da9ea0b85c
Change the PCRE.
2016-12-16 15:41:10 -06:00
f74fd9e5dd
Land #7672 , support LOCKED_OUT and DISABLED login status
2016-12-16 15:11:05 -06:00
378d8aea36
Merge pull request #7697 from h00die/fix_colorado
...
Fix ftp traversal error conditions
2016-12-16 13:51:15 -06:00
9b678c2bdd
Land #7685 , Add mosule to change user passwords by editing SAM registry
2016-12-16 13:11:40 -06:00
52346c3fa8
fix renamed rex text
2016-12-15 15:31:00 -06:00
fa016de78a
Land #7634 , Implement universal HTTP/S handlers for Meterpreter payloads
2016-12-13 18:13:22 -06:00
b5beb2eb93
throw errors
2016-12-12 21:48:08 -05:00
082a8949e4
Land #7694 , Initial stageless mettle payloads
2016-12-12 13:01:31 -06:00
7aa743b205
Land #7682 , @godinezj's improvements to #7604
2016-12-12 10:54:15 -08:00
deec6eccdf
Update hashcarve.rb
2016-12-12 17:09:04 +11:00
3e80ee1d6a
Better Error Handling
2016-12-12 17:07:47 +11:00
2dca7c871b
applying #7582 to all ftp aux traversals
2016-12-10 16:05:09 -05:00
ccba73b324
Add stageless mettle for Linux/zarch
2016-12-09 18:30:52 -06:00
24cf756f5b
Add stageless mettle for Linux/x86
2016-12-09 18:29:34 -06:00
62a9a31222
Add stageless mettle for Linux/x64
2016-12-09 18:28:29 -06:00
7d36d41b20
Add stageless mettle for Linux/ppc64le
2016-12-09 18:27:22 -06:00
ee7d5fc0c9
Add stageless mettle for Linux/ppc
2016-12-09 18:25:57 -06:00
4570a7198c
Add stageless mettle for Linux/mipsle
2016-12-09 18:24:12 -06:00
25b069f6b4
Add stageless mettle for Linux/mipsbe
2016-12-09 18:23:03 -06:00
7aec68c1fe
Add stageless mettle for Linux/mips64
2016-12-09 18:21:52 -06:00
7a654ca76c
Add stageless mettle for Linux/armle
2016-12-09 18:19:58 -06:00
b74482aa6e
Add stageless mettle for Linux/armbe
2016-12-09 18:18:22 -06:00
12b296ab1a
Add stageless mettle for Linux/aarch64
2016-12-09 18:05:34 -06:00
f0dca7abbf
Land #7692 , print_error for error_sql_injection
2016-12-09 17:09:52 -06:00
2b0bce6459
Land #7690 , drupal_views_user_enum user count fix
2016-12-09 16:55:01 -06:00
4e235be484
Ensure a trailing slash for base_uri
...
Technically, the GET parameters should be in vars_get, but we don't want
to refactor the entire module right now.
2016-12-09 16:53:58 -06:00
8780c325a7
Fixed issues #7691 , silent exit.
...
Add a print statement to alert user what is missing, user could be confused that "show missing" is empty yet something is missing.
2016-12-09 16:20:44 -06:00
77dd952370
Land #7592 , check nil return value when using redis_command
2016-12-09 16:07:12 -06:00
17c12a78f5
Fixed issue #7689 , count of found users not accurate
...
In module drupal_views_user_enum, the count of found users is not accurate.
Fixed it by doing flatten before doing counting.
2016-12-09 15:19:43 -06:00
50f95f9940
Land #7681 , Get ready for stageless mettle
2016-12-09 09:31:47 -06:00
7b4dce5e7e
One left!
2016-12-09 16:27:40 +11:00
74c48f5fa4
I'll get there!
2016-12-09 16:24:49 +11:00
c898e768f6
Struggling with tidyness
2016-12-09 16:00:32 +11:00
586b2d92e2
Corrected status prints
2016-12-09 15:45:30 +11:00
fb360e69c0
Initial Commit
...
This module "carves" a hash in the registries to set it as a user password.
The benefits are:
1/ It doesn't change the password last change field
2/ You can set a hash directly, so you can change a user's password and revert it without cracking its hash.
I have tested it in Windows 7, and 8.1. Should work on every version though.
Usage:
run post/windows/manage/hashcarve user=test pass=<password>
run post/windows/manage/hashcarve user=test pass=<nthash>
run post/windows/manage/hashcarve user=test pass=<lmhash:nthash>
This work is based on the hashdump implementation.
2016-12-09 15:41:01 +11:00
0d41160b03
Sanity checks, errors out with nil ptr if API call fails
2016-12-08 16:14:10 -08:00
a17d1a7e19
Added options for setting the PASSWORD and GROUPNAME
2016-12-08 16:13:31 -08:00
4614b7023d
Land #7604 , @godinezj's post module for creating AWS IAM accounts
2016-12-08 14:26:22 -08:00
aa29fcad80
Update docs and pretty print the loot
2016-12-08 14:25:07 -08:00
70668c289f
Use better loot args
2016-12-08 13:14:36 -08:00
7e0b224eb2
Make ABORT_ON_LOCKOUT non default
2016-12-08 15:07:53 -06:00
162204b338
Support creating a password for the user, etc
2016-12-08 12:56:00 -08:00
0110b97fa2
Fix #7671 , support LOCKED_OUT and DISABLED login status
...
This allows login scanner modules to skip a user if it is
locked out, or disabled.
Fix #7671
2016-12-07 16:49:16 -06:00
ba9ce3fcfb
Land #7665 , Add ABORT_ON_LOCKOUT option for smb_login
2016-12-07 15:52:50 -06:00
a9cb08a352
Token should be passed as nil if not set
2016-12-07 10:16:41 -08:00
b902b4c28a
Update payload sizes
2016-12-07 15:08:45 +10:00
d3a8409a49
prevent further lockouts in smb_login
2016-12-06 21:53:08 -05:00
1c3f0437ed
Move some options back to non-advanced
2016-12-06 17:39:37 -08:00
a13382c80b
Address most of rubocop's nits
2016-12-06 17:10:34 -08:00
8f21a1f68c
move most options to advance, since they never change
...
Also, doc empty username
2016-12-06 16:29:00 -08:00
Jin Qian
dmohanty-r7
jinq102030
Brendan
Brent Cook
h00die
Jon Hart
p3nt4
Adam Cammack
William Vu
Javier Godinez
wchen-r7
OJ
Rich Whitcroft