infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
45,452 Commits
7 Branches
556 Tags
419 MiB
Commit Graph

45452 Commits (c28fe65d9820c53b934d329a47b9e662e16ca0a6)

Author SHA1 Message Date
William Vu a9d6845f25 Add module doc 2018-02-21 21:50:08 -06:00
William Vu 3880f6a65e Finally fix "Unknown admin user ''" after 2yrs 
The failed password auth was necessary after all. I misread the PoC. :'(

Apparently the password auth sets the username, while the backdoored
keyboard-interactive auth sets the password.
 2018-02-21 20:44:35 -06:00
William Vu cc2495dd9c Explain fortinet-backdoor -> FortinetBackdoor 2018-02-21 17:05:30 -06:00
William Vu a5d78b82d4 Add require for Net::SSH::CommandStream 2018-02-21 15:51:53 -06:00
William Vu 854ac67b8e Use start_session in fortinet_backdoor 
Still get "Unknown admin user ''" from a shell channel request,
@busterb's more complete implementation notwithstanding.

Hoping we fix this in a subsequent commit or related PR.

Please see #6612 and #9524.
 2018-02-21 15:33:34 -06:00
Aaron Soto af45c1764b
Tweak exception handling and timing of `ms17_010_eternalblue` 2018-02-21 13:40:04 -06:00
Brent Cook 78822fd799
Land #9524, prefer 'shell' channels over 'exec' channels for ssh CommandStream 2018-02-21 06:59:09 -06:00
William Vu 9cbc55ce40
Land #9593, finger_users regex fix 2018-02-21 01:27:40 -06:00
Aaron Soto bda7fefa7f
Land #9444 - `hsts_eraser` module and docs 2018-02-20 21:22:55 -06:00
Jacob Robles b2cb4c425d
Land #9594, CloudMe Sync v1.10.9 Buffer Overflow 2018-02-20 17:49:19 -06:00
Jacob Robles a23240a742
Update Documentation 
[ticket: #9594]
 2018-02-20 17:48:21 -06:00
Jacob Robles 6a62ca15e7
Remove NOPS 
[ticket: #9594]
 2018-02-20 17:40:33 -06:00
Daniel Teixeira 04882b0464
Fixed indentation 2018-02-20 22:00:36 +00:00
Daniel Teixeira 745ad4d727
CloudMe Sync Client BoF 2018-02-20 21:57:13 +00:00
Daniel Teixeira ff3b318abd
CloudMe Sync Client documentation 2018-02-20 21:56:31 +00:00
James Lee d6206dc046
Better regex in finger_users 2018-02-20 15:48:00 -06:00
Jacob Robles 107a41a4ce
Land #9561, Disk Savvy Enterprise v10.4.18 built-in server buffer overflow 2018-02-20 15:42:12 -06:00
Jacob Robles ab6f6d75d2
Update Documentation 
[ticket: #9561]
 2018-02-20 15:37:40 -06:00
Jacob Robles d02bf40d69
Modified Exploit 
Remove NOPS that weren't needed and freed up space for a larger payload.

[ticket: #9561]
 2018-02-20 15:35:43 -06:00
Pedro Ribeiro f89cebbd89
Add sploit doc 2018-02-20 19:35:10 +00:00
Tim W f10d58bc2d upgrade osx shells to osx meterpreter 2018-02-21 02:54:38 +08:00
Brent Cook aec1b253f7
Land #9589, add some more payload specs 2018-02-20 11:12:35 -06:00
Jeffrey Martin ea9b6d894d
add missing payload specs 2018-02-20 09:38:24 -06:00
Brent Cook 8f3d15a6e1
Land #9588, Fix silent fail on missing argument to wmap_sites -d idx 2018-02-20 07:13:32 -06:00
klayklogg 74021d9570 Fix silent fail on missing argument to wmap_sites -d idx 2018-02-21 00:43:20 +13:00
Brent Cook 36e8f7a2bc
Land #9585, fix ctrl-D handling with block continuation 2018-02-20 04:52:09 -06:00
Brent Cook 99965c142b remove duplicate check 2018-02-20 04:42:49 -06:00
Brent Cook bb3a11dd20 use ctrl-d to cancel input instead 2018-02-20 04:40:00 -06:00
Brent Cook f5f7b4d25a handle sessions still open 2018-02-20 03:31:20 -06:00
Brent Cook e995ccfc33 make this a little easier to read 2018-02-20 03:27:55 -06:00
Brent Cook e26fb49c99 if we have no more input from the console, quit 2018-02-20 03:27:38 -06:00
Brent Cook 42b4381ce5
Land #9583, move osx stage binary 2018-02-20 03:15:14 -06:00
Tim W a01f0f3023 fix #9366, fix osx x64 stage location 2018-02-20 13:50:44 +08:00
Brent Cook 3d8451e616
Land #8997, add local 'ls' support to Meterpreter sessions 2018-02-19 23:21:59 -06:00
Brent Cook 05e002e3c5
Land #9366, Add x64 staged Meterpreter for macOS 2018-02-19 23:15:03 -06:00
Brent Cook 69c7e83a55
Land #9164, add OWA 2016 support 2018-02-19 23:12:27 -06:00
Chris Higgins 74c6e21f49
Lands #9504, MagniComp SysInfo privilege escalation 2018-02-19 22:47:33 -06:00
Brent Cook 56c00a8cb6 initial OWA 2016 support 2018-02-19 21:43:49 -06:00
Brent Cook b9c1a64d20
Land #9505, Support local knowledge base documents 2018-02-19 21:39:55 -06:00
Brent Cook 93689f0f0e
Land #9270, Implement plugin API for hooking database events 2018-02-19 21:36:26 -06:00
Brent Cook 4e9d900a17
Land #9507, Expand paths for meterpreter's cp, mv, and rm commands 2018-02-19 21:26:03 -06:00
Brent Cook 3d67d2ed12
Land #9443, Add warning to FileDropper for deleting CWD 2018-02-19 21:22:39 -06:00
Brent Cook 25d1642664
Land #9575, Fix wmap_sites -a exception on missing url 2018-02-18 20:49:39 -06:00
Brent Cook 310ab9c11d
Land #9573, fixes for bind_named_pipe 2018-02-18 20:47:20 -06:00
Brent Cook e48f53851e
Land #9568, handle mismatch uid/gids in docker images 2018-02-18 20:42:58 -06:00
klayklogg e6e595000f Fix silent fail on missing url 2018-02-19 12:07:33 +13:00
UserExistsError b3f26ea55f bind_named_pipe fixes 2018-02-18 10:31:57 -07:00
klayklogg ca6c55047e Fix wmap_sites -a exception on missing url 2018-02-19 01:17:48 +13:00
Christian Mehlmauer 70ad41903b
another approach 2018-02-17 20:12:35 +01:00
Quentin Kaiser 9e3f12665e Plaintext for console type to see what's going on. 2018-02-17 20:11:05 +01:00