-07 00:24:38 -05:00
Jacob Robles ff202a5f5b Simpleclient/SMB2 support 2018-05-07 00:24:38 -05:00
Jacob Robles d54992674f Response code, Write fix 2018-05-07 00:24:38 -05:00
Tim W 5f01b6abc9 Land #9977, fix crash during x64 linux reverse_tcp stager retry 2018-05-05 17:13:00 +08:00
Tim W 4216d06ffb fix #9963, update x64 linux reverse_tcp stager cached size 2018-05-05 16:30:45 +08:00
Adam Cammack 7c67d2b0b4 Add external module API for reporting passwords 2018-05-04 16:24:57 -05:00
Adam Cammack 0834c1aabd Log when loading an invalid external module type 2018-05-04 15:55:21 -05:00
William Vu aed4f067ba Fix nil target_index in auto targeting
This exists on master when DefaultTarget < 0.
2018-05-03 21:59:24 -05:00
William Vu 8881d32a45 Add target selection and tab completion by name 2018-05-03 21:03:05 -05:00
William Vu 88f09dc302 Update a few stragglers in Drupalgeddon 2
1. I added a missed header and YARD to the Drupal mixin.
2. I decided to match discovered versions more liberally.
2018-05-03 18:35:25 -05:00
William Vu 728d7bc065 Fix #9876, second round of Drupalgeddon 2 updates
Thanks to a reviewer for noticing my drupal_unpatched? method was
tri-state because of an unrefactored return. Oops! :)
2018-05-03 17:38:32 -05:00
Pierre Lestringant 9338de15d3 Fix stack in payload/linux/x64/reverse_tcp 2018-05-03 15:34:00 +02:00
christopher lee 038fe03777 Merge branch 'master' into ms-2962 2018-05-02 15:31:57 -05:00
Brent Cook 1456bbdaec fix more whitespace issues 2018-05-01 05:23:26 -05:00
Jeffrey Martin 28173222a8 Land #9881, cleanup psexec code 2018-04-30 18:39:36 -05:00
Matthew Kienow cb8131ab22 Validate search cmd arguments 2018-04-30 00:02:03 -04:00
Matthew Kienow 89d86b1f48 Remove code related to unused search cmd options 2018-04-29 23:16:30 -04:00
Matthew Kienow ca7b10af39 Add search cmd option to write CSV output file 2018-04-29 23:08:24 -04:00
christopher lee 41307e62f8 remove puts 2018-04-27 15:50:21 -05:00
Brent Cook ee2ad8affe move super call in merge! so that it returns the proper value 2018-04-27 14:21:57 -05:00
christopher lee 0a73a5007c Removed duplicated online test 2018-04-27 09:37:17 -05:00
Auxilus 771e0df417 fix in method calls 2018-04-27 10:35:58 +05:30
Auxilus 25cf8d175a report command execution o/p 2018-04-27 08:43:30 +05:30