d970925cbf
Fix encoding bug
2013-11-04 13:45:29 -06:00
ed572d95ee
Merge joev's PR for Rex::Exploitation::Js::Network
2013-11-04 12:58:08 -06:00
23e5a9f048
Force on_request_exploit override
2013-11-04 12:54:52 -06:00
e83f4e5120
Use a warning
2013-11-04 12:54:41 -06:00
25787fbaa7
Change has_proxy?
2013-11-04 12:52:15 -06:00
c6fb570480
Correct bad method naming
2013-11-04 12:35:04 -06:00
016e686bcf
super chomp
2013-11-04 12:28:22 -06:00
c3d9f4064c
They are symbols not strings
2013-11-04 12:10:39 -06:00
84572c58a8
Minor fixup for release
...
* Adds some new refs.
* Fixes a typo in a module desc.
* Fixes a weird slash continuation for string building (See #2589 )
2013-11-04 12:10:38 -06:00
0337e6ff54
Do yard documentation
2013-11-04 12:09:59 -06:00
dc076273f7
Add another test for profile
2013-11-04 11:12:26 -06:00
03ee1d070e
fix server.start_service
2013-11-04 11:06:32 -06:00
bed2ea9e39
rename some stuff
2013-11-04 11:02:05 -06:00
9a8e45f451
be_nil
2013-11-04 10:57:01 -06:00
f98587181d
let 'linux'
2013-11-04 10:55:47 -06:00
6e0690754f
let 'random'
2013-11-04 10:54:15 -06:00
480b876a11
non_existent_profile
2013-11-04 10:51:31 -06:00
8bfa252496
Restate this test
2013-11-04 10:49:48 -06:00
34b5136aa4
use let for requirements
2013-11-04 10:47:52 -06:00
1d5643d53c
Match Rspec terminology
2013-11-04 10:37:41 -06:00
ff78082004
Refactor lanattacks ruby code, add command dispatcher
...
The lanattacks module didn't seem to have a command dispatcher, and
hence loading the module would always result in a failure. This
commit fixes this problem.
The commit contains a bit of a refactor of the lanattacks code to be
a little more modular. It also has a shiny new dispatcher which breaks
the DHCP and TFTP functionality up into separate areas.
2013-11-04 17:37:42 +10:00
7d975dfa87
Fix spec to refer to postInfo().
2013-11-02 16:54:22 -05:00
bccbed2757
Rename :use_xhr_shim to :inject_xhr_shim.
2013-11-02 16:52:04 -05:00
5f85ede389
Prevent xhr shim from leaking.
2013-11-02 16:47:50 -05:00
90d8da6a21
Fix some bugs in my edits, add a spec.
2013-11-02 16:46:33 -05:00
c7c1fcfa98
Pull shared XHR shim out, add option to static Js module method.
...
* Moves shim to data/js/network/xhr_shim.js
* Add some yardoc comments
2013-11-02 14:52:50 -05:00
094abdd093
rspec this
2013-11-01 14:59:21 -05:00
a806b1aa5e
Update test example
2013-11-01 12:11:49 -05:00
abc06aa8aa
Use mutex
2013-11-01 11:35:23 -05:00
5fb261a974
Change var name
2013-10-31 23:48:41 -05:00
d54c8a359b
Fix bug in proxy detection
2013-10-31 23:42:43 -05:00
7a33c48a0f
No double slash
2013-10-31 23:17:38 -05:00
5851d502b5
Rename some stuff
2013-10-31 23:12:20 -05:00
21891a8337
Make sure the browser can't retry by going to the first URL
2013-10-31 23:08:17 -05:00
94d62613ab
Pretty much done with these, remove these comments.
2013-10-31 19:04:11 -05:00
828ef9c64c
Adds target-specific payload generator
2013-10-31 18:54:01 -05:00
391360d67f
Update xmlhttprequest
2013-10-31 16:09:05 -05:00
8a0ebcbac7
Adds method get_module_resource
2013-10-31 14:34:38 -05:00
10fd892827
Fix a "undefined method to_sym" bug
...
If something is undetectable, the value may be empty, which triggers
a undefined method error because the regex always assumes there is
something. So instead of +, we use *.
2013-10-31 14:06:05 -05:00
6e7e5a0ff9
Put postInfo() in the js directory
2013-10-31 13:55:22 -05:00
735b879e3c
Add an example/testcase for BrowserExploitServer
2013-10-31 13:18:45 -05:00
00efad5c5d
Initial commit for BrowserExploitServer mixin
2013-10-31 13:17:06 -05:00
c5778f51d7
Land #2594 , @jvennix-r7's firefox 25 js detection
2013-10-31 09:22:37 -05:00
58fa67faa3
Land #2597 , @wvu-r7's fix for files permissions
2013-10-31 08:18:42 -05:00
5c923757e8
Removed generic command execution capability
2013-10-30 21:35:24 -04:00
f5d1d8eace
chmod -x .rb files without #! in modules and lib
...
It wasn't just cmdstager_printf.rb. :/
2013-10-30 19:51:25 -05:00
3e1ae4c9b3
Land #2504 , @todb-r7's edit command for msfconsole
2013-10-30 15:38:07 -05:00
b76c13b57d
Land #2596 , resplat new WMI module
2013-10-30 15:34:24 -05:00
900ccc7ec9
VISUAL is okay. Also doesn't need to be a path.
...
I don't believe this opens an untoward attack vector -- if your attacker
can run Metasploit locally, you have much bigger problems.
2013-10-30 15:34:23 -05:00
e488a54a06
Resplat new WMI module
2013-10-30 15:14:16 -05:00
sinn3r
Tod Beardsley
OJ
joev
jvazquez-r7
root
William Vu