Jacob Robles
a00f4bf508
Check fix
...
Account for empty args array
2019-03-13 09:18:18 -05:00
William Vu
1d8538caee
Direct user to framework.log for load problems
...
This reduces long lines and cluttered output during startup.
2019-03-11 23:40:59 -05:00
Brent Cook
d14ace42ed
fix jobify support with aux modules
...
Looks like we hit another bug involving variable scope in parameters passed down to run_simple via 'run_single'. Since 'run_single' doesn't actually even run a single invocation of a module, let's just unwind that function, and get the rest of the parameters passed down.
This also explicitly disables 'jobify' support for non-scanner aux modules with multiple targets, which I don't think we're ready for until we add the RHOSTS iteration to the module proper. Otherwise, we'll have an explosion of jobs in the current implementation.
2019-03-11 14:20:34 -05:00
Brent Cook
b70d0f684c
Land #11498 , add documentation for the 'jobs' command
2019-03-01 15:53:20 -06:00
Adam Cammack
3aea9bc477
Fix `check` to use all the IP addresses passed
2019-02-28 10:52:26 -06:00
Brent Cook
0c253ab085
add file: support for RHOSTS option on exploit modules
2019-02-28 06:01:30 -06:00
Brent Cook
9dbbea8973
Further improve / fix RHOSTS support for aux modules
...
Peleus notes that when pulling more than a few RHOSTS targets from the database, MSF writes the intermediate results to a text file instead of leaving them in memory. The aux module check of instantiating a RangeWalker for validation is necessary but insufficient for validating 'file:' RHOSTS specifications.
This clones logic used in the 'check' method in exploit modules to be able to handle file: properly. I suspect this may need to be consolidated and implemented elsewhere tool.
2019-02-26 22:18:45 -06:00
Brent Cook
287667d4f7
simplify check
2019-02-25 21:59:54 -06:00
Brent Cook
e9e29580a7
Fix several bugs running non-scanner aux modules
...
This fixes a couple of bugs in #11176 :
- RHOSTS is not always used in Aux modules, don't enforce it unless it's used.
- Be sure to pass the action to the run stub, since it's not a standard option.
2019-02-25 16:19:57 -06:00
Brent Cook
fc45e7d1b1
Land #11407 , Add support for showing extra help in msfconsole
2019-02-20 07:45:53 -06:00
Brent Cook
1c1103f9da
Land #11400 , Add --sec-name to msfvenom, update generate command
2019-02-19 21:11:01 -06:00
Brent Cook
880e5976bf
Land #11176 , support RHOSTS in all auxiliary modules
2019-02-19 21:01:57 -06:00
Matthew Kienow
d15095f452
Land #11191 , add analyze command
2019-02-19 21:50:20 -05:00
Jeffrey Martin
33948eb5c4
process each individual id returned from ranges
2019-02-19 15:43:38 -06:00
h00die
e25abebd80
private can be nil
2019-02-18 20:30:08 -05:00
Jeffrey Martin
a13198189e
analyze all host if no range provided
2019-02-15 17:40:11 -06:00
Brent Cook
daf22bbde6
apply similar change to service enumeration
2019-02-14 12:13:36 -06:00
Brent Cook
5b213f36d5
fix #11395 , use db.hosts.each
...
Prefer iterating over hosts over the older method in the database.
2019-02-13 18:04:50 -06:00
Adam Cammack
a70c097b10
Remove extra lines from help
2019-02-13 15:57:37 -06:00
Adam Cammack
22eb2bb72b
Add support for showing detailed help for commands
2019-02-13 15:56:44 -06:00
Patrick
5151473e09
Implement sec-name and pad-nops for command dispatcher
2019-02-13 13:35:42 -06:00
Brent Cook
930d1fb78a
Land #11351 , many new John the Ripper module improvements
2019-02-13 03:05:14 -06:00
Brent Cook
4a4717c3db
Land #10937 , remove server/client from module cache
2019-02-12 21:28:14 -06:00
Brent Cook
0e838da56b
Land #11333 , Add initial scaffolding for external evasion module tools
2019-02-06 22:51:42 -06:00
h00die
cb3f91af0c
add bsdi to creds help and what the hashes start with
2019-02-04 17:02:50 -05:00
h00die
748e1468b3
creds upgrade and apply_pot
2019-02-03 10:17:25 -05:00
h00die
c5bfee1df7
add jtr to creds command
2019-02-01 20:25:03 -05:00
Jeffrey Martin
35ec947c17
remove is_server/is_client and `app` search term
2019-01-31 12:14:25 -06:00
William Vu
70cc03b707
Land #11329 , sessions -k range fix
2019-01-30 11:26:47 -06:00
Spencer McIntyre
a1b5fcc6d5
Support to_handler for evasion modules
2019-01-29 11:06:08 -05:00
Nash van Gool
4059a5f0c7
Changed range array building to correctly parse ranges using - or ..
...
Fixes #11328
2019-01-29 14:13:10 +01:00
Brent Cook
61d677d9e0
Land #11327 , disable MSF5 development branch banner
2019-01-29 05:24:43 -06:00
Brent Cook
1b9c7ef6ff
disable MSF5 development branch banner
2019-01-29 05:19:56 -06:00
Spencer McIntyre
607bbe90e3
Add tab completion for evasion module options
2019-01-28 13:22:51 -05:00
Jeffrey Martin
32c090868c
adjustments for analyze
2019-01-28 10:11:40 -06:00
William Vu
442ce7317f
Commit missed Rex::Quickfile line
2019-01-22 10:40:09 -06:00
William Vu
e488cf4a37
Prefer Tempfile over Rex::Quickfile for info -d
...
Rex::Quickfile undefines Tempfile's finalizer, preventing cleanup.
2019-01-17 13:58:03 -06:00
Green-m
462f779bda
Fix conflict.
2019-01-11 11:39:16 +08:00
Green-m
96173c101a
Fix bug when the cidr of rhosts is 32.
2019-01-11 11:31:54 +08:00
Green-m
689355e47f
Support multiple rhosts for auxiliary modules.
2019-01-11 11:31:28 +08:00
Jeffrey Martin
f93497de8f
refactor to allow analyze via rpc
2019-01-09 16:48:54 -06:00
James Barnett
a2548fe92d
Only lookup db connections by name
...
Matching on all attributes was causing issues when the connection
criteria would change for a db service at a host that already existed.
It would find the existing connection and load that outdated connection
and fail to connect.
The new functionality will save a new, valid connection with a randomly
generated name, unless the -n flag is specified to overwrite an existing
connection.
2019-01-08 15:21:14 -06:00
Green-m
12a948dde5
Move down cmd_rerun to fix rspec issue.
2018-12-24 11:30:02 +08:00
Green-m
06de47ce68
Enhance the command auto-complete in aux.
2018-12-21 18:03:57 +08:00
Jeffrey Martin
288cbd2386
add analyze command
2018-12-13 18:21:00 -06:00
Brent Cook
43842ad41d
Land #11082 , Update show plugins to show all available plugins as well
2018-12-10 10:20:51 -06:00
Garvit Dewan
42c5a7d245
Update show plugins to show all available plugins as well as the loaded ones.
...
Fixes #11051
2018-12-08 01:19:44 +05:30
James Barnett
e36e27d91a
Port is optional for HTTP data services
2018-12-05 16:05:09 -06:00
James Barnett
1e57f025d9
Update db_connect help
2018-12-05 14:52:26 -06:00
James Barnett
d41f48853a
Use to_s when printing credential private
2018-12-03 16:46:30 -06:00