Christian Mehlmauer
81406a073e
tidy up code
2017-09-27 08:01:48 +02:00
Christian Mehlmauer
41e3895424
remove checks for hardcoded name
2017-09-27 07:41:06 +02:00
Brent Cook
0d31c1c9a8
Land #8945 , fix issue where we can call shutdown on a closed socket
2017-09-26 16:01:51 -05:00
Brent Cook
71f13db918
style updates
2017-09-26 15:58:43 -05:00
Brent Cook
d8ee4150e6
move client core constants closer to where they are actually used
2017-09-19 03:22:13 -05:00
Brent Cook
5b579baa33
remove unused Linux migration code
2017-09-19 03:04:43 -05:00
Brent Cook
0e15b2d002
remove unneeded METERPRETER_TRANSPORT constants
2017-09-19 02:59:05 -05:00
RageLtMan
271bd4c4fe
Rename METERPRETER_TRANSPORT_SSL to ..._TCP
...
Since OpenSSL is no longer packages with meterpreter, and transport
secrecy is handled at L7, the SSL cons name doesn't apply anymore.
Rename METERPRETER_TRANSPORT_SSL to METERPRETER_TRANSPORT_TCP for
consistency with wire-level implementation.
2017-09-17 14:31:15 -04:00
Craig Smith
b218cc3c7f
Merge branch 'master' into hw_auto_padding_fix
2017-09-11 18:30:34 -07:00
Craig Smith
ad9329993d
Added better padding and flowcontrol support.
2017-09-11 18:20:57 -07:00
RageLtMan
8d60fdf9e7
Bug - HTTP Client can call :shutdown on closed IO
...
When running Rex HTTP client calls across pivots, pivot sockets
can get closed by the remote server, resulting in a closed :conn
object within the client object. The clients :close method calls
self.conn.shutdown which raises an 'IOError closed stream' on what
is effectively a TCPSocket object in a closed state (under the Rex
abstraction).
Resolve by moving the self.conn.closed? check into the conditional
just above the :shutdown call, and remove if from the underlying
:close call as calling :close on an already closed TCPSocket
returns nil as opposed to throwing an exception like the :shutdown
method.
2017-09-10 03:09:59 -04:00
Brent Cook
c365db135a
pull in GUID fixes from #8818
2017-09-07 01:39:49 -05:00
OJ
b38a962c09
Fix default session GUID when not specified
...
This resolves an issue with stategless HTTP sessions
2017-09-07 01:36:25 -05:00
OJ
5294722b96
Prevent socket-like behaviours during migrate on pivoted sessions
2017-09-07 01:36:24 -05:00
OJ
bfdea35aca
A few UI touch ups
2017-09-07 01:36:23 -05:00
OJ
75270af9e7
Tweaking of the pivot list output
2017-09-07 01:36:23 -05:00
OJ
8b8e5e4cb5
First iteration of the pivot menu for meterpreter
2017-09-07 01:36:23 -05:00
OJ
d525b015f0
Enable keepalive for pivoted sessions
2017-09-07 01:36:22 -05:00
OJ
7acd772c10
Pivot session stability, display and handling
2017-09-07 01:36:21 -05:00
OJ
fdc9864b61
First working packet pivot session!
2017-09-07 01:36:20 -05:00
OJ
e3de01219a
Pushed on with more pivot code
2017-09-07 01:33:54 -05:00
OJ
abc80655b7
Progress in named pipe pivots, more to come
2017-09-07 01:33:54 -05:00
OJ
816e78b6f6
First pass of named pipe code for pivots
2017-09-07 01:33:53 -05:00
Brent Cook
f7071818b1
more updates
2017-08-28 14:10:51 -05:00
Brent Cook
a0e04760b5
rewrite timestomp command dispatcher to deal with file args properly
2017-08-28 08:25:42 -05:00
Brent Cook
429824b5c9
guid is hex values
2017-08-21 03:44:02 -05:00
Brent Cook
8700a36858
make session_guid default with the correct length
2017-08-21 03:24:37 -05:00
Brent Cook
5e8c2200ac
Merge branch 'master' into land-8625-crypttlv2
2017-08-20 18:54:51 -05:00
h00die
dc358dd087
unknow to unknown
2017-08-18 11:33:48 -04:00
OJ
fa292dce96
Fix issue with truncated values when unpacking packets
2017-08-16 11:01:54 +10:00
Brent Cook
0ab6dd46d3
Land #8762 , add initial Rex FTP protocol implementation
2017-08-14 01:59:53 -04:00
OJ
d7e8b32312
Merge branch 'upstream/master' into transport-agnostic-packet-encryption
2017-08-08 17:30:51 +10:00
Pearce Barry
cfd377fbd4
Support padding on the CAN bus.
...
Also use a hash for passing options around instead of individual params.
2017-08-06 18:05:59 -05:00
Brent Cook
24d323d4ed
remove more instances of positive?
2017-08-02 12:47:34 -05:00
Tabish Imran
f1b07b5c6d
Add send_cmd_data function from /lib/metasploit/framework/ftp/client.rb to class
2017-08-02 01:14:08 +05:30
Tabish Imran
0b001fdea6
Modify to reduce rubocop offenses
2017-07-25 17:46:05 +05:30
Tabish Imran
da8cb48639
Add FTP protocol client implementation
2017-07-25 00:56:34 +05:30
Tabish Imran
ab37ccb173
Add FTP protocol support
2017-07-25 00:56:19 +05:30
Brent Cook
cdfb6782a8
Land #8639 , Add mic audio streaming to Linux/OSX native meterpreter
2017-07-24 07:01:00 -07:00
Brent Cook
6300758c46
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
Pearce Barry
6a686a277b
Land #8742 , HWBRIDGE RFTRANSCEIVER ADD LOWBALL SUPPORT
2017-07-21 11:46:21 -05:00
Pearce Barry
3043218a7f
Indention and missing comma fixup.
2017-07-21 11:43:49 -05:00
Corey Harding
22e8f1cb48
HWBRIDGE RFTRANSCEIVER ADD LOWBALL SUPPORT
2017-07-20 05:09:00 -04:00
Brent Cook
f5e76092d6
Merge branch 'master' into land-8439-
2017-07-18 08:25:18 -05:00
James Lee
5c17f363be
Default opts to an empty hash instead of nil
...
Fixes #8709
2017-07-13 15:40:08 -05:00
bwatters-r7
99bb091488
Land #8690 , Fix #8636 , [] for NilClass in session.fs.file.download_file
2017-07-12 13:43:12 -05:00
William Webb
aa0fca9dd1
Land #8631 , Add railgun support to Python Meterpreter for the OSX
...
platform
2017-07-11 16:05:16 -05:00
wchen-r7
d5d9e88851
Fix #8636 , [] for NilClass in session.fs.file.download_file
...
This fixes a [] for NilClass bug in the download_file API.
The opts argument is not checked for nil before the code looks for
the block_size key.
Fix #8636
2017-07-07 19:00:33 -05:00
Pearce Barry
baead02efc
Addressing PR feedback.
...
Removing the audio_stream_pool.rb class file for now, we can recreate for MS-2749 if we really need one.
2017-07-04 09:28:38 -05:00
Pearce Barry
ef1145c6b7
Use common code to delete non-applicable cmds.
2017-07-03 09:11:04 -05:00
OJ
4f054d25fc
Fix packet spec problems
2017-07-03 18:12:38 +10:00
OJ
999d90687e
Make encryption flags 32 bit
...
This changes the encryption flags on the meterpreter session so that
it's 32 bits (and hence changes the packet header). This also supports
the idea that sessions may use encryption that isn't AES256, so the
flags field will ultimately indicate that. A type flag has been added so
that MSF knows the type that should be done on the wire.
At some point soon we'll add something that makes sure that the packet
encryption type always matches the encryption type expected in MSF, this
will hopefully avoid the risk of having packets injected into the stream
by external entities.
2017-07-03 16:52:58 +10:00
Pearce Barry
e21ae88b55
Update wave file header with actual length.
...
Fixes MS-2759.
2017-06-30 22:48:42 -05:00
James Lee
ada954aab9
Land #8624 , fix mis-ordered kiwi output
2017-06-30 14:23:24 -05:00
Pearce Barry
d2098137a9
Grab last bit of audio from target when done.
...
Also remove module that needs work (we can create later).
2017-06-30 10:56:49 -05:00
Pearce Barry
48e7e8397e
Make listen focus on prerecorded items.
2017-06-29 16:52:17 -05:00
Pearce Barry
e8468a5c99
Cleanup.
2017-06-29 16:52:17 -05:00
Pearce Barry
5c5044a80f
Stream audio data via channel (MS-2725).
2017-06-29 16:52:16 -05:00
dmohanty-r7
dd7726b894
Change to Audio Mic
2017-06-29 16:52:16 -05:00
dmohanty-r7
1bfa9366e6
Bring back to working
2017-06-29 16:52:15 -05:00
dmohanty-r7
bd9c15713d
Bring polling back in
2017-06-29 16:52:15 -05:00
dmohanty-r7
3d51301b98
Seperation of concerns
2017-06-29 16:52:15 -05:00
dmohanty-r7
c7b71a2b32
Seperate concerns of console/mic
2017-06-29 16:52:14 -05:00
dmohanty-r7
9ca74d69f1
add sleep
2017-06-29 16:52:14 -05:00
dmohanty-r7
d2cccae2a1
Use webrtc browser
2017-06-29 16:52:13 -05:00
dmohanty-r7
56b3b0e00d
Add more parameterization
2017-06-29 16:52:13 -05:00
dmohanty-r7
d9e1d21c56
Spacing
2017-06-29 16:52:13 -05:00
dmohanty-r7
d62f0cfd98
Add the mic stop command
2017-06-29 16:52:12 -05:00
dmohanty-r7
40ce03b85f
Parameterize playback configurations
2017-06-29 16:52:12 -05:00
dmohanty-r7
6f8f85df61
Open player for listening to audio
2017-06-29 16:52:12 -05:00
dmohanty-r7
60e009de8f
Use large datasize
2017-06-29 16:52:11 -05:00
dmohanty-r7
16a13723d0
Remove debug
2017-06-29 16:52:11 -05:00
dmohanty-r7
fa4ebadf0f
Make mic audio device stream work with mettle
2017-06-29 16:52:10 -05:00
dmohanty-r7
0a0e6c8576
Use audio stream pool
2017-06-29 16:52:10 -05:00
dmohanty-r7
197d377424
Fix commands to mic
2017-06-29 16:52:10 -05:00
Dev Mohanty
ebf967db3e
Add audio-channel
2017-06-29 16:52:09 -05:00
Anderson
959f9fe2d2
Updated lib/rex/proto/http/client_request.rb to ensure that the host header is formatted
2017-06-29 12:05:02 -07:00
Spencer McIntyre
52211ab6ae
Continue refactoring removal of "DLL" references
2017-06-27 18:00:01 -04:00
Spencer McIntyre
0da9f4d64a
Refactor railgun "DLL" references to library
2017-06-27 17:34:06 -04:00
Brent Cook
e08bd84038
Merge branch 'upstream-master' into land-8603-
2017-06-27 04:03:31 -05:00
OJ
8e1e505730
Fix output of MSV creds dumping in Kiwi
...
The data being pulled out of the MSV credential dump was not being
rendered propertly because it was assumed that all accounts would
provide the same set of hashes/details for each entry found. However,
this was not the case. Some have NTLM & SHA1, others have LM & NTLM,
some have DPAPI when others don't.
This code generates tables based on the values found, and renders those
values in the appropriate columns, and if the values don't exist for
a given account, the column is left blank.
Fixes #8620
2017-06-27 15:43:40 +10:00
OJ
49e34d70c3
Remove uses of multi-char args for meterpreter commands
2017-06-27 13:06:10 +10:00
Spencer McIntyre
ea83cb0bb6
Make the railgun def class names platform specific
2017-06-26 19:53:19 -04:00
OJ
25e323fc4b
Support AES renegotiation after session migration
2017-06-26 20:50:12 +10:00
OJ
9f2be21eb7
Ignore missing method error when doing aes negotiation
...
This means that meterpreter instances that don't support will continue
to work.
2017-06-26 15:22:56 +10:00
OJ
bdcea7bd22
Fix http AES packet dispatching
2017-06-25 19:51:25 +10:00
OJ
494d389aa2
Merge upstream/master into packet encryption
2017-06-25 19:06:31 +10:00
OJ
67b1a19aa1
Finalised MSF-side of AES key negotiation over RSA
2017-06-25 10:24:00 +10:00
William Webb
bf85386acf
add help switch
2017-06-24 17:45:53 -05:00
James Lee
6a8d54a93c
Land #8545 , `ps` table output fixes
2017-06-24 14:43:51 -05:00
Brent Cook
1762fe56c9
Land #8589 , Fix 64-bit support for the winpmem extension
2017-06-23 19:27:31 -05:00
Brent Cook
c3090a4f9c
Land #8601 , make session logging more useful, don't lose characters
2017-06-23 17:36:01 -05:00
William Webb
9eeb3dc143
use typical command option and TLV scheme instead of dumb stuff for keyscan_start
2017-06-23 13:11:12 -05:00
Dirkjan Mollema
24379f907e
Fixed timestamped logger cutting off last character ( fixes #8597 )
2017-06-23 13:19:16 +02:00
OJ
a3607c6802
Update to Mimikatz 2.1.1 20170608 to include changntlm
2017-06-23 13:40:01 +10:00
James Lee
283f36f79a
Compare headers w/process keys instead of themselves
...
Also clarifies a bunch of old bad variable names
2017-06-22 21:43:11 -05:00
Brent Cook
2617ae7609
Land #8513 , check extapi commands for dependencies
2017-06-22 20:21:26 -05:00
Brent Cook
fda2e8c73d
Land #8523 , Add support for session GUIDs
2017-06-22 20:10:10 -05:00
Brent Cook
0eaffde4b3
fix rex arguments parser to handle adjacent flags, update accordingly
2017-06-22 09:54:03 -05:00
William Webb
47a659f554
Land #8185 , Convert ntp modules to bindata
2017-06-22 09:37:58 -05:00