Commit Graph

15585 Commits

Author SHA1 Message Date
William Vu b2aa06560f Add drupal_patch method to Drupal mixin 2019-03-05 18:52:27 -06:00
William Vu d70439f698 Add UNRELIABLE_SESSION Reliability constant 2019-03-05 13:10:56 -06:00
Aaron Soto 822f5357a2 Land #10675, DB manager for payloads: Resolve conflicts, add 'create!' to trigger database write 2019-03-04 14:58:03 -06:00
Brent Cook b70d0f684c Land #11498, add documentation for the 'jobs' command 2019-03-01 15:53:20 -06:00
Brendan Coles bd8d4d3f78 Deprecate pml_driver_config script 2019-03-01 19:43:38 +00:00
William Vu e67e2a5477 Land #11497, file: RHOSTS fix for exploits 2019-02-28 16:03:47 -06:00
Metasploit 1979b18c0a Bump version of framework to 5.0.10 2019-02-28 10:07:33 -08:00
Adam Cammack 3aea9bc477 Fix check to use all the IP addresses passed 2019-02-28 10:52:26 -06:00
Brent Cook 0c253ab085 add file: support for RHOSTS option on exploit modules 2019-02-28 06:01:30 -06:00
Brent Cook 9dbbea8973 Further improve / fix RHOSTS support for aux modules
Peleus notes that when pulling more than a few RHOSTS targets from the database, MSF writes the intermediate results to a text file instead of leaving them in memory. The aux module check of instantiating a RangeWalker for validation is necessary but insufficient for validating 'file:' RHOSTS specifications.

This clones logic used in the 'check' method in exploit modules to be able to handle file: properly. I suspect this may need to be consolidated and implemented elsewhere tool.
2019-02-26 22:18:45 -06:00
William Vu d11d391e17 Land #11485, VHOST support for full_uri 2019-02-26 10:35:50 -06:00
William Vu 1fca26de49 Land #11467, CMDSTAGER::TEMP with WritableDir 2019-02-26 10:34:43 -06:00
Brent Cook 287667d4f7 simplify check 2019-02-25 21:59:54 -06:00
Brent Cook e9e29580a7 Fix several bugs running non-scanner aux modules
This fixes a couple of bugs in #11176:

 - RHOSTS is not always used in Aux modules, don't enforce it unless it's used.
 - Be sure to pass the action to the run stub, since it's not a standard option.
2019-02-25 16:19:57 -06:00
William Vu d55fbdfbe5 Add VHOST support to full_uri 2019-02-25 14:45:26 -06:00
William Vu 659621a40b Add CMDSTAGER::TEMP with WritableDir fallback 2019-02-23 02:34:30 -06:00
Metasploit 3871e45196 Bump version of framework to 5.0.9 2019-02-21 21:30:00 -08:00
Jeffrey Martin 087d653cd0 enhance BigDecimal deprecation message suppression
When BigDecimal.new is called without keyword arguments
pass along only the *arg list.
2019-02-21 21:47:03 -06:00
Metasploit a3d0c93ff7 Bump version of framework to 5.0.8 2019-02-21 10:07:03 -08:00
Brent Cook bf3256a64a Land #11392, only compute prompt expansions as-needed 2019-02-20 07:48:05 -06:00
Brent Cook fc45e7d1b1 Land #11407, Add support for showing extra help in msfconsole 2019-02-20 07:45:53 -06:00
Jacob Robles d196020df1 Land #11289, Add Nuuo mixin 2019-02-20 06:35:03 -06:00
Brent Cook 1c1103f9da Land #11400, Add --sec-name to msfvenom, update generate command 2019-02-19 21:11:01 -06:00
Brent Cook 760defd218 Land #11184, update to Ruby 2.6.1 2019-02-19 21:06:40 -06:00
Brent Cook 880e5976bf Land #11176, support RHOSTS in all auxiliary modules 2019-02-19 21:01:57 -06:00
Brent Cook d2775c02f8 Land #11393, If an option alias is deregistered, also deregister the original option 2019-02-19 20:57:23 -06:00
Matthew Kienow d15095f452 Land #11191, add analyze command 2019-02-19 21:50:20 -05:00
Jeffrey Martin 33948eb5c4 process each individual id returned from ranges 2019-02-19 15:43:38 -06:00
Jeffrey Martin 25743e1346 one more missing doc 2019-02-19 10:03:20 -06:00
h00die e25abebd80 private can be nil 2019-02-18 20:30:08 -05:00
Jeffrey Martin a13198189e analyze all host if no range provided 2019-02-15 17:40:11 -06:00
Jeffrey Martin 5e8d33483e update docs to clarify workspace rewuirements 2019-02-15 17:32:49 -06:00
Jeffrey Martin 6460180423 guard for unknown host, fix processing of modules 2019-02-15 17:19:23 -06:00
Brendan Coles a5d5ccf67e Deprecate get_env script 2019-02-15 08:51:11 +00:00
L 7f5fdff8b3 fixed 2019-02-15 15:14:23 +08:00
Green-m c3e7556b06 Fix a issue that show help do not work. 2019-02-15 11:45:55 +08:00
Matthew Kienow a0daf0d9d7 Land #11401, fix rhosts tab completion issues 2019-02-14 14:35:02 -05:00
Brent Cook daf22bbde6 apply similar change to service enumeration 2019-02-14 12:13:36 -06:00
Metasploit f895ebccc3 Bump version of framework to 5.0.7 2019-02-14 10:10:20 -08:00
Green-m d3745e9a39 Enable cancel auxiliary mod for multiple targets. 2019-02-14 11:16:37 +08:00
Brent Cook 5b213f36d5 fix #11395, use db.hosts.each
Prefer iterating over hosts over the older method in the database.
2019-02-13 18:04:50 -06:00
Brent Cook 1b4a0e1abb switch back to source_address for now 2019-02-13 17:35:00 -06:00
Adam Cammack a70c097b10 Remove extra lines from help 2019-02-13 15:57:37 -06:00
Adam Cammack 22eb2bb72b Add support for showing detailed help for commands 2019-02-13 15:56:44 -06:00
Patrick 5151473e09 Implement sec-name and pad-nops for command dispatcher 2019-02-13 13:35:42 -06:00
Patrick a5ae7c491d Fixup line alignment. 2019-02-13 13:35:36 -06:00
Patrick 1487ca8923 Fixed line alignment. New section name is made lowercase to comply with naming standard. 2019-02-13 13:35:26 -06:00
Patrick 484329f6a0 Issue #6637: Adds msfvenom option --sec-name to specify custom new section header name 2019-02-13 13:34:38 -06:00
Brent Cook 16e800a7c4 Implement deregistering an option by alias
Rather than having to 'unregister' both 'RHOST' and 'RHOSTS' for modules using a network-connecting mixin, this allows just unregistering one option by exposing the alias key lookup to the module options library and allowing it to remove the datastore options for the module from validation.

Noted while testing #11108 that the module's unregister options were incomplete, and there were a few more like it. This allows modules operating in this style to work without modifications.
2019-02-13 05:07:20 -06:00
Brent Cook a1522ffd06 use Ruby socket 2019-02-13 04:41:41 -06:00