40d7de05ef
Fix Payload Generation
...
Payload generation now only occurs once and function 'setup_pay'
removed. Payload is generated with cmd_psh_payload and is mutated to
fit dropped text file.
2016-06-23 11:20:22 -04:00
df1a9bee13
Move ps1, Use Env var, Fix license, New Cleanup
...
MS16-032 ps1 moved to external file. This ps1 will now detect windir
to find cmd.exe. The module now also detects windir to find
powershell.exe. The license is now BSD_LICENSE, and the required
copyright has been moved to the ps1. The previous optional cleanup stage
is now standard. The optional 'W_PATH' assignment is corrected to
select the user's variable unless 'W_PATH' is nil.
2016-06-22 09:25:48 -04:00
b9d0bcc193
Add MS16-032 Local Priv Esc Exploit to tree
...
This module will use the powershell port of ms16-032 created by
@FuzzySec. All payloads are pushed to a compress powershell script in a
plain text file on the disk to execute.
2016-06-21 14:56:12 -04:00
718f36f1af
Land #6955 , DarkComet C2 Arbitrary File Download
2016-06-20 13:15:16 -05:00
3f9d0630ce
Merge remote-tracking branch 'upstream/pr/6955' into land-6955
2016-06-20 13:14:37 -05:00
e692e32dae
Land #6955 , DarkComet C2 Arbitrary File Download Exploit
2016-06-20 12:03:38 -05:00
c816af1e4d
Merge remote-tracking branch 'upstream/pr/6955' into land-6955
2016-06-20 12:00:19 -05:00
5a92dc205e
Land #6997 , Avoid exception on missing key in enum_chrome
2016-06-20 11:56:03 -05:00
95517b4a45
Avoid exception on missing key in prefs.
2016-06-20 09:26:10 -05:00
bbaa3ad9f9
Land #6996 : Fix unused session types
2016-06-20 16:21:11 +10:00
6cb2a6970e
Fix unused SessionType in two modules
...
Pretty sure it should be "shell."
2016-06-19 23:41:34 -05:00
5405b0f3db
clarified attack failure error message
2016-06-18 04:31:58 +02:00
34130592f1
Update .mailmap
2016-06-17 19:01:13 -05:00
ba72d3fd92
Land #6988 , Update banners to metasploit.com, not .pro
2016-06-17 15:29:30 -05:00
98ad2489db
Land #6970 , #make_fast_nops for HUGE nop chunks
2016-06-17 12:56:26 -05:00
9ea0b8f944
Land #6934 , Adds exploit for op5 configuration command execution
2016-06-16 14:36:10 -05:00
856baf5f32
Merge pull request #4 from wvu-r7/pr/6934
...
Add setsid to persist the shell
2016-06-16 14:28:43 -04:00
ea988eaa72
Add setsid to persist the shell
...
Prevents the watchdog from killing our session.
2016-06-16 11:31:35 -05:00
6ea9d7a6f7
Land #6978 , addition of karaf to wordlists
2016-06-15 22:57:53 -05:00
cfb034fa95
fixes all previously identified issues
2016-06-15 20:58:04 -04:00
cd207df6b8
adding karaf to unix lists per 4358
2016-06-15 20:31:48 -04:00
c6b1955a5a
Land #6729 , Speed up the datastore
2016-06-15 17:55:42 -05:00
4fb7472391
Land #6975 , Fixed typos in the Magento documentation
2016-06-15 15:02:20 -07:00
f5bfc84453
Land #6977 , Add a more verbose message when generating module documentation
2016-06-15 14:55:55 -07:00
bca88d8443
Landing #6961 Regsvr32 SCT App Whitelist Bypass Server
...
by @kn0
rts
2016-06-15 15:28:02 -04:00
81fa068ef0
pulling out the get params
2016-06-15 12:27:31 -04:00
24eba6b831
Land #6956 , Check presence in local admin group
2016-06-15 10:37:17 -05:00
78775f7833
first attempt at 6964
2016-06-15 07:44:32 -04:00
52db99bfae
vars_post for post request
2016-06-15 07:24:41 -04:00
fe4cfd7e3e
Update banners to metasploit.com, not .pro
2016-06-14 15:11:04 -05:00
1d27538545
Missing a word
2016-06-14 14:15:28 -05:00
625d60b52a
fix the other normalize_uri
2016-06-14 15:03:07 -04:00
17f0a0770f
Land #6971 , Rank addition to IPFire modules
2016-06-14 12:21:54 -05:00
980658c9f4
Land #6976 , Add missing rank check to msftidy
2016-06-14 12:04:16 -05:00
4a8011eb9e
Merge pull request #16 from bcook-r7/land-6976-msftidy
...
tell the user what to do
2016-06-14 11:58:57 -05:00
cc30ece6ce
tell the user what to do
2016-06-14 11:54:55 -05:00
3ed85b6b25
Add missing rank check to msftidy
2016-06-14 11:48:05 -05:00
a7c778b852
Update magento_unserialize.md
2016-06-14 11:15:25 -05:00
bd4dacdbc3
added Rank
2016-06-13 19:04:06 -04:00
72ed478b59
added exploit rank
2016-06-13 18:56:33 -04:00
563b8206c5
Land #6962 , Apache Continuum Exploit
2016-06-13 16:41:53 -05:00
337e48dc07
Create #make_fast_nops for huge NOP chunks
...
This creates a new method called #make_fast_nops for exploits that
actually need large chunks of NOPs.
2016-06-13 15:25:46 -05:00
3a39d8020d
Moving back to PSH option only
2016-06-13 12:44:21 -05:00
52bbd22a81
Moving back to PSH option only
2016-06-13 12:10:48 -05:00
b321f72b41
Land #6958 , Modify contributing.md to require module docs with new modules
2016-06-13 09:16:36 -07:00
f7d261516d
Land #6968 , get_uri URIPORT fix (again)
2016-06-13 10:52:29 -05:00
b7139da624
Clean up whitespace
2016-06-13 10:51:38 -05:00
776dd57803
get_uri missing port fix
2016-06-12 19:27:34 -05:00
4de337e6d9
Ran rubocop on the module as per @espreto's suggestion, cleaned up several style issues
2016-06-12 17:20:57 +02:00
7831cb53c5
print status of opening browser at file
2016-06-11 21:13:31 -04:00
khr0x40sh
William Webb
wchen-r7
Pearce Barry
OJ
William Vu
samvartaka
Brent Cook
Brendan Watters
h00die
h00die
thao doan
Rob Fuller
Tod Beardsley
Trenton Ivey