8b58c62375
Merge pull request #20807 from webbsssss/fix/acunetix-vulnerability-import
...
Fix #17932 : Allow Acunetix vulnerabilities to be imported without complete web_page data
2026-02-13 15:25:54 +00:00
f111ccc5ec
Add working Acunetix import tests
2026-02-13 14:50:18 +00:00
dc2ef2ed77
Update specs after code review
2026-02-10 09:46:37 +00:00
c02ac3920d
Reapply "Vulnerability Report Enhancement"
...
This reverts commit c35537252f
2026-02-10 09:46:37 +00:00
8af6bae699
Merge pull request #20906 from rudraditya21/fix/ssh-cmd-exec-trailing-newlines
...
Fix SSH command shells dying on cmd_exec with trailing newline
2026-02-09 12:25:11 +00:00
db064a4f49
Merge pull request #20895 from rudraditya21/fixed/ldap-entry-cache-misses
...
added: negative caching for LDAP lookup misses
2026-02-06 13:15:57 +00:00
674934d6d9
fixed: entry cache spec
2026-02-06 17:11:09 +05:30
5e43beca60
Merge pull request #20920 from rudraditya21/fix/cracker-auto-action
...
Handle ACTION=auto with CRACKER_PATH in password crackers
2026-02-03 17:23:49 -05:00
a3dd697f6e
fixed: auto cracker selection with CRACKER_PATH
2026-02-01 21:59:31 +05:30
e70483b785
Rubocop
2026-01-29 14:13:18 +00:00
7d81b1aecb
Align login scanner APIs
2026-01-28 16:56:52 +00:00
5f0ada0c64
fixed: ssh cmd_exec newline handling in command shells
2026-01-27 09:43:55 +05:30
7134f7ab06
added: negative caching for LDAP lookup misses
2026-01-25 10:13:32 +05:30
81bc7640f0
Add missing option KrbClockSkew to specs
2026-01-20 18:16:19 +01:00
eb49dade6f
Merge pull request #20755 from rudraditya21/feature/kerberos-clock-skew
...
Added: Option to adjust kerberos clock
2026-01-19 10:00:54 -08:00
350a39c274
Bump mettle
2026-01-16 13:04:57 +00:00
8342493b3b
Merge branch 'rapid7:master' into feature/kerberos-clock-skew
2025-12-28 23:16:27 +05:30
3fc047db5d
fix: Allow Acunetix vulnerabilities to be imported without complete web_page data ( #17932 )
2025-12-24 22:47:37 +05:30
34ceae4e2c
Add autocheck report_vuln logic
2025-12-22 13:09:32 +00:00
c35537252f
Revert "Vulnerability Report Enhancement"
2025-12-15 12:40:02 +00:00
40ac35c02a
Vulnerability Report enhancement
...
- update `#report_service` and `#report_vuln`
- update vulnerability report when a session is established
- update CheckCode and `#cmd_check` to report a vulnerability when
Vulnerable checkcode is returned
- update `vulns` and `services` commands to display the `resource` and
parent services
- specs
2025-12-15 12:36:50 +01:00
c49a376280
added: Option to adjust kerberos clock (issue-> #20587 )
...
- Added KrbClockSkew advanced option and parser to offset Kerberos timestamps
- Propagate skew through Kerberos client/authenticators (LDAP/SMB/HTTP/WinRM/MSSQL) and scanners
- Updated docs for new option and extended kerberos client specs for clock skew handling
- Clean up kerberos client error handling/style per rubocop
2025-12-08 01:47:51 +05:30
db1e0187c3
Fix the PostreSQL SSL tests for #starttls method
2025-12-02 16:10:07 -05:00
c2ccac414d
Remove the USE_WINDOWS_AUTHENT option
...
It's redundant with the Mssql::Auth option which is an enum and supports
all the authentication mechanisms. This eliminates the ambiguity between
the meaning and precedence of the options.
2025-10-21 11:20:51 -04:00
edf7325c68
Add tests for MsTdsLogin7
2025-10-16 16:29:19 -04:00
e8c3200628
Add tests for MsTdsHeader
2025-10-16 16:29:19 -04:00
6f5ff3c7da
Add tests for MsTdsLogin7Password
2025-10-16 16:29:19 -04:00
27d0e638ed
Merge pull request #20546 from dwelch-r7/fix-ssh-login-pubkey
...
Fix ssh login pubkey module
2025-10-09 14:24:09 -04:00
8c5c395ce7
Fix ssh login pubkey module
2025-10-09 12:36:00 +01:00
3d1d49b71a
Merge pull request #20517 from cgranleese-r7/adds-postgres-ssl-support
...
Adds SSL support to the postgres_login module
2025-09-26 08:53:47 -04:00
40f6e2ca60
Updates test to cover SSL support
2025-09-25 09:48:44 +01:00
f26c14f05a
Address PR feedback
2025-09-17 15:38:08 +01:00
4104497498
Merge pull request #20502 from zeroSteiner/feat/refactor-pe-compiling
...
Update PE EXE Templates
2025-09-10 12:37:35 +02:00
dbb631ffb6
Adds SSL support to the postgres_login module
2025-09-09 09:56:36 +01:00
736d89bc2c
Update the CredentialCollectionSpecs
...
CredentialCollection: adding various tests that currently fails to demonstrate multiple bugs in the each method
Fix incorrect expectations of currently failing tests
Inline all specs to avoid nesting context
Reverts some test expectations
Some final tidy up
Re-revert tests expectations
2025-09-08 13:09:51 -04:00
9979af9fd7
Update the specs
2025-08-28 17:59:17 -04:00
0557d63127
Add database ref opts for kerberos and pkcs12
2025-08-18 15:56:47 +01:00
c843e36402
Merge pull request #20469 from adfoster-r7/improve-kerberos-file-load-error-messages
...
Improve Kerberos file load error messages
2025-08-15 12:51:52 +01:00
bebb43f8f6
Improve kerberos file load error messages
2025-08-15 12:38:45 +01:00
487c204b52
Merge pull request #20381 from h00die/persistence_phase_1
...
Persistence libraries/Mixins
2025-08-15 12:40:55 +02:00
cb615899ee
Updates specs
2025-08-01 13:51:25 +02:00
0ce1617288
Bump rails to 7.2
2025-07-28 12:29:58 +01:00
4ec8a0e356
fix linux user spec
2025-07-27 18:50:23 -04:00
99c9e8c8e7
Fix acceptance tests prompt matching
2025-07-17 10:18:25 +01:00
71d0d037b5
add spec for linux user lib
2025-07-15 20:38:32 +00:00
f9a804d649
persistence libraries
2025-07-11 17:35:06 -04:00
a93d20ccfe
Add some basic tests
2025-07-08 15:01:54 -04:00
65ed80f5b0
Add flag to vuln command to show vuln attempts
2025-06-19 16:06:25 +01:00
fb02b4ade5
Revert "Bump rails version to 7.2"
2025-06-17 12:20:49 +01:00
b87ef99cd8
Bump rails version to 7.2
2025-06-12 16:41:10 +01:00
Simon Janusz