900232fb60
HTTP login scanners need to set duplicate_ok to true
...
or different web applications on the same server
may wipe eachother's creds out.
2011-11-23 23:05:51 -06:00
53b3e96af4
Added a check to the Axis login scanner to ensure
...
that the supplied url is valid.
Need this because we don't currently have a way to fingerprint
for Axis2 so we are relying on Tomcat fingerpinting.
2011-11-23 23:05:51 -06:00
3954030963
Apply patch #6004
2011-11-23 23:05:51 -06:00
d1c44160dd
Fix to the axis2 Deployer exploit to add Default Target
2011-11-23 23:05:51 -06:00
d3887d20e5
Consolidation of the Axis2 Deployer Exploits
...
Fixes #5276
2011-11-23 23:05:51 -06:00
4ef7c373e9
Fix to typo in the tables being pushed.
2011-11-22 00:06:58 -06:00
e11ca43c37
Add feature #5680
2011-11-21 12:39:45 -06:00
76846aa578
Add MS10-038 (CVE-2010-0822) exploit
2011-11-21 11:36:47 -06:00
28a079f308
Add credit to the appropriate researcher
2011-11-20 02:32:45 -06:00
95d639ccf7
Change target index and names. Also retested on XP all the way to Win 7, IE 6 to IE8.
2011-11-20 01:44:52 -06:00
980cd4c888
Merge branch 'master' of github.com:rapid7/metasploit-framework
2011-11-19 20:41:29 -06:00
9c2fab0921
Add CVE-2010-0356 (Viscom Movie Player Pro) by tecr0c
2011-11-19 20:40:04 -06:00
67120d4263
msftidy on aux modules, see #5749
2011-11-20 13:12:07 +11:00
f35b6c5269
msftidy on post modules for spaces at EOL
2011-11-20 12:53:25 +11:00
a4cadf0d53
remove the extra comment that's not used
2011-11-19 12:48:39 -06:00
30f13984ea
Add wireshark console.lua exploit (CVE-2011-3360)
2011-11-18 21:24:48 -06:00
eca1253439
updating sudo
2011-11-18 10:17:43 -06:00
356e0e6fb5
Moving sudo from linux to multi, because it is.
2011-11-18 10:16:57 -06:00
fa77909c67
whitespace fix
2011-11-18 08:51:07 -06:00
55367fad4f
Merge pull request #25 from rapid7/post_module_sudo
...
Post module sudo
2011-11-18 06:30:40 -08:00
11c1f0983f
Fixes #5993
2011-11-17 18:05:36 -08:00
77cba9de7c
Merge branch 'cbdfix'
...
Conflicts:
modules/post/windows/gather/credentials/imvu.rb
modules/post/windows/gather/forensics/duqu_check.rb
modules/post/windows/recon/computer_browser_discovery.rb
2011-11-17 14:55:20 -08:00
d8b77564ef
Tidying up, fixing csh echo behavior
2011-11-17 16:29:02 -06:00
3bfe7e9b98
fix to comptuer browser discovery to output properly and sotre as loot
...
added additional option to save detected hosts in the db.
2011-11-17 14:17:28 -08:00
9878517f80
Cleanup and light refactoring, deal with slowpoke linux telnet cmd_exec()
2011-11-17 13:19:13 -06:00
84fb5b441a
Cleaning up some names and descs
2011-11-17 07:47:26 -06:00
4c90b68b4f
Merge branch 'master' of github.com:rapid7/metasploit-framework
2011-11-16 19:10:53 -08:00
eae171b216
Addresses issue #5984
2011-11-16 19:07:56 -08:00
93a133d5de
Always try both export and setenv. Fixups to allow for correct reading from echoy nix shells. Fixes is_root? to not treat an empty string as 0
2011-11-16 16:48:19 -06:00
fea42dbdee
Add feature #5872
2011-11-16 12:26:54 -06:00
725431dbdb
Simpler method for setenv vs export. Tested on csh, ksh, zsh, sh, bash
2011-11-15 19:31:15 -06:00
d969006268
Adding zsh
2011-11-15 19:10:25 -06:00
5cdab2ef41
Less repetitive error messages
2011-11-15 18:17:25 -06:00
26659d8b17
Adding a sudo post module for easier automation
2011-11-15 17:38:45 -06:00
d8347a1245
Fixes to post modules that store creds as loot.
...
All post modules that store creds as loot now store in
a CSV format with User and then Password always as the
first two columns.
2011-11-15 14:13:51 -08:00
f6b0ffd630
Cleanup of the stack traces in the pidgin and filezilla client cred modules
2011-11-15 12:19:15 -08:00
8d47883af0
Moving the wlan directory up a level. It makes more sense in it's own area
...
instead of under gather.
2011-11-15 08:29:13 -08:00
c8142043e9
Fixes to credential handling to downcase usernames whenever they are not case sensitive.
...
Also report_auth_info now checks to see if a non-case sensitive version of the cred
may already exist.
2011-11-14 22:50:52 -08:00
96d2209ca2
Minor fixups for trace report_note patch
2011-11-14 10:40:11 -06:00
5d5c9464cc
Do some report_note while TRACE detection
2011-11-14 12:10:53 +01:00
2536cf0308
Add feature #5779
2011-11-14 01:49:26 -06:00
5856112797
Quickfix: missing require in post/windows/escalate/getsystem.rb
...
Resolves:
[-] WARNING! The following modules could not be loaded!
[-] contrib/metasploit-framework/modules/post/windows/escalate/getsystem.rb: NameError uninitialized constant Msf::Post::Windows
2011-11-13 14:25:31 +01:00
71599f5ef9
Fix sqlmap aux to work with actual sqlmap.py
...
Commit relates to IssueID #5807
2011-11-13 09:18:33 +01:00
4f177acf88
Merge pull request #9 from swtornio/master
...
Add osvdb ref
2011-11-12 11:35:24 -08:00
e4ebb890d8
Apply patch for bug #5963
2011-11-12 13:17:26 -06:00
41d746a07a
Add Support Incident Tracker (Feature #5964 ) by Juan
2011-11-12 12:36:21 -06:00
a0c9297500
add osvdb ref
2011-11-12 06:01:41 -06:00
170c4f5451
Fix author email format
2011-11-12 01:53:25 -06:00
b8b8732d85
Correct disclosure date
2011-11-12 01:12:28 -06:00
ed5bae6441
oops, I don't need that extra comment
2011-11-12 01:04:00 -06:00
David Maloney
sinn3r
James Lee
Tod Beardsley
Tod Beardsley
andurin
HD Moore
Steve Tornio