RadioLogic
6ef3cf7ed0
Added better separation between chocolatey 1.0 and newer chocolatey versions
2022-03-27 15:04:06 -04:00
RadioLogic
8607fd766f
Added side effects back in since descriptions want them
2022-03-27 15:03:37 -04:00
RadioLogic
86266ad5bd
Updated info values to allow info to work
2022-03-27 14:42:44 -04:00
RadioLogic
d65a2fd687
Removed use of powershell since its unnecessary
2022-03-27 14:16:04 -04:00
RadioLogic
9cc6944c18
Added option to change chocolatey path location in case its not on path
2022-03-27 14:14:02 -04:00
RadioLogic
0489655c72
Added notes on stability
2022-03-26 13:32:11 -04:00
RadioLogic
2ae6d1f655
Renamed havechocolatey
2022-03-26 13:31:58 -04:00
RadioLogic
8248c1d0b8
Formatted document with rubocop
2022-03-26 13:26:22 -04:00
RadioLogic
840d26aa2d
Added module to enumerate through chocolatey applications
2022-03-25 13:13:15 -04:00
Grant Willcox
bf88b7f618
Land #16325 - Replace IO read on binary files with File binread
2022-03-24 10:08:40 -05:00
Grant Willcox
ff77ff0d11
Fix RuboCop issues with ubiquiti_config.rb
2022-03-23 11:32:45 -05:00
Tim W
014c98acd8
Land #16369 , fix upgrading meterpreter sessions with shell_to_meterpreter
2022-03-23 07:15:55 +00:00
adfoster-r7
03d645016c
Land #16250 , Update service mixins for NAT options
2022-03-23 00:13:20 +00:00
Grant Willcox
964f78fc69
Land #16341 , Implement VNC hash types
2022-03-22 17:00:02 -05:00
Grant Willcox
5bbde5bb81
Land #16367 , Fix character escaping in the apisix exploit
2022-03-22 14:04:07 -05:00
Grant Willcox
02c616a29e
Land #16207 , Fix VNC scanner modules and libraries to make them work in 2022
2022-03-22 13:40:29 -05:00
sjanusz
b54cfee665
Open a new Meterpreter session when trying to upgrade Meterpreter
2022-03-22 14:08:25 +00:00
Spencer McIntyre
fd2d1c0784
Add and use the ListenerComm option for SOCKS
2022-03-22 09:23:09 -04:00
Spencer McIntyre
86aed4928e
Add the HttpListenerBindPort to the log4shell exploit
2022-03-22 09:06:22 -04:00
Spencer McIntyre
6ec530a5ee
Improve some error handling
2022-03-21 15:22:00 -04:00
Spencer McIntyre
49aff227c5
Fix character escaping in the apisix exploit
2022-03-21 15:06:03 -04:00
Grant Willcox
024da204d1
Land #16353 , respect ssl_version in crawler
2022-03-21 12:24:38 -05:00
Spencer McIntyre
a739083db9
Readd the missing SocketServer mixin for SMB
2022-03-21 11:51:10 -04:00
Spencer McIntyre
929e5d5e76
Update the SMB capture module with new options
2022-03-21 11:47:56 -04:00
sjanusz
bbf9e3163a
Fix file reads on Windows for binary files
2022-03-21 12:47:39 +00:00
Spencer McIntyre
ccdc2db9e7
Land #16309 , Catch an exception in ssh_login
...
The ssh_login module would crash when the channel used to execute the
commands to gather the platform information reported that they failed.
2022-03-17 16:41:47 -04:00
Spencer McIntyre
da1e4853b8
Land #16317 , Free UDP ports after use
2022-03-17 16:39:09 -04:00
Spencer McIntyre
acf3906953
Add another instance of missing error handling
2022-03-17 16:07:31 -04:00
Grant Willcox
1bfc0feedb
Remove default options from HttpUsername and HttpPassword as blank strings are still considered setting the option when it comes to OptString, and this leads to falsely assuming the strings are set by the user when they are not
2022-03-17 11:29:06 -05:00
Grant Willcox
6ee0ef0c8a
Add in appropriate warning message in case we hit a snag, might help people out who hit a similar issue. Issue is highly tempermental and sometimes goes away for no reason so its hard to pin down but logging in this way should help. I tried doing things manually in code but it didn't seem to help and I don't want to block the code from working on something like this.
2022-03-17 11:29:05 -05:00
Grant Willcox
ce062973cb
Make changes from review process, redo code for module to make it make less requests, and generally improve overal operations.
2022-03-17 11:29:05 -05:00
Grant Willcox
1f53e9d1c4
Rubocop and fix a mistake on commenting too much of the code out from testing
2022-03-17 11:29:00 -05:00
Grant Willcox
269cd5cfed
Add in Exchange Version mixin and module example
2022-03-17 11:28:53 -05:00
Grant Willcox
0f2813f70c
Update module and documentation for edits found whilst doing final pass of code
2022-03-16 16:55:03 -05:00
mauricelambert
e678615f27
Fix items from code review
2022-03-16 16:54:38 -05:00
mauricelambert
33e12bf06f
Correct CVE number, comments and documentation
2022-03-16 16:54:24 -05:00
mauricelambert
b745a24a9d
Random payload && TARGETURI option
2022-03-16 16:54:15 -05:00
mauricelambert
7c806a8723
Add auxiliary module for DOS IIS Server
2022-03-16 16:53:59 -05:00
Ashley Donaldson
40c422cdf7
Close NBNS, mDNS and LLMNR sockets when their modules are complete
2022-03-17 08:12:26 +11:00
Ashley Donaldson
972c260969
Fix double dereference by moving DNS cleanup into separate function, and force to run as job.
2022-03-17 08:12:25 +11:00
Jeffrey Martin
c3445ccb6f
respect ssl_version in crawler
...
When utilizing `Anemone` to crawl pages using `Rex` sockets
Framework common `SSL` settings can pull from standardized options.
This change enables more fine grained user control and avoids issues
with missing or deprecated SSL versions in newer Ruby versions.
2022-03-16 14:24:45 -05:00
bwatters
b4de9fa92a
Land #16344 , Add module for CVE-2022-21999 and More Railgun Definitions
...
Merge branch 'land-16344' into upstream-master
2022-03-16 08:37:05 -05:00
Shelby Pace
381b91de45
change wording in arch check
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2022-03-15 16:45:36 -05:00
space-r7
e96ec401bf
add arch check, fix logic error, add aka note
2022-03-15 12:58:39 -05:00
Spencer McIntyre
4dd7fc60e6
Land #16324 , Fix broken DNS native_server
2022-03-15 09:06:03 -04:00
bwatters
c936c45167
Land #16186 , Add Python Meterpreter Command Payloads
...
Merge branch 'land-16186' into upstream-master
2022-03-14 17:29:03 -05:00
space-r7
99664efed7
use full user name, add test output to docs
2022-03-14 09:15:36 -05:00
h00die
a959725f7c
implement vnc hash types
2022-03-13 13:27:38 -04:00
space-r7
96e7e55496
Land #16252 , add GitLab GraphQL user enum module
2022-03-11 14:53:13 -06:00
adfoster-r7
d9285044ec
Land #16326 , Fix SMB signing detection when SMB1 is disabled
2022-03-11 18:13:18 +00:00