Commit Graph

1238 Commits (8b61c5edf5f28d21f7a909c7d30b02bda9a433c7)

Author SHA1 Message Date
Metasploit 2710c422c2
Bump version of framework to 5.0.16 2019-04-04 10:08:31 -07:00
Metasploit 51e204af70
Bump version of framework to 5.0.15 2019-03-28 10:08:24 -07:00
Brent Cook b2d047b0b1
Land #11622, merge common hash identifier code between modules 2019-03-26 13:12:00 -05:00
Matthew Kienow 1b86c41dcc
Add add_opts_workspace call to query and create 2019-03-25 19:39:25 -04:00
Matthew Kienow 6709780817
Add entry to autoload PayloadDataProxy 2019-03-25 13:43:16 -04:00
Matthew Kienow 98401072e5
Remove duplicate autoload for WebDataProxy 2019-03-25 13:38:32 -04:00
h00die 5ea406cd4c create hash identifier library 2019-03-23 14:02:34 -04:00
Brent Cook 6218d8920d
Land #11615, allow exporting creds to a JTR-compatible format 2019-03-23 09:08:35 -05:00
h00die c8785a6110 rstrip all the things 2019-03-23 07:04:41 -04:00
h00die 6aca047dbb unifi ssh cleanup 2019-03-22 21:51:41 -04:00
h00die f00c38cfe2 make creds exporter for jtr format 2019-03-22 15:04:58 -04:00
Metasploit 6be369e3bc
Bump version of framework to 5.0.14 2019-03-21 10:09:15 -07:00
Metasploit 59046eba20
Bump version of framework to 5.0.13 2019-03-19 08:17:20 -07:00
h00die 33bc0b3a1d add unifi USG to ssh details 2019-03-16 08:35:32 -04:00
Metasploit 4793f28e28
Bump version of framework to 5.0.12 2019-03-14 10:06:42 -07:00
h00die a0b1ca1767 detect unifi in ssh sessions 2019-03-12 20:35:32 -04:00
Metasploit 1588928b44
Bump version of framework to 5.0.11 2019-03-07 10:06:39 -08:00
Brent Cook 656ef8f970
Land #11533, Fix credential reporting service lookups 2019-03-06 20:13:41 -06:00
Brent Cook 841c07a42c restore rescue for now 2019-03-06 19:35:12 -06:00
Brent Cook 4f08d1e864 Fix credential reporting service lookups.
Noted by @actuated, auxiliary/scanner/ipmi/ipmi_dumphashes was displaying an error when run against an IPMI endpoint that had a common hash. This was due to the services lookup in the database not extracting the first element of the results array.

```
[-] Auxiliary failed: NoMethodError undefined method `id' for #<Array:0x000055615614b970>
[-] Call stack:
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/credential_data_proxy.rb:27:in `block (2 levels) in create_cracked_credential'
[-]   /home/bcook/.rvm/gems/ruby-2.6.1@metasploit-framework/gems/activerecord-4.2.11/lib/active_record/relation/delegation.rb:46:in `each'
[-]   /home/bcook/.rvm/gems/ruby-2.6.1@metasploit-framework/gems/activerecord-4.2.11/lib/active_record/relation/delegation.rb:46:in `each'
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/credential_data_proxy.rb:25:in `block in create_cracked_credential'
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/core.rb:166:in `data_service_operation'
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/credential_data_proxy.rb:15:in `create_cracked_credential'
[-]   /home/bcook/projects/metasploit-framework/lib/msf/core/auxiliary/report.rb:26:in `create_cracked_credential'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:317:in `report_cracked_cred'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:244:in `block (2 levels) in run_host'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:237:in `each'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:237:in `block in run_host'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb💯in `each'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb💯in `run_host'
[-]   /home/bcook/projects/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:111:in `block (2 levels) in run'
[-]   /home/bcook/projects/metasploit-framework/lib/msf/core/thread_manager.rb:106:in `block in spawn'
[*] Auxiliary module execution completed
```
2019-03-06 17:08:34 -06:00
Matthew Kienow 6bcdda4bd1
Add entry to autoload RemotePayloadDataService 2019-03-06 13:41:08 -05:00
Matthew Kienow 63c1903032
Remove empty file 2019-03-06 13:11:34 -05:00
Matthew Kienow b658cf5d76
Use data_service_operation block to perform work 2019-03-06 12:11:27 -05:00
Aaron Soto 822f5357a2
Land #10675, DB manager for payloads: Resolve conflicts, add 'create!' to trigger database write 2019-03-04 14:58:03 -06:00
Metasploit 1979b18c0a
Bump version of framework to 5.0.10 2019-02-28 10:07:33 -08:00
Metasploit 3871e45196
Bump version of framework to 5.0.9 2019-02-21 21:30:00 -08:00
Metasploit a3d0c93ff7
Bump version of framework to 5.0.8 2019-02-21 10:07:03 -08:00
Metasploit f895ebccc3
Bump version of framework to 5.0.7 2019-02-14 10:10:20 -08:00
Brent Cook 930d1fb78a
Land #11351, many new John the Ripper module improvements 2019-02-13 03:05:14 -06:00
Metasploit 127c891950
Bump version of framework to 5.0.6 2019-02-07 10:04:24 -08:00
Metasploit 804c441425
Bump version of framework to 5.0.5 2019-02-01 13:44:12 -08:00
Metasploit 7633c2832a
Bump version of framework to 5.0.4 2019-01-31 10:05:02 -08:00
h00die da27c3eeae centralize hash to jtr formatting 2019-01-30 16:24:05 -05:00
Matthew Kienow d078fcd87c
Land #11270, fix miscellaneous loot issues 2019-01-25 19:15:14 -05:00
h00die 9930edf704 jtr modernizations 2019-01-25 14:07:24 -05:00
James Barnett 9e3a39bcf9
Dont try to process empty loot 2019-01-25 12:34:52 -06:00
Metasploit 9e06040efe
Bump version of framework to 5.0.3 2019-01-24 10:06:14 -08:00
Jeffrey Martin fa7c7fc956
keep wordlist.to_file() backwords compatible 2019-01-23 10:52:49 -06:00
Brendan Coles 444555d3be
Land #11261, Add maximum word length to JtR wordlist generation 2019-01-20 04:14:57 +00:00
Metasploit c808cbe050
Bump version of framework to 5.0.2 2019-01-17 20:41:51 -08:00
James Barnett 42c9553283
Dont do a separate lookup for loot.host, use the included JSON
This is just a temporary change. Eventually we should be doing separate
lookups for associated objects as that is the RESTful way of doing it.
Implementing this now to prevent extra load on the server until we can
put a better system in place of doing multiple lookups with a single call.
2019-01-15 12:47:37 -06:00
h00die 4d847e97fc ... over -1 2019-01-14 22:41:11 -05:00
h00die 509b4e979d max_length -1 2019-01-14 22:28:46 -05:00
h00die 2c02dbc8a6 add max_length to wordlist generation 2019-01-14 22:20:33 -05:00
James Barnett e168458861
Make calls to get the associated host when getting loot 2019-01-14 15:51:51 -06:00
Metasploit 16f152f6e3
Bump version of framework to 5.0.1 2019-01-10 09:41:50 -08:00
Brent Cook f125526e09
Land #11207, implement db_import for web service 2019-01-10 10:28:29 -06:00
Brent Cook d686303cff
Land #11228, Move msfdb_ws to tools/dev since it is deprecated by msfdb 2019-01-10 09:28:34 -06:00
James Barnett 4074913b60
Dont log every request when using HTTP data service 2019-01-10 00:30:54 -06:00
Matthew Kienow c3f71a1692
Update Rspec expected thread count
When REMOTE_DB is set there is a thread for the web service, in
addition to the External modules thread manager, so there is one or two
threads by the end of the test run in addition to the main VM thread.
2019-01-09 23:56:16 -05:00