infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
39,462 Commits
7 Branches
556 Tags
421 MiB
Commit Graph

39462 Commits (332ba4735671200b5b5ec6671427bba1a4b7411e)

Author SHA1 Message Date
scriptjunkie a0e05d4c4c
Land #7287, mdaemon cred dumper 2016-09-10 08:43:07 -05:00
yasulib 8743f01130 Fix #7267, Fix Wrong IDs on openvas plugin 2016-09-10 09:37:49 +09:00
Brent Cook a81f351cb3
Land #7274, Remove deprecated modules 2016-09-09 12:01:59 -05:00
Brent Cook f35fdfcd5f
Added documentation for auxiliary/scanner/http/owa_ews_login 2016-09-09 11:50:25 -05:00
Brent Cook 1d4b0de560
Land #6616, Added an Outlook EWS NTLM login module. 2016-09-09 11:43:52 -05:00
Agora Security 00f09d19b1 SMTP Typo 
Correct SMTP Type (before SMPT)
 2016-09-09 01:36:37 -05:00
Agora Security 1c598cd15d SMTP Type 
Change SMPT for SMTP
 2016-09-09 01:36:08 -05:00
Pearce Barry 4495b27e67
Land #7254, Rex::SSLScan Gemification 2016-09-08 13:20:56 -05:00
Pearce Barry e5e57366ac
Land #7280, use the new rex-nop gem 2016-09-08 13:03:49 -05:00
David Maloney 1b9c37ff78
Merge branch 'master' into feature/MS-1711/rex-nop 2016-09-08 10:48:07 -05:00
David Maloney 1b69d163cc
push rex-text back to previous version 2016-09-08 10:41:33 -05:00
William Vu 92dba8ff9d
Land #7290, env var check for WinSCP module 2016-09-07 21:08:12 -05:00
Brendan a30711ddcd
Land #7279, Use the rubyntlm gem (again) 2016-09-07 16:33:35 -05:00
wchen-r7 a9c3c5d391 Fix typos 2016-09-07 15:40:10 -05:00
wchen-r7 831c7a08a8 Check environment variables before using for winscp module 2016-09-07 15:24:22 -05:00
dmohanty-r7 24bb6b18ea
Land #7246 Rex::Socket Gemification 
MS-1715
 2016-09-07 13:14:45 -05:00
David Maloney 17ab04829c missed the lib/rex/socket.rb file 
failed to delete this rather important bigt
 2016-09-07 11:38:28 -05:00
David Maloney 7857c58655 remove all the left voer cruft 
remove all the files that got xfered out to the gems

MS-1715
 2016-09-07 11:38:28 -05:00
David Maloney 43942e6029 refactor pem parser to use the rex-socket gem version 
use rex-socket's pem aprser instead of the old one we used
to have in rex::parser

MS-1715
 2016-09-07 11:38:27 -05:00
David Maloney cd90ff7c24 pull in rex-socket gem 
pull rex-socket gem in as a dep

MS-1715
 2016-09-07 11:38:26 -05:00
David Maloney 1a913da08c pull in rex-core as a dep 2016-09-07 11:38:26 -05:00
David Maloney 405c59b8b8 move bidirectional pipe into rex/ui/text 
this didn't really fit with the rest of rex::io and it inherits
from inside rex/ui/text so just put it there

MS-1715
 2016-09-07 11:34:04 -05:00
Tim 6cb331e74d
Land 7281, add vagrant default password to wordlist 2016-09-07 13:01:01 +01:00
Tim 96f81b4817
add root:vagrant to root_userpass 2016-09-07 12:59:12 +01:00
Pedro Ribeiro 31cd81d060 Merge pull request #32 from rapid7/master 
aaa
 2016-09-07 10:41:48 +01:00
William Vu 5cca776bc1
Land #7289, minor module fixes 2016-09-06 23:31:39 -05:00
William Vu 7d44bd5ba4 Clean up module 2016-09-06 23:30:58 -05:00
aushack 015b790295 Added default rport. 2016-09-07 14:24:07 +10:00
aushack 7632c74aba Merge branch 'master' of https://github.com/rapid7/metasploit-framework 2016-09-07 14:15:57 +10:00
aushack 6e21684ff7 Fix typo. 2016-09-07 14:08:46 +10:00
james-otten dcf0d74428 Adding module to scan for Octopus Deploy server 
This module tries to log into one or more Octopus Deploy servers.

More information about Octopus Deploy:
https://octopus.com
 2016-09-06 20:52:49 -05:00
EgiX df5fdbff41 Add module for KIS-2016-07: SugarCRM REST PHP Object Injection 
This PR contains a module to exploit KIS-2016-07, a PHP Object Injection vulnerability in SugarCRM CE before version 6.5.24 that allows unauthenticated users to execute arbitrary PHP code with the permissions of the webserver. Successful exploitation of this vulnerability should require SugarCRM to be running on PHP before version 5.6.25 or 7.0.10, which fix CVE-2016-7124.
 2016-09-07 01:58:41 +02:00
Pearce Barry 0f30d3a720
Land #7208, use new rex-bin_tools gem 2016-09-06 13:19:35 -05:00
Pearce Barry a1a7fde31a
Land #7208, use new rex-bin_tools gem 2016-09-06 13:12:59 -05:00
Pearce Barry 9d5a276e91
Fix recent metasploit-framework.gemspec conflict. 2016-09-06 13:10:28 -05:00
wchen-r7 23a5d737fc Add password "vagrant" to wordlists 
The password "vagrant" is often used in Metasploitable3.
 2016-09-06 12:36:02 -05:00
David Maloney 881effbae9
use the new rex-nop gem 
transfer the opty2 library to rex-nop

MS-1711
 2016-09-06 11:27:06 -05:00
William Vu b701048ce2 Fix data_disconnect to shutdown only if datasocket 
Seeing people use this with ensure when their data channel was never set
up. This breaks things. :)
 2016-09-05 15:54:26 -05:00
William Vu fed2ed444f Remove deprecated modules 
psexec_psh is undeprecated because users have been reporting
idiosyncrasies between it and psexec in the field.
 2016-09-03 12:43:01 -05:00
Metasploit 58112d7b4d
Bump version of framework to 4.12.24 2016-09-02 10:02:44 -07:00
David Maloney 668d60567f
Land #7265, rex-mime gemification 
lands dev's PR for use of the new rex-mime gem
 2016-09-02 09:34:30 -05:00
Brendan 81bc6bd672
Land #7228, Create zabbix_toggleids_sqli auxiliary module 2016-09-01 16:33:17 -05:00
dmohanty-r7 e36cfa54b1
Use rex-mime gem 
MS-1710
 2016-09-01 11:38:07 -05:00
William Vu 8b9661d8e4
Land #7262, FLUSHALL support for redis/file_upload 2016-08-31 23:45:18 -05:00
AgoraSecurity dcd3b6c092 Add space 2016-08-31 19:58:24 -05:00
AgoraSecurity a046c206f6 Improve doc 
Better format and more info
 2016-08-31 19:57:27 -05:00
Jon Hart b0e45341e5
Update redis file_upload to optionally FLUSHALL before writing 
This increases the chances that the uploaded file will be usable as-is
rather than being surround by the data in redis itself.
 2016-08-31 14:27:18 -07:00
Brandon Perry 874fec4e31 Update zabbix_toggleids_sqli.rb 2016-08-31 17:23:16 -04:00
Brandon Perry d43380330e Update zabbix_toggleids_sqli.rb 2016-08-31 17:18:28 -04:00
bigendian smalls 05278c868e
Updated JCL cmd payloads to use PR7007 format 
PR7007 centralized JCL job card for any JCL cmd payload.  This PR simply
uses that new format for existing JCL cmd payloads.  No functionality
for these payloads was changed, added or deleted.
 2016-08-31 14:39:01 -05:00