f41eda1128
Add GHSA and OSV reference type support
...
Add support for GHSA (GitHub Security Advisories) and OSV (Open Source
Vulnerabilities) as structured reference types in Metasploit modules.
Convert 49 hardcoded GHSA URLs to structured ['GHSA', 'GHSA-xxxx'] format
across existing modules, and add support for repository-specific GHSA
references with an optional third parameter ['GHSA', 'GHSA-xxxx', 'repo'].
Update reference validation, module validator, and info_fixups to handle
the new reference types correctly.
2026-02-09 15:17:23 +01:00
893a4a5c98
failure.rb: Make comments accurate again
2025-09-19 14:47:03 -07:00
094fa8191a
Update lib/msf/core/module/failure.rb
...
Per @smcintyre-r7's suggestion, which is a damned good one.
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com >
2025-09-19 14:45:33 -07:00
1dc1a24f73
Improve RHOST validation logic inside report_failure
2025-09-19 14:30:27 -07:00
4b2a354d21
Prevent file: paths from being saved as host addresses in report_failure
...
Added check to prevent saving file paths as host addresses.
2025-09-19 14:07:32 -07:00
a6cdb6deb9
Adds support for MITRE ATT&CK References
2025-06-25 17:24:47 +01:00
682a4b46e0
Msf::Module::PlatformList: Resolve RuboCop violations
2025-06-15 23:27:50 +10:00
ffcc145ccc
Msf::Module::UUID: Generate UUID using UUID_CHARS.sample(8).join
2025-06-08 00:24:27 +10:00
aed00d1ff7
Msf::Module: Lazy-load module instance UUID
2025-06-08 00:15:04 +10:00
4ccab4543d
Register VulnAttempts for both Exploit and Auxiliary modules
2025-05-28 18:19:12 +02:00
8d534e3251
Msf::Module::Platform#find_platform: Match known platforms before search
2025-05-11 00:05:44 +10:00
8e9c144e2c
Consolidate datastore with fallbacks logic
2025-02-09 20:26:52 +00:00
5e217fb93a
Mark enum_chrome as superceded
2024-10-30 16:21:05 +00:00
f132bdbe30
Enforce single module stance
2024-03-25 11:53:23 +00:00
2df926ae1d
Yard doc required options
2024-03-04 17:13:16 +00:00
8bc50c1d3a
Add conditional option validation depending on SESSION or RHOST connection
2024-02-22 17:57:20 +00:00
cc565a1731
Land #18871 , Fix crash when using webconsole
2024-02-21 14:05:16 +00:00
82c2eb9899
Fix crash when using webconsole
2024-02-21 13:53:17 +00:00
bf1608a4ad
Show session/rhost options separate from each other
2024-02-21 12:51:11 +00:00
48221e594d
Land #18704 , Leverage the module metadata cache in the module_sets
2024-02-02 14:16:46 +00:00
10dfe9c428
Remove prefix from alerts
2024-02-01 17:33:31 +00:00
764a87fda8
nil check and fix mock
2024-01-30 17:51:40 +00:00
1abaef4945
Move new session information alerts behind a feature flag
2024-01-30 16:38:00 +00:00
9a2ec90c16
Add alert to show user the new session options available in Metasploit 6.4
2024-01-29 17:06:21 +00:00
391bc4e69e
shuffle platform parsing and code quality
2024-01-19 14:30:34 +00:00
236f88541f
Parse platform list within module metadata object
2024-01-16 14:53:05 +00:00
2cf045d3c4
Leverage the module metadata cache in the module_sets
2024-01-15 14:56:46 +00:00
cf24bca946
Add smb session support to smb_relay module
2023-12-12 11:59:07 +00:00
8527eea15d
Add lazy loading for payloads
2023-06-16 12:04:48 +00:00
d6e9e8d3bb
Land #17735 , fix some incorrect YARD parameters
2023-03-22 15:20:12 +00:00
49f15527d1
Fix external module crash for att open proxy scanner
2023-03-20 15:43:54 +00:00
daef33fe33
Update formatting logic for info command
2023-03-09 23:23:16 +00:00
08f07eccb6
Fix initial incorrect parameters in YARD documentation
2023-03-05 20:15:14 -06:00
c553f80cd9
fixing case insensitive issue for show options #17459
2023-02-18 05:51:46 +00:00
6043d0ffba
Update all links from Wiki site to new docs site.
2023-01-27 09:58:53 -06:00
7f62fa33f3
Update impacket get user spns
2023-01-17 19:53:42 +00:00
3a281234df
Add feature flagged datastore rewrite, with support for option fallback lookups
2022-09-16 12:59:02 +01:00
8186a75235
Add meterpreter command compatibility to modules
2021-04-21 18:22:15 -04:00
397530c554
Add meterpreter command compat to module info
2021-04-21 14:24:01 -04:00
22ae40a072
Remove new AKB reference
...
I'm not sure it adds enough value due to the URL format.
2021-04-03 14:05:45 -05:00
48f743a9f2
Change CVE reference to NVD and add AKB reference
2021-04-03 12:56:26 -05:00
7cdd41df76
Land #14544 , RDP Web Login User Enumeration Auxiliary Module
...
Merge branch 'land-14544' into upstream-master
2021-02-24 16:10:41 -06:00
275e9c5454
Land #14696 , Further Zeitwerk lands to improve boot speed
...
Zeitwerk rex folder
2021-02-19 10:33:37 +00:00
8affc0e91a
Add in proper realm reporting cred abilities
2021-02-15 18:20:56 -05:00
f9e8ac8f58
update more references
2021-02-08 17:48:54 +01:00
b95be3ed10
Zeitwerk rex folder
2021-02-08 12:24:12 +00:00
2d0571e037
Add valid usernames to the database as new credentials
2021-01-08 07:22:36 -05:00
1617b3ec9b
Use zeitwerk for lib/msf/core folder
2020-12-07 10:31:45 +00:00
5b438fd933
Preference target values when registering options
2020-11-05 23:16:37 +00:00
2e426ae573
no db compliant
2020-08-20 10:25:08 -05:00
Valentin Lobstein