sinn3r
|
8a94df7dcd
|
Change category name for base64
|
2013-10-18 21:20:16 -05:00 |
sinn3r
|
62dadc80d3
|
Make sure the data type for the return value is a string
|
2013-10-18 21:08:46 -05:00 |
sinn3r
|
711399bb34
|
Update property_spray.js
|
2013-10-18 20:56:00 -05:00 |
sinn3r
|
e1ca2d2730
|
Fix mstime_malloc.js
|
2013-10-18 20:49:33 -05:00 |
sinn3r
|
298f23c91c
|
Fix extra slashes that cause browser autopwn to fail.
|
2013-10-18 20:43:39 -05:00 |
Henrik Kentsson
|
efa0dcb92b
|
Just a minor mistype
Just a minor mistype in code leading to a page that didn't exist.
|
2013-10-19 00:38:24 +02:00 |
William Vu
|
5a0b8095c0
|
Land #2382, Lua bind and reverse shells
|
2013-10-18 17:11:37 -05:00 |
William Vu
|
b44f0f7e18
|
Land #2546, minor OS X persistence fixes
|
2013-10-18 17:07:53 -05:00 |
jvazquez-r7
|
70fced1d74
|
Delete unnecessary requires and make msftidy compliant
|
2013-10-18 16:54:20 -05:00 |
jvazquez-r7
|
dbd74bceed
|
Add the ARCH_CMD target
|
2013-10-18 16:35:22 -05:00 |
sinn3r
|
73b8eb0f83
|
Add rspec files to make sure the javascript files are loadable.
|
2013-10-18 15:14:26 -05:00 |
jvazquez-r7
|
2339cdc713
|
Land #2513, @joev-r7's osx persistence local exploit
|
2013-10-18 15:13:50 -05:00 |
joev
|
83f27296d3
|
Fix some bugs in osx persistence.
- the RUN_NOW datastore option did not work as expected
- Adds support for OSX < 10.4 KeepAlive option
- organizes private methods alphabetically.
|
2013-10-18 14:12:33 -05:00 |
Tod Beardsley
|
ffcb86eba2
|
Land #2541, Outpost24 importer
Sample data is currently secret. If we get a hold of non-secret sample
data, it'll be tacked on to the Redmine bug referenced below.
[FixRM #8384]
|
2013-10-18 13:21:58 -05:00 |
Tod Beardsley
|
f6675f3120
|
Reordered case statements
|
2013-10-18 13:21:28 -05:00 |
sinn3r
|
8579cb8322
|
Use obfuscation
|
2013-10-18 13:06:19 -05:00 |
Meatballs
|
2ef89eaf35
|
Randomize exe name
|
2013-10-18 19:01:28 +01:00 |
Meatballs
|
56aa9ab01c
|
Reduce size
|
2013-10-18 18:59:30 +01:00 |
Meatballs
|
4e4d0488ae
|
Rubyfy constants in privs lib
|
2013-10-18 18:26:07 +01:00 |
sinn3r
|
6f04a5d4d7
|
Cache Javascript
|
2013-10-18 12:23:58 -05:00 |
William Vu
|
93ff9ec501
|
Create methods for start_element for readability
|
2013-10-18 12:20:43 -05:00 |
William Vu
|
ff69e9fd05
|
Move product info code to a better location
|
2013-10-18 12:07:34 -05:00 |
sinn3r
|
3af38b9602
|
I bet "../" will drive people crazy, avoid that.
|
2013-10-18 11:56:03 -05:00 |
William Vu
|
e6cccedad0
|
Append vuln info to vuln description
|
2013-10-18 11:31:54 -05:00 |
joev
|
681db6cb41
|
Use fully qualified constant in include.
|
2013-10-18 11:31:02 -05:00 |
joev
|
05bea41458
|
mkdir -p the dirname, not the file.
|
2013-10-18 11:27:37 -05:00 |
root
|
2e0a14d719
|
Introduced PrependMigrate, PPID killing and general clean-up
|
2013-10-18 12:24:50 -04:00 |
Meatballs
|
9112157897
|
Land #2543, Fixes Meterpreter Railgun Crashes
Sometimes FormatMessage would return null when trying to retrieve
the string for GetLastError(). This fixes the crash and attempts to
give some message feedback depending on the Error.
See:
https://github.com/rapid7/meterpreter/pull/35
https://github.com/rapid7/meterpreter/pull/33
[FixRM 8505][FixRM 8503]
|
2013-10-18 11:16:42 +01:00 |
OJ
|
827bf23979
|
Updated binaries with railgun crash fixes
|
2013-10-18 19:43:17 +10:00 |
Norbert Szetei
|
9d6031acdb
|
Reverting payload_inject because of x64 shellcode
Injecting x64 shellcode in a SYSWOW64 process spawn a 32 bit notepad, so
we revert the changes.
|
2013-10-18 09:51:18 +02:00 |
sinn3r
|
b0d614bc6a
|
Cleaning up requires
|
2013-10-18 01:47:27 -05:00 |
joev
|
7a47059e1d
|
Fix a couple more shellescapes.
|
2013-10-18 00:47:22 -05:00 |
joev
|
a2e3c6244e
|
Remove unnecessary Exe::Custom logic.
- this is handled by the exe.rb mixin.
- adds support for a RUN_NOW datastore option.
- tested working on java meterpreter and x86 shell session.
|
2013-10-18 00:41:18 -05:00 |
jvazquez-r7
|
7dd39ae5e6
|
Update ranking
|
2013-10-17 22:43:47 -05:00 |
jvazquez-r7
|
a00a813649
|
Add real device libraries base addresses
|
2013-10-17 22:34:54 -05:00 |
Meatballs
|
55426882d4
|
Further bypassuac tidyup
|
2013-10-18 00:08:06 +01:00 |
Meatballs
|
e450e34c7e
|
Merge branch 'master' of github.com:rapid7/metasploit-framework into low_integ_bypassuac
Conflicts:
modules/exploits/windows/local/bypassuac.rb
|
2013-10-17 23:35:36 +01:00 |
Meatballs
|
5a662defac
|
Post::Privs uses Post::Registry methods
|
2013-10-17 23:28:07 +01:00 |
sinn3r
|
c926fa710b
|
Move all exploitation-related JavaScript to their new home
|
2013-10-17 16:43:29 -05:00 |
William Vu
|
12151650e4
|
Add product info to hosts and services :)
|
2013-10-17 16:18:27 -05:00 |
William Vu
|
06c7943f54
|
Import hostnames without breaking everything
|
2013-10-17 15:31:48 -05:00 |
William Vu
|
920e406526
|
Import CVE refs and db.emit all the things
|
2013-10-17 14:29:54 -05:00 |
sinn3r
|
bcb584ea50
|
Land #2525 - Change module boilerplate
|
2013-10-17 14:15:15 -05:00 |
Tod Beardsley
|
72a052942f
|
Methodize the editor variable as local_editor
|
2013-10-17 14:11:20 -05:00 |
James Lee
|
94db3f511a
|
Avoid extra slash in redirect URI
[SeeRM #8507]
|
2013-10-17 14:10:15 -05:00 |
jvazquez-r7
|
be1d6ee0d3
|
Support Windows CMD generic payload
|
2013-10-17 14:07:27 -05:00 |
Tod Beardsley
|
22b4bf2e94
|
Resplat webtester_exec.rb
|
2013-10-17 13:30:54 -05:00 |
Tod Beardsley
|
07ab53ab39
|
Merge from master to clear conflict
Conflicts:
modules/exploits/windows/brightstor/tape_engine_8A.rb
modules/exploits/windows/fileformat/a-pdf_wav_to_mp3.rb
|
2013-10-17 13:29:24 -05:00 |
sinn3r
|
064ebb5945
|
Land #2537 - Add a default Samsung community string
|
2013-10-17 11:35:04 -05:00 |
ddouhine
|
092fddb6c6
|
Merge pull request #2 from jvazquez-r7/pr_2536
Synchronize rapid7#2536
|
2013-10-17 08:49:58 -07:00 |