37066acc03
Try harder to get user id, correctly handle dirs with spaces.
...
Fixes #7817 .
2017-02-25 20:32:53 -06:00
49fbd3189f
Merge branch 'met-test-entropy' of github.com:bwatters-r7/metasploit-framework into met-test-entropy
2017-02-25 05:22:13 -06:00
941f87fa83
Added the option to incude entropy in file/directory names to support
...
automated testing
2017-02-25 05:20:25 -06:00
ba89dc9c34
Added the option to incude intropy in file/directory names to support
...
automated testing
2017-02-25 04:57:21 -06:00
5383900a54
Merge branch 'master' into feature/aggregator
2017-02-24 23:59:02 -06:00
09c9e9b1f9
Land #8014 , Update metasploit-payloads gem to 1.2.15
2017-02-24 20:54:56 -06:00
1e28e2b2c7
Cache sizes again...
2017-02-24 20:43:13 -06:00
493f17761b
payload cache size change- all together, now
2017-02-24 20:23:34 -06:00
15af90c011
payload cache size change
2017-02-24 20:22:27 -06:00
adcb65c66b
Update gemspec file to use metasploit-payloads 1.2.15 per payloads PR#171
2017-02-24 20:15:50 -06:00
634753f985
Add QNAP admin hash "disclosure"
2017-02-24 19:18:30 -06:00
d9a7fac399
Land #8004 , Use post/windows/manage/priv_migrate instead of migrate -f
2017-02-24 17:30:14 -06:00
f18b533226
change platform time to unix (although it is linux in reality but whatevs)
2017-02-24 22:58:24 +00:00
076848e904
Land #7993 , Keep sessions in progress alive
2017-02-24 16:57:47 -06:00
f9e4fd54fe
Bump version of framework to 4.14.1
2017-02-24 13:31:17 -08:00
84518b2dfb
Land #8012 , bump minor
2017-02-24 15:20:55 -06:00
a954521d75
bump minor version
2017-02-24 15:07:07 -06:00
48c1e6d325
Land #7973 , Enable cert validation for Nexpose
...
This PR enables connection to a Nexpose console using the
nexpose client gem.
It also allows you to connect using a trusted certificate
instead of simply overriding the SSL validation.
2017-02-24 14:50:31 -06:00
2631259919
Land #7973 , Enable cert validation for Nexpose
...
This PR enables connection to a Nexpose console using the
nexpose client gem.
It also allows you to connect using a trusted certificate
instead of simply overriding the SSL validation.
2017-02-24 14:27:24 -06:00
e5d0370a94
Fixes MS-1716, keep sessions in progress alive.
2017-02-24 12:56:05 -06:00
0f4e03be7b
Bump version of framework to 4.13.27
2017-02-24 10:03:33 -08:00
b2ad8938ff
Added tomcat_gather modules to Metasploit.
2017-02-24 15:15:55 +01:00
45b1f796e4
Added archmigrate module to metasploit.
2017-02-24 10:29:19 +01:00
43550b8cdf
fixing line length
2017-02-23 19:55:23 -05:00
041238f77c
land #7896 Binom3 power meter scanner and brute
2017-02-23 19:49:50 -05:00
1f3de5d958
ensure scan is settled before delete
2017-02-23 18:14:36 -06:00
70f7dccf62
copy and paste fail
2017-02-23 17:11:08 -06:00
5d0b532b20
Fix #8002 , Use post/windows/manage/priv_migrate instead of migrate -f
...
Because migrate -f uses a meterpreter script, and meterpreter scripts
are deprecated, we should be replacing with a post module
Fix #8002
2017-02-23 17:04:36 -06:00
f27ef55391
Land #7992 , Improve Signature Evasions for browser exploits
2017-02-23 16:32:49 -06:00
1ca0a24177
Up rex-exploitation
2017-02-23 15:58:19 -06:00
e3f613ecc6
Bypass: Metasploit OS detection
...
SEP is triggering on HTTP POSTs which start with `os_name`
2017-02-23 15:42:04 -05:00
3457640437
Land #7990 , Use obfuscated JS in BES
2017-02-23 14:18:59 -06:00
6a6c8c9828
Land #7997 , Add SSH login and pubkey docs
2017-02-23 13:38:10 -06:00
af8e64958e
Small changes
2017-02-23 13:36:39 -06:00
e23e65ee5f
Fix msftidy's vars_get check for omitted parens
...
Hat tip @bcoles.
2017-02-23 02:13:59 -06:00
236606838a
Land #7987 , MVPower DVR exploit
2017-02-23 01:46:04 -06:00
c9e09491dd
Add documentation
2017-02-23 07:44:45 +00:00
0b34efab43
Add documentation
2017-02-23 06:59:05 +00:00
bf47ac2fa9
chmod -x a couple module docs
...
Hat tip @bcoles.
2017-02-22 23:43:54 -06:00
5d3a4cce67
Use all caps for module option names
2017-02-23 16:30:01 +11:00
6a7dab0b1c
add key explain line
2017-02-22 22:15:05 -05:00
aee6707713
ssh_login docs
2017-02-22 22:13:07 -05:00
27a7b279f5
Major rewrite and cleanup of reverse shell jcl
...
The shell does exactly the same as the previous, just made the code read much
better so as to not severely anger the gray beards and other lesser
mainframe deities. The only architectural change is the payload uses the
spawn system call vs exec - this provides for a cleaner exit in some cases.
2017-02-22 17:17:27 -06:00
dc30dd70da
Add Windows Gather DynaZIP Saved Password Extraction post module
2017-02-22 22:20:19 +00:00
40e6413867
Land #7980 , Add a sploit for CVE-2017-5982, kodi file traversal
2017-02-22 13:11:48 -06:00
84ab3c66cc
Use obfuscated JS in BES
2017-02-22 12:47:36 -05:00
25b3cc685a
Update netgear_r7000_cgibin_exec.rb
2017-02-22 11:36:52 -05:00
9186b3298a
Merge branch 'master' into feature/aggregator
2017-02-22 10:08:11 -06:00
47fec5626e
Style update
2017-02-22 07:56:17 +00:00
e491f01c70
Add MVPower DVR Shell Unauthenticated Command Execution module
2017-02-22 05:15:57 +00:00
Pearce Barry