Commit Graph

50102 Commits (16b8cf705994aaa04a9fc7925585cd5a695583f3)

Author SHA1 Message Date
Jacob Robles 16b8cf7059
Land #11148, Adding Module MailCleaner RCE 2019-01-08 14:10:31 -06:00
Jacob Robles a0acfa79d7
Target payloads 2019-01-08 13:27:26 -06:00
Jacob Robles 5f8d8c3637
Update doc 2019-01-08 13:25:13 -06:00
Matthew Kienow d117e6a1d1
Land #11142, use POST for API token generation 2019-01-08 11:59:30 -05:00
James Barnett 466b0004e1
Land #11163, add API endpoint for retrieving Mdm::Events 2019-01-08 09:26:53 -06:00
Jacob Robles c2da3dbbd3
Land #11052, Add gather chrome cookies post module 2019-01-08 07:32:16 -06:00
Jacob Robles 8ca8206303
Update docs 2019-01-08 07:15:50 -06:00
Jacob Robles a95384e288
Additional support and code cleanup 2019-01-08 06:57:56 -06:00
James Barnett 69ee3a4a26
Land #11187, Conform LoginServlet to API standards 2019-01-07 17:03:39 -06:00
James Barnett f23142c19c
Land #11183, add authentication to LoginServlet endpoints 2019-01-07 17:02:31 -06:00
James Barnett 02fda8625a
Address code review comments.
- Fix CSS on submit button
- Dont generate a new token when logging in to web form
- Also added text to account page to send the user to the login page when not logged in
2019-01-07 13:52:01 -06:00
William Vu f96514528b
Land #10648, auth bypass for couchdb_enum 2019-01-07 12:53:11 -06:00
William Vu 3a726554e9 Fix review comments 2019-01-07 12:51:52 -06:00
Matthew Kienow b5c4ac6af3
Land #11113, fixes for vuln and credential APIs 2019-01-04 17:05:12 -05:00
Metasploit 9ac96b213f
Weekly dependency update 2019-01-04 14:00:12 -08:00
James Barnett 101fbb7aa5
Address code review comments 2019-01-04 15:23:24 -06:00
James Barnett 83267d08e0
Update jquery version and use SRI 2019-01-04 15:23:24 -06:00
James Barnett 4bbf84b949
Update login test page to use POST for generate-token 2019-01-04 15:22:32 -06:00
James Barnett 4ea2c5bc49
Update msfdb to use POST generate-token 2019-01-04 15:22:32 -06:00
James Barnett 60681e4385
Use POST for token generation 2019-01-04 15:22:32 -06:00
James Barnett 1b29e17827
Dont array wrap refs 2019-01-04 15:10:21 -06:00
James Barnett b875d391fc
WIP: updating ref lookup based on code review comments 2019-01-04 15:10:20 -06:00
James Barnett 5f43ec0a79
Address code review comment 2019-01-04 15:10:20 -06:00
James Barnett 81f877ad09
Remove doc references to Mdm::Module::Ref
It doesnt look like this ever gets set anywhere. Mdm::Vuln.refs
seems to have replaced it
2019-01-04 15:10:20 -06:00
James Barnett 0281ddf78c
Remove vuln_refs from Vuln JSON schema
This object is just a pointer between Vulns and refs. We don't need to surface it
2019-01-04 15:10:20 -06:00
James Barnett 10cceb0e9b
Fix a couple of bugs introduced by symbolizing to_ar 2019-01-04 15:10:20 -06:00
James Barnett e9931fa70e
Fix bug when updating Mdm::Vuln.refs 2019-01-04 15:10:19 -06:00
James Barnett bcfe434d1e
Update to_ar to use symbolized keys 2019-01-04 15:10:19 -06:00
Brent Cook 260bfdc071
Land #11195, update travis to use latest rubygems 2019-01-04 06:00:39 -06:00
Jeffrey Martin 7faca5e4c5
update travis to use latest rubygems
By using the latest rubygems available bundler version
limits should become more compatible.
2019-01-03 13:50:48 -06:00
Adam Cammack 0d6ef39fac
Land #11194, Pin Travis CI bundler to 1.17.3 2019-01-03 13:42:07 -06:00
Jeffrey Martin 3c123d93f9
set bundler version for travis for now 2019-01-03 13:23:16 -06:00
Brent Cook e990bb31df
Land #11182, bump mettle, change debug and background options 2019-01-03 02:57:19 -06:00
William Vu cfec99b1a8
Land #11154, tab completion for aux rerun/exploit 2019-01-02 18:44:04 -06:00
Matthew Kienow 05d810ac23
Add support for GET with ID in the path 2018-12-31 15:46:00 -05:00
Matthew Kienow 0e56c30ab2
Use data object wrapper for JSON response 2018-12-31 15:43:16 -05:00
Alex 811605a9b8 Cleanup headless Chrome process for meterpreter sessions 2018-12-30 18:05:41 +11:00
Metasploit e1c6799076
automatic module_metadata_base.json update 2018-12-29 02:22:55 -08:00
Brendan Coles 5957315167
Land #11141, Ensure Byte XORi Encoder uses cacheflush() 2018-12-29 10:20:07 +00:00
Brendan Coles 005b2664b8
Land #11140, Ensure MIPS Long XOR Encoder uses cacheflush() 2018-12-29 10:14:47 +00:00
bwatters 9e109c7e7c
Update cache size 2018-12-28 16:08:15 -06:00
bwatters c6e83d109d
Update Gemfile.lock with mettle 0.5.1 2018-12-28 15:45:33 -06:00
bwatters f81c11bbe5
Update gemspec to mettle 0.5.1 2018-12-28 15:44:42 -06:00
Matthew Kienow 66d0ffd602
Correct documentation error 2018-12-28 16:30:23 -05:00
Matthew Kienow 12f4222b2e
Fix to ensure authentication 2018-12-28 16:29:33 -05:00
Metasploit 2418dcf6aa
automatic module_metadata_base.json update 2018-12-28 07:22:50 -08:00
Shelby Pace 29e7c49332
Land #10444, add Consul rexec RCE module 2018-12-28 09:14:28 -06:00
Shelby Pace b1ad271cb8
fixed link 2018-12-28 09:12:31 -06:00
Metasploit 8cfc16ce4e
automatic module_metadata_base.json update 2018-12-28 06:50:05 -08:00
Shelby Pace fb8f06b2f5
Land #10443, add Consul service RCE module 2018-12-28 08:33:56 -06:00