Commit Graph

49235 Commits (792b451f40a6a4160b44f48916c109c927a66248)

Author SHA1 Message Date
William Vu 256e27c172
Land #10866, libssh_auth_bypass check updates 2018-10-25 05:20:45 -05:00
William Vu e1a7c35834 Clean up check_banner 2018-10-25 05:20:20 -05:00
Green-m f90992dc08
Fix typo. 2018-10-25 17:55:01 +08:00
Green-m 760b14e71d
Update the version match code. 2018-10-25 15:33:54 +08:00
Wei Chen 6920470f99
Land #10821, Enhance windows compiler w/ new functions 2018-10-24 20:28:36 -05:00
Wei Chen 06e1d16c60 Rm _snprintf because it causes sessions to fail (due to a crash) 2018-10-24 17:50:10 -05:00
Metasploit 59ec60e49c
automatic module_metadata_base.json update 2018-10-24 14:28:47 -07:00
Wei Chen 2ab9a003d4
Land #10864, Add Cisco WebEx RCE Modules 2018-10-24 16:20:00 -05:00
Wei Chen f52cbdf9d7 Change option types 2018-10-24 16:18:17 -05:00
Wei Chen 4ec7e41f9e Change option type 2018-10-24 16:16:03 -05:00
Wei Chen e84ba62740 Cosmetic changes for local/webexec 2018-10-24 16:13:47 -05:00
Shelby Pace 6f58a15e00
removed template line 2018-10-24 15:14:15 -05:00
Brent Cook 4dd2147d60
Land #10857, ensure os_flavor can be supplied for non Windows OS 2018-10-24 14:28:32 -05:00
Elazar Broad 16d633fabd
Remove spaces before EOL 2018-10-24 11:04:41 -04:00
Shelby Pace cecc7177f7
added documentation for modules 2018-10-24 09:47:05 -05:00
Shelby Pace 3729e9ed7b
added description, references 2018-10-24 09:46:00 -05:00
kr3bz 2e2d742ae7
Added updated mercury_login
Added additional space for the payload, made recommended changes, msftidy does not produce errors, readded null byte as a badchar.
2018-10-24 11:08:37 +02:00
Green-m 3c5aa93a0d
Fix for style consistency. 2018-10-24 15:17:37 +08:00
Green-m 129425ca94
Fix session report bug when database disabled. 2018-10-24 14:48:03 +08:00
William Vu 458f635159 Add supported payloads to module description 2018-10-24 01:30:27 -05:00
William Vu 839c4e0467 Drop rank to AverageRanking for now 2018-10-24 01:30:17 -05:00
William Vu 37560760df Add RequiredCmd for generic and telnet 2018-10-24 01:23:15 -05:00
Elazar Broad ef2854c918
Use in-memory reflection for executing the payload
Use to_win32pe_psh_reflection() instead of to_win32pe_psh_net() in order to reduce the amount of processes and forensic artifacts created by this module.
2018-10-23 22:12:10 -04:00
Elazar Broad d75c599929
Use ShellExecuteA to spawn eventvwr.exe
Use ShellExecuteA from railgun to spawn eventvwr.exe, as opposed to cmd /c. This reduces the amount of processes generated by this module.
2018-10-23 21:52:36 -04:00
Elazar Broad da4b424780
Fix typo in cleanup message 2018-10-23 21:33:49 -04:00
bwatters-r7 569c2e03c9
Fix exploit relics and documentation 2018-10-23 17:15:34 -05:00
William Vu bf5fe2864f Update module doc 2018-10-23 16:28:49 -05:00
William Vu 67f2933b58 Make fewer assumptions about Apache
Returning CheckCode::Safe is too aggressive for a supplemental check.
Admins can change the directive in top-level configuration, anyway.
2018-10-23 16:26:17 -05:00
Shelby Pace 34ae9c38f9
added WebEx modules, arch check 2018-10-23 15:51:23 -05:00
Metasploit 51a8fee018
automatic module_metadata_base.json update 2018-10-23 10:34:37 -07:00
bwatters-r7 927a29530b
Remove duplicated files 2018-10-23 12:31:18 -05:00
Brent Cook 65c0573738
Land #10848, improve play_youtube post module 2018-10-23 12:26:55 -05:00
Jeffrey Martin efeacf8666
ensure os_flavor can be supplied for no Windows OS 2018-10-23 12:22:57 -05:00
Metasploit db9070449c
automatic module_metadata_base.json update 2018-10-23 10:14:24 -07:00
Brent Cook b65f467ada
Land #10851, add ndkstager to data/exploits 2018-10-23 12:04:57 -05:00
Brent Cook e992b63520
Land #10856, add SSL support to php meterpreter 2018-10-23 11:59:09 -05:00
Brent Cook e73a568839
Land #10855, Enable non-session command output for SSH modules 2018-10-23 11:58:16 -05:00
kr3bz be2ec76ed2
Added modified mercury_login.rb
Modified the script with recommendations.
2018-10-23 17:17:30 +02:00
William Vu 9c49acb924 Fail scanner instead of returning 2018-10-23 10:07:38 -05:00
William Vu 9c7a705868 Update module doc 2018-10-23 09:53:46 -05:00
William Vu 58a1b65e60 Update Exploit::CheckCode::Unknown
Brain fart.
2018-10-23 09:34:48 -05:00
William Vu 899238a4e3 Update libssh_auth_bypass with command output 2018-10-23 09:34:42 -05:00
William Vu 4182777488 Support SSH shell/exec channel request output
Looks like channel[:data] was initialized but never used.
2018-10-23 09:34:12 -05:00
Spencer McIntyre c71bbc1019 Remove spaces that msftidy caught 2018-10-23 10:13:44 -04:00
Brendan Coles 0e7259040d
Update modules/exploits/windows/imap/mercury_login.rb
Co-Authored-By: kr3bz <racic.ivan@gmail.com>
2018-10-23 14:32:53 +02:00
Brendan Coles 903f5e9ede
Update modules/exploits/windows/imap/mercury_login.rb
Co-Authored-By: kr3bz <racic.ivan@gmail.com>
2018-10-23 14:32:44 +02:00
Brendan Coles 0b37e29c9a
Update modules/exploits/windows/imap/mercury_login.rb
Co-Authored-By: kr3bz <racic.ivan@gmail.com>
2018-10-23 14:32:38 +02:00
Brendan Coles 43dd23042b
Update modules/exploits/windows/imap/mercury_login.rb
Co-Authored-By: kr3bz <racic.ivan@gmail.com>
2018-10-23 14:32:10 +02:00
William Vu 326597e842 Update module doc with new output 2018-10-23 07:14:19 -05:00
William Vu bdf2d44415 Augment check with Apache Server header 2018-10-23 07:04:14 -05:00