benpturner
1a6404dc08
Typo
2015-05-19 16:09:30 +01:00
benpturner
93d6903272
New verbose
2015-05-19 16:08:43 +01:00
benpturner
07986a1ed2
Updated author
2015-05-19 16:06:44 +01:00
benpturner
8916ccf9e5
new numbers
2015-05-19 16:00:49 +01:00
benpturner
763d960d2b
new
2015-05-19 15:55:00 +01:00
benpturner
b513304756
new changes
2015-05-19 15:47:30 +01:00
Stuart Morgan
6a7943a662
Added check for UNIX sockets support
2015-05-19 15:13:15 +01:00
Stuart Morgan
3d466b7e6b
Credit where credit is due, Ben has given a huge amount of support and guidance
2015-05-19 14:51:08 +01:00
Stuart Morgan
fac09a6bcf
Added a clarification comment
2015-05-19 14:46:44 +01:00
Stuart Morgan
2eae9e2614
Rubocop
2015-05-19 14:44:32 +01:00
Stuart Morgan
b2aef62a40
MSFTidy
2015-05-19 14:42:30 +01:00
Stuart Morgan
f8fce7b7f6
Further tidying up of code, adding descriptions etc
2015-05-19 14:29:56 +01:00
benpturner
811c45ab90
new
2015-05-19 14:06:41 +01:00
OJ
a93565b5d1
Add 'Payload' section with 'Size' to psexec_psh
...
This missing parameter was causing the payload 'Size' to come through to
the encoders as `nil`. This meant that all the stagers that were
looking at the payload sizes were being told there was no size. In the
case of the meterpreter payloads, this was causing issues with the proxy
settings because the proxy configuration detail isn't added to the
payload unless there's enough space.
This fix adds a default size of 2048 (the same as the plain psexec
module). This makes the proxy settings work as expected.
2015-05-19 22:11:29 +10:00
OJ
9fddc21cf3
Shaved another sneaky byte off the payload
2015-05-19 21:21:07 +10:00
Stuart Morgan
ea4d3415ec
Continued to tidy up code, added verbose mode to assist in debugging
2015-05-19 12:21:00 +01:00
OJ
6e96e6d118
Shellcode golf to make the payload smaller
...
Tried to implement some more of the stuff that egypt suggested, managed
to get some in, but not others. Ultimately, its smaller than it was, and
I'm sure there are ways to make it better as well.
2015-05-19 21:17:42 +10:00
Stuart Morgan
d704e95890
Tidying up
2015-05-19 11:34:25 +01:00
OJ
62720ab357
Fix the wininet stager for http/s
...
For some reason this was only working on Windows7/2008, yet when tired
on Windows 2012 it was resulting in crashes. It was also stopping
working in exploits such as psexec_psh.
Went back to the beginning and started again. With this in place, we can
now do a bit of shellcode golf to make it a bit smaller.
Adjusted payload sizes as well.
2015-05-19 20:03:22 +10:00
Stuart Morgan
0c0758bf03
Added socketpath
2015-05-19 10:56:04 +01:00
Stuart Morgan
e152ceb05d
Tidied up code, added MWR labs logo
2015-05-19 10:33:32 +01:00
Stuart Morgan
a4fc8aefd5
Working, tested & cleans up after itself
2015-05-19 10:21:08 +01:00
Stuart Morgan
b749d44c6a
Tidied up working version, logic has now moved to a POST module
2015-05-19 10:00:50 +01:00
Stuart Morgan
a37714379d
Working version
2015-05-19 09:55:38 +01:00
Stuart Morgan
3d4490cafd
Trying to do this as a POST module instead of through command dispatcher
2015-05-19 09:49:27 +01:00
jvazquez-r7
55c07b1bdd
Report credentials with create_credential_login
2015-05-19 00:14:55 -05:00
HD Moore
c7932855f2
Move UUIDOptions to UUID::Options
2015-05-18 23:35:18 -05:00
jvazquez-r7
d564a85f6f
Fix jtr_format
2015-05-18 19:55:48 -05:00
jvazquez-r7
f49362492a
Report hash's username correctly
2015-05-18 19:46:17 -05:00
jvazquez-r7
c6fcb9c6c5
Report credentials with create_credential_login
2015-05-18 19:39:03 -05:00
HD Moore
448736989d
Merge branch 'master' into feature/msfvenom-smallest
2015-05-18 18:41:44 -05:00
wchen-r7
89be3fc1f2
Do global requirement comparison in BAP
2015-05-18 16:27:18 -05:00
Brent Cook
5d085a3e13
Land #5351 , use 32-bit registry view when detecting epo_sql
2015-05-18 15:48:14 -05:00
Brent Cook
79db696c15
fix EOL character
2015-05-18 15:46:55 -05:00
HD Moore
093ca31c7d
The InvalidPayloadSizeException wasn't actually defined anywhere
2015-05-18 15:36:15 -05:00
HD Moore
b0a8c77127
Switch RuntimeError -> EncodingError
2015-05-18 15:33:01 -05:00
HD Moore
7989a29203
Switch to the stock EncodingError exception
2015-05-18 15:27:31 -05:00
HD Moore
5c31586c68
Switch to the correct exception class
2015-05-18 15:25:26 -05:00
David Maloney
69a7a89936
use the correct print_error message
...
vrpint_error feeds through the old authbrute mixin
which does not behave properly anymore. use
print_error instead
5266
2015-05-18 13:51:23 -05:00
David Maloney
09d735e855
remove proof from failure message
...
the snmp login scanner will only have
proof on success, not on failure. remove it from
the failure message for cleaner formatting
5266
2015-05-18 13:45:01 -05:00
Donny Maasland (Fox-IT)
e1eed6e9d9
single quotes and slashes..
2015-05-18 16:33:57 +02:00
OJ
4a5f92072e
Make msftidy happy
2015-05-18 22:00:51 +10:00
OJ
923c4274d3
Formatting fixes
2015-05-18 21:52:33 +10:00
OJ
28abceaec5
Update payload sizes and specs
2015-05-18 21:22:54 +10:00
OJ
e7f80042d4
Finalise work on the bind_ipv6_tcp stager for UUID support
2015-05-18 21:19:04 +10:00
Stuart Morgan
8b8ed04a73
Rubocop
2015-05-18 11:56:12 +01:00
Stuart Morgan
cf05e69536
Removed database storage for now (need to convert keys to OpenSSH format and resolve IP addresses first)
2015-05-18 11:51:27 +01:00
Stuart Morgan
7f16b7164f
Added database writing code
2015-05-18 11:43:08 +01:00
Stuart Morgan
77cf2ec60e
Added basic private key detection and parsing
2015-05-18 11:20:53 +01:00
Donny Maasland (Fox-IT)
7d65095472
fix quotes
2015-05-18 12:20:42 +02:00