Commit Graph

2026 Commits (23a86e7ad2e6178cc7dbe6cef49a9f454d7d11bf)

Author SHA1 Message Date
Jacob Robles a00f4bf508
Check fix
Account for empty args array
2019-03-13 09:18:18 -05:00
William Vu 1d8538caee Direct user to framework.log for load problems
This reduces long lines and cluttered output during startup.
2019-03-11 23:40:59 -05:00
Brent Cook d14ace42ed fix jobify support with aux modules
Looks like we hit another bug involving variable scope in parameters passed down to run_simple via 'run_single'. Since 'run_single' doesn't actually even run a single invocation of a module, let's just unwind that function, and get the rest of the parameters passed down.

This also explicitly disables 'jobify' support for non-scanner aux modules with multiple targets, which I don't think we're ready for until we add the RHOSTS iteration to the module proper. Otherwise, we'll have an explosion of jobs in the current implementation.
2019-03-11 14:20:34 -05:00
Brent Cook b70d0f684c
Land #11498, add documentation for the 'jobs' command 2019-03-01 15:53:20 -06:00
Adam Cammack 3aea9bc477
Fix `check` to use all the IP addresses passed 2019-02-28 10:52:26 -06:00
Brent Cook 0c253ab085 add file: support for RHOSTS option on exploit modules 2019-02-28 06:01:30 -06:00
Brent Cook 9dbbea8973 Further improve / fix RHOSTS support for aux modules
Peleus notes that when pulling more than a few RHOSTS targets from the database, MSF writes the intermediate results to a text file instead of leaving them in memory. The aux module check of instantiating a RangeWalker for validation is necessary but insufficient for validating 'file:' RHOSTS specifications.

This clones logic used in the 'check' method in exploit modules to be able to handle file: properly. I suspect this may need to be consolidated and implemented elsewhere tool.
2019-02-26 22:18:45 -06:00
Brent Cook 287667d4f7 simplify check 2019-02-25 21:59:54 -06:00
Brent Cook e9e29580a7 Fix several bugs running non-scanner aux modules
This fixes a couple of bugs in #11176:

 - RHOSTS is not always used in Aux modules, don't enforce it unless it's used.
 - Be sure to pass the action to the run stub, since it's not a standard option.
2019-02-25 16:19:57 -06:00
Brent Cook fc45e7d1b1
Land #11407, Add support for showing extra help in msfconsole 2019-02-20 07:45:53 -06:00
Brent Cook 1c1103f9da
Land #11400, Add --sec-name to msfvenom, update generate command 2019-02-19 21:11:01 -06:00
Brent Cook 880e5976bf
Land #11176, support RHOSTS in all auxiliary modules 2019-02-19 21:01:57 -06:00
Matthew Kienow d15095f452
Land #11191, add analyze command 2019-02-19 21:50:20 -05:00
Jeffrey Martin 33948eb5c4
process each individual id returned from ranges 2019-02-19 15:43:38 -06:00
h00die e25abebd80 private can be nil 2019-02-18 20:30:08 -05:00
Jeffrey Martin a13198189e
analyze all host if no range provided 2019-02-15 17:40:11 -06:00
Brent Cook daf22bbde6 apply similar change to service enumeration 2019-02-14 12:13:36 -06:00
Brent Cook 5b213f36d5 fix #11395, use db.hosts.each
Prefer iterating over hosts over the older method in the database.
2019-02-13 18:04:50 -06:00
Adam Cammack a70c097b10
Remove extra lines from help 2019-02-13 15:57:37 -06:00
Adam Cammack 22eb2bb72b
Add support for showing detailed help for commands 2019-02-13 15:56:44 -06:00
Patrick 5151473e09 Implement sec-name and pad-nops for command dispatcher 2019-02-13 13:35:42 -06:00
Brent Cook 930d1fb78a
Land #11351, many new John the Ripper module improvements 2019-02-13 03:05:14 -06:00
Brent Cook 4a4717c3db
Land #10937, remove server/client from module cache 2019-02-12 21:28:14 -06:00
Brent Cook 0e838da56b
Land #11333, Add initial scaffolding for external evasion module tools 2019-02-06 22:51:42 -06:00
h00die cb3f91af0c add bsdi to creds help and what the hashes start with 2019-02-04 17:02:50 -05:00
h00die 748e1468b3 creds upgrade and apply_pot 2019-02-03 10:17:25 -05:00
h00die c5bfee1df7 add jtr to creds command 2019-02-01 20:25:03 -05:00
Jeffrey Martin 35ec947c17
remove is_server/is_client and `app` search term 2019-01-31 12:14:25 -06:00
William Vu 70cc03b707
Land #11329, sessions -k range fix 2019-01-30 11:26:47 -06:00
Spencer McIntyre a1b5fcc6d5 Support to_handler for evasion modules 2019-01-29 11:06:08 -05:00
Nash van Gool 4059a5f0c7 Changed range array building to correctly parse ranges using - or ..
Fixes #11328
2019-01-29 14:13:10 +01:00
Brent Cook 61d677d9e0
Land #11327, disable MSF5 development branch banner 2019-01-29 05:24:43 -06:00
Brent Cook 1b9c7ef6ff disable MSF5 development branch banner 2019-01-29 05:19:56 -06:00
Spencer McIntyre 607bbe90e3 Add tab completion for evasion module options 2019-01-28 13:22:51 -05:00
Jeffrey Martin 32c090868c
adjustments for analyze 2019-01-28 10:11:40 -06:00
William Vu 442ce7317f Commit missed Rex::Quickfile line 2019-01-22 10:40:09 -06:00
William Vu e488cf4a37 Prefer Tempfile over Rex::Quickfile for info -d
Rex::Quickfile undefines Tempfile's finalizer, preventing cleanup.
2019-01-17 13:58:03 -06:00
Green-m 462f779bda
Fix conflict. 2019-01-11 11:39:16 +08:00
Green-m 96173c101a
Fix bug when the cidr of rhosts is 32. 2019-01-11 11:31:54 +08:00
Green-m 689355e47f
Support multiple rhosts for auxiliary modules. 2019-01-11 11:31:28 +08:00
Jeffrey Martin f93497de8f
refactor to allow analyze via rpc 2019-01-09 16:48:54 -06:00
James Barnett a2548fe92d
Only lookup db connections by name
Matching on all attributes was causing issues when the connection
criteria would change for a db service at a host that already existed.
It would find the existing connection and load that outdated connection
and fail to connect.

The new functionality will save a new, valid connection with a randomly
generated name, unless the -n flag is specified to overwrite an existing
connection.
2019-01-08 15:21:14 -06:00
Green-m 12a948dde5
Move down cmd_rerun to fix rspec issue. 2018-12-24 11:30:02 +08:00
Green-m 06de47ce68
Enhance the command auto-complete in aux. 2018-12-21 18:03:57 +08:00
Jeffrey Martin 288cbd2386
add analyze command 2018-12-13 18:21:00 -06:00
Brent Cook 43842ad41d
Land #11082, Update show plugins to show all available plugins as well 2018-12-10 10:20:51 -06:00
Garvit Dewan 42c5a7d245 Update show plugins to show all available plugins as well as the loaded ones.
Fixes #11051
2018-12-08 01:19:44 +05:30
James Barnett e36e27d91a
Port is optional for HTTP data services 2018-12-05 16:05:09 -06:00
James Barnett 1e57f025d9
Update db_connect help 2018-12-05 14:52:26 -06:00
James Barnett d41f48853a
Use to_s when printing credential private 2018-12-03 16:46:30 -06:00