b8ca608800
Land #13415 , badchar-free encoded payload fix
2020-05-15 17:50:59 -05:00
aa6624e7f8
Land #13436 , service encoder fix for psexec
2020-05-14 16:43:07 -05:00
6034f48e8f
Land #13405 , once more with feeling
2020-05-13 11:54:41 -05:00
91ea692cbe
socket_server.rb: better describe "0.0.0.0"
...
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
2020-05-13 16:30:00 +02:00
44b0ddf2ed
Land #13405 , OptAddressLocal for SRVHOST
2020-05-13 09:15:42 -05:00
ec33651243
socket_server.rb: SRVHOST can be an interface
...
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com >
2020-05-13 16:14:20 +02:00
fc762f8a82
Land #13402 , add service_exists? method
2020-05-12 13:37:54 -05:00
258895f534
Use print_error for error messages
2020-05-12 00:02:52 +02:00
b7d16b1e72
Fix regression in psexec mixing filename and encoder
...
Closes #13407
2020-05-12 00:02:52 +02:00
646c10ff02
Disable RuboCop Security/Eval the non-hacky way
...
Hat tip @adfoster-r7!
2020-05-11 12:05:38 -05:00
f346b1b001
Add SaltStack Salt root key disclosure module
...
Also adds a new ZeroMQ mixin, mainly for use with Salt modules.
2020-05-11 12:05:38 -05:00
1214ac17a7
Refactor Msf::Exploit::CmdStager::HTTP
...
Minor updates to align with current style.
2020-05-10 04:12:45 -05:00
683ecb7b8d
Tweak handling of the DnsNote option
2020-05-08 12:21:52 -04:00
6be4b5431c
Remove the TLD wordlist option for now
2020-05-08 12:21:52 -04:00
0a8cb83e7f
Fix TXT records, the DNS port, and messages for cloud_lookup
2020-05-08 12:21:52 -04:00
715dfc13f8
Refactor the auxiliary mixin to an enumeration exploit mixin
2020-05-08 12:21:52 -04:00
09ded72247
migrate enum_dns to mixin (add. TLDs wordlist) and update cloud_lookup
2020-05-08 12:21:52 -04:00
578a13732d
add. move DNS functions into a mixin
2020-05-08 12:21:52 -04:00
5f8181efa7
Avoid auto-encoding payloads free of badchars
...
Payloads without any of the specified badchars will no longer be encoded
by default. This should hopefully lead to less surprising results when
using simple payloads (especially commands. Things that had incomplete
badchar analysis may break as a result, since not everything will be
encoded by default anymore. Sorry in advance if they do.
2020-05-07 10:58:03 -05:00
9769e04b6e
Land #13322 , CVE-2020-0668 Service tracing file junction overwrite
2020-05-07 09:47:20 -04:00
a5fe498610
Update ARCH handling, suggested changes, and last-minute fixes
2020-05-06 15:36:53 -05:00
c42db7959b
Use OptAddressLocal for SRVHOST to specify by interface name instead of IP
2020-05-06 19:51:13 +02:00
d313f196d9
Add Post::Windows::Services.service_exists? method
2020-05-06 15:26:52 +00:00
48f9d1a223
Land #13386 , Raise exception for stageless android payload -x option
2020-05-06 14:58:23 +01:00
8ac04d5312
Land #13367 , Surface helpful error messages to users
2020-05-06 14:40:21 +01:00
2c8b5c2647
Fix edge cases in raising metasploit exceptions
2020-05-05 20:18:04 +01:00
2b8568b487
fix #10181 , add error when an android stageless payload is used with apk injection
2020-05-04 15:36:20 +08:00
c367258826
Remove static off variable, inline its 0 declariation
2020-05-03 20:37:13 -05:00
9501ec0b1b
RuboCop alpanum.rb code
2020-05-02 21:48:31 -05:00
60ac7773d6
Fix up typo and some double quote RuboCop issues
2020-05-02 21:16:08 -05:00
c27269105e
Rename CmdStager to psh_invokewebrequest
2020-05-01 12:31:53 -05:00
9adaa08ddd
Use new PowerShell Invoke-WebRequest CmdStager
2020-05-01 12:19:12 -05:00
5630b36d5f
Update PaX detection
...
The use of paxctld makes paxctl unnecessary.
2020-05-01 13:54:08 +00:00
57b7f8995f
Surface developer provided exception messages to users
2020-04-30 14:56:55 +01:00
3132115d49
Fix typos
2020-04-30 07:55:37 -05:00
35913c829e
add mkdir and other suggested fixes
2020-04-30 07:47:57 -05:00
91c317f7b5
Rubocop autocorrect
2020-04-29 11:01:29 -05:00
2a7203831c
Convert to library
2020-04-29 10:37:20 -05:00
219125b393
Credit cdelafuente-r7
2020-04-29 10:35:43 -05:00
191044cdad
Final fixes and documentation
2020-04-29 10:18:22 -05:00
779d2cade4
Land #13316 , Add missing tag functionality to the RemoteHttpDataService
2020-04-28 15:15:10 +01:00
8e3add3f5f
simplifies get host id, renames endpoints & clean
2020-04-28 13:33:54 +01:00
0bd43096f1
PRC return tags for del & add, simplified DB call
2020-04-23 17:01:32 +01:00
9633f5daf4
Exploit an LDAP auth bypass to add an admin user
...
Thanks to JJ Lehmann and Ofri Ziv of Guardicore Labs for their work.
https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/
2020-04-22 17:38:11 -05:00
8b74fd6605
Move discover_base_dn method to mixin
2020-04-22 17:38:11 -05:00
88fcf4b9a2
Add and use new LDAP mixin
2020-04-22 17:38:11 -05:00
546333b227
Land #13252 , UUID support for OSX x64 reverse_tcp stager
2020-04-22 16:36:10 -05:00
789b5dec00
adds tag functionality for hosts
2020-04-22 16:47:23 +01:00
1615a68abf
Land #13263 , remove spaces from the Python stager
2020-04-21 12:55:02 -04:00
0bbb822fe4
Working through mountpoint issues
2020-04-21 09:54:45 -05:00
William Vu