Commit Graph

33193 Commits (b1b8f86aae87b5d432a88c8931bc494f3743b8f9)

Author SHA1 Message Date
HD Moore b1b8f86aae
Lands #5270, improvements to Msf::ModuleSet 2015-05-12 11:01:23 -05:00
HD Moore 657ae2c487
Fix #5335, resolve metasm parsing issues in x64 exitfunk 2015-05-11 19:39:53 -05:00
OJ 5dfab1f426 Fix exitfunk module for x64
The exitfunk module was using asm keywords that are considered invalid
by metasm. This commit removes these keywords and also adjusts one of
the label names to reduce the chance of a collision with other files.
2015-05-12 08:44:03 +10:00
William Vu cc87df9123
Land #5323, default creds fix for NETGEAR dirtrav 2015-05-09 14:36:00 -05:00
William Vu 79a8f37857
Land #5325, WP RevSlider disclosure date fix 2015-05-09 14:34:03 -05:00
William Vu eeb87a3489 Polish up module 2015-05-09 14:33:41 -05:00
HD Moore fe907dfe98 Fix the disclosure date 2015-05-09 10:44:28 -05:00
Meatballs 706e304849
Land 5299, implement shell_command for PS sessions 2015-05-09 11:23:43 +01:00
Meatballs 98d531e053
Check if session responds to response_timeout 2015-05-09 11:21:45 +01:00
Meatballs d2e1fdbbc3
Land #5324, fixes #5318
Fixes enum_domain_group_users when running as SYSTEM.
2015-05-09 10:49:05 +01:00
Meatballs 028f9dd43b
Tidy and rubocop 2015-05-09 10:48:07 +01:00
Meatballs e9dc93f345
Use cmd_exec 2015-05-09 10:44:02 +01:00
jvazquez-r7 cb51bcc776
Land #5147, @lightsey's exploit for CVE-2015-1592 MovableType deserialization 2015-05-09 01:56:38 -05:00
jvazquez-r7 89bc405c54
Do minor code cleanup 2015-05-09 01:54:05 -05:00
Brent Cook 36b59d2c53
Land #5317, update to ruby 2.1.6 2015-05-08 18:41:45 -05:00
Brent Cook 1a98c5ddc5
Land #5320, fix SSL weak cipher results
This adds a fallback for deprecated ciphers that are no longer exported
current SSL libraries.
2015-05-08 18:19:25 -05:00
Brent Cook d3730ae18c include a list of deprecated ciphers in the sslscan result
Allow recording remote deprecated cipher support even if the local OpenSSL
library does not support negotiating that cipher.
2015-05-08 18:05:00 -05:00
jvazquez-r7 c103779eab
Land #5080, @bcook-r7's 'ls' and 'download' meterpreter improvements 2015-05-08 18:02:16 -05:00
jvazquez-r7 422e261b36
Use parenthesis 2015-05-08 17:59:04 -05:00
benpturner b33efd8b8d Remove post modules 2015-05-08 21:49:58 +01:00
rwhitcroft 8c3a97667a use get_env instead of client.sys.config.getenv 2015-05-08 15:25:20 -04:00
Brent Cook 2f9205abc3 recover consistent parenthesis usage 2015-05-08 14:15:06 -05:00
benpturner 96207ad288 No spaces 2015-05-08 20:11:56 +01:00
benpturner dc98d34007 No spaces 2015-05-08 20:11:09 +01:00
benpturner 2bc4939998 Remove padding 2015-05-08 20:10:17 +01:00
benpturner d3bb32f5fd Hostname in header 2015-05-08 20:07:15 +01:00
Brent Cook 8d5ef42c2d be sure to pass the pattern more than one level deep 2015-05-08 14:03:12 -05:00
benpturner d64f577f9a Delete old files 2015-05-08 19:54:13 +01:00
benpturner e9c8ebb3e0 New modules with edit for authors 2015-05-08 19:51:17 +01:00
rwhitcroft b2ce2ddb05 determine the domain using env vars instead of parsing net.exe output 2015-05-08 14:17:49 -04:00
void-in a7988f9e93 Change credentials to service:service 2015-05-08 22:52:59 +05:00
Dave Hardy fffed7ccbb updated description 2015-05-08 12:08:46 +01:00
Dave Hardy 74be2e342e new post modules 2015-05-08 12:02:26 +01:00
William Vu 508574970c
Land #5307, Brocade login scanner resurrection 2015-05-07 22:43:39 -05:00
William Vu 8d3737d13c Fix some stylistic issues 2015-05-07 22:43:23 -05:00
William Vu 71518ef613
Land #5303, metasploit-payloads Java binaries 2015-05-07 22:39:54 -05:00
William Vu 2f2169af90 Use single quotes consistently 2015-05-07 22:39:36 -05:00
wchen-r7 eb98eaa0af
Land #5321, CVE-2015-0359 domainMemory ByteArray Use After Free 2015-05-07 18:31:33 -05:00
jvazquez-r7 51bb4b5a9b
Add module for CVE-2015-0359 2015-05-07 17:00:00 -05:00
Brent Cook a066105a86 prefer reading directly with MetasploitPayloads where possible 2015-05-07 16:59:02 -05:00
benpturner ef59d1f7c4 Markers 2015-05-07 22:50:09 +01:00
William Vu 134a674ef3
Land #5312, @todb-r7's release fixes 2015-05-07 15:34:31 -05:00
William Vu c9cb9ad564 Fix extraneous comma 2015-05-07 15:32:48 -05:00
Christian Mehlmauer 1469a151ad
Land #5290, Wordpress RevSlider Module 2015-05-07 22:15:56 +02:00
Tod Beardsley d875142468
Get specs passing again for SSL results parsing
This deals with #5319, but does not fix it completely. See the
discussion over there.

Regardless of the partial fix, unless you want to pick up implementing
40-bit scanning and parsing in Rex::SSL directly, I suggest landing this
to get out of the failing spec situation. Some day, Travis-CI will also
fix their system libraries, which will result in builds permafailing
without a reasonable spec change or proper workaround.

Living with known failing tests is living in a state of sin.
2015-05-07 14:29:23 -05:00
wchen-r7 7b5da6f266
Land #5241, sqlmap parsing fixes 2015-05-07 14:21:20 -05:00
wchen-r7 eb84c8b89c Fix NilClass bugs 2015-05-07 14:20:25 -05:00
Tod Beardsley 9af7aa8e4d
Travis should fix to 2.1.6 directly, no fuzziness 2015-05-07 13:44:31 -05:00
benpturner 24abe597e4 numeric 2015-05-07 19:23:25 +01:00
Tod Beardsley e06fa08470
Bump Ruby version to 2.1.6
Note, this should also happen for pretty much every other repo that
wants to be on "latest" Ruby in the 2.1.x line.
2015-05-07 13:22:59 -05:00