a0abffb6c4
Adding functionality of StagerRetryWait and StagerRetryCount
2017-10-12 22:25:00 +05:30
374c139d33
Increasing the functionality of the nodejs shell_reverse_tcp payload
2017-10-12 19:05:59 +05:30
b76c1f3647
remove invalid 'client' object reference in nodejs
...
fix #9063 by removing invalid object reference introduced in PR #8825
2017-10-11 11:09:28 -05:00
f996597bcf
update cached payload sizes
2017-10-06 13:19:00 -05:00
c701a53def
Land #9018 , Add Bind Shell JCL Payload for z/OS
2017-10-05 17:24:50 -05:00
8af2e5a7ee
Cleanup revshell for zos
...
remove unused code, extra comments
align code, etc. no functionality changes
2017-09-29 18:27:29 -05:00
9ae8bdda1c
Added Bind Shell JCL Payload for mainframe
...
The bind shell is the companion payload to the reverse_shell_jcl
payload for the mainframe platform.
2017-09-29 16:52:36 -05:00
cad36ee14e
Land #8952 , suhosin compatibility added to staged payload
2017-09-26 15:22:36 -05:00
c90f885938
Finished spelling issues
2017-09-17 16:00:04 -04:00
86726978ed
payload size updated
2017-09-12 19:23:31 +05:30
a58552daad
Land #8825 , Handle missing util.pump in nodejs shell payloads
2017-09-11 15:32:21 -05:00
9877a61eff
bump payloads
2017-09-07 01:36:25 -05:00
816e78b6f6
First pass of named pipe code for pivots
2017-09-07 01:33:53 -05:00
195c1e041f
Update payload specs and sizes
...
Adds the new Aarch64 and R payloads
fix merge
2017-08-31 18:48:56 +08:00
7b71f60ea1
fix the stack
2017-08-31 18:35:18 +08:00
26f4fa3b09
setup stack
2017-08-31 18:35:17 +08:00
a2396991f0
stager not setting up stack
2017-08-31 18:35:17 +08:00
6dbe00158f
fix stager
2017-08-31 18:35:17 +08:00
582b2e238e
update mettle payload to 0.2.2, add background and single-thread http comms
2017-08-28 05:31:44 -05:00
15ec40f5c6
update R cached sizes
2017-08-28 05:31:42 -05:00
cba4d36df2
provide missing bits for R platform
2017-08-23 16:58:48 -05:00
031f48725f
add missing quotes
2017-08-21 16:16:03 -05:00
c14daf3fcc
Land #8857 , Reverse and bind shells in R
2017-08-21 15:49:24 -05:00
605330faf6
Land #8842 , add linux/aarch64/shell_reverse_tcp
2017-08-21 15:44:28 -05:00
430251b8f6
fix compatibility with php meterpreter
2017-08-21 15:37:31 -05:00
2873a899db
Address msftidy complaint
2017-08-21 03:39:03 -04:00
d6d6c67f33
add stage_shell.s and cleanup
2017-08-21 14:42:30 +08:00
e1a7494724
linux payloads should default to /bin/sh
2017-08-21 12:25:27 +08:00
9768a89bcd
aarch64 staged shell
2017-08-21 11:14:42 +08:00
7ab097a784
Unix cmd versions of R payloads
...
Use R to connect back from a unix shell.
Notes:
We need to DRY this up - tons of copy pasta here, when we should
really be instantiating the language specific payloads and just
wrapping them with CLI execution strings.
Testing:
None, yet, just did the quick port to wrap this and push to CI
now that rex-arch #4 is in.
2017-08-20 21:25:57 -04:00
b864083cbd
update payload sizes
2017-08-20 19:03:53 -05:00
d76616e8e8
Reverse and bind shells in R
...
Initial implementation of bind and reverse TCP shells in R.
Supports IPv4 and 6, provides stateless sessions which wont change
the cwd when cd is invoked since each command invocation actually
spawns a pipe to execute that specific line's invocation.
R injections are common in academic software written in a hurry by
students or lab administrators. The language runtimes are also
commonly found adjacent to valuable data, and often used by teams
which are not directly responsible for information security.
Testing:
Local testing with netcat bind and rev handlers.
TODO:
Add the appropriate platform/language library definitions
2017-08-19 06:12:05 -04:00
8b4ccc66c7
add linux/aarch64/shell_reverse_tcp
2017-08-17 18:55:37 +08:00
df98c2a3dd
update cached sizes again
2017-08-15 08:02:51 -04:00
debbc31142
use separate module names for x86 and x64 generators
2017-08-15 08:02:01 -04:00
4dbf94556e
update CacheSize
2017-08-15 12:54:30 +09:00
59086af261
Land #8771 , rewrite linux x64 stagers with Metasm
2017-08-14 02:32:29 -04:00
25764397ba
Update CachedSizes for changed nodejs payloads
...
Fixes test failures
2017-08-12 23:21:54 -07:00
14507747d0
update CachedSize
2017-07-29 23:42:43 +09:00
b1e26dd17e
Merge branch 'master' of https://github.com/rapid7/metasploit-framework into feature/linux_reverse_tcp_x86_retry
2017-07-29 17:24:59 +09:00
eb536ba67c
Merge branch 'master' of https://github.com/rapid7/metasploit-framework into feature/linux_reverse_tcp_x64_retry
2017-07-26 09:48:17 +09:00
6300758c46
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
838b066abe
Merge branch 'master' into land-8716
2017-07-24 05:51:44 -07:00
8444038c62
Add eval alternative to PHP Meterpreter to bypass suhosin
...
See https://suhosin.org/stories/index.html for more information on this system.
2017-07-23 22:04:09 -07:00
b75530b978
Fix an issue where 'sleep' with Python Meterpreter appears to fail.
2017-07-23 05:38:06 -07:00
399557124f
update payload cached sizes
2017-07-23 05:28:32 -07:00
b8d80d87f1
Remove last newline after class - Make @wvu-r7 happy
2017-07-19 11:19:49 +01:00
3d4feffc62
OCD - Spaces & headings
2017-07-19 11:04:15 +01:00
a008f8e795
BruteForce - > Brute Force
2017-07-19 10:39:58 +01:00
cc3168933f
update mettle payloads, template generator
2017-07-18 13:13:38 -05:00
f5e76092d6
Merge branch 'master' into land-8439-
2017-07-18 08:25:18 -05:00
6c5d8279ca
change to generate payload from metasm
2017-07-16 19:21:09 +09:00
4720d1a31e
OCD fixes - Spaces
2017-07-14 08:46:59 +01:00
fd843f364b
Removed extra lines
2017-07-14 08:17:16 +01:00
f66021c8a2
update CachedSize
2017-07-14 13:53:43 +09:00
14b37c2101
Land #8691 , Improve php reverse_tcp stager logic
2017-07-11 13:50:27 -05:00
db8698e82b
Land #8655 , add error handling to mipsle linux reverse tcp stager
2017-07-11 22:33:54 +08:00
653890f9d4
fixed unit tests
2017-07-09 16:08:32 -07:00
75c571de83
Land #8653 , add error handling to mipsbe linux reverse tcp stager
2017-07-09 19:36:15 +08:00
cd0c2c213f
pedantic tweaks
2017-07-09 19:36:03 +08:00
a4a959266b
update cachedSize
2017-07-06 17:43:27 +09:00
ed0b5a843d
add error handling bin to reverse_tcp on mipsbe
2017-07-06 17:34:22 +09:00
2d8a71de6f
tab to space
2017-07-05 18:22:06 +09:00
615eb53796
update cachedSize
2017-07-05 18:05:38 +09:00
d02d6826a9
fix reverse tcp stager src
2017-07-05 17:56:59 +09:00
d1f08a80bd
add error handling to reverse_tcp on mipsbe
2017-07-05 17:50:49 +09:00
084b211e9b
add x64 stager_sock_reverse src
2017-06-25 16:31:37 +09:00
0685cb5ab4
update CacheSize
2017-06-25 06:25:07 +09:00
799fcbd9e7
add error handling to x64 reverse tcp stager
2017-06-25 06:22:25 +09:00
5588d0f7b2
Update payload cached sizes
2017-06-23 13:45:04 +10:00
fda2e8c73d
Land #8523 , Add support for session GUIDs
2017-06-22 20:10:10 -05:00
03116d7933
Land #8543 , add error handling to ARM linux reverse tcp stager
2017-06-18 15:38:16 +08:00
5f74da9023
Move php_preamble before $ipaddr and $port
...
php_preamble contains a <?php tag now, so we need to move it to the top.
2017-06-15 19:50:57 -05:00
c634931f0d
Updated payload cached size after the python3 fix
2017-06-16 09:05:31 +10:00
9cf9d22bae
fix mmap return cmp
2017-06-16 06:26:40 +08:00
93c4b3fffc
update CacheSize
2017-06-12 01:39:13 +09:00
1862900aae
add error handling
2017-06-12 01:36:13 +09:00
17d7bb0c64
add label and regster value to comment
2017-06-11 20:38:47 +09:00
c4288fb35a
Update branch to include chances from upstream/master
2017-06-09 17:18:57 +10:00
a3f3dc0a70
Upload payloads/mettle gems, update cache sizes
...
Updated both the metasploit-payload and metasploit-payload-mettle gems
to the versions that match for the session GUID pull requests. Updated
the payload cached sizes to match the new payloads.
2017-06-09 17:15:52 +10:00
eef82a501d
Add support for session GUIDs in mettle
2017-06-08 11:20:48 +10:00
834e0eba95
Land #8340 , add exception handling for rev_tcp_ssl
2017-06-06 19:09:15 -04:00
37b9cd07a2
Add support for the session GUID in the UI
...
The Session GUID will identify active sessions, and is the beginning of
work that will allow for tracking of sessions that have come back alive
after failing or switching transports.
2017-06-06 17:15:57 +10:00
737f7452ce
add my name to author
2017-06-04 04:42:45 +09:00
39cee481c1
Making changes similar to the reverse_tcp payload
2017-06-03 22:57:59 +05:30
e175bcda08
update cachedSize
2017-06-03 08:37:18 +09:00
4e29b6e5fd
Land #8275 , add retry opts for py rev_tcp stager
2017-05-28 13:02:35 -04:00
e02d726213
Setting default values to the added options
2017-05-28 14:30:30 +05:30
1582d3a902
support i386
2017-05-26 15:55:42 +08:00
92a1a3ecf7
Adding for loop instead of while, removing 'counter'
2017-05-25 15:09:34 +05:30
d333077308
osx meterpreter
2017-05-23 14:23:22 +08:00
5395d8f17c
update python stageless payload sizes
2017-05-22 18:21:13 -05:00
3a1ed19a42
Making use of StagerRetryConnect
2017-05-13 17:49:53 +05:30
123462bdca
Land #8293 , add initial multi-platform railgun support
2017-05-11 22:32:23 -05:00
cf487cc90c
reverse_ncat_ssl is stable
2017-05-08 17:43:34 -05:00
97095ab311
Land #8338 , Fix msf/core and self.class msftidy warnings
2017-05-03 21:55:52 -05:00
2d93c8e2d6
merge, don't overwrite
2017-05-03 18:17:58 -05:00
0798923901
set the correct schema for linux meterpreter reverse_tcp stages
2017-05-03 16:12:45 -05:00
64452de06d
Fix msf/core and self.class msftidy warnings
...
Also fixed rex requires.
2017-05-03 15:44:51 -05:00
772a16f4cd
fix style
2017-05-02 00:55:57 +08:00
9e06c3f07e
fix argument arrangement
2017-05-02 00:39:00 +08:00
5a2afbc364
Tidy payload
2017-05-01 21:38:34 +08:00
cfa204b8e8
add reverse ncat ssl
2017-05-01 06:57:28 +08:00
cd73bd137a
Making use of while loop and solving StagerRetryWait issue
2017-04-27 11:50:13 +05:30
480a0b4273
update payload sizes
2017-04-26 18:02:14 -05:00
078ba66e5f
remove unneeded msf/core requires
2017-04-26 17:17:20 -05:00
353191992f
move mettle payloads to meterpreter, add reverse_http/s stageless
2017-04-26 17:06:34 -05:00
a3bcd20b26
Minor cleanups for multi-platform railgun
2017-04-25 17:45:07 -04:00
bd2379784e
Improved error handling for the python reverse_tcp payload
...
Handling all kinds of errors
Removing 'e'
Updating payload cached sizes
Updating payload cached sizes 2.0
Adding option to set retry time
2017-04-23 20:43:57 +05:30
fa8011fd07
New mainframe privesc payload for z/OS
...
This module performs a privilege escaltion on mainframe systems
runing z/OS and using RACF for their security manager. A user
with any non-privileged credentials and the ability to write to
an apf authorized library can use this payload to add "root level"
privileges (e.g. SPECIAL / BPX.SUPERUSER) to their profile.
2017-04-11 15:04:44 -05:00
2758010355
Fix x86 mettle shellcode
2017-03-28 17:59:13 -05:00
9542087642
bump mettle to 0.1.8
2017-03-21 16:45:25 -05:00
aa5e9cd702
Land #8058 , Allow the http_payload stager to sleep before retry
2017-03-21 00:07:10 -05:00
1d0024ee3c
tools/modules/update_payload_cached_sizes.rb update
2017-03-17 20:58:41 -03:00
91a4657c36
Bumped the metasploit-payloads version and cache sizes with PR#8043
2017-03-15 19:02:21 -05:00
b2a7d18584
Update cached payload sizes
2017-03-15 18:43:48 -05:00
7976966ce9
Issue 7923 - msftidy errors on master
2017-03-08 03:12:41 +05:30
031285d49a
update payloads
2017-02-28 03:04:53 -06:00
8c876f4a57
Land #7996 , Major rewrite and cleanup of reverse shell jcl payload
2017-02-28 02:12:40 -06:00
1e28e2b2c7
Cache sizes again...
2017-02-24 20:43:13 -06:00
493f17761b
payload cache size change- all together, now
2017-02-24 20:23:34 -06:00
15af90c011
payload cache size change
2017-02-24 20:22:27 -06:00
27a7b279f5
Major rewrite and cleanup of reverse shell jcl
...
The shell does exactly the same as the previous, just made the code read much
better so as to not severely anger the gray beards and other lesser
mainframe deities. The only architectural change is the payload uses the
spawn system call vs exec - this provides for a cleaner exit in some cases.
2017-02-22 17:17:27 -06:00
ef2fff798e
update sizes
2017-02-17 18:57:02 -06:00
aac9381778
Update meterpreter_reverse_https.rb
2017-02-07 12:13:20 +04:00
0cec4be107
Android Stageless Meterpreter over HTTPS
...
Change to add functionality for stateless meterpreter over HTTPS
2017-02-06 14:59:43 +04:00
83cb65d3a2
Don't spin CPU if an fopen fails
...
Because PHP is happy to continue on just fine in that case and the loop
below will run unbounded spewing warnings about reading from `false`.
2017-02-02 19:07:58 -06:00
3c7f78167a
Push up the preamble and modernize style
2017-02-02 17:57:03 -06:00
ff20cf911c
Move the preamble above all other code
2017-02-02 14:53:53 -06:00
2f5845bdd7
Update cached size for payloads
2017-01-25 10:26:46 -06:00
43493e310e
update payload sizes
2017-01-10 16:54:31 -06:00
29d6cf4480
Fix nil bug in generic/custom and change opt order
...
I think PAYLOADSTR should take precedence over PAYLOADFILE. Usually,
you'll use PAYLOADFILE but might want to override with PAYLOADSTR. I
doubt this change will hurt anyone, since few people set both at once.
The payload description even says "either," so there's that.
2016-12-28 05:15:25 -06:00
5702bd6745
Land #7674 , Move migration stub generation code into msf
2016-12-22 17:53:00 -06:00
ea704211ca
incorporate payload stub generation changes
2016-12-22 17:50:43 -06:00
fa016de78a
Land #7634 , Implement universal HTTP/S handlers for Meterpreter payloads
2016-12-13 18:13:22 -06:00
ccba73b324
Add stageless mettle for Linux/zarch
2016-12-09 18:30:52 -06:00
24cf756f5b
Add stageless mettle for Linux/x86
2016-12-09 18:29:34 -06:00
62a9a31222
Add stageless mettle for Linux/x64
2016-12-09 18:28:29 -06:00
7d36d41b20
Add stageless mettle for Linux/ppc64le
2016-12-09 18:27:22 -06:00
ee7d5fc0c9
Add stageless mettle for Linux/ppc
2016-12-09 18:25:57 -06:00
4570a7198c
Add stageless mettle for Linux/mipsle
2016-12-09 18:24:12 -06:00
25b069f6b4
Add stageless mettle for Linux/mipsbe
2016-12-09 18:23:03 -06:00
7aec68c1fe
Add stageless mettle for Linux/mips64
2016-12-09 18:21:52 -06:00
7a654ca76c
Add stageless mettle for Linux/armle
2016-12-09 18:19:58 -06:00
b74482aa6e
Add stageless mettle for Linux/armbe
2016-12-09 18:18:22 -06:00
12b296ab1a
Add stageless mettle for Linux/aarch64
2016-12-09 18:05:34 -06:00
50f95f9940
Land #7681 , Get ready for stageless mettle
2016-12-09 09:31:47 -06:00
b902b4c28a
Update payload sizes
2016-12-07 15:08:45 +10:00
c5641c9681
Factor out mettle configuration
...
Also cleans up some stuff: s/url/uri/ and base-64 encodes UUIDs
2016-12-06 18:28:48 -06:00
7346223a65
update payloads
2016-12-06 07:16:44 -06:00
itsmeroy2012
Jeffrey Martin
bwatters-r7
Brent Cook
bigendiansmalls
h00die
Anant Shrivastava
OJ
Adam Cammack
Tim
RageLtMan
tkmru
Patrick Thomas
g0tmi1k
Dave Farrow
William Vu
Spencer McIntyre
C_Sto
Brent Cook
alpiste
=
sekritskwurl
James Lee
William Webb