Brent Cook
d310659a77
Land #10216 , add linux mic capture support for mettle
2018-06-28 10:58:50 -05:00
Jeffrey Martin
9aeebf35fe
remove lock on ruby_smb
2018-06-28 10:44:20 -05:00
bwatters-r7
bf3e9d8771
Land #10206 , Bump metasploit payloads for payload PR 287
...
Merge branch 'bump-payloads-287' into upstream-master
2018-06-26 12:00:15 -05:00
Brent Cook
2b655e4674
Land #10194 , update rex-powershell with rapid7/rex-powershell#12 , updating GetMethod for GetProcAddress for Windows 10 1803
2018-06-22 15:44:06 -05:00
Tim W
08a6fd3b3b
Land #10066 , implement AudioOutput api from channel
2018-06-11 14:41:44 -05:00
Brent Cook
1eabf5dd3d
Land #10072 , update kiwi plugin, add dcsync, dcshadow, and powershell streaming support
2018-05-21 17:05:10 -05:00
Brent Cook
a14892774f
Land #9942 , IPv6 channel fixes for Python and Linux/macOS Meterpreters
2018-05-01 16:45:16 -05:00
sinn3r
63e096836f
Land #9887 , remove rex-text version lock
...
remove rex-text version lock
2018-04-18 15:31:20 -07:00
Jeffrey Martin
6b9be37741
Land #9875 , Lock rex-text due to compatibility issues
2018-04-13 10:02:20 -07:00
Brent Cook
c5db4c5021
Land #9834 , add Python UDP channel support
2018-04-10 08:41:41 -05:00
Brent Cook
106fbf8a17
Land #9586 , fix #9112 , improve android screenshot error message on failure
2018-03-27 14:21:02 -05:00
Brent Cook
a94e6559e6
pin 4.x to the 2.x versions of metasploit-credential/metasploit_data_models
2018-03-27 11:34:48 -05:00
Tim W
8f4895c8e7
Land #9706 , bump metasploit payloads to fix #9497
2018-03-13 13:33:29 -07:00
Jeffrey Martin
4778de053a
Land #9687 , bump payloads, fix PHP meterpreter message parsing
2018-03-07 18:47:47 -08:00
Brent Cook
fd029eda62
lock ruby_smb to 0.0.18 to match master
2018-02-22 11:13:12 -06:00
Brent Cook
59a41f04f7
Land #9366 , Add x64 staged Meterpreter for macOS
2018-02-20 09:24:41 -06:00
Brent Cook
31ed50ac92
Land #9539 , add bind_named_pipe transport to Windows meterpreter
2018-02-16 15:34:47 -08:00
Jeffrey Martin
1126acb201
Land #9543 , bump gems, remove rbnacl/ffi since unneeded
2018-02-12 11:57:18 -06:00
Brent Cook
909b787a56
Land #9521 , flush pipe buffers when a process exists in mettle
2018-02-08 10:25:25 -06:00
William Vu
bff02efad4
Land #9466 , metasploit-payloads bump to 1.3.28
2018-01-26 18:09:20 -06:00
bwatters-r7
06b702e86b
Land #9449 , bump metasploit-payloads from 1.3.25 to 1.3.27
...
rapid7/metasploit-payloads#264
rapid7/metasploit-payloads#263
Merge branch 'land-9449' into upstream-master
2018-01-24 17:13:08 -06:00
Brent Cook
55c345418d
Land #9438 , address cmd_exec inconsistencies
2018-01-24 17:11:40 -06:00
Brent Cook
f125e13278
python meterpreter whitespace normalization
2018-01-09 16:08:52 -05:00
RageLtMan
18f3815147
Update TLS certificate generation routines
...
Msf relies on Rex::Socket to create TLS certificates for services
hosted in the framework and used by some payloads. These certs are
flagged by NIDS - snort sid 1-34864 and such.
Now that Rex::Socket can accept a @@cert_provider from the Msf
namespace, a more robust generation routine can be used by all TLS
socket services, provided down from Msf to Rex, using dependencies
which Rex does not include.
This work adds the faker gem into runtime dependencies, creates an
Msf::Exploit::Remote::Ssl::CertProvider namespace, and provides
API compatible method invocations with the Rex version, but able
to generate higher entropy certs with more variables, options, etc.
This should reduce the hit rate against NIDS on the wire, reducing
pesky blue team interference until we slip up some other way. Also,
with the ability to generate different cert types, we may want to
look at extending this effort to probide a more comprehensive key
oracle to Framework and consumers.
Testing:
None yet, internal tests pending.
Travis should fail as this requires rex-socket #8 .
2017-12-28 21:00:03 -05:00
Jon Hart
cf21d13b2e
Resolve conflict
2017-12-20 18:58:16 -08:00
Brent Cook
24907938bb
bump payloads, various fixes
2017-12-20 16:47:37 -06:00
Brent Cook
df4f62cde9
bump to mettle 0.3.3
2017-12-20 15:58:17 -06:00
Jon Hart
f15309bc48
Add basic framework for interacting with MQTT
2017-12-20 12:28:02 -08:00
Brent Cook
6b216f2a20
Land #9290 , Fix OverrideLHOST/LPORT with http/s Meterpreter payloads
2017-12-20 00:26:06 -06:00
Brent Cook
9f144ce8d4
Land #9151 , mettle extension support + sniffer module
2017-12-18 21:49:40 -06:00
Jeffrey Martin
04f294bd53
Fix #8972 , Remove libsodium until packaged better
...
Due to issues with packaging for multiple platforms libsodium as an optional dependency for 'rbnacl' is being removed. Once packaging issue are resolved this will be restored. This removes support for `ed25519` keys used with ssh for the time being however manual installation of this gem allows user to workaround this limitation.
2017-12-18 15:21:27 -06:00
Brent Cook
2a94a4417a
bump payloads
2017-12-18 10:01:10 -06:00
Brent Cook
3f6846c332
update payloads with python retry fix
2017-12-12 03:13:38 -06:00
Brent Cook
602335abf1
bump payloads
2017-12-11 04:11:21 -06:00
Brent Cook
edb2d8b762
fix windows unicode usernames, add recursive directory delete
2017-11-29 17:01:01 -06:00
Brent Cook
035d1ef2c6
bump payloads, pull in AES negotation & transport fixes
2017-11-25 18:21:57 -06:00
Brent Cook
8645a518b3
add mettle support for custom headers
2017-11-24 20:27:34 -06:00
Brent Cook
4050985649
update payloads
2017-11-21 13:53:33 -06:00
OJ
6f9671ff11
Updated Payloads version to 1.3.14
2017-11-08 12:36:50 +10:00
Brent Cook
ebaf0c5484
bump mettle, update toolchain, add e500v2 and reduce size of x86_64
2017-10-30 05:09:31 -05:00
Brent Cook
254c2a33d3
bump metasploit payloads, windows meterpreter fixes
2017-10-27 11:44:23 -05:00
Jeffrey Martin
f2cba8d920
Land #8933 , Web_Delivery - Merge regsvr32_applocker_bypass_server & Add PSH(Binary)
...
This restores the original PR
2017-10-25 16:29:11 -05:00
Jeffrey Martin
ca28abf2a2
Revert "Land #8933 , Web_Delivery - Merge regsvr32_applocker_bypass_server & Add PSH(Binary)"
...
This reverts commit 4999606b61
, reversing
changes made to 4274b76473
.
2017-10-25 16:19:14 -05:00
Jeffrey Martin
4999606b61
Land #8933 , Web_Delivery - Merge regsvr32_applocker_bypass_server & Add PSH(Binary)
2017-10-25 12:44:04 -05:00
Tim
7e398e2ef5
Fix #9111 , bump metasploit-payloads gem to include php 5.3.10 fix
2017-10-24 11:40:02 +08:00
OJ
7ea14e8431
Update payloads for getsystem fixes
2017-09-28 09:43:02 +10:00
g0tmi1k
1ee590ac07
Move over to rex-powershell and version bump
...
Version bump for:
- https://github.com/rapid7/rex-powershell/pull/10
- https://github.com/rapid7/rex-powershell/pull/11
2017-09-25 13:45:06 +01:00
William Webb
721277d39d
bump metasploit-payloads to 1.3.8
2017-09-20 05:04:13 -05:00
Brent Cook
6b0b2550ec
bump payloads, add shell expansion for java/android payloads
2017-09-08 13:45:54 -05:00
Brent Cook
d38ee0f1ee
bump payloads, grab java/android fixes for #8938
...
fixes #8938
2017-09-08 10:08:22 +02:00