7b6c39058a
Correct target name
2015-02-27 13:24:57 -06:00
90aff51676
Add CVE-2014-7285, Symantec Web Gateway restore.php Command Injection
2015-02-27 12:31:29 -06:00
544f88620d
Merge more mixin refactor
2015-02-27 01:55:14 -06:00
e5e13108ed
Refactor close handling
2015-02-26 23:50:10 -06:00
5418cdad11
Refactor negotiate handling
2015-02-26 23:49:07 -06:00
5ed1f8d44f
Make opts optional
2015-02-26 23:39:17 -06:00
882f0bdc0e
Refactor read_andx request handling
2015-02-26 23:35:12 -06:00
5b770f9f7a
Refactor nt_create_andx requests
2015-02-26 23:31:09 -06:00
70033576fe
Refactor query information level
2015-02-26 23:22:57 -06:00
49ae173057
Land #4844 : the final tweaks to @wv-r7's PJL extensions
2015-02-26 17:39:49 -06:00
1454ad79d8
Land #4844 : @wv-r7 extends the PJL repetoire
2015-02-26 17:29:28 -06:00
a3097b2854
Merge find information level refactoring
2015-02-26 16:50:16 -06:00
d544da22b5
Always send answer
2015-02-26 16:47:05 -06:00
45be95747f
Refactor Find Information Levels
2015-02-26 16:46:34 -06:00
89a033c194
Delete unnecessary paddings due to miscalculations
2015-02-26 15:54:00 -06:00
095431c323
fix note search conditions
...
note search conditions needed to know about
vuln_id or else vuln notes would get overwritten
MSP-12183
2015-02-26 15:48:04 -06:00
14b46161e3
Land #4851 , fix rb-readline-r7 checker
2015-02-26 15:19:17 -06:00
260c603ffb
Fix msfconsole -L
...
s/rb-readline/rb-readline-r7/
Should have been in #4816 (#4128 ).
2015-02-26 15:14:38 -06:00
f9b47a329d
Land #4800 , remove Lorcon source
...
It's maintained upstream, mentioned in #3200 , and the modules that did
use these were themselves broken.
2015-02-26 15:03:32 -06:00
387c966550
Fix unnecessary paddings
2015-02-26 15:00:53 -06:00
a72d49678a
only match by CVE refs
...
the other refs can be non-specific and refer
to multiple distinct vulns, resulting in
incorrect refs being attached to a vuln leading to
a snowball effect with more and more vulns being
misidentified.
MSP-12183
2015-02-26 14:57:16 -06:00
b35011012c
Remove LORCON from LICENSE
2015-02-26 14:53:23 -06:00
b223dbdfcf
Nuke external LORCON code from orbit
2015-02-26 14:52:01 -06:00
500e4707ab
Use smb_error
2015-02-26 14:35:52 -06:00
3aa68c30b0
=> not => !
2015-02-26 21:31:01 +01:00
a427e417a3
-consomation +consumption
2015-02-26 21:23:09 +01:00
3efae77212
Use /dev/null instead of /etc/passwd
...
File.read returns "" on /dev/null. Don't try it on /dev/zero. :-)
2015-02-26 14:19:25 -06:00
f625ad4f9c
Remove unnecessary tests in spec
2015-02-26 14:12:39 -06:00
0a51ca12a5
Download all of every file implicitly
2015-02-26 14:10:53 -06:00
1d03b9a166
Maj debug output
2015-02-26 21:06:20 +01:00
d0ca1b2dc6
Delete a thing I added for no reason
2015-02-26 14:06:10 -06:00
5996256ccc
Fix formatting
2015-02-26 14:05:50 -06:00
c73ffea1b9
Do minor cleanup
2015-02-26 12:50:45 -06:00
8351920d1e
don't match based on URL refs
...
multiple vulns may be listed for
the same URL making matches based on
these refs entirely unreliable
MSP-12183
2015-02-26 11:40:15 -06:00
6d6d5a7dca
Land @0x41414141's bugfixing
2015-02-26 11:40:08 -06:00
b1e6de2eeb
Add todo
2015-02-26 11:39:17 -06:00
26bfebf1bb
Add dummy wildcard handling
2015-02-26 11:39:05 -06:00
d0ab9206b9
Do minor cleanup
2015-02-26 10:58:36 -06:00
970f0c94b2
Create CREATE_ANDX constants
2015-02-26 10:44:07 -06:00
ab1bb0e50d
bugfixes to https://github.com/jvazquez-r7/metasploit-framework/tree/review_3074_clean_server
...
to provide consistent support for various exploits and OS SMB Commands.
Reintroduces smb_cmd_trans_query_path_info_network for use with the Struts2 JSP injection vulnerability.
Reintroduces smb_cmd_trans_query_file_info_basic for common use with rundll32.
Corrects some issues with filename formatting and pattern matching for file requests (can still be improved).
2015-02-26 16:10:34 +00:00
3b21de3906
Add WPVDB reference
2015-02-26 13:37:23 +00:00
ceb92cdf5e
update login method
2015-02-26 07:33:51 -06:00
4aedd7e5d3
Fix spec for fsquery support
2015-02-25 18:14:17 -06:00
f24da1b178
Add file checking to printer_delete_file
2015-02-25 18:14:13 -06:00
dc3ba40e5d
Add file checking to printer_upload_file
2015-02-25 18:13:36 -06:00
ed9213eb4c
Add fsquery check to fs{download,delete} methods
2015-02-25 17:37:20 -06:00
ea5b6f66d4
Add UEL to fsdownload method
2015-02-25 17:35:34 -06:00
a543eccdb4
Add FSQUERY test to spec
2015-02-25 17:18:29 -06:00
5d3c7f3b4a
Add fsquery method
2015-02-25 17:18:23 -06:00
2edd268275
Land #4816 , switch to rb-readline-r7
...
Fixes #4816
See also MSP-12070
2015-02-25 17:10:08 -06:00
sinn3r
jvazquez-r7
Brent Cook
David Maloney
Tod Beardsley
William Vu
Bazin Danil
Matthew Hall
rastating
Brandon Perry