Commit Graph

45429 Commits (c058d0fba0db5565e6d09188e21bd518f3f47480)

Author SHA1 Message Date
James Barnett c058d0fba0
WIP: port db_export command 2018-03-06 15:15:27 -06:00
christopher lee 4f6b1de9a3 Merge branch 'master' into goliath 2018-03-01 14:14:39 -06:00
Brent Cook 34b90ee494
Land #9647, lock protobuf version 2018-03-01 14:08:15 -06:00
Sonny Gonzalez 883654f0ea
Land #9653, fix Y2k38 issue (until Jan 1, 2038) 2018-03-01 09:13:41 -06:00
Brent Cook 4fec2e758d make fix more precise, based on https://github.com/rapid7/metasploit-framework/pull/2343 2018-03-01 08:59:55 -06:00
Brent Cook 27bd2a4a9f workaround Y2k38 issues in java certificate generation 2018-03-01 08:41:28 -06:00
William Vu d843750801
Land #9639, multi/handler exit on disabled handler
If DisablePayloadHandler is set, abort instead of hanging.
2018-02-28 19:48:36 -06:00
Matthew Kienow 2d5f089ee6
Land #9646, fix stale module cache issue 2018-02-28 15:17:00 -05:00
Jeffrey Martin 425f949bf8
Land #9638, treat 'password must change' as a successful login 2018-02-28 11:28:38 -06:00
christopher lee 0949e0a501 Don't munch exception 2018-02-28 11:28:07 -06:00
christopher lee cea61e7aa4 Fix bug with remove_from_cache 2018-02-28 11:21:34 -06:00
christopher lee 1686b82a40 Adhere to style guide by using unless 2018-02-28 11:11:26 -06:00
Jeffrey Martin b90f960edd
lock protobuf version 2018-02-28 11:11:17 -06:00
christopher lee 8b4c7b886f Updated to use delete_if 2018-02-28 11:00:40 -06:00
christopher lee 964be3b5f0 Fix problem with stale module cache 2018-02-28 08:41:14 -06:00
h00die dfcbbfea83
Land #9641 spelling fix for wmap rc 2018-02-27 20:29:05 -05:00
Biswajit Roy a25ce0f259
Fixed Typos
Simply removed some typing mistakes.
2018-02-28 03:37:14 +05:30
Brent Cook 9597e5294d treat MUST_CHANGE + PASSWORD_EXPIRED as valid 2018-02-27 15:21:21 -06:00
Brent Cook 325ad7256e if multi/handler is disabled, exit 2018-02-27 04:30:09 -06:00
Brent Cook 66e3ac4c76 treat 'password must change' as a successful login 2018-02-26 17:57:31 -06:00
William Vu 0e4fc48df4
Fix #9602, a little defensive programming
Check for a nil message and unnecessary auth failures while looping.
2018-02-26 16:52:25 -06:00
Brent Cook 95a019675f
Land #9629, decouple hosts and targets for tests 2018-02-26 12:19:03 -06:00
Jeffrey Martin bb0d5ba8da
decouple hosts and targets for tests 2018-02-25 17:10:22 -06:00
Wei Chen 55a045eb76
Land #9623, Support Win 2008/7+ for enum_ms_product_keys
Land #9623
2018-02-25 14:56:39 -06:00
Rob Fuller 0c82b0a922
Support Windows 2008/7 and above
Probably about time that we supported versions less than 10 years old :)
2018-02-24 16:06:55 -05:00
h00die 023bf79097
Land #9310 docs for many aux scanners 2018-02-24 14:32:33 -05:00
h00die c56d7967e7 finished cleanup 2018-02-24 14:31:52 -05:00
h00die 15a29a1994 finished up comments 2018-02-24 13:39:14 -05:00
Brent Cook 2e568aa660
Land #9607, upgrade osx shells to osx meterpreter 2018-02-23 11:11:44 -06:00
Brent Cook 4365bd3af5 bump rex-exploitation 2018-02-23 11:10:49 -06:00
Brent Cook cd728defed Merge branch 'master' into land-9607- 2018-02-23 11:09:20 -06:00
William Vu 7663e5c1f6
Land #9601, ms17_010_eternalblue reliability fixes 2018-02-22 15:30:45 -06:00
James Barnett 08f10d7da1
Comments 2018-02-22 14:51:17 -06:00
James Barnett 1cee532526 Merge branch 'rapid7/master' into goliath 2018-02-22 14:49:45 -06:00
James Barnett e396dbabcd
Dont save email addresses as valid users
Also add initial module doc for owa_login
2018-02-22 14:48:35 -06:00
Brent Cook 65b0d9555f
Land #9611, Fix bug causing all OWA logins to appear valid 2018-02-22 11:55:36 -06:00
James Barnett e531dbc976
Fix bug causing all logins to appear valid
The headers we were looking for were a little too loose
and were incorrectly identifying all responses as successful
login attempts
2018-02-22 11:25:35 -06:00
dmohanty-r7 0f0270b144
Land #9610, lock ruby_smb to '0.0.18' 2018-02-22 11:03:40 -06:00
Brent Cook d737f77b84 bump gems, lock ruby_smb for now 2018-02-22 10:45:49 -06:00
bwatters-r7 4b8a8fa2b1
Land #9441, Create exploit for AsusWRT LAN RCE
Merge branch 'land-9441' into upstream-master
2018-02-22 10:40:45 -06:00
Jacob Robles 738d6ab33a
Land #9604, Fix logged errors when running without Python 3.6 / gmpy2 2018-02-22 08:11:30 -06:00
Brent Cook 99e278fa29
Land #9584, Fix reverse_php_ssl infinite loop 2018-02-22 07:03:52 -06:00
Brent Cook 855fbc1689
Land #9602, Create sessions with the Fortinet SSH backdoor scanner 2018-02-22 06:04:18 -06:00
Trevor Sibanda 77b3673e38 Fix reverse_php_ssl infinite loop 2018-02-22 08:42:54 +00:00
Brent Cook 7e665ab287 check for extra libraries explicitly, fail gracefully 2018-02-21 21:54:58 -06:00
Brent Cook 3f88e59516 handle Python 3.5/3.6 differences so we always have a UTF-8 string 2018-02-21 21:54:27 -06:00
William Vu a9d6845f25 Add module doc 2018-02-21 21:50:08 -06:00
William Vu 3880f6a65e Finally fix "Unknown admin user ''" after 2yrs
The failed password auth was necessary after all. I misread the PoC. :'(

Apparently the password auth sets the username, while the backdoored
keyboard-interactive auth sets the password.
2018-02-21 20:44:35 -06:00
William Vu cc2495dd9c Explain fortinet-backdoor -> FortinetBackdoor 2018-02-21 17:05:30 -06:00
William Vu a5d78b82d4 Add require for Net::SSH::CommandStream 2018-02-21 15:51:53 -06:00