7894d5b2c1
Revert "Revert "use the new rex-exploitation gem""
...
This reverts commit f3166070ba
2016-10-11 17:40:43 -05:00
fabb296b15
update cache and add payload test
2016-09-29 21:19:55 -05:00
de9434870c
Land #7375 , mock some rex tests for DNS lookups
...
Fixes #6467 , as far as @lsato-r7 and I can tell.
2016-09-29 16:37:38 -05:00
075401d702
Update dynamic_size for andterp spec
2016-09-28 16:58:34 -05:00
ca683576d0
Mock rex-socket getaddress call for loginscanner
...
Since we're using the rex-socket gem, we don't need to
test the getaddress call for each one of the login scanner specs
2016-09-28 11:32:06 -05:00
de1e0aae99
add missing payload tests
2016-09-27 11:05:19 +08:00
1b31e0a63e
remove osvdb links
2016-09-20 14:27:59 -05:00
7e10b5c482
use new rex-encoder gem
...
remove all the encoidng lbiraries and use the new gem
rex-encoder that contains them now.
MS-1708
2016-09-14 12:07:26 -05:00
245237d650
Land #7288 , Add LoginScannerfor Octopus Deploy server
2016-09-13 17:26:56 -05:00
4495b27e67
Land #7254 , Rex::SSLScan Gemification
2016-09-08 13:20:56 -05:00
7857c58655
remove all the left voer cruft
...
remove all the files that got xfered out to the gems
MS-1715
2016-09-07 11:38:28 -05:00
dcf0d74428
Adding module to scan for Octopus Deploy server
...
This module tries to log into one or more Octopus Deploy servers.
More information about Octopus Deploy:
https://octopus.com
2016-09-06 20:52:49 -05:00
9d5a276e91
Fix recent metasploit-framework.gemspec conflict.
2016-09-06 13:10:28 -05:00
e36cfa54b1
Use rex-mime gem
...
MS-1710
2016-09-01 11:38:07 -05:00
029a28c95b
use the new rex-sslscan gem
...
remove old integerated code and replace it
with the gem. done.
MS-1693
2016-08-30 10:43:47 -05:00
b1009ab8dc
remove all the left voer cruft
...
remove all the files that got xfered out to the gems
MS-1715
2016-08-26 14:31:27 -05:00
d2a6c2e9ca
move rex bintools into new gem
...
move all the *scan *parsey code out into
the new rex-bin_tools gem
MS-1691
2016-08-15 14:01:43 -05:00
5a1cd24350
finishing converting the last of this to credentials
2016-07-29 09:58:17 -05:00
0972005b24
updating 'ppp.*username secret'
2016-07-29 09:58:17 -05:00
1d33c9aa88
updating specs upto 'username secret'
2016-07-29 09:58:17 -05:00
73b362cade
updating more spec
2016-07-29 09:58:16 -05:00
d807a83bb1
fixing some more specs
2016-07-29 09:58:16 -05:00
b66621af0d
adding in a blank service_name
...
fixing myworkspace
2016-07-29 09:58:16 -05:00
219f9d5d57
updating parts of cisco to use creds
2016-07-29 09:58:15 -05:00
40240662db
converting enable password to create_credentials
2016-07-29 09:58:15 -05:00
9fa1c597b1
specing out the cisco mixin
2016-07-29 09:55:08 -05:00
1b6bd927d0
Rex::OLE is now rex-ole gem, fixes MS-1712
2016-07-25 14:05:48 -05:00
471cc277ba
Remove rex-arch specs
...
MS-1703
2016-07-20 17:01:18 -05:00
ff63e6e05a
Land #7018 , unvendor net-ssh
2016-07-19 17:06:35 -05:00
b08d1ad8d8
Revert "Land #6812 , remove broken OSVDB references"
...
This reverts commit 2b016e02167b1d9596c7
2016-07-15 12:00:31 -05:00
1ea425aff1
update ssh login_scanner spec
...
the spec needs to be updated for the non_interactive flag
2016-07-14 15:30:20 -05:00
01d0d1702b
Merge branch 'master' into feature/MS-1688/net-ssh-cleanup
2016-07-14 09:48:28 -05:00
2b016e0216
Land #6812 , remove broken OSVDB references
2016-07-11 22:59:11 -05:00
1c8556d8e0
add mettle payload tests
2016-07-06 15:53:20 -05:00
5f9f3259f8
Merge branch 'master' into feature/MS-1688/net-ssh-cleanup
2016-07-05 10:48:38 -05:00
cfc368ab65
Land #6959 , Add Linux ARM big endian ipv4 bind shellcode
2016-07-05 00:41:00 -05:00
ee2d1d4fdc
Merge branch 'master' into feature/MS-1688/net-ssh-cleanup
2016-06-28 15:00:35 -05:00
c2f3d411c3
Replace rex/java with rex-java gem
2016-06-27 14:52:49 -05:00
6072697126
continued
2016-06-22 14:54:00 -05:00
69e2d05a5d
rip out old rex code and replace with gems
...
rex-text, rex-random_identifier, rex-powershell, rex-zip, and rex-registry
are now being pulled in as gems instead of part of the spgehtti code that is lib/rex
2016-06-21 13:56:36 -05:00
cd84b42e50
linux arm big endian ipv4 bind module added
2016-06-10 00:19:43 +02:00
da532ecc5e
Land #6919 , Move LURI into a full URI for a new 'Payload opts" column in jobs output
2016-06-03 13:57:47 -05:00
c99505923f
disable SSL tests that no longer work on Travis
2016-06-01 16:33:34 -05:00
f7382f5b3b
Make `jobs` display a full uri
...
Addresses the problem of LURI taking the place of URIPATH, which has
different semantics.
See #4623
2016-05-27 11:15:12 -05:00
a3d2cba698
Land #6906 , Improve msfvenom error handling and spec coverage
2016-05-26 07:58:37 -05:00
c2cf992560
added spec for #6915
2016-05-26 07:57:17 -05:00
a298129463
adding specs and expanding options
...
Tests shouldnt be DRY, they need to be easy to understand.
2016-05-25 13:17:47 -05:00
5921ac7b47
Add a spec and fix ReverseHttp#luri
2016-05-24 17:22:14 -05:00
3dfdf1d936
Land #6528 , tilde expansion and more for OptPath
2016-05-24 16:01:59 -05:00
d709229f52
fix spec warnings
2016-05-24 07:51:36 -05:00
8bccfef571
Fix merge conflict
2016-05-16 17:29:45 -07:00
19af279ce9
Merge branch 'master' into staging/rails-upgrade
2016-05-05 10:46:12 -05:00
f096c3bb99
Land #6821 Fix send_request_cgi! redirection
2016-05-05 09:09:30 -05:00
55b38ad089
Land #6398 , content length header
...
lands wei's content length header pr
2016-05-04 11:53:46 -05:00
fb5b228984
Merge branch 'master' into staging/rails-upgrade
2016-05-02 11:33:35 -05:00
050061762b
Fix db_manager rspec tests
...
MS-255
2016-04-28 13:17:02 -05:00
d4b89edf9c
Fix #6398 , Missing Content-Length header in HTTP POST
...
RFC-7230 states that a Content-Length header is normally sent in
a POST request even when the value (length) is 0, indicating an
empty payload body. Rex HTTP client failed to follow this spec,
and caused some modules to fail (such as winrm_login).
Fix #6398
2016-04-28 11:44:10 -05:00
e7f0163c2e
Apparently super doesn't work the same here in 2.3
...
But it doesn't matter, the value just needs to be before the current
time, so replace it with a simpler solution.
2016-04-26 10:35:41 -05:00
47d52a250e
Fix #6806 and #6820 - Fix send_request_cgi! redirection
...
This patch fixes two problems:
1. 6820 - If the HTTP server returns a relative path
(example: /test), there is no host to extract, therefore the HOST
header in the HTTP request ends up being empty. When the web
server sees this, it might return an HTTP 400 Bad Request, and
the redirection fails.
2. 6806 - If the HTTP server returns a relative path that begins
with a dot, send_request_cgi! will literally send that in the
GET request. Since that isn't a valid GET request path format,
the redirection fails.
Fix #6806
Fix #6820
2016-04-25 14:30:46 -05:00
816bc91e45
Resolve #6807 , remove all OSVDB references.
...
OSVDB is no longer a vulnerability database, therefore all the
references linked to it are invalid.
Resolve #6807
2016-04-23 12:32:34 -05:00
7ff5a5fd7e
switch mainframe payloads to fixed size
2016-04-23 11:40:05 -04:00
e75ce8b248
update test to hook exist? rather than exists?
2016-04-21 06:56:48 -04:00
e70d967b4e
Land #6763 , Add rspec for lib/metasploit/framework/login_scanner/redis
2016-04-18 10:05:24 -07:00
3a623862e3
Merge branch 'master' into staging/rails-upgrade
2016-04-15 10:55:43 -05:00
d3e5dffe26
whitespace
2016-04-13 22:20:42 -05:00
6ce7055130
Land #6737 , Added reverse shell JCL payload for z/OS
2016-04-13 22:19:15 -05:00
09873f2f9c
Land #6717 , Add new cmd mainframe payload (generic_jcl) for z/OS
2016-04-13 22:10:23 -05:00
6c5886afba
Resolve #6736 , Add rspec for login_scanner/redis lib
...
Resolve #6736
2016-04-08 11:41:08 -05:00
8f3f2f74b4
Move shared example from pro into framework
...
MS-1361
2016-04-07 13:09:52 -05:00
f5415c8058
Move pro concern logic into framework
...
MS-1361
2016-04-07 10:59:40 -05:00
22d08fdf39
Revert #6748 , premature Gemfile* changes
2016-04-06 14:52:22 -05:00
8de58e4b80
Merge branch 'master' into staging/rails-upgrade
2016-04-04 09:30:01 -05:00
f7dd326b16
Land #6455 , Fix dns labels/names size limits for lib/net/dns/names/names
2016-04-01 21:57:09 -05:00
6a4d7e3b58
Revshell cmd JCL payload for z/OS
...
Added a JCL-based reverse shell. Uses the same source code as the
shellcode version does. Source code is in
external/source/shellcode/mainframe/shell_reverse_tcp.s
2016-03-31 20:42:42 -05:00
46d4b533f3
Add rspec for lib/net/dns/names/names.rb
2016-03-31 11:29:30 -05:00
bc48ebd43b
Use patch_finder for msu_finder
2016-03-29 23:21:01 -05:00
1bcd3fac25
Land #6724 , Import workspace IP validation from Mdm
...
MS-902
2016-03-29 18:31:47 -05:00
3b0170e87d
Import workspace IP validation from Mdm
...
This allows us to actually test the validations, since the code calls
out to Rex::Socket::RangeWalker.
MS-902
2016-03-29 17:56:22 -05:00
a6518b5273
Add generic JCL cmd payload for z/OS (mainframe)
...
This payload does nothing but return successfully. It can be used to
test exploits and as a basis for other JCL cmd payloads.
2016-03-28 21:01:39 -05:00
c4735bd72a
Fix rspec pull_request_finder_spec.rb
2016-03-24 20:56:46 -05:00
57984706b8
Resolve merge conflict with Gemfile
2016-03-24 18:13:31 -05:00
1375600780
Land #6644 , datastore validation on assignment
2016-03-17 11:16:12 -05:00
32fe9ae55d
Remove dead version check in db_manager.rb
...
The check appears to have been orphaned in the db_manager refactor, but
I can't track down the exact commit.
2016-03-16 15:24:55 -05:00
903807d039
update spec for pre-check
2016-03-15 14:21:01 -05:00
dabe5c8465
Land #6655 , use MetasploitModule as module class name
2016-03-13 13:48:31 -05:00
88697a5d3f
Merge branch 'master' into staging/rails-upgrade
2016-03-08 15:22:04 -06:00
860159fa00
Update rspec
2016-03-08 11:37:25 -06:00
58b8c35146
Escape HTML for KB and update rspec
2016-03-08 10:10:10 -06:00
3123175ac7
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
659af68b16
Land #6388 , update msftidy check for new preferred Metasploit module base class
2016-03-06 17:12:20 -06:00
cc436fe438
update to new preferred base class for modules
2016-03-06 17:11:51 -06:00
a2c3b05416
Land #6405 , prefer default module base class of simply 'Metasploit'
2016-03-06 17:10:55 -06:00
e1db3ef369
Land #6388 , Update msftidy to error when module super class is incorrect
2016-03-06 16:53:11 -06:00
0fc4ebf4ab
Land #6618 , Improve Content-Length behavior in Rex HTTP
2016-03-06 16:38:44 -06:00
8faae94338
Land #6592 , make linux/x86/shell_reverse_tcp's shell path configurable and remove shell_reverse_tcp2
2016-03-06 15:33:53 -06:00
c2f7360a9a
replace deprecated 'ignore' with 'transient'
2016-02-29 14:57:09 -06:00
bff4b4d5fc
Fix #6609 and #6587 - Change Content-Length behavior in Rex HTTP
...
This patches changes two things:
1. If a module has a custom Content-Length, it will respect that
instead of forcing its own.
2. If a request does not have anything in the body, the
Content-Length header will not be set.
Fix #6609
Fix #6587
2016-02-29 10:50:21 -06:00
814d53aee0
Add rspec for Msf::Util::DocumentGenerator::PullrequestFinder
2016-02-24 15:13:04 -06:00
753e0f7693
Add rspec for Msf::Util::DocumentGenerator::DocumentNormalizer
2016-02-23 15:34:34 -06:00
39f1113bca
Remove unused spec.
2016-02-18 22:20:13 -06:00
44eb2d6a80
Merge branch 'upstream/master' into default-xor
2016-02-11 14:30:18 +10:00
2386cb1344
Land #6527 , add support for importing Burp suite vuln exports
2016-02-10 13:19:21 -06:00
942eec5fee
Update rspec
2016-02-07 12:37:08 -06:00
4dcbd7c1ae
Add a nokogiri xml stream parser for Burp issue xml and rename original burp parser to burp session parser so both are supported.
2016-02-04 10:30:56 -06:00
53d4e31844
Allow OptPath to valid symbolic paths that need expansion
2016-02-03 14:12:03 -08:00
c0ed57db43
Land #6267 , the rest of the rspec3 updates
2016-01-29 11:36:58 -06:00
d35d0993c1
should -> expect
2016-01-29 11:36:38 -06:00
ac822943b1
Land #6267 , update to rspec3
2016-01-29 11:33:30 -06:00
8c94d3c1bd
adjust namespec for rspec3
2016-01-29 11:32:22 -06:00
b6bc862c1b
Land #6267 , fix Rex::Parser::Ini#each_group
2016-01-29 11:19:40 -06:00
6187354392
Land #6226 , Add Wordpress XML-RPC system.multicall Credential BF
2016-01-23 00:12:46 -06:00
781ff4bb7d
Rspec is deprecated. Use RSpec instead.
2016-01-22 20:39:40 -06:00
6bbfc5a869
Fix rspec
2016-01-22 20:27:45 -06:00
0f9cf812b7
Bring wordpress_xmlrpc_login back, make wordpress_multicall as new
2016-01-22 18:54:20 -06:00
e6147d60e2
fix rspecs
2016-01-22 23:43:13 +01:00
f92f59a4c8
remove corresponding spec files
2016-01-22 23:38:44 +01:00
216986f7af
Do API documentation, rspec, and other small changes
2016-01-21 17:22:14 -06:00
478cd2ed5c
check database.yml path
2016-01-21 20:32:32 +01:00
ac0b489a90
Revert bad merge and include expect calls
2016-01-21 10:28:38 +10:00
f68b2b56fa
use hardcoded path
2016-01-19 23:51:28 +01:00
aaa1174ca5
fix rspec errors without database
2016-01-19 20:28:58 +01:00
18fe9bd96f
Merge branch 'upstream/master' into default-xor
2016-01-13 10:05:59 +10:00
7f9b804060
Land #6410 , remove JtR binaries, update for independent framework releases
2016-01-06 14:16:49 -06:00
388bfec46c
Land #6415 , update rspec3 conventions
2016-01-06 12:14:15 -06:00
92503c0ff6
Remove extra check_setup call
2016-01-06 11:01:35 -06:00
480913cb32
Add rspec
2016-01-06 01:41:13 -06:00
06a75e1339
re-enable deprecation errors
...
had to disable this to let transpec do
dynamic analysis. re-enabling now to throw
an error on any deprecation warning
2015-12-31 16:57:17 -06:00
c6656e4031
example_group and hook_scope conversions
...
not strictly required, these conversions keep us
up to date with latest rspec conventions and best practices
which will prevent use from having to convert them when they become
deprecated later
2015-12-31 16:56:13 -06:00
0a8cc8e01c
basic transpec conversions
...
no options apssed, first run of transpec
not much to report
2015-12-31 16:43:26 -06:00
8090bbc750
Changes to support framework as a gem
2015-12-30 11:00:45 -06:00
46a3c839b4
Refactor existing tests that had been duplicating get_std*
2015-12-24 11:03:11 -08:00
be84ed13a2
Update msftidy spec to be more easily added to
2015-12-24 10:55:13 -08:00
f029cd0c9a
Add common helpers for capturing stdout/stderr
2015-12-24 10:54:51 -08:00
5ac4e9aa6b
Correct payload fixture
2015-12-23 12:55:01 -08:00
83f0c2fa05
Add beginnings of rspec coverage for msftidy
2015-12-23 12:53:12 -08:00
6eda702b25
Land #6292 , add reverse_tcp command shell for Z/OS (MVS)
2015-12-23 14:11:37 -06:00
7d8ecf2341
Add Joomla mixin
2015-12-18 21:14:04 -06:00
eccf61bec5
ensure that the metasploit database environment variable is unset
2015-12-14 14:29:25 -06:00
6551df6446
update bitlocker for rspec3
2015-12-10 21:52:15 -06:00
fb578e9063
use explicit exceptions for raise_error
2015-12-10 21:47:22 -06:00
f59446851f
update namespace
2015-12-10 21:47:22 -06:00
99931aff44
Call stance only if module implements stance
2015-12-10 21:47:22 -06:00
b29459747b
stub out private meterpreter accessor method net
2015-12-10 21:47:22 -06:00
2a6db4092d
fix stub on Database specs
2015-12-10 21:47:22 -06:00
a96445b302
switch out expect with a proper mock by allow
2015-12-10 21:47:22 -06:00
d0d09097d5
stub out name on foo_inst in the option_container_spec
2015-12-10 21:47:22 -06:00
9a59671330
switch expect to allow on runas_spec cases
2015-12-10 21:47:22 -06:00
e8440f9798
remove deprecated syntax from text_spec
2015-12-10 21:47:22 -06:00
5056321d34
replace before block expecations with allow statements
...
comment out some before statements that seem to be causing a problem
2015-12-10 21:47:22 -06:00
1a36bcb525
Replace expect with allow the directory_spec
2015-12-10 21:47:22 -06:00
cd0d774db6
replace deprecated unsub, and replace expecations with allows
...
in base_spec
2015-12-10 21:47:22 -06:00
c5d77c3476
change stubs from expect to allow on directory_spec
2015-12-10 21:47:22 -06:00
5b568f2e4b
added missing expectation wrapper
2015-12-10 21:47:22 -06:00
1521fd0a95
remove unnecessary message chain call
2015-12-10 21:47:22 -06:00
b84bd0327d
fix MSSQL test stubs
2015-12-10 21:47:22 -06:00
5c733a3b6d
fix stub on module loader test
2015-12-10 21:47:22 -06:00
71ce9b377a
change module manager stub from expect to allow
2015-12-10 21:47:22 -06:00
69bb683d0a
fix typo in runas spec and change some more expects to allow
2015-12-10 21:47:22 -06:00
2fc0c0b326
switch expect stubs
...
in ui_driver shared context to allows
2015-12-10 21:47:22 -06:00
93d4be2301
replace stubbing expects with allow statements
2015-12-10 21:47:22 -06:00
bf9da1440e
change module_manager to allow from expect
2015-12-10 21:47:22 -06:00
605756a500
and receive needed to be and_return
2015-12-10 21:47:22 -06:00
aca4c6a986
Change include_context on jmx specs
2015-12-10 21:47:22 -06:00
d5d177b782
Use Msf::StringIO on query_spec
2015-12-10 21:47:22 -06:00
2dbb610d99
Use Msf::StringIO on find_spec
2015-12-10 21:47:22 -06:00
5600119fca
Use Msf::StringIO on trans2_spec
2015-12-10 21:47:22 -06:00
07ab7bac9c
Use Msf::StringIO on query_path_information_spec
2015-12-10 21:47:22 -06:00
21ea110aef
Use Msf::StringIO on query_file_information_spec
2015-12-10 21:47:22 -06:00
6405c8102d
Use Msf::StringIO on find_first2_spec
2015-12-10 21:47:22 -06:00
eeca2f4b8a
Use Msf::StringIO on session_setup_and_spec
2015-12-10 21:47:22 -06:00
692a3cb24c
Use Msf::StringIO on read_andx_spec
2015-12-10 21:47:22 -06:00
87a189d990
Use Msf::StringIO on nt_create_andx_spec
2015-12-10 21:47:22 -06:00
7933fa5356
Use Msf::StringIO on negotaite_spec
2015-12-10 21:47:22 -06:00
60de01432c
Use Msf::StringIO in close_spec
2015-12-10 21:47:22 -06:00
085598f6d2
Use lets
2015-12-10 21:47:22 -06:00
2beb42a734
Use msf_data attribute
2015-12-10 21:47:22 -06:00
b61a7f43ef
Use Msf::StringIO context on registry_spec
2015-12-10 21:47:22 -06:00
bc80bf7fdb
use Msf::StringIO on client_spec
2015-12-10 21:47:22 -06:00
046a73b3b3
Use set_msf_data on connection_spec
2015-12-10 21:47:22 -06:00
3d0fcdf84d
Add set_msf_data
2015-12-10 21:47:22 -06:00
2041149d54
Use Msf::StringIO in connection_spec
2015-12-10 21:47:22 -06:00
4872628ff5
Try to make it generic
2015-12-10 21:47:22 -06:00
236c28b6fb
Add shared context
2015-12-10 21:47:22 -06:00
11ea7ee5b9
update mocks for smb specs
2015-12-10 21:47:22 -06:00
c3e2615a23
Implement stub methods instead using allow which verifies
...
MSP-13484
2015-12-10 21:47:22 -06:00
bb7c463c44
Remove operators after .to with matchers
...
MSP-13484
2015-12-10 21:47:22 -06:00
76d1f6ba0a
Fix Rex::Psot::Meterpreter::PacketParser spec
...
MSP-13484
Use allow instead of expect because call count isn't important.
2015-12-10 21:47:22 -06:00
04ea44e76b
eq {} -> eq({})
...
So that the `{}` isn't interpreted as a block to `eq`.
2015-12-10 21:47:22 -06:00
f31e578780
Add missing RSpec. before describe
2015-12-10 21:47:22 -06:00
bde4f8bbe7
Fix allows in Exploit::Remote::Java::Rmi::Client::Jmx::Server spec
...
MSP-13484
2015-12-10 21:47:22 -06:00
e3f2db8f09
Fix allows in Exploit::Remote::Java::Rmi::Client::Jmx::Connection
...
MSP-13484
2015-12-10 21:47:22 -06:00
c754dca48b
fix allows in Exploit::Remote::JAva::Rmi::Client spec
...
MSP-13484
2015-12-10 21:47:22 -06:00
61e1dc2363
Fix allows in FirefoxAddonGenerator spec
...
MSP-13484
2015-12-10 21:47:22 -06:00
2d8d876eaa
Fix allow errors in BrowserAutopwn2 specs
...
MSP-13484
2015-12-10 21:47:22 -06:00
00ad6afd4f
Fix typo shoftname -> shortname
...
MSP-13484
2015-12-10 21:47:22 -06:00
164f24ef8a
Fix stubbing on class instead of instance
...
MSP-13484
2015-12-10 21:47:22 -06:00
fbddd4cc47
Fix IO stubbing
...
MSP-13484
2015-12-10 21:47:22 -06:00
db42c9f760
Fix service double stubbing
...
MSP-13484
2015-12-10 21:47:22 -06:00
c46b97cef9
=~ <Array> -> match_array
...
MSP-13484
2015-12-10 21:47:22 -06:00
99eaa8efb3
Change some expects back to allows to match old stubs
...
MSP-13484
2015-12-10 21:47:22 -06:00
David Maloney
Brent Cook
Tod Beardsley
William Vu
Louis Sato
Tim
wchen-r7
Pearce Barry
james-otten
dmohanty-r7
darkbushido
James Lee
earthquake
Jon Hart
thao doan
Fernando Arias
Bigendian Smalls
Adam Cammack
Christian Mehlmauer
Gregory Mikeska
joev
OJ
Brian Patterson
Chris Doughty
jvazquez-r7
Luke Imhoff