31a7b13c19
ms17_010_psexec: fix RHOST in "authenticating..." message
2019-01-16 11:23:21 +01:00
1947bae45b
Land #11230 , add JuicyPotato local privilege escalation
2019-01-15 21:20:25 -06:00
4f7bdc7da1
add module docs
2019-01-15 21:17:05 -06:00
c8a75763b5
detail vulnerable application description
2019-01-16 01:40:36 +00:00
8a909793a5
Merge branch 'new-module-pcomclient' of github.com:lmrosa/metasploit-framework into new-module-pcomclient
2019-01-16 00:35:18 +00:00
06de16a36f
Merge remote-tracking branch 'upstream/master' into pr/10119
2019-01-15 18:33:48 -06:00
ffe5db4010
new pcom client mode that allows to read and write
...
several types of operands
2019-01-16 00:16:38 +00:00
dc7d611780
Base64 encode the data field for each loot operation
2019-01-15 18:01:43 -06:00
70c4e719c9
Land #11190 , fix multi line text in android send_sms
2019-01-15 17:18:37 -06:00
27d6fffdad
Land #11125 , Import/generate `ysoserial` Java serialization objects
2019-01-15 17:09:56 -06:00
85555b81c4
Update code for Ruby coding style standards
2019-01-15 17:08:54 -06:00
5c308b1448
Remove nested loot object from host JSON
...
The code on the framework side that was utilizing this was removed
a while ago. It was never actually being used anywhere, and was causing
issues with getting host objects back when the loot contained
non-UTF-8 characters
2019-01-15 16:45:04 -06:00
81472b529c
Simplify deletion-related questions in msfdb
2019-01-15 16:06:10 -06:00
3bf4726b15
Fix pid_uid
2019-01-15 14:34:29 -06:00
42c9553283
Dont do a separate lookup for loot.host, use the included JSON
...
This is just a temporary change. Eventually we should be doing separate
lookups for associated objects as that is the RESTful way of doing it.
Implementing this now to prevent extra load on the server until we can
put a better system in place of doing multiple lookups with a single call.
2019-01-15 12:47:37 -06:00
a73fe9433b
land #11169 blueman priv esc on linux
2019-01-15 10:32:46 -05:00
923a4ba098
Land #11263 , uppercase KoreLogic in JTR modules
2019-01-15 08:50:11 -06:00
c8db044a84
Land #11242 , fix Msf::Post::File #pwd output
2019-01-15 08:42:41 -06:00
9616a9f79d
Land #11245 , doc update for chrome_cookies
2019-01-15 07:27:35 -06:00
04363b7b7e
Doc update
...
post:chrome_cookies
2019-01-15 07:19:46 -06:00
93f66a1f22
uppercase
2019-01-15 08:04:11 -05:00
c1fe334006
Remove unused code
2019-01-14 23:30:48 -05:00
7f20c75cb3
Use static rackup file from framework directory
2019-01-14 23:30:48 -05:00
e7e0503f3e
Add Metasploit data web service rackup file
2019-01-14 23:30:47 -05:00
4d847e97fc
... over -1
2019-01-14 22:41:11 -05:00
509b4e979d
max_length -1
2019-01-14 22:28:46 -05:00
2c02dbc8a6
add max_length to wordlist generation
2019-01-14 22:20:33 -05:00
d8515ba056
Land #11255 , Assign CVE number to spark unauth rce
2019-01-15 11:17:37 +08:00
8c636f27d5
Update check method to confirm vulnerability
2019-01-15 11:31:31 +11:00
72d3f6538e
Updated ysoserial_payloads.json cache
2019-01-14 17:43:27 -06:00
ddd9ab2041
Fixed an off-by-one error in the fingerprinting randomization
2019-01-14 17:42:59 -06:00
4dc3562046
Update installation notes
2019-01-15 10:41:03 +11:00
e168458861
Make calls to get the associated host when getting loot
2019-01-14 15:51:51 -06:00
47f8738f74
Add Imran Rashid to CVE-2018-11770 credit
2019-01-14 15:28:08 -06:00
52ff0a8b75
Update exploits/linux/http/spark_unauth_rce as CVE-2018-11770
2019-01-14 15:10:29 -06:00
d323958ebe
Add docs
2019-01-14 14:56:42 -05:00
3f9c0e160a
Merge branch 'master' into fix_misc_loot_bugs
2019-01-14 11:15:06 -06:00
8cd26b74d7
Please msftidy gods
2019-01-13 19:22:51 -05:00
171d46db9b
Add disclosure date, more references, and authors
2019-01-13 19:11:05 -05:00
89e8ff9c80
Update office_excel_slk.rb
2019-01-13 18:08:51 -05:00
d88d1d0f1d
Create office_excel_slk.rb
2019-01-13 17:31:34 -05:00
bd94675b33
Update documentation for post/multi/gather/chrome_cookies
2019-01-13 14:31:07 +11:00
fe1f654659
Add documentation
2019-01-12 09:15:36 +00:00
c6f4eda7f9
Add ASan SUID Executable Privilege Escalation module
2019-01-12 09:14:20 +00:00
2543d60465
Use 'to_s.strip' for Msf::Post::File.pwd output
2019-01-12 08:47:23 +00:00
e69d509bdf
chore: update description and ranking
2019-01-12 04:32:21 +01:00
3a865a0c05
feat: spawn as NT AUTHORITY\SYSTEM
2019-01-12 04:03:26 +01:00
9789547fe7
build: recompile dlls
2019-01-12 04:02:34 +01:00
e6f89a38e7
chore: update juicy potato reflective DLL source to latest
2019-01-12 04:02:13 +01:00
e9a8d5708a
Land #11234 , @bcoles revisionism
2019-01-11 20:15:34 -06:00
Clément Notin
Brent Cook
Luis Rosa
William Vu
James Barnett
Wei Chen
Erin Bleiweiss
h00die
Jacob Robles
Matthew Kienow
Green-m
bcoles
asoto-r7
Carter Brainerd
Alex
phra