ce9cfa5727
bit-struct updated, no need for my branch anymore
2017-05-26 23:00:21 -05:00
f0f99ad479
nttrans packet setup correctly,everything broken
...
got the nttrans packet setup correctly but somewhere
along the line i broke the whole exploit wtf?
2017-05-26 14:54:46 -05:00
b3e99ee9d2
point to local gem copy for testing and dev
...
remove this later, use a local copy of rubysmb
2017-05-26 12:30:19 -05:00
15b3b7de41
Bump version of framework to 4.14.23
2017-05-26 10:02:14 -07:00
dc67fcd5a8
use RubySMB for anonymous login
...
use the new anonymous login capabilities in
RubySMB
2017-05-24 15:40:05 -05:00
52363aec13
Add module for CVE-2017-8895, UAF in Backup Exec Windows agent
...
This module exploits a use-after-free vulnerability in the handling of
SSL NDMP connections in Veritas/Symantec Backup Exec's Remote Agent for
Windows. When SSL is re-established on a NDMP connection that previously
has had SSL established, the BIO struct for the connection's previous
SSL session is reused, even though it has previously been freed.
Successful exploitation will give remote code execution as the user of
the Backup Exec Remote Agent for Windows service, almost always
NT AUTHORITY\SYSTEM.
2017-05-24 00:18:20 +12:00
18f520382b
Bump version of framework to 4.14.22
2017-05-19 12:12:27 -07:00
c54c999efc
Bump version of framework to 4.14.21
2017-05-19 10:02:32 -07:00
22828fcc0f
Land #8406 , add compatibility shims for older Ruby versions
2017-05-18 21:50:45 -05:00
126c078ced
Bump version of framework to 4.14.20
2017-05-18 11:53:33 -07:00
94e4dc2938
fix for smb_login errors
...
do not try the TreeConnect if the SESSION_SETUP
has already failed.
2017-05-18 11:26:03 -05:00
c59371dd5e
add ruby backports compat library
2017-05-17 23:41:20 -05:00
729f2a9ab8
Bump version of framework to 4.14.19
2017-05-16 14:09:45 -07:00
405f2c6ca1
Bump version of framework to 4.14.18
2017-05-12 10:10:30 -07:00
6485042162
update rubyntlm to use the released gem
2017-05-12 05:59:11 -05:00
337db56d4f
bump payloads
2017-05-11 14:57:10 -05:00
638320a848
Update rex-exploitation to 0.1.13
2017-05-10 15:07:21 -05:00
fd05cea033
Update packetfu and remove version lock
2017-05-09 11:03:32 -05:00
7f1e2e6c71
bump metasploit-payloads
2017-05-08 17:34:55 -05:00
0bc9d9259d
meterpreter bugfixes
...
fixed stdapi_fs_mount_show to show full mapped drive path for Python
Meterpreter on Windows
Updated the Windows Meterpreter `getprivs` command to list all privileges
2017-05-08 16:26:32 -05:00
a0b50390c5
Bump version of framework to 4.14.17
2017-05-05 10:02:17 -07:00
2f1df4d4c2
Bump version of framework to 4.14.16
2017-05-02 11:11:20 -07:00
7c11e0065d
update mettle
2017-04-26 18:00:50 -05:00
89e81253ed
Bump version of framework to 4.14.15
2017-04-21 10:02:32 -07:00
f90911e09e
Bump version of framework to 4.14.14
2017-04-19 09:35:29 -07:00
05e15cee18
Bump version of framework to 4.14.13
2017-04-18 08:17:22 -07:00
1d52e269a7
update ruby_smb
2017-04-17 22:20:02 -05:00
7613bd8964
bump metasploit-payloads, fix 64-bit builds
2017-04-16 08:52:41 -05:00
fe33fe5571
bump payloads with new keyscan code
2017-04-14 21:54:50 -05:00
42122d2835
Land #8238 , move SMB2 support back into smb_login, add simpler permissions checks
2017-04-14 14:06:46 -05:00
c16e2fa88e
bump to prerelease rubyntlm to get rid of Ruby 2.4 warning msgs.
2017-04-14 14:06:19 -05:00
7eaba1fdee
bump payloads
2017-04-14 13:17:25 -05:00
eedbf25f06
bump android meterpreter, adding in-app screenshot support
2017-04-14 12:38:53 -05:00
f8a94de671
bump metasploit-payloads, enhance windows support in python meterpreter
2017-04-14 12:28:52 -05:00
036d579228
Bump version of framework to 4.14.12
2017-04-14 10:04:35 -07:00
adeb4d10d7
smb2 login scanner admin check now working
...
we can now check for admin privs in the smb2
login scanner
MS-2636
2017-04-13 14:40:32 -05:00
45d5701473
update ruby_smb to 0.0.9
...
update to newest version to get
TreeConnect capability
MS-2636
2017-04-13 12:01:51 -05:00
cdccd1df19
add xmlrpc as an explicit dependency
2017-04-13 07:12:38 -05:00
ced1412ee0
Bump version of framework to 4.14.11
2017-04-12 14:39:40 -07:00
157d28ab3d
make metasploit-aggregator a framework package
2017-04-12 12:33:13 -05:00
7fc05bcb25
Bump version of framework to 4.14.10
2017-04-07 10:07:31 -07:00
2276bd0c7d
switch back to released octokit gem
2017-04-06 15:36:02 -05:00
c845745f0b
remove platform restriction on metasploit-aggregator
2017-04-06 13:09:09 -05:00
4e79aaccb7
Bump version of framework to 4.14.9
2017-04-04 16:14:28 -07:00
3237575024
add ruby 2.1-2.4, update gems with in-flight 2.4 fixes
2017-04-04 04:06:35 -05:00
9edc08cd36
Bump version of framework to 4.14.8
2017-03-31 14:38:29 -07:00
b6085e188d
Bump version of framework to 4.14.7
2017-03-31 10:02:19 -07:00
9f75a1d392
Land #8174 , bump rex-text to fix problems running split-line VBA code
2017-03-31 11:40:21 -05:00
ce87174373
bump rex-text to fix problems running split-line VBA code
2017-03-31 11:34:41 -05:00
a937b00f85
bump rex-core, change 'sleep' to allow < 200ms durations
2017-03-31 11:33:21 -05:00
2d9c2321d1
add ruby_smb as a dep
...
added the ruby_smb library to the gemspec
MS-2557
2017-03-28 16:12:12 -05:00
51646e44a1
Bump version of framework to 4.14.6
2017-03-24 10:02:24 -07:00
8976faa3d1
Bump version of framework to 4.14.5
2017-03-23 08:41:49 -07:00
df181c1792
Bump version of framework to 4.14.4
2017-03-21 14:58:37 -07:00
9542087642
bump mettle to 0.1.8
2017-03-21 16:45:25 -05:00
2701fef34b
bump to metasploit-payloads 1.2.29
2017-03-17 17:34:16 -05:00
6200a3abb8
Bump version of framework to 4.14.3
2017-03-17 10:02:41 -07:00
0631bc4c29
bump payloads and such
2017-03-16 23:51:51 -05:00
91a4657c36
Bumped the metasploit-payloads version and cache sizes with PR#8043
2017-03-15 19:02:21 -05:00
089940dd4f
Bump to metasploit-payloads v1.2.17 which has the needed code changes
2017-03-15 18:38:47 -05:00
db581a040a
Bump version of framework to 4.14.2
2017-03-07 07:01:57 -08:00
78976091df
Land #7902 , add initial Metasploit Aggregator for https Meterpreter sessions.
2017-03-07 02:11:01 -05:00
031285d49a
update payloads
2017-02-28 03:04:53 -06:00
18445cf341
bump rex-text, get IPAddr sorting
2017-02-27 11:25:06 -06:00
1c71952529
Update Gemfile.lock because I forgot to in PR#8014
2017-02-27 11:09:14 -06:00
5383900a54
Merge branch 'master' into feature/aggregator
2017-02-24 23:59:02 -06:00
f9e4fd54fe
Bump version of framework to 4.14.1
2017-02-24 13:31:17 -08:00
2631259919
Land #7973 , Enable cert validation for Nexpose
...
This PR enables connection to a Nexpose console using the
nexpose client gem.
It also allows you to connect using a trusted certificate
instead of simply overriding the SSL validation.
2017-02-24 14:27:24 -06:00
0f4e03be7b
Bump version of framework to 4.13.27
2017-02-24 10:03:33 -08:00
1ca0a24177
Up rex-exploitation
2017-02-23 15:58:19 -06:00
9186b3298a
Merge branch 'master' into feature/aggregator
2017-02-22 10:08:11 -06:00
01558d3d51
Bump version of framework to 4.13.26
2017-02-21 14:01:15 -08:00
b2ed082c75
Merge branch 'master' into feature/aggregator
2017-02-21 15:11:08 -06:00
8469323519
update metasploit-aggregator in Gemfile.lock
2017-02-21 15:04:29 -06:00
647020289f
Bump version of framework to 4.13.25
2017-02-17 17:03:42 -08:00
86c04cd9f4
update metasploit payloads with Python fixes
2017-02-17 18:52:14 -06:00
6e62899e1c
Bump version of framework to 4.13.24
2017-02-17 10:02:51 -08:00
9f5582a4e4
update Gemfile.lock for master merge
2017-02-16 15:31:40 -06:00
cbfe18e4d7
use certificates in nexpose
2017-02-16 14:34:02 -06:00
184707c6fc
Bump version of framework to 4.13.23
2017-02-13 16:04:35 -08:00
44d229ad49
Bump version of framework to 4.13.22
2017-02-10 10:02:43 -08:00
d81bdc1c02
Bump version of framework to 4.13.21
2017-02-07 17:27:47 -08:00
2d1989ef16
bump rex-core, fix path normalization
...
Brings in fixes from https://github.com/rapid7/rex-core/pull/4
2017-02-07 19:17:44 -06:00
40c86567aa
import packetfu fix for https://github.com/packetfu/packetfu/pull/163
2017-02-06 15:51:01 -06:00
9a5d5eec2e
Bump version of framework to 4.13.20
2017-02-03 10:04:05 -08:00
f8c2bd4f52
expand remote sessions list detail retrieval
2017-02-02 15:21:09 -06:00
321fa91c75
Bump version of framework to 4.13.19
2017-02-01 11:28:53 -08:00
be170ab8b2
Bump version of framework to 4.13.18
2017-01-31 14:20:40 -08:00
95449a846b
Bump version of framework to 4.13.17
2017-01-27 10:02:17 -08:00
9dbcaf7227
bump Gemfile.lock
2017-01-26 11:20:17 -06:00
4af1b595cd
update Gemfile.lock
2017-01-25 10:32:23 -06:00
2e1d381e2e
bump gem
2017-01-24 09:48:40 -06:00
d9602f49a2
bump payloads
2017-01-22 15:45:45 -06:00
77e596263b
update lock
2017-01-22 10:43:06 -06:00
6a2d036ea8
depend on regular rb-readline, bugs fixed upstream
2017-01-22 10:20:05 -06:00
28211c3b73
bump payloads
2017-01-22 10:02:41 -06:00
c2e4a50924
Bump version of framework to 4.13.16
2017-01-20 10:02:29 -08:00
56ed8bc021
Bump version of framework to 4.13.15
2017-01-13 10:05:02 -08:00
f11cf92040
bump mettle gem to include pivoting support
2017-01-10 16:43:49 -06:00
f311511e6d
Bump version of framework to 4.13.14
2017-01-10 14:03:16 -08:00
b074042b99
Bump version of framework to 4.13.13
2017-01-06 12:00:26 -08:00
1ef2e54539
Bump version of framework to 4.13.12
2017-01-06 10:03:13 -08:00
7ef4db1465
Bump version of framework to 4.13.11
2017-01-04 14:53:33 -08:00
f25ced04af
Update rex-exploitation to 0.1.8
2017-01-03 12:04:18 -06:00
36e0bad421
Update rex-exploitation to 0.1.7
2016-12-30 00:56:02 -06:00
fae4751771
Land #7744 , update kiwi extension to Mimikatz 2.1
2016-12-29 16:22:45 -06:00
cd950e91a9
bump payloads gem
2016-12-29 15:59:07 -06:00
f50fa516f4
Bump version of framework to 4.13.10
2016-12-23 10:01:58 -08:00
5702bd6745
Land #7674 , Move migration stub generation code into msf
2016-12-22 17:53:00 -06:00
ea704211ca
incorporate payload stub generation changes
2016-12-22 17:50:43 -06:00
3a998fada2
Bump version of framework to 4.13.9
2016-12-18 13:22:52 -08:00
c5c710f837
Bump version of framework to 4.13.8
2016-12-16 10:02:02 -08:00
12af07d8cb
Bump version of framework to 4.13.7
2016-12-09 10:03:22 -08:00
50f95f9940
Land #7681 , Get ready for stageless mettle
2016-12-09 09:31:47 -06:00
6dcdf74850
bump mettle gem
2016-12-09 09:27:56 -06:00
eeef8fa6ad
Add new arches to UUIDs
2016-12-08 16:29:43 -06:00
a54c0c4e1f
Bump version of framework to 4.13.6
2016-12-07 09:00:16 -08:00
a99042a54d
Update Gemfile.lock
2016-12-07 14:58:27 +10:00
7346223a65
update payloads
2016-12-06 07:16:44 -06:00
7edb5e19e2
Bump version of framework to 4.13.5
2016-12-05 15:09:06 -08:00
76db530a86
Bump version of framework to 4.13.4
2016-12-02 10:02:53 -08:00
f46ca66858
Bump version of framework to 4.13.3
2016-11-28 06:35:44 -08:00
79e8ffd983
Bump version of framework to 4.13.2
2016-11-25 10:03:24 -08:00
d7dce28018
bump mettle to get fix for UUID encoding
2016-11-21 00:57:50 -06:00
05cb5edaac
update payload gems
2016-11-20 19:10:27 -06:00
f313389be4
Merge remote-tracking branch 'upstream/master' into land-7507-uuid-arch
2016-11-20 19:08:56 -06:00
643a5511cf
Bump version of framework to 4.13.1
2016-11-18 10:01:48 -08:00
383314530a
Bump version of framework to 4.13.0
2016-11-16 07:48:26 -08:00
8d1d017188
Land #7562 , fix rex-text column padding for unicode values
2016-11-15 07:12:37 -06:00
fafc749447
update metasploit payloads
2016-11-14 16:51:38 -06:00
203c8132c5
Update the Gemfile to pull in the new rex-text Gem
2016-11-14 14:16:36 -06:00
422ff57335
update metasploit-payloads
2016-11-14 02:53:18 -06:00
f116ad2c59
Bump version of framework to 4.12.42
2016-11-11 10:02:14 -08:00
77bacacb9c
Land rapid7/rex-exploitation#2 , Fix heap_spray method's return value type
...
This fixes #7520
2016-11-09 20:39:01 -06:00
5d5a4baaf7
back out rex-arch to avoid conflict with arch fixup PR
2016-11-08 17:42:42 -06:00
aeeefc46da
update gems
2016-11-08 17:31:33 -06:00
2c39a14ada
Bump version of framework to 4.12.41
2016-11-04 10:02:13 -07:00
57eabda5dc
Merge upstream/master
2016-10-29 13:54:31 +10:00
e936a6d7ce
Update Gemfile to include rex-arch update
2016-10-29 08:19:29 +10:00
ffc62964d6
Bump version of framework to 4.12.40
2016-10-28 10:02:36 -07:00
1a1841d441
rebuilt metasploit-payloads without debug info
2016-10-26 05:43:36 -05:00
6a23168800
Bump version of framework to 4.12.39
2016-10-25 12:22:52 -07:00
e29567f390
Bump version of framework to 4.12.38
2016-10-24 14:25:47 -07:00
bf59ba526a
Bump version of framework to 4.12.37
2016-10-24 07:35:41 -07:00
672e275877
update gems
2016-10-23 16:43:02 -05:00
8e0d866976
Bump version of framework to 4.12.36
2016-10-21 10:02:09 -07:00
85c26c64e2
Bump rex-exploitation gem version, see #7452 .
2016-10-19 08:04:10 -05:00
43fd0a8813
Land #7436 , Put Rex-exploitation Gem Back
2016-10-18 16:03:54 -05:00
c5faffddbd
bump gems
2016-10-17 04:48:12 -05:00
74340e9eb7
Bump version of framework to 4.12.35
2016-10-14 15:13:45 -07:00
b3666ff7ab
Bump version of framework to 4.12.34
2016-10-14 10:04:05 -07:00
741c4b8916
updated android payload gem, removed unused extension jar
2016-10-14 09:59:06 -05:00
933dc1df84
updated gems
2016-10-14 09:17:27 -05:00
aa748ecc83
update to working mettle gem 0.0.8
2016-10-11 21:12:00 -05:00
7894d5b2c1
Revert "Revert "use the new rex-exploitation gem""
...
This reverts commit f3166070ba
2016-10-11 17:40:43 -05:00
8f8a54bf8c
update to really-working payloads 1.1.21
2016-10-11 07:00:01 -05:00
deaa4047df
bump payloads (and sqlite too)
2016-10-10 23:58:19 -05:00
adb6f31e36
Bump version of framework to 4.12.33
2016-10-08 20:57:08 -07:00
f3166070ba
Revert "use the new rex-exploitation gem"
...
This reverts commit 52f6265d2e
2016-10-08 21:55:16 -05:00
8a6426df48
Bump version of framework to 4.12.32
2016-10-07 10:04:32 -07:00
a0ebf5ea2d
Bump version of framework to 4.12.31
2016-10-06 11:23:08 -07:00
a41281034a
Bump to latest rex-powershell gem...
2016-10-05 18:10:13 -05:00
52f6265d2e
use the new rex-exploitation gem
...
use the new rex-exploitation gem instead of the packaged in lbirary code
cleans up a huge ammount of space in framework
MS-1709
2016-10-05 09:05:27 -05:00
a68e9d33e1
Bump rex-powershell gem to latest.
2016-10-04 14:25:10 -05:00
55d267730e
bump metasploit-payloads
2016-10-04 07:16:39 -05:00
f6b2a3a173
bump gems
2016-10-02 21:23:34 -05:00
73c11a63b4
Bump version of framework to 4.12.30
2016-09-30 10:03:42 -07:00
e0cd4d082a
Bump MDM ver to get pro and msf back in sync.
...
Per discussion with @dmaloney-r7
2016-09-29 13:42:13 -05:00
a457f64e2a
update to latest release payload gem
2016-09-28 16:14:29 -05:00
cdf544be9e
Land #7364 , update to latest metasploit-payloads
2016-09-27 11:26:16 -05:00
8f9be92b1b
update to latest metasploit-payloads
2016-09-27 11:06:34 -05:00
5ea1e7b379
Bump version of framework to 4.12.29
2016-09-26 12:06:21 -07:00
3ddf80dd7a
Bump version of framework to 4.12.28
2016-09-23 10:02:37 -07:00
11e2de4756
Bump to lastest metasploit_data_models gem.
...
Fixes MS-1598.
2016-09-21 13:06:41 -05:00
27018b421c
Land #7316 , use new rex-encoder gem
2016-09-19 11:59:21 -05:00
5acc17a800
Bump version of framework to 4.12.27
2016-09-16 10:02:52 -07:00
7e10b5c482
use new rex-encoder gem
...
remove all the encoidng lbiraries and use the new gem
rex-encoder that contains them now.
MS-1708
2016-09-14 12:07:26 -05:00
e005a3f49b
Land #7300 replace msfrop with the rex-rop_builder gem
...
MS-1722
2016-09-14 11:21:54 -05:00
32998d938f
Bump version of framework to 4.12.26
2016-09-13 16:59:37 -07:00
8eb2c926f3
Bump version of framework to 4.12.25
2016-09-13 13:37:08 -07:00
0d6242aa4f
yank bad rex-text version
2016-09-13 14:14:45 -05:00
fd3b885d83
replace msfrop with the rex-rop_builder gem
...
moved all of this code into the new gem
MS-1722
2016-09-12 16:06:53 -05:00
4495b27e67
Land #7254 , Rex::SSLScan Gemification
2016-09-08 13:20:56 -05:00
1b9c37ff78
Merge branch 'master' into feature/MS-1711/rex-nop
2016-09-08 10:48:07 -05:00
1b69d163cc
push rex-text back to previous version
2016-09-08 10:41:33 -05:00
a30711ddcd
Land #7279 , Use the rubyntlm gem (again)
2016-09-07 16:33:35 -05:00
cd90ff7c24
pull in rex-socket gem
...
pull rex-socket gem in as a dep
MS-1715
2016-09-07 11:38:26 -05:00
1a913da08c
pull in rex-core as a dep
2016-09-07 11:38:26 -05:00
405c59b8b8
move bidirectional pipe into rex/ui/text
...
this didn't really fit with the rest of rex::io and it inherits
from inside rex/ui/text so just put it there
MS-1715
2016-09-07 11:34:04 -05:00
0f30d3a720
Land #7208 , use new rex-bin_tools gem
2016-09-06 13:19:35 -05:00
9d5a276e91
Fix recent metasploit-framework.gemspec conflict.
2016-09-06 13:10:28 -05:00
881effbae9
use the new rex-nop gem
...
transfer the opty2 library to rex-nop
MS-1711
2016-09-06 11:27:06 -05:00
58112d7b4d
Bump version of framework to 4.12.24
2016-09-02 10:02:44 -07:00
e36cfa54b1
Use rex-mime gem
...
MS-1710
2016-09-01 11:38:07 -05:00
219f643af2
Per #7205 , update Gemfile.lock.
2016-08-31 11:18:23 -05:00
029a28c95b
use the new rex-sslscan gem
...
remove old integerated code and replace it
with the gem. done.
MS-1693
2016-08-30 10:43:47 -05:00
45ab061a88
pull in rex-socket gem
...
pull rex-socket gem in as a dep
MS-1715
2016-08-26 14:12:16 -05:00
fed1016430
pull in rex-core as a dep
2016-08-26 14:00:13 -05:00
c6b0c0b598
move bidirectional pipe into rex/ui/text
...
this didn't really fit with the rest of rex::io and it inherits
from inside rex/ui/text so just put it there
MS-1715
2016-08-26 13:51:26 -05:00
ea32c313d3
Bump version of framework to 4.12.23
2016-08-26 10:06:44 -07:00
Brent Cook
David Maloney
Metasploit
Matthew Daley
William Vu
James Lee
Brent Cook
Jeffrey Martin
bwatters-r7
James Barnett
wchen-r7
William Webb
Adam Cammack
OJ
Pearce Barry
dmohanty-r7