8444038c62
Add eval alternative to PHP Meterpreter to bypass suhosin
...
See https://suhosin.org/stories/index.html for more information on this system.
2017-07-23 22:04:09 -07:00
b75530b978
Fix an issue where 'sleep' with Python Meterpreter appears to fail.
2017-07-23 05:38:06 -07:00
302b66c2d8
add payloads support for OSX with python meterpreter
2017-07-23 05:26:59 -07:00
072b0dc90b
Hide errors in Windows Meterpreter sessions
...
In Windows Meterpreter sessions, set newly created threads via
SetThreadErrorMode to not display error popups when there are failures.
2017-07-23 05:09:01 -07:00
50474a1ea7
Bump version of framework to 4.15.4
2017-07-21 10:03:44 -07:00
c5101b71a0
bump rex-core, reverting threadsafe select changes
2017-07-20 23:21:19 -05:00
510ff888fd
Land #8439 , native OSX meterpreter support
2017-07-20 22:01:49 -05:00
1d0db02a64
bump payloads
2017-07-20 09:10:19 -05:00
cc3168933f
update mettle payloads, template generator
2017-07-18 13:13:38 -05:00
39b2e824ec
Bump version of framework to 4.15.3
2017-07-17 15:43:31 -07:00
3ad4ff69b4
try and hard lock rex-powershell version
...
remove this later when the issues with this gem release are addressed
2017-07-17 15:25:26 -05:00
ecce28e8b9
revert rex-powershell back to previous version
...
some things need to be worked out in framework before
this gem version is ready for release
2017-07-17 15:04:43 -05:00
f80c053114
Bump version of framework to 4.15.2
2017-07-17 12:01:22 -07:00
ea02558390
bump prerelease gems to fix specific issues with Framework
...
rb-readline has an issue with the latest curses release
dnsruby changes the global thread behavior to abort on exception
2017-07-17 09:26:14 -05:00
d6ee0ca94d
Merge branch 'master' into kill-cucumber
2017-07-14 10:23:38 -05:00
03691cc35f
Bump version of framework to 4.15.1
2017-07-12 20:08:07 -07:00
dbef4ee816
kill cucumber in framework
2017-07-12 08:00:29 -05:00
8d23d1e05d
move the xpath pin to test group instead
2017-07-12 05:11:09 -05:00
38d5258c12
Lock xpath version to 2.0
2017-07-11 16:19:25 -05:00
6a29b87a4c
Add pdf-reader dependency
2017-07-07 11:19:06 +00:00
4393b6e563
Improve compatibility with Rubinius (alternate Ruby implementation)
2017-06-30 11:08:17 -04:00
fa79f90e4e
bump rex-socket, add client cert, mac address matching support
2017-06-30 10:46:15 -04:00
6349026134
Land #8442 , Exploit module for Backup Exec Windows Agent UaF
2017-06-28 10:39:28 -05:00
eba8979914
bump payloads
2017-06-27 04:08:15 -05:00
2918b3af13
Land #8599 , Dynamic DNS updater module
2017-06-25 15:08:22 -05:00
7a006e0f71
bump payloads
2017-06-23 18:13:52 -05:00
fdd62ab112
Land #8604 , Incorporate fix for workspace delete
2017-06-23 17:30:57 -05:00
714b7d0a02
bump metasploit_data_models, speedup workspace deletion
2017-06-23 17:02:32 -05:00
87cee65a06
Bump payloads to 1.2.35 to include kiwi updates
2017-06-23 13:43:00 +10:00
fda2e8c73d
Land #8523 , Add support for session GUIDs
2017-06-22 20:10:10 -05:00
fad696ed58
Bump version of framework to 4.15.0
2017-06-22 18:02:38 -07:00
5528084e27
add Dnsruby
2017-06-22 15:55:04 -05:00
3293a8fe67
Land #8594 , rspec-retry Heisenspec fix
2017-06-21 19:57:57 -05:00
22db17a87a
bind ruby-pg back to version 0.20
2017-06-21 03:11:11 -05:00
e873c87f0b
trying rspec-retry
2017-06-20 14:02:32 -05:00
9ce0bb9345
Bump version of framework to 4.14.28
2017-06-16 10:02:07 -07:00
0515980138
Bump version of framework to 4.14.27
2017-06-12 07:39:14 -07:00
77b1125e77
Bump version of framework to 4.14.26
2017-06-09 10:03:35 -07:00
a3f3dc0a70
Upload payloads/mettle gems, update cache sizes
...
Updated both the metasploit-payload and metasploit-payload-mettle gems
to the versions that match for the session GUID pull requests. Updated
the payload cached sizes to match the new payloads.
2017-06-09 17:15:52 +10:00
153611e9fa
bump metasploit-credential to allow handling string addresses gracefully
2017-06-09 01:43:45 -05:00
5f10e63923
bump payloads
2017-06-05 08:43:16 -05:00
92a65f5c63
Bump version of framework to 4.14.25
2017-06-02 10:03:44 -07:00
3ee77d1b50
update ruby_smb version
2017-05-30 14:17:51 -05:00
d5e74ffdf3
Merge branch 'master' into feature/eternal_blue/rubysmb_refactor
2017-05-30 13:59:31 -05:00
0c792798a7
Bump version of framework to 4.14.24
2017-05-30 07:26:35 -07:00
a01a2ead1a
Land #8467 , Samba CVE-2017-7494 Improvements
2017-05-30 00:15:03 -05:00
e31e3fc545
add additional architectures and targets
2017-05-30 00:07:37 -05:00
63ae70f061
remove pry/method_source git binding, this is not a vital update
2017-05-26 23:03:44 -05:00
ce9cfa5727
bit-struct updated, no need for my branch anymore
2017-05-26 23:00:21 -05:00
f0f99ad479
nttrans packet setup correctly,everything broken
...
got the nttrans packet setup correctly but somewhere
along the line i broke the whole exploit wtf?
2017-05-26 14:54:46 -05:00
b3e99ee9d2
point to local gem copy for testing and dev
...
remove this later, use a local copy of rubysmb
2017-05-26 12:30:19 -05:00
15b3b7de41
Bump version of framework to 4.14.23
2017-05-26 10:02:14 -07:00
dc67fcd5a8
use RubySMB for anonymous login
...
use the new anonymous login capabilities in
RubySMB
2017-05-24 15:40:05 -05:00
52363aec13
Add module for CVE-2017-8895, UAF in Backup Exec Windows agent
...
This module exploits a use-after-free vulnerability in the handling of
SSL NDMP connections in Veritas/Symantec Backup Exec's Remote Agent for
Windows. When SSL is re-established on a NDMP connection that previously
has had SSL established, the BIO struct for the connection's previous
SSL session is reused, even though it has previously been freed.
Successful exploitation will give remote code execution as the user of
the Backup Exec Remote Agent for Windows service, almost always
NT AUTHORITY\SYSTEM.
2017-05-24 00:18:20 +12:00
18f520382b
Bump version of framework to 4.14.22
2017-05-19 12:12:27 -07:00
c54c999efc
Bump version of framework to 4.14.21
2017-05-19 10:02:32 -07:00
22828fcc0f
Land #8406 , add compatibility shims for older Ruby versions
2017-05-18 21:50:45 -05:00
126c078ced
Bump version of framework to 4.14.20
2017-05-18 11:53:33 -07:00
94e4dc2938
fix for smb_login errors
...
do not try the TreeConnect if the SESSION_SETUP
has already failed.
2017-05-18 11:26:03 -05:00
c59371dd5e
add ruby backports compat library
2017-05-17 23:41:20 -05:00
729f2a9ab8
Bump version of framework to 4.14.19
2017-05-16 14:09:45 -07:00
405f2c6ca1
Bump version of framework to 4.14.18
2017-05-12 10:10:30 -07:00
6485042162
update rubyntlm to use the released gem
2017-05-12 05:59:11 -05:00
337db56d4f
bump payloads
2017-05-11 14:57:10 -05:00
638320a848
Update rex-exploitation to 0.1.13
2017-05-10 15:07:21 -05:00
fd05cea033
Update packetfu and remove version lock
2017-05-09 11:03:32 -05:00
7f1e2e6c71
bump metasploit-payloads
2017-05-08 17:34:55 -05:00
0bc9d9259d
meterpreter bugfixes
...
fixed stdapi_fs_mount_show to show full mapped drive path for Python
Meterpreter on Windows
Updated the Windows Meterpreter `getprivs` command to list all privileges
2017-05-08 16:26:32 -05:00
a0b50390c5
Bump version of framework to 4.14.17
2017-05-05 10:02:17 -07:00
2f1df4d4c2
Bump version of framework to 4.14.16
2017-05-02 11:11:20 -07:00
7c11e0065d
update mettle
2017-04-26 18:00:50 -05:00
89e81253ed
Bump version of framework to 4.14.15
2017-04-21 10:02:32 -07:00
f90911e09e
Bump version of framework to 4.14.14
2017-04-19 09:35:29 -07:00
05e15cee18
Bump version of framework to 4.14.13
2017-04-18 08:17:22 -07:00
1d52e269a7
update ruby_smb
2017-04-17 22:20:02 -05:00
7613bd8964
bump metasploit-payloads, fix 64-bit builds
2017-04-16 08:52:41 -05:00
fe33fe5571
bump payloads with new keyscan code
2017-04-14 21:54:50 -05:00
42122d2835
Land #8238 , move SMB2 support back into smb_login, add simpler permissions checks
2017-04-14 14:06:46 -05:00
c16e2fa88e
bump to prerelease rubyntlm to get rid of Ruby 2.4 warning msgs.
2017-04-14 14:06:19 -05:00
7eaba1fdee
bump payloads
2017-04-14 13:17:25 -05:00
eedbf25f06
bump android meterpreter, adding in-app screenshot support
2017-04-14 12:38:53 -05:00
f8a94de671
bump metasploit-payloads, enhance windows support in python meterpreter
2017-04-14 12:28:52 -05:00
036d579228
Bump version of framework to 4.14.12
2017-04-14 10:04:35 -07:00
adeb4d10d7
smb2 login scanner admin check now working
...
we can now check for admin privs in the smb2
login scanner
MS-2636
2017-04-13 14:40:32 -05:00
45d5701473
update ruby_smb to 0.0.9
...
update to newest version to get
TreeConnect capability
MS-2636
2017-04-13 12:01:51 -05:00
cdccd1df19
add xmlrpc as an explicit dependency
2017-04-13 07:12:38 -05:00
ced1412ee0
Bump version of framework to 4.14.11
2017-04-12 14:39:40 -07:00
157d28ab3d
make metasploit-aggregator a framework package
2017-04-12 12:33:13 -05:00
7fc05bcb25
Bump version of framework to 4.14.10
2017-04-07 10:07:31 -07:00
2276bd0c7d
switch back to released octokit gem
2017-04-06 15:36:02 -05:00
c845745f0b
remove platform restriction on metasploit-aggregator
2017-04-06 13:09:09 -05:00
4e79aaccb7
Bump version of framework to 4.14.9
2017-04-04 16:14:28 -07:00
3237575024
add ruby 2.1-2.4, update gems with in-flight 2.4 fixes
2017-04-04 04:06:35 -05:00
9edc08cd36
Bump version of framework to 4.14.8
2017-03-31 14:38:29 -07:00
b6085e188d
Bump version of framework to 4.14.7
2017-03-31 10:02:19 -07:00
9f75a1d392
Land #8174 , bump rex-text to fix problems running split-line VBA code
2017-03-31 11:40:21 -05:00
ce87174373
bump rex-text to fix problems running split-line VBA code
2017-03-31 11:34:41 -05:00
a937b00f85
bump rex-core, change 'sleep' to allow < 200ms durations
2017-03-31 11:33:21 -05:00
2d9c2321d1
add ruby_smb as a dep
...
added the ruby_smb library to the gemspec
MS-2557
2017-03-28 16:12:12 -05:00
51646e44a1
Bump version of framework to 4.14.6
2017-03-24 10:02:24 -07:00
8976faa3d1
Bump version of framework to 4.14.5
2017-03-23 08:41:49 -07:00
df181c1792
Bump version of framework to 4.14.4
2017-03-21 14:58:37 -07:00
9542087642
bump mettle to 0.1.8
2017-03-21 16:45:25 -05:00
2701fef34b
bump to metasploit-payloads 1.2.29
2017-03-17 17:34:16 -05:00
6200a3abb8
Bump version of framework to 4.14.3
2017-03-17 10:02:41 -07:00
0631bc4c29
bump payloads and such
2017-03-16 23:51:51 -05:00
91a4657c36
Bumped the metasploit-payloads version and cache sizes with PR#8043
2017-03-15 19:02:21 -05:00
089940dd4f
Bump to metasploit-payloads v1.2.17 which has the needed code changes
2017-03-15 18:38:47 -05:00
db581a040a
Bump version of framework to 4.14.2
2017-03-07 07:01:57 -08:00
78976091df
Land #7902 , add initial Metasploit Aggregator for https Meterpreter sessions.
2017-03-07 02:11:01 -05:00
031285d49a
update payloads
2017-02-28 03:04:53 -06:00
18445cf341
bump rex-text, get IPAddr sorting
2017-02-27 11:25:06 -06:00
1c71952529
Update Gemfile.lock because I forgot to in PR#8014
2017-02-27 11:09:14 -06:00
5383900a54
Merge branch 'master' into feature/aggregator
2017-02-24 23:59:02 -06:00
f9e4fd54fe
Bump version of framework to 4.14.1
2017-02-24 13:31:17 -08:00
2631259919
Land #7973 , Enable cert validation for Nexpose
...
This PR enables connection to a Nexpose console using the
nexpose client gem.
It also allows you to connect using a trusted certificate
instead of simply overriding the SSL validation.
2017-02-24 14:27:24 -06:00
0f4e03be7b
Bump version of framework to 4.13.27
2017-02-24 10:03:33 -08:00
1ca0a24177
Up rex-exploitation
2017-02-23 15:58:19 -06:00
9186b3298a
Merge branch 'master' into feature/aggregator
2017-02-22 10:08:11 -06:00
01558d3d51
Bump version of framework to 4.13.26
2017-02-21 14:01:15 -08:00
b2ed082c75
Merge branch 'master' into feature/aggregator
2017-02-21 15:11:08 -06:00
8469323519
update metasploit-aggregator in Gemfile.lock
2017-02-21 15:04:29 -06:00
647020289f
Bump version of framework to 4.13.25
2017-02-17 17:03:42 -08:00
86c04cd9f4
update metasploit payloads with Python fixes
2017-02-17 18:52:14 -06:00
6e62899e1c
Bump version of framework to 4.13.24
2017-02-17 10:02:51 -08:00
9f5582a4e4
update Gemfile.lock for master merge
2017-02-16 15:31:40 -06:00
cbfe18e4d7
use certificates in nexpose
2017-02-16 14:34:02 -06:00
184707c6fc
Bump version of framework to 4.13.23
2017-02-13 16:04:35 -08:00
44d229ad49
Bump version of framework to 4.13.22
2017-02-10 10:02:43 -08:00
d81bdc1c02
Bump version of framework to 4.13.21
2017-02-07 17:27:47 -08:00
2d1989ef16
bump rex-core, fix path normalization
...
Brings in fixes from https://github.com/rapid7/rex-core/pull/4
2017-02-07 19:17:44 -06:00
40c86567aa
import packetfu fix for https://github.com/packetfu/packetfu/pull/163
2017-02-06 15:51:01 -06:00
9a5d5eec2e
Bump version of framework to 4.13.20
2017-02-03 10:04:05 -08:00
f8c2bd4f52
expand remote sessions list detail retrieval
2017-02-02 15:21:09 -06:00
321fa91c75
Bump version of framework to 4.13.19
2017-02-01 11:28:53 -08:00
be170ab8b2
Bump version of framework to 4.13.18
2017-01-31 14:20:40 -08:00
95449a846b
Bump version of framework to 4.13.17
2017-01-27 10:02:17 -08:00
9dbcaf7227
bump Gemfile.lock
2017-01-26 11:20:17 -06:00
4af1b595cd
update Gemfile.lock
2017-01-25 10:32:23 -06:00
2e1d381e2e
bump gem
2017-01-24 09:48:40 -06:00
d9602f49a2
bump payloads
2017-01-22 15:45:45 -06:00
77e596263b
update lock
2017-01-22 10:43:06 -06:00
6a2d036ea8
depend on regular rb-readline, bugs fixed upstream
2017-01-22 10:20:05 -06:00
28211c3b73
bump payloads
2017-01-22 10:02:41 -06:00
c2e4a50924
Bump version of framework to 4.13.16
2017-01-20 10:02:29 -08:00
56ed8bc021
Bump version of framework to 4.13.15
2017-01-13 10:05:02 -08:00
f11cf92040
bump mettle gem to include pivoting support
2017-01-10 16:43:49 -06:00
f311511e6d
Bump version of framework to 4.13.14
2017-01-10 14:03:16 -08:00
b074042b99
Bump version of framework to 4.13.13
2017-01-06 12:00:26 -08:00
1ef2e54539
Bump version of framework to 4.13.12
2017-01-06 10:03:13 -08:00
7ef4db1465
Bump version of framework to 4.13.11
2017-01-04 14:53:33 -08:00
f25ced04af
Update rex-exploitation to 0.1.8
2017-01-03 12:04:18 -06:00
36e0bad421
Update rex-exploitation to 0.1.7
2016-12-30 00:56:02 -06:00
fae4751771
Land #7744 , update kiwi extension to Mimikatz 2.1
2016-12-29 16:22:45 -06:00
cd950e91a9
bump payloads gem
2016-12-29 15:59:07 -06:00
f50fa516f4
Bump version of framework to 4.13.10
2016-12-23 10:01:58 -08:00
5702bd6745
Land #7674 , Move migration stub generation code into msf
2016-12-22 17:53:00 -06:00
ea704211ca
incorporate payload stub generation changes
2016-12-22 17:50:43 -06:00
3a998fada2
Bump version of framework to 4.13.9
2016-12-18 13:22:52 -08:00
c5c710f837
Bump version of framework to 4.13.8
2016-12-16 10:02:02 -08:00
12af07d8cb
Bump version of framework to 4.13.7
2016-12-09 10:03:22 -08:00
50f95f9940
Land #7681 , Get ready for stageless mettle
2016-12-09 09:31:47 -06:00
6dcdf74850
bump mettle gem
2016-12-09 09:27:56 -06:00
eeef8fa6ad
Add new arches to UUIDs
2016-12-08 16:29:43 -06:00
a54c0c4e1f
Bump version of framework to 4.13.6
2016-12-07 09:00:16 -08:00
a99042a54d
Update Gemfile.lock
2016-12-07 14:58:27 +10:00
7346223a65
update payloads
2016-12-06 07:16:44 -06:00
7edb5e19e2
Bump version of framework to 4.13.5
2016-12-05 15:09:06 -08:00
76db530a86
Bump version of framework to 4.13.4
2016-12-02 10:02:53 -08:00
f46ca66858
Bump version of framework to 4.13.3
2016-11-28 06:35:44 -08:00
79e8ffd983
Bump version of framework to 4.13.2
2016-11-25 10:03:24 -08:00
d7dce28018
bump mettle to get fix for UUID encoding
2016-11-21 00:57:50 -06:00
05cb5edaac
update payload gems
2016-11-20 19:10:27 -06:00
f313389be4
Merge remote-tracking branch 'upstream/master' into land-7507-uuid-arch
2016-11-20 19:08:56 -06:00
643a5511cf
Bump version of framework to 4.13.1
2016-11-18 10:01:48 -08:00
383314530a
Bump version of framework to 4.13.0
2016-11-16 07:48:26 -08:00
8d1d017188
Land #7562 , fix rex-text column padding for unicode values
2016-11-15 07:12:37 -06:00
fafc749447
update metasploit payloads
2016-11-14 16:51:38 -06:00
203c8132c5
Update the Gemfile to pull in the new rex-text Gem
2016-11-14 14:16:36 -06:00
422ff57335
update metasploit-payloads
2016-11-14 02:53:18 -06:00
f116ad2c59
Bump version of framework to 4.12.42
2016-11-11 10:02:14 -08:00
77bacacb9c
Land rapid7/rex-exploitation#2 , Fix heap_spray method's return value type
...
This fixes #7520
2016-11-09 20:39:01 -06:00
5d5a4baaf7
back out rex-arch to avoid conflict with arch fixup PR
2016-11-08 17:42:42 -06:00
aeeefc46da
update gems
2016-11-08 17:31:33 -06:00
2c39a14ada
Bump version of framework to 4.12.41
2016-11-04 10:02:13 -07:00
57eabda5dc
Merge upstream/master
2016-10-29 13:54:31 +10:00
e936a6d7ce
Update Gemfile to include rex-arch update
2016-10-29 08:19:29 +10:00
ffc62964d6
Bump version of framework to 4.12.40
2016-10-28 10:02:36 -07:00
1a1841d441
rebuilt metasploit-payloads without debug info
2016-10-26 05:43:36 -05:00
6a23168800
Bump version of framework to 4.12.39
2016-10-25 12:22:52 -07:00
e29567f390
Bump version of framework to 4.12.38
2016-10-24 14:25:47 -07:00
bf59ba526a
Bump version of framework to 4.12.37
2016-10-24 07:35:41 -07:00
672e275877
update gems
2016-10-23 16:43:02 -05:00
8e0d866976
Bump version of framework to 4.12.36
2016-10-21 10:02:09 -07:00
85c26c64e2
Bump rex-exploitation gem version, see #7452 .
2016-10-19 08:04:10 -05:00
43fd0a8813
Land #7436 , Put Rex-exploitation Gem Back
2016-10-18 16:03:54 -05:00
c5faffddbd
bump gems
2016-10-17 04:48:12 -05:00
74340e9eb7
Bump version of framework to 4.12.35
2016-10-14 15:13:45 -07:00
b3666ff7ab
Bump version of framework to 4.12.34
2016-10-14 10:04:05 -07:00
741c4b8916
updated android payload gem, removed unused extension jar
2016-10-14 09:59:06 -05:00
Brent Cook
Metasploit
David Maloney
dmohanty-r7
Brendan Coles
William Webb
Rob Fuller
OJ
KINGSABRI
William Vu
darkbushido
Matthew Daley
James Lee
Brent Cook
Jeffrey Martin
bwatters-r7
James Barnett
wchen-r7
Adam Cammack
Pearce Barry