Commit Graph

3247 Commits (78bcd57694dec3dd1e393b962b8727546d9f3b5e)

Author SHA1 Message Date
Adam Cammack 5e968529bf
Land #9976, Store non-nil linux enum_network loot 2018-05-30 15:33:39 -05:00
Adam Cammack 435f965418
Use #include? over Regexps with plain strings 2018-05-30 15:32:04 -05:00
Auxilus 72fb51f877
add extra check for failed command outputs 2018-05-24 20:47:06 +05:30
Brendan Coles 45481f26b6 Add Msf::Post::OSX::Priv mixin 2018-05-22 22:25:39 +00:00
Brendan Coles b14e354b25
Land #10048, Make shell and meterpreter sessions consistent with cmd_exec 2018-05-22 21:26:47 +00:00
bwatters-r7 75562e2bbc
Land #10044, Fix is_system? in Msf::Post::Windows::Priv for non-English
Merge branch 'land-10044' into upstream-master
2018-05-21 14:24:26 -05:00
Clément Notin a8fcd9d275
Fix display of uid in post/windows/gather/win_privs
`inspect` is not necessary and triggers display of Unicode characters as "\x.." instead of printing their value.
As discussed in PR #10044
2018-05-19 01:35:19 +02:00
Brent Cook 520b8bc3c0 remove many duplicate code paths 2018-05-17 08:14:32 -05:00
Tim W a3879f0109
Land #9956, add module to extract wireless credentials on Android 2018-05-17 21:04:56 +08:00
Brent Cook 406f1fe165 fix #10046, remove invalid timeout argument on cmd_exec 2018-05-17 07:38:22 -05:00
William Vu eb0ac79143
Land #9975, local_exploit_suggester fixes 2018-05-16 06:48:02 -05:00
Tim W 67c7a718db
Land #9868, fix post/osx/capture/keylog_recorder 2018-05-10 16:47:57 +08:00
Auxilus a612c4cc65
Update wireless_ap.rb 2018-05-06 17:37:12 +05:30
Auxilus 6bd31d7921
Update wireless_ap.rb 2018-05-06 17:33:20 +05:30
Auxilus f32fda6757
Update wireless_ap.rb 2018-05-06 16:52:18 +05:30
Tim W 3e949733e2 fix wpa_supplicant parsing 2018-05-06 19:11:35 +08:00
Auxilus 40b6b97dbf
Update enum_network.rb 2018-05-05 10:56:55 +05:30
Auxilus ec55a631ef
Check if the data is nil before pasisng to store_loot
when I ran this module for linux/aarch64/meterpreter_reverse_tcp for payload running in termux, it was obvious that without root the commands will return error, It still created empty files in `.msf4/loot`

```
msf5 post(linux/gather/enum_network) > run
                                                                                                  
[*] Running module against localhost.localdomain
[*] Module running as /system/bin/sh: /usr/bin/whoami: not found
[+] Info:
[+]
[+]     Linux localhost 3.10.84-perf+ #1 SMP PREEMPT Tue Oct 24 01:07:25 CST 2017 aarch64 Android
[*] Collecting data...
[+] /system/bin/sh: /sbin/route: not found
[-] Failed to open file: /etc/ssh/sshd_config: core_channel_open: Operation failed: 1
[-] unable to get data for Network config
[+] Network config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_735775.txt
[-] unable to get data for Route table                                                            
[+] Route table stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_599334.txt
[-] unable to get data for Firewall config
[+] Firewall config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_790893.txt
[-] unable to get data for DNS config
[+] DNS config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_867340.txt
[-] unable to get data for SSHD config                                                           
[+] SSHD config stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_900906.txt                                                                  [-] unable to get data for Host file
[+] Host file stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_179877.txt
[-] unable to get data for Active connections                                                     
[+] Active connections stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_656035.txt                                                           [-] unable to get data for Wireless information
[+] Wireless information stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_168144.txt
[-] unable to get data for Listening ports                                                        
[+] Listening ports stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_999548.txt                                                              [-] unable to get data for If-Up/If-Down
[+] If-Up/If-Down stored in /data/data/com.termux/files/home/.msf4/loot/20180505105107_default_127.0.0.1_linux.enum.netwo_860869.txt
[*] Post module execution completed                                                               
msf5 post(linux/gather/enum_network) >
```
2018-05-05 10:52:08 +05:30
Brendan Coles cb29b4cf7a Update Local Exploit Suggester - Fix #9974 2018-05-05 04:41:58 +00:00
Borja Merino 916dfa56fe Add author name to the wlan_probe_request post-exploitation module 2018-05-03 11:41:09 +02:00
Auxilus 98d81476f7
Fix get_password for pwds with `"`, `=` etc 2018-05-02 19:09:36 +05:30
Auxilus fa727f5394
Update wireless_ap.rb 2018-05-02 18:22:00 +05:30
Auxilus 773e06b3ca
Update wireless_ap.rb 2018-05-02 01:28:15 +05:30
Auxilus 2817ff25cb
Update wireless_ap.rb 2018-05-02 00:00:34 +05:30
Auxilus 614de11a9c
Update wireless_ap.rb 2018-05-02 00:00:05 +05:30
Auxilus 9b00a5cffb
store loot 2018-05-01 23:10:29 +05:30
Auxilus 29467c2e37
Stylize the output 2018-05-01 22:58:17 +05:30
Auxilus bc0cad43bc
Update wireless_ap.rb 2018-04-30 19:19:12 +05:30
Auxilus ca7afae730
Add wireless_ap post module for Android
This module displays all the saved wireless AP creds in the target device
2018-04-30 19:02:30 +05:30
Brendan Coles 3351a59efb Update linux/gather/enum_protections 2018-04-29 06:52:47 +00:00
Chris Long 9ae0acd489 Removing debug statement 2018-04-28 15:56:56 -07:00
Chris Long c7caac627b Replacing Import with Fiddle, adding fork compatibility for High Sierra 2018-04-28 15:53:23 -07:00
bwatters-r7 f12f6d54a5
Land #9862, Post-exploitation module for meterpreter (Windows) to send wireless probe requests
Merge branch 'land-9862' into upstream-master
2018-04-20 14:32:01 -05:00
Tim W 1547a47026
Land #9784, add osx high sierra APFS password disclosure post module 2018-04-18 14:27:22 +08:00
Tim W 72cd97d3e4 minor documentation and comment tweaks 2018-04-18 14:22:32 +08:00
Chris Long b282db3c6a Fixing broken imports for keylog_recorder.rb and improving control chars 2018-04-12 02:08:53 -07:00
Borja Merino 2d33320921 Added a post-exploitation module to send wireless probe requests 2018-04-11 16:43:33 +02:00
Tim W ee6f83c281 match newfs_apfs regex 2018-04-10 14:45:14 +08:00
Aaron Soto be18930f12
Cleaned up output, only querying for %WINDIR% if necessary 2018-04-09 15:27:50 -05:00
Auxilus c07f2f1a09
Update run_as.rb 2018-04-09 21:24:16 +05:30
Auxilus c34b796f13
Remove temp file from dist after cmd execution
https://github.com/rapid7/metasploit-framework/issues/9830
2018-04-09 20:14:01 +05:30
thecarterb 3f40f43609 Make final output more readable 2018-04-07 11:05:47 -04:00
bwatters-r7 0faf2f4e04
Land # 8007, Added NTDSgrab module to metasploit.
Merge branch 'land-8007' into upstream-master
2018-04-03 15:56:37 -05:00
bwatters-r7 e17be05e6a
Land #9595, Add post module RID Hijacking on Windows 2018-04-03 14:12:34 -05:00
cbrnrd 0806c0725f Fix some bugs with command exits
Also fix a bug in check()
2018-04-03 10:35:49 -04:00
r4wd3r d6dc0a2d4f
Adjust rid_hijack.rb code style with rubocop recommendations. 2018-04-03 04:57:41 +02:00
cbrnrd c401872af6 Fix some logic flaws and other review things
Also make the output more reliable
2018-03-30 19:20:20 -07:00
cbrnrd 76af9d5a15 Add apfs_encrypted_volume_passwd.rb 2018-03-29 23:47:45 -07:00
Jacob Robles 26463b33a2
Land #9636, Improve post module persistence_exe 2018-03-26 17:48:53 -05:00
Jacob Robles 57b048fbf7
Remove requires, changed in-place modification 2018-03-26 17:46:18 -05:00