eb8814d5fe
Land #12697 , module docs
2019-12-15 06:25:44 -05:00
6be4729a02
Land #12391 , Add shellcode_inject post module
...
Merge branch 'land-12391' into upstream-master
2019-12-12 15:20:51 -06:00
fb5c896d40
Streamline Checks and error for channelized comms before injection
2019-12-12 15:19:17 -06:00
c4e304574c
Update enum_applications.rb
2019-12-11 14:10:48 -07:00
0a31e3b909
Update bitlocker_fvek.rb
...
Fix spelling errors.
2019-12-11 13:39:25 -07:00
cc25a30d1a
Move dpendency to mixin and adjust print statements
2019-12-04 09:00:03 -06:00
2a14332f20
First try at adding error handling and offloading methods to the
...
Post::Windows::Process mixin for resusability and deduplication
2019-12-03 14:11:50 -06:00
f5fbdcacc3
Add support for shell sessions to post/windows/gather/enum_hostfile
2019-11-16 04:07:01 +00:00
2549de809d
fix bug in PID check
2019-11-07 12:57:05 +01:00
e992480b5c
Update shellcode_inject.rb
2019-10-17 16:02:59 +02:00
74ae445128
Add AUTOUNHOOK support for shellcode_inject post module
...
The module will now first inject the unhook dll and then the provided shellcode.
2019-10-10 16:35:57 +02:00
47dd96df68
Remove duplicate module in the wrong place
2019-10-08 08:48:11 -05:00
905eb17132
begining to fix spelling errors
2019-10-05 14:26:34 -04:00
f95f952b65
fix separated spelling
2019-10-05 14:13:38 -04:00
dd9fb2d9d6
Add shellcode_inject post module
...
This module injects an arbitrary shellcode into a target process.
2019-10-03 16:47:10 +02:00
c86511722a
Land #12258 , Update gpp.rb to display GPO name
2019-09-26 03:36:28 -05:00
a587668b9e
Remove Default targets from aux modules
2019-09-24 12:15:43 +01:00
fe2b3f8f29
Remove targets from post modules
2019-09-23 17:26:36 +01:00
795e0ebeb5
Restore a "print" to "print_good"
...
Aesthetics modification
2019-09-07 09:02:04 +02:00
a2d2475618
Fixed wrong previous commit
2019-09-05 22:12:33 +02:00
88d424cf3f
Make the modification suggested by @acammack-r7
...
Directly insert the new value in the "table", instead of modifying the screen output manually. Simpler and cleaner, thanks @acammack-r7 !
2019-09-05 21:44:18 +02:00
13560e93c0
Improve ADSI GPO filter to return only one result
2019-09-02 20:15:00 +02:00
71b825ee06
Update gpp.rb to display GPO name
...
GPO files on SYSVOL do only include the GPO GUID, not the GPO name defined by the administrator. This modification makes this gpp module make an ADSI query to retrieve all of the domain's GPOs, and compare their GUID. If one GUID matches, then we know the GPO name and we can display it. On a pentest, a client is much more interested by knowing the GPO name rather than the obscure GUID. The ADSI query relies on meterpreter "extapi" extension.
2019-08-31 12:37:49 +02:00
b6b3a54b79
fix typo in payload_inject
...
:)
2019-07-27 19:02:33 +02:00
53557cc92e
replace trivial usage of expand_path with getenv
...
expand_path is not implemented consistently across platforms and
sessions, which leads to confusing behavior. In places where we have trivial
single variable expansions, this changes modules and library code to just use
getenv.
We'll look at the rest individually to see if they can also be reimplemented in
terms of getenv.
2019-05-31 17:44:35 -05:00
9d71020d9c
Removed credit
2019-03-24 19:11:22 -04:00
8a36a0f410
Added support for later versions of Outlook, rubocop complaints
2019-03-24 18:39:55 -04:00
85066938df
Land #11157 , Add Windows Gather Power Shell History module
2019-02-13 12:39:28 -06:00
366d060b5d
Minor changes for psreadline_history
2019-02-13 12:38:36 -06:00
28283809f9
Add nil check to enum_patches
2019-02-02 15:33:48 +00:00
e9a8d5708a
Land #11234 , @bcoles revisionism
2019-01-11 20:15:34 -06:00
24f807490f
revisionism
2019-01-10 19:19:14 +00:00
307cc8c107
fix comment
2019-01-09 11:12:51 -06:00
0c984fa232
Fix messages /successfuly/successfully
2019-01-09 06:32:22 -06:00
81f4ed6db3
Add references and remove reserved function calls
2018-12-22 00:30:37 +05:30
5838ad87fb
Check if directory and file exist and report accordingly
2018-12-21 19:36:01 +05:30
ba9c7039f7
Add psreadline_history module
2018-12-21 18:18:21 +05:30
df9c3da47e
Land #10842 , Add Windows Post Module to roll back Windows Defender signatures
...
Merge branch 'land-10842' into upstream-master
2018-12-03 10:57:38 -06:00
a801d741c9
Remove old module
2018-11-30 17:28:54 -06:00
70031b6721
Shut up msftidy and document updates
2018-11-30 16:41:40 -06:00
3c992b7af1
Updated documentation and added options in the module to update or roll back
...
definitions
2018-11-30 16:25:33 -06:00
a41b9a77d8
Change the module name, fix cleanup, add documentation
2018-11-30 15:20:34 -06:00
1304f93f1f
Add more checks and a cleanup function
2018-11-29 10:39:46 -06:00
d6db5ebdfe
Land #10716 , Create PureVPN Credential Collector Post Explotation Module
2018-11-27 17:42:23 -06:00
830a80e598
Check -1 user/pass condition and improved exception handling
2018-11-27 16:23:09 -06:00
7f26364d5b
Changes suggested by OJ
2018-10-29 22:01:47 -05:00
b4c005c4d4
Land #10561 , Add Windows local privilege escalation - CVE-2018-0824
...
Merge branch 'land-10561' into upstream-master
2018-10-25 13:22:31 -05:00
569c2e03c9
Fix exploit relics and documentation
2018-10-23 17:15:34 -05:00
927a29530b
Remove duplicated files
2018-10-23 12:31:18 -05:00
74683ce951
Add Windows Post Module to disable Windows Defender signatures
2018-10-21 12:07:54 -05:00
h00die