Commit Graph

493 Commits

Author SHA1 Message Date
adfoster-r7 9f6950c6c8 Ensure HTML is escaped in markdown codeblocks 2022-04-27 19:51:05 +01:00
sjanusz bbf9e3163a Fix file reads on Windows for binary files 2022-03-21 12:47:39 +00:00
Spencer McIntyre a6a63d0895 Rename scope to zone_id 2022-03-15 11:14:41 -04:00
Spencer McIntyre 71cacc4cc2 Catch SocketError when normalizing the hostname 2022-03-14 17:09:37 -04:00
Spencer McIntyre 6be3443680 Land #16103, LPE in polkit's pkexec (CVE-2021-4034) 2022-03-03 09:24:11 -05:00
bwatters c9408c7b1b Remove pointless format string 2022-03-03 06:40:26 -06:00
bwatters 5246e9cb7e Add rescue for failed authentication on info -d 2022-03-02 16:41:19 -06:00
bwatters 06e897436c Add Fedora results to docs and some minor final cleanup 2022-03-02 09:12:01 -06:00
bwatters 9635fde12d Add support and templates for aarch64 targets 2022-02-10 10:49:02 -06:00
Spencer McIntyre e6c1d20c5d Add the ClaimsPrincipal .NET gadget chain 2022-02-09 14:38:51 -05:00
Spencer McIntyre e093154865 Refactor the BeanFactory gadget code 2022-01-12 16:58:31 -05:00
Spencer McIntyre e873907d13 Initial vCenter exploit via Log4Shell 2022-01-12 15:34:45 -05:00
Spencer McIntyre 877bab6f2a Land #15969, Log4j2 HTTP Header Injection Exploit 2022-01-11 16:52:08 -05:00
Spencer McIntyre f56f328c8d Use an enum for the YSoSerial payload option 2022-01-07 17:30:39 -05:00
Christophe De La Fuente f3f6f93e23 Fix sanity check failing on specific Ubuntu versions 2022-01-05 18:26:19 +01:00
Christophe De La Fuente ae2e4d723b Add NTDS technique 2022-01-03 21:39:33 +01:00
Ashley Donaldson 360a0b866a Updated cached sizes because of new UA string 2021-11-10 17:27:02 +11:00
Spencer McIntyre 02fde3ac51 Initial work on CVE-2021-3287 2021-09-14 09:10:44 -04:00
Tim W 4192e175d2 fix osx-app exe attributes 2021-05-06 18:20:32 +01:00
bwatters 619e01bfa3 Land #11257, Add PSH generation methods to Util::Exe
Merge branch 'land-11257' into upstream-master
2021-04-23 13:52:53 -05:00
bwatters 63e14cf69f Update method options, method comments, and comment on to_win32pe_psh_rc4 behavior 2021-04-23 13:51:01 -05:00
Spencer McIntyre 3ecf0914e1 Use 'none' as the original ysoserial type, increase the size
Increasing the size to occupy two bytes seems to be helping stabilize
the generation for both the ROME and CommonsCollections1 payloads.
2021-03-11 12:09:29 -06:00
dwelch-r7 b95be3ed10 Zeitwerk rex folder 2021-02-08 12:24:12 +00:00
dwelch-r7 d437a32374 remove msf/util requires 2021-01-18 14:21:54 +00:00
dwelch-r7 319e718a95 zeitwerk lib/msf folder, eager loading works 2021-01-18 14:20:57 +00:00
dwelch-r7 dae27fb3ba Make the EICAR canary useful again 2020-12-09 14:47:22 +00:00
dwelch-r7 1617b3ec9b Use zeitwerk for lib/msf/core folder 2020-12-07 10:31:45 +00:00
Spencer McIntyre 3586644b62 Increase the payload space to 4096 within the DLL template 2020-11-16 15:58:59 -05:00
Spencer McIntyre 2d367b867d Add a synchronization primitive to the DLL template 2020-11-16 15:57:27 -05:00
Spencer McIntyre efc8485c86 Fill out module metadata and improve the check method 2020-10-06 18:00:13 -04:00
Spencer McIntyre f77bdcd855 Add the mixed_mode option when generating DLL EXEs 2020-10-05 15:49:06 -04:00
Christophe De La Fuente 94796f5c91 Updates from review #2 2020-09-30 15:01:54 +02:00
Spencer McIntyre 16dd4fbb6f Use nil for default registry values instead of 'default' 2020-09-29 16:50:38 -04:00
Christophe De La Fuente 9cb419ae8c Resync with master branch 2020-09-28 15:45:02 +02:00
Grant Willcox d66aaf9bee Fix a very horrible merge mistake 2020-09-23 14:48:42 -05:00
RageLtMan 2c83cde6a8 Add PSH generation methods to Util::Exe
MSIL generation was never added to util, and the pending rc4
generator should be accessible from here as well. Add both to the
end of the powershell generators section.

Add rc4 to the powershell method enum in opts which is passed
into rex-powershell.
2020-09-23 14:41:10 -05:00
Lucas Vater 9101b4fba6 Group multi-column search conditions
Previously the OR-relations generated by the multi-column search method
were not grouped, resulting in wrong precedence in places where they are
used.
2020-09-11 08:40:28 +02:00
Spencer McIntyre 1b77d01f23 Fix a payload cache size generation issue and bump the gem 2020-09-04 15:43:55 -04:00
cgranleese-r7 d6b9165c7c fixed module html references for info -d command 2020-08-28 10:59:22 +01:00
Christophe De La Fuente b79a441a16 Update Windows registry parser library
- rename it and move it to lib/msf/util/windows_registry_parser.rb
- refactor some statements
- raise ArgumentError when the sub-keys are not the expected one
- add logic for the RI records
2020-08-13 17:47:51 +02:00
Jeffrey Martin 9aa26d1208 Merge upstream into 6.x 2020-08-03 11:43:47 -05:00
Spencer McIntyre 9ba9690c14 Put more information into the generated module docs 2020-07-26 13:14:16 -04:00
Spencer McIntyre 65f9b62c52 Initial outline of module doc info template 2020-07-24 18:09:52 -04:00
Jeffrey Martin 65039a5091 Merge upstream into 6.x 2020-07-15 09:58:07 -05:00
Spencer McIntyre 1518c6441b Use the new shuffled block api when generating EXEs too 2020-07-08 14:44:16 -04:00
gwillcox-r7 06e3abf7ef Finally finish adding support for x86 arbitrary service names via msfvenom 2020-06-11 21:47:38 -05:00
gwillcox-r7 87769db6fd msfvenom x64 support finished, just need to get x86 working 2020-06-11 21:46:41 -05:00
dwelch-r7 10bb17d8fd Land #13374, Fix encoding bug 2020-06-11 12:30:12 +01:00
bwatters-r7 e6e47ed890 Land #13262, Add Python stager
Merge branch 'land-13262' into upstream-master
2020-05-20 16:22:48 -05:00
cn-kali-team ae3601cee1 Add Unicode support 2020-05-18 16:30:13 +08:00