Commit Graph

517 Commits

Author SHA1 Message Date
Clément Notin 31a7b13c19 ms17_010_psexec: fix RHOST in "authenticating..." message 2019-01-16 11:23:21 +01:00
Jacob Robles 8047bf2b09 Add authenticating... message 2018-11-30 07:24:35 -06:00
Jeffrey Martin dd57b27652 Rename hash to generate_process_hash
In the interest of compatibility this uses a more descriptive name for
the process hash creation method instead of overriding ruby's hash method.
See https://docs.ruby-lang.org/en/2.0.0/Hash.html
2018-11-05 17:16:16 -06:00
bwatters-r7 f185c06204 Land 10794, Add support for ms17_010_eternalblue_win8 ProcessName option
Merge branch 'land-10794' into upstream-master
2018-11-05 15:08:59 -06:00
bwatters-r7 7ca2311325 Land #10792, Add support for ms17_010_eternalblue ProcessName option
Merge branch 'land-10792' into upstream-master
2018-11-05 14:19:10 -06:00
bwatters-r7 1f0941101f shut up, msftidy 2018-11-05 14:13:33 -06:00
bwatters-r7 4f2ba46125 Stop some of the rubocop carnage 2018-11-05 14:11:24 -06:00
bwatters-r7 5ec155fd44 Changed some options to advanced 2018-11-05 09:59:17 -06:00
l9c ff07289132 better style according to the review 2018-11-05 13:46:36 +08:00
Shelby Pace 3729e9ed7b added description, references 2018-10-24 09:46:00 -05:00
Shelby Pace 34ae9c38f9 added WebEx modules, arch check 2018-10-23 15:51:23 -05:00
l9c ed2ba1cb00 add support for ProcessName option, defaults to spoolsv.exe 2018-10-11 17:23:59 +08:00
l9c ce848712dd add support for ProcessName option, defaults to spoolsv.exe 2018-10-11 10:56:07 +08:00
William Vu 7bc98e0ea8 Fix formatting and convert a missed AKA reference 2018-10-05 03:22:08 -05:00
Brent Cook 6126a627cc Land #10570, AKA Metadata Refactor 2018-09-17 22:29:20 -05:00
Erin Bleiweiss 011c25ed59 Merge changes from master (ghostscript) 2018-09-17 13:57:28 -05:00
William Vu 4c036e70c1 Fix http://seclists.org links to https://
I have no idea how this happened in my own code. I was seeing https://.
2018-09-15 18:54:45 -05:00
Erin Bleiweiss 5092d561f9 Update AKA values for ms17_010_psexec 2018-08-31 16:56:28 -05:00
Erin Bleiweiss 69a785ff46 Update json for python modules 2018-08-31 16:56:22 -05:00
Erin Bleiweiss eb17d9b198 Refactor AKA references for modules 2018-08-31 16:56:05 -05:00
Clément Notin d489cd7248 ms17_010_eternalblue: use SMBDomain value when provided instead of ignoring it 2018-08-29 23:53:58 +02:00
bwatters-r7 cdefb88770 Added line to support SMB2 2018-07-30 12:37:06 -05:00
William Vu e5efa4faac Make failures consistent 2018-07-17 17:35:52 -05:00
William Vu 96f9e60e84 Swap return for sys.exit(1) 2018-07-17 17:25:38 -05:00
William Vu 09d347ca33 Add missed sys.exit(1) 2018-07-17 16:31:57 -05:00
William Vu e1be94e568 Pass RPORT to sess_port in Impacket 2018-07-17 13:49:38 -05:00
William Vu 0bdaa0e23a Catch connection errors and module.log them 2018-07-17 13:49:34 -05:00
William Vu f64c9588e9 Undefine check method and let the base class do it
Preserve the to-do without rewording - should be enough.
2018-07-10 11:05:00 -05:00
William Vu 533d87efa4 Return CheckCode::Unsupported in ETERNALBLUE
Defining a check method in the module overrides it.
2018-07-09 16:01:24 -05:00
Brent Cook 5946245d87 avoid using SMBv2 on Windows XP Native Upload targets 2018-07-02 16:07:27 -05:00
Brent Cook 85dc81a58b Land #10185, add SMBv1/2 support in psexec 2018-06-29 17:49:27 -05:00
William Vu 40ac79ced0 Land #10218, MS17-010 Windows Embedded Standard 7 2018-06-28 16:11:56 -05:00
zerosum0x0 a5c0881c08 add Windows Embedded Standard 7 support 2018-06-27 19:17:18 -06:00
Jacob Robles 2fd0d797ac psexec smb2 support 2018-06-25 15:06:23 -05:00
Adam Cammack 6dafb13f28 Module metadata cleanup 2018-06-21 15:10:47 -05:00
Jeffrey Martin 2f40b2cb45 address missed impacket dependency check 2018-06-21 13:56:17 -05:00
William Vu 4bb6afb24e Move dependency check so we can send our metadata
I missed this detail about the module.run method when adding the check.
Defining the metadata or where you put it doesn't matter so much as if
you're sending it over JSON-RPC.
2018-06-20 15:03:26 -05:00
William Vu 8277a4da24 Add better targeting feedback 2018-06-20 12:41:22 -05:00
William Vu 13a4b2e359 Add dependency check for Impacket 2018-06-20 12:22:17 -05:00
William Vu 0820268d8a Improve rank handling with shim logic 2018-06-19 16:46:20 -05:00
William Vu 9545bac809 Rename remote_exploit_generic template
Dropping "generic" from the name. I initially had some reservations
about leaving it in, and after discussion with @acammack-r7, we've
decided it adds nothing useful.
2018-06-19 11:43:56 -05:00
William Vu df4cee1d77 Fix PEP 8 in added code 2018-06-19 11:20:15 -05:00
William Vu 781478b283 Document some things 2018-06-19 11:20:15 -05:00
William Vu ecea36c459 Convert PoC to external module 2018-06-19 11:20:10 -05:00
William Vu 45e8adc617 Add sleepya's ETERNALBLUE exploit for Win8+ 2018-06-18 11:41:57 -05:00
zerosum0x0 4a64401a58 fix ms17-010 similar to 4a56ecf3ae 2018-05-14 15:45:20 -06:00
Jacob Robles 4a56ecf3ae psexec native upload argument 2018-05-01 09:33:17 -05:00
Jeffrey Martin 28173222a8 Land #9881, cleanup psexec code 2018-04-30 18:39:36 -05:00
Brent Cook 4cba6d1df4 suggest a reason if we get no server response 2018-04-25 03:57:12 -05:00
Auxilus cbfdaf23a0 updated for requested changes 2018-04-25 08:56:54 +05:30