Commit Graph

312 Commits

Author SHA1 Message Date
HacKurx 5630b36d5f Update PaX detection
The use of paxctld makes paxctl unnecessary.
2020-05-01 13:54:08 +00:00
Brendan Coles d047feeb03 Add check for CPU vulnerability status to enum_system 2020-02-15 14:35:38 +00:00
Wei Chen 12c930a445 Land #12136, Add post module for dumping credentials out of NagiosXI 2019-10-10 16:59:40 -05:00
Wei Chen ffdfe33e11 Check unexpected scenarios 2019-10-10 16:57:49 -05:00
dwelch-r7 285244e877 Remove commented out code 2019-09-24 13:51:54 +01:00
dwelch-r7 fe2b3f8f29 Remove targets from post modules 2019-09-23 17:26:36 +01:00
William Vu 32334c2386 Update all module splats from http:// to https:// 2019-08-15 18:10:44 -05:00
Brendan Coles efd6bec827 Store opasswd password history 2019-08-04 01:12:06 +00:00
breeh c48a43a771 Adding post module for dumping credentials out of NagiosXI 2019-07-27 11:22:58 -06:00
h00die 5ea406cd4c create hash identifier library 2019-03-23 14:02:34 -04:00
h00die 9f6b9d586b updating jtr formats in hashdumpers 2019-01-30 20:16:08 -05:00
William Vu 8cdcba81fe Fix SessionTypes 2019-01-24 11:22:19 -06:00
William Vu 006faa3d17 Fix prompt 2019-01-24 11:21:45 -06:00
William Vu 06de16a36f Merge remote-tracking branch 'upstream/master' into pr/10119 2019-01-15 18:33:48 -06:00
Brendan Coles 80d83720df Add Msf::Post::Linux::Kernel.lkrg_installed? method 2018-12-07 14:42:16 +00:00
Brent Cook 7d8458d8d4 Land #11076, Prevent storing empty config files as loot 2018-12-06 20:30:08 -06:00
Brendan Coles eecc5d60e0 Prevent storing empty config files as loot 2018-12-06 13:06:50 +00:00
Brendan Coles 40906e0b36 Add checks to post/linux/gather/enum_protections 2018-12-04 11:57:24 +00:00
Shelby Pace dbace01015 modified regex lines 2018-09-07 11:13:09 -05:00
Shelby Pace 18ffd36409 storing config file, changed regex 2018-09-07 08:13:10 -05:00
Shelby Pace 6c3b1081ea added function to grab and store user and passwd 2018-09-06 12:03:00 -05:00
Shelby Pace 924e61c5c1 Added check and removed register_options 2018-08-30 12:13:39 -05:00
Dhiraj Mishra 25145004b2 Removing arch 2018-08-29 22:05:57 +05:30
Dhiraj Mishra c486dab574 Updating
Thank you bcoles :)
2018-08-29 11:45:08 +05:30
Dhiraj Mishra 107baee0a2 Updating store_loot? 2018-08-20 16:57:09 +05:30
Dhiraj Mishra a018d24df4 Fixing some more spaces at EOL 2018-08-20 12:56:59 +05:30
Dhiraj Mishra 71f8a66f8d Spaces EOL 2018-08-20 12:45:15 +05:30
Dhiraj Mishra 0ae5a16c8e Adding store_loot 2018-08-20 12:24:31 +05:30
Dhiraj Mishra a926e0f7a6 Root privilege is required 2018-08-20 11:38:02 +05:30
Dhiraj Mishra 6684e5d0eb PhpMyAdmin creds extractor 2018-08-19 23:40:19 +05:30
AlbertoCoding bb24c3114a Minor code style fixes made 2018-08-15 04:49:17 +02:00
AlbertoCoding e43798b148 minor fix 2018-08-14 19:21:43 +02:00
AlbertoCoding 75ef8e8097 enum_commands.rb module added 2018-08-14 18:31:16 +02:00
AlbertoCoding 259b92a64b iptables_removal.rb module added 2018-08-14 18:24:15 +02:00
AlbertoCoding 93413481e8 IPTABLES rules removal module added 2018-07-12 14:16:22 +02:00
AlbertoCoding 60becc272a Native DNS Spoofing module added 2018-07-12 14:06:41 +02:00
AlbertoCoding 5b60a91b66 Style and code optimization changes 2018-07-12 13:54:47 +02:00
AlbertoCoding 247437c8f3 Change global variables to instance variables in pseudo_shell module and minor fix prompts's output 2018-06-21 13:25:35 +02:00
AlbertoCoding 667f6cb570 Some minor fixes in pseudo_shell module and priv.rb 2018-06-19 14:30:00 +02:00
AlbertoCoding 53e6faef27 Module description fixed 2018-06-19 12:50:18 +02:00
AlbertoCoding be1ea1549e Post-exploitation API improvements and pseudo_shell module added 2018-06-19 12:39:41 +02:00
William Vu 14da99bb3d Fix missing RequestError in a few post modules
Should be Rex::Post::Meterpreter::RequestError.
2018-06-12 17:11:29 -05:00
AlbertoCoding 96cd65a205 Added new whoami module and some fixes 2018-06-01 02:57:03 +02:00
root 6df8e28f7e Some syntax fixes and name changes 2018-06-01 02:06:25 +02:00
root c9a4cc47f7 Initial upload of Vulnerateca Post-Exploitation Framework (VPEF) 2018-05-31 18:05:33 +02:00
Adam Cammack 435f965418 Use #include? over Regexps with plain strings 2018-05-30 15:32:04 -05:00
Auxilus 72fb51f877 add extra check for failed command outputs 2018-05-24 20:47:06 +05:30
Auxilus 40b6b97dbf Update enum_network.rb 2018-05-05 10:56:55 +05:30
Auxilus ec55a631ef Check if the data is nil before pasisng to store_loot
when I ran this module for linux/aarch64/meterpreter_reverse_tcp for payload running in termux, it was obvious that without root the commands will return error, It still created empty files in `.msf4/loot`

```
msf5 post(linux/gather/enum_network) > run
                                                                                                  
[*] Running module against localhost.localdomain
[*] Module running as /system/bin/sh: /usr/bin/whoami: not found
[+] Info:
[+]
[+]     Linux localhost 3.10.84-perf+ #1 SMP PREEMPT Tue Oct 24 01:07:25 CST 2017 aarch64 Android
[*] Collecting data...
[+] /system/bin/sh: /sbin/route: not found
[-] Failed to open file: /etc/ssh/sshd_config: core_channel_open: Operation failed: 1
[-] unable to get data for Network config
[+] Network config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_735775.txt
[-] unable to get data for Route table                                                            
[+] Route table stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_599334.txt
[-] unable to get data for Firewall config
[+] Firewall config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_790893.txt
[-] unable to get data for DNS config
[+] DNS config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_867340.txt
[-] unable to get data for SSHD config                                                           
[+] SSHD config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_900906.txt                                                                  [-] unable to get data for Host file
[+] Host file stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_179877.txt
[-] unable to get data for Active connections                                                     
[+] Active connections stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_656035.txt                                                           [-] unable to get data for Wireless information
[+] Wireless information stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_168144.txt
[-] unable to get data for Listening ports                                                        
[+] Listening ports stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_999548.txt                                                              [-] unable to get data for If-Up/If-Down
[+] If-Up/If-Down stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_860869.txt
[*] Post module execution completed                                                               
msf5 post(linux/gather/enum_network) >
```
2018-05-05 10:52:08 +05:30
Brendan Coles 3351a59efb Update linux/gather/enum_protections 2018-04-29 06:52:47 +00:00