Commit Graph

46391 Commits (262e791dccfe348faade289ee000f86342711bbb)

Author SHA1 Message Date
William Vu 06de967b02 Pass NOP generator to exploit_simple
This also makes exploit_simple consistent with its documentation.
2018-04-20 18:27:53 -05:00
Brent Cook 4aafa7b321
Land #9898, Fix target NOP generator not passed to payload 2018-04-20 18:11:49 -05:00
William Vu d17cc757e7 Fix typo 2018-04-20 18:03:39 -05:00
Matthew Kienow fcf42c7626
Landing #9859, add workspace remote datastore
Adds support for create, read, update and delete operations for the
workspace command and data model when using a remote data service.
2018-04-20 18:14:55 -04:00
William Vu 1f5ece9c46 Fix target NOP generator not passed to payload 2018-04-20 17:12:55 -05:00
bwatters-r7 1c92134606
Land #9756, Add lastore-daemon D-Bus Privilege Escalation exploit
Merge branch 'land-9756' into upstream-master
2018-04-20 15:45:37 -05:00
bwatters-r7 eadbcdd679
Added warning abotu the pipup and ding when running the exploit. 2018-04-20 15:44:23 -05:00
Brent Cook f71690e6b9
Land #9892, Fix target encoder not being passed to payload 2018-04-20 14:41:44 -05:00
bwatters-r7 f12f6d54a5
Land #9862, Post-exploitation module for meterpreter (Windows) to send wireless probe requests
Merge branch 'land-9862' into upstream-master
2018-04-20 14:32:01 -05:00
bwatters-r7 99b7d690d7
Added documentation for module 2018-04-20 14:30:30 -05:00
James Barnett e141a99f08
Update workspace add test with new output 2018-04-20 13:19:28 -05:00
James Barnett ea79c65b8e
Handle workspace delete if target does not exist 2018-04-20 11:33:35 -05:00
James Barnett 8d09f23b91
Fixes around workspace messaging 2018-04-20 11:25:24 -05:00
bwatters-r7 37a844bef0
Land # 9247, Add ASUS infosvr Auth Bypass Command Execution exploit
Merge branch 'land-9247' into upstream-master
2018-04-20 11:24:47 -05:00
James Barnett f4a949e649
Fix bug creating sessions when connected to remote data service 2018-04-19 16:19:39 -05:00
Metasploit 30276eb11c
Weekly dependency update 2018-04-19 10:05:14 -07:00
James Barnett 7e971721f0
Adjust messaging when renaming workspaces 2018-04-19 11:52:30 -05:00
James Barnett 31be847213
Add workspace when reporting vuln_attempt 2018-04-19 11:09:13 -05:00
Wei Chen 69995b7f80 Change --encryptor to --encrypt and fix a typo 2018-04-19 10:41:23 -05:00
William Vu fcfe927b7a Add PHP dropper functionality and targets 2018-04-19 05:11:21 -05:00
William Vu 62aca93d8b Cache version detection and print only once
Oops. This is the problem with overloading methods.
2018-04-19 04:59:07 -05:00
William Vu 33bde31eec Fix target encoder not being passed to payload
Datastore functionality has been preserved as an override.
2018-04-19 02:25:18 -05:00
William Vu 2670d06f99 Add in-memory PHP execution using assert() 2018-04-19 02:18:56 -05:00
William Vu 7a2cc991ff Refactor once more with feeling
Nested conditionals are the devil. Printing should be consistent now.
2018-04-18 23:59:14 -05:00
William Vu 3d116d721d Add version detection and automatic targeting
I also refactored error handling. Should be cleaner now.
2018-04-18 21:40:22 -05:00
William Vu 86ffbc753e Refactor clean URL handling and remove dead code 2018-04-18 19:56:42 -05:00
James Barnett aa40ef1789
Grab session_dto workspace from host 2018-04-18 17:38:42 -05:00
James Barnett 348eb293d0
Handle case when renaming nonexistant workspace 2018-04-18 13:02:31 -05:00
James Barnett 81d00fa5b7
Fix edge cases in workspace update 2018-04-18 12:56:38 -05:00
sinn3r 01b50b7ad3
Land #9887, remove rex-text version lock
remove rex-text version lock
2018-04-18 11:07:08 -05:00
Wei Chen 3611a1dfe4 Update rex-text version 2018-04-18 10:40:11 -05:00
Jeffrey Martin 2a922f7186
remove rex-text version lock 2018-04-18 10:38:01 -05:00
James Barnett d4a2703ff1
Dont stop host parsing if id tag found
Also make clarify 'bl' variable name.
2018-04-18 10:12:12 -05:00
Brent Cook 00d0beb188 use deep copy 2018-04-18 02:34:48 -10:00
Brent Cook 09e86bfbd0 define merge and merge! on datastore to also merge aliases 2018-04-18 02:27:57 -10:00
Brendan Coles c9fd5a7d2d Add yama_installed?, yama_enabled? and selinux_enforcing? 2018-04-18 07:22:20 +00:00
Tim W 1547a47026
Land #9784, add osx high sierra APFS password disclosure post module 2018-04-18 14:27:22 +08:00
Tim W 72cd97d3e4 minor documentation and comment tweaks 2018-04-18 14:22:32 +08:00
Wei Chen 78a02462d9 Pass Travis attempt N 2018-04-17 21:48:17 -05:00
Wei Chen b2dfe86fd8 Pass travis 2018-04-17 21:39:21 -05:00
Brent Cook a5588ec174 use same datastore retry option for x86 and x64 linux stagers 2018-04-17 15:57:54 -10:00
Wei Chen 4dd9d32d62 Fix rspec 2018-04-17 20:32:29 -05:00
Wei Chen 9127b70e6e Update gemfile 2018-04-17 20:14:32 -05:00
Wei Chen ff9c55207e Move crypto methods to Rex::Crypto namespace 2018-04-17 20:12:26 -05:00
William Vu 1900aa2708 Refactor module and address review comments 2018-04-17 19:05:45 -05:00
James Barnett 77558cd2d7
Remove unused code 2018-04-17 14:28:28 -05:00
Carter Brainerd 3da48dbb10
Fix bug caused by last commit 2018-04-17 13:38:38 -04:00
Carter Brainerd 7bfaae0919
Update system.rb
Fix get_listening_ports bug
2018-04-17 13:35:25 -04:00
James Barnett 82798424b2
Support getting a workspace via id
Also implements a helper method to sanitize sinatra injected
params since it was causing issues downstream. Updated each
use of sinatra params to use this helper method.
2018-04-17 12:35:22 -05:00
Carter Brainerd 85b09a162a
Add some efficiency improvements 2018-04-17 12:09:46 -04:00