a58552daad
Land #8825 , Handle missing util.pump in nodejs shell payloads
2017-09-11 15:32:21 -05:00
b9fdca04a1
rework logical fix for #8884 to function with bootstrap code
2017-09-07 01:43:58 -05:00
9877a61eff
bump payloads
2017-09-07 01:36:25 -05:00
7a2a47586b
Fix named pipe migration stubs
2017-09-07 01:36:25 -05:00
4ec87985a2
Fix stager crash and support pivots in x64 meterp loader
2017-09-07 01:36:24 -05:00
c8b8ef03bd
Force max 0x10000 bytes when reading from pipe in stager
2017-09-07 01:36:23 -05:00
7acd772c10
Pivot session stability, display and handling
2017-09-07 01:36:21 -05:00
fdc9864b61
First working packet pivot session!
2017-09-07 01:36:20 -05:00
e3de01219a
Pushed on with more pivot code
2017-09-07 01:33:54 -05:00
abc80655b7
Progress in named pipe pivots, more to come
2017-09-07 01:33:54 -05:00
816e78b6f6
First pass of named pipe code for pivots
2017-09-07 01:33:53 -05:00
7c14a3d370
expand the check for weird HTTP / HTML serving servers
2017-08-31 16:30:02 -05:00
1a735c48b4
Fix MS2715, false positive when telneting against web server
...
Add a condition to identify when server returned HTML as login failure
2017-08-31 11:35:51 -05:00
368e37428e
update nessus v2 import for consistent proto case
2017-08-28 12:32:04 -05:00
1e8edb377f
Land #8873 , cleanup enable_rdp, add error handling
2017-08-28 05:50:42 -05:00
093bc53f97
Land #8875 , Fix UDP scanner mixin with multicast addresses
2017-08-25 02:44:29 -05:00
cba4d36df2
provide missing bits for R platform
2017-08-23 16:58:48 -05:00
41eba74ddf
prefer Addrinfo over ipaddress gem
2017-08-22 23:03:45 -05:00
17aef43bb8
Fix UDP scanner mixin with multicast addresses
...
This fixes #8828 by only binding UDP sockets when we have unicast
targets. If we have multicast, prefer unbound sockets.
This also brings in the 'ipaddress' gem for identifying multicast
addresses. It looks like it could replace a lot of custom-built
functionality in rex-socket, including RangeWalker. Will need to see how
efficient it is.
2017-08-22 06:44:43 -05:00
29c48f9d8d
cleanup accounts post API
2017-08-21 23:00:57 -05:00
e3a9ddfc22
fix retry case for acquiring security descriptor
2017-08-21 22:52:53 -05:00
0d17e94f54
handle unmapped sids consistently
2017-08-21 22:36:26 -05:00
c14daf3fcc
Land #8857 , Reverse and bind shells in R
2017-08-21 15:49:24 -05:00
8876919f38
Fix typo s/rport/port/ in build_brute_message
...
I missed this in #7202 .
2017-08-21 12:32:41 -05:00
5e8c2200ac
Merge branch 'master' into land-8625-crypttlv2
2017-08-20 18:54:51 -05:00
f7dc831e9a
Land #8799 , Add module to detect Docker, LXC, and systemd-nspawn containers
2017-08-20 14:45:57 -05:00
0145fc3972
payload/r.rb and UUID update
2017-08-19 06:43:28 -04:00
74f89857d8
fix extra sleep on linux x86 stager
2017-08-18 15:20:35 +09:00
70a82b5c67
Land #8834 , add resiliency to x64 linux reverse_tcp stagers
2017-08-15 08:04:32 -04:00
debbc31142
use separate module names for x86 and x64 generators
2017-08-15 08:02:01 -04:00
db2e3f2ddd
add retry to linux reverse tcp x64
2017-08-15 12:49:29 +09:00
69c4ae99a7
Land #8811 , fix peer printing with bruteforce modules
2017-08-14 17:31:48 -04:00
1a4db844c0
Refactor build_brute_message for legacy printing
2017-08-14 11:17:34 -05:00
59086af261
Land #8771 , rewrite linux x64 stagers with Metasm
2017-08-14 02:32:29 -04:00
26193216d1
Land #8686 , add 'download' and simplified URI request methods to http client mixin
...
Updated PDF author metadata downloader to support the new methods.
2017-08-14 01:40:17 -04:00
5d05ca154a
added http client 'download' method and updates to pdf author module from @bcoles
2017-08-14 01:08:53 -04:00
437fe4b63a
handle missing util.pump in nodejs shell payloads
...
Modern NodeJS (since 5.3.0) has removed util.pump in favor of stream.pipe.
On current versions the nodejs tcp shell payloads error out:
```
$ node --version
v7.10.0
$ msfvenom -p nodejs/shell_reverse_tcp LHOST=127.0.0.1 LPORT=7777 | node
<snip>
TypeError: util.pump is not a function
at Socket.<anonymous> ([stdin]:1:405)
at Object.onceWrapper (events.js:293:19)
at emitNone (events.js:86:13)
at Socket.emit (events.js:188:7)
at TCPConnectWrap.afterConnect [as oncomplete] (net.js:1080:10)
```
With this change, bind and reverse tcp should be tolerant of both new and older versions.
*Reference*
https://github.com/nodejs/node/pull/2531
*Verification steps*
1. Set up a handler (either exploit/multi/handler or simple nc)
```
$ nc -l -v 7777
```
2. Use patched version with various versions of node:
```
msfvenom -p nodejs/shell_reverse_tcp LHOST=127.0.0.1 LPORT=7777 | node
```
3. Confirm both old and new versions of node result in shell, not error.
2017-08-12 20:40:03 -07:00
e64eaf1573
remove additional match? for older ruby compat
2017-08-08 19:51:35 -05:00
3f8ee86e3e
revert match change - this has problems with older ruby versions
2017-08-08 19:47:48 -05:00
0ac19087cd
Land #8720 , add resiliency (retries + sleep) to linux x86 stagers
2017-08-08 19:36:47 -05:00
4ca68a178b
switch reverse_tcp stagers to all prefer StagerRetryCount
...
This leaves ReverseConnectRetries as an alternate spelling.
2017-08-08 19:27:00 -05:00
83212b8b6b
minor code cleanup
2017-08-08 19:26:59 -05:00
bca8e77163
add alias support for datastore options
2017-08-08 19:26:59 -05:00
b35d53bd02
code cleanup in opt_int while we're here
2017-08-08 19:06:51 -05:00
47dc3772a7
add OptFloat datastore option
2017-08-08 19:06:51 -05:00
331279d891
handle fractional seconds
2017-08-08 19:06:46 -05:00
a396d860e7
change SleepSeconds to StagerRetryWait
2017-08-08 19:26:24 +09:00
d7e8b32312
Merge branch 'upstream/master' into transport-agnostic-packet-encryption
2017-08-08 17:30:51 +10:00
cfd377fbd4
Support padding on the CAN bus.
...
Also use a hash for passing options around instead of individual params.
2017-08-06 18:05:59 -05:00
9858147dae
Add module to detect Docker and LXC containers
...
Detect Docker by:
- Presence of .dockerenv file.
- Finding "docker" in /proc/1/cgroup
Detect LXC by:
- Finding "lxc" in /proc/1/cgroup
2017-08-05 18:59:36 -05:00
Jeffrey Martin