2873a899db
Address msftidy complaint
2017-08-21 03:39:03 -04:00
d6d6c67f33
add stage_shell.s and cleanup
2017-08-21 14:42:30 +08:00
e1a7494724
linux payloads should default to /bin/sh
2017-08-21 12:25:27 +08:00
9768a89bcd
aarch64 staged shell
2017-08-21 11:14:42 +08:00
7ab097a784
Unix cmd versions of R payloads
...
Use R to connect back from a unix shell.
Notes:
We need to DRY this up - tons of copy pasta here, when we should
really be instantiating the language specific payloads and just
wrapping them with CLI execution strings.
Testing:
None, yet, just did the quick port to wrap this and push to CI
now that rex-arch #4 is in.
2017-08-20 21:25:57 -04:00
b864083cbd
update payload sizes
2017-08-20 19:03:53 -05:00
d76616e8e8
Reverse and bind shells in R
...
Initial implementation of bind and reverse TCP shells in R.
Supports IPv4 and 6, provides stateless sessions which wont change
the cwd when cd is invoked since each command invocation actually
spawns a pipe to execute that specific line's invocation.
R injections are common in academic software written in a hurry by
students or lab administrators. The language runtimes are also
commonly found adjacent to valuable data, and often used by teams
which are not directly responsible for information security.
Testing:
Local testing with netcat bind and rev handlers.
TODO:
Add the appropriate platform/language library definitions
2017-08-19 06:12:05 -04:00
8b4ccc66c7
add linux/aarch64/shell_reverse_tcp
2017-08-17 18:55:37 +08:00
df98c2a3dd
update cached sizes again
2017-08-15 08:02:51 -04:00
debbc31142
use separate module names for x86 and x64 generators
2017-08-15 08:02:01 -04:00
4dbf94556e
update CacheSize
2017-08-15 12:54:30 +09:00
59086af261
Land #8771 , rewrite linux x64 stagers with Metasm
2017-08-14 02:32:29 -04:00
25764397ba
Update CachedSizes for changed nodejs payloads
...
Fixes test failures
2017-08-12 23:21:54 -07:00
14507747d0
update CachedSize
2017-07-29 23:42:43 +09:00
b1e26dd17e
Merge branch 'master' of https://github.com/rapid7/metasploit-framework into feature/linux_reverse_tcp_x86_retry
2017-07-29 17:24:59 +09:00
eb536ba67c
Merge branch 'master' of https://github.com/rapid7/metasploit-framework into feature/linux_reverse_tcp_x64_retry
2017-07-26 09:48:17 +09:00
6300758c46
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
838b066abe
Merge branch 'master' into land-8716
2017-07-24 05:51:44 -07:00
8444038c62
Add eval alternative to PHP Meterpreter to bypass suhosin
...
See https://suhosin.org/stories/index.html for more information on this system.
2017-07-23 22:04:09 -07:00
b75530b978
Fix an issue where 'sleep' with Python Meterpreter appears to fail.
2017-07-23 05:38:06 -07:00
399557124f
update payload cached sizes
2017-07-23 05:28:32 -07:00
b8d80d87f1
Remove last newline after class - Make @wvu-r7 happy
2017-07-19 11:19:49 +01:00
3d4feffc62
OCD - Spaces & headings
2017-07-19 11:04:15 +01:00
a008f8e795
BruteForce - > Brute Force
2017-07-19 10:39:58 +01:00
cc3168933f
update mettle payloads, template generator
2017-07-18 13:13:38 -05:00
f5e76092d6
Merge branch 'master' into land-8439-
2017-07-18 08:25:18 -05:00
6c5d8279ca
change to generate payload from metasm
2017-07-16 19:21:09 +09:00
4720d1a31e
OCD fixes - Spaces
2017-07-14 08:46:59 +01:00
fd843f364b
Removed extra lines
2017-07-14 08:17:16 +01:00
f66021c8a2
update CachedSize
2017-07-14 13:53:43 +09:00
14b37c2101
Land #8691 , Improve php reverse_tcp stager logic
2017-07-11 13:50:27 -05:00
db8698e82b
Land #8655 , add error handling to mipsle linux reverse tcp stager
2017-07-11 22:33:54 +08:00
653890f9d4
fixed unit tests
2017-07-09 16:08:32 -07:00
75c571de83
Land #8653 , add error handling to mipsbe linux reverse tcp stager
2017-07-09 19:36:15 +08:00
cd0c2c213f
pedantic tweaks
2017-07-09 19:36:03 +08:00
a4a959266b
update cachedSize
2017-07-06 17:43:27 +09:00
ed0b5a843d
add error handling bin to reverse_tcp on mipsbe
2017-07-06 17:34:22 +09:00
2d8a71de6f
tab to space
2017-07-05 18:22:06 +09:00
615eb53796
update cachedSize
2017-07-05 18:05:38 +09:00
d02d6826a9
fix reverse tcp stager src
2017-07-05 17:56:59 +09:00
d1f08a80bd
add error handling to reverse_tcp on mipsbe
2017-07-05 17:50:49 +09:00
084b211e9b
add x64 stager_sock_reverse src
2017-06-25 16:31:37 +09:00
0685cb5ab4
update CacheSize
2017-06-25 06:25:07 +09:00
799fcbd9e7
add error handling to x64 reverse tcp stager
2017-06-25 06:22:25 +09:00
5588d0f7b2
Update payload cached sizes
2017-06-23 13:45:04 +10:00
fda2e8c73d
Land #8523 , Add support for session GUIDs
2017-06-22 20:10:10 -05:00
03116d7933
Land #8543 , add error handling to ARM linux reverse tcp stager
2017-06-18 15:38:16 +08:00
5f74da9023
Move php_preamble before $ipaddr and $port
...
php_preamble contains a <?php tag now, so we need to move it to the top.
2017-06-15 19:50:57 -05:00
c634931f0d
Updated payload cached size after the python3 fix
2017-06-16 09:05:31 +10:00
9cf9d22bae
fix mmap return cmp
2017-06-16 06:26:40 +08:00
93c4b3fffc
update CacheSize
2017-06-12 01:39:13 +09:00
1862900aae
add error handling
2017-06-12 01:36:13 +09:00
17d7bb0c64
add label and regster value to comment
2017-06-11 20:38:47 +09:00
c4288fb35a
Update branch to include chances from upstream/master
2017-06-09 17:18:57 +10:00
a3f3dc0a70
Upload payloads/mettle gems, update cache sizes
...
Updated both the metasploit-payload and metasploit-payload-mettle gems
to the versions that match for the session GUID pull requests. Updated
the payload cached sizes to match the new payloads.
2017-06-09 17:15:52 +10:00
eef82a501d
Add support for session GUIDs in mettle
2017-06-08 11:20:48 +10:00
834e0eba95
Land #8340 , add exception handling for rev_tcp_ssl
2017-06-06 19:09:15 -04:00
37b9cd07a2
Add support for the session GUID in the UI
...
The Session GUID will identify active sessions, and is the beginning of
work that will allow for tracking of sessions that have come back alive
after failing or switching transports.
2017-06-06 17:15:57 +10:00
737f7452ce
add my name to author
2017-06-04 04:42:45 +09:00
39cee481c1
Making changes similar to the reverse_tcp payload
2017-06-03 22:57:59 +05:30
e175bcda08
update cachedSize
2017-06-03 08:37:18 +09:00
4e29b6e5fd
Land #8275 , add retry opts for py rev_tcp stager
2017-05-28 13:02:35 -04:00
e02d726213
Setting default values to the added options
2017-05-28 14:30:30 +05:30
1582d3a902
support i386
2017-05-26 15:55:42 +08:00
92a1a3ecf7
Adding for loop instead of while, removing 'counter'
2017-05-25 15:09:34 +05:30
d333077308
osx meterpreter
2017-05-23 14:23:22 +08:00
5395d8f17c
update python stageless payload sizes
2017-05-22 18:21:13 -05:00
3a1ed19a42
Making use of StagerRetryConnect
2017-05-13 17:49:53 +05:30
123462bdca
Land #8293 , add initial multi-platform railgun support
2017-05-11 22:32:23 -05:00
cf487cc90c
reverse_ncat_ssl is stable
2017-05-08 17:43:34 -05:00
97095ab311
Land #8338 , Fix msf/core and self.class msftidy warnings
2017-05-03 21:55:52 -05:00
2d93c8e2d6
merge, don't overwrite
2017-05-03 18:17:58 -05:00
0798923901
set the correct schema for linux meterpreter reverse_tcp stages
2017-05-03 16:12:45 -05:00
64452de06d
Fix msf/core and self.class msftidy warnings
...
Also fixed rex requires.
2017-05-03 15:44:51 -05:00
772a16f4cd
fix style
2017-05-02 00:55:57 +08:00
9e06c3f07e
fix argument arrangement
2017-05-02 00:39:00 +08:00
5a2afbc364
Tidy payload
2017-05-01 21:38:34 +08:00
cfa204b8e8
add reverse ncat ssl
2017-05-01 06:57:28 +08:00
cd73bd137a
Making use of while loop and solving StagerRetryWait issue
2017-04-27 11:50:13 +05:30
480a0b4273
update payload sizes
2017-04-26 18:02:14 -05:00
078ba66e5f
remove unneeded msf/core requires
2017-04-26 17:17:20 -05:00
353191992f
move mettle payloads to meterpreter, add reverse_http/s stageless
2017-04-26 17:06:34 -05:00
a3bcd20b26
Minor cleanups for multi-platform railgun
2017-04-25 17:45:07 -04:00
bd2379784e
Improved error handling for the python reverse_tcp payload
...
Handling all kinds of errors
Removing 'e'
Updating payload cached sizes
Updating payload cached sizes 2.0
Adding option to set retry time
2017-04-23 20:43:57 +05:30
fa8011fd07
New mainframe privesc payload for z/OS
...
This module performs a privilege escaltion on mainframe systems
runing z/OS and using RACF for their security manager. A user
with any non-privileged credentials and the ability to write to
an apf authorized library can use this payload to add "root level"
privileges (e.g. SPECIAL / BPX.SUPERUSER) to their profile.
2017-04-11 15:04:44 -05:00
2758010355
Fix x86 mettle shellcode
2017-03-28 17:59:13 -05:00
9542087642
bump mettle to 0.1.8
2017-03-21 16:45:25 -05:00
aa5e9cd702
Land #8058 , Allow the http_payload stager to sleep before retry
2017-03-21 00:07:10 -05:00
1d0024ee3c
tools/modules/update_payload_cached_sizes.rb update
2017-03-17 20:58:41 -03:00
91a4657c36
Bumped the metasploit-payloads version and cache sizes with PR#8043
2017-03-15 19:02:21 -05:00
b2a7d18584
Update cached payload sizes
2017-03-15 18:43:48 -05:00
7976966ce9
Issue 7923 - msftidy errors on master
2017-03-08 03:12:41 +05:30
031285d49a
update payloads
2017-02-28 03:04:53 -06:00
8c876f4a57
Land #7996 , Major rewrite and cleanup of reverse shell jcl payload
2017-02-28 02:12:40 -06:00
1e28e2b2c7
Cache sizes again...
2017-02-24 20:43:13 -06:00
493f17761b
payload cache size change- all together, now
2017-02-24 20:23:34 -06:00
15af90c011
payload cache size change
2017-02-24 20:22:27 -06:00
27a7b279f5
Major rewrite and cleanup of reverse shell jcl
...
The shell does exactly the same as the previous, just made the code read much
better so as to not severely anger the gray beards and other lesser
mainframe deities. The only architectural change is the payload uses the
spawn system call vs exec - this provides for a cleaner exit in some cases.
2017-02-22 17:17:27 -06:00
ef2fff798e
update sizes
2017-02-17 18:57:02 -06:00
aac9381778
Update meterpreter_reverse_https.rb
2017-02-07 12:13:20 +04:00
RageLtMan
Tim
Brent Cook
tkmru
Patrick Thomas
g0tmi1k
Adam Cammack
Dave Farrow
OJ
William Vu
Spencer McIntyre
itsmeroy2012
Jeffrey Martin
C_Sto
Brent Cook
bigendiansmalls
alpiste
bwatters-r7
=
sekritskwurl