Commit Graph

21191 Commits

Author SHA1 Message Date
sjanusz-r7 a99fae420a Capitalize TeamCity correctly 2024-12-17 14:27:41 +00:00
Martin Sutovsky 4a13b09767 Land #19719, Fix bug in fetch payload when FETCH_DELETE set to true 2024-12-17 08:42:47 +01:00
adfoster-r7 0068857d78 Merge pull request #19718 from sjanusz-r7/add-rpc-token
Keep track of RPC token per-thread
2024-12-16 11:08:22 +00:00
pczinser 8af31e6b01 updated the inline asm to use User Agent 2024-12-14 15:39:16 -05:00
bwatters-r7 0334109994 Streamline command 2024-12-13 16:43:17 -06:00
bwatters-r7 594946db47 Add sleep to prevent race condition, remove unneeded spaces 2024-12-13 10:31:10 -06:00
cgranleese-r7 2edbc6a134 Land #19546, Improve database module cache performance 2024-12-13 15:31:08 +00:00
cgranleese-r7 90066b3b45 Land #19660, Make enum options case normalizing 2024-12-13 12:00:43 +00:00
bwatters-r7 2faa33ed8e Fix bug in the way we are executing fetch payload when FETCH_DLETE is set to true 2024-12-12 09:08:52 -06:00
sjanusz-r7 686a463a87 Keep track of RPC token per-thread 2024-12-12 12:57:20 +00:00
Metasploit 2355ab546d Bump version of framework to 6.4.41 2024-12-12 03:32:50 -06:00
jheysel-r7 c7f7cfd848 Land #19656 Close ssh session on error 2024-12-11 17:00:17 -08:00
adfoster-r7 31930f47dd Merge pull request #19700 from jheysel-r7/fix_send_request_cgi_bang
Fix query param in reconfig_redirect_opts!
2024-12-11 23:30:51 +00:00
Spencer McIntyre c3cf56f06f Merge pull request #19710 from szymonj99/set-prompitng-false
Set readline output to non-prompting on method exit
2024-12-11 15:22:42 -05:00
Simon Janusz 6167596c20 Revert "Use existing input object when calling init_tab_complete" 2024-12-11 16:22:18 +00:00
dwelch-r7 65612d6757 Land #19711, Use existing input object when calling init_tab_complete 2024-12-11 15:48:09 +00:00
Spencer McIntyre f36d786736 Merge pull request #19696 from smashery/add_user_module
Add user module
2024-12-10 11:26:49 -05:00
sjanusz-r7 4293aac54e Use existing input object when calling init_tab_complete 2024-12-10 10:56:26 +00:00
szymonj99 78781be801 Set readline output to non-prompting on method exit 2024-12-09 18:53:54 +00:00
Spencer McIntyre 8b93f1a087 Merge branch 'master' into smb_change_pw 2024-12-09 09:37:45 -05:00
Spencer McIntyre 909476ee64 Merge pull request #19671 from smashery/ldap_change_pw
LDAP Change Password module
2024-12-06 17:13:50 -05:00
Spencer McIntyre 7006c8fcfc Merge pull request #19609 from dledda-r7/remove-hardcoded-blockapi-hash
Remove hardcoded blockapi hashes
2024-12-06 12:43:03 -05:00
Jack Heysel c7b96f89b0 Unset opts query if no location.query 2024-12-05 18:24:12 -08:00
Jack Heysel a544805659 Fix query in reconfig_redirect_opts! 2024-12-05 18:18:06 -08:00
Metasploit 52ebbc19ca Bump version of framework to 6.4.40 2024-12-05 03:32:37 -06:00
jheysel-r7 e8911f9129 Land #19402 vCenter Sudo LPE (CVE-2024-37081) 2024-12-04 18:25:05 -08:00
jheysel-r7 21cf475cbb Land #19595 Ivanti Connect Secure auth RCE via OpenSSL (CVE-2024-37404) 2024-12-04 08:26:07 -08:00
adfoster-r7 17fdd35608 Merge pull request #19684 from sjanusz-r7/teamcity-improvements
TeamCity improvements
2024-12-03 12:25:52 +00:00
sjanusz-r7 76c93f4d33 Log search for TeamCity in body instead of headers 2024-12-02 22:04:56 +00:00
Spencer McIntyre d22c6996be Merge pull request #18877 from h00die/xspy
New module to replicate xspy tool (and X11 library)
2024-12-02 13:38:37 -05:00
jheysel-r7 a230a353e4 Land #19613 Asterisk authenticated rce via AMI (CVE-2024-42365) 2024-12-02 08:21:35 -08:00
Christophe De La Fuente 3dcb9d58ab Code review 2024-12-02 14:02:07 +01:00
jheysel-r7 c4b7954f15 Land #19596, Wordpress Plugin Post SMTP Account Takeover 2024-11-29 09:05:03 -08:00
sjanusz-r7 e827cccd48 Improve TeamCity Login Scanner 2024-11-29 16:52:00 +00:00
dledda-r7 4468d3bc79 fix(payloads): removing hardcoded block-api hash from reverse_tcp_dns 2024-11-29 07:55:49 -05:00
h00die d13bccca05 peer review 2024-11-28 20:24:25 -05:00
Metasploit 6ca45601fb Bump version of framework to 6.4.39 2024-11-28 03:32:30 -06:00
Spencer McIntyre cd4899da00 Refactor some X11 code around
Consistently refer to replys as responses
2024-11-27 15:19:26 -05:00
jheysel-r7 7de3d117b8 Land #19582 Acronis Cyber Backup/Protect Info Disclosure 2024-11-27 07:50:16 -08:00
dledda-r7 00707a8a11 fix(payloads): removing hardcoded block-api asm and hashes from PrependMigrate mixin 2024-11-26 12:07:31 -05:00
dledda-r7 37bb14ba9c fix(payloads): removing hardcoded block-api hashes 2024-11-26 12:07:30 -05:00
dledda-r7 e7c23e4a65 fix(payloads): removing hardcoded block-api hashes 2024-11-26 12:07:30 -05:00
dledda-r7 3fe1ffb6f3 fix(payloads): removing hardcoded block-api hashes 2024-11-26 12:07:29 -05:00
h00die-gr3y 18c4e9c2f6 moved get_machine_info to the acronis_cyber mixin 2024-11-26 16:10:14 +00:00
h00die-gr3y b6595eeaf0 added acronis cyber mixin 2024-11-26 15:49:57 +00:00
Spencer McIntyre 6c76dcb20c Merge pull request #19651 from smashery/smb_version_update
Give likely Windows versions for SMB v2-3
2024-11-26 09:05:10 -05:00
sjanusz-r7 566e12b69e Add error_callback to SSH Command Stream 2024-11-25 16:43:59 +00:00
Spencer McIntyre 502e415344 Merge pull request #19630 from remmons-r7/cups_ipp_rce
Exploit module for IPP attributes remote code execution - OpenPrinting CUPS
2024-11-22 09:22:21 -05:00
Ashley Donaldson 6f4ab97c83 Commenting changes 2024-11-22 13:06:58 +11:00
Spencer McIntyre 24d3ef16cf Remove some unnecessary code, switch to passive stance 2024-11-21 15:08:43 -05:00