Commit Graph

623 Commits (b86c1f0465feb65c40312c4544459624a8964f4b)

Author SHA1 Message Date
Louis Sato d5d0b9e9b8 Revert "Land #6729, Speed up the datastore"
This reverts commit c6b1955a5a, reversing
changes made to 4fb7472391.
2016-06-28 13:39:52 -05:00
wchen-r7 c6b1955a5a
Land #6729, Speed up the datastore 2016-06-15 17:55:42 -05:00
Crypt0-M3lon eaaa9177d5 Fix "username" key to add login in creds database 2016-06-08 10:38:38 +02:00
William Vu ca76e8f290 Update allwinner_backdoor report_vuln hash 2016-05-24 00:57:37 -05:00
Brent Cook 928a706135
Land #6890, Allwinner CPU kernel module local privilege escalation 2016-05-23 22:00:52 -05:00
Brent Cook 2f8562fba4 added documentation and minor style tweaks 2016-05-23 21:59:44 -05:00
h00die 4242bbdf55 change report_note to report_vuln per note 2016-05-23 17:36:50 -04:00
h00die c621f689b2 more descriptive note per @sempervictus 2016-05-18 19:08:01 -04:00
h00die 815a2600a8 additional description 2016-05-17 22:07:33 -04:00
h00die 640e0b9ff7 working ready for pr 2016-05-17 21:58:32 -04:00
Brent Cook 2e3e4f0069
Land #6296, Added a multi-platform post module to generate TCP & UDP egress traffic 2016-05-14 00:03:00 -05:00
Brent Cook 3542d907f7 simplify description, move the bulk of documentation to documentation/ 2016-05-14 00:01:51 -05:00
h00die 314d73546c additional details, not working on tablet via malicious apk meterpreter 2016-05-13 23:12:44 -04:00
h00die 5099124f3d module compiles, fails correctly but cant yet verify it works 2016-05-12 22:18:43 -04:00
Brent Cook a69432abe5 update module class and move to recon from manage 2016-05-12 12:42:04 -05:00
Brent Cook 9f923cdb00 Merge branch 'master' into land-6296-egress 2016-05-12 12:36:47 -05:00
Brent Cook 57a3a2871b remove various session manipulation hacks since session.platform should always contain an os identifier 2016-05-08 22:39:41 -05:00
wchen-r7 2f66442f1d Fix #5191, bad LHOST format causes shell_to_meterpreter to backtrace
When using shell_to_meterpreter via a pivot, the LHOST input's format
might be invalid. This is kind of a design limitation, so first we
check the input, and there is a module doc to go with it to explain
a workaround.

Fix #5191
2016-04-28 23:03:54 -05:00
Brent Cook 194a84c793 Modify stdapi so it also uses exist? over exists? for ruby parity
Also add an alias for backward compatibility.
2016-04-23 17:31:22 -04:00
wchen-r7 816bc91e45 Resolve #6807, remove all OSVDB references.
OSVDB is no longer a vulnerability database, therefore all the
references linked to it are invalid.

Resolve #6807
2016-04-23 12:32:34 -05:00
Brent Cook 57ab974737 File.exists? must die 2016-04-21 00:47:07 -04:00
Adam Cammack 3da451795c
Fix potential case issue
Even though the options were getting put back in a datastore, the
original case could still be lost and that would be bad.
2016-04-18 17:52:27 -04:00
Tim f83cb4ee32 fix set_wallpaper 2016-03-16 13:07:41 +00:00
Christian Mehlmauer 3123175ac7
use MetasploitModule as a class name 2016-03-08 14:02:44 +01:00
Brent Cook f703fa21d6 Revert "change Metasploit3 class names"
This reverts commit 666ae14259.
2016-03-07 13:19:55 -06:00
Brent Cook 44990e9721 Revert "change Metasploit4 class names"
This reverts commit 3da9535e22.
2016-03-07 13:19:48 -06:00
Christian Mehlmauer 3da9535e22
change Metasploit4 class names 2016-03-07 09:57:22 +01:00
Christian Mehlmauer 666ae14259
change Metasploit3 class names 2016-03-07 09:56:58 +01:00
Brent Cook a1190f4344
Land #6598, add post module for setting wallpaper 2016-03-06 15:00:10 -06:00
Brent Cook 86845222ef add meterpreter platform workaround 2016-03-06 14:51:34 -06:00
Brent Cook d955c6a8f6 style fixes 2016-02-29 14:06:49 -06:00
wchen-r7 f3cf5a8a41 Resolve merge conflict with upstream-master
Out of date author field
2016-02-25 14:49:53 -06:00
Tim 27af59ea7c minor tweaks 2016-02-20 08:35:56 +00:00
Brent Cook b58166a9a8 add android platform to the hash 2016-02-18 20:13:39 -06:00
Tim 5c92076a1e more cleanup 2016-02-14 09:15:25 +00:00
Tim e738b5922d fix play_youtube to work on Android 2016-02-11 07:16:40 +00:00
Tim a93f200851
cosmetic fixes 2016-02-10 07:51:13 +00:00
Tim d544bf9311 android set wallpaper 2016-02-01 01:16:17 +00:00
Tim 96ab598835 set wallpaper 2016-02-01 01:01:24 +00:00
wchen-r7 6fb27a3da9 Undo path and move the out of bound check 2016-01-28 23:49:50 -06:00
wchen-r7 d515e4db64 Unwanted comment 2016-01-21 00:55:08 -06:00
wchen-r7 bda76c7340 Update lastpass_creds module 2016-01-21 00:53:16 -06:00
Martin Vigo 348ae586a7 Handle vault parsing exceptions 2016-01-15 14:54:59 -08:00
Martin Vigo 3bee2fff70 Use native method dir 2016-01-08 16:06:24 -08:00
Martin Vigo 8c6bdd532b Use ? for SQL queries 2016-01-07 22:50:23 -08:00
Martin Vigo b46095f3d6 Remove custom method checking file exists 2016-01-07 22:21:10 -08:00
Martin Vigo e7701b6d5f Fix incoherent method to always return a list 2016-01-07 22:17:04 -08:00
Jon Hart f8943f4821
Remove peer; defined in lib/msf/core/post/common.rb 2015-12-24 07:57:16 -08:00
Stuart Morgan d6dacd1580 Fixed bug when generating native traffic with one thread 2015-12-23 15:28:33 +00:00
Rory McNamara 45b9230efb Redirect python stderr to stdout, darwin python platform 2015-12-22 11:32:31 +00:00
Tim be9197fc97 quick fix for issues #6359 2015-12-22 03:26:31 +00:00
Tim f9d74143c3 fix typo 2015-12-22 03:25:34 +00:00
Martin Vigo 2ddac42be7 Perform Rubocop cleanup 2015-12-19 23:33:32 -08:00
Martin Vigo 2fc940cc3e Decrypt Chrome and Opera cookies and msdftify code 2015-12-19 22:19:20 -08:00
Martin Vigo ab630166bb Decrypt Chrome and Opera cookies and msdftify code 2015-12-19 21:40:30 -08:00
Martin Vigo ccb13a2ca6 Add full IE support and bug fixes 2015-12-17 20:29:50 -08:00
William Vu b085989923
Land #6266, rsync creds scraper 2015-12-14 11:37:30 -06:00
William Vu db788d1b7c
Land #6238, CmdStager BOURNE_{PATH,FILE} options 2015-12-07 12:34:42 -06:00
Christian Mehlmauer fc9d818837
change youtube url 2015-12-04 10:15:56 +01:00
Martin Vigo b4ade1989a Add IE support for stored passwords 2015-12-04 00:13:42 -08:00
Stuart Morgan 78d391fa10 Rubocop 2015-12-02 14:54:30 +00:00
Stuart Morgan 99dceb33ac Added 'ALL' support (to do TCP and UDP in one go) 2015-12-02 14:50:16 +00:00
Rory McNamara 15dd18dc4b use single quotes, remove explicit nil 2015-12-02 09:36:07 +00:00
Jon Hart 366b92a79e
Store rsync creds as creds, not loot 2015-12-01 15:30:39 -08:00
Stuart Morgan b66be85ccb Rubocop 2015-12-01 22:32:04 +00:00
Stuart Morgan d5c0da5e19 Added 33434-33534 because this is the default udp range for traceroute (might be enabled by sysadmins to enbale traceroutes to work) 2015-12-01 22:31:12 +00:00
Stuart Morgan 74a07709b8 Use the Comm param instead of adding a route as suggested by @jlee-r7 and hdm 2015-12-01 21:42:27 +00:00
Stuart Morgan c744b14a8a Exclude python meterpreter, doesn't seem to work 2015-11-29 20:40:42 +00:00
Stuart Morgan 6a3172268e Fixed module metadata 2015-11-29 19:32:55 +00:00
Stuart Morgan 2bc5b98d6e Rubocop fixing alignment of ifs and ends 2015-11-29 19:17:49 +00:00
Stuart Morgan 8b4649e75c Working through rubocop issues 2015-11-29 19:11:10 +00:00
Stuart Morgan 9267afc18b Rubocop 2015-11-29 19:06:24 +00:00
Stuart Morgan 9a6f0d6734 Reducing complexity (rubocop) 2015-11-29 19:06:07 +00:00
Stuart Morgan b5909852a9 Rubocop 2015-11-29 19:02:33 +00:00
Stuart Morgan d4bb5537b2 Fixed stupid paste error 2015-11-29 19:02:15 +00:00
Stuart Morgan fd7a6465c6 Attemping to simplify code 2015-11-29 19:01:34 +00:00
Stuart Morgan 10f89239a5 rubocop 2015-11-29 18:59:40 +00:00
Stuart Morgan 6a567845e0 Tidy up error messages 2015-11-29 18:54:46 +00:00
Stuart Morgan 12dbe31bee Apparently adding .close causes it to hang 2015-11-29 18:49:51 +00:00
Stuart Morgan 41d963eeb1 Debugging 2015-11-29 18:34:26 +00:00
Stuart Morgan b6dfafaeb7 Stabilised code, still giving errors on threads>1 in native mode though 2015-11-29 18:14:19 +00:00
Stuart Morgan e18f8b5e21 Now works for both TCP and UDP
However, it gives 'interrupted by console user' as an error message for no reason (?timeouts?)
2015-11-29 17:53:04 +00:00
Stuart Morgan 98e0050e8c Fixed 'end' bugs (mismatched blocks) 2015-11-29 16:20:33 +00:00
Stuart Morgan af106737b9 Adding both native and winapi options, split out to functions & fix up 2015-11-29 16:17:07 +00:00
Stuart Morgan 5ffeaddf1e Added help 2015-11-26 14:01:40 +00:00
Stuart Morgan 1ce0386d01 Reusing port array generation code 2015-11-26 13:59:15 +00:00
Martin Vigo 9d747e67a3 Fix bugs in new Firefox creds storage 2015-11-25 21:28:07 -08:00
Jon Hart a692a5d36c
Remove Platform, this should work everywhere; correct grammar 2015-11-25 11:23:18 -08:00
Stuart Morgan 09d4bd8175 Added basic function definition for non-Win32API egress 2015-11-24 15:38:06 +00:00
Stuart Morgan 4ea732716a Added file 2015-11-24 15:37:44 +00:00
Jon Hart 718e928fe3
Control per-user config file 2015-11-23 11:11:03 -08:00
Jon Hart 93bb31dfa0
Make path to rsyncd configuration file configurable 2015-11-21 19:50:33 -08:00
Martin Vigo f34c7a8594 Support for new Firefox method to store credentials 2015-11-20 23:42:59 -08:00
Jon Hart aa962f30a9
Minor style/usability cleanup 2015-11-20 13:51:31 -08:00
Jon Hart a96102c20a
Minor cleanup 2015-11-20 13:19:38 -08:00
Jon Hart c75e3c8e84
Initial commit of a post module for looting rsync credentials 2015-11-20 12:57:33 -08:00
Rory McNamara 811167442c Re-disable debugging nodelete 2015-11-17 13:10:03 +00:00
PsychoMario 2b99969f9a quote paths to allow spaces 2015-11-15 00:14:30 +00:00
PsychoMario e3f25fd6e2 Add support for specifying path, file in bourne dropper 2015-11-14 18:31:11 +00:00
Jon Hart 38ca943219
Remove unneeded width arg 2015-11-13 11:49:50 -08:00