Commit Graph

8724 Commits (0dbad5d2e3c9e9c4cfb6203b99a2b437b18a0105)

Author SHA1 Message Date
Hendrik Van Belleghem aed609d6f0 Changes in couchdb_enum to also include fill database enumeration 2018-09-15 13:58:54 +02:00
Shelby Pace d2f587894b
Initial metadata setup 2018-09-14 09:37:23 -05:00
Hendrik Van Belleghem 33037b6b26 Fixes for CouchDB CVE 2017-12635 module 2018-09-14 00:15:11 +02:00
Erin Bleiweiss e3178faa9a
Add metadata for teradata_odbc_sql.py 2018-09-13 13:09:01 -05:00
Adam Cammack 04cc7843a4
Typo fixes 2018-09-13 11:19:13 -05:00
Hendrik Van Belleghem 3e4c3478f6 Small fixes in couchdb_2017-12635 2018-09-12 23:48:23 +02:00
Hendrik Van Belleghem 537e12ea7e Added CouchDB user creation with Admin role Auxiliary module - 2017_12635 2018-09-12 23:17:34 +02:00
Shelby Pace 5b81ebd81b
Land #10589, multidrop support for word xml docs 2018-09-12 11:00:11 -05:00
Jacob Robles d0e67c5b60
Add SMB2 support to smb_enumshares 2018-09-11 19:05:26 -05:00
Adam Cammack a8f766cfd5
Update heartbleed description to mention `repeat` 2018-09-11 17:41:06 -05:00
Brent Cook a3d74d926c
Land #9897, Fix #8404 ListenerComm Support For Exploit::Remote::TcpServer 2018-09-10 16:25:55 -05:00
Brent Cook ea2fcb6fc4
Land #10593, Refactor SSH mixins and update modules 2018-09-10 15:38:53 -05:00
William Vu 3ec4d2f22b Normalize loot type OID
1. Include the vendor, product, and technology
2. Content type is already reported, extension changed
3. Original filename including extension is also reported

Can we get some sort of standard on the OID?
2018-09-10 15:06:07 -05:00
h00die 39a2d9d2a8 save xml files as xml 2018-09-09 21:24:39 -04:00
Oliver Morton 56cb853014 Make Output and Log Files Optional
Change the 'required' attribute of the output and logfile options to
False.
Open output file for appending immediately before use and only if output
file name is configured.
2018-09-07 16:26:33 -04:00
Shaksham Jaiswal 552ff027cd
fixes 2018-09-07 15:18:11 +05:30
Shaksham Jaiswal bc1173a857
code fixes 2018-09-07 15:11:49 +05:30
Oliver Morton ac144e027a Add office365userenum.py as external module
External python module compatible with v2 and v3.

Enumerate valid usernames (email addresses) from Office 365 using
ActiveSync.
Differences in the HTTP Response code and HTTP Headers can be used to
differentiate between:

 - Valid Username (Response code 401)

 - Valid Username and Password without 2FA (Response Code 200)

 - Valid Username and Password with 2FA (Response Code 403)

 - Invalid Username (Response code 404 with Header X-CasErrorCode: UserNotFound)

Note this behaviour appears to be limited to Office365, MS Exchange
does not appear to be affected.

Microsoft Security Response Center stated on 2017-06-28 that this issue
does not "meet the bar for security servicing". As such it is not
expected to be fixed any time soon.

This script is maintaing the ability to run independently of MSF.
2018-09-06 16:42:31 -04:00
William Vu 35fb0d19ab Refactor SSH mixins and update modules 2018-09-05 23:53:11 -05:00
asoto-r7 14aee3a822
Added auxiliary/fileformat/multidrop support for Word XML documents 2018-09-05 11:51:48 -05:00
BrianWGray 3546b9388c correct CVE Reference 2018-09-05 10:29:49 -04:00
BrianWGray b8687d501c msftidy corrections 2018-08-31 18:55:20 -04:00
Erin Bleiweiss 69a785ff46
Update json for python modules 2018-08-31 16:56:22 -05:00
Erin Bleiweiss eb17d9b198
Refactor AKA references for modules 2018-08-31 16:56:05 -05:00
Wei Chen 0dea5fcfd9
Land #10565, Add Dolibarr ERP/CRM Auxiliary Module 2018-08-31 13:47:46 -05:00
Shelby Pace aa9d0d7c6c
using uri_encode 2018-08-31 08:41:25 -05:00
Shelby Pace b1151b9d12
modified login_uri 2018-08-31 08:08:46 -05:00
Shelby Pace 42af28a86a
printing and storing credentials 2018-08-30 14:17:37 -05:00
Shelby Pace 85c4abac99
storing credentials 2018-08-30 13:59:00 -05:00
egre55 2304c377db
Add IIS ShortName Scanner module 2018-08-30 08:46:22 +00:00
Shelby Pace 7915c4ac6c
getting user credentials in response 2018-08-29 13:59:06 -05:00
Shelby Pace bb4a4b8839
initial module setup 2018-08-29 10:28:10 -05:00
Christian Mehlmauer 14fa41a376
merge changes 2018-08-29 06:09:40 +02:00
Ben Schmeckpeper ed60b767a7
Correct claymore_dos.py's CVE reference
The CVE reference shouldn't include the `CVE-` prefix
2018-08-28 13:34:02 -05:00
AverageSecurityGuy d21c108adf Fix syntax error. 2018-08-28 12:00:31 -04:00
AverageSecurityGuy 44df7939e9 Added docs. Made suggested code changes. 2018-08-28 10:56:05 -04:00
Christian Mehlmauer 7431ae401b
fix more errors 2018-08-28 13:49:31 +02:00
Christian Mehlmauer a66556b436
fix msftidy errors 2018-08-28 13:12:43 +02:00
AverageSecurityGuy 0ba1d11218 Add FrontPage Credential Dump 2018-08-27 15:02:39 -04:00
AverageSecurityGuy 4e45100251 Add FrontPage Credential Dump 2018-08-27 14:20:26 -04:00
William Vu 6df235062b
Land #10505, post-auth and default creds info 2018-08-24 18:08:15 -05:00
Brent Cook 51c024982c
Land #8914, refactor auxiliary/admin/http credential storage 2018-08-24 13:18:32 -05:00
Brent Cook 0141fc109d don't backtrace if there is not a response 2018-08-24 13:17:06 -05:00
William Vu 578d2375d7 Add full disclosure for CVE-2018-15473 2018-08-22 14:49:13 -05:00
Wei Chen 2780ae6ba9 Update false negatives 2018-08-21 08:50:26 -05:00
William Vu 06582a00a0 Add module doc for ssh_enumusers
And update description in module.
2018-08-20 19:26:51 -05:00
William Vu 819b8504e2 Add a little better randomization 2018-08-20 17:10:14 -05:00
William Vu b38a442bb0 Refactor once more with feeling
Also flesh out malformed-packet auth method. Let's not be lazy here. :-)
2018-08-20 16:25:32 -05:00
William Vu 75403d7e05 Add testing note about logging 2018-08-17 20:20:12 -05:00
William Vu 7287779555 Make false positive check optional
I couldn't repro this with pubkey-only auth. It also goes to the log.
2018-08-17 20:05:04 -05:00
William Vu 8e3af2dcfc Add CVE-2018-15473 to ssh_enumusers 2018-08-17 18:48:44 -05:00
William Vu 5096eee2ec
Land #10120, npm "marked" ReDoS module 2018-08-16 15:01:12 -05:00
William Vu 3c1befdacb Clean up module 2018-08-16 15:00:56 -05:00
William Vu 60c0272270 Make style consistent 2018-08-15 21:27:40 -05:00
Kevin Kirsche 45e0b53fc8 Fix spacing issue with rocket 2018-08-15 14:59:52 -07:00
Kevin Kirsche 09434bd57c Fix tabbing caused by incorrect VM nvim configuration 2018-08-15 07:00:45 -07:00
Kevin Kirsche 905f26372d Remove host key checks on ssh scanner modules 2018-08-15 06:48:35 -07:00
Jacob Robles 85a137e0a0
Land #10420, cgit < 1.2.1 Directory Traversal 2018-08-13 16:25:23 -05:00
Jacob Robles 5a3d040d71
Fix module, Add documentation 2018-08-13 15:48:21 -05:00
Shelby Pace ce8cbd64d4
Land #10404, Add Path Traversal Oracle GlassFish 2018-08-13 11:15:26 -05:00
Wei Chen 6223685c37 Update auth requirement for json metadata 2018-08-07 16:42:00 -05:00
Dhiraj Mishra 14b12f38d0
Fixing 2018-08-05 23:26:18 +05:30
Dhiraj Mishra 9502c26dc1
Updated 2018-08-05 19:14:12 +05:30
Dhiraj Mishra 8a175f50cd
Indentation 2018-08-05 00:15:04 +05:30
Dhiraj Mishra ebcc9a3c20
Fixing Indentation 2018-08-04 19:16:12 +05:30
Dhiraj Mishra 502c103d37
cgit < 1.2.1 Directory Traversal 2018-08-04 18:52:24 +05:30
Brent Cook 78f66986e9
Land #10386, Add IEC104 client module 2018-08-04 07:43:15 -05:00
Brent Cook 919da41aab
Land #9692, Add DoS module for Siemens Siprotec 4 2018-08-04 07:20:57 -05:00
Dhiraj Mishra 458fca6ff0
Fixing
Thanks bcoles
2018-08-04 13:15:25 +05:30
Brendan Coles 1c82592882
Land #10358, Add Dicoogle PACS Directory Traversal scanner module 2018-08-04 05:31:16 +00:00
h00die e5dcfa62c9 remove encoding and escaping 2018-08-03 20:23:33 -04:00
Michael John dc2f893b31 Amended code formating
This commit incorporates suggested formatting changes based on feedback and rubocop tool run:
Corrected indentation issues
Using "<<" instead of "+=" for string append
Modified if/else branches as per tool suggestion
2018-08-03 20:13:48 +02:00
Wei Chen 0785d59146
Land #10412, Add Cisco directory traversal auxiliary module 2018-08-02 16:44:59 -05:00
Shelby Pace 10d4061672
changed default port 2018-08-01 13:30:19 -05:00
Shelby Pace de83926e6c
separated list_users into two functions 2018-08-01 12:59:53 -05:00
Shelby Pace 0264eb2ea3
cleaned up module 2018-08-01 09:51:45 -05:00
Shelby Pace 021264fd5a
listing files and grabbing logged in user names 2018-07-31 16:03:17 -05:00
William Vu 090624fe17 Correctly set proto and sname in joomla_pages 2018-07-31 11:51:34 -05:00
William Vu 41ce96b19d Clean up module 2018-07-31 11:01:02 -05:00
Dhiraj Mishra 323c814abf
Fixing some tweaks 2018-07-31 19:52:39 +05:30
Dhiraj Mishra 55dce52bea
Fixing some tabbed indent 2018-07-31 18:24:28 +05:30
Dhiraj Mishra 3a7d18a98d
Fixing, Warning of EOL 2018-07-31 18:11:09 +05:30
Dhiraj Mishra d9e94f94dc
Oracle GlassFish 2018-07-31 17:59:03 +05:30
Sergey Gorbaty a0b7a4986e Making sure we connect to RMI 2018-07-30 23:25:32 -07:00
Alexander Halbarth 80d5d1d4ee
use variable port instead of datastore 2018-07-31 07:38:09 +02:00
Alexander Halbarth b0fa17ccfb
Better output added to joomla_pages 2018-07-31 07:29:56 +02:00
Shelby Pace ca8a01d27c
getting filenames in http responses 2018-07-30 16:25:45 -05:00
Sergey Gorbaty c3534a479e JMX scanner 2018-07-30 13:25:15 -07:00
Shelby Pace 7cf2c840a3
metadata set up 2018-07-30 14:25:58 -05:00
Shelby Pace d58785f959
Land #10247, add WordPress Arbitrary File Deletion 2018-07-30 09:05:23 -05:00
h00die c440eeaa31 rogue end 2018-07-29 10:35:33 -04:00
h00die 53cca07442 bcoles suggestions 2018-07-29 10:31:01 -04:00
michaelj0hn 7b5e8463ba
msftidy-final 2018-07-27 14:52:10 +02:00
michaelj0hn 4e42834be3
msftidy 538 2018-07-27 14:48:04 +02:00
michaelj0hn 44c1fa9197
msftidy558 2018-07-27 14:29:32 +02:00
michaelj0hn da1363721f
msftidy 90-91-2 2018-07-27 14:07:10 +02:00
michaelj0hn 07896b0a3c
msftidy 90-91 2018-07-27 13:58:15 +02:00
michaelj0hn 5435c7a5eb
msftidy fix 2018-07-27 13:43:37 +02:00
michaelj0hn 09320ece91 iec104 client 2018-07-27 11:46:26 +02:00
Brent Cook c1418955f5
Land #10319, enable VHOST for ms15_034_http_sys_memory_dump 2018-07-25 18:51:57 -05:00
Jacob Robles 5a7c25b498
Fix description 2018-07-25 15:13:41 -05:00
Jacob Robles 1105474fb9
Modify options for smb_login
Change default value for DETECT_ANY_AUTH
and add option for DETECT_ANY_DOMAIN
2018-07-25 14:53:06 -05:00
William Vu 9fde9127ad
Land #10370, minor CouchDB fix 2018-07-25 01:11:23 -05:00
William Vu d3b7dffcdc Prefer res.body over res 2018-07-25 01:05:18 -05:00
William Vu bc89d7fe52
Land #10357, CouchDB improvements and docs 2018-07-25 00:54:55 -05:00
Wei Chen 625ea87ea9
Land #10368, PhpMyAdmin Login Scanner Module 2018-07-24 23:25:27 -05:00
Wei Chen 5df5ab30f6 Use store_valid_credential to save good credentials 2018-07-24 23:21:59 -05:00
Shelby Pace efa3a77adc
modified name 2018-07-24 15:00:14 -05:00
Shelby Pace 4f81fcdc87
retn versions in chk_setup, tests to reflect, doc 2018-07-24 14:51:00 -05:00
Shelby Pace 976a3464e1
added phpmyadmin login scanner and aux module 2018-07-24 09:47:01 -05:00
timoles aaf664db42
Update jboss_vulnscan.rb
Fixed a paste error, or sneaked in character in the app url.
2018-07-24 04:24:49 -07:00
Matthew Kienow dac5780feb
Land #10176, creds data service CRUD operations 2018-07-23 23:36:32 -04:00
Timo 01acaa3ad9 Changed the app scan layout to reduce the complexity of the app_check branch. (as of suggestion by bcoles) 2018-07-23 00:41:49 -07:00
h00die 83ae5cb14d fix backup_file.rb and add a few docs 2018-07-22 20:50:22 -04:00
h00die 2a969d70db dicoogle 2018-07-21 21:31:45 -04:00
h00die abfed97e03 remove EOL spaces 2018-07-21 11:21:11 -04:00
h00die 8b324c19d8 update couchdb scanner 2018-07-21 11:02:50 -04:00
Timo c9e47d6d2b Added check and response for CVE-2017-12149 in jboss_vulnscan.rb 2018-07-20 03:52:29 -07:00
James Barnett 65d42380d3
Merge branch 'master' into remote_creds_data 2018-07-19 16:25:06 -05:00
Sunny Neo 8e1f68f384
Update ms15_034_http_sys_memory_dump.rb with VHOST
Added VHOST to cater to targets that require virtual hostname to be defined
2018-07-16 15:13:23 +08:00
Brendan Coles 7524af35ec Check if IPRANGE was supplied - Fix #10316 2018-07-15 15:38:56 +00:00
asoto-r7 1a3a4ef5e4
Revised 88 aux and exploit modules to add CVEs / references 2018-07-12 17:34:52 -05:00
William Vu cce3b6f369 Clean up module 2018-07-12 02:57:14 -05:00
Agora Security 7d8b9a90d7 Add more reporting 2018-07-11 17:22:48 -04:00
Agora Security 30c43e22d9 Fix typo 2018-07-11 17:04:31 -04:00
Agora Security bb8ac4a7ab Add info & update_info 2018-07-11 16:52:16 -04:00
James Barnett c26fcc0af1 Merge branch 'master' into remote_creds_data 2018-07-11 10:27:49 -05:00
Agora Security 1f0045fa03 Improve Description 2018-07-11 01:27:10 -04:00
Agora Security 00f4d3967c Add basic reporting 2018-07-11 00:47:43 -04:00
Agora Security d488b51264 Use peer instead of ip & port 2018-07-11 00:41:55 -04:00
Agora Security 5a89642ddd Simplify the module greatly 2018-07-11 00:15:56 -04:00
Agora Security ffc2f044cc Remove lines that were not required 2018-07-11 00:04:44 -04:00
Agora Security 7b1e7eb085 Minor improvement to description 2018-07-11 00:04:12 -04:00
Agora Security 2b2029b487 Align Hashrockets 2018-07-11 00:03:26 -04:00
Agora Security 9491c63778 Fix several minor details 2018-07-10 23:56:05 -04:00
Agora Security 66c207a124 Remove timeout of 25 seconds 2018-07-10 23:53:13 -04:00
Agora Security 718606c9f2 Add Auxiliary module to enumerate the Docker Server Version 2018-07-10 19:34:49 -04:00
Jacob Robles 4403a4ab47
Fix CVE number 2018-07-09 12:56:00 -05:00
James Barnett bbc16e1873 Merge branch 'master' into remote_creds_data 2018-07-09 09:49:14 -05:00
Wei Chen aff39e65d5 Update missing CVE references for auxiliary modules
Based on existing references such as BID, OSVDB, blog posts, etc
2018-07-08 19:00:11 -05:00
Jacob Robles 1c448de882
Land #10107, Add the scanner/smb/impacket/secretsdump module 2018-07-06 14:59:33 -05:00
Aloïs Thévenot e1a9aae109 Add Wordress Arbitrary File Deletion module 2018-07-03 12:21:38 +02:00
Adam Cammack ce7d4cd280
Land #10109, Teradata login scanner and SQL runner 2018-06-27 15:35:57 -05:00
Adam Cammack 9d8294fcc9
Mark Teradata login scanner executable 2018-06-27 15:35:13 -05:00
Adam Cammack 8b2bd35659
Fixup option references in Teradata SQL 2018-06-27 15:34:29 -05:00
Adam Cammack 1dbcf0fd09
Cleanup Teradata SQL options 2018-06-27 15:12:21 -05:00
Adam Cammack 3985191e0f
Add `userpass` option to Teradata login scanner 2018-06-27 15:10:02 -05:00
Adam Cammack ef309e0d5f
Fixup metadata whitespace 2018-06-27 15:09:23 -05:00
Wei Chen 76535b5e51 Check hidden val && check auth requirement 2018-06-25 17:24:13 -05:00
Shelby Pace 10c36bbd7d
modified get_creds, renamed make_request 2018-06-25 12:45:06 -05:00
Shelby Pace 81bdbd712c
added disclosureDate and modified style 2018-06-22 15:58:21 -05:00
Shelby Pace 510c2d04ef
add auxiliary module and documentation - SickRage 2018-06-22 11:18:02 -05:00
Brent Cook eaf043d30b
Land #10156, WebKit, as used in WebKitGTK+ Crash - CVE-2018-11646 2018-06-21 16:28:37 -05:00
Wei Chen 72432c200a
Land #10183, Add auxiliary mod to exploit httpdasm dir traversal vuln 2018-06-19 14:56:36 -05:00
Wei Chen b315886f9b Update option description 2018-06-19 14:55:53 -05:00
Wei Chen 9be8aa6877 Be more verbose on error handling 2018-06-19 14:54:27 -05:00
Shelby Pace a0189cc3f6
made suggested changes to module 2018-06-19 12:22:44 -05:00
Shelby Pace b78bb78f95
added auxiliary module and documentation 2018-06-18 10:25:33 -05:00
James Barnett 2ded48a510 Merge branch 'master' into remote_creds_data 2018-06-15 10:26:10 -05:00
James Barnett 9f2f61c481
Implement create_credential_and_login in the dataproxy 2018-06-14 13:28:03 -05:00
Nicholas Starke 936632f180 Minor Tweaks to Module
This commit changes some logic around
on a few different conditional portions
of code.
2018-06-14 10:06:42 -05:00
Dhiraj Mishra c0a5a65e0c
Updated
Suggestion's by acammack-r7
2018-06-14 11:25:00 +05:30
Adam Cammack 9681c59f1d
Land #10138, Update psnuffle RHOSTS and style 2018-06-13 14:45:05 -05:00
James Barnett 71651a33f6
Update jtr modules to use remote data store 2018-06-13 12:09:58 -05:00
bwatters-r7 1cd76eb833
Land #10148, Add New Module - Badpdf
Merge branch 'land-10148' into upstream-master
2018-06-12 17:19:32 -05:00
rmdavy 477d709ff6
Code Improvements
Ran module through rubocop
2018-06-12 22:55:38 +01:00
Dhiraj Mishra b44265fcb2
Minor tweaks
Suggestion's made by bcoles
2018-06-11 13:25:02 +05:30
rmdavy 6b58163fde
Code Improvement
Added further code improvement suggested by bcoles
2018-06-11 08:06:02 +01:00
rmdavy f10b2b12d4
Implemented changes suggested by bcoles 2018-06-10 22:18:17 +01:00
rmdavy 22538bfd63
Fixed Minor Code Error & Removed Spaces 2018-06-10 21:53:40 +01:00
rmdavy f4334828d0
Minor Improvement
URL File Creation also supports IconFile - this has now been added
2018-06-09 17:46:27 +01:00
rmdavy 5e630b34e1
Minor Update
Removed some Spaces at EOL
2018-06-09 17:03:32 +01:00
rmdavy 5ca538541a
Code Improvements
Code improvements as suggested by bcoles.
2018-06-09 16:44:37 +01:00
rmdavy f9c74419bb
Minor Code Update
Improved injection and Minor Code Improvement
2018-06-09 12:24:33 +01:00
Dhiraj Mishra 51823b1d3d
Spaces at EOL 2018-06-09 15:58:11 +05:30
Dhiraj Mishra d3a18b2ce9
Some tweak
Thanks bcloes 😎
2018-06-09 12:15:21 +05:30
Dhiraj Mishra 76588aed09
Error at disclosure date format 2018-06-09 12:03:41 +05:30
Dhiraj Mishra f1d29e730f
Spaces at EOL 2018-06-09 11:53:21 +05:30
Dhiraj Mishra 6e8412fa73
CVE-2018-11646 - Webkit+ 2018-06-09 11:43:47 +05:30
rmdavy 7e0c8d279f
Minor Code Update 2018-06-07 21:16:41 +01:00
rmdavy ab80eadc3f
Minor Code Improvement 2018-06-07 21:06:47 +01:00
rmdavy 98507b2e51
Update badpdf.rb 2018-06-07 19:08:51 +01:00
rmdavy aba05275ae
BadPDF Generator
Generated PDF files which contain a UNC link back to listener, can be used to capture NetNTLM hashes.
2018-06-07 16:40:57 +01:00
rmdavy 16fcaa3d00
Delete badpdf.rb 2018-06-07 16:38:57 +01:00
rmdavy c790537bb2
BadPDF Generator 2018-06-07 16:38:22 +01:00
Aaron Soto f53d2a14df
Land #10067, Added `auxiliary/fileformat/odt_badodt` 2018-06-06 11:27:23 -05:00
Aaron Soto 20e773498f
Moved to `auxiliary/fileformat/odt_badodt` and updated docs 2018-06-06 11:27:07 -05:00
Aaron Soto 61074d1220
Land #10115, Added module `auxiliary/fileformat/multidrop` 2018-06-05 16:30:30 -05:00
Aaron Soto c94263c915
Create 'fileformat' and move 'auxiliary/multidrop' to 'auxiliary/fileformat/multidrop' 2018-06-05 16:27:57 -05:00
Jacob Robles 3b2889cd77
Land #10106, Add the scanner/smb/impacket/wmiexec module 2018-06-05 08:33:34 -05:00
rmdavy 59873ba81a
Updated Authors 2018-06-04 23:03:00 +01:00
rmdavy 4fcbb5d03d
Minor Code Updates
Minor Code Updates as per recommendations by Aaron Soto
2018-06-04 19:20:37 +01:00
Brendan Coles e1d69d6307 Cleanup pSnuffle 2018-06-04 15:27:20 +00:00
rmdavy 061bb84a5a
Updated Code
Updated code with suggestions provided by bcoles
2018-06-01 11:13:40 +01:00
Aaron Soto 2bf5e26bfe
Removed `Deprecated` include from `udp_probe` 2018-05-31 14:32:31 -05:00
Aaron Soto 918705d510
Removed deprecated modules: `epmp1000_cmd_exec` and `cambium_snmp_loot` 2018-05-31 14:31:58 -05:00
Nicholas Starke 53d9dc75d8 Adding npm component "marked" ReDoS module
This commit adds a module for the npm component
"marked" which exploits a Regular Expression
Denial of Service (ReDoS) vulnerability in the
"heading" regular expression.  Also included
is the documentation markdown for this module.
2018-05-31 13:33:09 -05:00
Aaron Soto 829e1c306a
Land #10102, SOCKS5 updates for BIND, parsing specs, refactoring 2018-05-30 16:15:53 -05:00
rmdavy 51a9fc4c55
Multidrop
Multidrop is a single module which can be used to create *.scf, *.url, *.lnk and desktop.ini files which contain a SMB/UNC link to a listener ready to capture NetNTLM hashes
2018-05-30 17:36:11 +01:00
Aaron Soto c8b2fc8a35
Land #9701, Flexense HTTP Server DoS exploit 2018-05-29 16:19:59 -05:00
Aaron Soto 026b22d061
Refined packet sizes and counts, improved error messages 2018-05-29 16:09:27 -05:00
actuated b0d8e93e79 Added Teradata ODBC Login and SQL modules and documentation 2018-05-29 10:12:43 -05:00
Spencer McIntyre 7ac8af03d2 Remove the LD_PRELOAD hook for proxychains 2018-05-27 17:12:06 -04:00
Spencer McIntyre 28d15a113f Add the secretsdump impacket module and docs 2018-05-27 17:09:59 -04:00
Spencer McIntyre 9fab2316c5 Add the wmiexec impacket module and documentation 2018-05-27 16:24:56 -04:00
Spencer McIntyre c85cc9ad9e Refactor SOCKS5 TcpRelay and add packet tests 2018-05-26 13:46:00 -04:00
Spencer McIntyre 49341fc87d Add credential authentication support to socks5 2018-05-25 20:14:03 -04:00
Spencer McIntyre 9b5ae34896 Drop udp associate support and cleanup logging 2018-05-25 20:14:03 -04:00
Spencer McIntyre 6859856101 Refactor the socks5 code into multiple files 2018-05-25 20:14:03 -04:00
Spencer McIntyre 04bec0bdf0 Progress on the socks5 proxy module 2018-05-25 20:14:02 -04:00
Ege Balcı 3ab7526786
Name & description Change
Exploit::CheckCode changed to Unknown as suggested.
2018-05-25 20:22:51 +03:00
rmdavy affa0bdc6f
Minor Update
Removed Unused Comment
2018-05-24 13:45:08 +01:00
rmdavy 7143f04ea7
Add files via upload
Updated to use recommended method of creating zip files
2018-05-24 09:53:53 +01:00
rmdavy 04a27e0221
Delete thumbnail.png
Moved folder location
2018-05-24 09:37:45 +01:00
rmdavy 81c4e9f7b9
Delete styles.xml
Moved folder location
2018-05-24 09:37:31 +01:00
rmdavy 73bfe1c9ab
Delete settings.xml
Moved folder location
2018-05-24 09:37:18 +01:00
rmdavy 247904746c
Delete meta.xml
Moved folder location
2018-05-24 09:37:04 +01:00
rmdavy f9bda873d2
Delete manifest.xml
Moved folder location
2018-05-24 09:36:55 +01:00
rmdavy 5002eae655
Delete manifest.rdf
Moved folder location
2018-05-24 09:36:45 +01:00
rmdavy 02afeb3e29
Delete content.xml
Moved folder location
2018-05-24 09:36:35 +01:00
Brent Cook 86a5b951aa
Land #9990, add SOCKS5 proxy support 2018-05-23 17:31:09 -05:00
Jan Rude 567e2dbc7e
Update telpho10_credential_dump.rb
Current version still vulnerable, developer ignores mails. It seems like this is going to be a 'won´t fix'
2018-05-23 09:32:41 +02:00
Aaron Soto 72efe66403
Refactored for better logging, IPv6 support, and prep for auth 2018-05-22 18:57:00 -05:00
James Barnett 0472b9df3f
Land #10024, Fix find_or_create_* methods for remote data service
This PR updates the find_or_create_* methods associated with each model to
no longer just proxy to the report_* model. It now performs a lookup through
the DataProxy and returns the found object if it exists, or creates a new
record if needed.
2018-05-22 17:08:46 -05:00
Matthew Kienow 4ecc1ff551
Modify loots, notes and services search methods
Modify loots and services method signatures. Remove workspace as a
positional argument, move into opts hash argument and update callers.
Made host search for these models more uniform. Update find_or_create
methods to handle difference in opts between find and report
operations.
2018-05-21 17:37:51 -04:00
rmdavy ef229111c8
Delete readme.txt 2018-05-19 16:58:45 +01:00
rmdavy 5d3c95e51b
Create badodt 2018-05-19 16:58:14 +01:00
rmdavy a0d8f70dee
Create readme.txt 2018-05-19 16:57:40 +01:00
rmdavy 077a7c7c9e
Delete test.txt 2018-05-19 16:57:07 +01:00
rmdavy 018a8a3060
Create test.txt 2018-05-19 16:56:49 +01:00
rmdavy 622bc272fb
Delete odt 2018-05-19 16:56:30 +01:00
rmdavy b293ddfe5d
Create odt 2018-05-19 16:56:10 +01:00
Brent Cook 7af7587519
Land #9999, Optionally test empty group in cisco_ssl_vpn 2018-05-18 10:57:15 -05:00
Aaron Soto c35c8e9c75
Update module name, per a good catch by @bcook 2018-05-16 13:55:45 -05:00
Jacob Robles 999b895735
Land #9816, Add the scanner/smb/impacket/dcomexec module 2018-05-16 07:15:32 -05:00
Jacob Robles cc0fdee788
EmptyGroup advanced option, just in case... 2018-05-10 09:57:50 -05:00
Jacob Robles 79a0610436
remove empty group 2018-05-09 11:11:03 -05:00
Brent Cook a4ecd43a8f remove unused constants 2018-05-07 00:24:38 -05:00
Jacob Robles 534d05ff44 simpleclient versions option 2018-05-07 00:24:38 -05:00
Jacob Robles ff202a5f5b Simpleclient/SMB2 support 2018-05-07 00:24:38 -05:00
Aaron Soto 2cd0d3d90a
Rudamentary SOCKS5 functionality, CONNECT, IPv4, non-DNS only 2018-05-04 14:44:03 -05:00
Auxilus d29bc920c1 print o/p to new line 2018-04-27 20:58:25 +05:30
Auxilus 912970ad3b change vprint to print for printing o/p in psexec_command 2018-04-27 20:47:21 +05:30
Auxilus 0374de5e0d change vprint to print for printing o/p 2018-04-27 10:49:04 +05:30
Auxilus 25cf8d175a report command execution o/p 2018-04-27 08:43:30 +05:30
Auxilus 382a7f8aa3 Merge https://github.com/rapid7/metasploit-framework into psexec_cleanup 2018-04-25 09:09:48 +05:30
Auxilus cbfdaf23a0 updated for requested changes 2018-04-25 08:56:54 +05:30
Auxilus 3353102dc1 fix opt dependencies 2018-04-24 21:55:09 +05:30
nixawk 273e25265b Add a QUERY OPTION 2018-04-23 20:51:04 -05:00
Wei Chen f9a804e7d8
Bring the PR up to date 2018-04-23 08:52:05 -05:00