Commit Graph

33576 Commits (b7f9d28976524e00ab3324b5a284677a3b0e81d3)

Author SHA1 Message Date
benpturner d64f577f9a Delete old files 2015-05-08 19:54:13 +01:00
benpturner e9c8ebb3e0 New modules with edit for authors 2015-05-08 19:51:17 +01:00
jvazquez-r7 5588ad36b3
Print status message 2015-05-08 13:51:00 -05:00
jvazquez-r7 7e62ba85a1
Do code cleanup 2015-05-08 13:33:28 -05:00
jvazquez-r7 60c2c7a7cd
Delete unused variable 2015-05-08 13:19:39 -05:00
jvazquez-r7 c0f21c3ae1
Fix metadata 2015-05-08 13:19:23 -05:00
rwhitcroft b2ce2ddb05 determine the domain using env vars instead of parsing net.exe output 2015-05-08 14:17:49 -04:00
void-in a7988f9e93 Change credentials to service:service 2015-05-08 22:52:59 +05:00
Dave Hardy fffed7ccbb updated description 2015-05-08 12:08:46 +01:00
Dave Hardy 74be2e342e new post modules 2015-05-08 12:02:26 +01:00
OJ 79753f719f Slight fix to the transport config 2015-05-08 18:36:30 +10:00
OJ ba3266803a Add transport configuration to reverse_http/s 2015-05-08 18:32:48 +10:00
OJ 5111abdd09 Add transport config entry to reverse_winhttp 2015-05-08 18:15:24 +10:00
William Vu 508574970c
Land #5307, Brocade login scanner resurrection 2015-05-07 22:43:39 -05:00
William Vu 8d3737d13c Fix some stylistic issues 2015-05-07 22:43:23 -05:00
William Vu 71518ef613
Land #5303, metasploit-payloads Java binaries 2015-05-07 22:39:54 -05:00
William Vu 2f2169af90 Use single quotes consistently 2015-05-07 22:39:36 -05:00
wchen-r7 eb98eaa0af
Land #5321, CVE-2015-0359 domainMemory ByteArray Use After Free 2015-05-07 18:31:33 -05:00
jvazquez-r7 51bb4b5a9b
Add module for CVE-2015-0359 2015-05-07 17:00:00 -05:00
Brent Cook a066105a86 prefer reading directly with MetasploitPayloads where possible 2015-05-07 16:59:02 -05:00
benpturner ef59d1f7c4 Markers 2015-05-07 22:50:09 +01:00
William Vu 134a674ef3
Land #5312, @todb-r7's release fixes 2015-05-07 15:34:31 -05:00
William Vu c9cb9ad564 Fix extraneous comma 2015-05-07 15:32:48 -05:00
Christian Mehlmauer 1469a151ad
Land #5290, Wordpress RevSlider Module 2015-05-07 22:15:56 +02:00
Tod Beardsley d875142468
Get specs passing again for SSL results parsing
This deals with #5319, but does not fix it completely. See the
discussion over there.

Regardless of the partial fix, unless you want to pick up implementing
40-bit scanning and parsing in Rex::SSL directly, I suggest landing this
to get out of the failing spec situation. Some day, Travis-CI will also
fix their system libraries, which will result in builds permafailing
without a reasonable spec change or proper workaround.

Living with known failing tests is living in a state of sin.
2015-05-07 14:29:23 -05:00
wchen-r7 7b5da6f266
Land #5241, sqlmap parsing fixes 2015-05-07 14:21:20 -05:00
wchen-r7 eb84c8b89c Fix NilClass bugs 2015-05-07 14:20:25 -05:00
Tod Beardsley 9af7aa8e4d
Travis should fix to 2.1.6 directly, no fuzziness 2015-05-07 13:44:31 -05:00
benpturner 24abe597e4 numeric 2015-05-07 19:23:25 +01:00
Tod Beardsley e06fa08470
Bump Ruby version to 2.1.6
Note, this should also happen for pretty much every other repo that
wants to be on "latest" Ruby in the 2.1.x line.
2015-05-07 13:22:59 -05:00
benpturner 01c2bc0287 Buff 2015-05-07 19:10:33 +01:00
benpturner c234714013 Start and End Markers 2015-05-07 19:06:36 +01:00
OJ fd827db6dd Fix up bind stager payload sizes 2015-05-07 10:13:27 +10:00
Brent Cook 4aa8344373
Land #5316, ignore linux meterpreter bins 2015-05-06 16:30:03 -05:00
Brent Cook 78c58088fe
Land #5314, set snmp defaults for constrained values 2015-05-06 16:27:41 -05:00
OJ fc57852a23 Add the POSIX binaries to the ignore list
Now that the POSIX bins are in the metasploit-payloads gem, we can make
sure that we don't accidentally include them in future commits by adding
them to gitignore.
2015-05-07 07:25:24 +10:00
OJ 9d7a7cb68d Merge branch 'upstream/master' into multi-transport-support
Conflicts:
	lib/msf/core/payload/linux/bind_tcp.rb
2015-05-07 07:24:22 +10:00
Brent Cook 5b2627c027 switch 2015-05-06 16:15:21 -05:00
OJ 60e25170fa
Land #5313 : fixup bind_tcp stager 2015-05-07 07:09:19 +10:00
Brent Cook 5573c6c7e8 remove hardcoded defaults from spec
ensure that we test for there being defaults in the underlying scanner
2015-05-06 15:57:14 -05:00
Tod Beardsley 4df622c76b
Oops, one last for #5312. 2015-05-06 14:48:17 -05:00
Tod Beardsley e8913e5620
Addressed most of @wvu's issues with #5312 2015-05-06 14:47:08 -05:00
Brent Cook 73735760ce
Land #5311, fix more payload_exe->generate_payload_exe calls 2015-05-06 13:38:35 -05:00
William Vu 669df591f2 Pull default connection_timeout into constant 2015-05-06 13:18:00 -05:00
William Vu d4aed08260 Fix typo 2015-05-06 13:17:58 -05:00
William Vu 0939bbc710 Set default retries/version for SNMP LoginScanner
Set in snmp_login but missed in the LoginScanner.

MSP-12668
2015-05-06 13:17:40 -05:00
Brent Cook 5a8b6e90f2 restore ecx after setting the socket options, set default size 2015-05-06 11:56:07 -05:00
Tod Beardsley f423306b6f
Various post-commit fixups
Edited modules/auxiliary/dos/http/ms15_034_ulonglongadd.rb first landed
in #5150, @wchen-r7's DOS module for CVE-2015-1635 HTTP.sys

Edited modules/auxiliary/gather/apple_safari_ftp_url_cookie_theft.rb
first landed in #5192, @joevennix's module for Safari CVE-2015-1126

Edited modules/auxiliary/gather/java_rmi_registry.rb first landed in

Edited modules/auxiliary/gather/ssllabs_scan.rb first landed in #5016,
add SSL Labs scanner

Edited modules/auxiliary/scanner/http/goahead_traversal.rb first landed
in #5101, Add Directory Traversal for GoAhead Web Server

Edited modules/auxiliary/scanner/http/owa_iis_internal_ip.rb first
landed in #5158, OWA internal IP disclosure scanner

Edited modules/auxiliary/scanner/http/wp_mobileedition_file_read.rb
first landed in #5159, WordPress Mobile Edition Plugin File Read Vuln

Edited modules/exploits/linux/http/multi_ncc_ping_exec.rb first landed
in #4924, @m-1-k-3's DLink CVE-2015-1187 exploit

Edited modules/exploits/unix/webapp/wp_slideshowgallery_upload.rb first
landed in #5131, WordPress Slideshow Upload

Edited modules/exploits/windows/local/run_as.rb first landed in #4649,
improve post/windows/manage/run_as and as an exploit

(These results courtesy of a delightful git alias, here:

```
  cleanup-prs = !"for i in `git status | grep modules | sed
s/#.*modules/modules/`; do echo -n \"Edited $i first landed in \" && git
log --oneline --first-parent $i | tail -1 | sed 's/.*Land //' && echo
''; done"

```

So that's kind of fun.
2015-05-06 11:39:15 -05:00
William Vu b8c7161819 Fix up NameError'd payload_exe 2015-05-06 11:34:05 -05:00
William Vu 59ffe5d98f
Land #5306, payload_exe NameError fix 2015-05-06 11:29:29 -05:00