joev
|
4fe407d7ee
|
Move osx persistence to a local exploit.
|
2013-10-12 16:08:22 -05:00 |
Icewall
|
f94b73a580
|
Adding persistence module for OSX
|
2013-10-12 16:06:19 -05:00 |
Tod Beardsley
|
49c629be5a
|
Land #2493, vbulletin exploit
|
2013-10-10 22:11:32 -05:00 |
|
Tod Beardsley
|
cad7329f2d
|
Minor updates to vbulletin admin exploit
|
2013-10-10 22:09:38 -05:00 |
|
Tod Beardsley
|
b3e02d0fd8
|
Land #2477, add specs for ROPDB
|
2013-10-10 15:05:52 -05:00 |
|
Tod Beardsley
|
85112e8704
|
Land #2413, axe callcc
This is the only time callcc is used in the entire codebase, too, so
this apparently removes a roadblack to non-MRI Rubies, so that's nice.
|
2013-10-10 14:55:55 -05:00 |
Meatballs
|
378f403fab
|
Land #2453, Add stdapi_net_resolve_host(s) to Python Meterpreter.
Moves resolve_host post module to multi and depreciates Windows module.
Resolve will now return nil for failed lookups instead of an empty
string.
|
2013-10-10 20:13:06 +01:00 |
William Vu
|
de57cbc67d
|
Land #2497, @todb-r7's author alphabetization
|
2013-10-10 13:00:50 -05:00 |
|
William Vu
|
9b96351ba2
|
Land #2494, OSVDB ref for flashchat_upload_exec
|
2013-10-10 12:58:55 -05:00 |
|
Tod Beardsley
|
4870df14e6
|
Add another mailmap for joev.
|
2013-10-10 10:00:42 -05:00 |
kernelsmith
|
3606aa90a6
|
Land Updated stdapi binaries with railgun fix
|
2013-10-10 01:20:57 -05:00 |
OJ
|
b477ae369b
|
Updated stdapi binaries with railgun fix
Changes are from https://github.com/rapid7/meterpreter/pull/28
|
2013-10-10 16:03:38 +10:00 |
|
kernelsmith
|
adbcace9dd
|
Land #2458, OJ's Meterpreter railgun multi call fix
also [FixRM #8269]
|
2013-10-10 00:38:44 -05:00 |
|
Tod Beardsley
|
4f1e71e222
|
Also this isn't Lua. Deal with commas.
|
2013-10-09 17:30:57 -05:00 |
|
Tod Beardsley
|
c8dc251042
|
Alphabetize authors
Because alphabetizing is cool and makes it easy for humans to find
things in long array lists quickly.
Also, I need to keep my lines changed count up.
|
2013-10-09 17:29:17 -05:00 |
Spencer McIntyre
|
be139beb20
|
Remove windows from title of multi module.
|
2013-10-09 17:11:47 -04:00 |
|
Spencer McIntyre
|
6c382c8eb7
|
Return nil on error, and move the module to post/multi.
|
2013-10-09 16:52:53 -04:00 |
|
Tod Beardsley
|
c91816c4b2
|
Land #2495, fix module ref.
|
2013-10-09 15:05:59 -05:00 |
jvazquez-r7
|
e3014a1e91
|
Fix ZDI Reference
|
2013-10-09 14:56:42 -05:00 |
|
jvazquez-r7
|
4fd599b7e0
|
Land #2483, @wchen-r7's patch for [SeeRM #8458]
|
2013-10-09 14:32:26 -05:00 |
|
jvazquez-r7
|
52574b09cb
|
Add OSVDB reference
|
2013-10-09 14:13:45 -05:00 |
|
jvazquez-r7
|
4f3bbaffd1
|
Clean module and add reporting
|
2013-10-09 13:54:28 -05:00 |
sinn3r
|
1e3b84d39b
|
Update ie_cgenericelement_uaf
|
2013-10-09 13:40:48 -05:00 |
|
jvazquez-r7
|
5c36533742
|
Add module for the vbulletin exploit in the wild
|
2013-10-09 13:12:57 -05:00 |
|
Tod Beardsley
|
9d34a8c894
|
Land #2465, deal with missing cpuinfo bins
[FixRM #8456]
Thanks @ZeroChaos!
|
2013-10-09 13:03:48 -05:00 |
ZeroChaos
|
ce3584194f
|
Merge pull request #1 from todb-r7/land-2465
Fix up PR #2465
|
2013-10-09 10:23:08 -07:00 |
|
Tod Beardsley
|
356263df56
|
Litter some more rescue nil's in there
I hate them but they were there when I got there.
A more sane way to deal with this should happen someday.
|
2013-10-09 12:17:13 -05:00 |
|
Tod Beardsley
|
f95da649f8
|
Deal with missing bins, too.
This could be way more DRY. At least there's a YARD-ish comment.
This fixes up https://github.com/rapid7/metasploit-framework/pull/2465
to be a more complete solution.
[SeeRM #8465]
|
2013-10-09 12:13:44 -05:00 |
|
William Vu
|
3cbea09cc6
|
Land #2492, s/Dyn-DNS/DynDNS/
|
2013-10-09 10:54:43 -05:00 |
|
Tod Beardsley
|
c2c6422078
|
Correct the name of "DynDNS" (not Dyn-DNS)
|
2013-10-09 09:56:07 -05:00 |
|
jvazquez-r7
|
2073c4e6a7
|
Land #2489, @mwulftange :noquotes option for CmdStagerPrintf
|
2013-10-09 08:29:11 -05:00 |
|
Tod Beardsley
|
c84e5c7443
|
Land #2490, new sniffer extenstion binaries
|
2013-10-08 17:15:54 -05:00 |
|
OJ
|
0a194b203d
|
Updated sniffer binaries
These updated binaries include a packet-sniffer fix which results in
sniffing working on x86 builds of Windows 8 and Windows 8.1.
|
2013-10-09 07:38:54 +10:00 |
|
sinn3r
|
2f0120748b
|
Land #2487 - Mark broken tests as pending
|
2013-10-08 15:10:10 -05:00 |
|
sinn3r
|
ef48a4b385
|
Land #2486 - Fix error message backtrace
|
2013-10-08 14:55:39 -05:00 |
Markus Wulftange
|
e895a17722
|
Add 'no quotes' option for CmdStagerPrintf
Exploit developers can use the ':noquotes => true' option to avoid
single quotes surrounding the octal escapes argument.
|
2013-10-08 21:04:28 +02:00 |
|
Tod Beardsley
|
2f670a35c4
|
Land #2488, ref update for ms13-080
|
2013-10-08 13:48:34 -05:00 |
|
sinn3r
|
199bd20b95
|
Update CVE-2013-3893's Microsoft reference
Official patch is out:
http://technet.microsoft.com/en-us/security/bulletin/MS13-080
|
2013-10-08 13:00:03 -05:00 |
|
Tod Beardsley
|
72a35d14f1
|
Mark broken tests as pending
These tests are broken a few different ways.
[SeeRM #8463]
also see: https://github.com/rapid7/metasploit-framework/pull/2477
|
2013-10-08 11:49:42 -05:00 |
David Maloney
|
7d0cf73af7
|
Fix multi-meter_inject error msg
Was trying to coerce the exception class
to string rather than calling .message
Results in a stacktrace.
FIXRM #8460
|
2013-10-08 11:11:38 -05:00 |
|
sinn3r
|
a5bace2425
|
Land #2485 - Removed extra bracket for scripts/meterpreter/vnc.rb
g0tmi1k's version was outdated, so I merged from my branch instead.
|
2013-10-08 10:17:49 -05:00 |
|
sinn3r
|
db92709d33
|
Remove extra bracket
|
2013-10-08 10:17:08 -05:00 |
|
jvazquez-r7
|
2593c06e7c
|
Land #2412, @mwulftange's printf cmd stager
|
2013-10-08 09:08:29 -05:00 |
|
Markus Wulftange
|
6f7d513f6e
|
Another clean up and simplification of CmdStagerPrintf
|
2013-10-08 07:22:09 +02:00 |
|
Tod Beardsley
|
8b9ac746db
|
Land #2481, deprecate linksys cmd exec module
|
2013-10-07 20:44:04 -05:00 |
|
sinn3r
|
c10f0253bc
|
Land #2472 - Clean up the way Apple Safari UXSS aux module does data collection
|
2013-10-07 15:47:28 -05:00 |
|
Tod Beardsley
|
e0ce444896
|
Merging release back to master
|
2013-10-07 15:33:16 -05:00 |
|
sinn3r
|
f7f6abc1dd
|
Land #2479 - Add Joev to the wolfpack
|
2013-10-07 15:30:23 -05:00 |
|
sinn3r
|
f4000d35ba
|
Use RopDb for ms13_069
Target tested
|
2013-10-07 15:24:01 -05:00 |
|
sinn3r
|
7222e3ca49
|
Use RopDb for ms13_055_canchor.
All targets tested.
|
2013-10-07 15:09:36 -05:00 |