Matthew Kienow
b544125f50
Refactor JSON-RPC related variables
...
Dynamically get MSF config root directory rather than a fixed value.
2019-01-09 17:19:15 -05:00
Matthew Kienow
a465d09110
Update JSON-RPC URI output to fixed version v1
2019-01-09 16:00:45 -05:00
Matthew Kienow
a2aac31eff
Correct typo in variable name
2019-01-09 15:48:40 -05:00
Matthew Kienow
f636982b09
Land #11211 , change db_connect persistence logic
2019-01-09 15:11:08 -05:00
William Vu
913c80c352
Land #11106 , Allen-Bradley legacy protocol DoS
2019-01-09 12:12:02 -06:00
William Vu
0f156140fe
Clean up module
2019-01-09 12:11:50 -06:00
Jacob Robles
307cc8c107
fix comment
2019-01-09 11:12:51 -06:00
Jacob Robles
984ff284ac
Land #11199 , update joomla wordlists
2019-01-09 10:07:09 -06:00
Clément Notin
cf1b4b43cb
auxiliary/fileformat/badpdf: fix syntax and logic error in options handling
2019-01-09 14:30:24 +01:00
Jacob Robles
0c984fa232
Fix messages /successfuly/successfully
2019-01-09 06:32:22 -06:00
Matthew Kienow
e83e1b23bd
Add support for starting JSON-RPC server
2019-01-08 22:40:15 -05:00
Matthew Kienow
b6cfb5f697
Add Msf::Util::ServiceHelper class
2019-01-08 22:39:26 -05:00
James Barnett
f77eab1522
Land #11180 , add search and filter options to session-events API endpoint
2019-01-08 16:39:34 -06:00
Matthew Kienow
e71aac715b
Move common parameter information to RootApiDoc
2019-01-08 17:20:13 -05:00
Matthew Kienow
48c3f1c92d
Fix typo
2019-01-08 17:11:01 -05:00
James Barnett
a2548fe92d
Only lookup db connections by name
...
Matching on all attributes was causing issues when the connection
criteria would change for a db service at a host that already existed.
It would find the existing connection and load that outdated connection
and fail to connect.
The new functionality will save a new, valid connection with a randomly
generated name, unless the -n flag is specified to overwrite an existing
connection.
2019-01-08 15:21:14 -06:00
Jacob Robles
16b8cf7059
Land #11148 , Adding Module MailCleaner RCE
2019-01-08 14:10:31 -06:00
Jacob Robles
a0acfa79d7
Target payloads
2019-01-08 13:27:26 -06:00
Jacob Robles
5f8d8c3637
Update doc
2019-01-08 13:25:13 -06:00
Matthew Kienow
84a8c9b638
Minor method comment change
2019-01-08 14:02:40 -05:00
Matthew Kienow
3510a3daa2
Correct documentation errors
2019-01-08 14:02:40 -05:00
Matthew Kienow
c55ef72437
Update OpenAPI documentation for GET operation
2019-01-08 14:02:40 -05:00
Matthew Kienow
63c3404f64
Add test for session_events method
2019-01-08 14:02:40 -05:00
Matthew Kienow
8c29319b25
Add session_events method
2019-01-08 14:02:40 -05:00
Matthew Kienow
fa783256eb
Remove unnecessary argument default value
2019-01-08 14:02:39 -05:00
Matthew Kienow
d677eb16a9
Enhance session_events query
2019-01-08 14:02:32 -05:00
Matthew Kienow
d117e6a1d1
Land #11142 , use POST for API token generation
2019-01-08 11:59:30 -05:00
James Barnett
466b0004e1
Land #11163 , add API endpoint for retrieving Mdm::Events
2019-01-08 09:26:53 -06:00
Jacob Robles
c2da3dbbd3
Land #11052 , Add gather chrome cookies post module
2019-01-08 07:32:16 -06:00
Jacob Robles
8ca8206303
Update docs
2019-01-08 07:15:50 -06:00
Jacob Robles
a95384e288
Additional support and code cleanup
2019-01-08 06:57:56 -06:00
James Barnett
69ee3a4a26
Land #11187 , Conform LoginServlet to API standards
2019-01-07 17:03:39 -06:00
James Barnett
f23142c19c
Land #11183 , add authentication to LoginServlet endpoints
2019-01-07 17:02:31 -06:00
Erin Bleiweiss
cfa22bb4ec
Exclude key from VulnDetail update
2019-01-07 16:33:50 -06:00
Erin Bleiweiss
771469f4cd
Update all Mdm::xx.update() instances
2019-01-07 16:24:13 -06:00
Erin Bleiweiss
6641c606b2
Add support for db import from remote data service
2019-01-07 14:32:27 -06:00
James Barnett
02fda8625a
Address code review comments.
...
- Fix CSS on submit button
- Dont generate a new token when logging in to web form
- Also added text to account page to send the user to the login page when not logged in
2019-01-07 13:52:01 -06:00
William Vu
f96514528b
Land #10648 , auth bypass for couchdb_enum
2019-01-07 12:53:11 -06:00
William Vu
3a726554e9
Fix review comments
2019-01-07 12:51:52 -06:00
Qazeer
a63c057c3a
Integrate bcoles' comments (filename generation, conditional block improvement, etc.)
2019-01-06 22:50:46 +01:00
Qazeer
c03466d2f2
Fixed date format issue and added Bugtraq ID
2019-01-06 14:34:40 +01:00
Qazeer
4644ad8966
Add CVE-2018-15961 Adobe ColdFusion CKEditor unrestricted file upload
2019-01-06 04:55:20 +01:00
h00die
ed98fc8b71
update PR template to ask for unique branch
2019-01-04 21:53:25 -05:00
h00die
49b8552d59
update joomla wordlists
2019-01-04 21:38:49 -05:00
asoto-r7
ddebc291f2
Added partial 'ysoserial-modified' support, along with debug flags
2019-01-04 16:43:06 -06:00
asoto-r7
0ca4dd829e
Fixed an off-by-one error in fingerprinting string randomization
2019-01-04 16:31:43 -06:00
Matthew Kienow
b5c4ac6af3
Land #11113 , fixes for vuln and credential APIs
2019-01-04 17:05:12 -05:00
Metasploit
9ac96b213f
Weekly dependency update
2019-01-04 14:00:12 -08:00
James Barnett
101fbb7aa5
Address code review comments
2019-01-04 15:23:24 -06:00
James Barnett
83267d08e0
Update jquery version and use SRI
2019-01-04 15:23:24 -06:00