Grant Willcox
b866bf59c8
Land #17444 , Fix parsing of module options with special characters
2023-01-31 10:42:16 -06:00
Spencer McIntyre
647cf1d402
Return Time from #extract_logon_time
2023-01-27 10:05:02 -05:00
Jeffrey Martin
dc6c1e333b
Land #17553 , Framework 6.3.0
2023-01-26 13:30:27 -06:00
Jeffrey Martin
bdb0cadc4f
Land #17291 , Add support for rails 7
2023-01-26 11:50:29 -06:00
adfoster-r7
2d30909a2f
Change option name namespacing convention
2023-01-26 16:17:50 +00:00
Dean Welch
c143124344
Add feature to set the status of ticket/ccache via klist
2023-01-25 13:28:43 +00:00
cgranleese-r7
854fc1400e
Improve show options to include options with conditions
2023-01-24 10:43:14 +00:00
Jeffrey Martin
d9716ebecf
core updates for Rails 7
2023-01-23 09:57:09 -06:00
Jeffrey Martin
9be26eb0ff
improve SMTP delivery error handling
2023-01-20 11:26:25 -06:00
Christophe De La Fuente
3d22fbcad9
Add exploit module for Certifried exploit
...
- Move all the logic from `modules/auxiliary/admin/dcerpc/icpr_cert.rb`
to `lib/msf/core/exploit/remote/ms_icpr.rb` library
- Move all the logic from `modules/auxiliary/admin/dcerpc/samr_computer.rb`
to `lib/msf/core/exploit/remote/ms_samr.rb` library
- Add `modules/auxiliary/admin/dcerpc/cve_2022_26923_certifried.rb` module
- Update the SMB client to disable SSL by default
- Add documentation
- Kerbero client: pass `options` as argument to `send_request_as`
- `calculate_shared_key` returns an EncryptionKey instead of the raw key
- Update `pkinit_login` module to make it compatible
- Add support to `additional_tickets` when requesting tickets
- Add support to PAC CredentialInfo structures
- Add impersonation to escalate privileges
- Add ACTIONS
- Use elevated TGS to delete the computer account
- Update and add specs
2023-01-13 15:30:50 +01:00
Hamilton Tobon Mosquera
03acb7e9f2
test: added rspec tests for 6074d1a4d3
2023-01-11 15:46:55 -05:00
dwelch-r7
75372dcdd3
Land #17374 , Add klist command
2023-01-06 12:57:20 +00:00
adfoster-r7
a8957bce49
Update tgt response to include key
2022-12-30 13:41:54 +00:00
adfoster-r7
6f9ebe4068
Add klist command
2022-12-16 13:02:39 +00:00
Christophe De La Fuente
6e09236c97
Land #17381 , Update rasn1 dependency for pkinit
2022-12-15 17:38:49 +01:00
adfoster-r7
28bd37b0a7
Update rasn1 dependency for pkinit
2022-12-14 00:32:26 +00:00
adfoster-r7
a9ccfe31b7
Merge branch 'upstream-master' into merge-msf-6.2.31-into-kerberos-feature-branch
2022-12-13 19:40:39 +00:00
Dean Welch
1e2ada3cce
Add options validation depending on action in forge_ticket.rb
2022-12-06 12:55:42 +00:00
bwatters
37540572e0
Land #17214 , add database functionality to vcenter post module
...
Merge branch 'land-17214' into upstream-master
2022-12-05 12:50:14 -06:00
Dean Welch
405271a52f
Add pac BinData Model
2022-12-05 14:03:21 +00:00
h00die
7ec7cdfb97
fix vcenter spec error
2022-12-01 16:43:58 -05:00
h00die
40f97995f8
review comment
2022-11-19 10:37:36 -05:00
h00die
f12c660652
review comments
2022-11-19 10:37:36 -05:00
h00die
dff9b35d56
add database stuff to vcenter post module
2022-11-19 10:37:36 -05:00
adfoster-r7
7dcf65d7c3
Fix python reverse http stager crash
2022-11-18 14:32:36 +00:00
Grant Willcox
0be10c5a33
Update code to use .blank? to simplify logic, and to also strip multiple trailing :'s. Update specs accordingly.
2022-11-09 13:00:34 -06:00
adfoster-r7
8efc6c5304
Land #17103 , Consolidate KdcOptionFlags and TicketFlags
2022-11-09 17:27:17 +00:00
Dean Welch
7c2134d941
Consolidate KdcOptionFlags and TicketFlags
2022-11-09 17:08:26 +00:00
adfoster-r7
65f6aaca82
Land #17077 , Add support for AES keys for silver/golden ticket forging
2022-11-09 16:51:11 +00:00
nzdjb
78afc01903
Add spec tests.
2022-11-09 09:58:23 -06:00
Dean Welch
23ff829e52
Add support for AES keys for silver/golden ticket forging
2022-11-09 13:01:13 +00:00
Christophe De La Fuente
37fd441b0f
Land #17117 , Authenticate to Kerberos with PKINIT
2022-11-08 18:54:03 +01:00
Dean Welch
a110465fe4
Add module for converting kerberos ticket formats
2022-11-07 12:10:01 +00:00
adfoster-r7
7774b7ddcf
Merge remote-tracking branch 'upstream/master' into merge-6.2.25-master-into-kerberos-feature-branch
2022-10-31 23:15:11 +00:00
adfoster-r7
ffa68e2bdf
Fix broken file writes on windows when newlines are present
2022-10-28 16:45:49 +01:00
bwatters
40fca92b38
Land #16871 , Add vcenter_secrets_dump post module
...
Merge branch 'land-16871' into upstream-master
2022-10-27 11:05:07 -05:00
Ashley Donaldson
09e740d48d
Changes from code review
2022-10-17 17:19:50 +11:00
Ashley Donaldson
aa98c9d004
Removed vestigial test
2022-10-07 14:29:20 +11:00
Ashley Donaldson
db12c7e0f0
Added tests for parsing new Kerberos structures
2022-10-07 14:04:24 +11:00
Ashley Donaldson
58c30f10aa
Send and Receive PKINIT responses
2022-10-07 01:04:10 +11:00
h00die
781ce211fe
remove un-needed spec tests
2022-09-30 16:55:49 -04:00
adfoster-r7
5d345e6689
Merge branch 'upstream-master' into feature-kerberos-authentication
2022-09-29 16:42:58 +01:00
adfoster-r7
3a281234df
Add feature flagged datastore rewrite, with support for option fallback lookups
2022-09-16 12:59:02 +01:00
dwelch-r7
5f85175f56
Add module for golden/silver ticket forging
2022-09-01 16:12:07 +01:00
Grant Willcox
97bce45e69
Land #16915 , Add exploit for CVE-2022-23277 (Exchange RCE)
2022-08-19 11:11:46 -05:00
h00die
df35cb2040
ipv4 checking in vcenter
2022-08-14 16:48:38 -04:00
Spencer McIntyre
5faee26f10
Add the DataSetTypeSpoof .NET deserialization chain
2022-08-08 17:52:51 -04:00
Spencer McIntyre
852fac48b1
Add the DataSet .NET deserialization chain
2022-08-08 17:51:37 -04:00
npm-cesium137-io
ed3a0959ae
vcenter post lib and spec
2022-08-06 14:01:56 -04:00
Spencer McIntyre
cd81ced5cb
Land #16822 , Fix msfrpcd console read failures
2022-08-02 17:29:25 -04:00