e6e47ed890
Land #13262 , Add Python stager
...
Merge branch 'land-13262' into upstream-master
2020-05-20 16:22:48 -05:00
b8ca608800
Land #13415 , badchar-free encoded payload fix
2020-05-15 17:50:59 -05:00
aa6624e7f8
Land #13436 , service encoder fix for psexec
2020-05-14 16:43:07 -05:00
6034f48e8f
Land #13405 , once more with feeling
2020-05-13 11:54:41 -05:00
91ea692cbe
socket_server.rb: better describe "0.0.0.0"
...
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
2020-05-13 16:30:00 +02:00
44b0ddf2ed
Land #13405 , OptAddressLocal for SRVHOST
2020-05-13 09:15:42 -05:00
ec33651243
socket_server.rb: SRVHOST can be an interface
...
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
2020-05-13 16:14:20 +02:00
fc762f8a82
Land #13402 , add service_exists? method
2020-05-12 13:37:54 -05:00
258895f534
Use print_error for error messages
2020-05-12 00:02:52 +02:00
b7d16b1e72
Fix regression in psexec mixing filename and encoder
...
Closes #13407
2020-05-12 00:02:52 +02:00
646c10ff02
Disable RuboCop Security/Eval the non-hacky way
...
Hat tip @adfoster-r7!
2020-05-11 12:05:38 -05:00
f346b1b001
Add SaltStack Salt root key disclosure module
...
Also adds a new ZeroMQ mixin, mainly for use with Salt modules.
2020-05-11 12:05:38 -05:00
1214ac17a7
Refactor Msf::Exploit::CmdStager::HTTP
...
Minor updates to align with current style.
2020-05-10 04:12:45 -05:00
683ecb7b8d
Tweak handling of the DnsNote option
2020-05-08 12:21:52 -04:00
6be4b5431c
Remove the TLD wordlist option for now
2020-05-08 12:21:52 -04:00
0a8cb83e7f
Fix TXT records, the DNS port, and messages for cloud_lookup
2020-05-08 12:21:52 -04:00
715dfc13f8
Refactor the auxiliary mixin to an enumeration exploit mixin
2020-05-08 12:21:52 -04:00
09ded72247
migrate enum_dns to mixin (add. TLDs wordlist) and update cloud_lookup
2020-05-08 12:21:52 -04:00
578a13732d
add. move DNS functions into a mixin
2020-05-08 12:21:52 -04:00
f118589bba
Use squiggly heredoc
2020-05-08 02:55:26 -05:00
5f8181efa7
Avoid auto-encoding payloads free of badchars
...
Payloads without any of the specified badchars will no longer be encoded
by default. This should hopefully lead to less surprising results when
using simple payloads (especially commands. Things that had incomplete
badchar analysis may break as a result, since not everything will be
encoded by default anymore. Sorry in advance if they do.
2020-05-07 10:58:03 -05:00
9769e04b6e
Land #13322 , CVE-2020-0668 Service tracing file junction overwrite
2020-05-07 09:47:20 -04:00
f897806589
use python squiggly heredoc
2020-05-07 14:21:36 +08:00
a5fe498610
Update ARCH handling, suggested changes, and last-minute fixes
2020-05-06 15:36:53 -05:00
c42db7959b
Use OptAddressLocal for SRVHOST to specify by interface name instead of IP
2020-05-06 19:51:13 +02:00
d313f196d9
Add Post::Windows::Services.service_exists? method
2020-05-06 15:26:52 +00:00
48f9d1a223
Land #13386 , Raise exception for stageless android payload -x option
2020-05-06 14:58:23 +01:00
8ac04d5312
Land #13367 , Surface helpful error messages to users
2020-05-06 14:40:21 +01:00
2c8b5c2647
Fix edge cases in raising metasploit exceptions
2020-05-05 20:18:04 +01:00
437a056f67
Land #13364 , .NET deserialization tool
2020-05-05 11:02:31 -05:00
f5a432d328
Land #13313 , warn users to change RPORT with SSL
2020-05-04 15:45:07 +01:00
b991042c4a
add base64 encoding stub
2020-05-04 15:43:40 +08:00
2b8568b487
fix #10181 , add error when an android stageless payload is used with apk injection
2020-05-04 15:36:20 +08:00
c367258826
Remove static off variable, inline its 0 declariation
2020-05-03 20:37:13 -05:00
9501ec0b1b
RuboCop alpanum.rb code
2020-05-02 21:48:31 -05:00
60ac7773d6
Fix up typo and some double quote RuboCop issues
2020-05-02 21:16:08 -05:00
41718a6f71
Fix up Alan's patch to detect a changed value
2020-05-02 19:59:36 -05:00
5faf446a38
Warn when the SSL value changes
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2020-05-02 19:59:36 -05:00
35016713d4
Warn the user to set RPORT if SSL is enabled
2020-05-02 19:59:36 -05:00
778a66191a
Land #13373 , Improvements to "No DB Connected" error message
2020-05-01 15:39:59 -05:00
c27269105e
Rename CmdStager to psh_invokewebrequest
2020-05-01 12:31:53 -05:00
9adaa08ddd
Use new PowerShell Invoke-WebRequest CmdStager
2020-05-01 12:19:12 -05:00
5630b36d5f
Update PaX detection
...
The use of paxctld makes paxctl unnecessary.
2020-05-01 13:54:08 +00:00
a53a1520c1
add setup guide link to db connection error msg
2020-05-01 12:22:58 +01:00
57b7f8995f
Surface developer provided exception messages to users
2020-04-30 14:56:55 +01:00
3132115d49
Fix typos
2020-04-30 07:55:37 -05:00
35913c829e
add mkdir and other suggested fixes
2020-04-30 07:47:57 -05:00
197365b610
Finish up the .NET deserialization tool
2020-04-29 17:50:07 -04:00
91c317f7b5
Rubocop autocorrect
2020-04-29 11:01:29 -05:00
2a7203831c
Convert to library
2020-04-29 10:37:20 -05:00
bwatters-r7