Commit Graph

45355 Commits (c90fabee605bc6be8d0d8a48e562fab56a7c07d3)

Author SHA1 Message Date
James Barnett c50b8b5c4f
Store loot data as-is, not base64 2018-02-08 18:15:31 -06:00
James Barnett bbd25fc97b
WIP: getting services add working 2018-02-08 17:20:50 -06:00
James Barnett effd0c3db2
Fix bug when not updating type 2018-02-08 16:07:20 -06:00
James Barnett f12405191e
Fix a few bugs and PR comments 2018-02-08 15:10:44 -06:00
James Barnett f114092445 Merge branch 'goliath' into MS-2833 2018-02-08 14:32:03 -06:00
jbarnett-r7 aeee3bbe28
Merge pull request #15 from clee-r7/MS-2941-remote-host-update
MS-2941: Remote Host Update
2018-02-08 14:30:28 -06:00
Brent Cook 44b08feeb0
Land #9525, Update mysql_hashdump for MySQL 5.7 and above 2018-02-08 13:56:26 -06:00
Brent Cook 1bb5499fce fix whitespace 2018-02-08 13:55:40 -06:00
James Barnett be1ce573e7
Fix style issue 2018-02-08 13:35:28 -06:00
James Barnett 1d2af0658c
Fix bug with updating loot type 2018-02-08 13:26:40 -06:00
Jacob Robles c642d420c2
Land #9489, Add scanner for the Bleichenbacker oracle (AKA: ROBOT) 2018-02-08 12:55:02 -06:00
Matthew Kienow de0c4c0572
Allow update of host workspace 2018-02-08 13:19:27 -05:00
Jacob Robles c9a3894bdb
Removed require statements 2018-02-08 12:00:47 -06:00
Osanda Malith Jayathissa 00ead05237
Update for MySQL 5.7 and above
Starting from MySQL 5.7 the password column was changed to authentication_string. I've added a check to determine the version. Tested on both MySQL 5.6 and 5.7.
2018-02-08 13:40:35 +00:00
Brendan Coles 5b251ae672 Support shell sessions on Debian 2018-02-08 11:29:09 +00:00
Brent Cook b1d0529161 prefer 'shell' channels over 'exec' channels for ssh
If a command is not specified to CommandStream, request a "shell"
session rather than running exec. This allows targets that do not have a
true "shell" which supports exec to instead return a raw shell session.
2018-02-08 02:21:16 -06:00
Brent Cook ca4ad1d0c4
Land #9478, Improve Dup Scout BOF exploit 2018-02-07 23:51:14 -06:00
James Barnett 542e8a3538
Remove unneeded workspace 2018-02-07 19:51:23 -06:00
Jacob Robles ab0d18669e
Doc Changes 2018-02-07 19:26:39 -06:00
Jacob Robles 724a0e29f6
Update Parsing, Added Rescue 2018-02-07 19:19:58 -06:00
Spencer McIntyre b88eff7e97 Switch the docs search order 2018-02-07 16:43:15 -05:00
Spencer McIntyre 214c137b4a Don't use parenthesis around pgets 2018-02-07 15:53:11 -05:00
jbarnett-r7 352cf295b5
Merge branch 'goliath' into MS-2833 2018-02-07 14:38:26 -06:00
James Barnett 5b35662dbf
Address PR comments 2018-02-07 14:21:31 -06:00
James Barnett cb093d8063
Use proper logging 2018-02-07 10:25:56 -06:00
Brent Cook d1b1d67c02
Land #9521, flush pipe buffers when a process exists in mettle 2018-02-07 08:20:21 -06:00
Jacob Robles e53500f397
Fixed Headings 2018-02-07 08:11:58 -06:00
Brent Cook 1af1631ef6 bump cached payload sizes 2018-02-07 08:06:37 -06:00
Brent Cook c7ccfb7952 update payload to flush process channel buffers on exit 2018-02-07 08:04:34 -06:00
Jacob Robles 1de8ec1073
Implemented Suggested Changes
Updated documentation headings and function/filename formatting.
Updated module options and formatting. Added check for file to parse.
2018-02-07 08:01:54 -06:00
Brendan Coles 7cbf89f055 Add documentation 2018-02-07 13:17:54 +00:00
Matthew Kienow 52b8f405bd
Refactor change host methods, remove debug output 2018-02-06 18:54:05 -05:00
James Barnett 74f811d865
Add TODOs 2018-02-06 17:31:42 -06:00
James Barnett 5bc38206c0
Few more loot bugs 2018-02-06 17:22:09 -06:00
James Barnett 0dfc10b1ec
Fix a couple of bugs in loot servlet 2018-02-06 17:02:17 -06:00
James Barnett 6e2503bbd8
Add loot update 2018-02-06 16:16:22 -06:00
Matthew Kienow 629f79ebf7
WIP remote host update 2018-02-06 16:11:46 -05:00
青鸟 0abee0303f
add change 2018-02-07 03:48:36 +08:00
Spencer McIntyre 0ad7d10e05 Use a continuation flag to disable tab completion 2018-02-06 14:44:55 -05:00
Spencer McIntyre 6d7579d907 Support breaking commands into multiple lines 2018-02-06 14:29:11 -05:00
bluebird 278e9a92fc add module and documentation 2018-02-06 20:30:34 +08:00
Jacob Robles 1233bb855c
msftidy checks 2018-02-05 22:54:03 -06:00
Jacob Robles 1e9e9c9be0
Ulterius Server < v1.9.5.0 Directory Traversal
Adds documentation and module for Ulterius Server
directory traversal vulnerability.
2018-02-05 22:50:09 -06:00
James Barnett 49b88dbef7
Pass loot search using query string 2018-02-05 18:15:05 -06:00
James Barnett c72c41e7f3
Move loot search to db_manager 2018-02-05 16:43:02 -06:00
jbarnett-r7 f176e339bc
Merge pull request #12 from clee-r7/ms-2911
Ms 2911
2018-02-05 15:46:28 -06:00
James Barnett 272c5bc43e
key file isnt always necessary, but cert is. 2018-02-05 15:23:00 -06:00
Spencer McIntyre 8b56bbc541 Update mkdir as well for path expansion 2018-02-05 16:16:53 -05:00
Spencer McIntyre c70bcb5869 Use a constant for the regex and update rmdir too 2018-02-05 16:06:16 -05:00
christopher lee 1759621b03 Make 8080 default service port 2018-02-05 15:01:03 -06:00