12d2594095
Add StringIO stub to Msf::Java::Rmi::Client::Jmx::Connection
2015-10-09 12:00:35 -05:00
3d1ec54f02
Stub has_read_data?
2015-10-09 11:36:24 -05:00
6549f48d4e
Added new class MainframeShell for mainframe(z/os)
...
This class is built upon and overrides certain methods in the generic
CommandShell class. Primarily it is here to control when and if bytes
sent to/from mainframe (z/os) targets get encoded/decoded from cp1047
(ebcdic<->ascii). This would be the default shell for upcoming
mainframe based payloads.
2015-10-08 17:11:31 -05:00
f57f0991ab
Update rspec
2015-10-06 15:42:31 -05:00
bc46b41bbe
Change tools structure
2015-10-05 22:34:47 -05:00
5a7ac8c29a
Land #6030 , @wchen-r7's Microsoft Patch Finder
2015-10-02 13:33:27 -05:00
33ea5fdd12
Use named subjects
2015-10-02 13:32:32 -05:00
5862a66221
Pass specs again
2015-10-02 11:50:41 -05:00
69f3d88ea6
Ensure uniq on #find_msb_numbers
2015-10-02 11:38:36 -05:00
55f6fe7037
Land #5510 , update x86/alpha* encoders to be SaveRegister aware
2015-10-01 15:07:10 -05:00
d551f421f8
Land #5799 , refactor WinSCP module and library code to be more useful and flexible
2015-10-01 14:35:10 -05:00
0b9e4b33ed
update spec to ignore -a
2015-10-01 14:11:29 -05:00
39dc181588
Update rpsec
2015-10-01 00:26:07 -05:00
e2098822eb
Update msu_finder and rspec
2015-09-30 23:00:46 -05:00
c92f65838e
rspec for TechnetMsbSearch
2015-09-30 20:52:32 -05:00
764c9c88a6
More work on rspec
2015-09-29 21:56:40 -05:00
bc1be7f213
some progress with rspec
2015-09-29 17:20:30 -05:00
d4b9b8e1a4
Stub out :create_match_for_vuln on MatchSet since we already test it
...
MSP-13119
2015-09-29 16:36:59 -05:00
393a71cf46
Merge branch 'master' of github.com:rapid7/metasploit-framework into bug/MSP-13119/rework-match-result-creation
...
Conflicts:
Gemfile.lock
2015-09-29 15:00:22 -05:00
4fe0aede3d
Add rspec
2015-09-29 14:50:56 -05:00
54f9a3b25a
Land #6013 , add mainframe as a platform and architecture
2015-09-29 13:28:23 -05:00
49bb3f2e3f
Complete tests for capture_sendto
2015-09-28 13:27:58 -07:00
aa8c4e2792
Added rspec tests for zarch and ebcdic(cp1047)
...
Basic tests for zarch (64bit BE) and ebcdic<->ascii conversion required
to communicate with mainframes.
2015-09-28 13:31:30 -05:00
e1c3d3e277
Stub unit tests for capture_sendto. Unsure if these will be possible
2015-09-27 15:51:40 -07:00
66c9222968
Make web_delivery proxy aware
2015-09-23 20:45:51 +01:00
52e3405192
Passing report_exploit_success specs
...
MSP-13119
2015-09-23 11:12:02 -05:00
dc84b3b1ba
Passing report_exploit_failure specs
...
MSP-13119
2015-09-23 10:54:13 -05:00
fb051edc2e
Changed the rspec
2015-09-18 12:48:30 -05:00
359306a1a4
Add specs to exploit_attempt to cover report_exploit_failure
...
MSP-13119
2015-09-18 12:25:21 -05:00
d3a73149a2
Add specs around match result creation in exploit attempt
...
MSP-13119
2015-09-18 12:04:45 -05:00
c7f15ca940
Rework how match results get created
...
MSP-13119
* Create match result when we create vuln attempt
2015-09-14 12:18:47 -05:00
eaf51a2113
Land #5722 , @vallejocc's busybox work
2015-09-04 13:36:44 -05:00
05e1a69fe5
Add specs for prepend
2015-09-04 11:14:53 -05:00
3d428ef33d
Fix spec like I shoulda done before landing #5736
2015-09-03 14:23:30 -05:00
7665747d1c
Land #5736 , certutil cmdstager
...
Ferreal this time.
2015-09-03 14:21:21 -05:00
82b27c9038
Revert "Land #5736 , certutil cmdstager"
...
This reverts commit 93eb42dfa3
2015-09-03 14:18:28 -05:00
956c8e550d
Fix spec like I shoulda done before landing #5736
2015-09-03 13:53:21 -05:00
93eb42dfa3
Land #5736 , certutil cmdstager
2015-09-03 13:13:24 -05:00
70b5336356
Merge branch 'upstream-master' into land-5890-android-post-api
2015-09-03 09:51:35 -05:00
9f9bbce034
Land #5840 , add LLMNR & mDNS modules
2015-09-02 18:30:29 -05:00
8e1a0e039e
Add spec
2015-09-01 22:04:35 +01:00
779ece3096
Correct workspace unit tests
2015-08-28 12:19:42 -07:00
06712817cf
Fix specs
2015-08-28 14:06:04 -05:00
54243d411e
Change spec file name
2015-08-28 13:28:34 -05:00
0f9032100d
Stub print_status to allow testing of workspace...
...
and other things that may use print_status rather than print line
2015-08-28 11:10:35 -07:00
52a11cc383
Use correct calls to cmd_workspace
2015-08-28 11:03:47 -07:00
fc7a93ac30
Fix syntax and style
2015-08-28 10:51:57 -07:00
aaa8b2c907
Add rspec coverage for the rest of workspace while here
2015-08-28 10:47:51 -07:00
3f7c8e03e2
Update workspace command to support deleting all workspaces
2015-08-28 10:23:41 -07:00
ad3e37fda2
Fix rspec
2015-08-26 02:38:13 -05:00
3f994e964d
Change method name and update rspec
2015-08-25 23:23:26 -05:00
3412f31f85
Add Android POST API
2015-08-24 18:37:25 -05:00
b37efd29b0
Modified module busybox_pingnet.rb to avoid sending an ash script but executing each ping command separately. Added some fixes. Modified spec file for busybox.rb.
2015-08-23 12:17:17 +02:00
83ca4e984f
Land #5772 , @wchen-r7's fixes #5753 , support Origin for the creds command
2015-08-21 16:07:45 -05:00
68a802b980
Merge pull request #5834 from gmikeska-r7/bug/MSP-13064/SVV-validations-not-created
...
Bug/msp 13064/svv validations not created
2015-08-19 12:47:59 -05:00
0a7ac2d758
Delete another debug puts
2015-08-17 15:28:48 -05:00
09c888bc49
Fix minor things
2015-08-17 15:27:26 -05:00
c52da9f50d
Add regression spec for #5856
2015-08-17 14:32:20 -05:00
f25a5da46f
Do Minor fixes
2015-08-14 12:37:49 -05:00
66148336e1
Modify tests to resolve false negative
...
MSP-13064
2015-08-14 11:48:52 -05:00
6b1e911041
Instantiate payload modules so parameter validation occurs
...
Calling .new on payload modules does not perform parameter validation, leading
to a number cached sizes based on invalid parameters. Most notably,
normalization does not occur either, which makes all OptBool params default to
true.
2015-08-14 11:35:39 -05:00
3a7cea51b4
Merge master and fix Net::DNS::RR merge conflicts
2015-08-13 08:53:25 -07:00
25dde141d6
fix rspec
2015-07-24 15:24:18 -05:00
844b47e8ce
Additional changes
2015-07-18 14:10:46 +07:00
0929b54cd3
Update spec for notes help menu
2015-07-16 00:43:08 -05:00
886ca47dfb
Land #5650 , @wchen-r7's browser autopwn 2
2015-07-15 10:21:44 -05:00
4f8f640189
Rename autopwnv2 to just autopwn2
2015-07-14 17:38:51 -05:00
2276e355aa
Fix a typo
2015-07-14 10:51:15 -05:00
60444c208b
Land #5658 , MSF version includes git hash now
2015-07-14 09:21:25 -05:00
a2bdd0bab9
Land #5541 , add more compat fixed-cmd 64-bit BSD payloads
...
Merge branch 'land-5541-bsd-shellcode' into upstream-master
2015-07-13 21:01:55 -05:00
88a00b1ed8
We don't use MessagePack anymore
2015-07-12 14:45:46 -05:00
a7424c93a0
Update BES rspec
2015-07-12 01:26:43 -05:00
eabf561a1f
Fix some BES rspec
2015-07-11 22:16:10 -05:00
5a858d68a5
Add rspec for browser_profile_manager
2015-07-11 21:11:31 -05:00
b2d723e4a3
Rspec
2015-07-11 19:13:20 -05:00
b1208e1337
Pending rspec
2015-07-11 00:16:48 -05:00
8349a274ea
use and include git hash of Framework as part of the version
...
Because we do not always update the version number, multiple releases have
shown version string, which is not useful for helping debug issues, or for
knowing what features are enabled.
This adds the git hash or reads from a file a copy of the git hash (useful for
doing packaged builds without git) so that it is clear the origin of a
particular metasploit-framework version.
2015-07-10 18:03:37 -05:00
c8c3e1a258
Fix rspec
2015-07-10 13:42:25 -05:00
f59c99e2ff
Remove msfcli, please use msfconsole -x instead
...
msfcli is no longer supported, please use msfconsole.
Announcement on SecurityStreet:
Weekly Metasploit Wrapup
Posted by Tod Beardsley in Metasploit on Jan 23, 2015 11:57:05 AM
2015-07-09 12:50:02 -05:00
fdb715c9dd
Merge branch 'upstream-master' into bapv2
2015-07-07 13:45:39 -05:00
6d30dfd93e
Remove the parts that are not broken for BES spec
2015-07-06 23:28:52 -05:00
a9eeae56cb
Remove the broken parts in browser_autopwnv2_spec
2015-07-06 22:24:32 -05:00
653c4808b2
update framework version spec
2015-07-06 10:42:48 -05:00
b9a8308138
Replace BAP profiles with a framework-instance hash
2015-07-02 12:53:24 -05:00
9bd920b169
Merge branch 'upstream-master' into bapv2
2015-06-27 12:19:55 -05:00
88e58cbdc5
Better performance
2015-06-27 12:19:07 -05:00
bf7e0695d0
Land #5570 , @todb-r7 Removes references to Iconv gem, since it's deprecated
2015-06-19 17:19:03 -05:00
bd097e3264
Land #5497 , Refactor LoginScanner::SNMP to be fast and less buggy
2015-06-19 14:57:36 -05:00
66fecb2832
Add some specs around changed methods
...
See #4525
2015-06-19 13:23:07 -05:00
9da99a8265
Merge branch 'upstream-master' into bapv2
2015-06-19 11:36:27 -05:00
5fa864b097
done with rspec
2015-06-17 16:23:39 -05:00
b1f68556f9
More testcases
2015-06-17 02:52:59 -05:00
089579e354
This is how much rspec I have so far for browser_autopwnv2_spec.rb
2015-06-16 23:04:12 -05:00
a99b001bd7
payloads_spec.rb modified, payloads added
2015-06-16 05:33:30 -04:00
aef3a17b20
payloads added to payload_spec.rb
2015-06-16 04:43:08 -04:00
a53ca53a6a
Fix inconstancy - multi/handler
2015-06-12 21:23:51 +01:00
ed69e5f902
Redo BES rspec
2015-06-09 23:45:41 -05:00
6eb25743e3
Merge branch 'upstream-master' into bapv2
2015-06-09 10:10:00 -05:00
1fe2361e12
Add rspec for BrowserProfileManager
2015-06-09 02:23:27 -05:00
101c5a29ed
Add x86 specs
2015-06-08 16:47:26 -05:00
34d83f3881
Add specs for Rex AlphaMixed mods
2015-06-08 16:01:29 -05:00
3fb0a5f23e
Add specs for Rex AlphaUpper mods
2015-06-08 15:53:11 -05:00
1f11cd5470
Lands #5446 , support for 64-bit native powershell payloads
2015-06-07 14:16:19 -05:00
6b05302059
Fixes #5459 , refactors LoginScanner::SNMP
2015-06-06 00:50:55 -05:00
c003602993
Remove report_store_local from the spec
2015-06-04 18:54:15 -05:00
dddbf3886b
Updated payload spec to be in the correct order and updated payload cached size
2015-06-02 18:33:06 +01:00
e103b2365a
Update payload sizes and add new payloads to spec
2015-05-25 11:31:15 +10:00
820727e24d
Add missing payloads to spec
2015-05-18 22:21:08 +10:00
28abceaec5
Update payload sizes and specs
2015-05-18 21:22:54 +10:00
e41ae93524
Payload sizes, specs and more
2015-05-18 14:58:10 +10:00
bf2b113abb
Merge branch 'upstream/master' into update-x64-stagers
2015-05-18 13:28:36 +10:00
1653acd527
Land #5344 , print payload size from msfvenom
2015-05-15 09:49:05 -05:00
7b2aee2a60
Merge branch 'upstream/master' into update-x64-stagers
2015-05-15 12:27:40 +10:00
83fbd41970
Merge branch 'upstream/master' into multi-transport-support
...
Conflicts:
Gemfile.lock
modules/payloads/singles/cmd/windows/powershell_bind_tcp.rb
2015-05-14 14:50:25 +10:00
018833a326
Fix rspec
2015-05-13 20:48:52 -05:00
9549d572cc
Land #5280 , update to Ruby on Rails 4.0
...
This upgrades a number of other gems as a side-effect.
2015-05-12 16:48:49 -05:00
0dbfc1e02b
Merge the stager size work from mult-transport-support
2015-05-12 07:50:56 +10:00
fe51f552b8
Make stageless, and reverse_tcp x64 non-dynamic
2015-05-12 07:37:12 +10:00
d9068b7719
Fix up payload cache sizes, and powershell include
2015-05-11 17:43:51 +10:00
b922da8f80
Add support for x64 reverse_http
...
Still need to bake in support for proxies in the stagers, but wer'e
getting there.
2015-05-11 17:24:31 +10:00
fd827db6dd
Fix up bind stager payload sizes
2015-05-07 10:13:27 +10:00
78c58088fe
Land #5314 , set snmp defaults for constrained values
2015-05-06 16:27:41 -05:00
9d7a7cb68d
Merge branch 'upstream/master' into multi-transport-support
...
Conflicts:
lib/msf/core/payload/linux/bind_tcp.rb
2015-05-07 07:24:22 +10:00
5b2627c027
switch
2015-05-06 16:15:21 -05:00
5573c6c7e8
remove hardcoded defaults from spec
...
ensure that we test for there being defaults in the underlying scanner
2015-05-06 15:57:14 -05:00
0493f58834
Reenable metasm bind_tcp stager
2015-05-06 09:34:35 -05:00
3c2e6bb698
rollback linux bind_tcp stager metasm port
...
The new metasm port of the linux bind_tcp stager doesn't yet generate valid
executables. While we're debugging the problem, this reverts the bind_tcp.rb
stager to use the static ASM again.
2015-05-06 09:26:04 -05:00
013781fb9c
Land #5292 , WordPress custom file version check
2015-05-05 11:21:18 -05:00
18791ce933
Clean up code
2015-05-05 11:19:40 -05:00
26e7fe15f9
Merge branch 'upstream' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
2015-05-05 11:00:38 -05:00
05e4af8162
Land #5214 , initial meterpreter session recovery support
2015-05-04 16:25:27 -05:00
e6ea5511ca
update linux and windows meterpreters to use metasploit-payloads
2015-05-04 09:44:36 -05:00
55967172be
allow custom regex
2015-05-02 21:06:15 +02:00
9678479abb
check version from custom file
2015-05-02 18:34:10 +02:00
c6806b4e5f
Land #5102 , @wchen-r7's ManageEngine Desktop Central Login Utility
2015-05-01 15:20:21 -05:00
b037560c90
Do minor style fixes
2015-05-01 15:01:13 -05:00
9f0b2d4f0f
One expectation for every example
2015-05-01 14:57:48 -05:00
d880f50b98
Normalize
2015-05-01 14:54:42 -05:00
213d34ce61
Delete unnecessary let
2015-05-01 14:54:12 -05:00
8163c3cdda
Merge branch 'master' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
plugins/nessus.rb
2015-04-28 15:33:46 -05:00
59d6ad5a6d
Restore specs
2015-04-27 17:00:19 -05:00
c3f18aa899
Complete the #4989 revert
2015-04-27 16:26:34 -05:00
6a4d63ca4f
Drop explicit IPAddr to String coercion
...
MSP-12611
2015-04-27 10:48:13 -05:00
1fd601510c
Lands #5194 , merges in PowerShell session support & initial payloads
2015-04-26 16:01:51 -05:00
1cc167a7fb
Inserted ARCH_X86 payloads, removed interactive_powershell and updated base powershell session
2015-04-26 18:50:42 +01:00
19d26da11e
updated to remove powershell stand-alone payloads
2015-04-25 08:15:48 +01:00
7afb6e1aa6
Removed stand-alone payloads and will push these as a seperate fork request.
2015-04-25 07:57:43 +01:00
996cf9bf5c
Dynamic payloads
2015-04-25 07:43:48 +01:00
de09b6e330
Typo in payload spec
2015-04-25 07:30:09 +01:00
d7bc050e96
updates to payload spec
2015-04-25 07:16:17 +01:00
ff96101dba
Land #5218 , fix #3816 , remove print_debug / DEBUG
2015-04-24 13:41:07 -05:00
27f6adcd81
Land #5110 , teach Http::Response to extract hidden form inputs
2015-04-24 13:30:57 -05:00
9ecb3cc634
Fixed specs, though they did run fine locally!
2015-04-23 10:09:58 +10:00
4bbf3b722c
added payload types
2015-04-22 22:15:11 +01:00
b6df023c99
Land #4989 , @hmoore-r7's change to file: handling
...
Datastore options with file: are handled at set time
2015-04-21 23:21:22 -05:00
8f5d222e53
Land #5156 - module ranking properly handles nil
2015-04-21 14:40:01 -05:00
4224008709
Delete print_debug/vprint_debug
2015-04-21 11:14:03 -05:00
57df5c4f4f
Solve conflics
2015-04-20 23:38:34 -05:00
831e65261d
Add lengths specs
2015-04-20 17:37:41 -05:00
c7129e063c
Land #5069 , breaking up with old options
2015-04-20 16:23:44 -05:00
d7fc9294f0
Add require
2015-04-20 15:54:41 -05:00
2a3ed890d2
Add specs for Msf::Opt
2015-04-20 15:54:40 -05:00
3a5af3939d
Split all the option classes into their own files
2015-04-20 15:54:40 -05:00
3fbd4e2fe6
Land #5172 , x64 BSD shell_{bind,reverse}_tcp
2015-04-20 15:37:29 -05:00
79ca0a56f9
Land #4171 , Steam protocol support
2015-04-20 15:35:06 -05:00
3493d25ff9
Move all this to Rex
2015-04-16 21:07:23 -05:00
9bf897a829
Land #4744 , refactor powershell for msfvenom psh-cmd
2015-04-16 15:44:57 -05:00
46d53a216f
Alphabetize the specs.
2015-04-16 13:28:40 -05:00
fa506ef046
Add bsd payloads to payloads_spec.
2015-04-16 13:28:00 -05:00
42ff0decc7
Land #4722 , timing options for snmp_login
2015-04-16 02:25:29 -05:00
16234feeed
Red rank_modules ranks unloadable as Manual
...
MSP-12557
2015-04-15 16:09:19 -05:00
87d1770bac
Green rank_modules with loaded without Rank is NormalRanking
...
MSP-12557
2015-04-15 15:51:42 -05:00
bae581046b
Green module_ranks with loaded with Rank
...
MSP-12557
2015-04-15 15:49:19 -05:00
65a40a994b
Green rank_modules use NormalRanking without Rank in loaded modules
...
MSP-12557
2015-04-15 15:45:21 -05:00
d57cf8f09f
Green rank_modules with Rank
...
MSP-12557
Test that modules that need to be loaded are ranked using Rank after
loading.
2015-04-15 15:41:16 -05:00
e82fb5f836
Merge branch 'master' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
lib/msf/ui/console/command_dispatcher/db.rb
metasploit-framework-db.gemspec
metasploit-framework.gemspec
2015-04-15 14:04:35 -05:00
7a14618481
Red Msf::ModuleSet#rank_modules with create -> nil
...
MSP-12557
Msf::ModuleSet#rank_modules does not handle Msf::ModuleSet#create
returning `nil`.
2015-04-15 11:59:34 -05:00
8d1126eaa5
Land #5129 , x64 BSD prepend stubs 'n' stuff
2015-04-14 01:24:50 -05:00
2d3614f647
Implement x64 BSD exec and exe template.
...
- Fixes bug in CachedSize due to all options being set
- Adds new payload to payload_spec.
2015-04-12 12:17:25 -05:00
9f15824e2a
Merge branch 'master' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
2015-04-10 15:35:27 -05:00
284ef5bbbb
Land #5112 , Nessus REST Login Module
2015-04-10 13:32:53 -05:00
90d525088c
Green rspec
2015-04-10 11:36:23 -05:00
7e6461aea0
Travis error correction
2015-04-10 15:48:48 +05:00
8c0d5d66d0
Add spec file
2015-04-10 15:32:03 +05:00
88031c9a87
Update spec
2015-04-09 16:25:04 -05:00
3fc25a00d8
Make sure we are only grabbing hidden inputs
2015-04-09 01:09:00 -05:00
717120b8c5
Add #get_hidden_inputs for Metasploit::Framework::LoginScanner::HTTP
2015-04-09 00:34:09 -05:00
e03f2df691
Land #5002 , RMI/JMX improvements
2015-04-08 15:23:29 -05:00
f51eaef765
Add rspec
2015-04-08 02:33:27 -05:00
5ab0204b24
Update spec for new payloads
2015-04-07 11:32:00 +10:00
5e2d6c27c3
Merge branch 'master' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
db/schema.rb
lib/msf/core/db_manager/session.rb
metasploit-framework-db.gemspec
2015-04-06 11:27:00 -05:00
9145b6d717
Fix specs for uri_checksum
2015-04-05 22:56:59 -05:00
261ef51813
Add Rex::Java::Serialization exceptions
2015-04-05 18:43:03 -05:00
ebf77cd02d
Merge remote-tracking branch 'upstream/master' into msfvenom_psh_squash
...
Conflicts:
lib/msf/util/exe.rb
2015-04-05 00:24:48 +01:00
cb08e5b8da
Fix specs
2015-04-03 16:00:28 -05:00
c33a4a7fd9
rspec for jsobfu
2015-04-03 15:27:35 -05:00
e3bbb7c297
Solve conflicts
2015-04-03 14:57:49 -05:00
6455862484
Merge branch 'staging/rails-4.0' of github.com:rapid7/metasploit-framework into staging/rails-4.0
...
Conflicts:
Gemfile.lock
metasploit-framework.gemspec
2015-04-03 13:56:38 -05:00
d02a4cc197
Land #5066 : EncodedPayload#generate specs
2015-04-03 20:59:00 +10:00
a1b4cf375f
Add some minimal specs for #generate
2015-04-03 00:11:41 -05:00
fd043d4842
Fix up build and missing uri_checksum stuff
...
Somehow this made it into a merge when it shouldn't have. This fix moves
the URI checksum module to where it needs to be and updates all the
references where required. This will result in a class with the dynamic
transport branch, but I can fix that after.
2015-04-03 13:42:25 +10:00
5b5dc3ef59
Merge branch 'upstream/master' into stageless-x64
...
Merge required adjustment of the proxy datastore names that were changed.
2015-04-03 08:53:09 +10:00
f4977bf606
Land #5006 @jlee-r7 adds meterpreter specs
2015-04-01 11:05:47 -05:00
76bfaa6ce9
Fix dumb inverted logic. Thanks, rspec!
2015-03-31 14:28:07 -05:00
176cdcb836
Use sym-to-proc instead of reimplementing it
2015-03-31 11:21:53 -05:00
dfaf1b3a8f
Stub monitor_sock so we don't leak threads
2015-03-30 22:03:39 -05:00
97d788676c
Set dynamic_size true for x64 stageless
2015-03-31 07:37:46 +10:00
790a08a848
It's pronounced "exploit", not "assoc_exploit"
2015-03-30 16:21:17 -05:00
2394d4bae8
Merge branch 'staging/single-vuln-push' into feature/MSP-11934/refactor-report-exploit-success
...
Conflicts:
Gemfile
Gemfile.lock
spec/support/shared/examples/msf/db_manager/exploit_attempt.rb
2015-03-30 14:08:54 -05:00
2ab4584079
Merge remote-tracking branch 'upstream/master' into staging/single-vuln-push
2015-03-30 13:50:52 -05:00
6386289d80
Remove bogus spec
...
No longer necessary to check that we're instantiating an Msf::Module
because we get the same information by reusing an existing
Mdm::Module::Detail
2015-03-30 13:10:36 -05:00
6610504b10
Update payload spec
2015-03-30 21:07:30 +10:00
7b1ac29788
Fix subject
2015-03-30 00:53:31 -05:00
283e50fd42
Check the case of having no vuln
2015-03-30 00:09:49 -05:00
a1c755161a
Add spec coverage for appender, fix injector
2015-03-29 11:52:06 -05:00
9eca3a0ab5
Impersonation spec
2015-03-29 00:52:27 +00:00
10029eedb9
Add command specs
2015-03-29 00:05:44 +00:00
f7e3abf760
sqlcmd specs and fixes
2015-03-28 23:23:00 +00:00
3b651aecdc
Specs for sqlserver check and fixes
2015-03-28 22:59:00 +00:00
9cfafdd8b8
Land #4649 , improve post/windows/manage/run_as and as an exploit
2015-03-27 17:31:30 -05:00
2815462375
Update Mdm to staging hash
2015-03-27 15:16:33 -05:00
466ef4349e
Second verse, same as the first
2015-03-27 09:59:10 -05:00
88a8186a11
Pull up redundant hash literal
2015-03-26 19:33:53 -05:00
e0568e95c2
Land #4978 @zerosteiner adds reverse https for python meterpreter
2015-03-26 19:16:46 -05:00
d84c48cb7d
Use newer hash syntax
2015-03-25 13:39:34 -05:00
72a0909e9b
Land #4992 , @wchen-r7's support for multiple ActiveX controls on BrowserExploitServerMerge
2015-03-25 13:30:36 -05:00
95d70e7211
Remove respond_to check for protected method
...
Fails on Ruby 2.x, and doesn't really gain us anything anyway.
2015-03-25 12:50:46 -05:00
8f0c434faa
Add specs for the new method
2015-03-25 12:34:10 -05:00
0540e25db2
Calculate the java/rmi/registry/RegistryImpl_Stub hash dinamically
2015-03-25 11:29:07 -05:00
6e3e696262
Use symantec_web_gateway as an example of using send_request
2015-03-25 10:55:46 -05:00
111e3fcb88
Add rspec for #send_request
2015-03-25 01:45:03 -05:00
a5c39db6c3
Use mocks like a boss...
2015-03-24 19:30:59 -05:00
0b671d5210
Add specs for Msf::Java::Rmi::Client::Jmx::Connection
2015-03-24 19:15:25 -05:00
356e8c727c
Add specs for Msf::Java::Rmi::Client::Jmx::Server
2015-03-24 18:56:58 -05:00
464a6df5e0
Add specs for Msf::Java::Rmi::Client::Registry
2015-03-24 18:42:35 -05:00
0fe98bc023
Delete old JMX mixin specs
2015-03-24 17:30:37 -05:00
e20398a70a
Add specs for Msf::Java::Rmi::Client::Jmx::Server::Parser
2015-03-24 17:30:06 -05:00
0a352fc7d4
Finish specs for Msf::Java::Rmi::Client::Jmx::Connection::Builder
2015-03-24 17:06:05 -05:00
115c4e5a06
Add first specs for Msf::Java::Rmi::Client::Jmx::Connection::Builder
2015-03-24 16:37:05 -05:00
c26dfa263d
Ensure IP addresses are explicitly converted to strings
...
MSP-12113
2015-03-24 16:26:00 -05:00
82d545850e
Add specs for Msf::Java::Rmi::Client::Jmx::Server::Builder
2015-03-24 16:04:18 -05:00
87cac6fd55
Complete specs for Msf::Java::Rmi::Util
2015-03-24 15:41:32 -05:00
48026da35f
Fix RMI specs
2015-03-24 15:14:36 -05:00
0a07bb4d17
Add a couple of specs for Rex::Proto::Rmi::Model::ReturnValue
2015-03-24 15:08:59 -05:00
7bf00f8f47
Land #4789 , @rastating WPLMS wordpress module
2015-03-24 20:46:38 +01:00
023f47f19a
Use build instead of create
2015-03-24 13:17:42 -05:00
b9934cfd3f
Add workspace to ensure consistency with session
2015-03-24 13:14:55 -05:00
13a899b3d2
Use a named subject
2015-03-24 13:13:54 -05:00
414983ac8c
Merge branch 'feature/MSP-11925/create-user-data' into staging/single-vuln-push
...
Conflicts:
Gemfile.lock
2015-03-24 12:42:08 -05:00
6eedf6ac03
Land #4975 , egghunter tool, Resolve #4944
2015-03-24 06:20:30 +01:00
71c544c3c5
added newline at end of file
2015-03-24 06:19:27 +01:00
3c4da5c3ff
Update BES rspec
2015-03-24 00:10:18 -05:00
c7da9d6f79
Move file: prefix checks out of option class specs (would need to go into console test specs at some point)
2015-03-23 15:09:22 -05:00
79068c8ec2
Delete JMX discovery stream
2015-03-23 10:21:37 -05:00
01caf161f8
Fix syntax error in db_spec.rb
2015-03-23 01:35:26 -05:00
2e75d14d56
Update rspec
2015-03-23 00:53:55 -05:00
7282968d8a
Python reverse HTTPS stager
2015-03-21 12:43:14 -04:00
675f96ecd1
Don't need this require
2015-03-20 23:32:23 -05:00
96bcdd211c
Finished rspec
2015-03-20 20:53:04 -05:00
470464874f
The important test cases I want to cover
2015-03-20 16:53:42 -05:00
2fda115110
rspec starter
2015-03-20 16:46:09 -05:00
1226b3656f
Land #4945 , @wchen-r7's login scanner for Symantec web gateway
2015-03-20 14:44:05 -05:00
e257e742e0
Fix require
2015-03-20 14:26:55 -05:00
62871255b0
Match class and file names
2015-03-20 14:25:20 -05:00
eb73da2f39
Clean specs
2015-03-20 14:19:02 -05:00
b19f766728
Land #4942 , Gitlab Login Scanner
2015-03-20 13:02:12 -05:00
cf645772b6
Land #4960 , hosts -i, -n, and -m support
2015-03-19 21:34:14 -05:00
da51d2be67
Really add specs for Msf::Java::Rmi::Client::Registry::Parser
2015-03-19 19:07:42 -05:00
6eecbc3de1
Add specs for Msf::Java::Rmi::Client::Registry::Builder
2015-03-19 18:24:31 -05:00
6c84081552
Update db_spec.rb
2015-03-19 18:12:37 -05:00
ec90594f7e
Add support for Rex::Java::Serialization::ProxyClassDesc
2015-03-19 15:41:24 -05:00
7899881416
Update POSIX bins from master
2015-03-19 14:50:14 +10:00
a5d589ef55
Railgun calls should return a hash
2015-03-19 00:05:02 +00:00
975ddc9092
Add some spec mockery
2015-03-18 23:43:46 +00:00
8113ed2e1f
Move specs
2015-03-18 09:29:37 -05:00
0968f14ac1
Add specs for CallData
2015-03-17 20:53:02 -05:00
6315e07312
Add specs for UniqueIdentifier
2015-03-17 20:38:43 -05:00
4bc4936083
Add specs for ReturnValue
2015-03-17 17:30:53 -05:00
87b777e923
Refactor moving code to rex
2015-03-17 17:15:32 -05:00
78ec4c91e8
Completed rspec
2015-03-17 16:15:12 -05:00
f29a3f69e9
Merge branch 'master' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
metasploit-framework-db.gemspec
2015-03-17 15:47:48 -05:00
ee276434a4
Update swg spec, looking good so far
2015-03-17 15:15:32 -05:00
d5b77d053b
Update for rspec
2015-03-17 12:14:58 -05:00
503fb602f9
Get rspec going
2015-03-17 12:01:46 -05:00
2d8782d711
Fix RMI specs
2015-03-17 11:48:38 -05:00
ebe7ad07b0
Add specs, plus modify java_rmi_server modules
2015-03-17 11:26:27 -05:00
2c6b904c02
Correct spec too
2015-03-17 11:36:36 +00:00
f4a1e981ab
Add gitlab login scanner
2015-03-17 11:19:23 +00:00
abb8a32e68
update spec for dynamic meterpreter payloads
2015-03-16 18:08:13 -05:00
b68e05e536
Land #4914 , @hmoore-r7 and @BorjaMerino winhttp stagers
2015-03-13 08:24:11 -05:00
fa2fbc387c
Land #4922 , REG_MULTI_SZ for type2str
2015-03-13 01:07:27 -05:00
66a45ac7fd
Add spec for reverse_winhttps
2015-03-11 16:29:22 -05:00
ea1bc69e2e
Merge branch 'master' into feature/add-reverse_winhttp-stagers
2015-03-11 14:29:34 -05:00
ceeee4446f
Land #4904 , @hmoore-r7 reworks reverse_http/s stagers
...
They are now assembled dynamically and support more flexible options,
such as long URLs.
2015-03-11 10:41:59 -05:00
cb1a1ef692
Remove bad stager+stage combinations from the payload set
2015-03-11 00:46:24 -05:00
cb41154712
Make a MatchResult when sessions are reported
2015-03-10 15:17:57 -05:00
db351317a5
Merge with PR branch
2015-03-10 14:08:35 -05:00
0f763c2cb3
First step to reworking the winhttp stagers
2015-03-10 14:07:25 -05:00
991e72a4fa
HTTP stager based on WinHttp
2015-03-10 13:40:16 -05:00
966848127a
Refactor x86 Windows reverse_http and reverse_https stagers
2015-03-10 12:48:30 -05:00
d0324e8ad3
Final cleanup, passing specs
2015-03-09 15:50:57 -05:00
838746b021
Add user_data_is_match? method
2015-03-09 15:35:53 -05:00
60145ad9a1
Cosmetic tweaks to the specs
2015-03-09 15:08:11 -05:00
7dc0af443f
Rework specs
2015-03-09 14:41:25 -05:00
33f96f5c31
Remvoe the useless pinst variable from the previous test
2015-03-09 13:59:58 -05:00
f61c3f33bd
Validate cached_size and dynamic_size? in the payload specs
2015-03-09 13:58:18 -05:00
ff91953f92
Whitespace
2015-03-09 08:58:25 -05:00
9195479a6d
Add a context for without user_data
2015-03-09 08:56:52 -05:00
b37a975108
Use metasploit_data_models staging branch
2015-03-09 01:28:27 -05:00
cd5699dc39
Sort cases and add specs
2015-03-08 23:27:32 -05:00
38f8fe382c
Update specs
2015-03-05 12:24:41 -06:00
1c064f6b46
Land #3074 , @0x41414141 SMB Share mixin
2015-03-04 10:16:04 -06:00
a57aefb721
Add specs for QUERY information level
2015-03-03 15:24:13 -06:00
96c0f1847b
Fix examples descriptions
2015-03-03 14:48:18 -06:00
7f7b17c04e
Really add specs
2015-03-03 14:14:03 -06:00
df7c07bfd1
Really add the specs
2015-03-03 13:19:50 -06:00
a2a24c56d6
Add specs for QueryFileInformation
2015-03-03 13:04:30 -06:00
1322cb0d3f
Clean find_first2 specs
2015-03-03 12:46:25 -06:00
8328c5c5e9
Add specs for SMB_FIND_FILE_BOTH_DIRECTORY_INFO requests
2015-03-03 12:43:41 -06:00
597f99ade9
Finish TRANS2 specs
2015-03-03 11:46:13 -06:00
a204b550d2
Add specs for TRANSACTION2 helper methods
2015-03-03 10:55:55 -06:00
bece2e7088
Really add the specs
2015-03-03 10:32:35 -06:00
4bbc0b5b0b
Fix valid_request on negotiate_spec
2015-03-02 17:39:39 -06:00
a92dc7e73d
Fix nt_create_andx specs
2015-03-02 17:38:24 -06:00
4fc08d7243
Add specs for Msf::Exploit::Remote::SMB::Server::Share::Command::ReadAndX
2015-03-02 17:32:03 -06:00
b5e5d390ac
Add specs for Msf::Exploit::Remote::SMB::Server::Share::Command::NtCreateAndx
2015-03-02 16:55:36 -06:00
584e5f7d8b
Add specs for Exploit::Remote::SMB::Server::Share::Command::Negotiate
2015-03-02 16:29:33 -06:00
50f5baa7c6
Add specs for Msf::Exploit::Remote::SMB::Server::Share::Command::Close
2015-03-02 16:00:02 -06:00
00c4d704f2
Update rspec to include new functionality
...
Added a new test for testing when all versions of a plugin are
vulnerable and added tests for checking theme versions from the
style.css file
2015-02-26 21:18:51 +00:00
3efae77212
Use /dev/null instead of /etc/passwd
...
File.read returns "" on /dev/null. Don't try it on /dev/zero. :-)
2015-02-26 14:19:25 -06:00
f625ad4f9c
Remove unnecessary tests in spec
2015-02-26 14:12:39 -06:00
4aedd7e5d3
Fix spec for fsquery support
2015-02-25 18:14:17 -06:00
a543eccdb4
Add FSQUERY test to spec
2015-02-25 17:18:29 -06:00
af5e0ec0d6
Update spec with a couple more cases
...
Also fix a bad copypasta.
2015-02-25 16:43:40 -06:00
513d11ce93
Complete replacement of "pathname" with "path"
...
See e8c2c3687d
2015-02-25 15:52:26 -06:00
c95855ff11
Add fsdelete test to spec
2015-02-25 15:44:12 -06:00
26cbeb011b
Add fsdownload test to spec
2015-02-25 15:00:37 -06:00
f61fb0555d
Add case-insensitive test of delete
2015-02-25 10:47:36 -06:00
36e40f02c9
Fix delete in datastore spec
...
I was tired and accidentally a should. :(
2015-02-25 10:47:32 -06:00
2a66a6ae88
Add delete to datastore spec
2015-02-24 20:57:38 -06:00
e94f5fc635
Better handling of TYPE#/CLASS#, tests
2015-02-24 15:37:39 -08:00
7b5be67d65
Add incomplete spec for Net::DNS::RR::Classes
2015-02-24 15:37:39 -08:00
1957fe6d56
Add incomplete spec for Net::DNS::RR::Types
2015-02-24 15:37:39 -08:00
12a99ecee5
Land #4796 , Handle incompatible payload architecture in BES
2015-02-24 10:02:25 -06:00
8c5ff858d0
Land #4812 , hp_sys_mgmt_login configurable URIs
2015-02-23 19:04:14 -06:00
8b0354b193
Fix the SSL boolean test
2015-02-23 14:29:28 -06:00
fb9a054713
Fix rspec
...
The login URi is user-configurable so we shouldn't dictate this
anymore.
2015-02-20 22:08:09 -06:00
641b67469d
add payload specs for reverse_http_proxy_pstore
...
PR predated the spec
2015-02-20 12:23:51 -06:00
1835120851
Update rspec for get_payload in BES
2015-02-19 02:45:54 -06:00
e397ecec9d
Merge branch 'upstream-master' into staging/rails-4.0
2015-02-18 15:05:39 -06:00
jvazquez-r7
bigendian smalls
wchen-r7
Brent Cook
Fernando Arias
Jon Hart
Meatballs
Mo Sadek
James Lee
HD Moore
jvicente
Dev Mohanty
Greg Mikeska
xistence
Samuel Huckins
Tod Beardsley
root
g0tmi1k
William Vu
benpturner
OJ
darkbushido
Christian Mehlmauer
Matt Buck
Trevor Rosen
joev
Luke Imhoff
root
Spencer McIntyre
Borja Merino
rastating