kaospunk
533643fe2c
Host Information Enumeration via NTLM Authentication
...
This aux module makes requests to resources on the target server in
an attempt to find resources which permit NTLM authentication. For
resources which permit NTLM authentication a blank NTLM type 1 message
is sent to enumerate a a type 2 message from the target server. The type
2 message is then parsed for information such as the Active Directory
domain and NetBIOS name.
The user can provide their own TARGETURIS file which contains URIs
to request to attempt to get a 401 with NTLM. This PR also includes
a list of URLs that can be used as the default.
2013-09-04 21:39:02 -04:00
jgor
84e4b42f6b
allow 302 redirects
2013-09-04 16:59:42 -05:00
jgor
66d5af5a11
remove dependency on tmpl=component
2013-09-04 16:58:49 -05:00
jvazquez-r7
b6245eea72
Update target info
2013-09-04 16:43:26 -05:00
jvazquez-r7
34b3ee5e17
Update ranking and description
2013-09-04 16:10:15 -05:00
jvazquez-r7
94125a434b
Add module for ZDI-13-205
2013-09-04 15:57:22 -05:00
Tab Assassin
9f3a5dc5d0
Retab new modules
2013-09-04 12:32:53 -05:00
Tab Assassin
999b802468
Merge branch 'master' into retab/rumpus
2013-09-04 12:32:05 -05:00
James Lee
b913fcf1a7
Add a proper PrependFork for linux
...
Also fixes a typo bug for AppendExit
2013-09-04 00:15:07 -05:00
Meatballs
3066e7e19d
ReverseConnectRetries ftw
2013-09-04 00:16:19 +01:00
Meatballs
1471a4fcef
Fixes an error in file_dropper where @dropped_files is nil
...
causing an exception to be raised and on_new_session to fail.
I have moved super to the top of the chain so it always gets
called regardless.
2013-09-03 23:45:41 +01:00
Meatballs
c687f23b81
Better error handling
2013-09-03 22:57:27 +01:00
Meatballs
a8e77c56bd
Updates
2013-09-03 22:46:20 +01:00
William Vu
cc838401fb
Land #2314 , metasploit_pcaplog title correction
2013-09-03 15:21:00 -06:00
William Vu
b9ceed0c53
Land #2313 , lockout_keylogger title correction
2013-09-03 15:20:20 -06:00
Meatballs
ac0c493cf9
Merge branch 'master' of github.com:rapid7/metasploit-framework into local_win_priv_keyring
2013-09-03 21:33:11 +01:00
Tab Assassin
cbb9984358
Merge branch 'master' into retab/rumpus
2013-09-03 14:11:16 -05:00
James Lee
264031ae70
Land #2324 , make retab backups optional
2013-09-03 12:31:32 -05:00
Tod Beardsley
f3ab6d1830
Retab should optionally keep local backups
...
Local backups are generally not needed since you can just git checkout
old versions anyway before committing. It was nice to have during dev
but generally shouldn't be done now.
2013-09-03 11:54:31 -05:00
Tab Assassin
84aaf2334a
Retab new material
2013-09-03 11:47:26 -05:00
Brandon Turner
4259bc6211
Merge pull request #2323 from jvazquez-r7/fix_python_load
...
Fix require on Python bind_tcp stager
2013-09-03 09:47:06 -07:00
Tab Assassin
0c1e6546af
Update from master
2013-09-03 11:45:39 -05:00
jvazquez-r7
791967282b
Land #2322 , @todb-r7's fix to make File.open msftidy compliant
2013-09-03 11:09:48 -05:00
jvazquez-r7
ff6ee5b145
Fix require
2013-09-03 10:52:52 -05:00
Tod Beardsley
6daa90a4a5
Msftidy: use binary on File.open always
...
msftidy is complaining, here:
keylog_recorder.rb:116 - [WARNING] File.open without binary mode
Not sure how this managed to hit upstream/master with msftidy warnings.
Protip, use an msftidy pre-commit hook. We have just such a hook script
in tools/dev, as a matter of fact, so it's just a symlink away:
https://github.com/rapid7/metasploit-framework/blob/master/tools/dev/pre-commit-hook.rb
2013-09-03 10:35:50 -05:00
Boris
a23c1f1ad4
added additional "include"
2013-09-03 19:34:37 +04:00
Tod Beardsley
8acabe457c
Trailing whitespace fixup
2013-09-03 10:32:48 -05:00
Tod Beardsley
ca8dacb93b
Minor module description updates for grammar.
2013-09-03 10:31:45 -05:00
Tod Beardsley
a88c63cfba
Merge branch 'upstream-master'
2013-09-03 10:22:54 -05:00
jvazquez-r7
2951e8cf18
Land #2315 , @wchen-r7's CVE coverage
2013-09-03 08:22:32 -05:00
Meatballs
b8f9f1d076
Land #2310 , Minor Python Meterpreter Issues
...
- Windows file mode (removes duplicated b)
- Socket timeout value increased
- SetSID for nix systems
[Closes #2310 ]
2013-09-02 16:28:50 +01:00
Boris
9a33c674aa
RHOST, RPORT removed, Tries option added
2013-09-01 22:58:22 +04:00
jvazquez-r7
560d384633
Do first modification to Auxiliary::Login and Auxiliary::AuthBrute
2013-08-31 23:38:04 -05:00
sinn3r
ac0b14e793
Add the missing CVE reference
...
Was looking at all the 2013 exploit modules for missing CVE references
2013-08-31 18:54:16 -05:00
sinn3r
bcc0152274
Correct metasploit_pcaplog's naming style
...
The naming style nazi is in town. ph33r.
2013-08-31 18:25:06 -05:00
sinn3r
a4bcc1f82f
Correct module naming style
...
You know what it is.
2013-08-31 18:17:06 -05:00
Boris
28ca62d60f
New option added. Names now random. Dos check added
2013-08-31 13:18:22 +04:00
sinn3r
0736677a01
Land #2299 - Add powershell support & removes ADODB.Stream requirement
2013-08-31 00:32:23 -05:00
sinn3r
c4aa557364
Land #2292 - Fix the way to get a session over a telnet connection
2013-08-31 00:29:25 -05:00
Tab Assassin
41e4375e43
Retab modules
2013-08-30 16:28:54 -05:00
Tab Assassin
7e5e0f7fc8
Retab lib
2013-08-30 16:28:33 -05:00
Spencer McIntyre
d84939c83b
Fixes three minor issues in the python meterpreter.
2013-08-30 15:31:40 -04:00
Tod Beardsley
1b878539fe
Merge branch 'upstream-master'
2013-08-30 13:14:40 -05:00
jvazquez-r7
83c8680e85
Update authors list
2013-08-30 13:14:35 -05:00
sinn3r
8eccb040bc
Correct module title
2013-08-30 13:14:35 -05:00
sinn3r
4e808a41a1
Correct file name
2013-08-30 13:14:35 -05:00
sinn3r
6a29a3655d
Fix typos
2013-08-30 13:14:35 -05:00
sinn3r
20b3452cd2
Add CVE-2013-3184 (MS13-058) CFlatMarkupPointer Use After Free
...
Please see module description for more info.
2013-08-30 13:14:34 -05:00
jvazquez-r7
be06e67719
Fix typo
2013-08-30 13:14:34 -05:00
jvazquez-r7
0bebf04293
Add module for ZDI-13-207
2013-08-30 13:14:34 -05:00