6b1e911041
Instantiate payload modules so parameter validation occurs
...
Calling .new on payload modules does not perform parameter validation, leading
to a number cached sizes based on invalid parameters. Most notably,
normalization does not occur either, which makes all OptBool params default to
true.
2015-08-14 11:35:39 -05:00
80a22412d9
use EXITFUNC instead of ExitFunction
2015-08-13 21:22:32 +02:00
deb6f5638e
Update WinSCP Gather
...
* Refactor parsing to common library to support command line tool
* Look in APPDATA not just ProgramFiles
* Iterate over user APPDATA
2015-08-01 20:44:14 +01:00
77f96769da
Update msftidy.
2015-07-30 01:33:48 -03:00
a687e71832
Added check for the WPVDB in msftidy.
2015-07-30 01:22:48 -03:00
f59c99e2ff
Remove msfcli, please use msfconsole -x instead
...
msfcli is no longer supported, please use msfconsole.
Announcement on SecurityStreet:
Weekly Metasploit Wrapup
Posted by Tod Beardsley in Metasploit on Jan 23, 2015 11:57:05 AM
2015-07-09 12:50:02 -05:00
ae73cd3c6c
Add a bash script to import dev keys
...
This merely makes it easy and fun to import all developer keys used over
the past year to your local GPG keychain. This will make the task of
reviewing merge commits for signedness much easier, especially if you
use a nicelog alias such as this one:
https://github.com/todb-r7/junkdrawer/blob/master/dotfiles/git-repos/gitconfig#L40
This does not handle automating checking for signatures as part of
Travis-CI -- for that, see PR #5337 , a work in progress.
2015-05-13 10:29:55 -05:00
46b678e9d2
Add msftidy check for datastore option DEBUG usage
2015-04-21 12:22:24 -05:00
ab94f15a60
Take care of modules using the 'DEBUG' option
2015-04-21 12:13:40 -05:00
292087c849
Add check for modules registering a DEBUG option
2015-04-21 11:56:41 -05:00
88ed8406d1
Add check for (v)print_debug to msftidy
2015-04-21 11:27:22 -05:00
832487cad7
Consolidate on one check and fix false positives
2015-04-16 18:01:28 -05:00
40f6b086c2
fix regex
2015-04-16 21:51:31 +02:00
0815791fee
fix regex
2015-04-16 21:48:16 +02:00
af277195f5
check for valid values
2015-04-16 21:43:47 +02:00
4469fcd9e8
add fail_with error
2015-04-16 20:04:08 +02:00
72b9647b31
Land #5057 , CVE fixups
2015-04-03 16:36:11 -05:00
a333632a69
Add standalone tool for jsobfu
2015-04-03 11:30:23 -05:00
df0398f958
Update msftidy for the new CVE format
...
https://cve.mitre.org/cve/identifiers/syntaxchange.html
2015-03-31 22:15:33 -05:00
376bf13f1e
Land #5000 , tools/dev/add_pr_fetch.rb
2015-03-24 17:10:49 -05:00
aa1a3580b8
chmod +x tools/dev/set_binary_encoding.rb
...
Missed in #4875 .
2015-03-24 17:10:31 -05:00
d3773aed55
Rename add-pr-remote.rb to add_pr_fetch.rb
2015-03-24 17:05:43 -05:00
3dec83c1df
Utility for adding PR fetch refs
2015-03-24 10:20:34 -05:00
1910a6c6c5
Correct filename for missing-payload-tests.rb
...
missing-payload-tests.rb is not the correct file format we follow,
it should be missing_payload_tests.rb
2015-03-24 00:50:09 -05:00
71c544c3c5
added newline at end of file
2015-03-24 06:19:27 +01:00
315948e403
Extra newline
2015-03-21 13:49:50 -05:00
848dc07020
var name needs a default
2015-03-21 12:20:29 -05:00
f45e8f49eb
Custom var name
2015-03-21 12:18:02 -05:00
2be5ae3bab
Fix bugs
2015-03-21 12:14:00 -05:00
0ff114bcd6
use #!/usr/bin/env ruby
2015-03-20 23:48:13 -05:00
e09f9ca0bc
Provide an example
2015-03-20 20:55:30 -05:00
96bcdd211c
Finished rspec
2015-03-20 20:53:04 -05:00
487ddfc09c
no need for Interrupt
2015-03-20 16:39:00 -05:00
582bfdad64
explain arch
2015-03-20 16:37:42 -05:00
9ecfd36d9e
comments
2015-03-20 16:34:58 -05:00
79a6f1cd09
fix option bug
2015-03-20 16:33:19 -05:00
6da216f3a4
More options
2015-03-20 16:30:29 -05:00
af8f645d1c
This starts to work
2015-03-20 16:15:43 -05:00
fe267fb5a6
Here's a starting point
2015-03-20 14:15:14 -05:00
db56fcb1b8
update tools/missing-payload-tests to give correct advice
...
The template spec for new payloads needed updating to match the new cached
payload size spec.
2015-03-16 18:10:10 -05:00
cd992d5ea6
Land #4875 , rm some old and crufty tools
2015-03-10 00:02:04 -05:00
ab70223107
Remove note about resplat.rb in msftidy
2015-03-10 00:00:29 -05:00
99e2b05597
Move the cache update logic into a utility class
2015-03-09 15:29:58 -05:00
8c635243d3
Fix whitespace in the regex, implements Msf::Payload.dynamic_size?
2015-03-09 13:15:06 -05:00
2e49791bef
This implements payload size caching, speeding up framework loads
2015-03-07 20:44:19 -06:00
0353602829
Add back set_binary_encoding.rb
...
[See #4875 ]
2015-03-05 12:05:05 -06:00
4ad9638682
Remove some old and crufty /tools
...
It's possible someone still wants the Webscarab stand-alone importer,
but I cannot imagine that after years of bitrot that is even viable in
its current state.
The rest of them are all older development tools that are no longer
needed (normal vim/rubymine auto-formatting will do the trick).
2015-03-04 16:46:40 -06:00
0597d2defb
Land #4560 , Massive Java RMI update
2015-02-17 10:07:07 -06:00
c73892b721
Nuke datastore modification check from orbit
2015-02-11 12:46:40 -06:00
1f4fdb5d18
Update from master
2015-02-10 10:47:17 -06:00
c8a687db7f
Fix false positive in cookie check
2015-02-09 17:23:59 -06:00
4ed3ffa0ed
Fix false positive in snake case check
2015-02-09 16:30:19 -06:00
e62f44cc1a
Fix false negative in comment check
...
Adds anchor to regex.
2015-02-09 14:58:02 -06:00
2c7777f831
Land #4601 , @wchen-r7's tool to lookup md5 hashes
2015-01-30 19:04:34 -06:00
4316c379eb
Use unless instead of if not
2015-01-30 19:01:49 -06:00
6269974bab
Drop psuedo-legalese, just give practical warning
2015-01-26 13:15:23 -06:00
6c2e8a16ce
Change warning
2015-01-23 22:50:39 -06:00
2d9b1dbc22
Fix typos
2015-01-23 22:31:37 -06:00
ff0af805e3
Add a warning before use
2015-01-23 22:26:41 -06:00
37bf66b994
Install instaget with Rex::Java::Serialization
2015-01-22 16:54:49 -06:00
5c413a8102
Add support to print objects, arrays and classes details
2015-01-22 14:50:12 -06:00
1d6524b4d9
Revert #4593 , msftidy extraneous comma check
...
Fixes #4626 by ignoring the problem identified.
This reverts commit 7c3378b2e6cb0257bec7
2015-01-22 14:28:27 -06:00
cf7555447c
Land #4621 , msftidy whitelist constant
...
Now I'm happy... almost.
2015-01-21 14:03:39 -06:00
bbe9fc208e
Update formatting (80 columns)
...
Piped to fmt -78 to account for the indent.
2015-01-21 14:01:44 -06:00
264adf14d1
Add 'tnftp' software to the title whitelist
2015-01-21 11:52:39 -06:00
efebaae251
Make the title whitelist a constant
2015-01-21 11:50:50 -06:00
7c3378b2e6
Land #4593 , msftidy extraneous comma check
2015-01-18 00:46:39 -06:00
bff66ade60
Actually, not necessary. Already checked.
2015-01-17 02:28:56 -06:00
45b33bb82f
Handle should be checked
2015-01-17 02:27:14 -06:00
3d93bc06e8
rspec progress
2015-01-16 18:25:54 -06:00
596e956660
some changed
2015-01-16 17:53:06 +01:00
64b6c4a0b5
I think unless is preferred
2015-01-16 01:33:09 -06:00
058ef1f167
Uh, what?
2015-01-16 01:15:58 -06:00
05458ec81f
I should be done with md5_lookup.rb now
2015-01-16 01:13:37 -06:00
87ab27e9d2
Ugh, typo -_-
2015-01-15 21:52:15 -06:00
7b2458c491
Filter out whitespace
2015-01-15 21:51:58 -06:00
36f8fda0b1
Leave contact info
2015-01-15 21:04:12 -06:00
95895a5969
Small update
2015-01-15 21:00:52 -06:00
754d303f66
Some more doc
2015-01-15 20:59:47 -06:00
1d79a9de20
This is the working version
2015-01-15 20:51:27 -06:00
3237dd8591
add comma check to msftidy
2015-01-16 00:13:55 +01:00
6ae66315bd
Block based is safer
2015-01-15 16:05:35 -06:00
35c808d70f
Progress
2015-01-15 15:13:03 -06:00
c3bb02081b
I should be done w/ arg parsing now
2015-01-15 12:18:50 -06:00
fd850d6af6
Argument parsing
2015-01-15 12:03:52 -06:00
d5330bb4a7
Gotta move on to something else right quick, brb
...
stash
2015-01-14 23:34:47 -06:00
18a27d1752
Initial commit of the md5_lookup script (as a standalone tool)
...
Resolve #4399
2015-01-14 13:53:15 -06:00
56c1f74d70
modify msftidy regex
2015-01-09 22:07:21 +01:00
d3050de862
Remove references to Redmine in code
...
See #4400 . This should be all of them, except for, of course, the module
that targets Redmine itself.
Note that this also updates the README.md with more current information
as well.
2014-12-19 17:27:08 -06:00
00590f9f26
Adds Java serialization support, lands #4327
2014-12-13 17:47:53 -06:00
9bf55ef8f4
Minor improvements to datastore and http// checks in msftidy
2014-12-11 18:36:42 -08:00
be1440bcb9
more msftidy checks
2014-12-11 23:10:07 +01:00
564da4446e
Add print friendly to_s
2014-12-07 17:52:09 -06:00
ff99669cfa
Explain better error
2014-12-05 20:30:22 -06:00
b80f6c34c0
Add tool to deserialize streams from files
2014-12-04 12:47:02 -06:00
eefeb452b1
Fix two typos for payload specs
2014-11-18 08:50:06 -05:00
8da6e0bd5b
Fix bugs
2014-11-05 15:26:00 -06:00
5b8d9e1221
Fix typo
2014-11-05 15:14:35 -06:00
98f5ebd475
Only show bad refs when using -c
2014-11-05 15:07:40 -06:00
3310342a95
Add save-as feature
...
The tool produces A LOT OF results so it's really painful to manually
copy and paste and to be able to use the data. So it should automatically
save.
Tagging the issue here because I forgot to do it:
Fix #4039
2014-11-05 10:58:41 -06:00
Brent Cook
Christian Mehlmauer
Meatballs
Roberto Soares
wchen-r7
Tod Beardsley
jvazquez-r7
William Vu
HD Moore
Jon Hart
Spencer McIntyre