Commit Graph

61759 Commits

Author SHA1 Message Date
Ashley Donaldson eeef8a3085 Support domain login in WinRM module 2021-09-06 10:25:36 +10:00
Ashley Donaldson 7a75a91dc6 Request stdout on a separate thread, so we are alerted when the shell dies. 2021-09-06 09:33:44 +10:00
Ashley Donaldson 142526904a Moved command shell creation across to winrm_login, rather than winrm_cmd 2021-09-03 13:34:07 +10:00
Ashley Donaldson b50a1aa988 Moved reusable functionality into separate file 2021-09-02 21:58:07 +10:00
Ashley Donaldson 41fb8dc885 Updated documentation for winrm_cmd 2021-09-02 20:52:20 +10:00
Ashley Donaldson a530336630 Fix segfault apparently caused by using the Rex HTTP client in a finalizer 2021-09-02 19:08:25 +10:00
Ashley Donaldson 1138a5bba7 Better messages in the session info table 2021-09-02 17:31:57 +10:00
Ashley Donaldson fdfac2212f Cleanup up old socket-based approach 2021-09-02 16:58:07 +10:00
Ashley Donaldson f16d91f8b4 Coerce failure immediately on bad password when setting up a session 2021-09-02 15:00:48 +10:00
Ashley Donaldson 6648a47ce7 Check stdin repeatedly 2021-09-02 13:23:26 +10:00
Ashley Donaldson b78b7413ef Use stdin rather than separate commands 2021-09-01 17:05:42 +10:00
Ashley Donaldson 3192f9b4f7 Neatness improvements 2021-08-31 22:30:31 +10:00
Ashley Donaldson 3839bc5dea Use rex sockets for WinRM transport 2021-08-31 21:36:25 +10:00
Ashley Donaldson 8d047dca59 Basic command shell operational. Does not yet utilise Rex sockets. 2021-08-31 15:34:04 +10:00
Ashley Donaldson 3dc1b22cdc Created WinRM command shell type 2021-08-31 11:00:53 +10:00
Metasploit a1eef6a2c1 automatic module_metadata_base.json update 2021-08-28 10:07:52 -05:00
adfoster-r7 e485339baf Land #15614, remove duplicate autocheck 2021-08-28 15:59:39 +01:00
h00die a5674683f0 remove duplicate autocheck 2021-08-27 20:08:58 -04:00
Metasploit ec98bd8043 automatic module_metadata_base.json update 2021-08-27 13:18:57 -05:00
Spencer McIntyre 3ff76fa137 Land #15608, Use Rubocop for proper alignment 2021-08-27 14:00:31 -04:00
adfoster-r7 4a9a15e638 Run Rubocop layout rules on modules 2021-08-27 17:19:43 +01:00
Grant Willcox ce86eb2db6 Land #15590, Fix external module encoding 2021-08-27 11:10:45 -05:00
adfoster-r7 4fb341f86e Autofix module info hash values on the same line 2021-08-27 16:39:49 +01:00
Metasploit 6ca7e00b63 automatic module_metadata_base.json update 2021-08-27 09:12:55 -05:00
adfoster-r7 c042e310a3 Land #15606, Update metasploit payloads version 2021-08-27 15:04:42 +01:00
adfoster-r7 7daec4ab39 Update metasploit payloads version 2021-08-27 12:55:19 +01:00
Metasploit 34d7f5b9a7 automatic module_metadata_base.json update 2021-08-26 18:10:50 -05:00
Grant Willcox c04d1224c0 Land #15596 - fix version check for docker_credential_wincred 2021-08-26 18:00:55 -05:00
Grant Willcox 7cf2e66085 Fix up regex to properly match results and not include the 'version' part of the string, which was causing Rex::Version to return incorrect results and therefore make the 'check' method fail 2021-08-26 17:41:41 -05:00
Grant Willcox 415b46d9a7 Fix Rubocop errors 2021-08-26 16:52:58 -05:00
Dimitrie-Toma Furdui 63aaa8f438 fixed version check for docker_credential_wincred 2021-08-26 16:33:45 -05:00
Grant Willcox 697b748f07 Land #15582, Msf::Post::Linux::Kernel: Check kernel.unprivileged_bpf_disabled for values 1 or 2 2021-08-26 14:37:26 -05:00
Grant Willcox 93ad6e4c93 Change unprivileged_bpf_disabled? to use read_file so it will also check if the file exists or not 2021-08-26 14:24:04 -05:00
Metasploit ed92857612 automatic module_metadata_base.json update 2021-08-26 12:36:06 -05:00
Tim W 6c0b90eabb Land #15532, add module for CVE-2021-21300 and git mixins 2021-08-26 18:26:04 +01:00
Metasploit 9b6cdf04f7 Bump version of framework to 6.1.3 2021-08-26 12:05:12 -05:00
Metasploit 08ec56e31f automatic module_metadata_base.json update 6.1.2 2021-08-26 11:21:14 -05:00
Spencer McIntyre 674628e600 Land #15384, Improve Windows RDLL injection 2021-08-26 12:11:44 -04:00
space-r7 8b8d138812 Land #15496, specify SSLVersion for servers 2021-08-26 10:57:11 -05:00
Grant Willcox be9a7bc9b9 Fix up error in alpc_taskscheduler.rb where it expected a DLL but we passed it shellcode instead 2021-08-26 09:27:21 -05:00
Grant Willcox 7652a2240e Add in missing import for modules/exploits/windows/local/ntapphelpcachecontrol.rb to prevent crashes due to execute_dll not being defined 2021-08-25 18:19:58 -05:00
Metasploit ff9a5f1758 automatic module_metadata_base.json update 2021-08-25 14:28:25 -05:00
space-r7 ab622405de Land #15593, add WP Learnpress SQLi module 2021-08-25 14:18:51 -05:00
space-r7 17da80163c fix typo, set COUNT default to 3 as noted in docs 2021-08-25 14:17:47 -05:00
sjanusz 83c27b2509 Fix external module encoding 2021-08-25 17:44:45 +01:00
Grant Willcox 5a80e9678c Address Spencer's comments and remove changes that don't directly use the DLL injection library API change 2021-08-24 16:34:01 -05:00
h00die b9db47f873 wp_learnpress sqli 2021-08-23 19:45:45 -04:00
Spencer McIntyre d90c0293ec Land #15477, Add read_file and readable? for psh 2021-08-23 17:49:44 -04:00
Metasploit a28c134403 automatic module_metadata_base.json update 2021-08-23 06:24:23 -05:00
adfoster-r7 441acaeac8 Land #15580, Add default payload option to targets 2021-08-23 12:05:09 +01:00