2e606cd097
Don't require rubygems
2015-01-22 13:44:58 -06:00
e7c21f3205
Land #4503 , @m7x's post module for extracting McAfee VSE hashes
2015-01-21 20:44:41 -08:00
9cc58a8d69
Lastly, rename the file so that it is specific to McAfee VSE
2015-01-21 20:44:34 -08:00
683a541064
Tighten up prints to make it specific to VSE, not McAfee in general
2015-01-21 20:33:54 -08:00
52be3d80b7
Minor ruby style cleanup
2015-01-21 20:27:38 -08:00
ceed293969
Remove unnecessary requires
2015-01-21 20:23:03 -08:00
b61538e980
Land #4291 , @headlesszeke's module for ARRIS VAP2500 command execution
2015-01-21 20:52:31 -06:00
33195caff2
Mark compatible payloads
2015-01-21 20:52:04 -06:00
500d7159f1
Use PAYLOAD instead of CMD
2015-01-21 20:49:05 -06:00
f37ac39b4c
Split exploit cmd vs exploit session
2015-01-21 20:46:37 -06:00
e1d1ff17fd
Change failure code
2015-01-21 20:38:33 -06:00
169052af5c
Use cookie option
2015-01-21 20:37:38 -06:00
65805d43d7
Land #4612 , @wez3's suggestion to bump the Outlook gather time
2015-01-21 13:28:06 -08:00
f73052710d
Correct recent msftidy change in outlook gather
2015-01-21 13:27:48 -08:00
46a0ec8a68
Make timeout for Powershell scripts configurable
2015-01-21 13:24:43 -08:00
cf7555447c
Land #4621 , msftidy whitelist constant
...
Now I'm happy... almost.
2015-01-21 14:03:39 -06:00
bbe9fc208e
Update formatting (80 columns)
...
Piped to fmt -78 to account for the indent.
2015-01-21 14:01:44 -06:00
264adf14d1
Add 'tnftp' software to the title whitelist
2015-01-21 11:52:39 -06:00
efebaae251
Make the title whitelist a constant
2015-01-21 11:50:50 -06:00
a52f491d81
Land #4615 , stopgap fix for module load race
2015-01-21 07:39:07 -06:00
2f4ad9716c
Lands #4618 , clarifies error message in msfvenom
2015-01-21 00:33:36 -06:00
1dafedf23b
Clarify no encoder/badchars specified
2015-01-21 00:26:42 -06:00
d7cb1c5710
Lands #4617 , fixes msfvenom output with no encoder.
2015-01-21 00:26:30 -06:00
4cc027c4c1
Move "found" message to a saner location
...
Thanks to Peleus for the idea.
2015-01-20 23:58:12 -06:00
9017aa0f6b
Avoid magic number to make @wvu marginally happier
2015-01-20 16:29:59 -06:00
e88c4f1587
Switching from if mod.nil? to unless mod
...
Because it reads nicer, though `mod` will never be `FalseClass`
2015-01-20 16:21:00 -06:00
63c66f66a0
Add a second_chance on cmd_use
...
This is a weak attempt to solve a race condition between modules loading
and cmd_use being fired. Upon startup, saved configurations, running
resource scripts, and running commands will sometimes jump ahead of the
module loading procedure.
I have not discovered where the race actually is and how to cause the
race to happen. However, the timing seems to be fairly close to a second;
by waiting three seconds after trying use again, we seem to be in the
clear, at least according to testing.
Fixes #4549 , but better solutions are welcome!
2015-01-20 15:46:29 -06:00
94fda6e617
Land #4600 , jvazquez-r7's Linux meterpreter bins
2015-01-20 09:38:35 -06:00
bd0a20a717
Update outlook.rb execute_script time_out
...
I have been using the script in real life cases which have bigger e-mailboxes then in the testing environment. Because of execute_script default time_out no results return, as the powershell scripts run longer then 15 seconds. Changed the timeout to 120.
2015-01-20 11:16:37 +01:00
0b6c324660
Land #4611 , add Hathaway's password
2015-01-19 22:06:24 -06:00
76746eb209
New password from Hathaway
2015-01-19 21:45:47 -06:00
f7aaad1cf1
Delete some extraneous commas
2015-01-19 17:25:45 -06:00
dbc77a2857
Land #4517 , @pedrib's exploit for ManageEngine Multiple Products Authenticated File Upload
...
* CVE-2014-5301
2015-01-19 17:23:39 -06:00
6403098fbc
Avoid sleep(), survey instead
2015-01-19 17:22:04 -06:00
a6e351ef5d
Delete unnecessary request
2015-01-19 17:14:23 -06:00
ed26a2fd77
Avoid modify datastore options
2015-01-19 17:11:31 -06:00
3c0efe4a7e
Do minor style changes
2015-01-19 15:36:05 -06:00
ddda0b2f4b
Beautify metadata
2015-01-19 14:59:31 -06:00
bb681ba307
Land #4610 , add play options to play_youtube
2015-01-19 12:56:08 -06:00
43e0afeaed
Delete 's' typo
2015-01-19 12:55:35 -06:00
79a24f80b8
Use constant for play options
2015-01-19 12:50:40 -06:00
652400451e
Delete extra k
2015-01-19 12:35:26 -06:00
50d43f118b
Make URLs better
...
Removes YouTube logo, loops, hides video controls at bottom, disables keyboard controls, doesn't show info about the video on the top, hides video annotations, and doesn't show related videos at the end.
2015-01-19 12:27:18 -05:00
923d1efa19
Land #4607 , proxy chains description
2015-01-19 10:23:52 +01:00
e9a9ab9932
Update spec thingy
2015-01-19 01:38:47 -06:00
f7d5a45d77
Land #4606 , fix proxychains description, fix #4587
2015-01-19 06:55:25 +01:00
cffa55b12e
Improve proxy chain description
2015-01-18 22:32:22 -06:00
354e952841
fix msftidy warnings
2015-01-18 23:55:57 +01:00
5b964bba6a
Land #4518 , Wordpress long password DoS
2015-01-18 23:55:06 +01:00
6014ff8a31
fix msftidy warnings
2015-01-18 23:54:16 +01:00
Tod Beardsley
Jon Hart
jvazquez-r7
William Vu
HD Moore
Brent Cook
wez3
sinn3r
IMcPwn
Christian Mehlmauer