syndrome5
45af651993
Fix issue generate/launch path
...
Generate file in C:\ but try to launch it in Documents and Settings\All Users\Application Data\7T\
PoC with windows/meterpreter/reverse_tcp
2017-07-04 22:14:32 +02:00
William Vu
aceeedc895
Land #8647 , custom logger for module search
2017-07-03 17:03:25 -05:00
Brent Cook
06aa239d47
pass loggger conditionally to common search function
2017-07-03 16:22:47 -05:00
dmohanty-r7
aa387e96a7
Land #8577 , Add SurgeNews User Credentials scanner
2017-07-03 10:14:03 -05:00
Christian Mehlmauer
040ba90fc6
Land #8644 , text change in mysql_enum
2017-07-03 15:42:29 +02:00
Roman
38b1e56bbd
negated wording regarding legacy auth
...
According to the docs this variable means the opposite:
https://dev.mysql.com/doc/refman/5.5/en/mysql-command-options.html#option_mysql_secure-auth
OFF -> insecure
ON -> secure
2017-07-03 14:29:07 +02:00
Brendan Coles
dff96ce9a0
Re-order includes with Auxiliary::Scanner last
2017-07-01 08:30:17 +00:00
Pearce Barry
a2602bf514
Land #8600 , Add GoAutoDial 3.3 RCE Command Injection / SQL injection module
2017-06-30 17:32:51 -05:00
Pearce Barry
dd530a2953
Minor indentation tweaks.
2017-06-30 17:29:43 -05:00
Pearce Barry
3d4d03c9b4
Land #8575 , Cerberus Helpdesk hash disclosure
2017-06-30 16:02:53 -05:00
Pearce Barry
71b2ddaa2c
Minor doc tweaking.
2017-06-30 15:53:27 -05:00
David Maloney
1cbc4af6b6
Land #8606
...
land's bcook's module search rpc work
2017-06-30 14:58:46 -05:00
James Lee
ada954aab9
Land #8624 , fix mis-ordered kiwi output
2017-06-30 14:23:24 -05:00
Brent Cook
796fe99744
update docs to note that cluster mode is not necessary to exploit
2017-06-30 11:26:35 -04:00
Brent Cook
40f0d36f6b
Land #8615 , add @artkond's DoS module for Cisco CVE-2017-3881
2017-06-30 11:17:09 -04:00
Brent Cook
819d810532
Land #8638 , remove ruby refinement for Rubinious support
2017-06-30 11:13:20 -04:00
Brent Cook
4393b6e563
Improve compatibility with Rubinius (alternate Ruby implementation)
2017-06-30 11:08:17 -04:00
Brent Cook
658b79414b
Land #8634 , Ensure HTTP client sends a Host header if it is passed with a request
2017-06-30 11:03:58 -04:00
Brent Cook
9677fd00c2
Land #8637 , add client-side SSL cert and mac address matchers to rex-socket
2017-06-30 10:53:53 -04:00
Brent Cook
fa79f90e4e
bump rex-socket, add client cert, mac address matching support
2017-06-30 10:46:15 -04:00
Anderson
959f9fe2d2
Updated lib/rex/proto/http/client_request.rb to ensure that the host header is formatted
2017-06-29 12:05:02 -07:00
William Vu
7e1b50ab3b
Land #8629 , AKA (also known as) module reference
2017-06-28 19:15:45 -05:00
Brent Cook
aa8c580aba
updates
2017-06-28 20:14:38 -04:00
Brent Cook
d20036e0fb
revise spelling, add heartbleed and tidy checks
2017-06-28 18:50:20 -04:00
William Vu
43d8c4c5e7
Land #8519 , Apache ActiveMQ file upload exploit
2017-06-28 17:19:39 -05:00
Brent Cook
461ab4501d
add 'Also known as', AKA 'AKA', to module references
2017-06-28 15:53:00 -04:00
William Webb
6349026134
Land #8442 , Exploit module for Backup Exec Windows Agent UaF
2017-06-28 10:39:28 -05:00
Brent Cook
bdc932a235
Land #8603 , Make keyscan active window logging discretionary
2017-06-27 04:09:00 -05:00
Brent Cook
eba8979914
bump payloads
2017-06-27 04:08:15 -05:00
Brent Cook
e08bd84038
Merge branch 'upstream-master' into land-8603-
2017-06-27 04:03:31 -05:00
Brent Cook
cb82bdc6a9
Land #8607 , add error handling to x64 Linux stagers
2017-06-27 03:53:07 -05:00
Brent Cook
0f48afa7ba
Land #8622 , normalize short meterpreter command flags
2017-06-27 02:09:12 -05:00
Brent Cook
4f555120e3
Land #8623 , handle arguments in cmd_previous
2017-06-27 02:00:56 -05:00
Brent Cook
0d9f57ad7c
add @artkond's DoS module for Cisco CVE-2017-3881
...
This makes a few improvements, adds module docs.
2017-06-27 01:53:23 -05:00
OJ
8e1e505730
Fix output of MSV creds dumping in Kiwi
...
The data being pulled out of the MSV credential dump was not being
rendered propertly because it was assumed that all accounts would
provide the same set of hashes/details for each entry found. However,
this was not the case. Some have NTLM & SHA1, others have LM & NTLM,
some have DPAPI when others don't.
This code generates tables based on the values found, and renders those
values in the appropriate columns, and if the values don't exist for
a given account, the column is left blank.
Fixes #8620
2017-06-27 15:43:40 +10:00
William Vu
1637f55c65
Handle ArgumentError when previous gets args
...
Dumb patch.
2017-06-27 00:41:26 -05:00
William Vu
66161b10c5
Land #8455 , post module for mounting VMDKs
2017-06-27 00:35:48 -05:00
OJ
49e34d70c3
Remove uses of multi-char args for meterpreter commands
2017-06-27 13:06:10 +10:00
William Vu
639f341b21
Clean up module
2017-06-26 15:08:37 -05:00
Brent Cook
05c72214ae
Land #8205 , Add Satel SenNet Command Exec Module
2017-06-25 18:01:44 -05:00
Rob Fuller
2918b3af13
Land #8599 , Dynamic DNS updater module
2017-06-25 15:08:22 -05:00
Brent Cook
07e7baebb8
sign my name
2017-06-25 14:59:01 -05:00
Brent Cook
7bc0dcea42
add ipv6 support for CHOST
2017-06-25 14:57:15 -05:00
tkmru
084b211e9b
add x64 stager_sock_reverse src
2017-06-25 16:31:37 +09:00
Brent Cook
269597f994
add initial CHOST support
2017-06-24 18:57:43 -05:00
Brent Cook
eee1eff034
improve resolve / add / delete logic
2017-06-24 18:36:01 -05:00
Brent Cook
b36d56bed3
handle RXDomain on lookup failure
2017-06-24 18:10:50 -05:00
William Webb
bf85386acf
add help switch
2017-06-24 17:45:53 -05:00
Rob Fuller
24fe6ac0fe
Update dns_dyn_update.md
2017-06-24 17:07:56 -05:00
tkmru
0685cb5ab4
update CacheSize
2017-06-25 06:25:07 +09:00