d9068b7719
Fix up payload cache sizes, and powershell include
2015-05-11 17:43:51 +10:00
b922da8f80
Add support for x64 reverse_http
...
Still need to bake in support for proxies in the stagers, but wer'e
getting there.
2015-05-11 17:24:31 +10:00
fd827db6dd
Fix up bind stager payload sizes
2015-05-07 10:13:27 +10:00
78c58088fe
Land #5314 , set snmp defaults for constrained values
2015-05-06 16:27:41 -05:00
9d7a7cb68d
Merge branch 'upstream/master' into multi-transport-support
...
Conflicts:
lib/msf/core/payload/linux/bind_tcp.rb
2015-05-07 07:24:22 +10:00
5b2627c027
switch
2015-05-06 16:15:21 -05:00
5573c6c7e8
remove hardcoded defaults from spec
...
ensure that we test for there being defaults in the underlying scanner
2015-05-06 15:57:14 -05:00
0493f58834
Reenable metasm bind_tcp stager
2015-05-06 09:34:35 -05:00
3c2e6bb698
rollback linux bind_tcp stager metasm port
...
The new metasm port of the linux bind_tcp stager doesn't yet generate valid
executables. While we're debugging the problem, this reverts the bind_tcp.rb
stager to use the static ASM again.
2015-05-06 09:26:04 -05:00
013781fb9c
Land #5292 , WordPress custom file version check
2015-05-05 11:21:18 -05:00
18791ce933
Clean up code
2015-05-05 11:19:40 -05:00
26e7fe15f9
Merge branch 'upstream' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
2015-05-05 11:00:38 -05:00
05e4af8162
Land #5214 , initial meterpreter session recovery support
2015-05-04 16:25:27 -05:00
e6ea5511ca
update linux and windows meterpreters to use metasploit-payloads
2015-05-04 09:44:36 -05:00
55967172be
allow custom regex
2015-05-02 21:06:15 +02:00
9678479abb
check version from custom file
2015-05-02 18:34:10 +02:00
c6806b4e5f
Land #5102 , @wchen-r7's ManageEngine Desktop Central Login Utility
2015-05-01 15:20:21 -05:00
b037560c90
Do minor style fixes
2015-05-01 15:01:13 -05:00
9f0b2d4f0f
One expectation for every example
2015-05-01 14:57:48 -05:00
d880f50b98
Normalize
2015-05-01 14:54:42 -05:00
213d34ce61
Delete unnecessary let
2015-05-01 14:54:12 -05:00
8163c3cdda
Merge branch 'master' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
plugins/nessus.rb
2015-04-28 15:33:46 -05:00
59d6ad5a6d
Restore specs
2015-04-27 17:00:19 -05:00
c3f18aa899
Complete the #4989 revert
2015-04-27 16:26:34 -05:00
6a4d63ca4f
Drop explicit IPAddr to String coercion
...
MSP-12611
2015-04-27 10:48:13 -05:00
1fd601510c
Lands #5194 , merges in PowerShell session support & initial payloads
2015-04-26 16:01:51 -05:00
1cc167a7fb
Inserted ARCH_X86 payloads, removed interactive_powershell and updated base powershell session
2015-04-26 18:50:42 +01:00
19d26da11e
updated to remove powershell stand-alone payloads
2015-04-25 08:15:48 +01:00
7afb6e1aa6
Removed stand-alone payloads and will push these as a seperate fork request.
2015-04-25 07:57:43 +01:00
996cf9bf5c
Dynamic payloads
2015-04-25 07:43:48 +01:00
de09b6e330
Typo in payload spec
2015-04-25 07:30:09 +01:00
d7bc050e96
updates to payload spec
2015-04-25 07:16:17 +01:00
ff96101dba
Land #5218 , fix #3816 , remove print_debug / DEBUG
2015-04-24 13:41:07 -05:00
27f6adcd81
Land #5110 , teach Http::Response to extract hidden form inputs
2015-04-24 13:30:57 -05:00
9ecb3cc634
Fixed specs, though they did run fine locally!
2015-04-23 10:09:58 +10:00
4bbf3b722c
added payload types
2015-04-22 22:15:11 +01:00
b6df023c99
Land #4989 , @hmoore-r7's change to file: handling
...
Datastore options with file: are handled at set time
2015-04-21 23:21:22 -05:00
8f5d222e53
Land #5156 - module ranking properly handles nil
2015-04-21 14:40:01 -05:00
4224008709
Delete print_debug/vprint_debug
2015-04-21 11:14:03 -05:00
57df5c4f4f
Solve conflics
2015-04-20 23:38:34 -05:00
831e65261d
Add lengths specs
2015-04-20 17:37:41 -05:00
c7129e063c
Land #5069 , breaking up with old options
2015-04-20 16:23:44 -05:00
d7fc9294f0
Add require
2015-04-20 15:54:41 -05:00
2a3ed890d2
Add specs for Msf::Opt
2015-04-20 15:54:40 -05:00
3a5af3939d
Split all the option classes into their own files
2015-04-20 15:54:40 -05:00
3fbd4e2fe6
Land #5172 , x64 BSD shell_{bind,reverse}_tcp
2015-04-20 15:37:29 -05:00
79ca0a56f9
Land #4171 , Steam protocol support
2015-04-20 15:35:06 -05:00
3493d25ff9
Move all this to Rex
2015-04-16 21:07:23 -05:00
9bf897a829
Land #4744 , refactor powershell for msfvenom psh-cmd
2015-04-16 15:44:57 -05:00
46d53a216f
Alphabetize the specs.
2015-04-16 13:28:40 -05:00
fa506ef046
Add bsd payloads to payloads_spec.
2015-04-16 13:28:00 -05:00
42ff0decc7
Land #4722 , timing options for snmp_login
2015-04-16 02:25:29 -05:00
16234feeed
Red rank_modules ranks unloadable as Manual
...
MSP-12557
2015-04-15 16:09:19 -05:00
87d1770bac
Green rank_modules with loaded without Rank is NormalRanking
...
MSP-12557
2015-04-15 15:51:42 -05:00
bae581046b
Green module_ranks with loaded with Rank
...
MSP-12557
2015-04-15 15:49:19 -05:00
65a40a994b
Green rank_modules use NormalRanking without Rank in loaded modules
...
MSP-12557
2015-04-15 15:45:21 -05:00
d57cf8f09f
Green rank_modules with Rank
...
MSP-12557
Test that modules that need to be loaded are ranked using Rank after
loading.
2015-04-15 15:41:16 -05:00
e82fb5f836
Merge branch 'master' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
lib/msf/ui/console/command_dispatcher/db.rb
metasploit-framework-db.gemspec
metasploit-framework.gemspec
2015-04-15 14:04:35 -05:00
7a14618481
Red Msf::ModuleSet#rank_modules with create -> nil
...
MSP-12557
Msf::ModuleSet#rank_modules does not handle Msf::ModuleSet#create
returning `nil`.
2015-04-15 11:59:34 -05:00
8d1126eaa5
Land #5129 , x64 BSD prepend stubs 'n' stuff
2015-04-14 01:24:50 -05:00
2d3614f647
Implement x64 BSD exec and exe template.
...
- Fixes bug in CachedSize due to all options being set
- Adds new payload to payload_spec.
2015-04-12 12:17:25 -05:00
9f15824e2a
Merge branch 'master' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
2015-04-10 15:35:27 -05:00
284ef5bbbb
Land #5112 , Nessus REST Login Module
2015-04-10 13:32:53 -05:00
90d525088c
Green rspec
2015-04-10 11:36:23 -05:00
7e6461aea0
Travis error correction
2015-04-10 15:48:48 +05:00
8c0d5d66d0
Add spec file
2015-04-10 15:32:03 +05:00
88031c9a87
Update spec
2015-04-09 16:25:04 -05:00
3fc25a00d8
Make sure we are only grabbing hidden inputs
2015-04-09 01:09:00 -05:00
717120b8c5
Add #get_hidden_inputs for Metasploit::Framework::LoginScanner::HTTP
2015-04-09 00:34:09 -05:00
e03f2df691
Land #5002 , RMI/JMX improvements
2015-04-08 15:23:29 -05:00
f51eaef765
Add rspec
2015-04-08 02:33:27 -05:00
5ab0204b24
Update spec for new payloads
2015-04-07 11:32:00 +10:00
5e2d6c27c3
Merge branch 'master' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
db/schema.rb
lib/msf/core/db_manager/session.rb
metasploit-framework-db.gemspec
2015-04-06 11:27:00 -05:00
9145b6d717
Fix specs for uri_checksum
2015-04-05 22:56:59 -05:00
261ef51813
Add Rex::Java::Serialization exceptions
2015-04-05 18:43:03 -05:00
ebf77cd02d
Merge remote-tracking branch 'upstream/master' into msfvenom_psh_squash
...
Conflicts:
lib/msf/util/exe.rb
2015-04-05 00:24:48 +01:00
cb08e5b8da
Fix specs
2015-04-03 16:00:28 -05:00
c33a4a7fd9
rspec for jsobfu
2015-04-03 15:27:35 -05:00
e3bbb7c297
Solve conflicts
2015-04-03 14:57:49 -05:00
6455862484
Merge branch 'staging/rails-4.0' of github.com:rapid7/metasploit-framework into staging/rails-4.0
...
Conflicts:
Gemfile.lock
metasploit-framework.gemspec
2015-04-03 13:56:38 -05:00
d02a4cc197
Land #5066 : EncodedPayload#generate specs
2015-04-03 20:59:00 +10:00
a1b4cf375f
Add some minimal specs for #generate
2015-04-03 00:11:41 -05:00
fd043d4842
Fix up build and missing uri_checksum stuff
...
Somehow this made it into a merge when it shouldn't have. This fix moves
the URI checksum module to where it needs to be and updates all the
references where required. This will result in a class with the dynamic
transport branch, but I can fix that after.
2015-04-03 13:42:25 +10:00
5b5dc3ef59
Merge branch 'upstream/master' into stageless-x64
...
Merge required adjustment of the proxy datastore names that were changed.
2015-04-03 08:53:09 +10:00
f4977bf606
Land #5006 @jlee-r7 adds meterpreter specs
2015-04-01 11:05:47 -05:00
76bfaa6ce9
Fix dumb inverted logic. Thanks, rspec!
2015-03-31 14:28:07 -05:00
176cdcb836
Use sym-to-proc instead of reimplementing it
2015-03-31 11:21:53 -05:00
dfaf1b3a8f
Stub monitor_sock so we don't leak threads
2015-03-30 22:03:39 -05:00
97d788676c
Set dynamic_size true for x64 stageless
2015-03-31 07:37:46 +10:00
790a08a848
It's pronounced "exploit", not "assoc_exploit"
2015-03-30 16:21:17 -05:00
2394d4bae8
Merge branch 'staging/single-vuln-push' into feature/MSP-11934/refactor-report-exploit-success
...
Conflicts:
Gemfile
Gemfile.lock
spec/support/shared/examples/msf/db_manager/exploit_attempt.rb
2015-03-30 14:08:54 -05:00
2ab4584079
Merge remote-tracking branch 'upstream/master' into staging/single-vuln-push
2015-03-30 13:50:52 -05:00
6386289d80
Remove bogus spec
...
No longer necessary to check that we're instantiating an Msf::Module
because we get the same information by reusing an existing
Mdm::Module::Detail
2015-03-30 13:10:36 -05:00
6610504b10
Update payload spec
2015-03-30 21:07:30 +10:00
7b1ac29788
Fix subject
2015-03-30 00:53:31 -05:00
283e50fd42
Check the case of having no vuln
2015-03-30 00:09:49 -05:00
a1c755161a
Add spec coverage for appender, fix injector
2015-03-29 11:52:06 -05:00
9eca3a0ab5
Impersonation spec
2015-03-29 00:52:27 +00:00
10029eedb9
Add command specs
2015-03-29 00:05:44 +00:00
f7e3abf760
sqlcmd specs and fixes
2015-03-28 23:23:00 +00:00
3b651aecdc
Specs for sqlserver check and fixes
2015-03-28 22:59:00 +00:00
9cfafdd8b8
Land #4649 , improve post/windows/manage/run_as and as an exploit
2015-03-27 17:31:30 -05:00
2815462375
Update Mdm to staging hash
2015-03-27 15:16:33 -05:00
466ef4349e
Second verse, same as the first
2015-03-27 09:59:10 -05:00
88a8186a11
Pull up redundant hash literal
2015-03-26 19:33:53 -05:00
e0568e95c2
Land #4978 @zerosteiner adds reverse https for python meterpreter
2015-03-26 19:16:46 -05:00
d84c48cb7d
Use newer hash syntax
2015-03-25 13:39:34 -05:00
72a0909e9b
Land #4992 , @wchen-r7's support for multiple ActiveX controls on BrowserExploitServerMerge
2015-03-25 13:30:36 -05:00
95d70e7211
Remove respond_to check for protected method
...
Fails on Ruby 2.x, and doesn't really gain us anything anyway.
2015-03-25 12:50:46 -05:00
8f0c434faa
Add specs for the new method
2015-03-25 12:34:10 -05:00
0540e25db2
Calculate the java/rmi/registry/RegistryImpl_Stub hash dinamically
2015-03-25 11:29:07 -05:00
6e3e696262
Use symantec_web_gateway as an example of using send_request
2015-03-25 10:55:46 -05:00
111e3fcb88
Add rspec for #send_request
2015-03-25 01:45:03 -05:00
a5c39db6c3
Use mocks like a boss...
2015-03-24 19:30:59 -05:00
0b671d5210
Add specs for Msf::Java::Rmi::Client::Jmx::Connection
2015-03-24 19:15:25 -05:00
356e8c727c
Add specs for Msf::Java::Rmi::Client::Jmx::Server
2015-03-24 18:56:58 -05:00
464a6df5e0
Add specs for Msf::Java::Rmi::Client::Registry
2015-03-24 18:42:35 -05:00
0fe98bc023
Delete old JMX mixin specs
2015-03-24 17:30:37 -05:00
e20398a70a
Add specs for Msf::Java::Rmi::Client::Jmx::Server::Parser
2015-03-24 17:30:06 -05:00
0a352fc7d4
Finish specs for Msf::Java::Rmi::Client::Jmx::Connection::Builder
2015-03-24 17:06:05 -05:00
115c4e5a06
Add first specs for Msf::Java::Rmi::Client::Jmx::Connection::Builder
2015-03-24 16:37:05 -05:00
c26dfa263d
Ensure IP addresses are explicitly converted to strings
...
MSP-12113
2015-03-24 16:26:00 -05:00
82d545850e
Add specs for Msf::Java::Rmi::Client::Jmx::Server::Builder
2015-03-24 16:04:18 -05:00
87cac6fd55
Complete specs for Msf::Java::Rmi::Util
2015-03-24 15:41:32 -05:00
48026da35f
Fix RMI specs
2015-03-24 15:14:36 -05:00
0a07bb4d17
Add a couple of specs for Rex::Proto::Rmi::Model::ReturnValue
2015-03-24 15:08:59 -05:00
7bf00f8f47
Land #4789 , @rastating WPLMS wordpress module
2015-03-24 20:46:38 +01:00
023f47f19a
Use build instead of create
2015-03-24 13:17:42 -05:00
b9934cfd3f
Add workspace to ensure consistency with session
2015-03-24 13:14:55 -05:00
13a899b3d2
Use a named subject
2015-03-24 13:13:54 -05:00
414983ac8c
Merge branch 'feature/MSP-11925/create-user-data' into staging/single-vuln-push
...
Conflicts:
Gemfile.lock
2015-03-24 12:42:08 -05:00
6eedf6ac03
Land #4975 , egghunter tool, Resolve #4944
2015-03-24 06:20:30 +01:00
71c544c3c5
added newline at end of file
2015-03-24 06:19:27 +01:00
3c4da5c3ff
Update BES rspec
2015-03-24 00:10:18 -05:00
c7da9d6f79
Move file: prefix checks out of option class specs (would need to go into console test specs at some point)
2015-03-23 15:09:22 -05:00
79068c8ec2
Delete JMX discovery stream
2015-03-23 10:21:37 -05:00
01caf161f8
Fix syntax error in db_spec.rb
2015-03-23 01:35:26 -05:00
2e75d14d56
Update rspec
2015-03-23 00:53:55 -05:00
7282968d8a
Python reverse HTTPS stager
2015-03-21 12:43:14 -04:00
675f96ecd1
Don't need this require
2015-03-20 23:32:23 -05:00
96bcdd211c
Finished rspec
2015-03-20 20:53:04 -05:00
470464874f
The important test cases I want to cover
2015-03-20 16:53:42 -05:00
2fda115110
rspec starter
2015-03-20 16:46:09 -05:00
1226b3656f
Land #4945 , @wchen-r7's login scanner for Symantec web gateway
2015-03-20 14:44:05 -05:00
e257e742e0
Fix require
2015-03-20 14:26:55 -05:00
62871255b0
Match class and file names
2015-03-20 14:25:20 -05:00
eb73da2f39
Clean specs
2015-03-20 14:19:02 -05:00
b19f766728
Land #4942 , Gitlab Login Scanner
2015-03-20 13:02:12 -05:00
cf645772b6
Land #4960 , hosts -i, -n, and -m support
2015-03-19 21:34:14 -05:00
da51d2be67
Really add specs for Msf::Java::Rmi::Client::Registry::Parser
2015-03-19 19:07:42 -05:00
6eecbc3de1
Add specs for Msf::Java::Rmi::Client::Registry::Builder
2015-03-19 18:24:31 -05:00
6c84081552
Update db_spec.rb
2015-03-19 18:12:37 -05:00
ec90594f7e
Add support for Rex::Java::Serialization::ProxyClassDesc
2015-03-19 15:41:24 -05:00
7899881416
Update POSIX bins from master
2015-03-19 14:50:14 +10:00
a5d589ef55
Railgun calls should return a hash
2015-03-19 00:05:02 +00:00
975ddc9092
Add some spec mockery
2015-03-18 23:43:46 +00:00
8113ed2e1f
Move specs
2015-03-18 09:29:37 -05:00
0968f14ac1
Add specs for CallData
2015-03-17 20:53:02 -05:00
6315e07312
Add specs for UniqueIdentifier
2015-03-17 20:38:43 -05:00
4bc4936083
Add specs for ReturnValue
2015-03-17 17:30:53 -05:00
87b777e923
Refactor moving code to rex
2015-03-17 17:15:32 -05:00
78ec4c91e8
Completed rspec
2015-03-17 16:15:12 -05:00
f29a3f69e9
Merge branch 'master' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
metasploit-framework-db.gemspec
2015-03-17 15:47:48 -05:00
ee276434a4
Update swg spec, looking good so far
2015-03-17 15:15:32 -05:00
d5b77d053b
Update for rspec
2015-03-17 12:14:58 -05:00
503fb602f9
Get rspec going
2015-03-17 12:01:46 -05:00
2d8782d711
Fix RMI specs
2015-03-17 11:48:38 -05:00
ebe7ad07b0
Add specs, plus modify java_rmi_server modules
2015-03-17 11:26:27 -05:00
2c6b904c02
Correct spec too
2015-03-17 11:36:36 +00:00
f4a1e981ab
Add gitlab login scanner
2015-03-17 11:19:23 +00:00
abb8a32e68
update spec for dynamic meterpreter payloads
2015-03-16 18:08:13 -05:00
b68e05e536
Land #4914 , @hmoore-r7 and @BorjaMerino winhttp stagers
2015-03-13 08:24:11 -05:00
fa2fbc387c
Land #4922 , REG_MULTI_SZ for type2str
2015-03-13 01:07:27 -05:00
66a45ac7fd
Add spec for reverse_winhttps
2015-03-11 16:29:22 -05:00
ea1bc69e2e
Merge branch 'master' into feature/add-reverse_winhttp-stagers
2015-03-11 14:29:34 -05:00
ceeee4446f
Land #4904 , @hmoore-r7 reworks reverse_http/s stagers
...
They are now assembled dynamically and support more flexible options,
such as long URLs.
2015-03-11 10:41:59 -05:00
cb1a1ef692
Remove bad stager+stage combinations from the payload set
2015-03-11 00:46:24 -05:00
cb41154712
Make a MatchResult when sessions are reported
2015-03-10 15:17:57 -05:00
db351317a5
Merge with PR branch
2015-03-10 14:08:35 -05:00
0f763c2cb3
First step to reworking the winhttp stagers
2015-03-10 14:07:25 -05:00
991e72a4fa
HTTP stager based on WinHttp
2015-03-10 13:40:16 -05:00
966848127a
Refactor x86 Windows reverse_http and reverse_https stagers
2015-03-10 12:48:30 -05:00
d0324e8ad3
Final cleanup, passing specs
2015-03-09 15:50:57 -05:00
838746b021
Add user_data_is_match? method
2015-03-09 15:35:53 -05:00
60145ad9a1
Cosmetic tweaks to the specs
2015-03-09 15:08:11 -05:00
7dc0af443f
Rework specs
2015-03-09 14:41:25 -05:00
33f96f5c31
Remvoe the useless pinst variable from the previous test
2015-03-09 13:59:58 -05:00
f61c3f33bd
Validate cached_size and dynamic_size? in the payload specs
2015-03-09 13:58:18 -05:00
ff91953f92
Whitespace
2015-03-09 08:58:25 -05:00
9195479a6d
Add a context for without user_data
2015-03-09 08:56:52 -05:00
b37a975108
Use metasploit_data_models staging branch
2015-03-09 01:28:27 -05:00
cd5699dc39
Sort cases and add specs
2015-03-08 23:27:32 -05:00
38f8fe382c
Update specs
2015-03-05 12:24:41 -06:00
1c064f6b46
Land #3074 , @0x41414141 SMB Share mixin
2015-03-04 10:16:04 -06:00
a57aefb721
Add specs for QUERY information level
2015-03-03 15:24:13 -06:00
96c0f1847b
Fix examples descriptions
2015-03-03 14:48:18 -06:00
7f7b17c04e
Really add specs
2015-03-03 14:14:03 -06:00
df7c07bfd1
Really add the specs
2015-03-03 13:19:50 -06:00
a2a24c56d6
Add specs for QueryFileInformation
2015-03-03 13:04:30 -06:00
1322cb0d3f
Clean find_first2 specs
2015-03-03 12:46:25 -06:00
OJ
Brent Cook
William Vu
darkbushido
Christian Mehlmauer
jvazquez-r7
Matt Buck
HD Moore
benpturner
Trevor Rosen
James Lee
wchen-r7
joev
Luke Imhoff
root
Meatballs
Fernando Arias
Spencer McIntyre
Borja Merino