Commit Graph

486 Commits

Author SHA1 Message Date
Christophe De La Fuente c02ac3920d Reapply "Vulnerability Report Enhancement"
This reverts commit c35537252f.
2026-02-10 09:46:37 +00:00
Valentin Lobstein f41eda1128 Add GHSA and OSV reference type support
Add support for GHSA (GitHub Security Advisories) and OSV (Open Source
Vulnerabilities) as structured reference types in Metasploit modules.

Convert 49 hardcoded GHSA URLs to structured ['GHSA', 'GHSA-xxxx'] format
across existing modules, and add support for repository-specific GHSA
references with an optional third parameter ['GHSA', 'GHSA-xxxx', 'repo'].

Update reference validation, module validator, and info_fixups to handle
the new reference types correctly.
2026-02-09 15:17:23 +01:00
adfoster-r7 f4e67b6455 Mark additional flakey socket tests 2026-01-26 21:11:13 +00:00
Spencer McIntyre 6ae361b103 Merge pull request #20868 from adfoster-r7/fix-udp-sockets-for-php-meterpreter
Fix UDP sockets for PHP meterpreter
2026-01-15 15:09:26 -05:00
adfoster-r7 7f90e1f6a0 Resove method undefined issue 2026-01-15 16:32:46 +00:00
adfoster-r7 67e279ef8c Fix UDP sockets for php meterpreter 2026-01-15 16:31:16 +00:00
cgranleese-r7 c35537252f Revert "Vulnerability Report Enhancement" 2025-12-15 12:40:02 +00:00
Christophe De La Fuente 40ac35c02a Vulnerability Report enhancement
- update `#report_service` and `#report_vuln`
- update vulnerability report when a session is established
- update CheckCode and `#cmd_check` to report a vulnerability when
  Vulnerable checkcode is returned
- update `vulns` and `services` commands to display the `resource` and
  parent services
- specs
2025-12-15 12:36:50 +01:00
Spencer McIntyre f2a05ad295 Run them tests 2025-11-14 16:18:47 -05:00
bcoles daf280ad11 spec: ModuleValidation: Validate module DefaultTarget value 2025-10-15 19:58:25 +11:00
bwatters-r7 1891ebef87 add x64 acceptance tests, and use single, release payload 2025-09-17 12:21:30 -05:00
adfoster-r7 0557d63127 Add database ref opts for kerberos and pkcs12 2025-08-18 15:56:47 +01:00
adfoster-r7 bebb43f8f6 Improve kerberos file load error messages 2025-08-15 12:38:45 +01:00
Dean Welch 0ce1617288 Bump rails to 7.2 2025-07-28 12:29:58 +01:00
sjanusz-r7 99c9e8c8e7 Fix acceptance tests prompt matching 2025-07-17 10:18:25 +01:00
cgranleese-r7 a6cdb6deb9 Adds support for MITRE ATT&CK References 2025-06-25 17:24:47 +01:00
cgranleese-r7 a9a8ac7762 Adds validation for arch values 2025-06-25 16:57:23 +01:00
cgranleese-r7 64504319e6 Updates module validation to check description and name for non-printable chars 2025-06-25 14:19:43 +01:00
cgranleese-r7 30c15535b4 Adds a check to skip modules with execellent ranking and sentinel values 2025-06-24 12:13:08 +01:00
cgranleese-r7 a454217bd4 Update info -d markdown 2025-06-24 11:21:49 +01:00
adfoster-r7 fb02b4ade5 Revert "Bump rails version to 7.2" 2025-06-17 12:20:49 +01:00
Dean Welch 39356d55e0 Fix migration date issues when running tests 2025-06-12 16:41:10 +01:00
Christophe De La Fuente 4ccab4543d Register VulnAttempts for both Exploit and Auxiliary modules 2025-05-28 18:19:12 +02:00
adfoster-r7 4ccf11981e Update windows 2019 CI usage 2025-05-12 16:00:52 +01:00
adfoster-r7 10e8cbb48c Merge pull request #19953 from dwelch-r7/rails-7.1-upgrade
Rails 7.1 upgrade
2025-04-11 15:48:25 +01:00
adfoster-r7 07b731b82e Skip loading external modules with unsupported runtimes 2025-04-09 23:42:12 +01:00
Dean Welch 0954f5507e Rails 7.1 upgrade 2025-04-08 12:47:31 +01:00
adfoster-r7 8e9c144e2c Consolidate datastore with fallbacks logic 2025-02-09 20:26:52 +00:00
adfoster-r7 fcee7a5972 Rollback origin support for vulns 2025-01-27 12:44:58 +00:00
adfoster-r7 c768ec8c83 Update report_vuln to support tracking origin 2025-01-20 22:07:13 +00:00
cgranleese-r7 2edbc6a134 Land #19546, Improve database module cache performance 2024-12-13 15:31:08 +00:00
Spencer McIntyre 19302e1c5d Remove a test that should be working now 2024-12-06 12:31:11 -05:00
Christophe De La Fuente 3dcb9d58ab Code review 2024-12-02 14:02:07 +01:00
adfoster-r7 825e557269 Update puma and dependencies 2024-10-30 22:41:00 +00:00
adfoster-r7 d7c8836f3b Fix crash when importing Metasploit xml file 2024-10-22 23:47:44 +01:00
Ashley Donaldson 197595659e Better timeout for PHP 5.3 tests, which apparently take forever 2024-10-16 16:53:53 +11:00
Ashley Donaldson 27e3376fba Allow longer acceptance tests - needed for PHP 5.3 2024-10-12 14:36:09 +11:00
adfoster-r7 93e0ca7cd5 Improve database module cache performance 2024-10-10 10:52:19 +01:00
cgranleese-r7 cbd763fad5 Drys out some code 2024-09-20 14:54:03 +01:00
cgranleese-r7 5ef3dfd531 Rebase to pull in #19428 changes 2024-09-19 11:13:07 +01:00
cgranleese-r7 8ab3b6c178 Address PR feedback 2024-09-19 11:09:14 +01:00
cgranleese-r7 44efbc21a8 Add automated acceptance tests for cmd_exec 2024-09-19 11:09:14 +01:00
cgranleese-r7 76b0bc5c47 Renames Acceptance::Meterpreter module to Acceptance::Session 2024-09-16 13:11:39 +01:00
sjanusz-r7 cf97b36d98 Align importing timestamps method with msf_ prefix 2024-06-03 11:09:59 +01:00
sjanusz-r7 f7b69e2fe7 Fix service 'updated at' time not being updated correctly 2024-06-03 10:17:19 +01:00
h00die 3b2d669702 add EVENT_DEPENDENT to spec 2024-04-22 15:38:56 -04:00
Dean Welch 25a65c0ed7 Consolidate and simplify session tests 2024-04-05 13:10:15 +01:00
Dean Welch f132bdbe30 Enforce single module stance 2024-03-25 11:53:23 +00:00
adfoster-r7 298e03b1cd Land #18885, update the sessions command to be consistent 2024-03-20 18:49:33 +00:00
Gaurav Jain 02713fcadb Update tests for sessions command 2024-03-15 01:26:18 +05:30