Brent Cook
bbf271f6b0
Land #7981 , allow handler launched by the handler command to persist
...
Merge remote-tracking branch 'upstream/pr/7981' into upstream-master
2017-02-28 02:38:42 -06:00
Brent Cook
8c876f4a57
Land #7996 , Major rewrite and cleanup of reverse shell jcl payload
2017-02-28 02:12:40 -06:00
Brent Cook
2ee84f47cf
Land #8027 , Restore USERNAME and PASSWORD options for owa_login
2017-02-28 02:08:45 -06:00
Brent Cook
db621511d6
Land #8030 , update the module doc template
2017-02-28 02:07:23 -06:00
h00die
da1e58d907
updates to doc template
2017-02-27 21:08:18 -05:00
h00die
a910f38a11
land #8029 syntax fixes for some docs
2017-02-27 21:01:46 -05:00
h00die
8197d14f30
fix some documentation
2017-02-27 20:58:03 -05:00
wchen-r7
69c7b0168c
Restore USERNAME and PASSWORD options for owa_login
...
Requested by our own pentesters, the username & password options
should be restored so users can more easily try one password but
multiple users.
2017-02-27 15:04:06 -06:00
Brent Cook
a8c6a91669
Land #8024 , bump rex-text and metasploit-payloads
2017-02-27 11:25:53 -06:00
Brent Cook
18445cf341
bump rex-text, get IPAddr sorting
2017-02-27 11:25:06 -06:00
bwatters-r7
1c71952529
Update Gemfile.lock because I forgot to in PR#8014
2017-02-27 11:09:14 -06:00
Brent Cook
510e347bef
Land #8015 , prevent tests from fighting each other
2017-02-26 17:37:35 -06:00
bwatters-r7
49fbd3189f
Merge branch 'met-test-entropy' of github.com:bwatters-r7/metasploit-framework into met-test-entropy
2017-02-25 05:22:13 -06:00
bwatters-r7
941f87fa83
Added the option to incude entropy in file/directory names to support
...
automated testing
2017-02-25 05:20:25 -06:00
bwatters-r7
ba89dc9c34
Added the option to incude intropy in file/directory names to support
...
automated testing
2017-02-25 04:57:21 -06:00
bwatters-r7
09c9e9b1f9
Land #8014 , Update metasploit-payloads gem to 1.2.15
2017-02-24 20:54:56 -06:00
bwatters-r7
1e28e2b2c7
Cache sizes again...
2017-02-24 20:43:13 -06:00
bwatters-r7
493f17761b
payload cache size change- all together, now
2017-02-24 20:23:34 -06:00
bwatters-r7
15af90c011
payload cache size change
2017-02-24 20:22:27 -06:00
bwatters-r7
adcb65c66b
Update gemspec file to use metasploit-payloads 1.2.15 per payloads PR#171
2017-02-24 20:15:50 -06:00
William Webb
d9a7fac399
Land #8004 , Use post/windows/manage/priv_migrate instead of migrate -f
2017-02-24 17:30:14 -06:00
William Webb
076848e904
Land #7993 , Keep sessions in progress alive
2017-02-24 16:57:47 -06:00
Metasploit
f9e4fd54fe
Bump version of framework to 4.14.1
2017-02-24 13:31:17 -08:00
Brent Cook
84518b2dfb
Land #8012 , bump minor
2017-02-24 15:20:55 -06:00
Jeffrey Martin
a954521d75
bump minor version
2017-02-24 15:07:07 -06:00
James Barnett
48c1e6d325
Land #7973 , Enable cert validation for Nexpose
...
This PR enables connection to a Nexpose console using the
nexpose client gem.
It also allows you to connect using a trusted certificate
instead of simply overriding the SSL validation.
2017-02-24 14:50:31 -06:00
James Barnett
2631259919
Land #7973 , Enable cert validation for Nexpose
...
This PR enables connection to a Nexpose console using the
nexpose client gem.
It also allows you to connect using a trusted certificate
instead of simply overriding the SSL validation.
2017-02-24 14:27:24 -06:00
Pearce Barry
e5d0370a94
Fixes MS-1716, keep sessions in progress alive.
2017-02-24 12:56:05 -06:00
Metasploit
0f4e03be7b
Bump version of framework to 4.13.27
2017-02-24 10:03:33 -08:00
h00die
43550b8cdf
fixing line length
2017-02-23 19:55:23 -05:00
h00die
041238f77c
land #7896 Binom3 power meter scanner and brute
2017-02-23 19:49:50 -05:00
Jeffrey Martin
1f3de5d958
ensure scan is settled before delete
2017-02-23 18:14:36 -06:00
wchen-r7
70f7dccf62
copy and paste fail
2017-02-23 17:11:08 -06:00
wchen-r7
5d0b532b20
Fix #8002 , Use post/windows/manage/priv_migrate instead of migrate -f
...
Because migrate -f uses a meterpreter script, and meterpreter scripts
are deprecated, we should be replacing with a post module
Fix #8002
2017-02-23 17:04:36 -06:00
wchen-r7
f27ef55391
Land #7992 , Improve Signature Evasions for browser exploits
2017-02-23 16:32:49 -06:00
wchen-r7
1ca0a24177
Up rex-exploitation
2017-02-23 15:58:19 -06:00
Jeff Tang
e3f613ecc6
Bypass: Metasploit OS detection
...
SEP is triggering on HTTP POSTs which start with `os_name`
2017-02-23 15:42:04 -05:00
bwatters-r7
3457640437
Land #7990 , Use obfuscated JS in BES
2017-02-23 14:18:59 -06:00
wchen-r7
6a6c8c9828
Land #7997 , Add SSH login and pubkey docs
2017-02-23 13:38:10 -06:00
wchen-r7
af8e64958e
Small changes
2017-02-23 13:36:39 -06:00
William Vu
e23e65ee5f
Fix msftidy's vars_get check for omitted parens
...
Hat tip @bcoles.
2017-02-23 02:13:59 -06:00
William Vu
236606838a
Land #7987 , MVPower DVR exploit
2017-02-23 01:46:04 -06:00
Brendan Coles
c9e09491dd
Add documentation
2017-02-23 07:44:45 +00:00
William Vu
bf47ac2fa9
chmod -x a couple module docs
...
Hat tip @bcoles.
2017-02-22 23:43:54 -06:00
Brendan Coles
5d3a4cce67
Use all caps for module option names
2017-02-23 16:30:01 +11:00
h00die
6a7dab0b1c
add key explain line
2017-02-22 22:15:05 -05:00
h00die
aee6707713
ssh_login docs
2017-02-22 22:13:07 -05:00
bigendiansmalls
27a7b279f5
Major rewrite and cleanup of reverse shell jcl
...
The shell does exactly the same as the previous, just made the code read much
better so as to not severely anger the gray beards and other lesser
mainframe deities. The only architectural change is the payload uses the
spawn system call vs exec - this provides for a cleaner exit in some cases.
2017-02-22 17:17:27 -06:00
bwatters-r7
40e6413867
Land #7980 , Add a sploit for CVE-2017-5982, kodi file traversal
2017-02-22 13:11:48 -06:00
Jeff Tang
84ab3c66cc
Use obfuscated JS in BES
2017-02-22 12:47:36 -05:00