infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
49,635 Commits
7 Branches
556 Tags
421 MiB
Commit Graph

25317 Commits (58dde9ff33fe05b37cb8047658fa0f42ed00d025)

Author SHA1 Message Date
Brendan Coles 01ed57cbb3 Remove check for nosuid 2018-11-25 01:53:07 +00:00
Brendan Coles ff23a006b7 cleanup 2018-11-25 00:16:39 +00:00
Aaron Ringo 1783617770 consolelock check updated to use id, payload upload changed, documentation updated, misc formatting 2018-11-24 15:10:21 -06:00
h00die 945755b058 add custom php_imap target 2018-11-24 14:18:13 -05:00
h00die 45f2c5beb2 update php_imap_open docs 2018-11-24 07:26:42 -05:00
h00die e36cef3b96 e107 exploitable now 2018-11-23 20:16:53 -05:00
L f4cbdc8e3e No Threads in datastore 2018-11-23 17:15:33 +08:00
William Vu 8a402da056 Explain "junk" in buffer for morris_fingerd_bof 
And unrelated whitespace changes because I suck.
 2018-11-22 23:15:12 -06:00
Brent Cook a59913434d
Land #10916, Xorg SUID privesc 2018-11-21 19:46:11 -06:00
Brent Cook 5d9195fe72
Land #10981, start printjob docs and bug fixes 2018-11-21 16:35:02 -06:00
Brent Cook 5fed559264
Land #10997, Remove harmful default command to execute 2018-11-21 16:19:40 -06:00
asoto-r7 96ede80dc4
Land #10876, ibm_mq_enum: IBM WebSphere MQ Name and Version Enumeration 2018-11-21 16:10:59 -06:00
asoto-r7 a3131f15de
ibm_mq_enum: Code cleanup, server channel and general exception handling improvements 2018-11-21 16:09:18 -06:00
Adam Cammack 188d94027c
Land #10996, Check `check` code for ms15-034 2018-11-21 14:45:56 -06:00
David Yates e706e2b58d
Remove harmful default command to execute 2018-11-21 11:09:13 +02:00
L ae3538952a Fix ms15-034 module 2018-11-21 12:31:56 +08:00
Green-m 2197da4cd9
Fix code as jrobles suggest. 2018-11-21 11:24:50 +08:00
h00die acf421ffb0 remove eol spaces 2018-11-20 19:45:17 -05:00
h00die 31ad58fb91 edb and author 2018-11-20 19:30:43 -05:00
h00die 4111a61e1a fix module description 2018-11-20 18:35:20 -05:00
h00die 4c59a271e2 added suitecrm to imap_open exploit 2018-11-20 18:33:42 -05:00
asoto-r7 7084538b8c
ibm_mq_channel_brute: Exception handling when channel.length > 20 chars 2018-11-20 16:24:17 -06:00
asoto-r7 d2a5b966f3
Land #10875, IBM WebSphere MQ Channel Name Bruteforce auxiliary module 2018-11-20 16:23:23 -06:00
Shelby Pace 288d78d372
Land #10352, Add check/response for CVE-2017-12149 2018-11-20 13:11:05 -06:00
Brent Cook d5d8216377
Land #10977, Add documentation and some enhancement to freesshd_authbypass module 2018-11-20 11:44:49 -06:00
Brent Cook bccb0972cf
Land #10984, don't examine a nil object in ms15_034_ulonglongadd 2018-11-20 08:37:48 -06:00
Shelby Pace 63a2396626 updated testing branch to branch off master 2018-11-20 08:14:19 -06:00
Brendan Coles eb17c45000 Add Linux Nested User Namespace idmap Limit Local Privilege Escalation module 2018-11-20 14:10:28 +00:00
Brendan Coles 901b51f247
Update modules/auxiliary/scanner/http/iis_shortname_scanner.rb 
Co-Authored-By: egre55 <34132245+egre55@users.noreply.github.com>
 2018-11-20 11:13:17 +00:00
Brendan Coles 6c382ba711
Update modules/auxiliary/scanner/http/iis_shortname_scanner.rb 
Co-Authored-By: egre55 <34132245+egre55@users.noreply.github.com>
 2018-11-20 11:13:05 +00:00
Brendan Coles 5e513b209d
Update modules/auxiliary/scanner/http/iis_shortname_scanner.rb 
Co-Authored-By: egre55 <34132245+egre55@users.noreply.github.com>
 2018-11-20 11:12:51 +00:00
Green-m 9884bea84e
Update the reference link. 2018-11-20 17:39:01 +08:00
Green-m 9f573d6f27
Fix code as jrobles suggest. 2018-11-20 16:54:22 +08:00
Tim W 44b1b6fe31 fix forking 2018-11-20 15:58:55 +08:00
Shelby Pace 52df29ebcc test on branch off master 2018-11-19 15:08:38 -06:00
Brent Cook 509e1c2587
Land #10973, Rework DisclosureDate check in msftidy, including ISO 8601 support 2018-11-19 10:46:18 -06:00
h00die a28feed7d8 fix normalize and date 2018-11-19 04:00:58 -05:00
Shaksham Jaiswal d904b93ec9
fixed is_vul 2018-11-19 13:39:08 +05:30
h00die 4b09584047 php_imap_open_rce 2018-11-18 21:28:19 -05:00
egre55 4a22656005 fixes 2018-11-18 21:56:51 +00:00
egre55 8b63c85bd2 fixes 2018-11-18 21:21:28 +00:00
Brendan Coles 467e0877f5 res.code 2018-11-18 12:40:09 +00:00
h00die 7ecdaa09c5 start printjob docs and bug fixes 2018-11-17 21:17:12 -05:00
Imran E. Dawoodjee b679bfa3d9
Carriage return errors fixed. 2018-11-18 03:29:17 +08:00
Imran E. Dawoodjee fd0f40a141
Add PowerShell as a separate target then set it as default. 2018-11-18 03:20:48 +08:00
William Vu 90b9204703 Update DisclosureDate to ISO 8601 in my modules 
Basic msftidy fixer:

diff --git a/tools/dev/msftidy.rb b/tools/dev/msftidy.rb
index 9a21b9e398..e9ff2b21e5 100755
--- a/tools/dev/msftidy.rb
+++ b/tools/dev/msftidy.rb
@@ -442,6 +442,8 @@ class Msftidy
     # Check disclosure date format
     if @source =~ /["']DisclosureDate["'].*\=\>[\x0d\x20]*['\"](.+?)['\"]/
       d = $1  #Captured date
+      File.write(@full_filepath, @source.sub(d, Date.parse(d).to_s))
+      fixed('Probably updated traditional DisclosureDate to ISO 8601')
       # Flag if overall format is wrong
       if d =~ /^... (?:\d{1,2},? )?\d{4}$/
         # Flag if month format is wrong
 2018-11-16 12:18:28 -06:00
Imran E. Dawoodjee 08b3efa046
Enhanced module and added documentation. 2018-11-16 21:18:45 +08:00
Aaron Ringo a174c606aa Changed SELINUX check to use built in methods 2018-11-16 04:22:18 -06:00
h00die 189f29e534
Land #10572 eaton ssh private key scanner 2018-11-15 17:16:36 -05:00
h00die de014f0599 remove variable only used once 2018-11-15 17:14:13 -05:00
h00die 8b4cf2c3e2 Merge branch 'master' of https://github.com/rapid7/metasploit-framework into capture_docs2 2018-11-15 17:02:50 -05:00
h00die 3d53170694 fail_with instead of error and return 2018-11-15 17:01:52 -05:00
Tim W 420be60900 add CVE-2018-4237 2018-11-15 08:48:10 +08:00
Chris Higgins 4987f67b9b
Land #10925, smb_login error/status message 2018-11-14 13:19:04 -06:00
Jacob Robles 795aa3c99c
Land #10828, git submodule url exec CVE-2018-17456 2018-11-14 12:39:13 -06:00
Jacob Robles 798d3156bc
Print git command for module 2018-11-14 10:57:36 -06:00
Green-m f43aaac290
Clean code. 2018-11-14 16:48:39 +08:00
Aaron Ringo 4fc047db87 Added advanced option to check console lock on linux systems, default true & updated docs 2018-11-13 22:33:12 -06:00
Green-m 7cc4d09a92
Clean code. 2018-11-14 10:35:38 +08:00
Shelby Pace 5e85683228
removed to_s from string 2018-11-13 15:28:55 -06:00
BrianWGray 3849d5de18 resolve description update request 2018-11-13 16:21:43 -05:00
Shelby Pace ac8932c144 update 9631 to a current branch 2018-11-13 15:15:25 -06:00
Alex Gonzalez da134f06e3
Updated check method 
Fixed check method and redundant variable declarations
 2018-11-13 16:01:40 -05:00
Brent Cook f2712ecdf6
Land #10607, Add External Module: office365userenum.py 2018-11-13 10:57:05 -06:00
Green-m 7a4770790c
Land #10938, add docs for modules and fix bug. 
Add docs for auxiliary module http_basic/imap/mysql, and fix a bug
in modules/auxiliary/server/capture/mysql.rb
 2018-11-13 16:22:03 +08:00
thomas.labadie 11a2fa7f0d Space at EOL removed from description 2018-11-13 00:23:21 +01:00
thomas.labadie 9d1554498d WP GDPR Compliance plugin exploit - privsec to admin registering 2018-11-12 23:33:47 +01:00
Aaron Ringo 538055c406 Initial documentation for Xorg Privesc Module 
killed white spaces
 2018-11-12 15:44:13 -06:00
Green-m 388aebc335
Add exploit module for spark unauthenticated rce. 2018-11-12 17:07:50 +08:00
Imran E. Dawoodjee 16d146fd59
Fixing indentation. 2018-11-12 13:24:00 +08:00
Imran E. Dawoodjee 3e4df06500
Some more modifications 
Placed contents of request_post into execute_command
Randomized fingerprint with rand_text_alpha(12)
Spaces at EOL fixed
Normalized target URI
 2018-11-12 13:04:42 +08:00
Imran E. Dawoodjee 818cb37aca
Implemented changes recommended by @bcoles. 2018-11-12 12:26:23 +08:00
Aaron Ringo ef7fc783be Added Selinux check, changed version check, retested on all platforms 2018-11-11 12:34:30 -06:00
Brendan Coles a5429d21a6
Update modules/exploits/multi/local/xorg_x11_suid_server.rb 
Co-Authored-By: aringo <ringo.aaron@gmail.com>
 2018-11-11 07:39:32 -06:00
Brendan Coles 2a7b18bcbf
Update modules/exploits/multi/local/xorg_x11_suid_server.rb 
Co-Authored-By: aringo <ringo.aaron@gmail.com>
 2018-11-11 07:38:42 -06:00
Brendan Coles 40bc44d2b6 Add ForceExploit to Linux local modules 2018-11-11 09:37:56 +00:00
Aaron Ringo e6f548c5f4 added meterpreter, took out in session, moved to exploits/multi/local 2018-11-11 01:43:36 -06:00
BrianWGray 1c2da8a5c8 correct trailing space issue 2018-11-10 15:40:03 -05:00
BrianWGray 33f624bbb2 Module updated to reflect requested changes 2018-11-10 14:36:06 -05:00
Brendan Coles 1f14a9846d
Land #10767, Add Cisco Prime Infrastructure remote root exploit 2018-11-10 17:08:16 +00:00
h00die bf15fa0770 hash not password for mysql 2018-11-09 18:32:21 -05:00
h00die c31c75c790 fix mysql capture store creds 2018-11-09 18:18:50 -05:00
Green-m 981893a8bf
Merge branch 'master' into sparkrce 2018-11-09 14:12:33 +08:00
Aaron Ringo b93f14a5c2 Fixed some PR feedback, still working on adding meterpreter and cleanup 2018-11-08 22:10:46 -06:00
Aaron Ringo 3f3bee6a79 added version check 2018-11-08 22:08:11 -06:00
Aaron Ringo 012c8a450f Feedback from PR work cont. changed loop, formatting errors, options 2018-11-08 22:08:11 -06:00
Aaron Ringo adb8be7f9f includes partially implemented feedback from PR 2018-11-08 22:08:11 -06:00
Brendan Coles 18bf58e547 Update modules/exploits/openbsd/local/xorg_x11_suid_server.rb 
Co-Authored-By: aringo <ringo.aaron@gmail.com>
 2018-11-08 22:08:11 -06:00
Brendan Coles 8c4eb5f741 Update modules/exploits/openbsd/local/xorg_x11_suid_server.rb 
Co-Authored-By: aringo <ringo.aaron@gmail.com>
 2018-11-08 22:08:11 -06:00
Brendan Coles 84b79e6787 Update modules/exploits/openbsd/local/xorg_x11_suid_server.rb 
Co-Authored-By: aringo <ringo.aaron@gmail.com>
 2018-11-08 22:08:11 -06:00
Aaron Ringo 7feb960d9b Initial add of Xorg SUID privesc 2018-11-08 22:08:11 -06:00
h00die 792b451f40 capture server docs and updates 2018-11-08 21:23:27 -05:00
root f192b50a8e Catch exceptions 2018-11-08 18:47:56 +00:00
root 1fbf779f9c Added more verbose output 2018-11-08 18:35:15 +00:00
root 88e4d384d2 increased default timeout value 2018-11-08 16:13:55 +00:00
h00die 3c6f2157ae
land #10895 fix vmware_http_login undefined variables 2018-11-07 08:45:51 -05:00
Aaron Ringo 9dd0f2a5ea modified to allow unix cmd for testing and other targets not supported, took out interpolation,notes section re-added 
added notes section back in
 2018-11-06 20:45:20 -06:00
Jacob Robles 682433f62e
smb_login error/status message 2018-11-05 17:49:58 -06:00
Jeffrey Martin dd57b27652
Rename `hash` to `generate_process_hash` 
In the interest of compatibility this uses a more descriptive name for
the process hash creation method instead of overriding ruby's hash method.
See https://docs.ruby-lang.org/en/2.0.0/Hash.html
 2018-11-05 17:16:16 -06:00
h00die aff4ef0752
land #10912 moving polycom exploit to misc folder 2018-11-05 16:54:24 -05:00