369c23a90b
Revert to TECHNIQUE datastore option for backwards compatibility
2022-06-23 18:43:18 +02:00
35e535415a
getsytem module: use ACTION instead of TECHNIQUE datastore option
2022-06-14 15:31:33 +02:00
f804a58970
Add getsystem technique 6 Named Pipe Impersonation (Efs variant - AKA EfsPotato)
2022-06-14 15:31:15 +02:00
a98f9a69c4
Land #16621 , Fix timeout of duplicated sessions
2022-05-27 17:30:56 +01:00
7b75bd6e27
Cache remote Python binary name
2022-05-27 10:21:59 +01:00
5f5444936f
Land #16488 , Windows Task Scheduler Mixin
2022-05-25 12:37:03 -04:00
17a37a9d4d
Detect more Python binaries & don't run last cmd_exec as channelized
2022-05-25 15:21:40 +01:00
d225d4663c
Land #16413 , update local exploit suggester
2022-05-25 13:24:11 +01:00
5d2ab0c55e
Sort arch, platforms, session types before outputting
2022-05-25 10:25:32 +01:00
fbac2ae429
Fix crash on sessions without native_arch support
2022-05-24 16:27:16 +01:00
0e241557e9
Add session type column, refactor to not use post mixin, use native_arch
2022-05-24 14:28:21 +01:00
1677dbcf6d
Add setting of module target
2022-05-23 14:23:48 +01:00
7103a619c2
Add validation opts, tables, custom stylers to exploit suggester
2022-05-19 16:22:47 +01:00
5fd18ef864
Fixes from review
2022-05-19 14:54:07 +02:00
7992cb2072
Update vss_persistenceand persistence_exe modules to includes
...
changes in `TaskScheduler` mixin
2022-05-17 14:52:47 +02:00
14cd7bc335
Add task scheduler mixin and update persistence_exe and vss_persistence modules
2022-05-17 14:52:47 +02:00
1fe04caadd
Land #16406 , Create get_bookmarks.rb
...
Merge branch 'land-16406' into upstream-master
2022-05-13 13:42:31 -05:00
535a6e752d
Update get_bookmarks.rb
...
style changes made
2022-05-11 14:29:36 -04:00
03d658c28d
Update get_bookmarks.rb
...
style changes
2022-05-11 13:14:05 -04:00
606669e7cf
Update modules/post/windows/gather/get_bookmarks.rb
...
Skip symbols for current and parent dir
Co-authored-by: Brendan <bwatters@rapid7.com >
2022-05-11 12:59:47 -04:00
f5df9b500d
Update to include Internet Explorer
2022-05-10 18:13:22 -04:00
deb163c882
Update ad_to_sqlite to store loot
2022-05-06 21:41:17 +01:00
f30c797293
Fix two simple typo
2022-04-27 21:58:02 +02:00
d8542ad2b5
Changed vprint to print update docs
2022-04-21 11:35:33 -07:00
841fd12519
Update modules/post/windows/gather/enum_av.rb
...
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com >
2022-04-21 09:23:11 -07:00
ce76f0e62e
Upcase error check for consistency
2022-04-16 07:27:36 -04:00
92a1e207db
Update modules/post/windows/gather/get_bookmarks.rb
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2022-04-13 14:50:07 -04:00
d06a5db6d6
Enumerate Windows AV via WMI root\SecurityCenter2
...
Query WMI via shell or meterpreter session for deployed AV products
from the root\SecurityCenter2 namespace; record results as notes.
2022-04-09 12:06:41 -04:00
32edc6c5b5
variable name changes
2022-04-07 10:23:54 -04:00
aa7cba7b72
included store_loot and string interpolation
2022-04-05 16:50:51 -04:00
d96c3df3e7
Ran rubocop and added notes
2022-04-05 16:09:37 -04:00
1a48bccb42
Land #16403 , improve Qemu / KVM detection
2022-04-05 14:58:16 -05:00
d3e32eca5b
Style fixes
2022-04-05 12:59:01 -04:00
476ff36d8d
Bug fixes
...
*fixed typo for "browser"
*modified to use read_file instead of file.open to read files
2022-04-03 11:52:20 -04:00
587096f15d
Create get_bookmarks.rb
...
Metasploit Module that retrieves bookmarks from the following browsers: Google Chrome, Opera & Microsoft Edge.
2022-04-03 03:57:17 -04:00
35bd113952
Improve Qemu/KVM detection for BOCHS HW
...
Does what it says:
```
[*] Checking if the target is a Virtual Machine ...
[+] This is a Qemu/KVM Virtual Machine
[*] Post module execution completed
```
2022-04-02 10:43:57 -04:00
79df6190e6
call chocopath once, return nil instead of false
2022-04-01 10:56:11 -05:00
eb54081a62
Made table regex properly only grab lines that are start lines
2022-04-01 11:31:23 -04:00
6f933291be
Made chocopath give false if all other alternatives dont work
2022-03-31 11:32:43 -04:00
c6c77b9c7e
Merge branch 'enum_chocolatey_applications' of github.com:rad10/metasploit-framework into enum_chocolatey_applications
2022-03-31 11:27:06 -04:00
2ed4a4a6e9
Used fail statements where exit should fail
2022-03-31 11:27:02 -04:00
8177b101e5
Made chocopath correctly get choco based on where results
2022-03-31 11:26:39 -04:00
f9156acb49
Make chocolatey? act like correct bool function
2022-03-31 11:25:33 -04:00
6c92509877
Apply suggestions from code review
...
Changed at symbol in author
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-03-31 11:01:00 -04:00
d361ce961e
Update modules/post/windows/gather/enum_chocolatey_applications.rb
...
Added spelling corrections to descriptions
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-03-31 10:56:19 -04:00
ddf96d44e7
Added unique data to notes
2022-03-28 13:45:34 -04:00
dcec540c5d
Cleaned with rubocop
2022-03-28 13:44:45 -04:00
447a3d47ea
Replaced loot with notes
2022-03-28 13:39:23 -04:00
ec3a5b9db6
Made module not executable
2022-03-28 13:23:28 -04:00
6ef3cf7ed0
Added better separation between chocolatey 1.0 and newer chocolatey versions
2022-03-27 15:04:06 -04:00
Christophe De La Fuente