Commit Graph

1589 Commits (95948b9d7c07dbc87a78003bde106db623f63424)

Author SHA1 Message Date
jvazquez-r7 32373c1a6a new filename 2012-11-20 16:01:58 +01:00
jvazquez-r7 bb13c87aab module filename changed 2012-11-20 16:01:26 +01:00
jvazquez-r7 96024dc639 title updated 2012-11-20 16:00:50 +01:00
jvazquez-r7 bfbab4526a Merge branch 'sap_soap_rfc_sxpg_call_system' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_sxpg_call_system 2012-11-20 16:00:14 +01:00
jvazquez-r7 217fa27abb pcap to verify deleted 2012-11-20 15:55:56 +01:00
jvazquez-r7 101238db35 Merge branch 'sap_soap_rfc_dbmcli_sxpg_call_system_command_exec' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_dbmcli_sxpg_call_system_command_exec 2012-11-20 15:55:32 +01:00
nmonkee e16a51fcf9 author change 2012-11-20 14:23:29 +00:00
nmonkee 1bc62b8686 pcap for lin 2012-11-20 14:15:49 +00:00
nmonkee 838eb5154a Merge branch 'sap_soap_rfc_dbmcli_sxpg_call_system_command_exec' of https://github.com/jvazquez-r7/metasploit-framework into sap_soap_rfc_dbmcli_sxpg_call_system_command_exec 2012-11-20 14:13:51 +00:00
nmonkee be66ccdf00 pcap for lin 2012-11-20 13:59:49 +00:00
jvazquez-r7 5f99b56688 up to date to test rapid7#1030 2012-11-20 12:13:14 +01:00
jvazquez-r7 31ca077dd6 cleanup for sap_soap_rfc_sxpg_call_system.rb 2012-11-20 11:54:21 +01:00
jvazquez-r7 8385b8314c fix 1.8 warning about space before argument parenthesis 2012-11-19 22:55:44 +01:00
jvazquez-r7 3d753e9690 Delete pcap used to verify 2012-11-19 22:47:07 +01:00
jvazquez-r7 2f44bbaf21 Merge branch 'sap_soap_rfc_sxpg_command_exec' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_sxpg_command_exec 2012-11-19 22:46:38 +01:00
nmonkee dcb5cfdbbd pcap for lin 2012-11-19 21:06:05 +00:00
nmonkee a3550fb91b Merge branch 'sap_soap_rfc_sxpg_command_exec' of https://github.com/nmonkee/metasploit-framework into sap_soap_rfc_sxpg_command_exec 2012-11-19 21:01:00 +00:00
nmonkee aaeb05725a pcaps for lin and win 2012-11-19 21:00:11 +00:00
nmonkee 6adbee13b3 Merge branch 'sap_soap_rfc_sxpg_command_exec' of https://github.com/jvazquez-r7/metasploit-framework into sap_soap_rfc_dbmcli_sxpg_call_system_command_exec 2012-11-19 17:18:21 +00:00
jvazquez-r7 ee7bf42903 cleanup for last testing 2012-11-19 17:59:27 +01:00
nmonkee 149704d918 deleting file sap_soap_rfc_sxpg_call_system_command_exec 2012-11-18 23:56:33 +00:00
jvazquez-r7 3bf88e5884 final cleanup for sap_web_gui_brute_login 2012-11-18 22:39:05 +01:00
jvazquez-r7 165e9c26da Merge branch 'sap_web_gui_brute_login' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_web_gui_brute_login 2012-11-18 22:38:30 +01:00
jvazquez-r7 3573d31d08 final cleanup 2012-11-18 21:37:24 +01:00
jvazquez-r7 eddea29568 Merge branch 'sap_soap_rfc_brute_login' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_brute_login 2012-11-18 21:36:54 +01:00
jvazquez-r7 9fa8204152 datastore parameters cleanup 2012-11-18 11:53:17 +01:00
jvazquez-r7 5b55049610 module cleanup 2012-11-18 11:45:12 +01:00
jvazquez-r7 ea6c3e9b69 Merge branch 'sap_soap_rfc_susr_user_interface' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_susr_user_interface 2012-11-18 11:44:26 +01:00
jvazquez-r7 8a1a811844 Final cleanup 2012-11-18 01:41:10 +01:00
jvazquez-r7 482526e978 Merge branch 'sap_soap_bapi_user_create1' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_bapi_user_create1 2012-11-18 01:40:11 +01:00
jvazquez-r7 889124a439 final cleanup 2012-11-18 00:59:49 +01:00
jvazquez-r7 eed0f92829 Merge branch 'sap_soap_rfc_ping' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_ping 2012-11-18 00:59:35 +01:00
jvazquez-r7 22d4ccadea description updated 2012-11-18 00:35:25 +01:00
jvazquez-r7 a35c640acf final cleanup 2012-11-18 00:32:20 +01:00
jvazquez-r7 e72946303e Merge branch 'sap_soap_rfc_system_info' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_system_info 2012-11-18 00:31:53 +01:00
jvazquez-r7 59e96e5850 fix typo 2012-11-17 00:35:53 +01:00
jvazquez-r7 8c0e4705f1 final cleanup 2012-11-17 00:18:35 +01:00
jvazquez-r7 c511e58971 Merge branch 'sap_soap_rfc_read_table' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_read_table 2012-11-17 00:18:04 +01:00
James Lee c65f37782d Merge branch 'rapid7' into tasos-r7-web-modules 2012-11-16 13:52:18 -06:00
jvazquez-r7 0ef41ffcd4 added reporting to the module 2012-11-16 20:05:26 +01:00
jvazquez-r7 d8d2bee6fb Final cleanup 2012-11-16 19:20:58 +01:00
jvazquez-r7 65c741b539 Merge branch 'sap_soap_th_saprel' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_th_saprel 2012-11-16 19:19:21 +01:00
jvazquez-r7 e8fe6031e9 Let default timeout for send_request_cgi 2012-11-16 18:09:47 +01:00
jvazquez-r7 51f238ec38 up to date 2012-11-16 16:03:09 +01:00
Vlatko Kosturjak c0df3a0407 Remove curly braces 2012-11-15 23:27:25 +01:00
Vlatko Kosturjak eea85cf2ca Remove curly braces 2012-11-15 23:26:28 +01:00
Vlatko Kosturjak 836d83a253 Remove curly braces 2012-11-15 23:25:10 +01:00
Vlatko Kosturjak 854bfe09e2 remove curly braces 2012-11-15 23:23:46 +01:00
Vlatko Kosturjak 73d43beff3 Remove EOL spaces 2012-11-15 22:46:22 +01:00
Vlatko Kosturjak afced2278d Remove EOL spaces 2012-11-15 22:43:47 +01:00
Vlatko Kosturjak e479399b5d Initial import of OpenVAS aux scripts 2012-11-15 22:39:56 +01:00
Vlatko Kosturjak f7f7c451d3 Initial import of Nexpose aux scripts 2012-11-15 22:35:35 +01:00
Vlatko Kosturjak 1956af7dc1 Initial import of Metasploit RPC aux scripts 2012-11-15 22:32:22 +01:00
Vlatko Kosturjak bd03a2dcfd Initial import of Nessus basic aux scripts 2012-11-15 22:28:56 +01:00
nmonkee 62f9766e63 made requested changes 2012-11-15 00:00:31 +00:00
nmonkee 99d145eb23 made requested changes 2012-11-14 23:50:47 +00:00
James Lee 35a7999b4e Merge branch 'rapid7' into tasos-r7-web-modules 2012-11-14 17:41:27 -06:00
nmonkee b9a8791b87 made requested changes 2012-11-14 23:40:20 +00:00
nmonkee 047d6d350a looks like I committed the wrong file first time round :( 2012-11-14 23:34:21 +00:00
nmonkee a252dbc5d7 made requested changes 2012-11-14 23:25:25 +00:00
nmonkee 91b81bee4a made requested changes 2012-11-14 23:19:09 +00:00
nmonkee 308eee7c4f made requested changes 2012-11-14 23:00:45 +00:00
nmonkee aa3cd500bb made requested changes 2012-11-14 22:49:34 +00:00
nmonkee 83215edd8c made requested changes 2012-11-14 22:38:32 +00:00
nmonkee c5a017d054 made requested changes 2012-11-14 22:25:10 +00:00
nmonkee 833af3a347 made requested changes 2012-11-14 22:13:06 +00:00
nmonkee e55e5d2796 made requested changes 2012-11-14 20:12:37 +00:00
Tod Beardsley 4d633016aa Merge remote branch 'Meatballs1/smb_login_update'
Thus ends our long national nightmare.
2012-11-14 10:13:34 -06:00
Tasos Laskos 8a9f0a0890 Merge remote-tracking branch 'upstream/master' into web-modules 2012-11-14 18:10:41 +02:00
sinn3r 6b033fb1a8 Only store the password when there's one 2012-11-14 01:25:32 -06:00
jgor 212179b95e change behavior to explicitly note when password is not set (or enhanced password supercedes it) as opposed to an empty string password 2012-11-13 23:49:45 -06:00
jgor 721cf41f47 fix nil class error on non-lantronix hosts 2012-11-13 23:46:59 -06:00
sinn3r ee7e502e89 Merge branch 'impersonate_ssl_tweak' of git://github.com/ChrisJohnRiley/metasploit-framework into ChrisJohnRiley-impersonate_ssl_tweak 2012-11-13 09:36:28 -06:00
sinn3r f707a4774d Merge branch 'esmnemon-modbus-aux' 2012-11-12 23:42:00 -06:00
sinn3r aa6ac36abd Cosmetic changes, mostly 2012-11-12 23:41:31 -06:00
sinn3r 66fe8ade52 Merge branch 'modbus-aux' of git://github.com/esmnemon/metasploit-framework into esmnemon-modbus-aux 2012-11-12 22:40:34 -06:00
Meatballs1 5c10bc11a8 Fix spacing before - 2012-11-12 23:20:40 +00:00
Tod Beardsley dd1da88ff7 Make domain part less stupid looking 2012-11-12 16:54:52 -06:00
Meatballs1 970869b3e4 Retry push 2012-11-12 22:28:44 +00:00
Meatballs1 e30ab85549 Fix some outputting issues 2012-11-12 22:25:08 +00:00
sinn3r 72f0a5613f Add more improvements 2012-11-12 15:40:12 -06:00
sinn3r 8fe3f289bf Merge branch 'drupal_views_user_enum.rb' of git://github.com/zeknox/metasploit-framework into zeknox-drupal_views_user_enum.rb 2012-11-12 14:48:13 -06:00
Chris John Riley 38b25f01f7 Corrected bad coding (sorry)
Added OptEnum and OptPath
Checks for nil and empty
Added reference
Made AlterSerial an advanced option instead of always on
2012-11-10 20:24:50 +01:00
Tod Beardsley 1b9d45e106 Test for subdom_list existence first
Otherwise, you get

````
[11/09/2012 14:50:38] [e(0)] core: Error running against host
173.236.237.136: can't convert nil into String
````

Other than that, looks good.

[Fixes #851]
2012-11-09 15:01:36 -06:00
Tod Beardsley 171ebe13cd Whitespace fix for vhost_scanner 2012-11-09 14:48:46 -06:00
Tod Beardsley b1c35fdb24 Merge remote branch 'sempervictus/http_vhost_scanner_from_file' 2012-11-09 14:46:54 -06:00
Tod Beardsley f6c565848e Resolving conflicted smb_login 2012-11-09 12:55:18 -06:00
Royce Davis a889c8ae99 error handling adjustments on loggedin_users.rb 2012-11-09 08:33:05 -06:00
Tasos Laskos 7032ef0f6f Merge remote-tracking branch 'upstream/master' into web-modules 2012-11-09 00:21:38 +02:00
Royce Davis 7ce3859e8c Fixed a bunch of bull crap in loggedin_users.rb 2012-11-08 09:49:53 -06:00
Royce Davis 0c0d5b10ec changes loggedin_users.rb 2012-11-08 09:26:17 -06:00
Royce Davis 3bf865456c Better error handling in loggedin_users 2012-11-08 09:13:33 -06:00
HD Moore 4d2147f392 Adds normalize_uri() and fixes double-slash typos 2012-11-08 07:16:51 -06:00
HD Moore 5ad2749cee Rework ADDP modules to use the new mixin 2012-11-08 06:40:32 -06:00
HD Moore 0e8a3f0ea6 Merge branch 'master' into feature/udp-scanner-mixin 2012-11-08 06:09:22 -06:00
HD Moore e008120c11 Bug fixes to the SSDP discovery module 2012-11-08 06:08:49 -06:00
David Maloney 04a80e0648 Fixes to the WMI setup 2012-11-07 11:26:48 -06:00
nmonkee 92679cd1c8 SAP Web GUI Brute Force 2012-11-07 16:18:00 +00:00
nmonkee c13f8d8eba SAP RFC TH_SAPREL 2012-11-07 16:10:09 +00:00
nmonkee f618000d0d SAP SOAP RFC SUSR_RFC_USER_INTERFACE (user creation) 2012-11-07 16:04:07 +00:00
nmonkee 2b973263b7 SAP SOAP RFC_Info 2012-11-07 15:17:56 +00:00
nmonkee 509e63268b SAP SOAP RFC SXPG_CALL_SYSTEM 2012-11-07 15:06:28 +00:00
nmonkee ddcc0a9592 This module makes use of the SXPG_CALL_SYSTEM Remote Function Call (via SOAP) to execute OS commands as configured in SM69. 2012-11-07 12:48:08 +00:00
nmonkee e053c4a0ad This module makes use of the RFC_READ_TABLE Remote Function Call (via SOAP) to read data from tables. 2012-11-07 12:37:01 +00:00
nmonkee 3be7ad06c4 Calls the RFC_PING RFC module via SOAP to test the availability of the function. The function simply tests connectivity to remote RFC destinations. 2012-11-07 11:35:53 +00:00
nmonkee b86bc9f365 SAP SOAP RFC DBMCLI Command Injection (via SXPG_CALL_SYSTEM) 2012-11-07 11:29:16 +00:00
nmonkee f82b51b2c4 This module calls the RFC BAPI_USER_CREATE1 module (via SOAP). The module can be used for creating/modifying users. 2012-11-07 11:16:31 +00:00
nmonkee 5d7414511a SAPRouter Admin Request (display remote route information) 2012-11-07 11:06:03 +00:00
nmonkee 6b7b8f7265 Flipping OptString for OptEnum 2012-11-07 11:00:43 +00:00
nmonkee d19be3024f Flipping OptEnum for OptString 2012-11-07 10:58:07 +00:00
nmonkee 51a3aa514d This module attempts to brute force the username | password via an RFC interface (over SOAP) 2012-11-07 10:45:25 +00:00
Brandon McCann c4f35def81 fixed vprint_line 2012-11-06 14:58:14 -06:00
Brandon McCann d835a046ed fixed drupal_views_user_enum.rb so it displays to stdout and stores to loot 2012-11-06 14:53:11 -06:00
Royce Davis 43ebec22b4 Silly typos 2012-11-06 13:14:07 -06:00
Royce Davis 8c41aca091 Removed some non essential requires from loggedin_users.rb 2012-11-06 09:17:09 -06:00
Royce Davis 74745bdad6 New Module loggedin-users 2012-11-05 21:04:27 -06:00
Royce Davis 30088a410c fixed junky spacings 2012-11-05 16:59:56 -06:00
Royce Davis 1a4968e6a8 removed hashgrab.rb from this branch 2012-11-05 16:38:58 -06:00
Royce Davis d5b18114ac New module loggedin_users.rb 2012-11-05 16:37:13 -06:00
Tod Beardsley b973927ab2 Msftidy on digi_addp_reboot and pgpass_creds 2012-11-05 16:19:38 -06:00
jvazquez-r7 9166d12179 Merge branch 'WinRM_piecemeal' of https://github.com/dmaloney-r7/metasploit-framework into dmaloney-r7-WinRM_piecemeal 2012-11-05 23:08:59 +01:00
HD Moore aa8549fb6b Correct use of rport. 2012-11-05 15:57:59 -06:00
Tod Beardsley 23cc2bd1a1 Merge remote branch 'origin/master' 2012-11-05 15:56:21 -06:00
Tod Beardsley 6a4d398b5d Merge remote branch 'origin/feature/addp-modules' 2012-11-05 15:55:30 -06:00
jvazquez-r7 0f5f5f966b Merge branch 'master' into feature/realport-modules 2012-11-05 22:52:38 +01:00
David Maloney 314026ed0e Some error checking and fixups 2012-11-05 13:29:57 -06:00
Royce Davis 3236b4c425 New module hashgrab.rb 2012-11-05 12:06:51 -06:00
HD Moore dccfb63bd6 Cleanup based on PR #1008 feedback 2012-11-04 22:47:56 -06:00
HD Moore 36f82fba09 Remove unused version fields from template 2012-11-04 22:38:31 -06:00
HD Moore 910a91a0f6 First commit of a udp_mixin and modified scanners 2012-11-04 01:13:38 -05:00
HD Moore 963fdd6430 Initial commit for Digi RealPort modules 2012-11-03 17:44:53 -05:00
jvazquez-r7 9576d26299 Merge branch 'bitweaver_traversal' of https://github.com/wchen-r7/metasploit-framework into wchen-r7-bitweaver_traversal 2012-11-03 18:25:46 +01:00
sinn3r 10cccb34d8 Uh... I don't want that print_line(). Forgot to remove it. 2012-11-03 05:18:17 -05:00
sinn3r 4415849009 Another attempt to fix the regex 2012-11-03 05:17:32 -05:00
HD Moore 80ebcf212a See PR #981.Only real change is to retry on ENOBUF 2012-11-02 23:05:16 -05:00
sinn3r d449052472 Make <br /> tag optional 2012-11-02 18:25:48 -05:00
sinn3r 45dce9ff76 Modify regex 2012-11-02 16:44:27 -05:00
HD Moore 0d6acad1a0 Updates for PR #981 (cleanup) 2012-11-02 15:47:52 -05:00
HD Moore 0bf5f63d67 Merge branch 'master' into feature/addp-modules 2012-11-02 15:41:03 -05:00
sinn3r 1d26491b77 Ok... last fix, really 2012-11-02 15:09:30 -05:00
sinn3r a161c1faa0 Final changes 2012-11-02 15:06:51 -05:00
sinn3r ea5dc940d2 Move module to the correct directory 2012-11-02 14:52:28 -05:00
sinn3r a9db59feb7 Cosmetic changes, mostly 2012-11-02 14:52:02 -05:00
sinn3r 51b15d8c09 Merge branch 'concrete5_member_list' of git://github.com/ChrisJohnRiley/metasploit-framework into ChrisJohnRiley-concrete5_member_list 2012-11-02 14:43:49 -05:00
sinn3r 00d0dc3e4d Add CVE-2012-5192 - Bitweaver overlay_type module 2012-11-02 14:20:20 -05:00
Chris John Riley 01b13480cb Added concrete5.org references 2012-11-02 16:45:41 +01:00
Chris John Riley f3e03ddb42 Concrete5 CMS member list scanner 2012-11-02 16:32:34 +01:00
Tasos Laskos 37a9c13c34 updated auxiliary/scanner/http/crawler to accept a callback for each page 2012-11-01 21:20:56 +02:00
David Maloney 59f5d9bc5d Man i'm rusty at writing for framework
Fixes up all sinn3r's findings so far
2012-11-01 08:37:21 -05:00
David Maloney dd7ab11e38 Minor cleanup 2012-10-31 16:14:34 -05:00