1eabf5dd3d
Land #10072 , update kiwi plugin, add dcsync, dcshadow, and powershell streaming support
2018-05-21 17:05:10 -05:00
a14892774f
Land #9942 , IPv6 channel fixes for Python and Linux/macOS Meterpreters
2018-05-01 16:45:16 -05:00
63e096836f
Land #9887 , remove rex-text version lock
...
remove rex-text version lock
2018-04-18 15:31:20 -07:00
6b9be37741
Land #9875 , Lock rex-text due to compatibility issues
2018-04-13 10:02:20 -07:00
c5db4c5021
Land #9834 , add Python UDP channel support
2018-04-10 08:41:41 -05:00
106fbf8a17
Land #9586 , fix #9112 , improve android screenshot error message on failure
2018-03-27 14:21:02 -05:00
a94e6559e6
pin 4.x to the 2.x versions of metasploit-credential/metasploit_data_models
2018-03-27 11:34:48 -05:00
8f4895c8e7
Land #9706 , bump metasploit payloads to fix #9497
2018-03-13 13:33:29 -07:00
4778de053a
Land #9687 , bump payloads, fix PHP meterpreter message parsing
2018-03-07 18:47:47 -08:00
fd029eda62
lock ruby_smb to 0.0.18 to match master
2018-02-22 11:13:12 -06:00
59a41f04f7
Land #9366 , Add x64 staged Meterpreter for macOS
2018-02-20 09:24:41 -06:00
31ed50ac92
Land #9539 , add bind_named_pipe transport to Windows meterpreter
2018-02-16 15:34:47 -08:00
1126acb201
Land #9543 , bump gems, remove rbnacl/ffi since unneeded
2018-02-12 11:57:18 -06:00
909b787a56
Land #9521 , flush pipe buffers when a process exists in mettle
2018-02-08 10:25:25 -06:00
bff02efad4
Land #9466 , metasploit-payloads bump to 1.3.28
2018-01-26 18:09:20 -06:00
06b702e86b
Land #9449 , bump metasploit-payloads from 1.3.25 to 1.3.27
...
rapid7/metasploit-payloads#264
rapid7/metasploit-payloads#263
Merge branch 'land-9449' into upstream-master
2018-01-24 17:13:08 -06:00
55c345418d
Land #9438 , address cmd_exec inconsistencies
2018-01-24 17:11:40 -06:00
f125e13278
python meterpreter whitespace normalization
2018-01-09 16:08:52 -05:00
18f3815147
Update TLS certificate generation routines
...
Msf relies on Rex::Socket to create TLS certificates for services
hosted in the framework and used by some payloads. These certs are
flagged by NIDS - snort sid 1-34864 and such.
Now that Rex::Socket can accept a @@cert_provider from the Msf
namespace, a more robust generation routine can be used by all TLS
socket services, provided down from Msf to Rex, using dependencies
which Rex does not include.
This work adds the faker gem into runtime dependencies, creates an
Msf::Exploit::Remote::Ssl::CertProvider namespace, and provides
API compatible method invocations with the Rex version, but able
to generate higher entropy certs with more variables, options, etc.
This should reduce the hit rate against NIDS on the wire, reducing
pesky blue team interference until we slip up some other way. Also,
with the ability to generate different cert types, we may want to
look at extending this effort to probide a more comprehensive key
oracle to Framework and consumers.
Testing:
None yet, internal tests pending.
Travis should fail as this requires rex-socket #8 .
2017-12-28 21:00:03 -05:00
cf21d13b2e
Resolve conflict
2017-12-20 18:58:16 -08:00
24907938bb
bump payloads, various fixes
2017-12-20 16:47:37 -06:00
df4f62cde9
bump to mettle 0.3.3
2017-12-20 15:58:17 -06:00
f15309bc48
Add basic framework for interacting with MQTT
2017-12-20 12:28:02 -08:00
6b216f2a20
Land #9290 , Fix OverrideLHOST/LPORT with http/s Meterpreter payloads
2017-12-20 00:26:06 -06:00
9f144ce8d4
Land #9151 , mettle extension support + sniffer module
2017-12-18 21:49:40 -06:00
04f294bd53
Fix #8972 , Remove libsodium until packaged better
...
Due to issues with packaging for multiple platforms libsodium as an optional dependency for 'rbnacl' is being removed. Once packaging issue are resolved this will be restored. This removes support for `ed25519` keys used with ssh for the time being however manual installation of this gem allows user to workaround this limitation.
2017-12-18 15:21:27 -06:00
2a94a4417a
bump payloads
2017-12-18 10:01:10 -06:00
3f6846c332
update payloads with python retry fix
2017-12-12 03:13:38 -06:00
602335abf1
bump payloads
2017-12-11 04:11:21 -06:00
edb2d8b762
fix windows unicode usernames, add recursive directory delete
2017-11-29 17:01:01 -06:00
035d1ef2c6
bump payloads, pull in AES negotation & transport fixes
2017-11-25 18:21:57 -06:00
8645a518b3
add mettle support for custom headers
2017-11-24 20:27:34 -06:00
4050985649
update payloads
2017-11-21 13:53:33 -06:00
6f9671ff11
Updated Payloads version to 1.3.14
2017-11-08 12:36:50 +10:00
ebaf0c5484
bump mettle, update toolchain, add e500v2 and reduce size of x86_64
2017-10-30 05:09:31 -05:00
254c2a33d3
bump metasploit payloads, windows meterpreter fixes
2017-10-27 11:44:23 -05:00
f2cba8d920
Land #8933 , Web_Delivery - Merge regsvr32_applocker_bypass_server & Add PSH(Binary)
...
This restores the original PR
2017-10-25 16:29:11 -05:00
ca28abf2a2
Revert "Land #8933 , Web_Delivery - Merge regsvr32_applocker_bypass_server & Add PSH(Binary)"
...
This reverts commit 4999606b614274b76473
2017-10-25 16:19:14 -05:00
4999606b61
Land #8933 , Web_Delivery - Merge regsvr32_applocker_bypass_server & Add PSH(Binary)
2017-10-25 12:44:04 -05:00
7e398e2ef5
Fix #9111 , bump metasploit-payloads gem to include php 5.3.10 fix
2017-10-24 11:40:02 +08:00
7ea14e8431
Update payloads for getsystem fixes
2017-09-28 09:43:02 +10:00
1ee590ac07
Move over to rex-powershell and version bump
...
Version bump for:
- https://github.com/rapid7/rex-powershell/pull/10
- https://github.com/rapid7/rex-powershell/pull/11
2017-09-25 13:45:06 +01:00
721277d39d
bump metasploit-payloads to 1.3.8
2017-09-20 05:04:13 -05:00
6b0b2550ec
bump payloads, add shell expansion for java/android payloads
2017-09-08 13:45:54 -05:00
d38ee0f1ee
bump payloads, grab java/android fixes for #8938
...
fixes #8938
2017-09-08 10:08:22 +02:00
9877a61eff
bump payloads
2017-09-07 01:36:25 -05:00
7acd772c10
Pivot session stability, display and handling
2017-09-07 01:36:21 -05:00
928d632042
import https://github.com/fizx/robots.git 0.10.1
2017-08-28 15:47:46 -05:00
582b2e238e
update mettle payload to 0.2.2, add background and single-thread http comms
2017-08-28 05:31:44 -05:00
430251b8f6
fix compatibility with php meterpreter
2017-08-21 15:37:31 -05:00
Brent Cook
sinn3r
Jeffrey Martin
Tim W
William Vu
bwatters-r7
RageLtMan
Jon Hart
OJ
g0tmi1k
William Webb
Brent Cook