071626ed34
Land #12186 - Add RDP Fingerprinting
2019-08-22 08:44:08 +10:00
262cd89859
Land #12168 , fix HTTP client redirects with SSL enabled
2019-08-20 04:03:37 -05:00
bd90241192
set opts['SSL'] above for consistency
2019-08-20 04:03:10 -05:00
40b74211c9
RDP lib: accept TLS 1.0
2019-08-19 19:48:25 +02:00
63dfa2a8bd
Fix the RDP NLA protocol detection
2019-08-11 19:23:29 -07:00
84669f567b
Add the RDP fingerprinting method to rdp_scanner
2019-08-11 16:20:14 -07:00
e8057b0b55
Add an initial fingerprinting method for rdp
2019-08-11 01:24:55 -07:00
2d5e9cb241
RDP: address feedback from wvu
2019-08-07 14:47:33 -05:00
f78c6469b8
RDP: rubocop cleanup lib
2019-08-07 10:28:24 -05:00
de8cd38eb2
RDP: rubocop cleanup packets
2019-08-07 10:00:18 -05:00
b6956bd3be
RDP: moar migration
2019-08-07 08:50:01 -05:00
0c1868b158
RDP: migrate security nego to lib
2019-08-07 08:27:15 -05:00
7dc87bf8bc
RDP: Refactor protocol code
2019-08-07 07:25:42 -05:00
3b7abfcaf2
Use correct case for SSL option
2019-08-06 15:25:34 -05:00
fb7f30e60d
Land #12129 , Add Pingback Payloads
...
Merge branch 'land-12129' into upstream-master
2019-07-30 12:06:57 -05:00
05ffa6e4a0
More updates, optimizations, and style fixes
2019-07-29 16:29:32 -05:00
4856e0f87d
remove call for to_ascii on share_type
2019-07-28 10:19:58 +02:00
7c2d214af2
Clean up debugging, move options to one place and delete superflous file
...
change the uuid handing to prevent changes to it when it gets put in payloads
2019-07-25 19:45:05 -05:00
310533f96c
First stab at filtering payloads that require cleanup
2019-07-25 19:44:09 -05:00
80dbef20f2
Follow acammack's guidance for excluding filedropped exploits
...
usage of pingback payloads
2019-07-25 19:43:14 -05:00
a22ad9ad42
Templatize HttpRawHeaders with ERB
2019-07-24 21:23:22 -05:00
1ba0d1ee5b
Once more, with feeling
2019-07-24 14:59:12 -05:00
7730b510c1
Update HttpHeaders to HttpRawHeaders to match desc
2019-07-24 14:52:56 -05:00
800737690a
Add HttpHeaders file advanced option to HttpClient
2019-07-24 13:15:44 -05:00
82b583b2b5
Use symbolic args
2019-06-30 12:31:29 +10:00
b71fe69c16
Add shutdown method to Exploit::Remote::Tcp
2019-06-29 16:42:08 +00:00
4bf5e6c53f
Land #12014 , nil bug fix for HttpServer#get_uri
2019-06-28 12:32:19 -05:00
9fe138e3dc
Remove misleading comment from dcerpc_getarch
...
I transferred my implementation. I don't understand this comment.
2019-06-26 02:40:16 -05:00
01b308fe7c
Fix get_resource nil bug in HttpServer#get_uri
2019-06-25 23:10:50 -05:00
83528b8bb1
Land #11798 , Add Extended Passive Mode for FTP client
...
Merge remote-tracking branch 'upstream/pr/11798' into upstream-master
2019-06-07 15:09:23 -05:00
b020e3232b
Move warning suppression
2019-06-06 12:33:54 -05:00
19bd0f2183
Add comments
2019-06-06 10:50:26 -05:00
e11cc621ea
Add ensures
2019-06-03 03:51:08 -05:00
ad2ece1489
Actually set the client identification string
2019-06-02 20:01:04 -05:00
2318100a12
Rename SSHVersion to SSH_IDENT for now
...
1. Not to be confused with protocol version
2. We'll want to CamelCase the advanced options
2019-06-02 18:26:25 -05:00
586fe73699
Add Msf::Exploit::Remote::SSH::Options
2019-06-02 18:21:58 -05:00
0559fda9db
Land #11873 , allow calling methods across related modules
2019-05-23 13:56:27 -05:00
b5622b160e
Fix typo
2019-05-22 19:59:08 -05:00
0febc730fa
Clarify comment
2019-05-22 19:49:24 -05:00
3e84f57544
Clarify comment
2019-05-22 18:34:02 -05:00
690b15afc5
Check CheckCode
2019-05-22 17:40:39 -05:00
c7ba2ade65
Convert to mixin
2019-05-22 17:27:11 -05:00
3ffd6363f3
Add comment
2019-05-21 14:34:27 -05:00
bb5ce078f3
Fix style
2019-05-21 01:23:26 -05:00
7325ea669f
Update pipe_auditor.rb
2019-05-20 14:35:32 -04:00
4d9ae525c2
Update lib/msf/core/exploit/smb/client/pipe_auditor.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-05-20 13:58:22 -04:00
f656638f94
smb client now preprends named pipes with missing backslash during check named pipes enumeration
2019-05-20 13:47:18 -04:00
a57923ee64
Improve logic
2019-05-16 13:25:00 -05:00
3289d89836
Added Extended passive mode to the core ftp module.
...
Extended passive mode (EPSV), as documented in RFC2428
is similar to the PASSive mode in that it requests that
the server open a port and wait for a data connection.
However, in unlike PASSive mode, Extended Passive mode
returns only the port on which the server listens for
the data connection, not the IP + Port. The client is
expected to use the existing IP (e.g. the one it used to
create the initial control channel connection) to connect
to the new data port.
Where this becomes important is if the server is behind
some type of natting device, EPSV will work in this case,
PASS may not.
2019-04-30 12:41:11 -05:00
a97cee4c91
add ternary expression to set options
2019-04-25 15:36:09 -05:00
OJ