f0428bfa15
Land #16627 , Add some error handling to update_payload_cache_size script
2022-06-16 10:25:44 -05:00
417f34e744
Fix random compile c tool
2022-06-10 11:28:42 +01:00
785a176240
Move logging and error printing to the end; return proper status
2022-06-09 09:18:11 -05:00
9d67ce0186
Add some error handling to update_payload_cache_size script
2022-05-27 08:45:10 -05:00
8f8dc4baaf
We in metasploit land now
2022-05-25 09:16:19 -04:00
c41387dcbb
Add the smb_file_server tool
2022-05-24 15:29:51 -04:00
1f4ee19c05
Expose options for logging to a file in mettle
2022-05-06 14:36:55 +01:00
274c050ae1
shift test for cache change to exit code
2022-04-21 15:27:34 -05:00
b8be080615
msftidy: Prefer CVE references over cve.mitre.org URL references
2022-04-19 20:35:21 +00:00
cb5d449676
add missing payload tests
...
A number of recent payload adds do not conform the patterns
used for suggesting spec configurations. Manually added these
tests to remove warning in rspec run.
2022-04-01 12:01:17 -05:00
bbf9e3163a
Fix file reads on Windows for binary files
2022-03-21 12:47:39 +00:00
550a625dc7
Major rework to support redirects
2022-02-16 23:12:55 -06:00
0ca56600a6
Fix casting issue by ensuring r.ctx_val is cast to a string before it used in a gsub operation. This prevents errors where sometimes the script can crash when r.ctx_val is considered to be a integer due to it containing only numbers and nothing else
2022-02-16 20:05:19 -06:00
d7b442f782
Fix up MSB code so it will properly check MSB URLs
2022-02-16 19:16:02 -06:00
d5ba1afbec
fix URLs not resolving
...
fix URLs not resolving
add csv export to references
fix URLs not resolving
pdf not pd
missed a url change
remove extra recirectedfrom fields
remove extra file
fix ovftool url accidental replacement
2022-02-16 17:22:40 -06:00
639bf9ffb0
Only warn about missing CVEs in exploit modules
2021-11-04 07:18:27 -04:00
1624e2c024
Fix bug where refs are not checked if the notes section is before refs
2021-10-05 14:44:40 -05:00
b7f7c30f2b
Land #15594 , a wordpress scanner enhancement
...
This adds options to the wordpress scanner to allow the user
to only scan for plugins or themes that metasploit has
modules for.
2021-09-24 15:51:07 -04:00
674a4ab9b6
update permissions
2021-09-23 21:42:02 -04:00
4e28d3df8f
Update the YSoSerial Dockerfile and remove runme
...
Remove the runme script because we should no longer be updating all of
the gadget chains at once because doing so would require that quite a
few different modules be updated. Moving forward we should be updating
individual chains using an incremental approach to allow us to validate
the results of the find_ysoserial_offsets tool which is error prone.
2021-09-14 09:10:44 -04:00
521975976b
Update find_ysoserial_offsets
...
* Apply rubocop suggestions for style
* Support patching an existing JSON file
* Use an OptionParser
2021-09-14 09:10:44 -04:00
6b90582864
Fix the diff-lcs v1.4+ bug
2021-09-14 09:10:44 -04:00
3c82f43644
only scan exploitable wordpress things
2021-09-06 11:56:32 -04:00
4746684735
adjustment to rebuild module cache as a tool
2021-09-01 09:18:05 -05:00
97b03a81c9
add automation cache creation
...
When new modules are committed, automation needs to rebuild the cache.
The scripts provided here will utilize the public docker container to
rebuild the cache json file. One drawback to this approach is that if
new dependencies for external modules are added the container must be
up to date in dockerhub before the rebuild occurs.
Ideas on a better way to do this without needing to build the docker
container in each automation run would be appreciated.
2021-08-30 12:21:06 -05:00
2c73c14931
Update rpc analyze command to support latest functionality
2021-08-05 20:18:31 +01:00
a894b8cc29
Updates Python shebangs to Python 3
2021-05-18 12:43:04 +01:00
129a0f72e6
Fix uninitialized constant SUPPRESS_INFO_MESSAGES
...
Copied from tools/dev/msftidy.rb.
2021-05-02 21:44:01 -05:00
b53e8b6fe8
Demote missing options warning to info
...
Again, options are optional.
2021-05-02 21:44:01 -05:00
c6561aded7
Add comment
2021-05-02 21:44:01 -05:00
cc00a58ec8
Fix heading order check in msftidy_docs
...
Options are optional and already reported if missing.
2021-05-02 21:44:01 -05:00
6e153a1866
fix tools author
2021-04-30 18:34:52 +07:00
dbd0ac8203
Land #14985 , Updates the JSON RPC Web service to correctly use framework's database configuration, and adds support for foregrounding the JSON RPC web service
2021-04-15 11:22:07 +01:00
22ae40a072
Remove new AKB reference
...
I'm not sure it adds enough value due to the URL format.
2021-04-03 14:05:45 -05:00
48f743a9f2
Change CVE reference to NVD and add AKB reference
2021-04-03 12:56:26 -05:00
12c5dd6f44
Fix db connection support for rpc service
2021-04-02 05:30:34 +01:00
309e39c45a
remove backtraces from ruby scripts
2021-03-24 14:52:19 -05:00
abd15f723c
Update dockerfile comments and pin jar versions
...
Pin the JAR versions so future travelers know what I was using today.
This should make the build deterministic. You're welcome.
2021-03-11 12:09:29 -06:00
3ecf0914e1
Use 'none' as the original ysoserial type, increase the size
...
Increasing the size to occupy two bytes seems to be helping stabilize
the generation for both the ROME and CommonsCollections1 payloads.
2021-03-11 12:09:29 -06:00
515d8fa853
Revert a subset of the changes from d39b1c911d which broke a payload
...
Adjusting the value used as a buffer offset in commit d39b1c911d
2021-03-11 12:09:29 -06:00
64387ff9c0
Fix multiple issues with find_ysoserial_offsets
...
1) The output of ysoserial changed so update the number of dropped lines.
2) Pin the diff-lcs gem to version 1.3 because 1.4 breaks the script
3) Generate all payloads by default
2021-03-11 12:09:29 -06:00
b06c5c12aa
Rubocop recently landed modules continued
2021-02-25 14:13:40 +00:00
260527076c
Require rubocop for new modules
2021-02-23 23:05:48 +00:00
275e9c5454
Land #14696 , Further Zeitwerk lands to improve boot speed
...
Zeitwerk rex folder
2021-02-19 10:33:37 +00:00
f4c37bd446
msftidy: Add info check for exploit module notes
2021-02-15 11:01:01 +00:00
a1c316c679
msftidy: Fix exploit module checks for author and stack buffer overflow
2021-02-13 04:10:13 +00:00
b95be3ed10
Zeitwerk rex folder
2021-02-08 12:24:12 +00:00
1af4aaeb91
update WPVDB link type
2021-02-06 12:20:03 +01:00
7cb8876e92
Ensure msftidy runs on ci
2021-01-29 12:29:15 +00:00
ffd59c3254
Land #14651 , msftidy: Add check for module description
2021-01-25 11:17:39 +00:00
Grant Willcox