Brent Cook
85a857d115
Land #10567 , Bump kiwi version
2018-08-31 15:25:40 -05:00
Wei Chen
34944ff5be
Land #10568 , Update weblogic module docs
2018-08-31 14:05:46 -05:00
asoto-r7
da7a29f715
Documentation update
2018-08-31 13:57:41 -05:00
Metasploit
21f2b5e298
automatic module_metadata_base.json update
2018-08-31 11:55:00 -07:00
asoto-r7
8fe8bf62e3
Renamed to match existing `struts2_content_type_ognl` and improved comments
2018-08-31 13:48:22 -05:00
Wei Chen
0dea5fcfd9
Land #10565 , Add Dolibarr ERP/CRM Auxiliary Module
2018-08-31 13:47:46 -05:00
asoto-r7
35022d8332
Added payload upload+execution and OGNL-specific URI encoding
2018-08-31 13:39:42 -05:00
James Barnett
1e6f19e1de
Update db_save message when no valid service connected
...
Also add the current data service name to db_status
2018-08-31 12:54:08 -05:00
James Barnett
bc4a0345dc
Fix bug preventing yaml connections
2018-08-31 11:26:08 -05:00
Shelby Pace
aa9d0d7c6c
using uri_encode
2018-08-31 08:41:25 -05:00
Shelby Pace
b1151b9d12
modified login_uri
2018-08-31 08:08:46 -05:00
Jacob Robles
e49435a766
Update weblogic module docs
...
Update the module docs to match the new name
of the module.
2018-08-31 06:00:41 -05:00
OJ
41b0dc1dfe
Update label for the kiwi extention to match latest ver
...
I'll also update this PR with the udpated binaries when the paylaods
repo has landed https://github.com/rapid7/metasploit-payloads/pull/298
2018-08-31 09:31:57 +10:00
James Barnett
6ddf4f4c22
Refactor db_connect for updated usage
...
db_connect will now automatically save the data service it connects to
db_save will be used to set the current data service as default
add a db_remove command to delete a saved data service
2018-08-30 18:19:14 -05:00
Metasploit
cb026f9f82
automatic module_metadata_base.json update
2018-08-30 14:06:54 -07:00
William Vu
b9c9064c22
Land #10566 , struts2_rest_xstream normalize_uri
2018-08-30 15:59:13 -05:00
William Vu
7c7f63df45
Fix missing normalize_uri in struts2_rest_xstream
...
I missed this one previously. May not be necessary but nice to have.
2018-08-30 15:56:43 -05:00
Shelby Pace
628ea736a0
delete newline
2018-08-30 15:54:04 -05:00
Shelby Pace
d0cc05b074
added documentation
2018-08-30 15:28:52 -05:00
Shelby Pace
42af28a86a
printing and storing credentials
2018-08-30 14:17:37 -05:00
Shelby Pace
85c4abac99
storing credentials
2018-08-30 13:59:00 -05:00
Metasploit
acca079cd1
automatic module_metadata_base.json update
2018-08-30 10:25:18 -07:00
Shelby Pace
a9376266bc
Land #10484 , Add PhpMyAdmin password extractor
2018-08-30 12:16:17 -05:00
Shelby Pace
924e61c5c1
Added check and removed register_options
2018-08-30 12:13:39 -05:00
Metasploit
f8c4471900
Weekly dependency update
2018-08-30 10:05:23 -07:00
Metasploit
6ba9307a61
automatic module_metadata_base.json update
2018-08-30 08:55:58 -07:00
Shelby Pace
6ec8522786
Land #10482 , Add Network Manager VPNC Privesc
2018-08-30 10:46:54 -05:00
Metasploit
ad4266fb4e
automatic module_metadata_base.json update
2018-08-30 04:20:03 -07:00
Jacob Robles
9d3e1c1942
Land #10540 , weblogic_deserialize, add check method and linux target
2018-08-30 06:08:03 -05:00
Metasploit
bb8f3bb5d4
automatic module_metadata_base.json update
2018-08-30 04:04:38 -07:00
Jacob Robles
953bafc7e7
Land #10545 , foxit fix generated strings, update doc
2018-08-30 05:55:44 -05:00
Matthew Kienow
5a14974f78
Prompt user to persist data service connection
2018-08-29 18:11:42 -04:00
Matthew Kienow
d32297871a
Update data_services cmd to new db_connect cmd
2018-08-29 18:11:42 -04:00
Matthew Kienow
f8bef79ba5
Add environment variable hash for cmd being run
...
Convert input to keyword argument
2018-08-29 18:11:31 -04:00
Clément Notin
d489cd7248
ms17_010_eternalblue: use SMBDomain value when provided instead of ignoring it
2018-08-29 23:53:58 +02:00
Jacob Robles
3161beff69
Prefer opt hash
2018-08-29 14:56:31 -05:00
Josh Hale
71a7ca4d7d
Use env(1) instead of export
2018-08-29 14:51:20 -05:00
Metasploit
d747613149
automatic module_metadata_base.json update
2018-08-29 12:41:29 -07:00
Adam Cammack
a57e5ac5c0
Land #10594 , Remove trailing space from CVE number
2018-08-29 14:31:21 -05:00
bwatters-r7
5ec2bc061e
Land # 10548, fix Gemfile.lock
...
Merge branch 'land-10548' into upstream-master
2018-08-29 14:28:52 -05:00
Jacob Robles
bc4442694e
Fix Windows target options, remove comspec
2018-08-29 14:23:00 -05:00
James Barnett
1c24dabdb1
Update test for text changes
2018-08-29 14:13:35 -05:00
Ben Schmeckpeper
c4d697a629
Remove trailing space from CVE identifier
...
ASUS Net4Switch ipswcom exploit mistakenly included a trailing space at the end of its CVE reference.
2018-08-29 14:12:49 -05:00
Shelby Pace
7915c4ac6c
getting user credentials in response
2018-08-29 13:59:06 -05:00
James Barnett
d6d9f9c675
Handle case for no connection for save and disconnect
2018-08-29 13:54:20 -05:00
bwatters-r7
0885bc478c
fix gemfile
2018-08-29 13:04:07 -05:00
James Barnett
133892629e
Dont allow invalid config file characters
...
Also only save cert when it is present
2018-08-29 12:49:03 -05:00
Dhiraj Mishra
25145004b2
Removing arch
2018-08-29 22:05:57 +05:30
James Barnett
f7ecd4436d
Even more messaging changes
2018-08-29 11:32:01 -05:00
Metasploit
b5b06f0fb0
automatic module_metadata_base.json update
2018-08-29 09:24:52 -07:00