smilingraccoon
fc5a0e22b2
stupid push, forgot to remove test puts
2013-01-10 10:43:57 -05:00
smilingraccoon
ed9d290a85
added status messages, made var blog_posts initalize as nil rather than empty string
2013-01-10 10:41:25 -05:00
smilingraccoon
5bafd6ddcc
added status message
2013-01-10 09:43:37 -05:00
sinn3r
2776047553
Merge branch 'smb_cap' of github.com:Meatballs1/metasploit-framework into Meatballs1-smb_cap
2013-01-09 16:09:35 -06:00
jvazquez-r7
5fe2f967da
this rescue is done in the mixin
2013-01-09 21:28:06 +01:00
HD Moore
07f8eb6a07
Fix up a typo
2013-01-09 13:05:27 -06:00
HD Moore
adb4c89602
Add a scanner module for CVE-2013-0156
2013-01-09 12:50:38 -06:00
jvazquez-r7
7a1a9985d5
Merge branch 'mysql_login_exceptions' of https://github.com/wchen-r7/metasploit-framework into wchen-r7-mysql_login_exceptions
2013-01-09 18:21:03 +01:00
smilingraccoon
a0a4ef843b
added error msgs to rescue
2013-01-09 11:22:36 -05:00
Meatballs
4cadffc06a
msftidy
2013-01-09 10:37:40 +00:00
Meatballs
46139849a9
Move to .empty? over length
2013-01-09 10:36:06 +00:00
Meatballs
a8400030f8
Also correct outut of hash when length is 0
2013-01-09 10:26:57 +00:00
Meatballs
d36fcd5441
Fix smb capture error
2013-01-09 09:50:21 +00:00
sinn3r
4e70f7d888
Merge branch 'bug/rm7139-smtp_enum-false-positive' of github.com:lmercer-r7/metasploit-framework into lmercer-r7-bug/rm7139-smtp_enum-false-positive
2013-01-09 01:13:43 -06:00
Thomas McCarthy
f45739933e
Update modules/auxiliary/scanner/http/wordpress_pingback_access.rb
...
Changed name var in initialize
2013-01-08 19:20:02 -05:00
lmercer
69485ba261
made changes as specified in Redmine Bug #7139
2013-01-08 12:14:57 -05:00
luh2
8e80f5e82c
Public key size determined properly
2013-01-08 16:39:27 +01:00
Joshua J. Drake
3ceb313752
Fixes format string issue in smb_login - FixRM #7657
2013-01-07 22:17:49 -06:00
Joshua J. Drake
c74d258509
Revert "Fixes format string issue in smb_login - FixRM #7657"
...
Will replay on separate branch.
This reverts commit a12b628ccc
.
2013-01-07 22:03:57 -06:00
Joshua J. Drake
60987de854
Merge branch 'master' of github.com:rapid7/metasploit-framework
2013-01-07 21:20:20 -06:00
Joshua J. Drake
a12b628ccc
Fixes format string issue in smb_login - FixRM #7657
2013-01-07 21:20:09 -06:00
sinn3r
5bc1066c69
Change how modules use the mysql login functions
2013-01-07 16:12:10 -06:00
Royce Davis
ff9ef80cc6
Fixed terrible tab issues that occured because of an evil vimrc filegit add ntdsgrab.rb
2013-01-07 12:49:58 -06:00
Royce Davis
e4546b13f3
Creating new pull request to beat Travis build strange errors...
2013-01-07 12:21:59 -06:00
smilingraccoon
9f69dbbd30
update unless statements, targeturi, and resolve var
2013-01-07 13:17:49 -05:00
Tod Beardsley
36adf86184
Various and sundry fixes for normalize_uri
2013-01-07 12:02:08 -06:00
Royce Davis
c1f0e1172b
Still fighing with Travis build errors
2013-01-07 11:52:37 -06:00
Tod Beardsley
6a9445966a
Caught missing paren
2013-01-07 11:21:55 -06:00
Tod Beardsley
33751c7ce4
Merges and resolves CJR's normalize_uri fixes
...
Merge remote-tracking branch 'ChrisJohnRiley/set_normalize_uri_on_modules'
into set_normalize_uri_on_modules
Note that this trips all kinds of msftidy warnings, but that's for another
day.
Conflicts:
modules/exploits/unix/webapp/tikiwiki_jhot_exec.rb
modules/exploits/windows/http/xampp_webdav_upload_php.rb
2013-01-07 11:16:58 -06:00
Royce Davis
ac2182c69b
Edited to fix Travis build process
2013-01-07 11:10:21 -06:00
smilingraccoon
0de23a7edb
fixed description
2013-01-04 21:16:56 -05:00
smilingraccoon
e35afdce5d
added wordpress-pingback scanner
2013-01-04 20:59:33 -05:00
smilingraccoon
3936725958
added wordpress-pingback scanner
2013-01-04 20:44:40 -05:00
Royce Davis
44e07c8577
Created psexec mixin to get rid of ugly copy-paste
2013-01-04 09:58:48 -06:00
Christian Mehlmauer
6654faf55e
Msftidy fixes
2013-01-04 09:29:34 +01:00
sinn3r
6f50410e5f
Merge branch 'patch-1' of github.com:mubix/metasploit-framework into mubix-patch-1
2013-01-03 17:51:54 -06:00
James Lee
9e912a23ff
Merge branch 'rapid7' into FireFart-msftidy_aux_1
2013-01-03 16:54:25 -06:00
Tonimir Kisasondi
39e81fb07f
Update modules/auxiliary/scanner/http/wordpress_login_enum.rb
...
Simple fix for msfconsole start error.
2013-01-03 21:52:10 +01:00
Tod Beardsley
1406f7cb0a
Msftidy on sap_router_info_request
2013-01-03 10:55:11 -06:00
Christian Mehlmauer
8cada447b2
msftidy: remove $Id$
2013-01-03 10:21:10 +01:00
Christian Mehlmauer
e4a6669927
msftidy: remove $Revision$
2013-01-03 01:05:45 +01:00
Christian Mehlmauer
4d8a2a0885
msftidy: remove $Revision$
2013-01-03 01:01:18 +01:00
Christian Mehlmauer
95948b9d7c
msftidy: remove $Revision$
2013-01-03 00:58:09 +01:00
Christian Mehlmauer
ca890369b1
msftidy: remove $Id$
2013-01-03 00:54:48 +01:00
Rob Fuller
88d12da3db
hilight positive results in WebDAV scanner
...
As suggested by Lee Baird
2013-01-02 13:27:25 -05:00
Royce Davis
321a4ecb74
Escaped quotes in windows command
2012-12-29 13:46:22 -06:00
Royce Davis
02bbcb5803
surrounded ntdspath in a space
2012-12-29 13:33:32 -06:00
Royce Davis
174e6e8f17
Fixed array instantiation
2012-12-29 13:31:54 -06:00
sinn3r
33ea21e415
Merge branch '403labs-zgrace-wordpress_login_enum'
2012-12-28 17:47:05 -06:00
sinn3r
d92b3bd2e1
Apply fixes
2012-12-28 17:46:17 -06:00
Tod Beardsley
e5eb8c6301
Fix connected in sap_router_info_request
...
See #1028 comments
2012-12-28 16:34:59 -06:00
sinn3r
2746a57093
Merge branch 'zgrace-wordpress_login_enum' of git://github.com/403labs/metasploit-framework into 403labs-zgrace-wordpress_login_enum
2012-12-28 15:42:09 -06:00
Tod Beardsley
3daea913b1
Merge branch 'sap_router_info_request'
2012-12-28 15:22:44 -06:00
Tod Beardsley
35604ac1aa
Normalizing caps and expanding description a bit
...
Be nice to have a couple more lines on the description
2012-12-28 15:12:40 -06:00
Tod Beardsley
5d7197d8ba
Moved shout outs, organized includes
...
include Msf::Exploit::Remote::Tcp must precede the include for the
Scanner mixin -- otherwise you end up with some undesired effects, like
having an RHOST and RHOSTS on the datastore.
Also, took out the block of shout outs and gave references and credits
to the people / url's mentioned.
2012-12-28 14:51:23 -06:00
Tod Beardsley
c2586d0907
Instead of raising, offer advice on BPF filtering
...
Many people don't know how to disable ICMP echo responses off the top of
their head. However, the problem is solvable with a decent BPF filter.
2012-12-27 15:18:18 -06:00
Tod Beardsley
c6533621a0
Oops removing debug prints
2012-12-27 14:58:52 -06:00
Tod Beardsley
c695f429d5
Mirror upstream PacketFu fix on ICMP size
2012-12-27 14:56:49 -06:00
Tod Beardsley
121353b360
Fixing EOLs to unix
...
In vim:
:set fileformat=unix
:wq
ta-da
2012-12-27 13:54:50 -06:00
Tod Beardsley
9fa6c9f4c4
Merge remote branch 'ChrisJohnRiley/icmp_exfil' into icmp_exfil
2012-12-27 13:52:19 -06:00
Zach Grace
d4bdf1b6b4
Added user name enumeration based on author id enumeration
2012-12-24 16:09:03 -06:00
sinn3r
2c4d517e75
Merge branch 'useragent_cleanup' of git://github.com/ChrisJohnRiley/metasploit-framework into ChrisJohnRiley-useragent_cleanup
2012-12-21 11:14:06 -06:00
Chris John Riley
413b75cd8b
Fixed crash issues with unescape
...
Added better formatting to avoid pages of output
2012-12-21 12:07:14 +01:00
Chris John Riley
e237512bd7
Cleaned up the SAP modules as they are all sending double user-agent strings (also added OptEnum where appropriate)
2012-12-21 10:47:45 +01:00
sinn3r
cad8abef48
msftidy cleanup
2012-12-18 11:46:27 -06:00
sinn3r
860ebbcfb1
Merge branch 'master' into averagesecurityguy-master
2012-12-18 11:45:41 -06:00
sinn3r
0344c568fd
Merge branch 'smb_fixes' of git://github.com/alexmaloteaux/metasploit-framework into alexmaloteaux-smb_fixes
2012-12-18 11:38:14 -06:00
sinn3r
9825b07df8
Merge branch 'sap_soap_rfc_dbmcli_sxpg_command_exec' of git://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_dbmcli_sxpg_command_exec
2012-12-18 01:12:50 -06:00
nmonkee
37f7122006
NameError undefined local variable or method output - fixed
2012-12-17 19:34:36 +00:00
Tod Beardsley
10511e8281
Merge remote branch 'origin/bug/fix-double-slashes'
...
Ran the new normalize_uri() specs, all passes, so I'm quite confident in
this change.
2012-12-17 13:29:19 -06:00
T0X1C-1
1714fa21b1
adjusted DOS part to use HttpClient
2012-12-17 15:46:39 +01:00
Royce Davis
2eb01168c8
Cleaned build junk
2012-12-14 10:44:53 -06:00
Royce Davis
82a6519dc4
cleaned up print_status and print_errors
2012-12-14 10:41:40 -06:00
Royce Davis
1b26036028
removed junk
2012-12-14 09:23:26 -06:00
Royce Davis
ae663b2a08
removed | from author section
2012-12-14 09:02:19 -06:00
Royce Davis
27ca43c915
Added to create new pull request
2012-12-14 08:53:22 -06:00
luh2
3da4c4f743
Add author's email
2012-12-14 10:38:22 +01:00
sinn3r
d2885d9045
Correct US Cert references
2012-12-13 14:19:53 -06:00
T0X1C-1
a48c14124b
added CHECK functionality to the existing module
2012-12-13 16:54:50 +01:00
luh2
67b4675d01
comply to code conventions
2012-12-13 14:58:33 +01:00
luh2
94fdd4c6fe
fix typo
2012-12-13 14:42:16 +01:00
luh2
eea4770521
warns about key size and valid time
2012-12-13 14:40:43 +01:00
jvazquez-r7
8f388eb226
fixing if typo
2012-12-11 23:28:21 +01:00
jvazquez-r7
b5b5667539
Merge branch 'symantec_brightmail' of https://github.com/wchen-r7/metasploit-framework into wchen-r7-symantec_brightmail
2012-12-11 23:27:56 +01:00
sinn3r
0ca1dbd14e
Account for the timeout condition
2012-12-11 16:24:42 -06:00
Rob Fuller
20ea56e4b9
fixed type @wchen-r7 found
...
hopefully didn't miss any others
2012-12-11 15:29:53 -05:00
Rob Fuller
717799cffd
fix typos
...
negotiate spelled wrong in a couple spots
and only 3 g's in loggging
2012-12-11 15:00:21 -05:00
jvazquez-r7
461f057c95
Merge branch 'loggedin_users' of https://github.com/R3dy/metasploit-framework into R3dy-loggedin_users
2012-12-11 17:33:31 +01:00
sinn3r
25d888bebb
Add CVE-2012-4347 Symantec Messaging Gateway Log File Download
2012-12-10 18:09:29 -06:00
Tod Beardsley
7ea188e02d
Merge pull request #1147 from wchen-r7/cve_text_consistency
...
Change CVE text format
2012-12-09 14:48:08 -08:00
sinn3r
64a8b59ff9
Change CVE forma
...
Although the original text should work perfectly, for better
consistency, it's best to remove the "CVE" part. This may not
be a big deal in framework, but stands out a lot in Pro.
2012-12-09 01:09:21 -06:00
HD Moore
69177105ab
Handle a null reply properly, small bug fix
2012-12-07 10:54:08 -08:00
Stephen Haywood
f56ef52ffc
Fixed path error when BASE_PATH is nil.
2012-12-06 23:55:34 -05:00
Stephen Haywood
761e735a55
Store wc.db file in loot. Add BASE_PATH option.
2012-12-06 23:38:03 -05:00
Royce Davis
97c9dd0caf
Extra file got added by mistake, removed it
2012-12-06 16:31:28 -06:00
Royce Davis
600121c36a
Fixed issue involing static path to Windows directory
2012-12-06 16:28:59 -06:00
Stephen Haywood
8a149b3ea3
Removed Version.
2012-12-06 17:24:16 -05:00
Stephen Haywood
4ce51fe889
Made changes requested by sinn3r.
2012-12-06 17:18:50 -05:00
Royce Davis
4837ea38f5
Merge https://github.com/rapid7/metasploit-framework
2012-12-06 16:15:55 -06:00
sinn3r
c66777d028
Merge branch 'command' of git://github.com/R3dy/metasploit-framework into R3dy-command
2012-12-06 16:08:04 -06:00
Royce Davis
205276c38f
Update modules/auxiliary/admin/smb/psexec_command.rb
...
Fixed static path to Windows directory. This causes problems with directory is 'WINNT' for example.
2012-12-06 16:03:44 -06:00
Stephen Haywood
d938959e97
Module to find SVN wc.db files.
2012-12-06 16:30:23 -05:00
jvazquez-r7
232eb7bf2d
Final cleanup plus name change
2012-12-05 00:32:42 +01:00
jvazquez-r7
9cff72af72
Merge branch 'loggedin_users' of https://github.com/R3dy/metasploit-framework into R3dy-loggedin_users
2012-12-05 00:31:24 +01:00
jvazquez-r7
3dada00f43
fix typo accor ding to redmine 7550
2012-12-04 22:37:08 +01:00
Royce Davis
a1136be59e
Fixed last ip changed it to peer
2012-12-02 19:17:59 -06:00
Royce Davis
2b171bb003
Added report_note functionality
2012-12-02 18:49:50 -06:00
Royce Davis
e4e3ec8fdd
Fixed module to use clean psexec method
2012-12-02 18:35:23 -06:00
Royce Davis
476a5dc58c
Fixed return without disconnect
2012-12-02 18:27:27 -06:00
Royce Davis
4276279dd8
Fixed print_status to use peer instead of ip
2012-12-02 18:25:09 -06:00
sinn3r
1085357dbb
Talked to Todb, we like "." better
2012-11-30 14:53:57 -06:00
sinn3r
61a74bf257
Minor changes here and there
...
Changes include:
* Some corrections in metadata
* report_note()
* Removes connect(), usually don't need it in modules
2012-11-30 14:24:27 -06:00
Matt Andreko
a73d8792ee
Changed RPORT definition per egypt
2012-11-30 13:57:25 -05:00
Matt Andreko
40b8c93ef8
Added HSTS scanner for HTTPS sites
2012-11-30 09:30:11 -05:00
Royce Davis
7d4982b47b
Fixed description area and authoer section
2012-11-29 14:21:27 -06:00
Royce Davis
d6a3f6666d
Fixed simple return form get_output method
2012-11-29 14:15:57 -06:00
Royce Davis
cf53588ab7
Removed Version
2012-11-29 14:14:41 -06:00
Royce Davis
3ebbee5b1f
Removed generic URLs
2012-11-29 14:13:49 -06:00
sinn3r
bf41d3d0fd
Merge branch 'network_shutdown_creds' of git://github.com/wchen-r7/metasploit-framework into wchen-r7-network_shutdown_creds
2012-11-29 10:43:03 -06:00
sinn3r
b0e4931de8
When 'credentials' is empty, it is empty.......
2012-11-29 10:22:20 -06:00
HD Moore
93a69ea62e
Fix instances of invalid lower-case datastore use
2012-11-29 00:05:36 -06:00
sinn3r
b3a473aec0
Forgot to remove this option
2012-11-28 18:48:33 -06:00
sinn3r
0415d31c61
Update description
2012-11-28 16:07:21 -06:00
sinn3r
52c2437d5a
Add OSVDB-83199 as a cred collecting aux module
...
From #1102
2012-11-28 15:56:13 -06:00
Alexandre Maloteaux
c0c3dff4e6
Several fixes for smb, mainly win 8 compatibility
2012-11-28 22:49:40 +01:00
Royce Davis
82dc8e8814
Added check for LOGONSERVER and HOMEPATH
2012-11-28 09:02:19 -06:00
Tod Beardsley
a24ebde3e3
Fix syntax on @@loaded_msfrpc
2012-11-27 14:10:46 -06:00
HD Moore
84294655aa
Update the require, error handling, casing
2012-11-27 11:44:51 -08:00
sinn3r
b008eb93c9
Fix msgpack issue
2012-11-27 12:45:01 -06:00
sinn3r
0440708453
I missed this sucker: var in a quote
2012-11-27 11:57:51 -06:00
sinn3r
0a0195e6c8
Merge branch 'kost-aux-scan-nexpose'
2012-11-27 11:57:11 -06:00
sinn3r
24f44e7a82
Lots of small changes
...
Basically the same changes I've been correcting like the rest of
other modules.
2012-11-27 11:52:58 -06:00
jvazquez-r7
6ccceedcb7
final cleanup for sip_deregister
2012-11-27 18:34:31 +01:00
jvazquez-r7
496fb63fad
Merge branch 'sip_deregister' of https://github.com/ChrisJohnRiley/metasploit-framework into ChrisJohnRiley-sip_deregister
2012-11-27 18:34:05 +01:00
sinn3r
4dbb82d0bc
Merge branch 'aux-scan-nexpose' of git://github.com/kost/metasploit-framework into kost-aux-scan-nexpose
2012-11-27 11:25:44 -06:00
sinn3r
139c149583
This variable doesn't have to be in a quote
2012-11-27 11:19:04 -06:00
sinn3r
673c519fa3
msg() isn't needed, because it's already implemented in HttpClient
2012-11-27 11:18:27 -06:00
sinn3r
7c3e478070
Final changes
2012-11-27 11:16:12 -06:00
sinn3r
bb34fb8dec
Actually, this is the exact reason why res can be nil
2012-11-27 11:14:52 -06:00
sinn3r
eb30765509
Use vars_post instead of data
2012-11-27 11:13:21 -06:00
sinn3r
4796fb4415
These don't need to be in a quote
2012-11-27 11:12:15 -06:00
sinn3r
5b787406b9
Correct output messages
...
When HttpClient is used, it's actually not necessary to put the
target's IP/port and the module name in the output, because it's
already included in there.
2012-11-27 11:10:31 -06:00
sinn3r
46f86f46fa
Merge branch 'aux-scan-nessus' of git://github.com/kost/metasploit-framework into kost-aux-scan-nessus
2012-11-27 11:01:36 -06:00
sinn3r
319fa04c16
Fix Ruby 1.8 comma of death
2012-11-26 16:45:43 -06:00
sinn3r
9ccc69c4c1
Mostly cosmetic changes. Plus a nil token bug fix.
2012-11-26 16:32:49 -06:00
sinn3r
32ea36916c
Cosmetic changes
2012-11-26 16:28:16 -06:00
sinn3r
65ac56a7a7
Merge branch 'aux-scan-metasploit' of git://github.com/kost/metasploit-framework into kost-aux-scan-metasploit
2012-11-26 16:26:11 -06:00
sinn3r
472ec35adb
Merge branch 'kost-aux-scan-splunk-login'
2012-11-26 16:16:02 -06:00
sinn3r
af451df864
Lots of changes made
...
These changes include:
* More description
* Checks if auth is actually required.
* Collects the default credential on the webpage, and then tries it.
* Fixes possible nil 'Set-Cookie' header.
* Supports more options (USERPASS_FILE, USER_FILE, PASS_FILE)
* Removes the msg() function.
2012-11-26 16:12:11 -06:00
sinn3r
0ea63ca9c2
Merge branch 'web-modules' of git://github.com/tasos-r7/metasploit-framework into tasos-r7-web-modules
2012-11-26 12:59:29 -06:00
Tasos Laskos
7795dc58f4
auxiliary/scanner/http/crawler#form_from_url: rescue => rescue URI::Error
2012-11-26 20:54:20 +02:00
sinn3r
541ecd49d6
Merge branch 'web-modules' of git://github.com/tasos-r7/metasploit-framework into tasos-r7-web-modules
2012-11-26 12:17:24 -06:00
Tasos Laskos
c17cffdece
auxiliary/scanner/http: wrapped an exception-prone URL parse in a begin/rescue block
2012-11-26 18:58:06 +02:00
Vlatko Kosturjak
c22335a2f5
Remove spaces at EOL
2012-11-24 23:32:32 +01:00
Vlatko Kosturjak
7bafc97fec
Remove non needed and redundant checks
2012-11-24 23:01:08 +01:00
Vlatko Kosturjak
bbe3659093
Import of MSF web interface guesser
2012-11-24 22:56:38 +01:00
Vlatko Kosturjak
cdfe663675
initial import of splunk password guesser
2012-11-24 22:05:57 +01:00
Vlatko Kosturjak
860519099f
Removed space at EOL
2012-11-24 19:34:42 +01:00
jvazquez-r7
414fd052c1
final cleanup
2012-11-24 15:03:14 +01:00
jvazquez-r7
fab3427b25
Merge branch 'command' of https://github.com/R3dy/metasploit-framework into R3dy-command
2012-11-24 15:02:39 +01:00
Vlatko Kosturjak
4ad0907c29
Wrap description to 80 cols
2012-11-24 08:13:36 +01:00
Vlatko Kosturjak
14ec0c8a60
Fix http code check + be more verbose
2012-11-24 08:09:26 +01:00
Vlatko Kosturjak
83168e8b56
Correct placement of autofilter ports statement
2012-11-24 07:38:27 +01:00
Vlatko Kosturjak
d008fa0250
Make wrapping works and look better
2012-11-24 07:33:25 +01:00
Vlatko Kosturjak
f88c4491b5
Added autofilter_port to 3790(metasploit web intf)
2012-11-24 07:28:39 +01:00
Vlatko Kosturjak
8608bebbe7
Wrapped module info to col80
2012-11-24 07:27:10 +01:00
sinn3r
965efc9c8d
Last touch up
2012-11-23 18:51:51 -06:00
sinn3r
ddee88bb03
Merge branch 'aux-scan-openvas' of git://github.com/kost/metasploit-framework into kost-aux-scan-openvas
2012-11-23 18:47:33 -06:00
Vlatko Kosturjak
ec3ce499f1
Simplify variable assigment
2012-11-24 00:33:49 +01:00
Vlatko Kosturjak
17de7be1bf
Fix exception handling block
2012-11-24 00:31:32 +01:00
Vlatko Kosturjak
505de0bfc6
Use vars_post instead of direct body construction
2012-11-24 00:21:35 +01:00
Vlatko Kosturjak
a5db9331bc
Simplify rescue handler
2012-11-24 00:15:39 +01:00
Vlatko Kosturjak
d968a33e14
Simplify variable assigment
2012-11-24 00:13:28 +01:00
jvazquez-r7
2978775335
change default RPORT
2012-11-23 12:14:08 +01:00
jvazquez-r7
ca3240a83e
Merge branch 'SXPG_COMMAND_EXEC_DBMCLI' of https://github.com/nmonkee/metasploit-framework into nmonkee-SXPG_COMMAND_EXEC_DBMCLI
2012-11-23 12:13:22 +01:00
jvazquez-r7
f7fb8bb862
change module filename
2012-11-23 11:43:34 +01:00
jvazquez-r7
cb7e98ea29
Cleanup for command module
2012-11-23 11:42:59 +01:00
HD Moore
b04b3963d8
Fix missing parenthesis
2012-11-22 23:50:47 -06:00
HD Moore
d2cde0b294
Make error handling consistent in SNMP modules
2012-11-22 21:36:33 -06:00
HD Moore
b357d221fb
Fix stack trace/error handling in AIX snmp version
2012-11-22 21:28:49 -06:00
Chris John Riley
46f3b8f47d
Minor changes to get Travis to rerun (The Travis build failed)
2012-11-22 16:00:38 +01:00
nmonkee
564a32ce7c
Made requested changes
2012-11-21 17:33:15 +00:00
Royce Davis
e16cea6db8
Fixed execerror, redundant if statement, and poor exception handling
2012-11-20 18:46:07 -06:00
Tod Beardsley
064df7c537
Minor grammar touch on modbus_findunitid
2012-11-20 14:08:07 -06:00
Tod Beardsley
6b4c131cf5
Avoiding a future conflict with release
2012-11-20 13:24:19 -06:00
Chris John Riley
8c60035a2d
Renamed functions to meet coding standards
...
Added client-side tool suggestion in description and references
(newlines in the description might help readability, if this is possible?)
Added some minor logic change to stop empty filenames
2012-11-20 18:48:18 +01:00
nmonkee
ff07e5d021
sap_soap_rfc_dbmcli_sxpg_command_exec
2012-11-20 15:34:53 +00:00
jvazquez-r7
32373c1a6a
new filename
2012-11-20 16:01:58 +01:00
jvazquez-r7
bb13c87aab
module filename changed
2012-11-20 16:01:26 +01:00
jvazquez-r7
96024dc639
title updated
2012-11-20 16:00:50 +01:00
jvazquez-r7
bfbab4526a
Merge branch 'sap_soap_rfc_sxpg_call_system' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_sxpg_call_system
2012-11-20 16:00:14 +01:00
jvazquez-r7
217fa27abb
pcap to verify deleted
2012-11-20 15:55:56 +01:00
jvazquez-r7
101238db35
Merge branch 'sap_soap_rfc_dbmcli_sxpg_call_system_command_exec' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_dbmcli_sxpg_call_system_command_exec
2012-11-20 15:55:32 +01:00
nmonkee
e16a51fcf9
author change
2012-11-20 14:23:29 +00:00
nmonkee
1bc62b8686
pcap for lin
2012-11-20 14:15:49 +00:00
nmonkee
838eb5154a
Merge branch 'sap_soap_rfc_dbmcli_sxpg_call_system_command_exec' of https://github.com/jvazquez-r7/metasploit-framework into sap_soap_rfc_dbmcli_sxpg_call_system_command_exec
2012-11-20 14:13:51 +00:00
nmonkee
be66ccdf00
pcap for lin
2012-11-20 13:59:49 +00:00
jvazquez-r7
5f99b56688
up to date to test rapid7#1030
2012-11-20 12:13:14 +01:00
jvazquez-r7
31ca077dd6
cleanup for sap_soap_rfc_sxpg_call_system.rb
2012-11-20 11:54:21 +01:00
Chris John Riley
5667cffb77
Fixed typos
2012-11-20 09:06:15 +01:00
jvazquez-r7
8385b8314c
fix 1.8 warning about space before argument parenthesis
2012-11-19 22:55:44 +01:00
jvazquez-r7
3d753e9690
Delete pcap used to verify
2012-11-19 22:47:07 +01:00
jvazquez-r7
2f44bbaf21
Merge branch 'sap_soap_rfc_sxpg_command_exec' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_sxpg_command_exec
2012-11-19 22:46:38 +01:00
nmonkee
dcb5cfdbbd
pcap for lin
2012-11-19 21:06:05 +00:00
nmonkee
a3550fb91b
Merge branch 'sap_soap_rfc_sxpg_command_exec' of https://github.com/nmonkee/metasploit-framework into sap_soap_rfc_sxpg_command_exec
2012-11-19 21:01:00 +00:00
nmonkee
aaeb05725a
pcaps for lin and win
2012-11-19 21:00:11 +00:00
Royce Davis
795ea5bec2
Fix randomize of dislayname and removed filename from command.rb
2012-11-19 14:34:06 -06:00
Royce Davis
7fa8717860
Fixed cleanup method to report an Error on command.rb
2012-11-19 13:59:58 -06:00
nmonkee
6adbee13b3
Merge branch 'sap_soap_rfc_sxpg_command_exec' of https://github.com/jvazquez-r7/metasploit-framework into sap_soap_rfc_dbmcli_sxpg_call_system_command_exec
2012-11-19 17:18:21 +00:00
jvazquez-r7
ee7bf42903
cleanup for last testing
2012-11-19 17:59:27 +01:00
Chris John Riley
430227a460
msftidy cleanup
2012-11-19 16:04:35 +01:00
Chris John Riley
082bba3342
Rewrite
...
Removed unrequired global vars
Added flexibility in start, continue, end responses
Added ability to set filename in BOF packet or not
Fixed BEGIN RESCUE blocks to not catch errors themselves
BEGIN ENSURE block still needed to trigger save to loot on CTRL+C
2012-11-19 16:02:53 +01:00
nmonkee
149704d918
deleting file sap_soap_rfc_sxpg_call_system_command_exec
2012-11-18 23:56:33 +00:00
jvazquez-r7
3bf88e5884
final cleanup for sap_web_gui_brute_login
2012-11-18 22:39:05 +01:00
jvazquez-r7
165e9c26da
Merge branch 'sap_web_gui_brute_login' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_web_gui_brute_login
2012-11-18 22:38:30 +01:00
jvazquez-r7
3573d31d08
final cleanup
2012-11-18 21:37:24 +01:00
jvazquez-r7
eddea29568
Merge branch 'sap_soap_rfc_brute_login' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_brute_login
2012-11-18 21:36:54 +01:00
jvazquez-r7
9fa8204152
datastore parameters cleanup
2012-11-18 11:53:17 +01:00
jvazquez-r7
5b55049610
module cleanup
2012-11-18 11:45:12 +01:00
jvazquez-r7
ea6c3e9b69
Merge branch 'sap_soap_rfc_susr_user_interface' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_susr_user_interface
2012-11-18 11:44:26 +01:00
jvazquez-r7
8a1a811844
Final cleanup
2012-11-18 01:41:10 +01:00
jvazquez-r7
482526e978
Merge branch 'sap_soap_bapi_user_create1' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_bapi_user_create1
2012-11-18 01:40:11 +01:00
jvazquez-r7
889124a439
final cleanup
2012-11-18 00:59:49 +01:00
jvazquez-r7
eed0f92829
Merge branch 'sap_soap_rfc_ping' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_ping
2012-11-18 00:59:35 +01:00
jvazquez-r7
22d4ccadea
description updated
2012-11-18 00:35:25 +01:00
jvazquez-r7
a35c640acf
final cleanup
2012-11-18 00:32:20 +01:00
jvazquez-r7
e72946303e
Merge branch 'sap_soap_rfc_system_info' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_system_info
2012-11-18 00:31:53 +01:00
jvazquez-r7
59e96e5850
fix typo
2012-11-17 00:35:53 +01:00
jvazquez-r7
8c0e4705f1
final cleanup
2012-11-17 00:18:35 +01:00
jvazquez-r7
c511e58971
Merge branch 'sap_soap_rfc_read_table' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_rfc_read_table
2012-11-17 00:18:04 +01:00
James Lee
c65f37782d
Merge branch 'rapid7' into tasos-r7-web-modules
2012-11-16 13:52:18 -06:00
jvazquez-r7
0ef41ffcd4
added reporting to the module
2012-11-16 20:05:26 +01:00
jvazquez-r7
d8d2bee6fb
Final cleanup
2012-11-16 19:20:58 +01:00
jvazquez-r7
65c741b539
Merge branch 'sap_soap_th_saprel' of https://github.com/nmonkee/metasploit-framework into nmonkee-sap_soap_th_saprel
2012-11-16 19:19:21 +01:00
jvazquez-r7
e8fe6031e9
Let default timeout for send_request_cgi
2012-11-16 18:09:47 +01:00
jvazquez-r7
51f238ec38
up to date
2012-11-16 16:03:09 +01:00
Vlatko Kosturjak
c0df3a0407
Remove curly braces
2012-11-15 23:27:25 +01:00
Vlatko Kosturjak
eea85cf2ca
Remove curly braces
2012-11-15 23:26:28 +01:00
Vlatko Kosturjak
836d83a253
Remove curly braces
2012-11-15 23:25:10 +01:00
Vlatko Kosturjak
854bfe09e2
remove curly braces
2012-11-15 23:23:46 +01:00
Vlatko Kosturjak
73d43beff3
Remove EOL spaces
2012-11-15 22:46:22 +01:00
Vlatko Kosturjak
afced2278d
Remove EOL spaces
2012-11-15 22:43:47 +01:00
Vlatko Kosturjak
e479399b5d
Initial import of OpenVAS aux scripts
2012-11-15 22:39:56 +01:00
Vlatko Kosturjak
f7f7c451d3
Initial import of Nexpose aux scripts
2012-11-15 22:35:35 +01:00
Vlatko Kosturjak
1956af7dc1
Initial import of Metasploit RPC aux scripts
2012-11-15 22:32:22 +01:00
Vlatko Kosturjak
bd03a2dcfd
Initial import of Nessus basic aux scripts
2012-11-15 22:28:56 +01:00
nmonkee
62f9766e63
made requested changes
2012-11-15 00:00:31 +00:00
nmonkee
99d145eb23
made requested changes
2012-11-14 23:50:47 +00:00
James Lee
35a7999b4e
Merge branch 'rapid7' into tasos-r7-web-modules
2012-11-14 17:41:27 -06:00
nmonkee
b9a8791b87
made requested changes
2012-11-14 23:40:20 +00:00
nmonkee
047d6d350a
looks like I committed the wrong file first time round :(
2012-11-14 23:34:21 +00:00
nmonkee
a252dbc5d7
made requested changes
2012-11-14 23:25:25 +00:00
nmonkee
91b81bee4a
made requested changes
2012-11-14 23:19:09 +00:00
nmonkee
308eee7c4f
made requested changes
2012-11-14 23:00:45 +00:00
nmonkee
aa3cd500bb
made requested changes
2012-11-14 22:49:34 +00:00
nmonkee
83215edd8c
made requested changes
2012-11-14 22:38:32 +00:00
nmonkee
c5a017d054
made requested changes
2012-11-14 22:25:10 +00:00
nmonkee
833af3a347
made requested changes
2012-11-14 22:13:06 +00:00
nmonkee
e55e5d2796
made requested changes
2012-11-14 20:12:37 +00:00
Tod Beardsley
4d633016aa
Merge remote branch 'Meatballs1/smb_login_update'
...
Thus ends our long national nightmare.
2012-11-14 10:13:34 -06:00
Tasos Laskos
8a9f0a0890
Merge remote-tracking branch 'upstream/master' into web-modules
2012-11-14 18:10:41 +02:00
sinn3r
6b033fb1a8
Only store the password when there's one
2012-11-14 01:25:32 -06:00
jgor
212179b95e
change behavior to explicitly note when password is not set (or enhanced password supercedes it) as opposed to an empty string password
2012-11-13 23:49:45 -06:00
jgor
721cf41f47
fix nil class error on non-lantronix hosts
2012-11-13 23:46:59 -06:00
Royce Davis
f9b4971fc3
Fixed hard coded paths in psexec on command.rb
2012-11-13 10:28:16 -06:00
sinn3r
ee7e502e89
Merge branch 'impersonate_ssl_tweak' of git://github.com/ChrisJohnRiley/metasploit-framework into ChrisJohnRiley-impersonate_ssl_tweak
2012-11-13 09:36:28 -06:00
sinn3r
f707a4774d
Merge branch 'esmnemon-modbus-aux'
2012-11-12 23:42:00 -06:00
sinn3r
aa6ac36abd
Cosmetic changes, mostly
2012-11-12 23:41:31 -06:00
sinn3r
66fe8ade52
Merge branch 'modbus-aux' of git://github.com/esmnemon/metasploit-framework into esmnemon-modbus-aux
2012-11-12 22:40:34 -06:00
Meatballs1
5c10bc11a8
Fix spacing before -
2012-11-12 23:20:40 +00:00
Tod Beardsley
dd1da88ff7
Make domain part less stupid looking
2012-11-12 16:54:52 -06:00
Meatballs1
970869b3e4
Retry push
2012-11-12 22:28:44 +00:00
Meatballs1
e30ab85549
Fix some outputting issues
2012-11-12 22:25:08 +00:00
sinn3r
72f0a5613f
Add more improvements
2012-11-12 15:40:12 -06:00
sinn3r
8fe3f289bf
Merge branch 'drupal_views_user_enum.rb' of git://github.com/zeknox/metasploit-framework into zeknox-drupal_views_user_enum.rb
2012-11-12 14:48:13 -06:00
Royce Davis
683bcd4b82
Added disconnect method to command.rb
2012-11-12 11:25:12 -06:00
Royce Davis
e57275d3f6
added check cleanup method to command.rb
2012-11-12 09:46:02 -06:00
Chris John Riley
94120604f2
Set back to target_uri.to_s per original module
2012-11-11 12:07:27 +01:00
Chris John Riley
cffedd0c97
Set back to target_uri.path
2012-11-11 12:04:31 +01:00
Chris John Riley
76ba770872
fixed target_uri.path vs target_uri.to_s issue
2012-11-11 11:59:10 +01:00
Chris John Riley
38b25f01f7
Corrected bad coding (sorry)
...
Added OptEnum and OptPath
Checks for nil and empty
Added reference
Made AlterSerial an advanced option instead of always on
2012-11-10 20:24:50 +01:00
Chris John Riley
6482de44e4
Added checks for Extension and Domain
...
Altered error handling on no response
2012-11-10 13:21:41 +01:00
Tod Beardsley
1b9d45e106
Test for subdom_list existence first
...
Otherwise, you get
````
[11/09/2012 14:50:38] [e(0)] core: Error running against host
173.236.237.136: can't convert nil into String
````
Other than that, looks good.
[Fixes #851 ]
2012-11-09 15:01:36 -06:00
Tod Beardsley
171ebe13cd
Whitespace fix for vhost_scanner
2012-11-09 14:48:46 -06:00
Tod Beardsley
b1c35fdb24
Merge remote branch 'sempervictus/http_vhost_scanner_from_file'
2012-11-09 14:46:54 -06:00
Tod Beardsley
9a94fef8d0
Merge branch 'llmnr-spoof'
2012-11-09 14:36:04 -06:00
Tod Beardsley
a6fd0fee1c
Fix up notification to not spam or hide
...
Instead of hiding the success notification in vprint, it should print,
but not every time. This fix thottles the notification to ten seconds
per host.
[Fixes #731 ]
2012-11-09 14:31:28 -06:00
Tod Beardsley
6cd5b79b60
Getting rid of Id and Revision
2012-11-09 13:30:14 -06:00
Tod Beardsley
f6c565848e
Resolving conflicted smb_login
2012-11-09 12:55:18 -06:00
Royce Davis
6e257d5f57
Simplify main method
2012-11-09 08:50:09 -06:00
Royce Davis
a889c8ae99
error handling adjustments on loggedin_users.rb
2012-11-09 08:33:05 -06:00
Tasos Laskos
7032ef0f6f
Merge remote-tracking branch 'upstream/master' into web-modules
2012-11-09 00:21:38 +02:00
Chris John Riley
08d56e31e1
recreated in new branch
...
removed space at EOL
2012-11-08 22:38:21 +01:00
Chris John Riley
b75ade746c
Removed EOL spaces
...
Removed unrequired udp_sock.close
2012-11-08 22:26:37 +01:00
Chris John Riley
0dd4f4d03d
Formatting
2012-11-08 17:51:06 +01:00
Chris John Riley
f88ec5cbc8
Add normalize_uri to modules that may have
...
been missed by PULL 1045.
Please ensure PULL 1045 is in place prior to
looking at this (as it implements normalize_uri)
ref --> https://github.com/rapid7/metasploit-framework/pull/1045
2012-11-08 17:42:48 +01:00
Royce Davis
7ce3859e8c
Fixed a bunch of bull crap in loggedin_users.rb
2012-11-08 09:49:53 -06:00
Royce Davis
0c0d5b10ec
changes loggedin_users.rb
2012-11-08 09:26:17 -06:00
Royce Davis
3bf865456c
Better error handling in loggedin_users
2012-11-08 09:13:33 -06:00
Matt Andreko
6843aa3a6c
Added fix URL and a few more comments. Corrected date.
2012-11-08 10:09:28 -05:00
HD Moore
4d2147f392
Adds normalize_uri() and fixes double-slash typos
2012-11-08 07:16:51 -06:00
HD Moore
5ad2749cee
Rework ADDP modules to use the new mixin
2012-11-08 06:40:32 -06:00
HD Moore
0e8a3f0ea6
Merge branch 'master' into feature/udp-scanner-mixin
2012-11-08 06:09:22 -06:00
HD Moore
e008120c11
Bug fixes to the SSDP discovery module
2012-11-08 06:08:49 -06:00
Chris John Riley
da6bf29699
Display message when no response received
2012-11-08 11:59:13 +01:00
Royce Davis
22ecd6afa9
Edit command.rb
2012-11-07 15:17:13 -06:00
Royce Davis
18aab8bcc7
Remove extrat comment lines from command.rb
2012-11-07 15:09:57 -06:00
Royce Davis
d159aa6f9f
Changed error handeling of command.rb module
2012-11-07 15:03:31 -06:00
David Maloney
04a80e0648
Fixes to the WMI setup
2012-11-07 11:26:48 -06:00
nmonkee
92679cd1c8
SAP Web GUI Brute Force
2012-11-07 16:18:00 +00:00
nmonkee
c13f8d8eba
SAP RFC TH_SAPREL
2012-11-07 16:10:09 +00:00
nmonkee
f618000d0d
SAP SOAP RFC SUSR_RFC_USER_INTERFACE (user creation)
2012-11-07 16:04:07 +00:00
nmonkee
2b973263b7
SAP SOAP RFC_Info
2012-11-07 15:17:56 +00:00
nmonkee
509e63268b
SAP SOAP RFC SXPG_CALL_SYSTEM
2012-11-07 15:06:28 +00:00
Royce Davis
ac518f7091
Removed double lines in Author field and general URLs
2012-11-07 08:22:09 -06:00
nmonkee
ddcc0a9592
This module makes use of the SXPG_CALL_SYSTEM Remote Function Call (via SOAP) to execute OS commands as configured in SM69.
2012-11-07 12:48:08 +00:00
nmonkee
e053c4a0ad
This module makes use of the RFC_READ_TABLE Remote Function Call (via SOAP) to read data from tables.
2012-11-07 12:37:01 +00:00
Chris John Riley
fc03fbe881
Initial sip_deregister.rb
2012-11-07 13:35:33 +01:00
nmonkee
3be7ad06c4
Calls the RFC_PING RFC module via SOAP to test the availability of the function. The function simply tests connectivity to remote RFC destinations.
2012-11-07 11:35:53 +00:00
nmonkee
b86bc9f365
SAP SOAP RFC DBMCLI Command Injection (via SXPG_CALL_SYSTEM)
2012-11-07 11:29:16 +00:00
nmonkee
f82b51b2c4
This module calls the RFC BAPI_USER_CREATE1 module (via SOAP). The module can be used for creating/modifying users.
2012-11-07 11:16:31 +00:00
nmonkee
5d7414511a
SAPRouter Admin Request (display remote route information)
2012-11-07 11:06:03 +00:00
nmonkee
6b7b8f7265
Flipping OptString for OptEnum
2012-11-07 11:00:43 +00:00
nmonkee
d19be3024f
Flipping OptEnum for OptString
2012-11-07 10:58:07 +00:00
nmonkee
51a3aa514d
This module attempts to brute force the username | password via an RFC interface (over SOAP)
2012-11-07 10:45:25 +00:00
Royce Davis
aec4d99549
ran msftidy on command.rb
2012-11-06 16:33:47 -06:00
Royce Davis
9f87b7b674
Removed smb_exec from this branch
2012-11-06 16:18:38 -06:00
Brandon McCann
c4f35def81
fixed vprint_line
2012-11-06 14:58:14 -06:00
Brandon McCann
d835a046ed
fixed drupal_views_user_enum.rb so it displays to stdout and stores to loot
2012-11-06 14:53:11 -06:00
Royce Davis
43ebec22b4
Silly typos
2012-11-06 13:14:07 -06:00
Royce Davis
8c41aca091
Removed some non essential requires from loggedin_users.rb
2012-11-06 09:17:09 -06:00
Royce Davis
e40ab4367a
removed other modules
2012-11-05 21:07:09 -06:00
Royce Davis
74745bdad6
New Module loggedin-users
2012-11-05 21:04:27 -06:00
Royce Davis
30088a410c
fixed junky spacings
2012-11-05 16:59:56 -06:00
Royce Davis
1a4968e6a8
removed hashgrab.rb from this branch
2012-11-05 16:38:58 -06:00
Royce Davis
d5b18114ac
New module loggedin_users.rb
2012-11-05 16:37:13 -06:00
Tod Beardsley
b973927ab2
Msftidy on digi_addp_reboot and pgpass_creds
2012-11-05 16:19:38 -06:00
jvazquez-r7
9166d12179
Merge branch 'WinRM_piecemeal' of https://github.com/dmaloney-r7/metasploit-framework into dmaloney-r7-WinRM_piecemeal
2012-11-05 23:08:59 +01:00
HD Moore
aa8549fb6b
Correct use of rport.
2012-11-05 15:57:59 -06:00
Tod Beardsley
23cc2bd1a1
Merge remote branch 'origin/master'
2012-11-05 15:56:21 -06:00
Tod Beardsley
6a4d398b5d
Merge remote branch 'origin/feature/addp-modules'
2012-11-05 15:55:30 -06:00
jvazquez-r7
0f5f5f966b
Merge branch 'master' into feature/realport-modules
2012-11-05 22:52:38 +01:00
David Maloney
314026ed0e
Some error checking and fixups
2012-11-05 13:29:57 -06:00
Royce Davis
3236b4c425
New module hashgrab.rb
2012-11-05 12:06:51 -06:00
Royce Davis
a31606e196
New module ntdsgrab.rb
2012-11-05 12:05:16 -06:00
Royce Davis
0b940d8087
New module command.rb
2012-11-05 12:03:51 -06:00
Royce Davis
aa6e8c7437
smb_exec
2012-11-05 11:46:39 -06:00
Royce Davis
a9db705b60
New module for submission smb_exec
2012-11-05 11:45:03 -06:00
Royce Davis
b4872c1c48
Submiting module smb_exec to MSF
2012-11-05 11:37:10 -06:00
HD Moore
dccfb63bd6
Cleanup based on PR #1008 feedback
2012-11-04 22:47:56 -06:00
HD Moore
36f82fba09
Remove unused version fields from template
2012-11-04 22:38:31 -06:00
HD Moore
910a91a0f6
First commit of a udp_mixin and modified scanners
2012-11-04 01:13:38 -05:00
Matt Andreko
dac331fa10
Added XBMC Traversal exploit
2012-11-03 22:19:48 -04:00
HD Moore
963fdd6430
Initial commit for Digi RealPort modules
2012-11-03 17:44:53 -05:00
jvazquez-r7
9576d26299
Merge branch 'bitweaver_traversal' of https://github.com/wchen-r7/metasploit-framework into wchen-r7-bitweaver_traversal
2012-11-03 18:25:46 +01:00
sinn3r
10cccb34d8
Uh... I don't want that print_line(). Forgot to remove it.
2012-11-03 05:18:17 -05:00
sinn3r
4415849009
Another attempt to fix the regex
2012-11-03 05:17:32 -05:00
HD Moore
80ebcf212a
See PR #981.Only real change is to retry on ENOBUF
2012-11-02 23:05:16 -05:00
sinn3r
d449052472
Make <br /> tag optional
2012-11-02 18:25:48 -05:00
sinn3r
45dce9ff76
Modify regex
2012-11-02 16:44:27 -05:00
HD Moore
0d6acad1a0
Updates for PR #981 (cleanup)
2012-11-02 15:47:52 -05:00
HD Moore
0bf5f63d67
Merge branch 'master' into feature/addp-modules
2012-11-02 15:41:03 -05:00
sinn3r
1d26491b77
Ok... last fix, really
2012-11-02 15:09:30 -05:00
sinn3r
a161c1faa0
Final changes
2012-11-02 15:06:51 -05:00
sinn3r
ea5dc940d2
Move module to the correct directory
2012-11-02 14:52:28 -05:00
sinn3r
a9db59feb7
Cosmetic changes, mostly
2012-11-02 14:52:02 -05:00
sinn3r
51b15d8c09
Merge branch 'concrete5_member_list' of git://github.com/ChrisJohnRiley/metasploit-framework into ChrisJohnRiley-concrete5_member_list
2012-11-02 14:43:49 -05:00
sinn3r
00d0dc3e4d
Add CVE-2012-5192 - Bitweaver overlay_type module
2012-11-02 14:20:20 -05:00
sinn3r
38518478bd
Format/msftidy fixes
2012-11-02 11:24:34 -05:00
Chris John Riley
891ad4685c
$Id and $Revision
2012-11-02 11:24:34 -05:00
Chris John Riley
954ccf1ca1
Added ability to set extension on target
2012-11-02 11:24:33 -05:00
Chris John Riley
01b13480cb
Added concrete5.org references
2012-11-02 16:45:41 +01:00
Chris John Riley
f3e03ddb42
Concrete5 CMS member list scanner
2012-11-02 16:32:34 +01:00
Tasos Laskos
37a9c13c34
updated auxiliary/scanner/http/crawler to accept a callback for each page
2012-11-01 21:20:56 +02:00
David Maloney
59f5d9bc5d
Man i'm rusty at writing for framework
...
Fixes up all sinn3r's findings so far
2012-11-01 08:37:21 -05:00
David Maloney
dd7ab11e38
Minor cleanup
2012-10-31 16:14:34 -05:00
David Maloney
86bf3d63b7
Updated Encryption comments
2012-10-31 15:25:33 -05:00
David Maloney
7cf7563a87
Merge branch 'upstream-master' into WinRM_piecemeal
2012-10-31 15:23:32 -05:00
sinn3r
9736d35230
Fix syntax error
2012-10-31 15:14:46 -05:00
sinn3r
98c1272b92
Update the description about AllowUnencrypted
2012-10-31 15:14:46 -05:00
David Maloney
8711484438
minor fixups
2012-10-31 15:14:46 -05:00
David Maloney
09195ad9a7
Adds the WQL execution module
2012-10-31 15:14:46 -05:00
David Maloney
d2d137ce68
adds the WinRM CMD execution module
2012-10-31 15:10:45 -05:00
esmnemon
81e56663fd
a few ruby cleanups
2012-10-31 09:59:47 +01:00
jvazquez-r7
a2fd377326
module cleanup
2012-10-31 09:20:00 +01:00
jvazquez-r7
38a9761d6e
Merge branch 'ntp_readvars' of https://github.com/crashbrz/metasploit-framework into crashbrz-ntp_readvars
2012-10-31 09:06:31 +01:00
Ewerson Guimaraes (Crash)
ffe8a980f4
NTP Module - Remove [WARNING] Carriage return EOL
2012-10-30 22:25:23 -02:00
Ewerson Guimaraes (Crash)
b085e8ed73
Revert "Update NTP Module"
...
This reverts commit 8fd34a4475
.
2012-10-30 21:43:21 -02:00
Ewerson Guimaraes (Crash)
8fd34a4475
Update NTP Module
...
Changed the branche and remove CR
2012-10-30 21:08:01 -02:00
jvazquez-r7
357fd1b955
add peer info to print_error message
2012-10-30 17:47:17 +01:00
jvazquez-r7
201f7766d8
Merge branch 'clansphere_lfi_read' of https://github.com/wchen-r7/metasploit-framework into wchen-r7-clansphere_lfi_read
2012-10-30 17:45:45 +01:00
sinn3r
a636971b71
Change error message
2012-10-30 11:39:25 -05:00
David Maloney
d3bb2b4891
minor fixups
2012-10-30 11:08:57 -05:00
sinn3r
3f3e6814a3
Make sure no extra '/' in there
2012-10-30 10:40:56 -05:00
jvazquez-r7
26808093d8
Merge branch 'nil_res_bug_fixes' of https://github.com/wchen-r7/metasploit-framework into wchen-r7-nil_res_bug_fixes
2012-10-30 16:18:05 +01:00
David Maloney
736b8354d8
Merge branch 'upstream-master' into WinRM_piecemeal
2012-10-30 09:15:36 -05:00
David Maloney
c91f0ca535
Adds the WQL execution module
2012-10-30 09:13:55 -05:00
jvazquez-r7
5e873d0697
adding peer information to error message
2012-10-30 12:15:01 +01:00
sinn3r
c878b9077b
Rename the DeviceExpert module to avoid confusion
2012-10-29 12:25:07 -05:00
sinn3r
2a202e9035
Add OSVDB-86563 ManageEngine SecurityManager dir traversal
2012-10-29 12:23:48 -05:00
sinn3r
2c4273e478
Correct some modules with res nil
2012-10-29 04:41:30 -05:00
sinn3r
34731c3e0a
Add OSVDB-86720 - Clansphere dir traversarl
2012-10-29 03:44:22 -05:00
HD Moore
3a42eb3f73
New modules and library for the ADDP protocol
2012-10-28 23:04:18 -05:00
esmnemon
b44ec34bfd
renamed modbusFindunitID.rb to modbus_findunitid.rb
2012-10-28 15:11:10 +01:00
sinn3r
675e5c0bb5
Merge branch 'modbus-aux' of git://github.com/esmnemon/metasploit-framework into esmnemon-modbus-aux
2012-10-27 18:55:55 -05:00
sinn3r
7a1c3e7cf6
Merge branch 'dmaloney-r7-WinRM_piecemeal'
2012-10-27 18:55:24 -05:00
sinn3r
320a23286a
Merge branch 'warnings' of git://github.com/wchen-r7/metasploit-framework into wchen-r7-warnings
2012-10-27 18:52:34 -05:00
zombieCraig
164321a5ed
Add Domain notes to smb_version
2012-10-26 11:56:14 -04:00
David Maloney
b15c38f819
Fix output to display ip:port
2012-10-25 19:57:29 -05:00
David Maloney
fb7af536d5
wtf, bad metadata
...
Removed extraneous references section
2012-10-25 10:16:12 -05:00
esmnemon
4ae482b71c
added a fix for modbusdetect.rb and a new utility modbusFindunitID.rb
2012-10-25 13:17:17 +02:00
David Maloney
bfbae5fbb7
Merge branch 'upstream-master' into WinRM_piecemeal
...
Conflicts:
lib/msf/core/exploit/winrm.rb
2012-10-24 14:12:28 -05:00
David Maloney
a15c35091d
Add the WinRM login module
2012-10-24 11:25:39 -05:00
sinn3r
f1423bf0b4
If a message is clearly a warning, then use print_warning
2012-10-24 00:44:53 -05:00
sinn3r
77c8548855
Merge branch 'dmaloney-r7-WinRM_piecemeal'
2012-10-23 16:33:16 -05:00
Michael Schierl
910644400d
References EDB cleanup
...
All other types of references use String arguments, but approximately half
of the EDB references use Fixnums. Fix this by using Strings here too.
2012-10-23 21:02:09 +02:00
sinn3r
33ce74fe8c
Merge branch 'msftidy-1' of git://github.com/schierlm/metasploit-framework into schierlm-msftidy-1
2012-10-23 02:10:56 -05:00
David Maloney
2335c582c3
Null response handling
2012-10-23 00:25:31 -05:00
David Maloney
e08cedec2e
Requested revisions/cleanup
...
minor fixes to spacing, some typos, and abse64 switched to Rex
2012-10-22 17:01:00 -05:00
Rob Fuller
7437d9844b
standardizing author info
2012-10-22 17:01:58 -04:00
Michael Schierl
e9f7873afc
Version cleanup
...
Remove all values that are neither 0 nor $Revision$.
2012-10-22 20:57:02 +02:00
Rob Fuller
49948faa9b
remove non-functional enum_delicious module
2012-10-22 14:46:52 -04:00
Michael Schierl
04a6021631
Privileged cleanup: auxiliary modules can't
2012-10-22 20:36:49 +02:00
Michael Schierl
39e81d3e53
Arch/Platform cleanup: aux modules need neither
2012-10-22 20:28:02 +02:00
sinn3r
ae690f5fd3
Remove that extra "," that breaks Ruby 1.8
2012-10-20 02:11:49 -05:00
David Maloney
7866b61a7e
Typo fix
2012-10-20 00:31:35 -05:00
David Maloney
56cbe6a67e
Some minor fixups
2012-10-19 15:25:03 -05:00
David Maloney
3a8dd261ae
WinRM mixin and basic discovery module
2012-10-19 15:08:58 -05:00
jvazquez-r7
4ad6fcc30e
osvdb added
2012-10-19 17:04:47 +02:00
Ewerson Guimaraes (Crash)
4d80e37741
NTP Clock Variables Disclosure
2012-10-18 20:03:28 -03:00
jvazquez-r7
291ad27a69
Merge branch 'msftidy_police' of https://github.com/wchen-r7/metasploit-framework into wchen-r7-msftidy_police
2012-10-18 11:32:55 +02:00
sinn3r
0675a6171b
Cosmetic changes
2012-10-17 17:30:16 -05:00
sinn3r
201518b66f
msftidy corrections
2012-10-17 17:22:26 -05:00
jvazquez-r7
7b1c35624e
Merge branch 'mssql_ntlm_stealer' of https://github.com/nullbind/metasploit-framework into nullbind-mssql_ntlm_stealer
2012-10-17 22:50:54 +02:00
jvazquez-r7
1f55e02535
minor cleanup
2012-10-17 22:21:28 +02:00
jvazquez-r7
4c6b331bdc
Merge branch 'mssql_ntlm_stealer_sqli' of https://github.com/nullbind/metasploit-framework into nullbind-mssql_ntlm_stealer_sqli
2012-10-17 22:21:00 +02:00
jvazquez-r7
3bd84e255f
minor cleanup
2012-10-17 22:06:47 +02:00
jvazquez-r7
848f0cd899
Merge branch 'module-lantronix_telnet_password' of https://github.com/jgor/metasploit-framework into jgor-module-lantronix_telnet_password
2012-10-17 22:06:25 +02:00
jgor
9af727388f
deleted superfluous code and comments
2012-10-17 14:27:00 -05:00
jvazquez-r7
12e2ff9bb5
proposed cleanup
2012-10-17 19:03:28 +02:00
jvazquez-r7
16e2a2e050
fix title for the apache activemq source disclosure mod
2012-10-17 17:23:56 +02:00
nullbind
c52b834f50
updated name and description
2012-10-16 14:37:02 -05:00
nullbind
d8c2aa9796
added mssql ntlm stealer for sqli
2012-10-16 14:26:10 -05:00
nullbind
fafa6e49ce
address comments from jvazquez
2012-10-16 12:10:37 -05:00
Meatballs1
f07cd5235d
Msftidy!
2012-10-16 13:59:49 +01:00
Meatballs1
c2200534c4
Tidy up of output
2012-10-16 13:53:47 +01:00
Meatballs1
fa2aa47342
Further fixes to guest and bogus checks
2012-10-16 13:53:23 +01:00
Meatballs1
5377144e1f
Reimplemented tree connect to verify nix samba logins correctly, and fixed accepts_guest_logins() and accepts_bogus_logins()
2012-10-16 12:54:09 +01:00
sinn3r
e583847a31
I missed this sucker.
2012-10-15 22:02:26 -05:00
sinn3r
8e668e2808
Check STATUS_ACCESS_DENIED properly
...
When Samba throws STATUS_ACCESS_DENIED, the exception that's
throwin is actually Rex::Proto::SMB::Exception::ErrorCode, not
as LoginError. It was handled correctly in try_user_pass(), but
not in other functions that also use smb_login().
2012-10-15 16:52:34 -05:00