1a2f35d806
Land #4951 : Dynamic URI generation for Java/Python reverse_http(s)
2015-03-19 12:41:20 +10:00
076f15f933
Land #4792 @jakxx Publish It PUI file exploit
2015-03-18 20:59:54 -04:00
3f8ed56a9a
Add available space to the payload info
2015-03-18 20:57:58 -04:00
a5d589ef55
Railgun calls should return a hash
2015-03-19 00:05:02 +00:00
6ceab3d02d
Add a DisclosureDate
2015-03-18 23:51:18 +00:00
968a8758ad
Add CVE-2015-0235 Exim GHOST (glibc gethostbyname) Buffer Overflow
...
This was originally written by Qualys
2015-03-18 18:51:16 -05:00
2dd9dcb26c
Dont use native unpack operators!
2015-03-18 23:48:39 +00:00
975ddc9092
Add some spec mockery
2015-03-18 23:43:46 +00:00
b33e7f477c
Land #4947 , h0ng10's TWiki exploit.
2015-03-18 17:17:34 -05:00
346b1d539f
Revert Java back to static size for cache purposes (less cpu usage on startup)
2015-03-18 16:24:01 -05:00
33bbf7cb7e
Dynamic URI generation for python/java http(s) stagers
2015-03-18 16:08:11 -05:00
c774038fe6
improve ls output by providing various new options
2015-03-18 16:02:03 -05:00
ae84c8ee30
Delete even more comments
2015-03-18 15:55:52 -05:00
9628415ca2
Delete more comments
2015-03-18 15:53:50 -05:00
c3dd4035ef
Make jmx module work again
2015-03-18 15:48:07 -05:00
f956ba1a46
Do first JMX cleaning try
2015-03-18 15:37:07 -05:00
0d1f2055c5
Lands #4949 which fixes #4845
2015-03-18 15:31:22 -05:00
dab4333867
updated asm in block
2015-03-18 16:07:46 -04:00
7ae97393e0
fix x64/reverse_https stager shellcode
2015-03-18 15:34:31 -04:00
4293af01b1
make sure we strip leading whitespace
...
in the aforementiond record_request_and_response method
we need to still make sure to strip leading whitespace
from the front of our data before saving it
MSP-9972
2015-03-18 11:23:45 -05:00
dacaa9e82b
simplify request-response parsing in apsscan
...
the record_request_and_response method for the
nokogiri appscan parser was way overcomplicated
it was trying to do way too much trickiness
when the data could be very simply split and consumed
MSP-9972
2015-03-18 11:19:00 -05:00
3269817b29
remove bad truthiness checks
...
truthy checks were used here, but you'll get
an empty hash which will be treated as true causing
the test to be invalid and allowing for errors further in the method
MSP-9972
2015-03-18 10:52:24 -05:00
8113ed2e1f
Move specs
2015-03-18 09:29:37 -05:00
17e1f7d34f
Move Streams code
2015-03-18 09:25:53 -05:00
e943cb550f
Land #4585 : CVE-2015-0975 XXE in OpenNMS
2015-03-18 22:34:52 +10:00
d1a2f58303
Fix of regex for file capture and format tweaks
2015-03-18 22:17:44 +10:00
5dd718e4fa
Better description
2015-03-18 09:51:51 +01:00
00de437918
Initial commit
2015-03-18 09:45:08 +01:00
fa7242388b
Move the module to the correct location
2015-03-18 18:18:54 +10:00
d152c41826
Land #4934 : Proxy and auth support in reverse_http(s)
2015-03-18 17:42:19 +10:00
b62da42927
Merge branch 'master' into feature/add-proxies-to-wininet
2015-03-18 01:51:15 -05:00
b46e5f8d13
Land #4295 : Refactory proxy-enabled payload handling
2015-03-18 16:49:13 +10:00
c607cf7b11
Merging master
2015-03-18 01:45:44 -05:00
97def50cc2
Whitespace cleanup
2015-03-18 01:26:59 -05:00
8d3cb8bde5
Fix up meterpreter patching arguments and names
2015-03-18 01:25:42 -05:00
ef443c83b9
Fix overgreed search/replace
2015-03-18 01:21:53 -05:00
390a704cc7
Cleanup proxyhost/proxyport arguments to match new names
2015-03-18 01:19:05 -05:00
f7a06d8e44
Rework PROXY_{HOST|PORT|TYPE|USERNAME|PASSWORD) to the new syntax
2015-03-18 01:15:32 -05:00
3aa8cb69a4
Fix two use cases of PROXYHOST/PROXYPORT
2015-03-18 01:08:09 -05:00
87a489907c
Place an IPv6 proxy IP between brackets
2015-03-18 01:01:16 -05:00
259db269bd
Remove user/pass and invalid class from the options
2015-03-18 01:01:16 -05:00
2ab14e7e79
Adds IPv6 and option-related issues with the previous patch
2015-03-18 01:01:10 -05:00
0601946830
Don't mandate and default PROXY_HOST (miscopy from the proxy stager)
2015-03-18 01:00:04 -05:00
a4df6d539f
Cleanup proxy handling code (consistency & bugs)
...
One subtle bug was that each time a request was received, a null byte was being appended to the datastore options for PROXY_USERNAME and PROXY_PASSWORD. Eventually this would break new sessions. This change centralizes the proxy configuration and cleans up the logic.
2015-03-18 00:59:59 -05:00
85fb534e63
Fix up the offset detection again, cleanup redundant code
2015-03-18 00:59:25 -05:00
2f13988d7b
Use OptPort vs OptInt and cleanup the description
2015-03-18 00:59:25 -05:00
a01be365b0
Rework PROXYHOST/PROXYPORT to PROXY_HOST/PROXY_PORT
...
This also cleans up the windows reverse_https_proxy stager.
2015-03-18 00:59:13 -05:00
14be07a2c4
Update java_rmi_server modules
2015-03-17 21:29:52 -05:00
d6048d0978
Use rex support for build_call
2015-03-17 21:05:45 -05:00
0968f14ac1
Add specs for CallData
2015-03-17 20:53:02 -05:00
OJ
Spencer McIntyre
Meatballs
sinn3r
joev
HD Moore
Brent Cook
jvazquez-r7
rwhitcroft
David Maloney
Hans-Martin Münch (h0ng10)