Commit Graph

49824 Commits (8ffa0f64dc9c54f1f16f34fcdb4e480be54de9f1)

Author SHA1 Message Date
Caitlin Condon 8ffa0f64dc
Change individual contacts 2018-12-13 10:38:55 -06:00
bwatters-r7 564814c4db
Land #10676, Add support for ext_server_unhook
Merge branch 'land-10676' into upstream-master
2018-12-13 09:46:37 -06:00
bwatters-r7 b56a252de6 Merge branch 'master' of github.com:rapid7/metasploit-framework into upstream-master 2018-12-13 09:36:18 -06:00
Caitlin Condon 16d7c0530a
Update CONTRIBUTING.md 2018-12-13 09:35:37 -06:00
bwatters-r7 89e4e8bdea Merge branch 'master' of github.com:rapid7/metasploit-framework into upstream-master 2018-12-13 09:30:10 -06:00
Metasploit a8ebccebed
automatic module_metadata_base.json update 2018-12-12 14:39:47 -08:00
bwatters-r7 632a12339f
Bump Payloads to 1.3.56 to match payloads PR land 2018-12-12 16:35:18 -06:00
William Vu da0202aa90
Land #11103, CreateSession option for aux modules 2018-12-12 16:25:38 -06:00
William Vu 8b79634338 Update a few stragglers
And since eaton_xpert_backdoor was copied from my fortinet_backdoor
module, update the error handling there, too.
2018-12-12 15:47:18 -06:00
William Vu e69f006992 Remove CommandShell mixin in exploits
This was cargo culting. Exploits use handler instead of start_session.
2018-12-12 15:43:13 -06:00
William Vu 6e77ae7e3e Update my SSH scanner modules
Especially with proper error handling for Net::SSH::CommandStream.
2018-12-12 15:36:54 -06:00
William Vu a415063acd Reword CreateSession option description 2018-12-12 15:32:31 -06:00
Stephen Haywood 7cffbac65b Update additional scanner modules. 2018-12-12 15:32:31 -06:00
Stephen Haywood fa2164ebb9 Update to match coding style. 2018-12-12 15:32:31 -06:00
Stephen Haywood eceb47a9da Move CREATE_SESSION option to advanced option CreateSession 2018-12-12 15:32:31 -06:00
Stephen Haywood 8a7187ad79 Add CREATE_SESSION option to CommanShell
Register the CREATE_SESSION option in command_shell_options so it
can be used with all modules that use start_session.
Modify ssh_login.rb, ssh_login_pubkey.rb, and telnet_login.rb to
use the new CREATE_SESSION option.
When CREATE_SESSION is set to true (default) a new session is
created with each successful login. When set to false a new session
is not created but the successful login is still registered in the
credentials database.
2018-12-12 15:32:31 -06:00
Stephen Haywood 904f342848 Option to not create shell on login. 2018-12-12 15:32:30 -06:00
Aaron Soto 84e4cd9a0c
Update CONTRIBUTING.md
Updated vuln disclosure, removed deprecated instructions, added links to more recent examples
2018-12-12 15:01:21 -06:00
Metasploit 6e6269ab46
automatic module_metadata_base.json update 2018-12-12 11:42:51 -08:00
Wei Chen 23c52d13f0
Land #10429, Add webdav delivery module 2018-12-12 13:31:37 -06:00
Wei Chen 8ffd9e47b0 Up to date PR10429 2018-12-12 13:30:58 -06:00
Wei Chen 96c281daef Add send_not_found and module documentation for webdav_delivery 2018-12-12 13:26:46 -06:00
Metasploit f4453be69e
automatic module_metadata_base.json update 2018-12-11 18:40:31 -08:00
William Vu aa0c206b4b
Land #11107, double negative logic cleanup 2018-12-11 20:29:53 -06:00
Metasploit afa5b5db57
automatic module_metadata_base.json update 2018-12-11 10:12:09 -08:00
Shelby Pace ae089ce573
Land #10960, add wp duplicator code inject module 2018-12-11 12:02:07 -06:00
Shelby Pace b82e3469a2
renamed module and doc 2018-12-11 11:59:19 -06:00
Julien Legras 7e953e34b9 Added the clean_up function 2018-12-11 18:13:46 +01:00
bwatters b109321b44
Kill `unless not` 2018-12-11 10:16:16 -06:00
bwatters 0c9d5b7d51
refactor `unless !` to `if` 2018-12-11 10:04:55 -06:00
bwatters ac88c604fd Remove copy/pasta'd funtion that was never called 2018-12-11 10:02:36 -06:00
Metasploit f946b6d900
automatic module_metadata_base.json update 2018-12-11 06:39:46 -08:00
Jacob Robles 1ab69c221c
Land #11040, Add CyberLink LabelPrint Local BOF 2018-12-11 08:19:51 -06:00
Jacob Robles 106d6cefe4
Add documentation 2018-12-11 07:55:52 -06:00
Jacob Robles 165f082160
Fix syntax, minor edits 2018-12-11 07:55:20 -06:00
Metasploit 3968b1ed2e
automatic module_metadata_base.json update 2018-12-10 09:42:28 -08:00
William Vu 3f18ffa224
Land #10318, Oracle function-based index privesc 2018-12-10 11:32:39 -06:00
William Vu d0f1f72426 Clean up module 2018-12-10 11:21:16 -06:00
Brent Cook 43842ad41d
Land #11082, Update show plugins to show all available plugins as well 2018-12-10 10:20:51 -06:00
Metasploit 2ccce813e0
automatic module_metadata_base.json update 2018-12-10 08:06:37 -08:00
Brent Cook bc6356a2cd
Land #11090, update code and style for exploit/linux/local/glibc_origin_expansion_priv_esc 2018-12-10 09:59:03 -06:00
Brendan Coles 5bddc4e9ef
Land #11096, Replace WsfDelay typo with WfsDelay in docs 2018-12-10 11:03:53 +00:00
Auxilus bca4ae03ff
Replace WsfDelay with WfsDelay 2018-12-10 16:02:19 +05:30
Metasploit aa56f1e073
automatic module_metadata_base.json update 2018-12-09 22:47:11 -08:00
William Vu 82d34b9406
Land #11087, File::binread for exploit_data 2018-12-10 00:38:51 -06:00
Brent Cook 52af87d278
Land #11091, add chronos user 2018-12-09 09:24:06 -06:00
Shreyans Devendra Doshi 45c6f1ed62 Fix #11084 Add 'chronos' to unix_users.txt
This commit adds the username 'chronos' to the user list as it happens
to be the default username on ChromeOS, as highlighted by @h00die in
Issue #11084.
2018-12-09 09:58:58 -05:00
Brendan Coles 237d3c86c4 Code cleanup and update style 2018-12-09 07:26:51 +00:00
Brendan Coles a9c0a5d53d Use ::File::binread for exploit_data file read 2018-12-09 04:09:56 +00:00
Metasploit d9e7efa7e2
automatic module_metadata_base.json update 2018-12-08 07:59:36 -08:00