Commit Graph

32315 Commits

Author SHA1 Message Date
RadioLogic 6ef3cf7ed0 Added better separation between chocolatey 1.0 and newer chocolatey versions 2022-03-27 15:04:06 -04:00
RadioLogic 8607fd766f Added side effects back in since descriptions want them 2022-03-27 15:03:37 -04:00
RadioLogic 86266ad5bd Updated info values to allow info to work 2022-03-27 14:42:44 -04:00
RadioLogic d65a2fd687 Removed use of powershell since its unnecessary 2022-03-27 14:16:04 -04:00
RadioLogic 9cc6944c18 Added option to change chocolatey path location in case its not on path 2022-03-27 14:14:02 -04:00
RadioLogic 0489655c72 Added notes on stability 2022-03-26 13:32:11 -04:00
RadioLogic 2ae6d1f655 Renamed havechocolatey 2022-03-26 13:31:58 -04:00
RadioLogic 8248c1d0b8 Formatted document with rubocop 2022-03-26 13:26:22 -04:00
RadioLogic 840d26aa2d Added module to enumerate through chocolatey applications 2022-03-25 13:13:15 -04:00
Grant Willcox bf88b7f618 Land #16325 - Replace IO read on binary files with File binread 2022-03-24 10:08:40 -05:00
Grant Willcox ff77ff0d11 Fix RuboCop issues with ubiquiti_config.rb 2022-03-23 11:32:45 -05:00
Tim W 014c98acd8 Land #16369, fix upgrading meterpreter sessions with shell_to_meterpreter 2022-03-23 07:15:55 +00:00
adfoster-r7 03d645016c Land #16250, Update service mixins for NAT options 2022-03-23 00:13:20 +00:00
Grant Willcox 964f78fc69 Land #16341, Implement VNC hash types 2022-03-22 17:00:02 -05:00
Grant Willcox 5bbde5bb81 Land #16367, Fix character escaping in the apisix exploit 2022-03-22 14:04:07 -05:00
Grant Willcox 02c616a29e Land #16207, Fix VNC scanner modules and libraries to make them work in 2022 2022-03-22 13:40:29 -05:00
sjanusz b54cfee665 Open a new Meterpreter session when trying to upgrade Meterpreter 2022-03-22 14:08:25 +00:00
Spencer McIntyre fd2d1c0784 Add and use the ListenerComm option for SOCKS 2022-03-22 09:23:09 -04:00
Spencer McIntyre 86aed4928e Add the HttpListenerBindPort to the log4shell exploit 2022-03-22 09:06:22 -04:00
Spencer McIntyre 6ec530a5ee Improve some error handling 2022-03-21 15:22:00 -04:00
Spencer McIntyre 49aff227c5 Fix character escaping in the apisix exploit 2022-03-21 15:06:03 -04:00
Grant Willcox 024da204d1 Land #16353, respect ssl_version in crawler 2022-03-21 12:24:38 -05:00
Spencer McIntyre a739083db9 Readd the missing SocketServer mixin for SMB 2022-03-21 11:51:10 -04:00
Spencer McIntyre 929e5d5e76 Update the SMB capture module with new options 2022-03-21 11:47:56 -04:00
sjanusz bbf9e3163a Fix file reads on Windows for binary files 2022-03-21 12:47:39 +00:00
Spencer McIntyre ccdc2db9e7 Land #16309, Catch an exception in ssh_login
The ssh_login module would crash when the channel used to execute the
commands to gather the platform information reported that they failed.
2022-03-17 16:41:47 -04:00
Spencer McIntyre da1e4853b8 Land #16317, Free UDP ports after use 2022-03-17 16:39:09 -04:00
Spencer McIntyre acf3906953 Add another instance of missing error handling 2022-03-17 16:07:31 -04:00
Grant Willcox 1bfc0feedb Remove default options from HttpUsername and HttpPassword as blank strings are still considered setting the option when it comes to OptString, and this leads to falsely assuming the strings are set by the user when they are not 2022-03-17 11:29:06 -05:00
Grant Willcox 6ee0ef0c8a Add in appropriate warning message in case we hit a snag, might help people out who hit a similar issue. Issue is highly tempermental and sometimes goes away for no reason so its hard to pin down but logging in this way should help. I tried doing things manually in code but it didn't seem to help and I don't want to block the code from working on something like this. 2022-03-17 11:29:05 -05:00
Grant Willcox ce062973cb Make changes from review process, redo code for module to make it make less requests, and generally improve overal operations. 2022-03-17 11:29:05 -05:00
Grant Willcox 1f53e9d1c4 Rubocop and fix a mistake on commenting too much of the code out from testing 2022-03-17 11:29:00 -05:00
Grant Willcox 269cd5cfed Add in Exchange Version mixin and module example 2022-03-17 11:28:53 -05:00
Grant Willcox 0f2813f70c Update module and documentation for edits found whilst doing final pass of code 2022-03-16 16:55:03 -05:00
mauricelambert e678615f27 Fix items from code review 2022-03-16 16:54:38 -05:00
mauricelambert 33e12bf06f Correct CVE number, comments and documentation 2022-03-16 16:54:24 -05:00
mauricelambert b745a24a9d Random payload && TARGETURI option 2022-03-16 16:54:15 -05:00
mauricelambert 7c806a8723 Add auxiliary module for DOS IIS Server 2022-03-16 16:53:59 -05:00
Ashley Donaldson 40c422cdf7 Close NBNS, mDNS and LLMNR sockets when their modules are complete 2022-03-17 08:12:26 +11:00
Ashley Donaldson 972c260969 Fix double dereference by moving DNS cleanup into separate function, and force to run as job. 2022-03-17 08:12:25 +11:00
Jeffrey Martin c3445ccb6f respect ssl_version in crawler
When utilizing `Anemone` to crawl pages using `Rex` sockets
Framework common `SSL` settings can pull from standardized options.
This change enables more fine grained user control and avoids issues
with missing or deprecated SSL versions in newer Ruby versions.
2022-03-16 14:24:45 -05:00
bwatters b4de9fa92a Land #16344, Add module for CVE-2022-21999 and More Railgun Definitions
Merge branch 'land-16344' into upstream-master
2022-03-16 08:37:05 -05:00
Shelby Pace 381b91de45 change wording in arch check
Co-authored-by: Brendan <bwatters@rapid7.com>
2022-03-15 16:45:36 -05:00
space-r7 e96ec401bf add arch check, fix logic error, add aka note 2022-03-15 12:58:39 -05:00
Spencer McIntyre 4dd7fc60e6 Land #16324, Fix broken DNS native_server 2022-03-15 09:06:03 -04:00
bwatters c936c45167 Land #16186, Add Python Meterpreter Command Payloads
Merge branch 'land-16186' into upstream-master
2022-03-14 17:29:03 -05:00
space-r7 99664efed7 use full user name, add test output to docs 2022-03-14 09:15:36 -05:00
h00die a959725f7c implement vnc hash types 2022-03-13 13:27:38 -04:00
space-r7 96e7e55496 Land #16252, add GitLab GraphQL user enum module 2022-03-11 14:53:13 -06:00
adfoster-r7 d9285044ec Land #16326, Fix SMB signing detection when SMB1 is disabled 2022-03-11 18:13:18 +00:00