Commit Graph

50614 Commits (708ae76cba41f09123c987d48e6e84fab7d023c3)

Author SHA1 Message Date
Tim W 5fc0c66109 add version to check to safari exploit 2019-01-22 16:10:51 +08:00
spinfoo 24b4690a67 Merge branch 'master' of https://github.com/rapid7/metasploit-framework into sap 2019-01-20 19:45:39 +01:00
Brendan Coles 060d20694d Attribution 2019-01-20 09:18:43 +00:00
Brendan Coles 444555d3be
Land #11261, Add maximum word length to JtR wordlist generation 2019-01-20 04:14:57 +00:00
Brendan Coles e98c4ae2a4
Land #11284, Fix WMAP plugin `report_web_site` to report to a workspace 2019-01-20 00:29:00 +00:00
Thibault Miranda de Oliveira 3b4a7276c1 Pass down workspace too report_web_site 2019-01-19 22:08:28 +01:00
spinfoo 4ec5e7d23a msftidy cleanup 2019-01-19 18:16:26 +01:00
spinfoo 2bcdc550c6 Support to retrieve data from ListConfigFiles SAP webmethod 2019-01-19 17:36:47 +01:00
spinfoo 8dffa35f04 Support to retrieve data from ListConfigFiles webmethod 2019-01-19 14:45:34 +01:00
h00die f47060870a horde imp h3 imap_open 2019-01-18 19:43:45 -05:00
h00die 2585e4b708 horde imp h3 imap_open 2019-01-18 19:38:30 -05:00
James Barnett 14840f27b5
Land #11277, Fix failing Msf::DbManager::Cred tests when using a REMOTE_DB 2019-01-18 16:12:22 -06:00
Erin Bleiweiss 60a69f086b
Refactor web service status methods 2019-01-18 12:40:49 -06:00
Matthew Kienow 35f95e4b04
Update test for new cred methods
Correct remote data service test behavior.
2019-01-18 12:34:29 -05:00
William Vu f8af9a9e4d Merge remote-tracking branch 'upstream/master' into pr/10119 2019-01-18 10:43:34 -06:00
Metasploit c808cbe050
Bump version of framework to 5.0.2 2019-01-17 20:41:51 -08:00
William Vu 80e70a145d Fix typo of "architectures" in pivot command help 2019-01-17 20:16:43 -06:00
Carter Brainerd 1121ce1127
Change default filename to random 2019-01-17 20:12:53 -05:00
Carter Brainerd 334abebcb1
Implement docs review changes 2019-01-17 20:00:23 -05:00
h00die bf949b7fd2
land #11236 openapi doc typos 2019-01-17 19:56:54 -05:00
h00die 5d49f04948 not working horde imp imap_open 2019-01-17 19:55:42 -05:00
William Vu e488cf4a37 Prefer Tempfile over Rex::Quickfile for info -d
Rex::Quickfile undefines Tempfile's finalizer, preventing cleanup.
2019-01-17 13:58:03 -06:00
William Vu a5a8c88a6e Implement resource scripting for command shells 2019-01-17 13:39:03 -06:00
William Vu b412bb3136
Land #11267, RHOST fix for ms17_010_psexec 2019-01-17 13:24:56 -06:00
Erin Bleiweiss 309437c9bc
Remove accidental debug statement 2019-01-16 17:21:12 -06:00
Erin Bleiweiss 1c4ebec0e9
Fix merge conflict 2019-01-16 17:13:45 -06:00
Erin Bleiweiss 1975bbf160
Add password option to prompt 2019-01-16 17:01:09 -06:00
Erin Bleiweiss 49fd266442
Add colors and formatting 2019-01-16 15:40:59 -06:00
Erin Bleiweiss 0b37214123
Simplify deletion-related questions in msfdb 2019-01-16 15:40:50 -06:00
James Barnett 4b87d54430
Add comment explaining why we prevent loot.data update 2019-01-16 15:29:27 -06:00
Erin Bleiweiss f49acae86a
Land #11262, Make msfdb rackup file independent of framework dir location 2019-01-16 15:25:32 -06:00
James Barnett fd6527bac8
Prepend loot filenames with unique string
This should help prevent accidentally overwriting files with the same name
2019-01-16 15:20:41 -06:00
Jacob Robles 2b36491d38
Land 11269, fix java_deserialization_spec check 2019-01-16 11:00:11 -06:00
James Barnett 705c269d27
Handle empty data values for loot 2019-01-16 10:59:07 -06:00
Wei Chen 0051caf6ce Update java_deserialization_spec to rescue the right exception 2019-01-16 10:47:52 -06:00
James Barnett ffada8147e
Update loot API docs 2019-01-16 10:42:00 -06:00
James Barnett d6462fed63
Dont allow users to update loot.data 2019-01-16 10:01:22 -06:00
Clément Notin 31a7b13c19
ms17_010_psexec: fix RHOST in "authenticating..." message 2019-01-16 11:23:21 +01:00
Brent Cook 1947bae45b
Land #11230, add JuicyPotato local privilege escalation 2019-01-15 21:20:25 -06:00
Brent Cook 4f7bdc7da1 add module docs 2019-01-15 21:17:05 -06:00
Luis Rosa c8a75763b5 detail vulnerable application description 2019-01-16 01:40:36 +00:00
Luis Rosa 8a909793a5 Merge branch 'new-module-pcomclient' of github.com:lmrosa/metasploit-framework into new-module-pcomclient 2019-01-16 00:35:18 +00:00
William Vu 06de16a36f Merge remote-tracking branch 'upstream/master' into pr/10119 2019-01-15 18:33:48 -06:00
Luis Rosa ffe5db4010 new pcom client mode that allows to read and write
several types of operands
2019-01-16 00:16:38 +00:00
James Barnett dc7d611780
Base64 encode the data field for each loot operation 2019-01-15 18:01:43 -06:00
Wei Chen 70c4e719c9
Land #11190, fix multi line text in android send_sms 2019-01-15 17:18:37 -06:00
Wei Chen 27d6fffdad
Land #11125, Import/generate `ysoserial` Java serialization objects 2019-01-15 17:09:56 -06:00
Wei Chen 85555b81c4 Update code for Ruby coding style standards 2019-01-15 17:08:54 -06:00
James Barnett 5c308b1448
Remove nested loot object from host JSON
The code on the framework side that was utilizing this was removed
a while ago. It was never actually being used anywhere, and was causing
issues with getting host objects back when the loot contained
non-UTF-8 characters
2019-01-15 16:45:04 -06:00
Erin Bleiweiss 81472b529c
Simplify deletion-related questions in msfdb 2019-01-15 16:06:10 -06:00