Commit Graph

5176 Commits

Author SHA1 Message Date
Spencer McIntyre d31ffa27d3 Add and use a new kerberos CCache model definition 2022-07-01 11:57:30 -04:00
Spencer McIntyre 8c3d7ff42f Rename Thrift related definitions
These definitions are only used by one exploit. BinData registers the
class name globally meaning that the Header and Data types were being
defined here which conflicted with those needed for Kerberos.
2022-07-01 11:56:55 -04:00
Ashley Donaldson 997f9b92d9 Changes from code review 2022-06-24 09:33:57 +10:00
Ashley Donaldson 2cce4ac1c1 Fix unit tests 2022-06-23 16:55:30 +10:00
Ashley Donaldson bcd30b9be8 Don't error if it's not 12, as this can occur on older systems 2022-06-23 11:52:55 +10:00
Ashley Donaldson 3e33e2694d Include information on whether account is disabled or locked.
We can do this more precisely for Windows' implementation of Kerberos
by using the undocumented PA-PW-SALT entry.
2022-06-23 10:46:25 +10:00
adfoster-r7 89187c1fa9 Land #16685, Add missing Kerberos encryption types 2022-06-22 13:13:30 +01:00
dwelch-r7 e672fad870 Land #16689, Update Kerberos to support host addresses in tickets 2022-06-22 12:52:17 +01:00
Ashley Donaldson a4a0fc3028 Changes from code review.
Use kwargs instead of default values for rarer crypto args.
Revert case-sensitivity change; we'll leave krb5 on Linux til later.
More constants
2022-06-22 16:03:36 +10:00
Ashley Donaldson 15446fd173 Incorporated new encryption methods into login scanner, including negotiating 2022-06-22 09:36:25 +10:00
Ashley Donaldson 19b62a5af6 Support several new encryption types for Kerberos.
Supports DES-CBC-MD5, DES3-CBC-SHA1, AES128, AES256
2022-06-22 09:13:33 +10:00
adfoster-r7 f8901a8b17 Add Kerberos LoginScanner support 2022-06-20 16:38:32 +01:00
adfoster-r7 3f56f9891d Update keberos to support host addresses in tickets 2022-06-18 04:16:36 +01:00
dwelch-r7 ac5a885f16 Land #16660, Fix Kerberos flags decoding logic 2022-06-17 17:38:09 +01:00
adfoster-r7 5dd650fc76 Support decoding pa_data as part of kdc enc response 2022-06-15 20:46:45 +01:00
adfoster-r7 affc5bc294 Fix Kerberos flags decoding logic 2022-06-09 12:22:20 +01:00
adfoster-r7 6e9765992c Fix smb named pipe pivot crash 2022-06-06 13:00:42 +01:00
Spencer McIntyre 0c481ed9c9 Patch LDAP for synchronous reads 2022-05-27 10:57:28 -04:00
adfoster-r7 739c0fcad1 Specify peer hostname for ssl connections 2022-05-13 13:55:43 +01:00
dwelch-r7 c0c02e56ba Land #16430, Improve kerberos user enum module 2022-05-13 12:17:26 +01:00
adfoster-r7 6a1fe27406 Land #16442, add vars_form_data to the HTTP client 2022-05-13 10:53:16 +01:00
adfoster-r7 e4f42d7eaa Update more modules to use the vars_form_data api 2022-05-11 18:18:21 +01:00
adfoster-r7 94e1ad3fe5 Update form data api defaults 2022-05-10 14:12:17 +01:00
adfoster-r7 0ce36f318e Move logic into client_request for consistency 2022-05-09 16:51:15 +01:00
adfoster-r7 b4ca6870f1 Land #16542, Fix nil channel id when trying to close channels 2022-05-06 19:03:15 +01:00
sjanusz cef38fb714 Fix nil channel id when trying to close channels 2022-05-06 17:09:36 +01:00
sjanusz 2e59f17439 Rename files to form_data 2022-05-06 16:41:19 +01:00
adfoster-r7 94580793a3 Land #16533, Fix -w option flag for meterpreter reg command 2022-05-06 10:49:46 +01:00
Grant Willcox 0a86d07014 Land #16491, Fix crashes on timeouts for multiple modules and Meterpreter 2022-05-05 13:34:29 -05:00
Christophe De La Fuente aedab4c8aa Fix reg command -w option flag 2022-05-05 11:09:53 +02:00
adfoster-r7 bbd881f999 Fix crashes on timeouts 2022-05-04 09:43:00 +01:00
dwelch-r7 2e44a91b39 Refactor debugging config options to a common location 2022-04-29 15:04:12 +01:00
dwelch-r7 e93253fb38 Conditionally send log path configuration for meterpreter 2022-04-29 15:04:11 +01:00
dwelch-r7 ec9f0b5242 Add log path session config option 2022-04-29 15:04:11 +01:00
sjanusz 4ec4b89d00 Add upload of files to HttpClient & update a module to use it 2022-04-25 14:55:37 +01:00
Grant Willcox 7aa36a65d6 Add in additional validation options and rework the regex a bit so that we only match on valid hex characters. 2022-04-20 17:11:14 -05:00
Christophe De La Fuente 99789c81de Add support to binary data with setting a REG_BINARY key value 2022-04-20 12:12:57 +02:00
Grant Willcox 1e67d62f42 Minor fix to improve readability 2022-04-19 12:43:57 -05:00
Jeffrey Martin 74e734c7e8 restore multi-char short flag support
Recent updates in `Rex::Parser::Arguments` regressed the ability have
short flags with multiple characters.
2022-04-15 15:11:11 -05:00
dwelch-r7 aca1b8df9b Use debug versions of extensions if MeterpreterDebugBuild is enabled 2022-04-13 14:10:57 +01:00
adfoster-r7 a53be3184a Improving error handling of Kerberos 2022-04-08 20:48:10 +01:00
adfoster-r7 1e867ac5a7 Improve kerberos user enum module 2022-04-08 15:55:37 +01:00
adfoster-r7 bef0c9be8f Land #16299, Make TLV Logging cache threadsafe 2022-04-01 16:19:45 +01:00
Spencer McIntyre cec44f0cab Land #16371, Fix websocket crash 2022-03-24 13:07:34 -04:00
Grant Willcox bf88b7f618 Land #16325 - Replace IO read on binary files with File binread 2022-03-24 10:08:40 -05:00
sjanusz 558d8bb727 Make TLV Logging cache threadsafe 2022-03-23 10:35:39 +00:00
alanfoster cebdebb188 Fix kubernetes websocket crash when identifying peer host 2022-03-23 02:28:47 +00:00
adfoster-r7 03d645016c Land #16250, Update service mixins for NAT options 2022-03-23 00:13:20 +00:00
Grant Willcox 02c616a29e Land #16207, Fix VNC scanner modules and libraries to make them work in 2022 2022-03-22 13:40:29 -05:00
Grant Willcox c0b0c418d2 Update constants explanation to explain VeNCrypt 19 option a little clearer 2022-03-22 13:06:45 -05:00