Commit Graph

45031 Commits (bad1429989c76d8413b5e91fddb1e78eb20c6a5a)

Author SHA1 Message Date
bwatters-r7 d62d61667d
bump metasploit-payloads 2018-01-23 07:26:08 -06:00
William Vu d3b3946669 Use Msf::Post::File#setuid? in setuid_nmap 2018-01-23 02:05:26 -06:00
William Vu 18b8fc2e0e Add Msf::Post::File#setuid? 2018-01-23 02:05:26 -06:00
Brent Cook 03d1523d43
Land #6611, add native DNS to Rex, MSF mixin, sample modules 2018-01-22 23:54:32 -06:00
Brent Cook afaf832034 remove verbose error from library, bubble consistent exceptions to the module instead 2018-01-22 23:52:20 -06:00
Brent Cook a6e5944ec5 fix msftidy, add nicer errors on bind failure 2018-01-22 23:37:39 -06:00
Brent Cook 84b463f785 dnsruby is already a dependency 2018-01-22 23:37:15 -06:00
Brent Cook aae77fc1a4
Land #9349, GoAhead LD_PRELOAD CGI Module 2018-01-22 23:10:36 -06:00
Adam Cammack 670055da4b
Prevent leaked sockets in edge cases 2018-01-22 22:14:16 -06:00
Adam Cammack c76fa2c58f
Vendor async_timeout 2018-01-22 22:12:28 -06:00
Adam Cammack 964810146a
Python library style fixes 2018-01-22 22:10:32 -06:00
Brent Cook 9a35c324c0
Land #9352, Pull out HTTP-specific code from PacketDispatcher 2018-01-22 16:52:24 -06:00
Brent Cook d1569f8280
Land #9413, Expand the number of class names searched when checking for an exploitable JMX server 2018-01-22 16:49:01 -06:00
Brent Cook 10fde42adc
Land #9431, Fix owa_login to handle inserting credentials for a hostname 2018-01-22 16:46:39 -06:00
Brent Cook b12953fa85
Land #9404, update module author 2018-01-22 16:41:50 -06:00
Brent Cook c35eb0de31
Land #9398, allow UTF-8 module names and authors 2018-01-22 16:41:30 -06:00
Brent Cook 6aebc1fdbd remove more checks 2018-01-22 16:40:30 -06:00
Brent Cook 04d305feb3 update SSL Labs scanner with new API, be robust
This updates the SSL Labs scanner to know about new additions to the API, and prevents the module from breaking again just because there is new JSON in the output. I couldn't figure out how to get the Api class to print messages normally, and there is some other output that needs to be added. But the module does work again.
2018-01-22 16:32:16 -06:00
Wei Chen 65781efa9e
Land #9442, Remove NoMethod Rescue for cerberus_sftp_enumusers
Land #9442
2018-01-22 13:39:16 -06:00
William Vu 27a007fb57
Land #9432, cmd_edit improvements (again!)
We seem to enjoy refactoring this method.
2018-01-22 12:38:08 -06:00
William Vu a255586750 Refactor to use guard clauses 2018-01-22 12:38:02 -06:00
Wei Chen 394c31c1e3 Remove NoMethod Rescue for cerberus_sftp_enumusers
Please see reasons in #9436
2018-01-22 11:10:23 -06:00
Wei Chen 38d056b930
Land #9436 - Fix cerberus_sftp_enumusers undefined method start for nil
Land #9436

Thanks Steve!
2018-01-22 11:07:23 -06:00
Wei Chen 85d018096b Pass password_prompt and non_interactive to fix #8970
Fix #8970
2018-01-22 11:06:12 -06:00
Brent Cook 682c915a09
Land #9267, Add targets to sshexec 2018-01-22 09:59:48 -06:00
Brent Cook e927c97652
Land #9434, Fix timing issue with rspec 2018-01-22 09:42:07 -06:00
Brent Cook f95d7b2bea
Land #9438, address cmd_exec inconsistencies 2018-01-22 09:37:07 -06:00
h00die 7175468ff7 local to remote 2018-01-21 10:00:31 -05:00
Brent Cook 69818aea22 update payload sizes 2018-01-21 08:03:07 -06:00
Brent Cook 7ad296d511 bump payloads, fix cmd_exec meterpreter logic 2018-01-21 07:56:24 -06:00
Pearce Barry ba75d19d34
Fix failing spec. 2018-01-19 15:52:25 -06:00
Pearce Barry 2a6b3671bf
Add connection addr+port info to http response object.
Update owa_login to use this instead of doing lookups on its own.
2018-01-19 13:37:33 -06:00
Steve Embling 8f75d3a46b Possible fix to changes in net::ssh usage 2018-01-19 15:10:14 +00:00
christopher lee 87f8b68099 Ensure config directory always exist, seems to be timing issue in rspec 2018-01-18 14:56:07 -06:00
Kevin Kirsche c7d3b5dfbb
Update payload and disable check functionality
The check functionality is broken as MSF cannot handle HttpServer and HttpClient at this time.

The payloads were updated to ensure CVE-2017-10271 is being exploited instead of CVE-2017-3506 as explained on https://blog.nsfocusglobal.com/threats/vulnerability-analysis/technical-analysis-and-solution-of-weblogic-server-wls-component-vulnerability/
2018-01-18 13:26:44 -05:00
Brent Cook f355d10771
Land #9433, add CURRENT.md to track msf5 large changes 2018-01-18 11:07:24 -06:00
Brent Cook 7ee77a27a6
Land #9389, Update commvault_cmd_exec module documentation 2018-01-18 11:05:51 -06:00
Brendan Coles b6ea95c417 Add documentation 2018-01-18 12:42:44 +00:00
Brent Cook bfa7e32c91 add CURRENT.md to track major changes and how to migrate with them 2018-01-18 06:35:53 -06:00
Brent Cook df71defdea fix library-specific error messages to not appear with modules 2018-01-18 05:55:51 -06:00
Brent Cook 7849743789
update stageless python sizes 2018-01-18 00:41:58 -06:00
Brent Cook b4bb1b5ed1
fix whitespace patchups for current python meterpreter 2018-01-18 00:28:04 -06:00
Brent Cook 86c927edb7
fix msfvenom referencing a nil typed_module_set 2018-01-18 00:16:42 -06:00
Brent Cook 7fe237abe1
Land #9220, Module cache improvements 2018-01-17 22:34:51 -06:00
Brent Cook add907ece9
Land #9259, make master Metasploit 5 dev branch 2018-01-17 22:31:49 -06:00
Brent Cook 06459e2dee cowardly continue using ~/.msf4 until we have an actual reason to switch 2018-01-17 22:01:56 -06:00
Brent Cook facecb40d7 change default prompt for users who use '-q' 2018-01-17 22:01:34 -06:00
Brent Cook cbd1a2a505 update default startup with version info 2018-01-17 21:59:53 -06:00
Matthew Kienow 035cdb1bca Add v5 under construction banner 2018-01-17 17:24:28 -06:00
Brent Cook 08f622b0ce update version 2018-01-17 17:24:15 -06:00