Brent Cook
|
8d069e4888
|
Land #11446, add msftidy support for SideEffects Stability Reliability check
|
2019-02-25 11:25:04 -06:00 |
|
Brent Cook
|
8cc3070cc8
|
don't require whitespace
|
2019-02-25 11:24:30 -06:00 |
Jeffrey Martin
|
5bd34e7d4c
|
cleaner read of JSON cache
|
2019-02-21 23:20:43 -06:00 |
|
Jeffrey Martin
|
98e95eeb18
|
remove unused imports and vars
|
2019-02-21 23:14:55 -06:00 |
|
Jeffrey Martin
|
dd864e8f6e
|
enhance -f for `evasion` type
|
2019-02-21 23:11:39 -06:00 |
|
Jeffrey Martin
|
dcaf477097
|
support -f from JSON
|
2019-02-21 23:10:07 -06:00 |
|
Jeffrey Martin
|
1bae9ccf31
|
update module authors to consume JSON cache
|
2019-02-21 22:56:04 -06:00 |
Jacob Robles
|
c09c15649f
|
SideEffects Stability Reliability check
|
2019-02-21 12:38:26 -06:00 |
|
Brent Cook
|
5fc7167beb
|
Merge remote-tracking branch 'upstream/master' into land-10812-
|
2019-02-07 09:31:02 -06:00 |
|
Brent Cook
|
46d7ab9795
|
don't refer to non-existent idx
|
2019-02-07 00:42:28 -06:00 |
Brendan Coles
|
d38e12c124
|
Add URL scheme and Base64.encode64 checks to msftdiy
|
2019-02-04 21:16:01 +00:00 |
Wei Chen
|
27d6fffdad
|
Land #11125, Import/generate `ysoserial` Java serialization objects
|
2019-01-15 17:09:56 -06:00 |
|
Wei Chen
|
85555b81c4
|
Update code for Ruby coding style standards
|
2019-01-15 17:08:54 -06:00 |
asoto-r7
|
ddd9ab2041
|
Fixed an off-by-one error in the fingerprinting randomization
|
2019-01-14 17:42:59 -06:00 |
Matthew Kienow
|
5e28bccda9
|
Move msfdb_ws since it is deprecated by msfdb
|
2019-01-09 23:40:02 -05:00 |
|
asoto-r7
|
ddebc291f2
|
Added partial 'ysoserial-modified' support, along with debug flags
|
2019-01-04 16:43:06 -06:00 |
|
asoto-r7
|
7557624c00
|
ysoserial: Generated more compact JSON and renamed script
|
2018-12-18 15:42:50 -06:00 |
|
asoto-r7
|
349a366e84
|
ysoserial: Changes from code review
|
2018-12-17 15:41:31 -06:00 |
|
asoto-r7
|
fa74a1839a
|
Initial support for dynamic ysoserial Java serialization payloads
|
2018-12-14 12:51:08 -06:00 |
William Vu
|
2b231d33e5
|
Add comment clarifying why we need the day for ISO
|
2018-11-16 13:25:01 -06:00 |
|
William Vu
|
2302acaab7
|
Accept ISO 8601 DisclosureDate with compatibility
Zalgo.
|
2018-11-16 12:03:01 -06:00 |
|
William Vu
|
f25d7dbaa8
|
Revert Date.parse check for DisclosureDate
An approximation of https://en.wikipedia.org/wiki/Robustness_principle.
|
2018-11-16 11:48:44 -06:00 |
|
William Vu
|
d65ba41e31
|
Use non-greedy regex against DisclosureDate
Zalgo. He comes.
wvu@kharak:~/metasploit-framework:bug/msftidy$ tools/dev/msftidy.rb modules/exploits/unix/webapp/jquery_file_upload.rb
"Oct 9 2018', # Larry"
wvu@kharak:~/metasploit-framework:bug/msftidy$
|
2018-11-16 11:40:12 -06:00 |
|
William Vu
|
3dd47b34b0
|
Rework DisclosureDate check to match core code
Framework core uses Date.parse, so many date formats are valid.
There is no reason we shouldn't be using ISO 8601 dates.
|
2018-11-16 11:05:47 -06:00 |
|
William Vu
|
a30403dbfe
|
Improve DisclosureDate regex
|
2018-11-16 03:46:51 -06:00 |
|
William Vu
|
02bb2d45d3
|
Make day in DisclosureDate optional for msftidy
Defaults to the first day of the month.
|
2018-11-16 03:00:39 -06:00 |
Christopher Krause
|
ea0ba6b7a7
|
fix: google geolocation recon script
|
2018-11-02 05:52:54 +01:00 |
Green-m
|
7b1b2198cb
|
resolve confiict.
|
2018-10-17 17:33:01 +08:00 |
|
Green-m
|
941b015525
|
Add shebang.
|
2018-10-17 16:23:56 +08:00 |
|
William Vu
|
0b8926715e
|
Reactively check for invalid module names
|
2018-10-10 14:33:59 -05:00 |
Tim W
|
f2ebdd4cdf
|
add apple_ios/armle/meterpreter/reverse_tcp
|
2018-10-10 17:39:51 +08:00 |
|
Wei Chen
|
b012fa1275
|
Update msftidy
|
2018-10-06 15:59:05 -05:00 |
|
William Vu
|
2186322134
|
Stop being an idiot about the regex and rewrite it
There was no reason to shoehorn in zero-length assertions.
|
2018-10-05 13:50:19 -05:00 |
|
William Vu
|
05ac3875bc
|
Improve check_snake_case_filename check in msftidy
We also remove the separator, since the file is basenamed.
|
2018-10-05 11:55:17 -05:00 |
Erin Bleiweiss
|
e753eddb6b
|
Ignore 'No CVE' warning if NOCVE reason was provided in notes
|
2018-08-31 16:53:44 -05:00 |
Christian Mehlmauer
|
69d321000e
|
check double quotes
|
2018-08-29 06:49:37 +02:00 |
|
Christian Mehlmauer
|
31d4d4f5ff
|
expand check
|
2018-08-29 06:42:01 +02:00 |
|
Christian Mehlmauer
|
7431ae401b
|
fix more errors
|
2018-08-28 13:49:31 +02:00 |
|
Christian Mehlmauer
|
a66556b436
|
fix msftidy errors
|
2018-08-28 13:12:43 +02:00 |
|
Christian Mehlmauer
|
1381e1f3e0
|
also check https
|
2018-08-27 21:44:42 +02:00 |
|
Brendan Coles
|
9725e90ba7
|
Fix msftdiy EDB link check
|
2018-08-26 04:18:38 +00:00 |
|
Jacob Robles
|
2833330f21
|
Land #10365, script allows you to find modules without a specific reference
|
2018-07-26 09:54:58 -05:00 |
|
Wei Chen
|
8c84295752
|
Use full name instead of short to reduce FP
|
2018-07-24 13:00:59 -05:00 |
|
Wei Chen
|
08b0ea9bde
|
Clean up option
|
2018-07-24 12:57:58 -05:00 |
|
Wei Chen
|
8a4e831ad2
|
display full name
|
2018-07-24 12:38:24 -05:00 |
|
Wei Chen
|
5955e3e42d
|
Do some logging to track progress
|
2018-07-24 11:43:29 -05:00 |
|
Wei Chen
|
1c33c489d6
|
rm r7 blog ref because URL ref can do the same thing too
|
2018-07-24 11:05:54 -05:00 |
|
Wei Chen
|
a7284cfff1
|
Check file path for db
|
2018-07-24 10:54:24 -05:00 |
|
Wei Chen
|
f6538c4cd7
|
Have a way to able to ignore certain modules
|
2018-07-24 10:28:07 -05:00 |
|
Wei Chen
|
a70c85580b
|
Add a script to find CVEs based on existing references
|
2018-07-24 10:23:24 -05:00 |