Commit Graph

48281 Commits (c89d8f8fb7ef1f3ad540ed72429a482e59a98958)

Author SHA1 Message Date
Brent Cook c89d8f8fb7 fix user enumeration methods, be more robust 2018-09-24 22:17:32 -05:00
pwnforfun e1ec0ec899 hash_dump now working properly up to Mac OS X High Sierra (10.13.6 included) 2018-09-06 12:00:36 +02:00
Metasploit 0777e5d448
automatic module_metadata_base.json update 2018-09-05 19:56:26 -07:00
Wei Chen d23b252393
Land #10592, support ERB for foxit_reader_uaf.rb 2018-09-05 21:48:52 -05:00
Wei Chen 254e8b9fd0 Cleanup for foxit_reader_uaf 2018-09-05 21:47:57 -05:00
Metasploit d764b53ca2
automatic module_metadata_base.json update 2018-09-05 19:15:08 -07:00
Wei Chen 266dec45cd
Land #10564, Add Ghostscript exploit from taviso 2018-09-05 21:07:50 -05:00
Wei Chen 6b879e3cde
Apply changes from master 2018-09-05 20:59:54 -05:00
Wei Chen 88ff85c09f
Land #10591, Fix target DisableNops not being passed to payload 2018-09-05 20:56:48 -05:00
William Vu f34146b288 Add module doc 2018-09-05 19:57:15 -05:00
William Vu 243267b2f5 Add Linux dropper target 2018-09-05 19:57:12 -05:00
William Vu 61044e8bca Refactor targets to align with current style 2018-09-05 19:56:32 -05:00
William Vu 692ddc8b8b Eschew updating imagemagick_delegate
The hype is over, and the target was provided as a bonus. Now update the
module language to reflect that.
2018-09-05 19:56:32 -05:00
William Vu 1491f13bd5 Add Ghostscript failed restore exploit 2018-09-05 19:56:32 -05:00
William Vu 13ff71b879 Clean up previous modules
Missed in 35670713ff.
2018-09-05 19:56:32 -05:00
Shelby Pace 55bf6e5dd4
removed require in erb file 2018-09-05 18:09:29 -05:00
William Vu e2428b5c20 Fix target DisableNops not being passed to payload 2018-09-05 18:07:54 -05:00
Shelby Pace 6a3a4de289
included path to erb, removed multiline pdf string 2018-09-05 14:09:10 -05:00
Shelby Pace 60cdd6dfe2
added erb file for foxit_reader_uaf exploit 2018-09-05 14:07:56 -05:00
Brent Cook d25aad571f
Land #10474, add documention for windows/shell/reverse_ord_tcp 2018-09-05 09:04:47 -05:00
Tim W e20b625698
Land #10585, fix #10577, fix "Exploit failed: TypeError no implicit conversion of Array into Integer" 2018-09-05 02:53:09 +08:00
Jacob Robles 0a2b0f8cec
Remove trailing comma
Fix issue causes target.ret to be an array
2018-09-04 07:43:43 -05:00
James Barnett c8f57435df
Land #10550, update msfdb to persist https data service 2018-09-03 11:21:42 -05:00
Tim W d5e78ab66f
Land #10437, sync some linux local libraries to solaris 2018-09-03 22:46:50 +08:00
Matthew Kienow 34f87efb2b
Land #10532, enhance db_connect for data services 2018-09-03 09:43:34 -04:00
James Barnett 1c8a2f3ee1
Raise an error when http service fails to connect
Also fix a bug where failed Postgres connections werent being raised
2018-09-02 15:51:13 -05:00
Matthew Kienow 14f2907d73
Update to handle new db_connect format 2018-08-31 23:12:23 -04:00
James Barnett b4c731d4ca
Check name validity at a higher level 2018-08-31 18:16:32 -05:00
bwatters-r7 8474c331fc
Land #10571, Bump metasploit payloads to 1.3.47
Merge branch 'land-10571' into upstream-master
2018-08-31 18:03:10 -05:00
bwatters-r7 4d04161556
Bump metasploit payloads to 1.3.47 2018-08-31 17:47:02 -05:00
James Barnett 084607b955
Set current_data_service when disconnecting from http 2018-08-31 16:48:33 -05:00
James Barnett 185fe56e82
Add message when connecting via yaml 2018-08-31 16:13:17 -05:00
James Barnett a413b27e57
Fix bug connecting to https servers 2018-08-31 15:49:29 -05:00
Brent Cook 85a857d115
Land #10567, Bump kiwi version 2018-08-31 15:25:40 -05:00
Wei Chen 34944ff5be
Land #10568, Update weblogic module docs 2018-08-31 14:05:46 -05:00
Metasploit 21f2b5e298
automatic module_metadata_base.json update 2018-08-31 11:55:00 -07:00
Wei Chen 0dea5fcfd9
Land #10565, Add Dolibarr ERP/CRM Auxiliary Module 2018-08-31 13:47:46 -05:00
James Barnett 1e6f19e1de
Update db_save message when no valid service connected
Also add the current data service name to db_status
2018-08-31 12:54:08 -05:00
James Barnett bc4a0345dc
Fix bug preventing yaml connections 2018-08-31 11:26:08 -05:00
Shelby Pace aa9d0d7c6c
using uri_encode 2018-08-31 08:41:25 -05:00
Shelby Pace b1151b9d12
modified login_uri 2018-08-31 08:08:46 -05:00
Jacob Robles e49435a766
Update weblogic module docs
Update the module docs to match the new name
of the module.
2018-08-31 06:00:41 -05:00
OJ 41b0dc1dfe
Update label for the kiwi extention to match latest ver
I'll also update this PR with the udpated binaries when the paylaods
repo has landed https://github.com/rapid7/metasploit-payloads/pull/298
2018-08-31 09:31:57 +10:00
James Barnett 6ddf4f4c22
Refactor db_connect for updated usage
db_connect will now automatically save the data service it connects to
db_save will be used to set the current data service as default
add a db_remove command to delete a saved data service
2018-08-30 18:19:14 -05:00
Metasploit cb026f9f82
automatic module_metadata_base.json update 2018-08-30 14:06:54 -07:00
William Vu b9c9064c22
Land #10566, struts2_rest_xstream normalize_uri 2018-08-30 15:59:13 -05:00
William Vu 7c7f63df45 Fix missing normalize_uri in struts2_rest_xstream
I missed this one previously. May not be necessary but nice to have.
2018-08-30 15:56:43 -05:00
Shelby Pace 628ea736a0
delete newline 2018-08-30 15:54:04 -05:00
Shelby Pace d0cc05b074
added documentation 2018-08-30 15:28:52 -05:00
Shelby Pace 42af28a86a
printing and storing credentials 2018-08-30 14:17:37 -05:00