369c23a90b
Revert to TECHNIQUE datastore option for backwards compatibility
2022-06-23 18:43:18 +02:00
35e535415a
getsytem module: use ACTION instead of TECHNIQUE datastore option
2022-06-14 15:31:33 +02:00
f804a58970
Add getsystem technique 6 Named Pipe Impersonation (Efs variant - AKA EfsPotato)
2022-06-14 15:31:15 +02:00
5f5444936f
Land #16488 , Windows Task Scheduler Mixin
2022-05-25 12:37:03 -04:00
d225d4663c
Land #16413 , update local exploit suggester
2022-05-25 13:24:11 +01:00
7103a619c2
Add validation opts, tables, custom stylers to exploit suggester
2022-05-19 16:22:47 +01:00
5fd18ef864
Fixes from review
2022-05-19 14:54:07 +02:00
7992cb2072
Update vss_persistenceand persistence_exe modules to includes
...
changes in `TaskScheduler` mixin
2022-05-17 14:52:47 +02:00
14cd7bc335
Add task scheduler mixin and update persistence_exe and vss_persistence modules
2022-05-17 14:52:47 +02:00
1fe04caadd
Land #16406 , Create get_bookmarks.rb
...
Merge branch 'land-16406' into upstream-master
2022-05-13 13:42:31 -05:00
535a6e752d
Update get_bookmarks.rb
...
style changes made
2022-05-11 14:29:36 -04:00
03d658c28d
Update get_bookmarks.rb
...
style changes
2022-05-11 13:14:05 -04:00
606669e7cf
Update modules/post/windows/gather/get_bookmarks.rb
...
Skip symbols for current and parent dir
Co-authored-by: Brendan <bwatters@rapid7.com >
2022-05-11 12:59:47 -04:00
f5df9b500d
Update to include Internet Explorer
2022-05-10 18:13:22 -04:00
deb163c882
Update ad_to_sqlite to store loot
2022-05-06 21:41:17 +01:00
f30c797293
Fix two simple typo
2022-04-27 21:58:02 +02:00
d8542ad2b5
Changed vprint to print update docs
2022-04-21 11:35:33 -07:00
841fd12519
Update modules/post/windows/gather/enum_av.rb
...
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com >
2022-04-21 09:23:11 -07:00
ce76f0e62e
Upcase error check for consistency
2022-04-16 07:27:36 -04:00
92a1e207db
Update modules/post/windows/gather/get_bookmarks.rb
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2022-04-13 14:50:07 -04:00
d06a5db6d6
Enumerate Windows AV via WMI root\SecurityCenter2
...
Query WMI via shell or meterpreter session for deployed AV products
from the root\SecurityCenter2 namespace; record results as notes.
2022-04-09 12:06:41 -04:00
32edc6c5b5
variable name changes
2022-04-07 10:23:54 -04:00
aa7cba7b72
included store_loot and string interpolation
2022-04-05 16:50:51 -04:00
d96c3df3e7
Ran rubocop and added notes
2022-04-05 16:09:37 -04:00
1a48bccb42
Land #16403 , improve Qemu / KVM detection
2022-04-05 14:58:16 -05:00
d3e32eca5b
Style fixes
2022-04-05 12:59:01 -04:00
476ff36d8d
Bug fixes
...
*fixed typo for "browser"
*modified to use read_file instead of file.open to read files
2022-04-03 11:52:20 -04:00
587096f15d
Create get_bookmarks.rb
...
Metasploit Module that retrieves bookmarks from the following browsers: Google Chrome, Opera & Microsoft Edge.
2022-04-03 03:57:17 -04:00
35bd113952
Improve Qemu/KVM detection for BOCHS HW
...
Does what it says:
```
[*] Checking if the target is a Virtual Machine ...
[+] This is a Qemu/KVM Virtual Machine
[*] Post module execution completed
```
2022-04-02 10:43:57 -04:00
79df6190e6
call chocopath once, return nil instead of false
2022-04-01 10:56:11 -05:00
eb54081a62
Made table regex properly only grab lines that are start lines
2022-04-01 11:31:23 -04:00
6f933291be
Made chocopath give false if all other alternatives dont work
2022-03-31 11:32:43 -04:00
c6c77b9c7e
Merge branch 'enum_chocolatey_applications' of github.com:rad10/metasploit-framework into enum_chocolatey_applications
2022-03-31 11:27:06 -04:00
2ed4a4a6e9
Used fail statements where exit should fail
2022-03-31 11:27:02 -04:00
8177b101e5
Made chocopath correctly get choco based on where results
2022-03-31 11:26:39 -04:00
f9156acb49
Make chocolatey? act like correct bool function
2022-03-31 11:25:33 -04:00
6c92509877
Apply suggestions from code review
...
Changed at symbol in author
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-03-31 11:01:00 -04:00
d361ce961e
Update modules/post/windows/gather/enum_chocolatey_applications.rb
...
Added spelling corrections to descriptions
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-03-31 10:56:19 -04:00
ddf96d44e7
Added unique data to notes
2022-03-28 13:45:34 -04:00
dcec540c5d
Cleaned with rubocop
2022-03-28 13:44:45 -04:00
447a3d47ea
Replaced loot with notes
2022-03-28 13:39:23 -04:00
ec3a5b9db6
Made module not executable
2022-03-28 13:23:28 -04:00
6ef3cf7ed0
Added better separation between chocolatey 1.0 and newer chocolatey versions
2022-03-27 15:04:06 -04:00
8607fd766f
Added side effects back in since descriptions want them
2022-03-27 15:03:37 -04:00
86266ad5bd
Updated info values to allow info to work
2022-03-27 14:42:44 -04:00
d65a2fd687
Removed use of powershell since its unnecessary
2022-03-27 14:16:04 -04:00
9cc6944c18
Added option to change chocolatey path location in case its not on path
2022-03-27 14:14:02 -04:00
0489655c72
Added notes on stability
2022-03-26 13:32:11 -04:00
2ae6d1f655
Renamed havechocolatey
2022-03-26 13:31:58 -04:00
8248c1d0b8
Formatted document with rubocop
2022-03-26 13:26:22 -04:00
Christophe De La Fuente