William Webb
69b01d26bb
Land #9226 , Microsoft Office OLE object memory corruption
2017-12-04 16:50:27 -08:00
William Vu
19b37c7070
Land #9263 , drb_remote_codeexec fixes
...
See pull requests #7531 and #7749 for hysterical raisins.
2017-12-04 18:45:03 -06:00
Brent Cook
3cf1ffeb5f
Land #9273 , add authors to osx local root exploit
2017-12-04 18:42:23 -06:00
Brent Cook
b13f4e25e1
thanks for making this well-known
2017-12-04 18:32:31 -06:00
Brent Cook
a27bb38d51
add authors
2017-12-04 18:25:18 -06:00
Austin
b96dac28d5
fix info segment
2017-12-04 16:42:41 -05:00
Austin
b7f17f5519
fix documentation
2017-12-04 16:41:27 -05:00
Brent Cook
f83e9815dd
Land #9210 , Add a Polycom HDX RCE
2017-12-04 12:49:35 -06:00
Brent Cook
7edab268f5
handle case-insensitive password, fix received
2017-12-04 12:47:40 -06:00
Austin
06334aa2bd
Update polycom_hdx_traceroute_exec.rb
2017-12-04 11:05:01 -05:00
Metasploit
fd1681edd9
Bump version of framework to 4.16.22
2017-12-01 10:04:07 -08:00
Austin
c788e4e540
Update office_ms17_11882.rb
2017-12-01 11:36:03 -05:00
Austin
7df46b33e8
disassembly ASM
2017-12-01 08:03:56 -05:00
Jon Hart
73742d7de5
Land @busterb's #9261 , which makes the default prompt include the longer name of the module,
...
avoiding ambiguity and providing more context
2017-11-30 12:45:31 -08:00
Brent Cook
09dd5b8489
fix check command to not require an rport _method_
2017-11-30 10:51:21 -06:00
Brent Cook
c288dab338
fixup RHOST/RPORT expectations if only URI is set
2017-11-30 10:51:02 -06:00
Brent Cook
d689b33d7e
more error handling, deal with user error
2017-11-30 08:31:13 -06:00
Brent Cook
87e683c763
add back kill syscall for trap method
2017-11-30 08:12:15 -06:00
Brent Cook
a0e0e1db15
allow manual targeting, handle errors better
2017-11-30 07:51:12 -06:00
Brent Cook
eea72663b3
warn on method failure instead of error
2017-11-30 06:37:21 -06:00
Brent Cook
9f12b794da
cleanup comments
2017-11-30 06:37:04 -06:00
Brent Cook
5da34e8f2b
support RHOST/RPORT
2017-11-30 06:36:42 -06:00
Brent Cook
59580195b4
resurrect old methods, try all 3
2017-11-30 06:16:05 -06:00
Brent Cook
c848379ecb
simply use refname in the prompt?
2017-11-29 20:52:14 -06:00
Brent Cook
e5a5d35ad8
add 'promptname' that expands the module path a bit more
...
This allows the user to actually see the module context.
2017-11-29 19:49:43 -06:00
Brent Cook
55f56a5350
Land #9110 , added -C option to change default hosts columns
2017-11-29 17:48:44 -06:00
Brent Cook
51a18b68fe
Land #9211 , handle 2016 DC's with hashdump gracefully
2017-11-29 17:26:33 -06:00
Brent Cook
0aeb245c9c
Land #9252 , docker improvements
2017-11-29 17:15:47 -06:00
Brent Cook
7218159179
Land #9260 , add new meterpreter functionality
2017-11-29 17:12:49 -06:00
Brent Cook
edb2d8b762
fix windows unicode usernames, add recursive directory delete
2017-11-29 17:01:01 -06:00
bwatters-r7
e8965767a0
Land 9207, Expose more uuid attributes
2017-11-29 16:25:05 -06:00
Metasploit
174d0d46de
Bump version of framework to 4.16.21
2017-11-29 10:45:55 -08:00
Brent Cook
70ec576d52
use correct session variable
2017-11-29 11:53:56 -06:00
Brent Cook
ec2b5d48a6
add missing payload uuid accessors
2017-11-29 11:49:41 -06:00
Brent Cook
446f3fa675
more conversions
2017-11-29 11:49:41 -06:00
Brent Cook
59446f3d96
change ui to use new settings
2017-11-29 11:49:41 -06:00
Brent Cook
8051f790d0
if there is info in the uuid_db, put it in payload_uuid automatically
2017-11-29 11:49:41 -06:00
bwatters-r7
c695828361
Land #9255 , add local exploit for osx root login with no password
2017-11-29 10:30:59 -06:00
bwatters-r7
9dc3d60fc2
Stupid Typos
2017-11-29 10:29:38 -06:00
Jeffrey Martin
e73ba0b3ca
Merge released '4.x' into master
2017-11-29 10:27:42 -06:00
bwatters-r7
efa8d566d7
Added documentation for iamroot
2017-11-29 10:26:06 -06:00
Tim W
58897bf2fc
msftidy
2017-11-29 16:36:50 +08:00
Tim W
7f1f7281f1
add local exploit for osx root login with no password
2017-11-29 16:06:02 +08:00
Brent Cook
19a62d6c82
Land #9254 , Fix include scope in external module mixin
2017-11-28 21:49:27 -06:00
Adam Cammack
3fff092042
Fix include scope in external module mixin
...
The auxiliary report mixin overrides some of the methods in
Metasploit::Credential, which is fine in framework, but causes issues in
projects relying on the base behavior of Metasploit::Credential. This
changes the include scope from global to just whatever includes the
external module mixin.
2017-11-28 21:41:52 -06:00
Austin
676a08b849
Update polycom_hdx_traceroute_exec.rb
2017-11-28 22:01:41 -05:00
Austin
2544b4d8db
Change target name
2017-11-28 21:39:04 -05:00
Austin
cb7f173811
Update office_ms17_11882.rb
2017-11-28 21:36:25 -05:00
William Vu
f132c1572f
Fix #9194 , clarified error for reloading modules
2017-11-28 17:15:56 -06:00
William Vu
f55ff36d1e
Land #9253 , debug print for CmdStager
2017-11-28 16:46:54 -06:00