153611e9fa
bump metasploit-credential to allow handling string addresses gracefully
2017-06-09 01:43:45 -05:00
06a789f777
Land #8530 , Update ms17_010_eternalblue description and ranking
2017-06-09 01:30:33 -05:00
a968a74ae0
Update ms17_010_eternalblue description and ranking.
...
The module has been noted to cause crashes, reboots, BSOD, etc, on
some systems.
2017-06-09 11:01:48 +12:00
c3b2476a51
add arch to rpc session details
2017-06-08 16:26:13 -06:00
aa00661fd0
Land #8518 , update CVE references where modules report_vuln
2017-06-08 13:38:12 -05:00
3e20296cf5
Add service_details for SSH
2017-06-08 13:28:29 -05:00
e22334343e
Use store_valid_credential in my modules
...
I used report_note because using the creds API was a pain in the ass.
2017-06-08 00:57:51 -05:00
4198efa41f
Remove pry from CommandDispatcher::Creds...
...
My bad. Should have been caught in #8517 .
2017-06-08 00:18:46 -05:00
eef82a501d
Add support for session GUIDs in mettle
2017-06-08 11:20:48 +10:00
99fa52e660
Land #8434 , Add Windows 10 Bypassuac fodhelper module
2017-06-07 11:15:01 -05:00
3e27fd3db4
Land #8517 , CommandDispatcher::Common
...
Also fixes jobs -i.
2017-06-07 03:20:45 -05:00
596924552e
Fix literal \n in jobs -i
...
Regression from #4063 .
2017-06-07 03:19:30 -05:00
a052ee4064
Use the opts hash not the datastore
2017-06-06 20:02:06 -04:00
6131e4bd82
Fix download lambda function to take correct param count
...
This is an emergency fix as a result of something being broken in
master. This is also being pushed straight to master because github is
down and the PR process isn't possible. This commit was reviewed by
@wvu-r7 prior to being pushed.
2017-06-07 09:37:24 +10:00
834e0eba95
Land #8340 , add exception handling for rev_tcp_ssl
2017-06-06 19:09:15 -04:00
a953d94f61
Minor white space cleanups for PR #8340
2017-06-06 19:07:55 -04:00
e5e3be3046
Merge pull request #3 from bwatters-r7/land-8434
...
Rubocop readability changes
2017-06-06 22:09:53 +01:00
b932aae82e
reference typo fix
2017-06-06 11:50:07 -05:00
bac17a8e80
Land #8053 , Add DC/OS Marathon UI Exploit
2017-06-06 09:29:26 -05:00
3ded57e1cd
Land #8516 , add verbose debug to ntds dumper
2017-06-06 07:26:54 -05:00
0830e4aaa5
Land #8503 , Linux x86 reverse_tcp error handling
2017-06-06 06:36:55 -05:00
37b9cd07a2
Add support for the session GUID in the UI
...
The Session GUID will identify active sessions, and is the beginning of
work that will allow for tracking of sessions that have come back alive
after failing or switching transports.
2017-06-06 17:15:57 +10:00
871c30c0b3
refactor stdapi and lanattacks to use filter_commands
2017-06-06 14:05:07 +08:00
e9c9c852ab
check_commands -> filter_commands
2017-06-06 13:56:38 +08:00
f0f21891ad
Land #8512 , Enable adaptive download with variable block sizes
2017-06-05 18:46:24 -05:00
385daddb9d
Land #8499 , doc header consistency fixes
2017-06-05 17:40:15 -05:00
1558db375d
update CVE reference in where modules report_vuln
2017-06-05 16:36:44 -05:00
42aa2e5acf
add some attempts at debugging to ntds
...
add some logging and more status outputs to the
NTDS domain hasdump. Also force the encoding on
strings to UTF8
2017-06-05 15:21:50 -05:00
f47cc1a101
Rubocop readability changes
2017-06-05 14:32:45 -05:00
f4013b02e1
renaming db_common to common
...
this moves the following methods into common
arg_host_range ( used in creds and db )
arg_port_range ( used in creds and db )
set_rhosts_from_addrs ( used in creds and db )
show_options ( used in jobs and modules )
2017-06-05 14:19:18 -05:00
851adf4987
Land #8515 , Rpcbomb DoS Module
2017-06-05 14:13:49 -05:00
bc3b883758
Add docs, fix typo, add missing report mixin to avoid error.
2017-06-05 13:49:59 -05:00
a5805a55dc
make this a UDPScanner, rewrite
2017-06-05 12:39:48 -05:00
8c39c92245
Add description and loop capability.
2017-06-05 11:27:13 -05:00
a571834c4d
Initial commit of rpcbomb DoS aux module.
...
This just brings the code in as-in, next step is to update to use our mixins and such.
2017-06-05 10:23:39 -05:00
91c337b776
Land #8508 , fix 32-bit to 64-bit process migration on AMD cpus
2017-06-05 08:45:46 -05:00
5f10e63923
bump payloads
2017-06-05 08:43:16 -05:00
47ca9cd6fc
Merge remote-tracking branch 'upstream/master' into land-8508-
2017-06-05 08:41:27 -05:00
7625d36c1c
fix #8199 , check extapi for dependencies
2017-06-05 14:56:59 +08:00
8c35e54934
Land #8495 , Expand multi-handler for generic http(s) sessions
2017-06-04 20:21:32 -05:00
de86c5d991
add storing creds and loot name consistency
2017-06-04 17:46:43 -04:00
f17b28930d
Update executex64.asm
2017-06-04 13:18:50 +03:00
737f7452ce
add my name to author
2017-06-04 04:42:45 +09:00
39cee481c1
Making changes similar to the reverse_tcp payload
2017-06-03 22:57:59 +05:30
ca5b20f4d0
Fixed an elusive bug on AMD CPUs
...
Details:
http://blog.rewolf.pl/blog/?p=1484
rwfpl/rewolf-wow64ext@8771485
2017-06-03 11:30:11 +03:00
ea5db9a039
working module
2017-06-02 23:09:19 -04:00
e7fa4c2d06
Land #8504 , print_good for ipmi_dumphashes
2017-06-02 18:49:41 -05:00
e175bcda08
update cachedSize
2017-06-03 08:37:18 +09:00
b9aef557f0
land #8502 add cve number for java_rmi_server
2017-06-02 19:37:18 -04:00
34e9b2c04b
Change ipmi_dumphashes to have non-verbose output, ever
2017-06-02 14:27:21 -06:00
Brent Cook
Stephen Shkardoon (ss23)
TheNaterz
William Vu
OJ
bwatters-r7
Spencer McIntyre
Alexandre Maloteaux
Jeffrey Martin
Tim
David Maloney
darkbushido
Pearce Barry
h00die
RaMMicHaeL
tkmru
itsmeroy2012
Dylan Davis