Commit Graph

490 Commits

Author SHA1 Message Date
bwatters-r7 df9c3da47e Land #10842, Add Windows Post Module to roll back Windows Defender signatures
Merge branch 'land-10842' into upstream-master
2018-12-03 10:57:38 -06:00
bwatters-r7 a801d741c9 Remove old module 2018-11-30 17:28:54 -06:00
bwatters-r7 70031b6721 Shut up msftidy and document updates 2018-11-30 16:41:40 -06:00
bwatters-r7 3c992b7af1 Updated documentation and added options in the module to update or roll back
definitions
2018-11-30 16:25:33 -06:00
bwatters-r7 a41b9a77d8 Change the module name, fix cleanup, add documentation 2018-11-30 15:20:34 -06:00
bwatters-r7 1304f93f1f Add more checks and a cleanup function 2018-11-29 10:39:46 -06:00
Luisco100 7f26364d5b Changes suggested by OJ 2018-10-29 22:01:47 -05:00
Luisco100 74683ce951 Add Windows Post Module to disable Windows Defender signatures 2018-10-21 12:07:54 -05:00
bwatters-r7 20daba6e2d fix line endings 2018-08-28 11:33:17 -05:00
alpiste f1e4079641 move add_thread code to lib/rex/post/meterpreter/extensions/peinjector/peinjector.rb 2018-08-28 09:02:21 -05:00
alpiste 015abca8af MSFTidy module 2018-08-28 09:02:21 -05:00
alpiste bb151bb727 MSFTidy module 2018-08-28 09:02:21 -05:00
alpiste 2251c4a712 Add peinjector post module 2018-08-28 09:02:21 -05:00
William Vu 14da99bb3d Fix missing RequestError in a few post modules
Should be Rex::Post::Meterpreter::RequestError.
2018-06-12 17:11:29 -05:00
Aaron Soto be18930f12 Cleaned up output, only querying for %WINDIR% if necessary 2018-04-09 15:27:50 -05:00
Auxilus c07f2f1a09 Update run_as.rb 2018-04-09 21:24:16 +05:30
Auxilus c34b796f13 Remove temp file from dist after cmd execution
https://github.com/rapid7/metasploit-framework/issues/9830
2018-04-09 20:14:01 +05:30
bwatters-r7 e17be05e6a Land #9595, Add post module RID Hijacking on Windows 2018-04-03 14:12:34 -05:00
r4wd3r d6dc0a2d4f Adjust rid_hijack.rb code style with rubocop recommendations. 2018-04-03 04:57:41 +02:00
Jacob Robles 57b048fbf7 Remove requires, changed in-place modification 2018-03-26 17:46:18 -05:00
Green-m 18a1593de7 Clean up registry and fix bug when cleaning the windows local file 2018-03-02 02:31:09 -05:00
Green-m d1e91dfdfd Fix bug 2018-03-01 22:19:03 -05:00
Green-m 2bb8fc7325 Fix bug 2018-03-01 22:16:59 -05:00
Green-m 174c47195a Add options LocalExePath, StartupName, ServiceDescription 2018-02-27 05:32:07 -05:00
Green-m fcd6e8acab Add options LocalExePath, StartupName, ServiceDescription 2018-02-27 05:27:32 -05:00
Green-m 553a82a408 Add options LEXEPATH, STARTUP_NAME, SERVICE_DESC 2018-02-26 02:39:11 -05:00
Green-m f786a1cfb9 Add options LEXEPATH, STARTUP_NAME, SERVICE_DESC 2018-02-26 01:59:49 -05:00
r4wd3r 4ce7468fbe Added rid_hijack post module. Found at post/windows/manage 2018-02-20 22:29:23 +01:00
William Webb d9e0d891a1 Land #9010, Remove checks for hardcoded SYSTEM account name 2017-10-06 13:42:18 -05:00
Christian Mehlmauer 41e3895424 remove checks for hardcoded name 2017-09-27 07:41:06 +02:00
Jannis Pohl 48188e999e post/windows/manage/persistence_exe: fix service creation
Fixes service creation when in post/windows/manage/persistence_exe
2017-09-23 23:48:50 +02:00
h00die c90f885938 Finished spelling issues 2017-09-17 16:00:04 -04:00
Brent Cook 33f2ebc2aa code cleanup 2017-08-21 22:46:30 -05:00
Brent Cook 58e332cc7c only fail if the group sids fail to resolve and we actually have to add a user 2017-08-21 22:36:40 -05:00
Brent Cook 6300758c46 use https for metaploit.com links 2017-07-24 06:26:21 -07:00
Brent Cook 838b066abe Merge branch 'master' into land-8716 2017-07-24 05:51:44 -07:00
Brent Cook 7c55cdc1c8 fix some module documentation
3 modules got documentation landed in the wrong spot. This also fixes a few
typos and improves formatting.
2017-07-23 07:46:52 -07:00
g0tmi1k ef826b3f2c OCD - print_good & print_error 2017-07-19 12:48:52 +01:00
g0tmi1k b8d80d87f1 Remove last newline after class - Make @wvu-r7 happy 2017-07-19 11:19:49 +01:00
g0tmi1k 3d4feffc62 OCD - Spaces & headings 2017-07-19 11:04:15 +01:00
g0tmi1k 4720d1a31e OCD fixes - Spaces 2017-07-14 08:46:59 +01:00
g0tmi1k fd843f364b Removed extra lines 2017-07-14 08:17:16 +01:00
g0tmi1k 424522147e OCD fixes - Start of *.rb files 2017-07-13 23:53:59 +01:00
William Webb aa0fca9dd1 Land #8631, Add railgun support to Python Meterpreter for the OSX
platform
2017-07-11 16:05:16 -05:00
Spencer McIntyre 0da9f4d64a Refactor railgun "DLL" references to library 2017-06-27 17:34:06 -04:00
William Vu 639f341b21 Clean up module 2017-06-26 15:08:37 -05:00
Borja Merino 7077ac0523 Meterpreter Post-exploitation module to mount vmdk files 2017-05-25 11:47:04 +02:00
bwatters-r7 461649ed34 Land #8378, Add check in archmigrate to prevent privdesc 2017-05-23 14:37:29 -05:00
Carter c73e7673b1 Please the rubocop god 2017-05-23 15:13:55 -04:00
Carter e945773576 Update archmigrate.rb 2017-05-23 14:40:42 -04:00