Tod Beardsley
a1668f2b23
Pubkeys are now stored as loot, and the Cred model has new and exciting ways to discover which pubkeys match which privkeys. Squashed commit of the following: commit 036d2eb61500da7e161f50d348a44fbf615f6e17 Author: Tod Beardsley <todb@metasploit.com> Date: Sun Jan 8 22:23:32 2012 -0600 Updates ssh credentials to easily find common keys Instead of making the modules do all the work of cross-checking keys, this introduces a few new methods to the Cred model to make this more universal. Also includes the long-overdue workspace() method for credentials. So far, nothing actually implements it, but it's nice that it's there now. commit c28430a721fc6272e48329bed902dd5853b4a75a Author: Tod Beardsley <todb@metasploit.com> Date: Sun Jan 8 20:10:40 2012 -0600 Adding back cross-checking for privkeys. Needs to test to see if anything depends on order, but should be okay to mark up the privkey proof with this as well. commit dd3563995d4d3c015173e730eebacf471c671b4f Author: Tod Beardsley <todb@metasploit.com> Date: Sun Jan 8 16:49:56 2012 -0600 Add SSHKey gem, convert PEM pubkeys to SSH pubkeys commit 11fc363ebda7bda2c3ad6d940299bf4cbafac6fd Author: Tod Beardsley <todb@metasploit.com> Date: Sun Jan 8 13:51:55 2012 -0600 Store pubkeys as loot for reuse. Yanked cross checking for now, will drop back in before pushing. commit aad12b31a897db2952999f7be0161df1f59b6000 Author: Tod Beardsley <todb@metasploit.com> Date: Sun Jan 8 02:10:12 2012 -0600 Fixes up a couple typos in ssh_identify_pubkeys commit 48937728a92b9ae52d0b93cdcd20bb83f15f8803 Author: Tod Beardsley <todb@metasploit.com> Date: Sat Jan 7 17:18:33 2012 -0600 Updates to ssh_identify_pubkeys and friends Switches reporting to cred-based rather than note-based, accurately deal with DSA keys, adds disable_agent option to other ssh modules, and reports successful ssh_login attempts pubkey fingerprints as well. This last thing Leads to some double accounting of creds, so I'm not super-thrilled, but it sure makes searching for ssh_pubkey types a lot easier.... maybe a better solution is to just have a special method for the cred model, though.
71 lines
3.2 KiB
Plaintext
71 lines
3.2 KiB
Plaintext
Copyright (C) 2006-2011, Rapid7 LLC
|
|
All rights reserved.
|
|
|
|
Redistribution and use in source and binary forms, with or without modification,
|
|
are permitted provided that the following conditions are met:
|
|
|
|
* Redistributions of source code must retain the above copyright notice,
|
|
this list of conditions and the following disclaimer.
|
|
|
|
* Redistributions in binary form must reproduce the above copyright notice,
|
|
this list of conditions and the following disclaimer in the documentation
|
|
and/or other materials provided with the distribution.
|
|
|
|
* Neither the name of Rapid7 LLC nor the names of its contributors
|
|
may be used to endorse or promote products derived from this software
|
|
without specific prior written permission.
|
|
|
|
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
|
|
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
|
|
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
|
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
|
|
ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
|
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
|
|
ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
|
|
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
|
================================================================================
|
|
|
|
The Metasploit Framework is provided under the 3-clause BSD license above.
|
|
|
|
The copyright on this package is held by Rapid7 LLC.
|
|
|
|
|
|
This license does not apply to the following components:
|
|
- The Bit-Struct library located under lib/bit-struct
|
|
- The OpenSSL library embedded into the Meterpreter payload binaries and the
|
|
corresponding header files in the source tree
|
|
- The Packet Sniffer SDK (MicroOLAP) library embedded into the Meterpreter
|
|
Sniffer extension. HD Moore has a single-seat developer license.
|
|
- The modified TightVNC binaries and their associated source code.
|
|
- The Byakugan plugin located under external/source/byakugan
|
|
- The Metasm library located under lib/metasm
|
|
- The PcapRub library located under external/pcaprub
|
|
- The Rabal library located under lib/rabal
|
|
- The PacketFu library located under lib/packetfu
|
|
- The Ruby-Lorcon library located under external/ruby-lorcon
|
|
- The SNMP library located under lib/snmp
|
|
- The Zip library located under lib/zip
|
|
- The SSHKey library located under lib/sshkey
|
|
|
|
The latest version of this software is available from http://metasploit.com/
|
|
|
|
Bug tracking and development information can be found at:
|
|
https://dev.metasploit.com/redmine/projects/framework/
|
|
|
|
The public GitHub source repository can be found at:
|
|
https://github.com/rapid7/metasploit-framework
|
|
|
|
Questions and suggestions can be sent to:
|
|
msfdev[at]metasploit.com
|
|
|
|
The framework mailing list is the place to discuss features and ask for help.
|
|
To subscribe, visit the following web page:
|
|
https://mail.metasploit.com/mailman/listinfo/framework
|
|
|
|
The archives are available from:
|
|
https://mail.metasploit.com/pipermail/framework/
|
|
|