fa7d677d45
Consolidate and improve LDAP error handling
2022-10-31 10:56:17 -04:00
2269fec099
Initial working RBCD module
2022-10-31 10:56:17 -04:00
31e2ab683c
Update samr_computer to show the SID when adding
2022-10-31 10:56:17 -04:00
1e50ba3415
Move to Hashes module, address requested changes
...
Fix rubocop
Move identify to hashes module up one layer, use full reference to identify_hash instead of full include
Fix SMTP require
Remove hashes require statement
Remove hashes require statement
Remove hashes require statement
Remove hashes require statement
Address remaining requested changes, reference constants directly
Add all the missing direct references
Co-Authored-By: Jeffrey Martin <jeffrey_martin@rapid7.com >
2022-10-17 17:28:31 -04:00
8b5223f53b
Modularize Identify, Update referenced use cases
...
Modularize Identity.rb
Include new module style Identify
Update juniper.rb
Fix inadvertent change
Add new module to identify spec
Put the require back
Put back require line for juniper
2022-10-17 17:28:30 -04:00
06aefb630a
string true to bool true
2022-10-03 19:50:04 -04:00
5f92d9418d
Modules: Fix Stability/SideEffects/Reliability notes for several modules
2022-10-01 17:54:59 +10:00
b0e3e95439
Minor Refactor: Remove unneccessary len(cookie)
2022-09-29 01:46:07 +05:00
2958a43a6a
Update to reflect fact that bug is an improper authentication logic bug and to randomize password for auth parameter since it is ignored
2022-09-23 12:19:29 -05:00
edc37835e5
Add more nil checks in, update some of the check code to catch an edge case, update notes to account for indicators of compromise, and fix some extra issues noticed on second round of review
2022-09-23 09:38:35 -05:00
9abe1649ff
Sanitize XML data prior to adding it to the XML POST request and also change the ID option to an integer from a string to match expectations
2022-09-23 09:38:35 -05:00
3ca34568c2
Clean up some of the documentation and module code and descriptions
2022-09-23 09:38:12 -05:00
37caf6dae5
removed exploit information from info section
2022-09-23 09:38:11 -05:00
a4a12d06bc
improved error handling
2022-09-23 09:38:10 -05:00
5ed7ff7f52
init commit module and documentation
2022-09-23 09:38:05 -05:00
3a281234df
Add feature flagged datastore rewrite, with support for option fallback lookups
2022-09-16 12:59:02 +01:00
b0fe5e1620
Cleanup the code a bit
2022-08-30 11:12:36 -04:00
69cc144e04
Add module docs
2022-08-30 11:12:36 -04:00
86804ce5b8
Add specific UPN and DNS support; switch to pipes
2022-08-30 11:12:36 -04:00
cd13039aae
Add the initial MS-ICPR module
2022-08-30 11:12:36 -04:00
8253e99c11
Update zerologon error handling to output invalid computer name details
2022-08-03 15:32:38 +01:00
662c8bbd87
Land #16742 , add NetScaler decrypt aux module
...
This aux module allows users to decrypt secrets
in Citrix NetScaler appliance configuration files
2022-07-13 14:00:43 -04:00
8f3a0e3856
Land #16742 , add NetScaler decrypt aux module
...
This aux module allows users to decrypt secrets
in Citrix NetScaler appliance configuration files
2022-07-13 12:11:02 -04:00
9a6013b153
citrix_netscaler_config_decrypt refinements
...
Refactor error handling when composing KEK fragments to be more
streamlined.
Various tweaks and optimizations.
Updates to documentatation.
2022-07-13 08:36:18 -04:00
443920850c
Update modules/auxiliary/admin/citrix/citrix_netscaler_config_decrypt.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2022-07-13 07:56:41 -04:00
d227f0aaa2
Update modules/auxiliary/admin/citrix/citrix_netscaler_config_decrypt.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2022-07-13 07:56:12 -04:00
789397a445
citrix_netscaler_config_decrypt tweaks
...
Minor code tweaks and updates to documentation
2022-07-03 08:21:58 -04:00
0d19e47b8d
Land #16677 , Add module for adding/deleting computers via MS-SAMR
2022-06-30 12:12:26 +02:00
41ba2d263b
Address PR feedback
...
Simplify the application_key usage, update docs and catch another
exception.
2022-06-28 11:53:05 -04:00
37234985e6
citrix_netscaler_config_decrypt Aux Module
...
Added an aux module that can perform offline decryption of NetScaler
config files. The module is able to decrypt secrets using well-known
static keys as well as the new Key Encryption Key (KEK) scheme.
This is the initial commit, and some functionality is lacking: there is
currently no loot storage of secrets, and the module cannot decrypt
-passcrypt entries from legacy configuration files.
2022-06-15 11:03:28 -04:00
825604dda9
Add docs and a configurable password
2022-06-15 08:51:47 -04:00
78f2ea39e9
Use some pretty libral error handling
2022-06-15 08:51:28 -04:00
41567b1eb4
Add the DELETE_COMPUTER action
2022-06-13 17:46:34 -04:00
084fc194ea
Add the LOOKUP_COMPUTER action
2022-06-13 17:20:34 -04:00
74936f69a3
Add the ADD_COMPUTER action
2022-06-13 17:03:51 -04:00
f6bd8fd020
Land #16571 , Vcenter offline mdb extract
...
Merge branch 'land-16571' into upstream-master
2022-06-13 10:32:07 -05:00
3f06e237b7
Correctly format the notes sections
2022-06-10 14:01:57 +01:00
45674fbcc2
Add the initial samr module
2022-06-02 14:12:47 -04:00
1d9089f5a0
vcenter_offline_mdb_extract PR verbosity
...
Added verbose output to the RSA and x509 extraction functions for
troubleshooting.
Changed error handling to just print an error message instead of
throwing an exception temporariliy.
2022-05-26 11:52:56 -04:00
02e7a65b93
Just move the auxiliary module into an exploit
2022-05-16 17:44:31 -04:00
36921a00f6
Merge branch 'feat/mod/cve-2021-1675-retry' into feat/mod/cve-2021-1675
2022-05-16 14:59:32 -04:00
d278ad9be1
Add the printnightmare exploit
2022-05-16 14:56:46 -04:00
75d137fce5
Rubocop and add todo to printnightmare
2022-05-16 14:56:46 -04:00
f9a5d8285a
Use the retry mixin for printnightmare
...
This module gets disconnected from the named pipe. Use the new retry
mixin to avoid waiting for a standard delay.
2022-05-16 09:53:57 -04:00
8b502d074f
vcenter_offline_mdb_extract aux module
...
Add new aux module vcenter_offline_mdb_extract for extracting IdP
credentials, certificates and keys from a vCenter backup file.
Added module documentation.
2022-05-13 15:57:59 -04:00
ecec8a5993
Clean up unrelated files.
2022-05-13 15:53:40 -04:00
c0c02e56ba
Land #16430 , Improve kerberos user enum module
2022-05-13 12:17:26 +01:00
934f193dc0
Land #16484 , Add vcenter_forge_saml_token aux module
...
Merge branch 'land-16484' into upstream-master
2022-05-12 17:36:20 -05:00
53052af988
Fix login crash for pihole modules
2022-05-04 19:42:39 +01:00
7190a967ce
Refactor MKII vcenter_forge_saml_token
2022-04-25 11:44:39 -04:00
Spencer McIntyre