Christophe De La Fuente
c02ac3920d
Reapply "Vulnerability Report Enhancement"
...
This reverts commit c35537252f .
2026-02-10 09:46:37 +00:00
Valentin Lobstein
f41eda1128
Add GHSA and OSV reference type support
...
Add support for GHSA (GitHub Security Advisories) and OSV (Open Source
Vulnerabilities) as structured reference types in Metasploit modules.
Convert 49 hardcoded GHSA URLs to structured ['GHSA', 'GHSA-xxxx'] format
across existing modules, and add support for repository-specific GHSA
references with an optional third parameter ['GHSA', 'GHSA-xxxx', 'repo'].
Update reference validation, module validator, and info_fixups to handle
the new reference types correctly.
2026-02-09 15:17:23 +01:00
adfoster-r7
f4e67b6455
Mark additional flakey socket tests
2026-01-26 21:11:13 +00:00
Spencer McIntyre
6ae361b103
Merge pull request #20868 from adfoster-r7/fix-udp-sockets-for-php-meterpreter
...
Fix UDP sockets for PHP meterpreter
2026-01-15 15:09:26 -05:00
adfoster-r7
7f90e1f6a0
Resove method undefined issue
2026-01-15 16:32:46 +00:00
adfoster-r7
67e279ef8c
Fix UDP sockets for php meterpreter
2026-01-15 16:31:16 +00:00
cgranleese-r7
c35537252f
Revert "Vulnerability Report Enhancement"
2025-12-15 12:40:02 +00:00
Christophe De La Fuente
40ac35c02a
Vulnerability Report enhancement
...
- update `#report_service` and `#report_vuln`
- update vulnerability report when a session is established
- update CheckCode and `#cmd_check` to report a vulnerability when
Vulnerable checkcode is returned
- update `vulns` and `services` commands to display the `resource` and
parent services
- specs
2025-12-15 12:36:50 +01:00
Spencer McIntyre
f2a05ad295
Run them tests
2025-11-14 16:18:47 -05:00
bcoles
daf280ad11
spec: ModuleValidation: Validate module DefaultTarget value
2025-10-15 19:58:25 +11:00
bwatters-r7
1891ebef87
add x64 acceptance tests, and use single, release payload
2025-09-17 12:21:30 -05:00
adfoster-r7
0557d63127
Add database ref opts for kerberos and pkcs12
2025-08-18 15:56:47 +01:00
adfoster-r7
bebb43f8f6
Improve kerberos file load error messages
2025-08-15 12:38:45 +01:00
Dean Welch
0ce1617288
Bump rails to 7.2
2025-07-28 12:29:58 +01:00
sjanusz-r7
99c9e8c8e7
Fix acceptance tests prompt matching
2025-07-17 10:18:25 +01:00
cgranleese-r7
a6cdb6deb9
Adds support for MITRE ATT&CK References
2025-06-25 17:24:47 +01:00
cgranleese-r7
a9a8ac7762
Adds validation for arch values
2025-06-25 16:57:23 +01:00
cgranleese-r7
64504319e6
Updates module validation to check description and name for non-printable chars
2025-06-25 14:19:43 +01:00
cgranleese-r7
30c15535b4
Adds a check to skip modules with execellent ranking and sentinel values
2025-06-24 12:13:08 +01:00
cgranleese-r7
a454217bd4
Update info -d markdown
2025-06-24 11:21:49 +01:00
adfoster-r7
fb02b4ade5
Revert "Bump rails version to 7.2"
2025-06-17 12:20:49 +01:00
Dean Welch
39356d55e0
Fix migration date issues when running tests
2025-06-12 16:41:10 +01:00
Christophe De La Fuente
4ccab4543d
Register VulnAttempts for both Exploit and Auxiliary modules
2025-05-28 18:19:12 +02:00
adfoster-r7
4ccf11981e
Update windows 2019 CI usage
2025-05-12 16:00:52 +01:00
adfoster-r7
10e8cbb48c
Merge pull request #19953 from dwelch-r7/rails-7.1-upgrade
...
Rails 7.1 upgrade
2025-04-11 15:48:25 +01:00
adfoster-r7
07b731b82e
Skip loading external modules with unsupported runtimes
2025-04-09 23:42:12 +01:00
Dean Welch
0954f5507e
Rails 7.1 upgrade
2025-04-08 12:47:31 +01:00
adfoster-r7
8e9c144e2c
Consolidate datastore with fallbacks logic
2025-02-09 20:26:52 +00:00
adfoster-r7
fcee7a5972
Rollback origin support for vulns
2025-01-27 12:44:58 +00:00
adfoster-r7
c768ec8c83
Update report_vuln to support tracking origin
2025-01-20 22:07:13 +00:00
cgranleese-r7
2edbc6a134
Land #19546 , Improve database module cache performance
2024-12-13 15:31:08 +00:00
Spencer McIntyre
19302e1c5d
Remove a test that should be working now
2024-12-06 12:31:11 -05:00
Christophe De La Fuente
3dcb9d58ab
Code review
2024-12-02 14:02:07 +01:00
adfoster-r7
825e557269
Update puma and dependencies
2024-10-30 22:41:00 +00:00
adfoster-r7
d7c8836f3b
Fix crash when importing Metasploit xml file
2024-10-22 23:47:44 +01:00
Ashley Donaldson
197595659e
Better timeout for PHP 5.3 tests, which apparently take forever
2024-10-16 16:53:53 +11:00
Ashley Donaldson
27e3376fba
Allow longer acceptance tests - needed for PHP 5.3
2024-10-12 14:36:09 +11:00
adfoster-r7
93e0ca7cd5
Improve database module cache performance
2024-10-10 10:52:19 +01:00
cgranleese-r7
cbd763fad5
Drys out some code
2024-09-20 14:54:03 +01:00
cgranleese-r7
5ef3dfd531
Rebase to pull in #19428 changes
2024-09-19 11:13:07 +01:00
cgranleese-r7
8ab3b6c178
Address PR feedback
2024-09-19 11:09:14 +01:00
cgranleese-r7
44efbc21a8
Add automated acceptance tests for cmd_exec
2024-09-19 11:09:14 +01:00
cgranleese-r7
76b0bc5c47
Renames Acceptance::Meterpreter module to Acceptance::Session
2024-09-16 13:11:39 +01:00
sjanusz-r7
cf97b36d98
Align importing timestamps method with msf_ prefix
2024-06-03 11:09:59 +01:00
sjanusz-r7
f7b69e2fe7
Fix service 'updated at' time not being updated correctly
2024-06-03 10:17:19 +01:00
h00die
3b2d669702
add EVENT_DEPENDENT to spec
2024-04-22 15:38:56 -04:00
Dean Welch
25a65c0ed7
Consolidate and simplify session tests
2024-04-05 13:10:15 +01:00
Dean Welch
f132bdbe30
Enforce single module stance
2024-03-25 11:53:23 +00:00
adfoster-r7
298e03b1cd
Land #18885 , update the sessions command to be consistent
2024-03-20 18:49:33 +00:00
Gaurav Jain
02713fcadb
Update tests for sessions command
2024-03-15 01:26:18 +05:30