f125e13278
python meterpreter whitespace normalization
2018-01-09 16:08:52 -05:00
18f3815147
Update TLS certificate generation routines
...
Msf relies on Rex::Socket to create TLS certificates for services
hosted in the framework and used by some payloads. These certs are
flagged by NIDS - snort sid 1-34864 and such.
Now that Rex::Socket can accept a @@cert_provider from the Msf
namespace, a more robust generation routine can be used by all TLS
socket services, provided down from Msf to Rex, using dependencies
which Rex does not include.
This work adds the faker gem into runtime dependencies, creates an
Msf::Exploit::Remote::Ssl::CertProvider namespace, and provides
API compatible method invocations with the Rex version, but able
to generate higher entropy certs with more variables, options, etc.
This should reduce the hit rate against NIDS on the wire, reducing
pesky blue team interference until we slip up some other way. Also,
with the ability to generate different cert types, we may want to
look at extending this effort to probide a more comprehensive key
oracle to Framework and consumers.
Testing:
None yet, internal tests pending.
Travis should fail as this requires rex-socket #8 .
2017-12-28 21:00:03 -05:00
cf21d13b2e
Resolve conflict
2017-12-20 18:58:16 -08:00
24907938bb
bump payloads, various fixes
2017-12-20 16:47:37 -06:00
df4f62cde9
bump to mettle 0.3.3
2017-12-20 15:58:17 -06:00
f15309bc48
Add basic framework for interacting with MQTT
2017-12-20 12:28:02 -08:00
6b216f2a20
Land #9290 , Fix OverrideLHOST/LPORT with http/s Meterpreter payloads
2017-12-20 00:26:06 -06:00
9f144ce8d4
Land #9151 , mettle extension support + sniffer module
2017-12-18 21:49:40 -06:00
04f294bd53
Fix #8972 , Remove libsodium until packaged better
...
Due to issues with packaging for multiple platforms libsodium as an optional dependency for 'rbnacl' is being removed. Once packaging issue are resolved this will be restored. This removes support for `ed25519` keys used with ssh for the time being however manual installation of this gem allows user to workaround this limitation.
2017-12-18 15:21:27 -06:00
2a94a4417a
bump payloads
2017-12-18 10:01:10 -06:00
3f6846c332
update payloads with python retry fix
2017-12-12 03:13:38 -06:00
602335abf1
bump payloads
2017-12-11 04:11:21 -06:00
edb2d8b762
fix windows unicode usernames, add recursive directory delete
2017-11-29 17:01:01 -06:00
035d1ef2c6
bump payloads, pull in AES negotation & transport fixes
2017-11-25 18:21:57 -06:00
8645a518b3
add mettle support for custom headers
2017-11-24 20:27:34 -06:00
4050985649
update payloads
2017-11-21 13:53:33 -06:00
6f9671ff11
Updated Payloads version to 1.3.14
2017-11-08 12:36:50 +10:00
ebaf0c5484
bump mettle, update toolchain, add e500v2 and reduce size of x86_64
2017-10-30 05:09:31 -05:00
254c2a33d3
bump metasploit payloads, windows meterpreter fixes
2017-10-27 11:44:23 -05:00
f2cba8d920
Land #8933 , Web_Delivery - Merge regsvr32_applocker_bypass_server & Add PSH(Binary)
...
This restores the original PR
2017-10-25 16:29:11 -05:00
ca28abf2a2
Revert "Land #8933 , Web_Delivery - Merge regsvr32_applocker_bypass_server & Add PSH(Binary)"
...
This reverts commit 4999606b614274b76473
2017-10-25 16:19:14 -05:00
4999606b61
Land #8933 , Web_Delivery - Merge regsvr32_applocker_bypass_server & Add PSH(Binary)
2017-10-25 12:44:04 -05:00
7e398e2ef5
Fix #9111 , bump metasploit-payloads gem to include php 5.3.10 fix
2017-10-24 11:40:02 +08:00
7ea14e8431
Update payloads for getsystem fixes
2017-09-28 09:43:02 +10:00
1ee590ac07
Move over to rex-powershell and version bump
...
Version bump for:
- https://github.com/rapid7/rex-powershell/pull/10
- https://github.com/rapid7/rex-powershell/pull/11
2017-09-25 13:45:06 +01:00
721277d39d
bump metasploit-payloads to 1.3.8
2017-09-20 05:04:13 -05:00
6b0b2550ec
bump payloads, add shell expansion for java/android payloads
2017-09-08 13:45:54 -05:00
d38ee0f1ee
bump payloads, grab java/android fixes for #8938
...
fixes #8938
2017-09-08 10:08:22 +02:00
9877a61eff
bump payloads
2017-09-07 01:36:25 -05:00
7acd772c10
Pivot session stability, display and handling
2017-09-07 01:36:21 -05:00
928d632042
import https://github.com/fizx/robots.git 0.10.1
2017-08-28 15:47:46 -05:00
582b2e238e
update mettle payload to 0.2.2, add background and single-thread http comms
2017-08-28 05:31:44 -05:00
430251b8f6
fix compatibility with php meterpreter
2017-08-21 15:37:31 -05:00
20b6f37fb8
bump payloads with crypttlv format awareness
2017-08-20 19:01:42 -05:00
b9b779da9e
update references to sourceforge ML
2017-08-20 13:23:54 -05:00
bb2304a2d1
Land #8769 , improve style, compatibility, for ssh modules
2017-08-01 21:43:32 -05:00
390f4d52db
add ed25519 support for net-ssh
2017-08-01 16:05:25 -05:00
ddc4fd95a5
Update payloads
...
This incorporates support for HiDPI displays with screen capture for Windows
meterpreter, and fixes a communications bug with Android meterpreter.
2017-07-28 09:56:03 -07:00
a0511c79a4
pull in minor build fixes and filesystem stat implementation from python
...
This pulls in https://github.com/rapid7/metasploit-payloads/pull/219
and https://github.com/rapid7/metasploit-payloads/pull/195
2017-07-23 22:37:43 -07:00
3bc0c18e6a
Properly handle threads and window destruction, add PID logging
...
This pulls in https://github.com/rapid7/metasploit-payloads/pull/213
which fixes https://github.com/rapid7/metasploit-framework/issues/8608
and adds PID logging to verbose keyboard capture.
2017-07-23 22:27:42 -07:00
8444038c62
Add eval alternative to PHP Meterpreter to bypass suhosin
...
See https://suhosin.org/stories/index.html for more information on this system.
2017-07-23 22:04:09 -07:00
b75530b978
Fix an issue where 'sleep' with Python Meterpreter appears to fail.
2017-07-23 05:38:06 -07:00
302b66c2d8
add payloads support for OSX with python meterpreter
2017-07-23 05:26:59 -07:00
072b0dc90b
Hide errors in Windows Meterpreter sessions
...
In Windows Meterpreter sessions, set newly created threads via
SetThreadErrorMode to not display error popups when there are failures.
2017-07-23 05:09:01 -07:00
1d0db02a64
bump payloads
2017-07-20 09:10:19 -05:00
cc3168933f
update mettle payloads, template generator
2017-07-18 13:13:38 -05:00
3ad4ff69b4
try and hard lock rex-powershell version
...
remove this later when the issues with this gem release are addressed
2017-07-17 15:25:26 -05:00
3c7d6c3a6a
fixed some bugs
2017-07-17 10:10:12 +02:00
7d6992c0e8
respect windows
2017-07-17 09:58:20 +02:00
d24e2943ca
update docker stuff
2017-07-10 16:38:10 +02:00
Brent Cook
RageLtMan
Jon Hart
Jeffrey Martin
OJ
Tim
g0tmi1k
William Webb
Brent Cook
David Maloney
Christian Mehlmauer