Files

T

Jack Heysel 31cf0e2633 Land #18764 , Add unauth Jenkins file read module

This PR adds a new module to exploit CVE-2024-23897, an unauth arbitrary
(first 2 lines) file read on Jenkins.

2024-03-28 13:29:39 -07:00

analyze

code spell for a bunch of modules

2023-09-24 17:42:00 -04:00

auxiliary

Add smb session support to delete_file module

2023-12-12 11:59:07 +00:00

db_manager

code spell for a bunch of modules

2023-09-24 17:42:00 -04:00

encoder

…

encoding

…

exe

…

exploit

Land #18764 , Add unauth Jenkins file read module

2024-03-28 13:29:39 -07:00

handler

spelling fixes for lib folder

2024-01-06 15:54:49 -05:00

module

Enforce single module stance

2024-03-25 11:53:23 +00:00

module_manager

Remove all references to Msf::SymbolicModule

2024-02-07 15:08:47 +00:00

modules

Adds support for searching by session types

2024-02-29 15:15:40 +00:00

optional_session

Conditionally validate only when session type is enabled

2024-02-23 18:08:09 +00:00

payload

Check if the SMB share exists before overwriting

2024-01-29 16:55:25 -05:00

post

Align SQL sessions peerhost and peerport

2024-03-04 13:11:32 +00:00

rpc

Implement new interactive_read and interactive_write RPC calls for Session API to extend support of meterpreter-style session interaction via RPC to new session types.

2024-03-28 11:42:04 +01:00

session

spelling fixes for lib folder

2024-01-06 15:54:49 -05:00

web_services

Sets config.eager_load to false for production envs

2023-03-21 12:31:33 +00:00

analyze.rb

…

author.rb

…

auxiliary.rb

…

cert_provider.rb

…

constants.rb

…

data_store_with_fallbacks.rb

code spell for a bunch of modules

2023-09-24 17:42:00 -04:00

data_store.rb

code spell for a bunch of modules

2023-09-24 17:42:00 -04:00

database_event.rb

…

db_connector.rb

…

db_export.rb

…

db_import_error.rb

…

db_manager.rb

Update brocade tests to pass locally

2023-03-15 13:23:01 +00:00

encoded_payload.rb

Revert change to each_module for compatible nops

2024-02-13 11:15:27 +00:00

encoder.rb

Add a base64 ARCH_CMD encoder

2024-02-13 18:34:40 +01:00

evasion_driver.rb

…

evasion.rb

Fix initial incorrect parameters in YARD documentation

2023-03-05 20:15:14 -06:00

event_dispatcher.rb

…

exception.rb

…

exploit_driver.rb

…

exploit_event.rb

…

exploit.rb

code spell for a bunch of modules

2023-09-24 17:42:00 -04:00

feature_manager.rb

Bump Metasploit version to 6.4.0

2024-03-20 13:46:08 +00:00

framework.rb

The DNS feature requires a restart, so flag it

2024-03-12 09:58:52 -04:00

general_event_subscriber.rb

…

handler.rb

…

host_state.rb

…

module_data_store_with_fallbacks.rb

…

module_data_store.rb

…

module_manager.rb

…

module_set.rb

Fixes WMAP plugin loading failures

2024-03-25 09:55:38 +00:00

module.rb

Move new session information alerts behind a feature flag

2024-01-30 16:38:00 +00:00

modules.rb

…

nop.rb

…

opt_address_local.rb

Land #18294 , pick up netifaces updates, improve error catching

2023-09-15 13:04:26 +01:00

opt_address_range.rb

…

opt_address_routable.rb

Add routable address type

2023-06-13 10:29:15 -05:00

opt_address.rb

…

opt_base.rb

…

opt_bool.rb

…

opt_condition.rb

Show session/rhost options separate from each other

2024-02-21 12:51:11 +00:00

opt_enum.rb

fix optenum, add documentation, fix issue with unset values

2023-12-04 18:03:28 -06:00

opt_float.rb

…

opt_int.rb

…

opt_meterpreter_debug_logging.rb

…

opt_path.rb

…

opt_port.rb

…

opt_raw.rb

…

opt_regexp.rb

…

opt_rhosts.rb

…

opt_string.rb

…

opt.rb

…

option_container.rb

Show session/rhost options separate from each other

2024-02-21 12:51:11 +00:00

option_group.rb

Add conditional option validation depending on SESSION or RHOST connection

2024-02-22 17:57:20 +00:00

optional_session.rb

Conditionally validate only when session type is enabled

2024-02-23 18:08:09 +00:00

payload_generator.rb

Leverage the module metadata cache in the module_sets

2024-01-15 14:56:46 +00:00

payload_set.rb

Remove all references to Msf::SymbolicModule

2024-02-07 15:08:47 +00:00

payload.rb

Fix empty cmd/windows/powershell/download_exec payload

2023-12-08 01:00:45 +00:00

platform.rb

…

plugin_manager.rb

…

plugin.rb

…

post_mixin.rb

DRY up post mixin/optional session

2023-12-04 17:55:15 +00:00

post.rb

…

README.md

…

reference.rb

…

reflective_dll_loader.rb

Use Metasploit-Payloads Crypto to decrypt payloads

2023-10-13 14:42:10 +01:00

rhosts_walker.rb

Clearer RHOST error message

2023-11-24 11:34:18 +11:00

rpc.rb

…

service_state.rb

…

session_compatibility.rb

Add postgres acceptance tests

2024-03-07 10:35:45 +00:00

session_event.rb

…

session_manager.rb

…

session.rb

Catch exception when updating non-existing session

2024-02-13 16:28:45 -05:00

site_reference.rb

…

target.rb

…

thread_manager.rb

…

web_services.rb

Fix undefined method error in /api/v1/modules endpoint

2024-01-17 13:17:38 +01:00

windows_version.rb

Use revision in MSF modules

2023-06-16 10:07:35 +10:00

README.md

framework-core

The core library provides all of the means by which to interact with the framework insofar as manipulating encoders, nops, payloads, exploits, auxiliary, and sessions.