Spencer McIntyre
fa7d677d45
Consolidate and improve LDAP error handling
2022-10-31 10:56:17 -04:00
Spencer McIntyre
afba3a40ab
Add the initial MS-DTYP data definitions
2022-10-31 10:56:17 -04:00
adfoster-r7
97ba3bf85c
Fix uploading binary file to windows shell command with identical name
2022-10-28 17:14:31 +01:00
adfoster-r7
ffa68e2bdf
Fix broken file writes on windows when newlines are present
2022-10-28 16:45:49 +01:00
cgranleese-r7
14a84acb13
Land #17184 , Support upload and download command for powershell and windows sessions
2022-10-28 16:42:31 +01:00
Metasploit
d3c9f45133
Bump version of framework to 6.2.25
2022-10-27 12:09:31 -05:00
bwatters
40fca92b38
Land #16871 , Add vcenter_secrets_dump post module
...
Merge branch 'land-16871' into upstream-master
2022-10-27 11:05:07 -05:00
adfoster-r7
f1657bde73
Land #17167 , Weekly dependency updates 20221020
2022-10-27 14:46:58 +01:00
Spencer McIntyre
eee8f49695
Land #17176 , Python Meterpreter AES Constants
2022-10-26 16:29:28 -04:00
Spencer McIntyre
154edfc6f8
Land #16979 , Add in support for LDAP type decoding
...
Add in support for GUIDs, Certificate Handling, and SIDs to ldap_query Module
2022-10-26 13:49:58 -04:00
Grant Willcox
5ce4542748
Fix up spacing issues
2022-10-26 12:06:54 -05:00
adfoster-r7
4b1b26bbb6
Add additional usage tips
2022-10-26 11:56:02 +01:00
adfoster-r7
e2d052322d
Support upload and download command for powershell sessions
2022-10-26 11:48:31 +01:00
Grant Willcox
5e6577d264
Fix up spacing issues
2022-10-25 12:09:04 -05:00
Grant Willcox
51829c5ce9
Add in inital copy of ms_dtyp.rb library and use the definitions there to replace our custom unpack solutions with proper BinData approaches. Also rename some variables to use more appropriate names
2022-10-25 11:29:22 -05:00
llamasoft
d61656c591
Use generator instead of list
2022-10-22 17:08:32 -04:00
llamasoft
42b7c7f69a
Use range instead of xrange
2022-10-22 17:07:50 -04:00
bcoles
cd656ecdbb
Msf::Post::File.append_file: Append not overwrite on *nix shell sessions
2022-10-21 23:28:14 +11:00
llamasoft
9ddc05a464
Consolidate encrypt/decrypt functions
...
The only differences between the encrypt and decrypt functions are which
lookup tables they use and which order the bytes are sampled from rows.
Consolidating the functions like this also results in a consistent
10-15% performance improvement over the previous implementation.
2022-10-20 20:54:10 -04:00
llamasoft
d3a72cac84
Generate AES constants at runtime
...
Unfortunately, the constants have to be calculated using utility functions
because Python 3 changes how list comprehensions work during class creation.
However, the current implementation is Python 2/3 compatible.
2022-10-20 20:54:02 -04:00
Jeffrey Martin
cca49257c5
extend config due to warning
...
```
SECURITY WARNING: Your secret is not long enough. It must be at least
32 bytes long and securely random. To generate such a key for use
you can run the following command:
```
2022-10-20 14:39:05 -05:00
Metasploit
9f6134813e
Bump version of framework to 6.2.24
2022-10-20 12:14:26 -05:00
llamasoft
6c95a5543c
Remove unused function
2022-10-19 22:22:31 -04:00
Grant Willcox
a4acd8a680
Land #17154 , improve qualys import times
2022-10-19 10:44:22 -05:00
Christophe De La Fuente
15d81ca04c
Land #17135 , Add namespace to identify.rb
2022-10-19 10:48:25 +02:00
Jeffrey Martin
016a1c9da9
one more safer access
2022-10-18 15:02:58 -05:00
Jeffrey Martin
7b9ed4a1da
corrections to reference IDs
2022-10-18 14:57:44 -05:00
Matthew Dunn
aab064779c
Check the global LHOST before picking it from RHOST
2022-10-17 17:59:58 -04:00
Matthew Dunn
1e50ba3415
Move to Hashes module, address requested changes
...
Fix rubocop
Move identify to hashes module up one layer, use full reference to identify_hash instead of full include
Fix SMTP require
Remove hashes require statement
Remove hashes require statement
Remove hashes require statement
Remove hashes require statement
Address remaining requested changes, reference constants directly
Add all the missing direct references
Co-Authored-By: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-17 17:28:31 -04:00
Matthew Dunn
8b5223f53b
Modularize Identify, Update referenced use cases
...
Modularize Identity.rb
Include new module style Identify
Update juniper.rb
Fix inadvertent change
Add new module to identify spec
Put the require back
Put back require line for juniper
2022-10-17 17:28:30 -04:00
Jeffrey Martin
82bd12566f
remove constant not used
2022-10-17 15:19:35 -05:00
Jeffrey Martin
2022b507a6
Qualys parser now uses 'Nokogiri::XML'/xpath
2022-10-17 15:03:54 -05:00
Jeffrey Martin
8cc21f9b01
improve qualys import times
...
When importing data from recent Qualys reports many `RESULT` tags contain
extra long lines and significant content that result in extremely long processing
times when parsed by REXML. By removing all `RESULT` tags not currently processed
during import the time to process data can be significantly improved.
2022-10-17 13:14:55 -05:00
Metasploit
8e08189921
Bump version of framework to 6.2.23
2022-10-13 12:15:51 -05:00
Jeffrey Martin
2097ff132c
Land #16987 , guard possible RubySMBError condition
2022-10-11 13:12:29 -05:00
bwatters
ef0ca2edbb
Land #17057 , Msf::Post::Windows::ExtAPI: Remove load_extapi method
...
Merge branch 'land-17057' into upstream-master
2022-10-07 15:54:52 -05:00
Metasploit
edfc68a809
Bump version of framework to 6.2.22
2022-10-06 12:10:14 -05:00
bwatters
fc6cdd2a92
Land #17072 , Add robustness to shell command token delimiting
...
Merge branch 'land-17072' into upstream-master
2022-10-06 10:28:14 -05:00
bwatters
c77b35d544
remove module_function declarations
2022-10-06 10:21:36 -05:00
h00die
06aefb630a
string true to bool true
2022-10-03 19:50:04 -04:00
h00die
b62dd604b1
fix passwords on command prompt
2022-09-30 16:34:05 -04:00
bwatters
c17c78bc0f
Land #16995 , Add TrustedSec's COFFLoader as Meterpreter Extension
...
Merge branch 'land-16995' into upstream-master
2022-09-30 14:14:39 -05:00
Ashley Donaldson
ebb38454e4
Restored the _win32 and _unix functions used in Pro
2022-09-30 14:04:40 +10:00
Metasploit
47ea5d9b1d
Bump version of framework to 6.2.21
2022-09-29 19:43:39 -05:00
Ashley Donaldson
f59a84ac5d
Add robustness to detection and use of echo-y/non-echo-y shells
2022-09-29 11:00:56 +10:00
Ashley Donaldson
af0832c3c3
Properly support Windows for detecting echo shells
2022-09-29 07:44:53 +10:00
adfoster-r7
2388f7e6c4
Land #17054 , Fix Adapted Single (Unstaged) Payloads
2022-09-27 11:54:04 +01:00
adfoster-r7
c436f42c8c
Land #16994 , Fix Multiple Registry Related Issues
2022-09-27 11:43:02 +01:00
Metasploit
b1a6d9d307
Bump version of framework to 6.2.20
2022-09-23 08:09:46 -05:00
bcoles
5531e3dcab
Msf::Post::Windows::ExtAPI: Remove load_extapi method
2022-09-23 17:41:20 +10:00