Commit Graph

1246 Commits (9793c839f27ff487f1871226b3351ac12e5f39eb)

Author SHA1 Message Date
Brent Cook d207038ab8
Land #11722, expand password hash identification library 2019-04-24 05:09:30 -05:00
Metasploit 8b17a9249c
Bump version of framework to 5.0.19 2019-04-18 10:07:09 -07:00
William Vu 8e8763df5b Update invalidate_login to remove regex creds 2019-04-17 13:24:59 -05:00
Metasploit b674dc8986
Bump version of framework to 5.0.18 2019-04-16 10:51:27 -07:00
h00die dcc1a21251 add osx to hash identify 2019-04-14 10:12:26 -04:00
h00die 75ac760d18 Merge branch 'master' of https://github.com/rapid7/metasploit-framework into hash_lib 2019-04-14 09:32:29 -04:00
h00die 0739f5080a expand hashes identify library and add spec 2019-04-12 17:08:19 -04:00
Metasploit 7b29e6e057
Bump version of framework to 5.0.17 2019-04-11 10:03:55 -07:00
Metasploit 2710c422c2
Bump version of framework to 5.0.16 2019-04-04 10:08:31 -07:00
Metasploit 51e204af70
Bump version of framework to 5.0.15 2019-03-28 10:08:24 -07:00
Brent Cook b2d047b0b1
Land #11622, merge common hash identifier code between modules 2019-03-26 13:12:00 -05:00
Matthew Kienow 1b86c41dcc
Add add_opts_workspace call to query and create 2019-03-25 19:39:25 -04:00
Matthew Kienow 6709780817
Add entry to autoload PayloadDataProxy 2019-03-25 13:43:16 -04:00
Matthew Kienow 98401072e5
Remove duplicate autoload for WebDataProxy 2019-03-25 13:38:32 -04:00
h00die 5ea406cd4c create hash identifier library 2019-03-23 14:02:34 -04:00
Brent Cook 6218d8920d
Land #11615, allow exporting creds to a JTR-compatible format 2019-03-23 09:08:35 -05:00
h00die c8785a6110 rstrip all the things 2019-03-23 07:04:41 -04:00
h00die 6aca047dbb unifi ssh cleanup 2019-03-22 21:51:41 -04:00
h00die f00c38cfe2 make creds exporter for jtr format 2019-03-22 15:04:58 -04:00
Metasploit 6be369e3bc
Bump version of framework to 5.0.14 2019-03-21 10:09:15 -07:00
Metasploit 59046eba20
Bump version of framework to 5.0.13 2019-03-19 08:17:20 -07:00
h00die 33bc0b3a1d add unifi USG to ssh details 2019-03-16 08:35:32 -04:00
Metasploit 4793f28e28
Bump version of framework to 5.0.12 2019-03-14 10:06:42 -07:00
h00die a0b1ca1767 detect unifi in ssh sessions 2019-03-12 20:35:32 -04:00
Metasploit 1588928b44
Bump version of framework to 5.0.11 2019-03-07 10:06:39 -08:00
Brent Cook 656ef8f970
Land #11533, Fix credential reporting service lookups 2019-03-06 20:13:41 -06:00
Brent Cook 841c07a42c restore rescue for now 2019-03-06 19:35:12 -06:00
Brent Cook 4f08d1e864 Fix credential reporting service lookups.
Noted by @actuated, auxiliary/scanner/ipmi/ipmi_dumphashes was displaying an error when run against an IPMI endpoint that had a common hash. This was due to the services lookup in the database not extracting the first element of the results array.

```
[-] Auxiliary failed: NoMethodError undefined method `id' for #<Array:0x000055615614b970>
[-] Call stack:
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/credential_data_proxy.rb:27:in `block (2 levels) in create_cracked_credential'
[-]   /home/bcook/.rvm/gems/ruby-2.6.1@metasploit-framework/gems/activerecord-4.2.11/lib/active_record/relation/delegation.rb:46:in `each'
[-]   /home/bcook/.rvm/gems/ruby-2.6.1@metasploit-framework/gems/activerecord-4.2.11/lib/active_record/relation/delegation.rb:46:in `each'
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/credential_data_proxy.rb:25:in `block in create_cracked_credential'
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/core.rb:166:in `data_service_operation'
[-]   /home/bcook/projects/metasploit-framework/lib/metasploit/framework/data_service/proxy/credential_data_proxy.rb:15:in `create_cracked_credential'
[-]   /home/bcook/projects/metasploit-framework/lib/msf/core/auxiliary/report.rb:26:in `create_cracked_credential'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:317:in `report_cracked_cred'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:244:in `block (2 levels) in run_host'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:237:in `each'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb:237:in `block in run_host'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb💯in `each'
[-]   /home/bcook/projects/metasploit-framework/modules/auxiliary/scanner/ipmi/ipmi_dumphashes.rb💯in `run_host'
[-]   /home/bcook/projects/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:111:in `block (2 levels) in run'
[-]   /home/bcook/projects/metasploit-framework/lib/msf/core/thread_manager.rb:106:in `block in spawn'
[*] Auxiliary module execution completed
```
2019-03-06 17:08:34 -06:00
Matthew Kienow 6bcdda4bd1
Add entry to autoload RemotePayloadDataService 2019-03-06 13:41:08 -05:00
Matthew Kienow 63c1903032
Remove empty file 2019-03-06 13:11:34 -05:00
Matthew Kienow b658cf5d76
Use data_service_operation block to perform work 2019-03-06 12:11:27 -05:00
Aaron Soto 822f5357a2
Land #10675, DB manager for payloads: Resolve conflicts, add 'create!' to trigger database write 2019-03-04 14:58:03 -06:00
Metasploit 1979b18c0a
Bump version of framework to 5.0.10 2019-02-28 10:07:33 -08:00
Metasploit 3871e45196
Bump version of framework to 5.0.9 2019-02-21 21:30:00 -08:00
Metasploit a3d0c93ff7
Bump version of framework to 5.0.8 2019-02-21 10:07:03 -08:00
Metasploit f895ebccc3
Bump version of framework to 5.0.7 2019-02-14 10:10:20 -08:00
Brent Cook 930d1fb78a
Land #11351, many new John the Ripper module improvements 2019-02-13 03:05:14 -06:00
Metasploit 127c891950
Bump version of framework to 5.0.6 2019-02-07 10:04:24 -08:00
Metasploit 804c441425
Bump version of framework to 5.0.5 2019-02-01 13:44:12 -08:00
Metasploit 7633c2832a
Bump version of framework to 5.0.4 2019-01-31 10:05:02 -08:00
h00die da27c3eeae centralize hash to jtr formatting 2019-01-30 16:24:05 -05:00
Matthew Kienow d078fcd87c
Land #11270, fix miscellaneous loot issues 2019-01-25 19:15:14 -05:00
h00die 9930edf704 jtr modernizations 2019-01-25 14:07:24 -05:00
James Barnett 9e3a39bcf9
Dont try to process empty loot 2019-01-25 12:34:52 -06:00
Metasploit 9e06040efe
Bump version of framework to 5.0.3 2019-01-24 10:06:14 -08:00
Jeffrey Martin fa7c7fc956
keep wordlist.to_file() backwords compatible 2019-01-23 10:52:49 -06:00
Brendan Coles 444555d3be
Land #11261, Add maximum word length to JtR wordlist generation 2019-01-20 04:14:57 +00:00
Metasploit c808cbe050
Bump version of framework to 5.0.2 2019-01-17 20:41:51 -08:00
James Barnett 42c9553283
Dont do a separate lookup for loot.host, use the included JSON
This is just a temporary change. Eventually we should be doing separate
lookups for associated objects as that is the RESTful way of doing it.
Implementing this now to prevent extra load on the server until we can
put a better system in place of doing multiple lookups with a single call.
2019-01-15 12:47:37 -06:00
h00die 4d847e97fc ... over -1 2019-01-14 22:41:11 -05:00