Commit Graph

48369 Commits (4a759fd048594d36936b5373cc073f9bcfbd8df2)

Author SHA1 Message Date
Brent Cook 85a857d115
Land #10567, Bump kiwi version 2018-08-31 15:25:40 -05:00
Wei Chen 34944ff5be
Land #10568, Update weblogic module docs 2018-08-31 14:05:46 -05:00
asoto-r7 da7a29f715
Documentation update 2018-08-31 13:57:41 -05:00
Metasploit 21f2b5e298
automatic module_metadata_base.json update 2018-08-31 11:55:00 -07:00
asoto-r7 8fe8bf62e3
Renamed to match existing `struts2_content_type_ognl` and improved comments 2018-08-31 13:48:22 -05:00
Wei Chen 0dea5fcfd9
Land #10565, Add Dolibarr ERP/CRM Auxiliary Module 2018-08-31 13:47:46 -05:00
asoto-r7 35022d8332
Added payload upload+execution and OGNL-specific URI encoding 2018-08-31 13:39:42 -05:00
James Barnett 1e6f19e1de
Update db_save message when no valid service connected
Also add the current data service name to db_status
2018-08-31 12:54:08 -05:00
James Barnett bc4a0345dc
Fix bug preventing yaml connections 2018-08-31 11:26:08 -05:00
Shelby Pace aa9d0d7c6c
using uri_encode 2018-08-31 08:41:25 -05:00
Shelby Pace b1151b9d12
modified login_uri 2018-08-31 08:08:46 -05:00
Jacob Robles e49435a766
Update weblogic module docs
Update the module docs to match the new name
of the module.
2018-08-31 06:00:41 -05:00
OJ 41b0dc1dfe
Update label for the kiwi extention to match latest ver
I'll also update this PR with the udpated binaries when the paylaods
repo has landed https://github.com/rapid7/metasploit-payloads/pull/298
2018-08-31 09:31:57 +10:00
James Barnett 6ddf4f4c22
Refactor db_connect for updated usage
db_connect will now automatically save the data service it connects to
db_save will be used to set the current data service as default
add a db_remove command to delete a saved data service
2018-08-30 18:19:14 -05:00
Metasploit cb026f9f82
automatic module_metadata_base.json update 2018-08-30 14:06:54 -07:00
William Vu b9c9064c22
Land #10566, struts2_rest_xstream normalize_uri 2018-08-30 15:59:13 -05:00
William Vu 7c7f63df45 Fix missing normalize_uri in struts2_rest_xstream
I missed this one previously. May not be necessary but nice to have.
2018-08-30 15:56:43 -05:00
Shelby Pace 628ea736a0
delete newline 2018-08-30 15:54:04 -05:00
Shelby Pace d0cc05b074
added documentation 2018-08-30 15:28:52 -05:00
Shelby Pace 42af28a86a
printing and storing credentials 2018-08-30 14:17:37 -05:00
Shelby Pace 85c4abac99
storing credentials 2018-08-30 13:59:00 -05:00
Metasploit acca079cd1
automatic module_metadata_base.json update 2018-08-30 10:25:18 -07:00
Shelby Pace a9376266bc
Land #10484, Add PhpMyAdmin password extractor 2018-08-30 12:16:17 -05:00
Shelby Pace 924e61c5c1
Added check and removed register_options 2018-08-30 12:13:39 -05:00
Metasploit f8c4471900
Weekly dependency update 2018-08-30 10:05:23 -07:00
Metasploit 6ba9307a61
automatic module_metadata_base.json update 2018-08-30 08:55:58 -07:00
Shelby Pace 6ec8522786
Land #10482, Add Network Manager VPNC Privesc 2018-08-30 10:46:54 -05:00
Metasploit ad4266fb4e
automatic module_metadata_base.json update 2018-08-30 04:20:03 -07:00
Jacob Robles 9d3e1c1942
Land #10540, weblogic_deserialize, add check method and linux target 2018-08-30 06:08:03 -05:00
Metasploit bb8f3bb5d4
automatic module_metadata_base.json update 2018-08-30 04:04:38 -07:00
Jacob Robles 953bafc7e7
Land #10545, foxit fix generated strings, update doc 2018-08-30 05:55:44 -05:00
Matthew Kienow 5a14974f78
Prompt user to persist data service connection 2018-08-29 18:11:42 -04:00
Matthew Kienow d32297871a
Update data_services cmd to new db_connect cmd 2018-08-29 18:11:42 -04:00
Matthew Kienow f8bef79ba5
Add environment variable hash for cmd being run
Convert input to keyword argument
2018-08-29 18:11:31 -04:00
Clément Notin d489cd7248
ms17_010_eternalblue: use SMBDomain value when provided instead of ignoring it 2018-08-29 23:53:58 +02:00
Jacob Robles 3161beff69
Prefer opt hash 2018-08-29 14:56:31 -05:00
Josh Hale 71a7ca4d7d Use env(1) instead of export 2018-08-29 14:51:20 -05:00
Metasploit d747613149
automatic module_metadata_base.json update 2018-08-29 12:41:29 -07:00
Adam Cammack a57e5ac5c0
Land #10594, Remove trailing space from CVE number 2018-08-29 14:31:21 -05:00
bwatters-r7 5ec2bc061e
Land # 10548, fix Gemfile.lock
Merge branch 'land-10548' into upstream-master
2018-08-29 14:28:52 -05:00
Jacob Robles bc4442694e
Fix Windows target options, remove comspec 2018-08-29 14:23:00 -05:00
James Barnett 1c24dabdb1
Update test for text changes 2018-08-29 14:13:35 -05:00
Ben Schmeckpeper c4d697a629
Remove trailing space from CVE identifier
ASUS Net4Switch ipswcom exploit mistakenly included a trailing space at the end of its CVE reference.
2018-08-29 14:12:49 -05:00
Shelby Pace 7915c4ac6c
getting user credentials in response 2018-08-29 13:59:06 -05:00
James Barnett d6d9f9c675
Handle case for no connection for save and disconnect 2018-08-29 13:54:20 -05:00
bwatters-r7 0885bc478c
fix gemfile 2018-08-29 13:04:07 -05:00
James Barnett 133892629e
Dont allow invalid config file characters
Also only save cert when it is present
2018-08-29 12:49:03 -05:00
Dhiraj Mishra 25145004b2
Removing arch 2018-08-29 22:05:57 +05:30
James Barnett f7ecd4436d
Even more messaging changes 2018-08-29 11:32:01 -05:00
Metasploit b5b06f0fb0
automatic module_metadata_base.json update 2018-08-29 09:24:52 -07:00