Commit Graph

12441 Commits

Author SHA1 Message Date
adfoster-r7 1253878dd3 Land #16135, Add setg sessiontlvlogging command to log TLV packets 2022-03-04 16:30:09 +00:00
sjanusz a2fadf0606 Init logging on meterpreter's init, add option to change log file 2022-03-04 14:21:00 +00:00
dwelch-r7 e1ccd178ff Land #16141, Add service manager commands to msfconsle 2022-03-04 13:47:46 +00:00
adfoster-r7 f29ff681f7 Rename to _servicemanager and hide behind a feature flag 2022-03-04 12:45:15 +00:00
dwelch-r7 5cfb692567 Land #16145, Fix to_handler case sensitivity issue 2022-03-04 12:04:44 +00:00
adfoster-r7 2cd6e66791 Land #16269, Msf::Payload::Apk: Check Java is installed and apktool.jar exists 2022-03-04 11:33:34 +00:00
Brendan Coles 69f7008a07 Msf::Payload::Apk: raise if keytool cannot parse APK file or certificate 2022-03-04 08:10:37 +00:00
Brendan Coles 03419e8a19 Msf::Payload::Apk: Check Java is installed and apktool.jar exists 2022-03-04 06:39:51 +00:00
adfoster-r7 ad2fab6fee Land #16153, read full response on smtp send/recv 2022-03-04 01:24:46 +00:00
Spencer McIntyre 6be3443680 Land #16103, LPE in polkit's pkexec (CVE-2021-4034) 2022-03-03 09:24:11 -05:00
bwatters c9408c7b1b Remove pointless format string 2022-03-03 06:40:26 -06:00
bwatters 5246e9cb7e Add rescue for failed authentication on info -d 2022-03-02 16:41:19 -06:00
bwatters 06e897436c Add Fedora results to docs and some minor final cleanup 2022-03-02 09:12:01 -06:00
Brendan Coles ef135a8440 Msf::Payload::Apk: Print warning if apktool version < 2.5.1 2022-03-02 06:31:43 +00:00
bwatters 0516badd8e Change the way we cd after new session is created 2022-03-01 14:20:07 -06:00
space-r7 0c3f0e38f7 Land #16228, validate payload size if not encoded 2022-03-01 14:04:01 -06:00
sjanusz 869f073a1b Add setg option to log TLV packets to console or file 2022-03-01 12:50:35 +00:00
bwatters 0081811c52 Land #16185, Firefox CVE-2020-26950 use after free browser exploit
Merge branch 'land-16185' into upstream-master
2022-02-28 14:38:23 -06:00
Simon Janusz bd1df9109c Land #16224, Ignore reload lib spec helper file
Ignore reload lib spec helper file
2022-02-28 12:23:04 +00:00
Brendan Coles 4fe7375341 Msf::Payload::Apk: Fix apktool version check 2022-02-27 05:33:00 +00:00
Spencer McIntyre 147837e9b6 Validate payload size even when not encoding 2022-02-25 17:21:59 -05:00
adfoster-r7 5ee44bcdb7 Ignore reload lib spec helper file 2022-02-25 12:38:03 +00:00
Jeffrey Martin abe55c8f91 raise RuntimeError on incomplete or extra data 2022-02-24 14:02:44 -06:00
bwatters 3ea032472d Updated exploit with better check method, added OnSessionCmd option
to run a command when a session is bootstrapped, added more
documentation.
2022-02-18 16:30:47 -06:00
Tim W 480c44e9cb refactor DEBUG_EXPLOIT code into mixin 2022-02-16 11:38:04 +00:00
bwatters 0239ef1cc6 Land #16117, Updates for Log4Shell 2022-02-15 16:39:00 -06:00
adfoster-r7 18b4ce8a13 Update replicant pattern to increment refs 2022-02-15 16:08:35 +00:00
Jeffrey Martin af3fa09896 refactor smtp delivery to support continuation
When dealing with SMTP servers the communication needs to flow
a known protocol. To ensure the socket is in the correct state
after a send and receive it needs to be read until a line return
a response code followed by a `space` and additional data and `\r\n`
or the response code immediately followed by `\r\n` is returned.
2022-02-14 16:55:49 -06:00
Simon Janusz 732bd3a71c Land #16173, Add readline option to msfconsole
Add readline option to msfconsole
2022-02-14 16:11:15 +00:00
Tim W e9758f33b5 Land #16175, order the loadpath summary in alphabetical order 2022-02-14 09:52:19 +00:00
alanfoster d45783a5a0 Add readline option to msfconsole 2022-02-13 23:47:08 +00:00
Tim W a13ae3882b Land #16174, fix specifying the mode on File.read for ruby 3 on multiple modules 2022-02-13 12:08:13 +00:00
alanfoster ec2ae16135 Order loadpath summary output 2022-02-12 21:47:35 +00:00
alanfoster 395ab1d77e Specify mode rb on file reads 2022-02-12 21:39:12 +00:00
Tim W c2cacffee9 Land #16170, fix java native_arch 2022-02-12 06:13:48 +00:00
space-r7 db00991f26 Land #16150, add nagios xi web shell upload 2022-02-11 11:45:06 -06:00
sjanusz 2b281dce5c Add support for Java Meterpreter's native_arch 2022-02-11 11:43:35 +00:00
Jeffrey Martin 5bc60f5bf7 clear any additional response on smtp connect
When connecting to an SMTP server after `HELO` and auth
complete there can be additional data sent from the client
that sits in the socket queue. Adding a `get_once` after connection
has settled ensure any pending for extension responses are cleared.
2022-02-10 14:25:05 -06:00
bwatters 9635fde12d Add support and templates for aarch64 targets 2022-02-10 10:49:02 -06:00
Grant Willcox 425e57b88b Land #16163, Add the ClaimsPrincipal .NET gadget chain 2022-02-09 14:46:38 -06:00
Spencer McIntyre e6c1d20c5d Add the ClaimsPrincipal .NET gadget chain 2022-02-09 14:38:51 -05:00
space-r7 47c74a0037 Land #16121, fix rhost exception due to no session 2022-02-09 10:38:34 -06:00
Tim W a50f39ac12 return super if no session 2022-02-09 10:08:02 +00:00
Jake Baines 9758251278 Initial commit of CVE-2021-37343 2022-02-05 18:21:18 -08:00
adfoster-r7 4f69089690 Fix to_handler case sensitivity issue 2022-02-04 13:39:07 +00:00
Spencer McIntyre 965493191f Add and use a Log4Shell mixin 2022-02-03 16:09:49 -05:00
adfoster-r7 f16815e776 Land #16066, Fix params not being passed to scripts 2022-02-03 12:28:59 +00:00
sjanusz d854751f82 Fix params not being passed to scripts 2022-02-03 11:13:27 +00:00
adfoster-r7 5647e1a94f Add service manager commands to msfconsle 2022-02-02 22:26:41 +00:00
adfoster-r7 d9876e889a Land #15994, fix console.read does not return command output 2022-02-01 23:44:48 +00:00