647cf1d402
Return Time from #extract_logon_time
2023-01-27 10:05:02 -05:00
dc6c1e333b
Land #17553 , Framework 6.3.0
2023-01-26 13:30:27 -06:00
9be26eb0ff
improve SMTP delivery error handling
2023-01-20 11:26:25 -06:00
3d22fbcad9
Add exploit module for Certifried exploit
...
- Move all the logic from `modules/auxiliary/admin/dcerpc/icpr_cert.rb`
to `lib/msf/core/exploit/remote/ms_icpr.rb` library
- Move all the logic from `modules/auxiliary/admin/dcerpc/samr_computer.rb`
to `lib/msf/core/exploit/remote/ms_samr.rb` library
- Add `modules/auxiliary/admin/dcerpc/cve_2022_26923_certifried.rb` module
- Update the SMB client to disable SSL by default
- Add documentation
- Kerbero client: pass `options` as argument to `send_request_as`
- `calculate_shared_key` returns an EncryptionKey instead of the raw key
- Update `pkinit_login` module to make it compatible
- Add support to `additional_tickets` when requesting tickets
- Add support to PAC CredentialInfo structures
- Add impersonation to escalate privileges
- Add ACTIONS
- Use elevated TGS to delete the computer account
- Update and add specs
2023-01-13 15:30:50 +01:00
a8957bce49
Update tgt response to include key
2022-12-30 13:41:54 +00:00
28bd37b0a7
Update rasn1 dependency for pkinit
2022-12-14 00:32:26 +00:00
1e2ada3cce
Add options validation depending on action in forge_ticket.rb
2022-12-06 12:55:42 +00:00
405271a52f
Add pac BinData Model
2022-12-05 14:03:21 +00:00
8efc6c5304
Land #17103 , Consolidate KdcOptionFlags and TicketFlags
2022-11-09 17:27:17 +00:00
7c2134d941
Consolidate KdcOptionFlags and TicketFlags
2022-11-09 17:08:26 +00:00
65f6aaca82
Land #17077 , Add support for AES keys for silver/golden ticket forging
2022-11-09 16:51:11 +00:00
23ff829e52
Add support for AES keys for silver/golden ticket forging
2022-11-09 13:01:13 +00:00
37fd441b0f
Land #17117 , Authenticate to Kerberos with PKINIT
2022-11-08 18:54:03 +01:00
a110465fe4
Add module for converting kerberos ticket formats
2022-11-07 12:10:01 +00:00
09e740d48d
Changes from code review
2022-10-17 17:19:50 +11:00
aa98c9d004
Removed vestigial test
2022-10-07 14:29:20 +11:00
db12c7e0f0
Added tests for parsing new Kerberos structures
2022-10-07 14:04:24 +11:00
58c30f10aa
Send and Receive PKINIT responses
2022-10-07 01:04:10 +11:00
5f85175f56
Add module for golden/silver ticket forging
2022-09-01 16:12:07 +01:00
39f90d95b1
Create sessions for winrm_login successes.
...
Reuses the connection, so that authentication doesn't need to happen again
2022-07-08 16:57:09 +10:00
d3e7152954
Changes from code review
2022-07-08 11:47:54 +10:00
f9f3be3644
Fix unit tests
2022-07-07 18:04:22 +10:00
b2eb348d94
Added WinRM using Kerberos, including encryption
2022-07-07 13:17:09 +10:00
aea37f7137
Add initial SMB Kerberos authentication support
2022-07-06 16:15:33 +01:00
d31ffa27d3
Add and use a new kerberos CCache model definition
2022-07-01 11:57:30 -04:00
15446fd173
Incorporated new encryption methods into login scanner, including negotiating
2022-06-22 09:36:25 +10:00
19b62a5af6
Support several new encryption types for Kerberos.
...
Supports DES-CBC-MD5, DES3-CBC-SHA1, AES128, AES256
2022-06-22 09:13:33 +10:00
f8901a8b17
Add Kerberos LoginScanner support
2022-06-20 16:38:32 +01:00
f1e5376414
Move kerberos tests to be under the remote folder
2022-06-08 03:21:25 +01:00
abe55c8f91
raise RuntimeError on incomplete or extra data
2022-02-24 14:02:44 -06:00
cb388b0b4c
add SMTPDeliver spec
...
* define smtp_send_recv expectations
2022-02-14 18:48:27 -06:00
255f93827b
Fix broken cookiejar tests
2021-08-10 15:40:23 +01:00
5e732ddd42
changes parse to take an origin and updates tests
2021-08-03 18:22:23 +01:00
c7d4155511
add origin to httpcookie and supporting tests
2021-07-28 14:04:48 +01:00
6196037fba
Update spec
2021-07-06 21:52:41 -05:00
5e4af7241d
prevent TLD use in tests & remove HTTP::Cookie DI
2021-05-20 17:49:21 +01:00
0f73031833
Land #15165 , Add documentation for the new CookieJar functionality
2021-05-12 19:29:21 +01:00
a22ebdf76d
cookie cleanup
2021-05-07 12:46:38 +01:00
0be7452c28
Ensure cookie jars are correctly duped
2021-05-06 12:11:26 +01:00
1b02344b55
consider vhost & expand tests
2021-04-20 15:12:54 +01:00
5df0f0b164
improvements to tests and api
2021-04-19 15:13:42 +01:00
88f17c5128
cleanup and removes cookies filtering
2021-04-16 17:31:11 +01:00
fc55d74b80
http-client cookie jar support and tests
2021-04-16 12:24:21 +01:00
b95be3ed10
Zeitwerk rex folder
2021-02-08 12:24:12 +00:00
49a6b1b257
Remove requires that sneaked in while the PR was up
2020-12-07 11:02:10 +00:00
1617b3ec9b
Use zeitwerk for lib/msf/core folder
2020-12-07 10:31:45 +00:00
76e967353e
Add auxiliary support to autocheck mixin
2020-12-03 01:09:06 +00:00
79a3328cd3
Validate that AutoCheck is prepended
2020-11-11 22:15:40 +00:00
89f7be3ef0
Improve error message
2020-07-01 14:20:04 -05:00
4b78de5416
Refactor AutoCheck a bit more
2020-06-30 11:58:42 -05:00
Spencer McIntyre