adfoster-r7
e2d052322d
Support upload and download command for powershell sessions
2022-10-26 11:48:31 +01:00
bcoles
cd656ecdbb
Msf::Post::File.append_file: Append not overwrite on *nix shell sessions
2022-10-21 23:28:14 +11:00
Metasploit
9f6134813e
Bump version of framework to 6.2.24
2022-10-20 12:14:26 -05:00
Grant Willcox
a4acd8a680
Land #17154 , improve qualys import times
2022-10-19 10:44:22 -05:00
Christophe De La Fuente
15d81ca04c
Land #17135 , Add namespace to identify.rb
2022-10-19 10:48:25 +02:00
Jeffrey Martin
016a1c9da9
one more safer access
2022-10-18 15:02:58 -05:00
Jeffrey Martin
7b9ed4a1da
corrections to reference IDs
2022-10-18 14:57:44 -05:00
Matthew Dunn
aab064779c
Check the global LHOST before picking it from RHOST
2022-10-17 17:59:58 -04:00
Matthew Dunn
1e50ba3415
Move to Hashes module, address requested changes
...
Fix rubocop
Move identify to hashes module up one layer, use full reference to identify_hash instead of full include
Fix SMTP require
Remove hashes require statement
Remove hashes require statement
Remove hashes require statement
Remove hashes require statement
Address remaining requested changes, reference constants directly
Add all the missing direct references
Co-Authored-By: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-17 17:28:31 -04:00
Matthew Dunn
8b5223f53b
Modularize Identify, Update referenced use cases
...
Modularize Identity.rb
Include new module style Identify
Update juniper.rb
Fix inadvertent change
Add new module to identify spec
Put the require back
Put back require line for juniper
2022-10-17 17:28:30 -04:00
Jeffrey Martin
82bd12566f
remove constant not used
2022-10-17 15:19:35 -05:00
Jeffrey Martin
2022b507a6
Qualys parser now uses 'Nokogiri::XML'/xpath
2022-10-17 15:03:54 -05:00
Jeffrey Martin
8cc21f9b01
improve qualys import times
...
When importing data from recent Qualys reports many `RESULT` tags contain
extra long lines and significant content that result in extremely long processing
times when parsed by REXML. By removing all `RESULT` tags not currently processed
during import the time to process data can be significantly improved.
2022-10-17 13:14:55 -05:00
Metasploit
8e08189921
Bump version of framework to 6.2.23
2022-10-13 12:15:51 -05:00
Jeffrey Martin
2097ff132c
Land #16987 , guard possible RubySMBError condition
2022-10-11 13:12:29 -05:00
bwatters
ef0ca2edbb
Land #17057 , Msf::Post::Windows::ExtAPI: Remove load_extapi method
...
Merge branch 'land-17057' into upstream-master
2022-10-07 15:54:52 -05:00
Metasploit
edfc68a809
Bump version of framework to 6.2.22
2022-10-06 12:10:14 -05:00
bwatters
fc6cdd2a92
Land #17072 , Add robustness to shell command token delimiting
...
Merge branch 'land-17072' into upstream-master
2022-10-06 10:28:14 -05:00
bwatters
c77b35d544
remove module_function declarations
2022-10-06 10:21:36 -05:00
h00die
06aefb630a
string true to bool true
2022-10-03 19:50:04 -04:00
bwatters
c17c78bc0f
Land #16995 , Add TrustedSec's COFFLoader as Meterpreter Extension
...
Merge branch 'land-16995' into upstream-master
2022-09-30 14:14:39 -05:00
Ashley Donaldson
ebb38454e4
Restored the _win32 and _unix functions used in Pro
2022-09-30 14:04:40 +10:00
Metasploit
47ea5d9b1d
Bump version of framework to 6.2.21
2022-09-29 19:43:39 -05:00
Ashley Donaldson
f59a84ac5d
Add robustness to detection and use of echo-y/non-echo-y shells
2022-09-29 11:00:56 +10:00
Ashley Donaldson
af0832c3c3
Properly support Windows for detecting echo shells
2022-09-29 07:44:53 +10:00
adfoster-r7
2388f7e6c4
Land #17054 , Fix Adapted Single (Unstaged) Payloads
2022-09-27 11:54:04 +01:00
adfoster-r7
c436f42c8c
Land #16994 , Fix Multiple Registry Related Issues
2022-09-27 11:43:02 +01:00
Metasploit
b1a6d9d307
Bump version of framework to 6.2.20
2022-09-23 08:09:46 -05:00
bcoles
5531e3dcab
Msf::Post::Windows::ExtAPI: Remove load_extapi method
2022-09-23 17:41:20 +10:00
adfoster-r7
5e2a6c9dba
Land #17015 , improve http login result checks
2022-09-23 01:28:59 +01:00
Jeffrey Martin
aeff76e0ca
update set_sane_defaults
2022-09-22 18:48:49 -05:00
Spencer McIntyre
650be83ebb
More rubocop fixes and switch to Tempfile
2022-09-22 17:21:51 -04:00
Jeffrey Martin
96d291121b
use model validator instead of setup check
2022-09-22 14:49:09 -05:00
Spencer McIntyre
59570336bd
Don't call #generate_stage in single payloads
...
Single payloads should be using #generate because they are not staged.
2022-09-22 14:45:54 -04:00
Spencer McIntyre
2ca6c3d5e5
Land #17027 , Add in docs site to banner
2022-09-22 12:21:49 -04:00
Spencer McIntyre
095a861783
Convert REG_DWORD and REG_QWORD values to integers
2022-09-21 17:14:47 -04:00
skylerknecht
354be473a3
Change how bof arguments are processed
2022-09-21 13:25:45 -04:00
Spencer McIntyre
0c5377b808
Consolidate registry value conversion logic
2022-09-21 09:06:58 -04:00
Spencer McIntyre
d82774be59
Test and handle REG_QWORD
2022-09-20 16:31:54 -04:00
Spencer McIntyre
2654752585
Fix REG_EXPAND_SZ correctly
2022-09-20 16:31:47 -04:00
Grant Willcox
98aea3f2ae
Land #17002 , Msf::Post::Windows: Replace load_extapi with ExtAPI capability check
2022-09-20 13:29:45 -05:00
Grant Willcox
38ab0c6ddd
Redo guard clauses to be more appropriate
2022-09-20 12:23:25 -05:00
Grant Willcox
f19cc376d7
Add additional guard checks to libraries to handle edge cases introduced when using shell sessions or other sessions that don't support RailGun. Also import the command definitions so that non-Meterpreter sessions can actually check the command ID's.
2022-09-20 11:45:31 -05:00
adfoster-r7
59923850ee
Land #17036 , Set @peer_info in #initialize
2022-09-20 12:02:07 +01:00
bwatters
88f14950a0
Land #16688 , Add Mimipenguin
...
Merge branch 'land-16688' into upstream-master
2022-09-19 12:43:16 -05:00
Spencer McIntyre
6c2b441d10
Fix #16684 , Set @peer_info in #initialize
...
This will fail though if #rstream has already been closed which can be
the case when the socket is serving an HTTP request. This attempts to
proactively cache the information and store it for later use.
2022-09-19 13:28:49 -04:00
Grant Willcox
ad697c9f47
Add in docs site to banner
2022-09-19 10:09:48 -05:00
Jeffrey Martin
581aa2c34a
enable user defined accepted repsonse codes
...
* login scanner object expects an array of codes and set defaults
* login scanner limits response codes to 2XX and 3XX code
* parsing to convert OptString is handle in the consuming module
2022-09-16 12:21:14 -05:00
cgranleese-r7
55119aaac7
Land #16940 , Rewrite datastore, and add support for option fallback lookups
2022-09-16 14:19:19 +01:00
adfoster-r7
3a281234df
Add feature flagged datastore rewrite, with support for option fallback lookups
2022-09-16 12:59:02 +01:00