Commit Graph

51210 Commits (845805f15e7b9407f909365489a735ec84aad80b)

Author SHA1 Message Date
Metasploit 845805f15e
automatic module_metadata_base.json update 2019-03-28 07:16:26 -07:00
h00die 1e6850fa53
land #11623 oracle 12 support for hashdumper 2019-03-28 10:07:54 -04:00
h00die 2a311931d3 oracle hashdump cleanup 2019-03-28 10:06:56 -04:00
7043mcgeep f2a19d5e32
Final revisions 2019-03-27 21:53:52 -05:00
Brent Cook dbbf1ea5cb
Land #11644, Add check for active database to relevant Msf::Payload::UUID::Options methods 2019-03-27 15:52:20 -05:00
Metasploit 9d5163ca1a
automatic module_metadata_base.json update 2019-03-27 13:29:27 -07:00
Wei Chen 927d20cb95
Land #11592, Add CMS Made Simple (CMSMS) Showtime2 File Upload RCE 2019-03-27 15:21:07 -05:00
Wei Chen 38bdccb91a Use instance variables instead of datastore options 2019-03-27 15:17:32 -05:00
fabiocogno fdb1f4adea
Update cmsms_showtime2_rce.rb
Fix to CSRF Token stealing function for older versions of CMSMS
2019-03-27 20:09:14 +01:00
Matthew Kienow 337e061a77
Skip operation if there is no active database 2019-03-27 13:03:37 -04:00
Metasploit 1981e9be0c
automatic module_metadata_base.json update 2019-03-26 16:52:37 -07:00
Jeffrey Martin 6a0a7c996a Land #11637, Fix a git snafu when landing 2019-03-26 18:42:42 -05:00
asoto-r7 399532154d
Fix a git snafu when landing #11131
While landing PR #11131, I tripped over my own shoelaces and overwrote `weblogic_deserialize_rawobject.rb` with `weblogic_deserialize_unicastref.rb`, destroying my changes and introducing a great deal of confusion.

This PR gets us back to where we should have been, with #11131 landed and a few changes to add randomization and expanding on the T3 protocol.
2019-03-26 17:54:37 -05:00
Metasploit e859608b3d
automatic module_metadata_base.json update 2019-03-26 15:18:44 -07:00
asoto-r7 385cfd679a
Land #11131, Weblogic_serialize_rawobject CVE-2015-4852 2019-03-26 17:07:04 -05:00
asoto-r7 26b67bbf91
Fix two-byte error, add randomization, T3 notes from @acamro 2019-03-26 16:45:17 -05:00
asoto-r7 5f5d475c2e
Add expected traceback error to documentation 2019-03-26 16:44:45 -05:00
asoto-r7 f9361324bd
Merge branch 'weblogic_serialize_rawobject' of git://github.com/acamro/metasploit-framework into acamro-weblogic_serialize_rawobject 2019-03-26 16:38:27 -05:00
Metasploit 79d22ef0d7
automatic module_metadata_base.json update 2019-03-26 11:20:46 -07:00
Brent Cook b2d047b0b1
Land #11622, merge common hash identifier code between modules 2019-03-26 13:12:00 -05:00
Metasploit 506105bcf5
automatic module_metadata_base.json update 2019-03-26 11:07:28 -07:00
Brent Cook b204c9999e
Land #11628, Outlook credentials post module update 2019-03-26 12:57:52 -05:00
Brent Cook 8314e456b8
Land #11634, Add defensive check to Msf::Payload::UUID::Options#record_payload_uuid_url 2019-03-26 12:32:44 -05:00
Brent Cook d5e777aabf
Land #11572, bump to Ruby 2.6.2 2019-03-26 12:12:57 -05:00
Matthew Kienow cf42f47e5b
Check that payload was returned before processing 2019-03-26 11:41:27 -04:00
Jeffrey Martin 582f86b75c
Land #11603, Fail nicely when load aggregator. 2019-03-25 23:20:49 -05:00
7043mcgeep f62e9c2e49
Updated doc 2019-03-25 22:42:19 -05:00
Brent Cook d168895311
Land #11631, payloads db fixes 2019-03-25 19:16:11 -05:00
Matthew Kienow dc3be3378d
Process workspace for use in the create operation 2019-03-25 19:41:51 -04:00
Matthew Kienow 1b86c41dcc
Add add_opts_workspace call to query and create 2019-03-25 19:39:25 -04:00
Matthew Kienow 6278563f25
Remove unused code 2019-03-25 19:38:28 -04:00
Matthew Kienow 6709780817
Add entry to autoload PayloadDataProxy 2019-03-25 13:43:16 -04:00
Matthew Kienow 98401072e5
Remove duplicate autoload for WebDataProxy 2019-03-25 13:38:32 -04:00
7043mcgeep a8ccc7eb25
Remove tabbed indents 2019-03-25 11:13:28 -05:00
7043mcgeep b91231021a
Hashdump adheres to better coding style. Add docs 2019-03-25 02:36:34 -05:00
rwincey 9d71020d9c Removed credit 2019-03-24 19:11:22 -04:00
rwincey 8a36a0f410 Added support for later versions of Outlook, rubocop complaints 2019-03-24 18:39:55 -04:00
rwincey 7f2e6866d4 Merge branch 'master' of https://github.com/rapid7/metasploit-framework 2019-03-24 11:13:41 -04:00
h00die 656ea5240d remove space at EOL 2019-03-24 08:11:24 -04:00
7043mcgeep 170d28d46b
12c hashdump supported 2019-03-23 13:37:19 -05:00
7043mcgeep d1cad4eb21
Add 12c support for hashdump 2019-03-23 13:15:38 -05:00
h00die 5ea406cd4c create hash identifier library 2019-03-23 14:02:34 -04:00
Brent Cook 6218d8920d
Land #11615, allow exporting creds to a JTR-compatible format 2019-03-23 09:08:35 -05:00
Brent Cook d7255bbbb2
Land #11616, add get_payload method to db_manager 2019-03-23 08:25:28 -05:00
Metasploit 6b470e40a3
automatic module_metadata_base.json update 2019-03-23 04:37:29 -07:00
h00die 82a791369e remove extra spacing 2019-03-23 07:34:22 -04:00
Brent Cook 4eee987181
Land #11619, improve error handling with exploits/linux/http/panos_readsessionvars 2019-03-23 06:28:57 -05:00
h00die 759dbc86b1
land #11617 ssh library unifi cleanup 2019-03-23 07:12:23 -04:00
h00die c8785a6110 rstrip all the things 2019-03-23 07:04:41 -04:00
bcoles 5e470a538d
return unless res 2019-03-23 19:38:14 +11:00