ceeee4446f
Land #4904 , @hmoore-r7 reworks reverse_http/s stagers
...
They are now assembled dynamically and support more flexible options,
such as long URLs.
2015-03-11 10:41:59 -05:00
cb1a1ef692
Remove bad stager+stage combinations from the payload set
2015-03-11 00:46:24 -05:00
cb41154712
Make a MatchResult when sessions are reported
2015-03-10 15:17:57 -05:00
db351317a5
Merge with PR branch
2015-03-10 14:08:35 -05:00
0f763c2cb3
First step to reworking the winhttp stagers
2015-03-10 14:07:25 -05:00
991e72a4fa
HTTP stager based on WinHttp
2015-03-10 13:40:16 -05:00
966848127a
Refactor x86 Windows reverse_http and reverse_https stagers
2015-03-10 12:48:30 -05:00
d0324e8ad3
Final cleanup, passing specs
2015-03-09 15:50:57 -05:00
838746b021
Add user_data_is_match? method
2015-03-09 15:35:53 -05:00
60145ad9a1
Cosmetic tweaks to the specs
2015-03-09 15:08:11 -05:00
7dc0af443f
Rework specs
2015-03-09 14:41:25 -05:00
33f96f5c31
Remvoe the useless pinst variable from the previous test
2015-03-09 13:59:58 -05:00
f61c3f33bd
Validate cached_size and dynamic_size? in the payload specs
2015-03-09 13:58:18 -05:00
ff91953f92
Whitespace
2015-03-09 08:58:25 -05:00
9195479a6d
Add a context for without user_data
2015-03-09 08:56:52 -05:00
b37a975108
Use metasploit_data_models staging branch
2015-03-09 01:28:27 -05:00
cd5699dc39
Sort cases and add specs
2015-03-08 23:27:32 -05:00
38f8fe382c
Update specs
2015-03-05 12:24:41 -06:00
1c064f6b46
Land #3074 , @0x41414141 SMB Share mixin
2015-03-04 10:16:04 -06:00
a57aefb721
Add specs for QUERY information level
2015-03-03 15:24:13 -06:00
96c0f1847b
Fix examples descriptions
2015-03-03 14:48:18 -06:00
7f7b17c04e
Really add specs
2015-03-03 14:14:03 -06:00
df7c07bfd1
Really add the specs
2015-03-03 13:19:50 -06:00
a2a24c56d6
Add specs for QueryFileInformation
2015-03-03 13:04:30 -06:00
1322cb0d3f
Clean find_first2 specs
2015-03-03 12:46:25 -06:00
8328c5c5e9
Add specs for SMB_FIND_FILE_BOTH_DIRECTORY_INFO requests
2015-03-03 12:43:41 -06:00
597f99ade9
Finish TRANS2 specs
2015-03-03 11:46:13 -06:00
a204b550d2
Add specs for TRANSACTION2 helper methods
2015-03-03 10:55:55 -06:00
bece2e7088
Really add the specs
2015-03-03 10:32:35 -06:00
4bbc0b5b0b
Fix valid_request on negotiate_spec
2015-03-02 17:39:39 -06:00
a92dc7e73d
Fix nt_create_andx specs
2015-03-02 17:38:24 -06:00
4fc08d7243
Add specs for Msf::Exploit::Remote::SMB::Server::Share::Command::ReadAndX
2015-03-02 17:32:03 -06:00
b5e5d390ac
Add specs for Msf::Exploit::Remote::SMB::Server::Share::Command::NtCreateAndx
2015-03-02 16:55:36 -06:00
584e5f7d8b
Add specs for Exploit::Remote::SMB::Server::Share::Command::Negotiate
2015-03-02 16:29:33 -06:00
50f5baa7c6
Add specs for Msf::Exploit::Remote::SMB::Server::Share::Command::Close
2015-03-02 16:00:02 -06:00
00c4d704f2
Update rspec to include new functionality
...
Added a new test for testing when all versions of a plugin are
vulnerable and added tests for checking theme versions from the
style.css file
2015-02-26 21:18:51 +00:00
3efae77212
Use /dev/null instead of /etc/passwd
...
File.read returns "" on /dev/null. Don't try it on /dev/zero. :-)
2015-02-26 14:19:25 -06:00
f625ad4f9c
Remove unnecessary tests in spec
2015-02-26 14:12:39 -06:00
4aedd7e5d3
Fix spec for fsquery support
2015-02-25 18:14:17 -06:00
a543eccdb4
Add FSQUERY test to spec
2015-02-25 17:18:29 -06:00
af5e0ec0d6
Update spec with a couple more cases
...
Also fix a bad copypasta.
2015-02-25 16:43:40 -06:00
513d11ce93
Complete replacement of "pathname" with "path"
...
See e8c2c3687d
2015-02-25 15:52:26 -06:00
c95855ff11
Add fsdelete test to spec
2015-02-25 15:44:12 -06:00
26cbeb011b
Add fsdownload test to spec
2015-02-25 15:00:37 -06:00
f61fb0555d
Add case-insensitive test of delete
2015-02-25 10:47:36 -06:00
36e40f02c9
Fix delete in datastore spec
...
I was tired and accidentally a should. :(
2015-02-25 10:47:32 -06:00
2a66a6ae88
Add delete to datastore spec
2015-02-24 20:57:38 -06:00
12a99ecee5
Land #4796 , Handle incompatible payload architecture in BES
2015-02-24 10:02:25 -06:00
8c5ff858d0
Land #4812 , hp_sys_mgmt_login configurable URIs
2015-02-23 19:04:14 -06:00
8b0354b193
Fix the SSL boolean test
2015-02-23 14:29:28 -06:00
fb9a054713
Fix rspec
...
The login URi is user-configurable so we shouldn't dictate this
anymore.
2015-02-20 22:08:09 -06:00
641b67469d
add payload specs for reverse_http_proxy_pstore
...
PR predated the spec
2015-02-20 12:23:51 -06:00
1835120851
Update rspec for get_payload in BES
2015-02-19 02:45:54 -06:00
2847507f03
Add a chef brute force module
2015-02-17 23:49:57 -06:00
27d5ab45b4
Add a zabbix brute force module
2015-02-17 22:56:08 -06:00
0debbbb948
Fixup spec
2015-02-16 19:07:55 +00:00
33560a2657
Refactor Msf::Exploit::Powershell to Rex::Powershell to allow for
...
msfvenom usage.
2015-02-10 20:53:46 +00:00
b8f614ef59
Fix namespaces in specs
2015-02-10 12:00:04 -06:00
8222dc9302
Reorganize specs
2015-02-10 11:57:09 -06:00
1f4fdb5d18
Update from master
2015-02-10 10:47:17 -06:00
2c7777f831
Land #4601 , @wchen-r7's tool to lookup md5 hashes
2015-01-30 19:04:34 -06:00
9f4daa4e03
Add a couple more specs
2015-01-27 14:09:00 -06:00
a2c7ebc2b1
Simplify logic
2015-01-27 09:05:11 -06:00
5985f37fe8
Only need one origin
2015-01-27 09:02:30 -06:00
ca44ae2109
Consistent commas
2015-01-27 08:41:24 -06:00
eac7b11a87
Merge remote-tracking branch 'upstream/master' into bug/4634/blank-username
...
Conflicts:
lib/msf/ui/console/command_dispatcher/db.rb
spec/lib/msf/ui/console/command_dispatcher/db_spec.rb
2015-01-27 08:40:07 -06:00
aea26e1e21
Add negative spec
2015-01-27 08:14:48 -06:00
964d37dbc5
Add a simple spec for -u
...
Need lots more
2015-01-26 20:37:17 -06:00
63c3832d7d
Also test for nonmatching passwords
2015-01-26 17:02:58 -06:00
1410477fe9
Use the blank password/username variables
2015-01-26 17:00:45 -06:00
2294ea0e93
Squash commit for blank creds search and test
...
This should fix up #4642 with respect to #4504 .
Squashed commit of the following:
commit 124d53ccb00cd200bede092e893dda7e033d3e17
Merge: cb2bef8
2015-01-26 16:26:30 -06:00
cb2bef878b
Land #4504 , @disenchant's get/getg improvement
2015-01-26 12:49:34 -08:00
ff0af805e3
Add a warning before use
2015-01-23 22:26:41 -06:00
720def9d0a
Update java_deserializer specs
2015-01-22 14:50:48 -06:00
c33e5faed3
Change namespace
2015-01-21 01:00:45 -06:00
f85890a249
Change specs filename
2015-01-21 00:58:32 -06:00
81d0eca45b
Fix Msf::Jmx::Handshake specs
2015-01-21 00:57:50 -06:00
2ef57d6172
Add specs for Msf::Jmx::MBean::ServerConnection
2015-01-20 19:10:21 -06:00
7e2f9b32b3
Add specs for Msf::Jmx::MBean::ServerConnection#create_mbean_stream
2015-01-20 18:59:25 -06:00
b97c0fe398
Add Msf::Jmx::Util#extract_unicast_ref
2015-01-20 17:46:42 -06:00
7b675adf01
Add specs for Msf::Jmx::Handshake
2015-01-20 17:29:48 -06:00
f3fa4562bd
Add specs for Msf::Jmx::Discovery
2015-01-20 16:49:02 -06:00
39e3f9f892
Add specs for Msf::Jmx::Util
2015-01-20 16:18:53 -06:00
7d43ec7f93
Add specs for Rex::Java::Serialization::Builder#add_specs
2015-01-20 15:13:30 -06:00
d4a8049ac5
Add specs for Rex::Java::Serialization::Builder#new_object
2015-01-20 15:03:37 -06:00
09fe65eeba
Add specs for Rex::Java::Serialization::Builder#new_class
2015-01-20 11:59:33 -06:00
1f35347a0c
payloads_spec updated
2015-01-19 13:22:49 +01:00
4281d9fdf5
Don't use should for rpsec
2015-01-17 01:50:37 -06:00
2e9b99ece6
Update rspec
2015-01-17 01:25:28 -06:00
84030d273b
rspec progress
2015-01-16 22:06:49 -06:00
3d93bc06e8
rspec progress
2015-01-16 18:25:54 -06:00
b2e9e43f3d
Add unit tests for RPC's getg
2015-01-16 10:39:05 -08:00
e7566944df
Simplify get/getg rspec
2015-01-16 09:48:24 -08:00
c6121f0a37
Add rspec coverage for getg (and set/setg, in a way)
2015-01-16 08:43:14 -08:00
7f90b68cce
Add rspec coverage for get (and set/setg, in a way)
2015-01-16 08:28:32 -08:00
05458ec81f
I should be done with md5_lookup.rb now
2015-01-16 01:13:37 -06:00
1a808991aa
Starting rspec
2015-01-15 21:55:29 -06:00
da1c56a65d
Add minimal tests for get/getg
2015-01-15 14:46:12 -08:00
ba2c33132b
Put Msf::Ui::Console::CommandDispatcher specs in the right location
2015-01-15 14:06:29 -08:00
41fa542456
Delete jmx invoke spec
2015-01-14 16:51:12 -06:00
621cada2ac
Undo build_gc_call_data refactoring
2015-01-14 16:47:28 -06:00
70c99748ac
Add Stream spec for marshalled argument
2015-01-14 12:05:27 -06:00
a5ae2aadee
Add spec for MBeanServerConnection.invoke stream
2015-01-14 11:44:39 -06:00
915df2029d
Add stream spec
2015-01-13 18:35:54 -06:00
36b2771564
Add spec for send_dgc_ack
2015-01-13 11:06:08 -06:00
ad082bc1af
Add specs for build_dgc_ack
2015-01-13 11:02:16 -06:00
0babde8c1a
Fix specs
2015-01-13 10:48:23 -06:00
3946b95bc3
Update rex code and specs
2015-01-13 10:45:00 -06:00
1f0b986bf1
Change filenames
2015-01-13 10:43:27 -06:00
4e6879fb1e
Add tests for Rex::Proto:ACPP::Message#succesful?
2015-01-12 19:36:12 -08:00
fba6945e9a
Doc payload oddness. Add more checksum tests
2015-01-12 13:08:12 -08:00
54eab4ea3d
Checksum validation, more tests
2015-01-12 13:08:12 -08:00
7e4dd4e55b
Add ACPP decoding capabilities
2015-01-12 13:08:12 -08:00
2af82ac987
Some preliminary Apple Airport admin protocol (ACPP?) support
2015-01-12 13:08:11 -08:00
ebac17893c
Use a new class name
2015-01-08 17:41:29 -06:00
97a23788b6
Add unused args to get_once on specs
2015-01-08 17:22:21 -06:00
75726f1e74
Update spec to cover #4559
2015-01-08 15:15:01 -08:00
c05b2e2b03
Fix Continuation specs
2015-01-08 16:51:33 -06:00
5dfc0f1665
Fix Client mixin specs
2015-01-08 16:48:11 -06:00
db4d24cb2c
Add spec for build_gc_call_data
2015-01-08 14:24:07 -06:00
549e42279c
Create specs for Streams
2015-01-08 14:17:57 -06:00
9a42d42318
Add specs for Msf::Rmi::Client
2015-01-08 11:57:38 -06:00
5d68d48ca5
Land #4385 , fixes bruteforce_speed validator
...
bruteforce_speed validator now accepts nil
2015-01-07 12:09:25 -06:00
ba13e9d64c
Add Stream spec
2015-01-07 12:05:44 -06:00
98ec08ae0d
Add support for Ping and PingAck
2015-01-06 15:18:55 -06:00
1e3b24f01b
Add support for DbgAck
2015-01-06 15:00:17 -06:00
6d1d300e72
Add support for ReturnData
2015-01-06 12:52:00 -06:00
825e08f5ac
Add support for Call messages
2015-01-06 12:36:06 -06:00
f3ff42dbfb
Add support for Continuation
2015-01-06 11:34:47 -06:00
757f95a24d
Add support for ProtocolAck
2015-01-06 00:14:14 -06:00
26da73ffb8
Change class name
2015-01-05 19:23:07 -06:00
d5dfd75e71
Add initial model and support to OutputStream
2015-01-05 18:52:13 -06:00
056046f38b
update wordpress readme regex
2015-01-01 23:13:20 +01:00
135faeee29
Land #4095 , specs for Rex::OLE
2014-12-30 14:25:09 -06:00
a8e907d68b
Land #4479 , nil comparisons and missing DLLs
...
Also fixes #4474 .
2014-12-30 13:55:54 -06:00
125cc27f7a
updated expected exception from a bad module load
2014-12-30 10:57:37 -06:00
555713b6ae
Land #4456 - MS14-068, Kerberos Checksum (plus krb protocol support)
2014-12-29 16:09:28 -06:00
9791acd0bf
Add stager ipknock shellcode (PR 2)
2014-12-27 22:03:45 +01:00
fb83bf6092
Fix specs
2014-12-22 17:55:39 -06:00
ad97457a39
Move more constants to Crypto
2014-12-22 15:27:16 -06:00
f3b263f57d
Use more crypto constants
2014-12-22 12:13:23 -06:00
ff208002d7
Reorganize the Crypto mixin
2014-12-22 11:57:35 -06:00
277ec92358
Really Add specs for Msf::Kerberos::Client::TgsRequest
2014-12-22 11:28:47 -06:00
e4191866d9
Add bind_hidden_tcp to payload spec
2014-12-22 10:37:46 -06:00
a0c7f779e9
Change spec filename
2014-12-22 09:36:51 -06:00
8c62822ab9
Add specs for Msf::Client::Kerberos::AsRequest
2014-12-22 09:34:21 -06:00
1f3eded4a8
Add specs for Msf::Kerberos::Client::CacheCredential
2014-12-21 23:47:40 -06:00
60d4525632
Add specs for Msf::Kerberos::Client::Pac
2014-12-21 17:49:36 -06:00
e4455800e1
Add specs for Msf::Kerberos::Client::Base
2014-12-21 16:46:26 -06:00
e219b0b249
Add specs for Msf::Kerberos::Client::AsResponse
2014-12-21 01:12:00 -06:00
d7b6407720
Add specs for AsResponse#extract_session_key
2014-12-21 00:53:20 -06:00
2d9ed9eb4c
Add specs for TgsResponse
2014-12-21 00:39:59 -06:00
6acd0703d7
Add specs for Msf::Kerberos::Client::TgsResponse
2014-12-21 00:16:38 -06:00
d3050de862
Remove references to Redmine in code
...
See #4400 . This should be all of them, except for, of course, the module
that targets Redmine itself.
Note that this also updates the README.md with more current information
as well.
2014-12-19 17:27:08 -06:00
fad08d7fca
Add specs for Rex Kerberos client
2014-12-19 12:14:33 -06:00
b740ba4738
Add specs for Rex::Proto::Kerberos::CredentialCache::Cache
2014-12-18 18:35:20 -06:00
8f119e0731
Add specs for Rex::Proto::Kerberos::CredentialCache::Credential
2014-12-18 18:07:44 -06:00
0d464a7ff8
Add specs for Rex::Proto::Kerberos::CredentialCache::Time
2014-12-18 17:53:42 -06:00
d53f5668a2
Add specs for Rex::Proto::Kerberos::CredentialCache::KeyBlock
2014-12-18 17:50:00 -06:00
c426cf32d0
Add specs for Rex::Proto::Kerberos::CredentialCache::Principal
2014-12-18 17:40:06 -06:00
153d7e273d
Land #4420 , tentative "fix" for EXE spec
2014-12-18 13:55:56 -06:00
db474adc7b
Remove the helper as well.
...
See #3807 .
Again, happy to have working tests that actually test validity. But,
these ain't them.
2014-12-18 13:28:04 -06:00
80cd04d76a
Land #4332 , test optimization for Cucumber
...
* Make Cuke run faster on TravisCI
2014-12-18 09:34:55 -06:00
270debea32
Remove the EXE file test spec
...
This thing has been a problem since forever, given cross-platform
issues and random collisions with other file magic signatures.
See #3807 and #2793 and the even earlier redmine bug.
This should not close the bug, since we're merely avoiding the random
fails by not testing at all. We /should/ test, but in the meantime, we
can't suffer these failures that throw me (at least) into a panic every
time.
2014-12-18 09:18:24 -06:00
8e570cc19b
Initial support to send TGS-REQ
2014-12-17 18:55:30 -06:00
594b9bcfc2
Add support for AuthorizationData
2014-12-16 23:21:13 -06:00
2649d482fe
Add support for KRB_AP_REQ
2014-12-16 18:39:42 -06:00
0f55a98450
Add support for Authenticator encoding
2014-12-16 17:45:54 -06:00
dde45a7f53
Add support for Checksum encoding
2014-12-16 17:05:35 -06:00
a93cbac7bf
Support ticket encoding
2014-12-16 16:04:13 -06:00
a5f8b4319f
Add support to encode PAC-TYPE
2014-12-16 11:31:27 -06:00
1721641138
Add support for PAC-LOGON-INFO
2014-12-16 09:32:47 -06:00
513fd122b8
Update rpsec
2014-12-16 00:26:53 -06:00
c1114c180a
Add support for PAC-CLIENT-INFO
2014-12-15 17:32:51 -06:00
64a0162e3f
Add support for PAC-SERVER-CHECKSUM
2014-12-15 17:16:43 -06:00
2c7139b936
Add support for PAC-PRIVSRV-CHECKSUM
2014-12-15 17:13:22 -06:00
4c994d84e0
Updating version to 4.11 for Flood release
2014-12-15 14:42:09 -06:00
643279b54b
Add support to decode the encryption part of as responses
2014-12-15 11:46:11 -06:00
b98ad59900
Add specs for KdcResponse
2014-12-15 08:54:33 -06:00
d81cdd6cbb
Add KdcResponse spec first draft
2014-12-14 21:20:54 -06:00
442adb080f
Add first support to decode tickets
2014-12-14 20:51:26 -06:00
b988104e40
Modify forgotten spec
2014-12-14 19:28:59 -06:00
87548cecfb
Move specs
2014-12-14 19:27:38 -06:00
8049d4024b
Delete references to deleted namespaces from specs
2014-12-14 19:26:39 -06:00
883bfd1f46
Add support to retrieve e-data
2014-12-14 17:23:37 -06:00
c5dc065fde
Add support for decoding KrbError
2014-12-14 16:26:18 -06:00
00590f9f26
Adds Java serialization support, lands #4327
2014-12-13 17:47:53 -06:00
f676b72767
Add Kademlia scanner, lands #4210
2014-12-12 16:40:58 -06:00
9545b6e4d6
Land #4343 , os_flavor reduction
2014-12-12 14:49:15 -06:00
ac004d2770
Fix bruteforce validators to accept nil
...
bruteforce_speed isn't always required, because the speed checker
already handles nil (and presumes the user wants the fastest possible).
See also MSP-11842
2014-12-12 13:57:37 -06:00
20836c1789
Refactor crypto usage
2014-12-11 18:18:37 -06:00
d96206b813
Support KdcRequest#encode
2014-12-11 12:44:17 -06:00
162d2d39b5
Add support for KdcRequestBody decoding
2014-12-11 12:19:26 -06:00
fbd1e9ba6e
Add a spec for the Base LoginScanner
...
Turns out, there wasn't one.
This tests what I've changed, at least.
2014-12-11 10:48:48 -06:00
edf541fabe
Fix some double spacing
2014-12-11 09:39:15 -06:00
39ffc0c58a
Add support for PreAuthData#encode
2014-12-10 19:48:44 -06:00
b89dee03c6
Add PreAuthEncTimeStamp#encode support
2014-12-10 19:30:21 -06:00
3accdb705b
Add support for PreAuthPacRequest#encode
2014-12-10 19:18:19 -06:00
96c1370334
Add EncryptedData#encode support
2014-12-10 19:12:24 -06:00
475014820f
Add asn1 comments for specs
2014-12-10 18:47:41 -06:00
Brent Cook
HD Moore
James Lee
Borja Merino
jvazquez-r7
rastating
William Vu
sinn3r
Meatballs
Tod Beardsley
Jon Hart
David Maloney
Christian Mehlmauer
Trevor Rosen
Samuel Huckins