Commit Graph

50827 Commits (cff6231aa5298f010d8466488a07ccbddf916f86)

Author SHA1 Message Date
Erin Bleiweiss cff6231aa5
Don't delete ssl key and cert if a user asked not to 2019-03-05 15:25:53 -06:00
William Vu 14a7fbe4cc
Land #11493, file: RHOSTS fix for aux modules 2019-02-27 21:06:53 -06:00
Brent Cook 9dbbea8973 Further improve / fix RHOSTS support for aux modules
Peleus notes that when pulling more than a few RHOSTS targets from the database, MSF writes the intermediate results to a text file instead of leaving them in memory. The aux module check of instantiating a RangeWalker for validation is necessary but insufficient for validating 'file:' RHOSTS specifications.

This clones logic used in the 'check' method in exploit modules to be able to handle file: properly. I suspect this may need to be consolidated and implemented elsewhere tool.
2019-02-26 22:18:45 -06:00
h00die 7394b5bf25
Land #11447 http doc fixes 2019-02-26 20:26:35 -05:00
h00die 73b743306b minor doc fix 2019-02-26 20:26:06 -05:00
h00die 146828124e
land #11455 telnet scanner doc improvements 2019-02-26 19:11:26 -05:00
William Vu d11d391e17
Land #11485, VHOST support for full_uri 2019-02-26 10:35:50 -06:00
William Vu 1fca26de49
Land #11467, CMDSTAGER::TEMP with WritableDir 2019-02-26 10:34:43 -06:00
Brent Cook e2298393b3
Land #11486, fix running non-scanner aux modules
Merge remote-tracking branch 'upstream/pr/11486' into upstream-master
2019-02-26 09:40:53 -06:00
y_k_oo7 7624d06f83 Fixed 2019-02-26 19:55:13 +05:30
y_k_oo7 a32dda974d Fixed Docs 2019-02-26 14:18:41 +05:30
Brent Cook 287667d4f7 simplify check 2019-02-25 21:59:54 -06:00
Brent Cook 0b4d67a978 delete test, seems the sanity mechanism isn't ready for aux modules 2019-02-25 17:01:37 -06:00
Brent Cook 8de62af236 add tftp server test 2019-02-25 16:43:39 -06:00
Brent Cook e9e29580a7 Fix several bugs running non-scanner aux modules
This fixes a couple of bugs in #11176:

 - RHOSTS is not always used in Aux modules, don't enforce it unless it's used.
 - Be sure to pass the action to the run stub, since it's not a standard option.
2019-02-25 16:19:57 -06:00
William Vu d55fbdfbe5 Add VHOST support to full_uri 2019-02-25 14:45:26 -06:00
Metasploit d78a9978e0
automatic module_metadata_base.json update 2019-02-25 12:28:18 -08:00
Brent Cook bf85fd6d64
Land #11483, update various modules to reflect current best practices
Merge remote-tracking branch 'upstream/pr/11483' into upstream-master
2019-02-25 14:18:55 -06:00
William Vu c769555557 Clarify why WfsDelay was repurposed 2019-02-25 12:19:03 -06:00
William Vu 5c84330c18 Clarify DUMP_OUTPUT description once more 2019-02-25 12:06:20 -06:00
William Vu b5368ed2e4 Add sleep(wfs_delay) back to drupal_drupalgeddon2
And drop WfsDelay back down to 2. I see why I did it in the first place.
2019-02-25 12:02:31 -06:00
William Vu cb962a22ef Add WfsDelay back to drupal_drupalgeddon2
And bump it to 10, though 2 worked in testing.
2019-02-25 11:44:02 -06:00
William Vu f35a13d795 Fix exploit/multi/http/oracle_ats_file_upload 2019-02-25 11:35:34 -06:00
William Vu f534fd9755 Fix exploit/multi/http/apache_jetspeed_file_upload 2019-02-25 11:32:06 -06:00
Brent Cook 8d069e4888
Land #11446, add msftidy support for SideEffects Stability Reliability check 2019-02-25 11:25:04 -06:00
Brent Cook 8cc3070cc8 don't require whitespace 2019-02-25 11:24:30 -06:00
William Vu 53bf15b184 Fix exploit/multi/http/struts2_rest_xstream 2019-02-25 11:18:27 -06:00
William Vu 6ecb4bc4a7 Fix exploit/unix/webapp/drupal_drupalgeddon2 2019-02-25 11:18:20 -06:00
William Vu 659621a40b Add CMDSTAGER::TEMP with WritableDir fallback 2019-02-23 02:34:30 -06:00
Metasploit aa0ba91d92
automatic module_metadata_base.json update 2019-02-22 16:13:04 -08:00
William Vu fec109a6d3
Land #11465, author name fixes in a couple modules 2019-02-22 18:00:47 -06:00
William Vu fc9245fa66 Fix author names in a couple modules
It me.
2019-02-22 17:02:15 -06:00
Metasploit eb33555164
automatic module_metadata_base.json update 2019-02-22 14:39:24 -08:00
William Vu e1a200e6c5
Land #11463, NOCVE for Wemo exploit 2019-02-22 16:29:38 -06:00
Metasploit bbd8008ebe
automatic module_metadata_base.json update 2019-02-22 11:33:55 -08:00
William Vu 194881a8b2 Add NOCVE 2019-02-22 13:26:53 -06:00
Brent Cook 789122b8ee
Land #11460, Changing print_line to print_good 2019-02-22 13:23:02 -06:00
Brent Cook f7e3af212c
Land #11462, Add Reliability REPEATABLE_SESSION to Wemo exploit 2019-02-22 13:16:23 -06:00
William Vu c76714ccc6 Add Reliability REPEATABLE_SESSION to Wemo exploit
Notes copied from auxiliary/admin/wemo/crockpot where it didn't apply.
2019-02-22 13:11:59 -06:00
Brent Cook 2363ceaab9
Land #11444, change default web service port to 5443 2019-02-22 12:39:22 -06:00
Brent Cook 52aae1e077
Land #11451, update module authors to consume JSON cache 2019-02-22 12:37:19 -06:00
John Q. Public 9cf8ac81e4
Changing print_line to print_good
Changing print_line to print_good on lines 258 and 267 in iis_shortname_scanner.rb
2019-02-22 09:01:11 -06:00
y_k_oo7 81204c82c1 fixed Docs 2019-02-22 15:05:10 +05:30
Metasploit 3871e45196
Bump version of framework to 5.0.9 2019-02-21 21:30:00 -08:00
Jeffrey Martin 5bd34e7d4c
cleaner read of JSON cache 2019-02-21 23:20:43 -06:00
Jeffrey Martin 98e95eeb18
remove unused imports and vars 2019-02-21 23:14:55 -06:00
Jeffrey Martin dd864e8f6e
enhance -f for `evasion` type 2019-02-21 23:11:39 -06:00
Jeffrey Martin dcaf477097
support -f from JSON 2019-02-21 23:10:07 -06:00
Jeffrey Martin 1bae9ccf31
update module authors to consume JSON cache 2019-02-21 22:56:04 -06:00
Metasploit 885259f58a
automatic module_metadata_base.json update 2019-02-21 20:49:24 -08:00