Jeffrey Martin
483228c4ea
use platform for session_compatible? to support shell sessions
2016-12-05 14:14:37 -06:00
David Maloney
ce23c2db53
why is this test so whitespace sensitive?
2016-12-05 12:18:58 -06:00
David Maloney
d8af532407
offs
2016-12-05 12:08:51 -06:00
David Maloney
e2a646f9d3
i hate you cucumber
2016-12-05 11:44:13 -06:00
David Maloney
85a3889eea
trying to get cucumber passing again
2016-12-05 11:36:40 -06:00
David Maloney
f56c7f9a8e
cosmetic touchups
2016-12-05 11:25:56 -06:00
David Maloney
d85f9880ff
fix command dispatcher specs
2016-12-05 11:16:15 -06:00
David Maloney
ab2e88a49e
created modules command dispatcher
...
moved all commands related to navigating around
modules, editing them, and viewing their info into
a new command dispatcher
2016-12-05 10:30:18 -06:00
David Maloney
6557a84784
add resource command dispatcher
...
move resource script related commands into
their own command dispatcher
2016-12-05 09:20:07 -06:00
David Maloney
2008dcb946
create jobs command dispatcher
...
split the jobs related commands into their own
command dispatcher to start cleaning up the 'core'
dispatcher
2016-12-05 09:12:52 -06:00
William Vu
d08aff2dcc
Land #7651 , nil fix for etherpad_duo_login
2016-12-03 13:11:13 -06:00
Jin Qian
4a35f8449a
Fixed issue #7650 by matching Server header using regex as Wei suggested
...
The suggestion by Wei is simpler than the one I checked in which checks for presence of Server header before calling include method.
2016-12-02 20:26:38 -06:00
Jin Qian
35fdf1473b
Fixed issue #7650 where etherpad_duo_login module may crash
...
Add check for presence of Server header.
2016-12-02 18:07:18 -06:00
Brendan
86ec5861f9
Land #7649 , update session_compatible? for changes from PR#7507
...
Fixing the ability to find compatible post scripts for sessions
2016-12-02 16:29:08 -06:00
Jeffrey Martin
b218c7690a
cleanup stray comment
2016-12-02 15:25:58 -06:00
Jeffrey Martin
0be166e719
update session_compatible? for changes from PR#7507
2016-12-02 14:55:38 -06:00
wchen-r7
7ee9408da3
Land #7647 , Search with an intersect instead of a union
2016-12-02 13:55:50 -06:00
darkbushido
889de05af4
removing some commented code
2016-12-02 13:06:22 -06:00
darkbushido
486f8cd2a3
adding arch to search
2016-12-02 13:05:23 -06:00
darkbushido
f6694992ce
changing module search to use the new scopes
2016-12-02 13:05:23 -06:00
dmohanty-r7
f45b0e3c88
Land #7643 , only use ANSI ctrl chars in stdio output
2016-12-02 12:54:46 -06:00
Metasploit
76db530a86
Bump version of framework to 4.13.4
2016-12-02 10:02:53 -08:00
wchen-r7
374763e991
Land #7636 , support sleep command for android meterpreter
2016-12-02 11:48:26 -06:00
Tod Beardsley
d549c2793f
Fix module filename to be TR-064
2016-12-02 08:49:21 -06:00
Tod Beardsley
9e4e9ae614
Add a reference to the TR-064 spec
2016-12-02 08:48:09 -06:00
Tod Beardsley
ddac5600e3
Reference TR-064, not TR-069
2016-12-02 08:45:15 -06:00
OJ
917b45664b
Merge LURI fix from timwr
2016-12-02 08:01:12 +10:00
William Vu
ff8141c1b5
Land #7644 , cred fix for vbulletin_vote_sqli_exec
2016-12-01 15:47:31 -06:00
William Vu
c65ff2f0f4
Land #7646 , get_cookies fix for dolibarr_login
2016-12-01 15:43:43 -06:00
Jin Qian
11906eb540
Fix issue #7645 where dolibarr_login module crashed
...
Add "res" (http response) when trying to retrieve the cookie
2016-12-01 15:38:26 -06:00
wchen-r7
41355898fa
Remove extra def report_cred in vbulletin_vote_sqli_exec
2016-12-01 15:31:24 -06:00
wchen-r7
9325ef8d8f
Land #7573 , Add WP Symposium Plugin SQLI aux mod to steal credentials
2016-12-01 14:56:30 -06:00
wchen-r7
6b5dba72d4
Update description
2016-12-01 14:55:16 -06:00
wchen-r7
64bc029106
Fix Ruby style
2016-12-01 14:53:55 -06:00
wchen-r7
90ec367a99
Add method to save creds to database
2016-12-01 14:52:51 -06:00
wchen-r7
174cd74900
Land #7532 , Add bypass UAC local exploit via Event Viewer module
2016-12-01 11:16:49 -06:00
wchen-r7
1e9d80c998
Fix another typo
2016-12-01 11:16:06 -06:00
wchen-r7
b8243b5d10
Fix a typo
2016-12-01 11:15:26 -06:00
David Maloney
c9b5e43201
only use ANSI ctrl chars in stdio output
...
the async output fix was put in the parent UI IO
class when it only really makes sense in stdio.
Those ctrl sequences will noly be understood if output to a
terminal.
MS-2298
2016-12-01 11:06:17 -06:00
Tim
5a2eb29a1b
remove unused generate_small_uri
2016-12-01 18:33:36 +08:00
Tim
4da614532b
fix luri
2016-12-01 18:22:13 +08:00
William Vu
54684d31bd
Land #7641 , check_conn? fix for cisco_ssl_vpn
2016-11-30 21:14:19 -06:00
William Vu
032312d40b
Properly check res
2016-11-30 21:03:29 -06:00
OJ
72a20ce464
Merge timwr's changes that fix android/reverse_http
2016-12-01 09:59:41 +10:00
OJ
8f077e1bf5
Merge timwr's changes for autoloading android
2016-12-01 09:58:54 +10:00
William Vu
1d6ee7192a
Land #7427 , new options for nagios_xi_chained_rce
2016-11-30 17:11:02 -06:00
William Vu
b0cd28ef4c
Update module docs
2016-11-30 17:10:57 -06:00
William Vu
3e8cdd1f36
Polish up USER_ID and API_TOKEN options
2016-11-30 17:10:52 -06:00
Jin Qian
ec83a861c8
Fix issue #7640 where cisco SSL VPN not move despite server responded
...
Add the "return true" statement that was missing.
2016-11-30 16:25:13 -06:00
OJ
ebf5121359
Merge branch 'upstream/master' into add-bypassuac-eventvwr
2016-12-01 07:58:16 +10:00