Commit Graph

14104 Commits (7868db7b15bbdeebe3e886485d10c782e9e2d833)

Author SHA1 Message Date
William Vu 3cb8ef82dc
Land #11103, CreateSession option for aux modules 2018-12-12 14:32:26 -08:00
William Vu d5309999db
Land #11107, double negative logic cleanup 2018-12-11 18:32:32 -08:00
Brent Cook 36a2db2b46
Land #11082, Update show plugins to show all available plugins as well 2018-12-10 08:22:45 -08:00
Brent Cook 50fc49ff5f
Land #11081, Add Msf::Post::Linux::Kernel.lkrg_installed? method 2018-12-08 12:10:18 -06:00
Brent Cook a337e80f8e
Land #11066, add rpc output locking, fix logging 2018-12-08 12:10:17 -06:00
Brent Cook fe535376ae
Land #10940, add default service mapping to imports 2018-12-08 12:08:49 -06:00
Brent Cook edc0212d21
Land #11064, Add Msf::Post::Linux::Kernel.kernel_config method 2018-12-06 18:53:51 -08:00
Brent Cook a67d05091b
Land #11062, Suppress 'Permission denied' errors when enumerating SUID files 2018-12-06 18:24:31 -08:00
Metasploit f8b6b5331d
Bump version of framework to 4.17.30 2018-12-06 10:03:40 -08:00
Brent Cook 0b5368330c
Land #10964, add initial golang modules for enumerating owa/o365 2018-12-04 08:36:43 -08:00
Brent Cook 67155d33cf
Land #11050, Add protection checks to Msf::Post::Linux::Kernel lib 2018-12-03 14:41:29 -08:00
Brent Cook dc7954c829
Land #11053, Add Openwall detection to Linux system lib 2018-12-03 14:41:29 -08:00
Jeffrey Martin 73724f111b
Land #10798, Cisco device manager update 2018-12-02 23:41:28 -08:00
Brendan Coles 366642585b
Land #11046, Fix Msf::Post::Linux::System.get_hostname to return hostname 2018-11-30 23:04:43 -08:00
Metasploit 2236e79771
Bump version of framework to 4.17.29 2018-11-30 13:02:40 -08:00
Metasploit 20147734c1
Bump version of framework to 4.17.28 2018-11-30 12:46:41 -08:00
Jacob Robles 340f6d7d0d
Land #10952, WP GDPR Compliance plugin exploit 2018-11-29 11:35:28 -08:00
Wei Chen 56e0c51897
Land #10965, Add the macOS LPE from pwn2own2018 (CVE-2018-4237) 2018-11-27 12:02:49 -08:00
William Vu b105d401a6
Land #10727, nil notes fix for external modules
This fixes loading of external modules without notes.
2018-11-27 09:25:32 -08:00
Brent Cook 80dda9e7be
Land #10509, Add source meta command for shell sessions 2018-11-26 12:30:23 -08:00
Brent Cook 7d62375c9f
Land #11017, Fix userns_enabled? check for unprivileged_userns_clone 2018-11-26 12:09:45 -08:00
Brent Cook 2867e9c709
Land #11027, revert datastore changes that broke aliases 2018-11-26 08:58:18 -08:00
Green-m 83392e1e47
Land #11003, fix smb login scanner failure. 2018-11-22 21:57:41 -08:00
Metasploit fbdadafedd
Bump version of framework to 4.17.27 2018-11-22 10:04:18 -08:00
Brent Cook 91f427327e
Land #11002, Support Python 3.7 in external probe scanner code 2018-11-21 15:20:07 -08:00
Brent Cook 42a8022fd1 Land #11001, Properly error out when attempting to format ELFs 2018-11-21 17:16:15 -06:00
Adam Cammack a8a864cc80
Land #10802, Make `msfvenom -f` case-insensitive 2018-11-21 14:08:20 -08:00
Brent Cook 445fea75f5
Land #10872, Add --pad-nops option for msfvenom 2018-11-21 14:04:30 -08:00
Adam Cammack 06062e11fa
Land #10998, Unregister datastore aliases properly 2018-11-21 12:38:35 -08:00
Brent Cook 7ef4e42c08
Land #10972, Rework session_compatible? check in post mixin, excluding ARCH_CMD modules 2018-11-19 14:12:04 -08:00
Brent Cook a0dd7903d4
Land #10989, Coerce DisablePayloadHandler into a Boolean string 2018-11-19 11:27:46 -08:00
Brent Cook 3a5153281e
Land #10971, Fix extraneous whitespace in check output 2018-11-16 01:44:29 -08:00
Metasploit f7b5e7bbf9
Bump version of framework to 4.17.26 2018-11-15 10:05:25 -08:00
Jacob Robles 77da5b145e
Land #10828, git submodule url exec CVE-2018-17456 2018-11-14 10:51:16 -08:00
christopher lee eaa55a202a
Landing #10932, Cleanup go module loader (lib/msf/core/modules/external/go/src/metasploit/module.go) 2018-11-14 07:54:21 -08:00
Brent Cook ed11b2e5c3
Land #10951, prepend python and go paths when running external modules 2018-11-14 07:36:34 -08:00
christopher lee 30f0890ab3
Land #10758, Golang module support 2018-11-14 07:36:34 -08:00
Brent Cook 70874c74bd
Land #10945, Ensure `sessions --up` shows only services which are up 2018-11-10 09:14:23 -08:00
Jeffrey Martin a76a5ce83b
Land #9744, Add synchronization around public module metadata cache methods 2018-11-09 10:44:05 -06:00
Metasploit 04fcbbc70f
Bump version of framework to 4.17.25 2018-11-08 10:03:00 -08:00
Brendan Coles 8381372e0b
Land #10823, store host system data from post/system libs in database 2018-11-05 18:47:25 -08:00
Brent Cook c2405c2750
Land #10888, Fix Net::SSH::CommandStream session open failure 2018-11-05 09:16:54 -08:00
Metasploit 398395561b
Bump version of framework to 4.17.24 2018-11-02 10:11:45 -07:00
Jeffrey Martin db57101b25
Land #10900, Turn off thread exception reporting only if it's an available method 2018-11-02 06:39:07 -07:00
Brent Cook cdcbc4783b
Land #10899, Preserve Ruby 2.4.x and earlier thread exception reporting behavior 2018-11-01 15:47:26 -07:00
Metasploit d16019932c
Bump version of framework to 4.17.23 2018-11-01 10:04:13 -07:00
Brent Cook 2ef7af93cc Land #10563, Add 'Notes' metadata section
This also backports portions of #10348 for console search
2018-10-30 11:00:37 -05:00
bwatters-r7 5463191e51
Land #10553, add x86/xor_dynamic and x64/xor_dynamic encoders
Merge branch 'land-10553' into upstream-master
2018-10-30 07:59:08 -07:00
Metasploit e843da93a5
Bump version of framework to 4.17.22 2018-10-25 21:01:59 -07:00
Brent Cook 67572e2c37
Merge pull request #10870 from jmartin-r7/backport_cache_updates
Backport cache updates
2018-10-25 17:57:09 -05:00
Wei Chen a43edc4fbf
Land #10864, Add Cisco WebEx RCE Modules 2018-10-25 12:33:06 -07:00
Brent Cook 4d2002f98a
Land #10857, ensure os_flavor can be supplied for non Windows OS 2018-10-25 14:30:37 -05:00
Metasploit 993ceb0d1a
Bump version of framework to 4.17.21 2018-10-25 10:06:27 -07:00
Wei Chen de88d70c22
Land #10744, Add AUDIO_EFFECTS to distinguish from others 2018-10-24 17:18:15 -05:00
William Vu e423d5c358
Land #10707, module traits to augment module rank 2018-10-24 17:18:09 -05:00
William Vu b43d23035a
Land #10696, autofilter_{ports,services} in cache 2018-10-24 17:09:28 -05:00
William Vu f0096227e7
Land #10505, post-auth and default creds info 2018-10-24 17:09:28 -05:00
Wei Chen c01212e7c4
Land #10341, Add check method Boolean to module cache and info and search commands 2018-10-24 17:09:28 -05:00
Jeffrey Martin 04fff84386
Land #10110, Use JSON instead of PSTORE for module metadata 2018-10-24 17:08:36 -05:00
Jeffrey Martin 39ca3f7ec9
Land #10074, Fixed bug in module cache 2018-10-24 16:57:10 -05:00
Matthew Kienow 3ed7adf86a
Land #9646, fix stale module cache issue 2018-10-24 16:55:34 -05:00
Brent Cook aebd5b4d3e
fix msfvenom referencing a nil typed_module_set 2018-10-24 16:54:36 -05:00
Brent Cook 0465a7bc71
Land #9220, Module cache improvements 2018-10-24 16:53:11 -05:00
Brent Cook c7ad4a47eb
Land #10851, add ndkstager to data/exploits 2018-10-23 14:48:43 -07:00
Brent Cook 2c347d51b1
Land #10855, Enable non-session command output for SSH modules 2018-10-23 16:44:03 -05:00
asoto-r7 2a0deefddd
Land #10450, Implementation of CTRL+Z in reverse shell session
Additionally, a check was added to disable this new functionality on
Windows command shell payloads.
2018-10-22 14:19:45 -07:00
Metasploit d4ababdc9b
Bump version of framework to 4.17.20 2018-10-19 12:10:53 -07:00
Brent Cook f88790c2c0
Land #10820, Add libssh authentication bypass scanner/"exploit" 2018-10-19 12:03:28 -07:00
William Vu b9dc8b81aa
Land #10833, Net::SSH::CommandStream fixes 2018-10-18 21:02:13 -07:00
Metasploit 6fe8936e06
Bump version of framework to 4.17.19 2018-10-18 10:06:10 -07:00
Brent Cook ce30fcabaf
Land #10824, add PTY option to Net::SSH::CommandStream 2018-10-17 13:52:11 -07:00
Brendan Coles a4d2bf30c1
Land #10816, Add a `bg` alias for `background` command 2018-10-16 09:59:08 -07:00
Brent Cook 5e27bdec14
Land #10790, don't log peer if it represents > 1 target 2018-10-12 00:23:18 -07:00
Metasploit 82512a1558
Bump version of framework to 4.17.18 2018-10-11 10:06:59 -07:00
Brent Cook db19d8e6c0
Land #10787, Remove unused 'unknown' author mapping in author.rb 2018-10-10 11:06:12 -07:00
Brent Cook 285a183f27
Land #10781, Fix error in rpc_shell_read RPC method. 2018-10-10 07:05:18 -07:00
Brent Cook 4097c620a1
Land #10770, show full path for webcam_stream file 2018-10-09 03:35:09 -07:00
William Vu 7bc018bfcc
Land #10773, session.platform TypeError fix
This also adds an "unknown" platform class.
2018-10-08 12:39:56 -07:00
Brent Cook 342f3b9637
Land #10755, 50, it's a magic number (sorry 2) 2018-10-05 13:10:05 -07:00
William Vu 736a2dfdb7
Land #10747, apktool output on failed injection 2018-10-05 01:24:46 -07:00
Metasploit ad22d961a4
Bump version of framework to 4.17.17 2018-10-04 10:06:57 -07:00
Brent Cook 7142c29de1
Land #10686, ARGS, TIMEOUT, and output to upload_exec module
Merge remote-tracking branch 'upstream/pr/10686' into upstream-master
2018-10-04 02:31:30 -07:00
Brent Cook af9cf4380b
Land #10699, Avoid double-closing meterpreter channels 2018-10-02 11:46:31 -07:00
Brent Cook 3ad5bd429a
Land #10732, add api key for android wlan_geolocate 2018-10-02 11:46:30 -07:00
Jacob Robles 918e04bace
Land #10718, fix typo in route command examples 2018-10-02 11:46:29 -07:00
bwatters-r7 c49402b506
Land #10703, Update payloads to include the new Kiwi release 2018-10-02 13:42:12 -05:00
William Vu c87b6bba0b
Land #10711, help on empty args for reload_lib 2018-09-27 21:27:11 -07:00
William Vu b94958234a
Land #10705, reload_lib -a/--all options 2018-09-27 20:17:00 -07:00
Metasploit f56194516e
Bump version of framework to 4.17.16 2018-09-27 10:03:14 -07:00
Brent Cook 92cd40c8db
Land #10594, Fix hashdump and user enumeration on new macOS versions 2018-09-24 20:20:38 -07:00
Green-m 0c88820fce
Land #10687, add pry command to meterpreter. 2018-09-24 10:48:42 -07:00
William Vu 456f7613cf
Land #10684, stray quote fix for writable? raise 2018-09-24 10:48:41 -07:00
William Vu c3f5d5c168
Land #10685, NameError fix for cmd_shell 2018-09-24 10:48:41 -07:00
bwatters-r7 6157ad76fe
Land #10575, add meterpreter chmod command
Merge branch 'land-10575' into upstream-master
2018-09-24 12:44:42 -05:00
William Vu 058eabbd24
Land #10625, repeat command to repeat commands 2018-09-20 13:27:24 -07:00
Metasploit 8fbbff30db
Bump version of framework to 4.17.15 2018-09-20 10:03:08 -07:00
Adam Cammack 228c08bb4d
Land #10659, Minor code cleanups 2018-09-19 12:58:09 -07:00
William Vu 2f515318e7
Land #10666, compatible_sessions NoMethodError fix 2018-09-19 01:48:19 -07:00
Brendan Coles 9b466d93bf
Land #10665, print error msg when killing an invalid job ID - Fix #10655 2018-09-18 02:35:17 -07:00
h00die 001b576fa4
Land #10653 additional gcc paths for solaris libs 2018-09-17 15:24:56 -07:00
William Vu 1c21ec588a
Land #10645, writable? method for Msf::Post::File 2018-09-15 15:29:16 -07:00
Brendan Coles 057228c60b
Land #10638, Warn when listing inactive sessions without DB connection
Replaces confusing message and stack trace with a warning message,
when the `sessions -d` command is used to list inactive sessions
when no database is connected.
2018-09-14 22:36:35 -07:00
William Vu 3ff9b3b0c9
Land #10389, PTY support for Meterpreter "shell" 2018-09-14 09:18:34 -07:00
Metasploit 41068c6ccb
Bump version of framework to 4.17.14 2018-09-13 14:20:42 -07:00
William Vu dddc634f78
Land #10639, self.prompt initialization fix 2018-09-13 13:59:29 -07:00
William Vu f3e94c6d20
Land #10637, exploit.rb autofilter doc fixes 2018-09-13 12:26:17 -07:00
h00die 2b44f16310
Land #10633 fix for solaris pidof for more versions 2018-09-13 10:12:22 -07:00
Metasploit d3bf71fc35
Bump version of framework to 4.17.13 2018-09-13 10:03:01 -07:00
h00die dbb48fed9f
Land #10634 fix a bug in is_root? on sol/lin 2018-09-13 08:24:13 -07:00
William Vu 0f7b8a2453
Land #10477, console prompt fixes and refactor 2018-09-12 16:06:16 -07:00
William Vu 90c31b96a7
Land #10631, warning message fix for #10619 2018-09-12 15:38:01 -07:00
William Vu 2cde5641ad
Land #10619, mimikatz/kiwi warning per OS version 2018-09-12 15:13:18 -07:00
Brendan Coles dc0ee43117
Land #10621, Update Msf::Post::Solaris::System has_gcc? method
Updated the Msf::Post::Solaris::System has_gcc? method to also check the
default path for gcc on Solaris: /usr/sfw/bin/gcc
2018-09-11 02:46:43 -07:00
William Vu 83c01e3de7
Land #10617, sessions -x fix for when LURI is used 2018-09-11 01:02:31 -07:00
OJ f5b83943ba
Land #10618 - Fix Msf::Post::Solaris::Kernel class name 2018-09-11 00:24:24 -07:00
Brent Cook bd8dea2c21
Land #9897, Fix #8404 ListenerComm Support For Exploit::Remote::TcpServer 2018-09-10 14:27:34 -07:00
Brent Cook 42784dceb1
Land #10593, Refactor SSH mixins and update modules 2018-09-10 13:43:30 -07:00
Metasploit 60578a21c3
Bump version of framework to 4.17.12 2018-09-07 10:16:30 -07:00
Adam Cammack 9e3f4744f7
Land #10602, Fix windows/shell/reverse_ord_tcp doc 2018-09-07 10:08:28 -07:00
Metasploit 3b2d5b0c15
Bump version of framework to 4.17.11 2018-09-06 10:02:54 -07:00
Brent Cook 1c05bb6ef3
Land #10584, fix session upgrade HANDLE_TIMEOUT and upgrading osx shells 2018-09-06 03:54:18 -07:00
Wei Chen 85475507b9
Land #10591, Fix target DisableNops not being passed to payload 2018-09-05 18:58:39 -07:00
Tim W 3ab5b58a6b
Land #10585, fix #10577, fix "Exploit failed: TypeError no implicit conversion of Array into Integer" 2018-09-04 11:56:04 -07:00
Tim W 12ef780bc2
Land #10437, sync some linux local libraries to solaris 2018-09-03 07:49:38 -07:00
Brent Cook 035e790fd5
Land #10567, Bump kiwi version 2018-08-31 13:27:10 -07:00
Metasploit cb1b0b92ef
Bump version of framework to 4.17.10 2018-08-30 10:03:04 -07:00
bwatters-r7 631e8bf110
Land #8983, Add peinjector post module
Merge branch 'land-8983' into upstream-master
2018-08-28 16:55:01 -07:00
William Vu 0564b0be09
Land #10507, GPP creds for db_import 2018-08-28 16:55:01 -07:00
Brent Cook 0294d7eed1
Land #10516, Add brace expansion encoder and update ${IFS} encoder 2018-08-27 08:49:42 -07:00
Brent Cook 4e967d45ab
Land #10520, Only allow setting persistence on payload jobs 2018-08-27 08:49:42 -07:00
William Vu f9c7de978e
Land #10379, tab completion for multiple commands 2018-08-27 08:49:41 -07:00
William Vu 415379e7ee
Land #9364, HP PJL/SNMP CVE-2017-2741 exploit
Finally!
2018-08-23 20:50:23 -07:00
Metasploit 53de99a8b4
Bump version of framework to 4.17.9 2018-08-23 10:07:01 -07:00
William Vu 9696adb09c
Land #10500, stack trace fix for jobs -K 2018-08-21 09:05:07 -07:00
asoto-r7 36642d3071
Land #10449, Implementation of download/upload file in reverse shell 2018-08-21 09:05:07 -07:00
asoto-r7 8ce1329e74
Land #10448, Implementation of CTRL+C to send SIGINT signal 2018-08-21 09:05:06 -07:00
Brent Cook 8c29a3b5da
Land #10471, Import target DefaultOptions into the datastore 2018-08-21 09:05:06 -07:00
Brent Cook fb042469df
Land #10493, update help for show and search commands 2018-08-21 11:02:41 -05:00
Metasploit 83384269c9
Bump version of framework to 4.17.8 2018-08-16 14:19:47 -07:00
Jeffrey Martin ce1fe7fe77
Land #10203, Add command for persistent job handler when msf restart 2018-08-16 13:43:26 -07:00
William Vu 5094040242
Land #10469, bug fixes for shell's prompt_yesno 2018-08-16 13:43:26 -07:00
William Vu bf7c530f7e
Land #10456, known_hosts fix for SSH modules 2018-08-16 13:43:26 -07:00
William Vu e11266f0a0
Land #10464, prompt to use plain module name 2018-08-16 13:43:25 -07:00
Metasploit 902d2bca96
Bump version of framework to 4.17.7 2018-08-16 10:02:42 -07:00
Adam Cammack 09c0947aa7
Land #10459, Fix PMA scanner vs. non-PMA hosts 2018-08-15 12:46:56 -07:00
Erin Bleiweiss aacbc43c1c
Land #10451, Add 'payload' to module search command help documentation 2018-08-15 13:45:50 -05:00
William Vu e2b91bdfc1
Land #10433, pry and irb in developer dispatcher 2018-08-15 11:40:29 -07:00
Tim W 22b1bb03e7
Land #10440, fix apk injection on windows 2018-08-12 10:16:45 -07:00
Metasploit b09fa1caf8
Bump version of framework to 4.17.6 2018-08-09 10:02:53 -07:00
William Vu 1949cade78
Land #10430, history clearing and bug fixes 2018-08-07 15:18:03 -07:00