Tim W
|
bb04041c93
|
Land #14172, Fix #14170, Add option to disable autorun in persistence_exe
|
2020-09-25 13:16:51 +08:00 |
|
Tim W
|
77b7cf4f65
|
make RUN_NOW a non-advanced option
|
2020-09-25 13:15:34 +08:00 |
|
Tim W
|
72111a9677
|
don't start service unless RUN_NOW is true
|
2020-09-25 13:15:30 +08:00 |
|
Shelby Pace
|
2f083b03dd
|
Land #14140, add software enumeration module
|
2020-09-23 18:43:28 -05:00 |
|
Shelby Pace
|
1b66f4a9de
|
include Android::Priv mixin
|
2020-09-23 18:42:07 -05:00 |
|
Grant Willcox
|
35fec19faa
|
Fix Android code so that if we have root permissions we use dumpsys to get the package versions, otherwise just enumerate the installed software, but not the versions as we did before, but this time print out a warning.
|
2020-09-23 12:05:04 -05:00 |
|
Grant Willcox
|
8951b2a0d2
|
Add additional support for two other common MacOS package managers, HomeBrew and MacPorts
|
2020-09-23 11:46:08 -05:00 |
|
ingroxd
|
62481f0159
|
Changed DisableExec with RUN_NOW for consistency
|
2020-09-23 09:12:31 +00:00 |
|
Christophe De La Fuente
|
7c575223a2
|
Sync with master
|
2020-09-23 10:08:07 +02:00 |
|
Grant Willcox
|
1710b98ba4
|
Land #14173, Unify the socks modules using a VERSION option
|
2020-09-22 17:09:34 -05:00 |
|
Grant Willcox
|
13bf1b7711
|
Land #14118, SecureCRT Session Credential Grabber, try 2
|
2020-09-22 15:38:25 -05:00 |
|
Grant Willcox
|
a96827a823
|
Land #14118, SecureCRT Session Credential Grabber
|
2020-09-22 15:17:04 -05:00 |
|
Grant Willcox
|
b9fa36c89b
|
Add in option to decrypt Login Script V3 within session files and also update some of the existing regex to fix some minor mistakes
|
2020-09-22 14:47:28 -05:00 |
|
William Vu
|
f74eba731e
|
Land #14151, Zerologon (CVE-2020-1472) module
|
2020-09-22 14:02:23 -05:00 |
|
Spencer McIntyre
|
a14780d024
|
Update the zerologon options for clarity
|
2020-09-22 14:57:57 -04:00 |
|
Spencer McIntyre
|
a67379d1e1
|
Fix rubocop complaints
|
2020-09-22 10:28:58 -04:00 |
|
Spencer McIntyre
|
77f0d90bf0
|
Unify the socks modules using a VERSION option
|
2020-09-22 10:16:00 -04:00 |
|
ingroxd
|
e6978d7ef9
|
Added option to spik execution
|
2020-09-22 12:21:27 +00:00 |
|
Christophe De La Fuente
|
2d1b378a18
|
Land #14122, Jenkins Deserialization RCE (CVE-2017-1000353)
|
2020-09-22 12:32:09 +02:00 |
|
Shelby Pace
|
2ae50e9304
|
Land #14025, add Artica Proxy auth bypass / rce
|
2020-09-21 15:27:53 -05:00 |
|
Shelby Pace
|
18fa28f96b
|
change date format / default payload
|
2020-09-21 15:26:39 -05:00 |
|
Grant Willcox
|
67d43bcc15
|
Add in RuboCop fixes
|
2020-09-21 13:49:05 -05:00 |
|
Grant Willcox
|
9b1fec069f
|
Add in final touch up fixes to make sure that securecrt_store_config checks its input correctly, and to fix up some further mistakes found whilst reviewing the code for nil errors that could be fixed
|
2020-09-21 13:15:03 -05:00 |
|
Grant Willcox
|
ba76eabc72
|
Fix potential nil error with filling in the protocol field in enum_session_file
|
2020-09-21 12:23:23 -05:00 |
|
Grant Willcox
|
966ae4a6a3
|
Fix up the logic for calling securecrt_store_config
|
2020-09-21 12:10:12 -05:00 |
|
Spencer McIntyre
|
3ae4eb3dce
|
Convert the BinData error_status value to a Ruby integer
|
2020-09-21 11:38:33 -04:00 |
|
h00die
|
ee77cc8e78
|
Land #14123, vyos restricted shell escape and priv escalation
|
2020-09-19 09:13:38 -04:00 |
|
cn-kali-team
|
dadd0fef89
|
Simplify the code
|
2020-09-19 10:09:42 +08:00 |
|
Spencer McIntyre
|
a810d37c47
|
Move the NetrServerPasswordSet2 DCERPC data defs into RubySMB
|
2020-09-18 16:19:23 -04:00 |
|
Spencer McIntyre
|
fdedcfa600
|
Updates to use the latest proposed RubySMB changes
|
2020-09-18 14:27:14 -04:00 |
|
Brendan Coles
|
6208f8795a
|
vyos_restricted_shell_privesc: support login as admin user
|
2020-09-18 15:49:25 +00:00 |
|
Grant Willcox
|
f6b032b744
|
Add warning about Linux results to documentation and to the module's description field
|
2020-09-18 10:35:59 -05:00 |
|
Shelby Pace
|
74669f4052
|
Land #14135, add tp-link command injection
|
2020-09-18 09:47:02 -05:00 |
|
Pietro Oliva
|
5f204257a5
|
Remove unnecessary comma, fix docs
|
2020-09-18 10:15:23 -04:00 |
|
Pietro Oliva
|
e2c169d7d3
|
Remove unnecessarily setting SSL via datastore
|
2020-09-18 09:32:45 -04:00 |
|
0xsysenter
|
3144a1aede
|
Add SSL in DefaultOptions
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2020-09-18 15:31:23 +02:00 |
|
Pietro Oliva
|
d3f68d0fe4
|
Fix double shell issue
|
2020-09-18 09:23:02 -04:00 |
|
Grant Willcox
|
de4008984a
|
Add in a few more package managers, think I'll stop after this given the diminishing returns atm
|
2020-09-17 18:00:36 -05:00 |
|
Grant Willcox
|
02bf9561e5
|
Switch over to using a packager manager orientated approach for gathering installed software on Linux
|
2020-09-17 17:18:29 -05:00 |
|
Spencer McIntyre
|
996598bfc8
|
Use a proper constant and specify null values for forward compatibility
|
2020-09-17 18:07:41 -04:00 |
|
Grant Willcox
|
83a8f87438
|
Fix some mistakes with the command for some package managers that weren't returning the version numbers as expected
|
2020-09-17 16:08:35 -05:00 |
|
Shelby Pace
|
c04e8d73c3
|
Land #14023, spooler svc privesc (PrinterDemon)
|
2020-09-17 16:06:29 -05:00 |
|
Shelby Pace
|
8b75401fcf
|
remove requires
|
2020-09-17 16:04:56 -05:00 |
|
Spencer McIntyre
|
b794c88433
|
Implement a check method for the vulnerability
|
2020-09-17 14:37:36 -04:00 |
|
Spencer McIntyre
|
27b6c8a55b
|
Add module docs and apply rubocop fixes to the module
|
2020-09-17 14:28:53 -04:00 |
|
Shelby Pace
|
09c5b906af
|
change notes and primary command stager flavor
|
2020-09-17 13:25:14 -05:00 |
|
Spencer McIntyre
|
0b61092fe5
|
Add module data, use fail_with and rename an option for consistency
|
2020-09-17 13:35:30 -04:00 |
|
Spencer McIntyre
|
7e1e1f593f
|
Refactor the code and support restoring the machine password
|
2020-09-17 12:49:56 -04:00 |
|
Christophe De La Fuente
|
7323447c0a
|
Land #14117', Hyper-V VM Enumeration Module
|
2020-09-17 17:52:27 +02:00 |
|
Shelby Pace
|
8c1968e01c
|
use more generic regex for versioning
Co-authored-by: cdelafuente-r7 <56716719+cdelafuente-r7@users.noreply.github.com>
|
2020-09-17 09:12:20 -05:00 |
|