e1d76b8ff6
Add more error handling
2017-02-27 17:06:16 -06:00
ffb54a13fe
Add NOFAIL datastore option
2017-02-27 12:41:18 -06:00
264cfc9bd4
Added OPTIONS to the module
2017-02-27 13:24:31 +01:00
81efe096aa
Update Author Handle
2017-02-26 21:01:19 -06:00
37066acc03
Try harder to get user id, correctly handle dirs with spaces.
...
Fixes #7817 .
2017-02-25 20:32:53 -06:00
b2ad8938ff
Added tomcat_gather modules to Metasploit.
2017-02-24 15:15:55 +01:00
45b1f796e4
Added archmigrate module to metasploit.
2017-02-24 10:29:19 +01:00
0b34efab43
Add documentation
2017-02-23 06:59:05 +00:00
dc30dd70da
Add Windows Gather DynaZIP Saved Password Extraction post module
2017-02-22 22:20:19 +00:00
8f1856c5d1
Fixed a bug with DTC decoding.
...
DTC Codes now print the English error messages next to their code with getvinfo
Frozen DTCs can also be fetched via get_frozen_dtcs()
2017-02-15 16:26:23 -08:00
9e0cb9797b
python -c payload -> echo payload | python
2017-02-04 17:57:17 +08:00
23c2787d57
Land #7795 , Hardware Bridge API.
...
Initial bridge API that supports the HW rest protocol.
2017-02-02 08:47:59 -06:00
16de745437
Minor code cleanups/corrections.
2017-02-01 16:12:45 -06:00
15a4ec629b
remove TRUE
2017-01-22 10:20:03 -06:00
836da6177f
Cipher::Cipher is deprecated
2017-01-22 10:20:03 -06:00
f69b4a330e
handle Ruby 2.4 Fixnum/Bignum -> Integer deprecations
2017-01-22 10:20:03 -06:00
bcbb7b86d6
Changed encoding on jscript contents before uploading it
2017-01-13 16:19:58 -06:00
8635925658
Fixed a typo about gathering realtime PIDs.
2017-01-10 13:20:04 -08:00
cdcf4cce7d
improve zip module windows script fallback
...
- handle non-English locales
- wait more reliably, handle network paths where FS info gets stale
- use absolute paths correctly
2017-01-07 12:27:03 -06:00
5f07bca775
Hardware Bridge API. Initial bridge API that supports the HW rest protocol specified here:
...
http://opengarages.org/hwbridge Supports an automotive extension with UDS calls for mdoule
development.
2017-01-06 19:51:41 -08:00
fae4751771
Land #7744 , update kiwi extension to Mimikatz 2.1
2016-12-29 16:22:45 -06:00
18e69b85af
Update the golden ticket module to work with new kiwi
2016-12-23 10:30:06 +10:00
e646a8d5c2
Please the rubocop gods (unless they are dumb)
2016-12-21 16:13:53 -08:00
13ccfd7bb3
Update run_as_psh.rb
2016-12-21 09:44:57 +11:00
a9b78e37d2
Update typos
2016-12-21 09:43:18 +11:00
cc99aaafc6
Corrected as per reviews
2016-12-21 09:42:26 +11:00
b9fd1db5fa
Add module to runas ysing powershell
2016-12-20 14:38:19 +11:00
9b678c2bdd
Land #7685 , Add mosule to change user passwords by editing SAM registry
2016-12-16 13:11:40 -06:00
52346c3fa8
fix renamed rex text
2016-12-15 15:31:00 -06:00
deec6eccdf
Update hashcarve.rb
2016-12-12 17:09:04 +11:00
3e80ee1d6a
Better Error Handling
2016-12-12 17:07:47 +11:00
7b4dce5e7e
One left!
2016-12-09 16:27:40 +11:00
74c48f5fa4
I'll get there!
2016-12-09 16:24:49 +11:00
c898e768f6
Struggling with tidyness
2016-12-09 16:00:32 +11:00
586b2d92e2
Corrected status prints
2016-12-09 15:45:30 +11:00
fb360e69c0
Initial Commit
...
This module "carves" a hash in the registries to set it as a user password.
The benefits are:
1/ It doesn't change the password last change field
2/ You can set a hash directly, so you can change a user's password and revert it without cracking its hash.
I have tested it in Windows 7, and 8.1. Should work on every version though.
Usage:
run post/windows/manage/hashcarve user=test pass=<password>
run post/windows/manage/hashcarve user=test pass=<nthash>
run post/windows/manage/hashcarve user=test pass=<lmhash:nthash>
This work is based on the hashdump implementation.
2016-12-09 15:41:01 +11:00
0d41160b03
Sanity checks, errors out with nil ptr if API call fails
2016-12-08 16:14:10 -08:00
a17d1a7e19
Added options for setting the PASSWORD and GROUPNAME
2016-12-08 16:13:31 -08:00
4614b7023d
Land #7604 , @godinezj's post module for creating AWS IAM accounts
2016-12-08 14:26:22 -08:00
aa29fcad80
Update docs and pretty print the loot
2016-12-08 14:25:07 -08:00
70668c289f
Use better loot args
2016-12-08 13:14:36 -08:00
162204b338
Support creating a password for the user, etc
2016-12-08 12:56:00 -08:00
a9cb08a352
Token should be passed as nil if not set
2016-12-07 10:16:41 -08:00
1c3f0437ed
Move some options back to non-advanced
2016-12-06 17:39:37 -08:00
a13382c80b
Address most of rubocop's nits
2016-12-06 17:10:34 -08:00
8f21a1f68c
move most options to advance, since they never change
...
Also, doc empty username
2016-12-06 16:29:00 -08:00
497e02955b
Fixed checking for access keys being retrieved
2016-11-29 11:08:55 -08:00
cb0313642b
Fixed setting IAM_USERNAME
2016-11-29 00:54:49 +00:00
46ce1dfaab
Now using random string as IAM_USERNAME unless specified
2016-11-28 16:32:53 -08:00
f8789fef38
Moved METADATA_IP to advanced options
2016-11-28 16:32:26 -08:00
Josh Hale