2c7b7e8b5c
Merge pull request #20942 from rudraditya21/attack-exploit-privesc
...
Add MITRE ATT&CK mappings for exploit and privilege escalation modules
2026-02-11 15:38:59 -06:00
8d6f775ebe
added: ATT&CK references to exploit and privilege escalation modules
2026-02-09 23:03:01 +05:30
f41eda1128
Add GHSA and OSV reference type support
...
Add support for GHSA (GitHub Security Advisories) and OSV (Open Source
Vulnerabilities) as structured reference types in Metasploit modules.
Convert 49 hardcoded GHSA URLs to structured ['GHSA', 'GHSA-xxxx'] format
across existing modules, and add support for repository-specific GHSA
references with an optional third parameter ['GHSA', 'GHSA-xxxx', 'repo'].
Update reference validation, module validator, and info_fixups to handle
the new reference types correctly.
2026-02-09 15:17:23 +01:00
9f90da27c8
Land #20834 , fixes NoMethodError in teamviewer_password post module
...
Fix teamviewer_password module NoMethodError
2026-02-04 08:09:32 +01:00
e55d22a7cd
Merge pull request #20739 from cdelafuente-r7/add_mitre_tech_kerb_unconst_deleg
...
Add MITRE ATT&CK techniques to Kerberos and unconstrained delegation modules
2026-02-03 16:11:37 -05:00
14f10c73e4
rm unused element from TeamViewer registry keys array
2026-01-31 18:33:04 +01:00
f31776caf0
Merge pull request #20778 from h00die/ssh_keys
...
Update and combine ssh key persistence with mixin
2026-01-27 06:39:10 -08:00
510ec9b57d
Merge branch 'master' into teamviewer_syntax_fix
2026-01-24 19:25:30 +01:00
f4a195b88a
persistence modules cleanup
2026-01-14 13:49:29 -05:00
7772bd87f0
Fix teamviewer_password module errors
2025-12-30 16:07:23 +01:00
c2adbf7625
ssh key progresss
2025-12-10 04:32:37 -05:00
f221eb1aef
rename sshkey module
2025-12-10 04:32:37 -05:00
54718c7a12
sticky keys as persistence
2025-12-05 07:07:30 -05:00
8e51f598f3
Add MITRE ATT&CK technique for Kerberos related modules
2025-11-28 17:29:57 +01:00
1912fe2a95
Merge pull request #20702 from Zedeldi/igel-os-modules
...
IGEL OS modules
2025-11-25 13:59:44 -06:00
d1fe17747c
Add check methods and update DisclosureDate
2025-11-24 17:12:56 +00:00
425adfa9bf
Prefer create_process over cmd_exec for commands with arguments
2025-11-21 13:40:25 +00:00
dc9eddc7a2
Use store_loot for igel_dump_file
2025-11-21 13:22:22 +00:00
bb728c44d7
Merge pull request #20560 from cdelafuente-r7/feat/mitre/T1021
...
Add T1021 "Remote Services" MITRE technique and sub-technique references
2025-11-20 11:19:31 -06:00
179a545312
Remove false positive references
2025-11-19 17:34:15 +01:00
796d941354
Code formatting changes
2025-11-17 16:38:13 +00:00
1436803783
Strip first line and quotes
2025-11-17 16:33:00 +00:00
f29505d0d0
Add IGEL OS modules
2025-11-17 15:18:09 +00:00
d8357ce329
Land #20564 , adds persistence suggester module
...
persistence suggester
2025-10-24 15:29:54 +02:00
3b727fbaf2
Code review
2025-10-14 16:25:43 +02:00
0a755ea03a
Add references to MITRE ATT&CK T1021 - Remote Services
2025-10-14 16:25:30 +02:00
09475fc2b9
peer review
2025-09-25 16:38:50 -04:00
86381a6394
Land #20412 , swaps to psh_exec in powershell/exec_powershell
...
Remove errant write_log call and swap to the all-in-one psh_exec rath…
2025-09-25 12:49:33 +02:00
e855938ff8
persistence suggester
2025-09-23 16:40:43 -04:00
5260da1867
Removes redundant variables
2025-09-23 16:22:40 +02:00
6e01e7a5f6
Minor code changes
2025-09-23 16:16:41 +02:00
788b9c27b4
Use sub-technique and add missing modules
2025-09-16 18:39:23 +02:00
7ce2bdc979
Add T1003 "OS credential dumping" MITRE technique
2025-09-09 10:45:46 +02:00
090743abbd
Update error message when there may be a timeout
2025-08-27 11:04:43 -05:00
0ce1617288
Bump rails to 7.2
2025-07-28 12:29:58 +01:00
dcfa448cf8
Remove now unused timeout
2025-07-23 10:40:24 -05:00
07692ff241
Remove errant write_log call and swap to the all-in-one psh_exec rather than execute_script
2025-07-23 09:40:35 -05:00
a4b14d8b64
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
fb02b4ade5
Revert "Bump rails version to 7.2"
2025-06-17 12:20:49 +01:00
62f357207c
Minor bug fixes
2025-06-12 16:41:10 +01:00
39bbf4ba05
fix #20280
2025-06-03 19:51:16 +02:00
d9e96f91ca
see https://github.com/rapid7/metasploit-framework/pull/20273#issuecomment-2932671250
2025-06-03 11:21:07 +02:00
9cccad015d
fix(post/windows/manage/remove_host): handle whitespace parsing robustly
...
See #20157
2025-05-31 12:47:33 +02:00
f6faa5598b
Fixes modules to now correctly use a hash with report note
2025-05-22 10:59:50 +01:00
943c94774a
Modules: Resolve Rubocop Lint/Syntax violations
2025-05-21 18:27:24 +10:00
1982d81e22
Merge pull request #20098 from smashery/execute-assembly32
...
Execute assembly32
2025-05-13 16:49:25 -05:00
5abf5480d5
modules/post/windows/gather/credentials: Update PackRat module descriptions
2025-05-13 23:10:04 +10:00
81a405355c
modules/post: Resolve RuboCop violations and typos
2025-05-13 09:23:28 +10:00
9ee2ec861f
Merge pull request #20120 from bcoles/rubocop-modules-post-windows
...
modules/post/windows: Resolve RuboCop violations
2025-05-09 09:33:17 -04:00
45336dd612
modules/post/windows: Resolve RuboCop violations
2025-05-09 10:51:17 +10:00
Brendan