47dc3772a7
add OptFloat datastore option
2017-08-08 19:06:51 -05:00
6300758c46
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
79657f5b5b
remove silly spec
2017-06-24 16:00:46 -05:00
3a445655ae
Land #8511 , console search options
...
lands sempervictus' console search command
enahncements and bug fixes
2017-06-22 12:07:10 -05:00
47a659f554
Land #8185 , Convert ntp modules to bindata
2017-06-22 09:37:58 -05:00
a48f0fcec6
Remove references to Meterpreter CRYPTO TLVs
...
This feature wasn't supported, and so the TLVs are no longer needed.
2017-06-19 16:53:33 +10:00
42d1fae2e6
Upstream console search additions and fixes
...
The -S flag for console commands, backed by search functionality
in Rex' tables, originally pushed upstream in #1604 (iirc), lacks
coverage for a number of commands which benefit a good deal from
inline filtering of the potentially large number of results.
Push more -S flags and surrounding table functionality upstream
to provide coverage for the console commands included in framework.
Include a fix for deleting hosts when DB references are a problem.
Include a fix for the upstream route command wherein scope must be
defined for the routing target by assuming a /32 without explicit
definition.
Note:
With this in place, console behavior when filtering results is
roughly analagous to the R7 filtering in web UI, which should help
those of us trying to use both maintain corresponding workflows.
Testing:
Used in-house for years, though changes to the diff from upstream
and our fork (expunging some internal code) are untested, so would
appreciate eyes and hands on.
2017-06-16 20:28:51 -04:00
11b99d954d
update specs
2017-05-27 00:34:12 -05:00
4a43e9bcb2
add spec for reverse_ncat_ssl
2017-05-22 18:34:18 -05:00
2f507cf52b
removing some test code
2017-05-04 12:57:50 -05:00
fbf1db590e
Adding a tests
...
trying to find the first interface with a non local v4 ip address.
2017-05-04 12:57:50 -05:00
a6afd0b9bf
adding in a new option type
...
this will grab the first ipv4 address on a given iface
2017-05-04 12:55:46 -05:00
a191e12241
update specs
2017-04-26 17:06:35 -05:00
df306c1543
Fix spec (the irony!)
2017-04-26 03:56:10 -05:00
aa9c037307
fix spec for reals this time
2017-04-18 14:30:29 -05:00
db246e6076
update spec
2017-04-18 14:19:29 -05:00
67047cf770
Revert "Fixes MS-1716, keep sessions in progress alive."
...
This reverts commit e5d0370a94
2017-04-16 15:52:22 -05:00
42122d2835
Land #8238 , move SMB2 support back into smb_login, add simpler permissions checks
2017-04-14 14:06:46 -05:00
91fb3ce6b8
collapse SMB2 support into smb_login
...
converge the SMB and SMB loginscanners so that
there is only one SMB loginscanner that supports both
MS-2636
2017-04-13 15:22:03 -05:00
fa8011fd07
New mainframe privesc payload for z/OS
...
This module performs a privilege escaltion on mainframe systems
runing z/OS and using RACF for their security manager. A user
with any non-privileged credentials and the ability to write to
an apf authorized library can use this payload to add "root level"
privileges (e.g. SPECIAL / BPX.SUPERUSER) to their profile.
2017-04-11 15:04:44 -05:00
5f88971ca9
convert NTP modules to bindata
2017-04-04 02:57:38 -05:00
7de2aa1a63
Update Nmap parser to handle masscan
...
masscan is missing <status>, meaning hosts aren't treated as alive.
Thanks to @jhart-r7 and @jlmurray for working on this previously.
2017-04-03 02:26:14 -05:00
4c0539d129
Land #8178 , Add support for non-Ruby modules
2017-04-02 21:02:37 -05:00
40ab82eea2
add specs for the smb2 login scanner
...
added some basic specs for the new smb loginscanner
class
MS-2557
2017-03-29 13:46:20 -05:00
71df231918
Add new loader for arbitrary executables
...
Still some kluges left in the shim and we have to hit the disk when
constructing the module path
2017-03-28 10:27:12 -05:00
92c0748447
Land #8102 , Add a plugin to notify new sessions via SMS
2017-03-24 11:17:59 -05:00
bb4d6e17c8
Resolve #8026 , Add a plugin to notify new sessions via SMS
...
This plugin will notify you of a new session via SMS.
It also changes the SMS text format to MIME.
Resolve #8026
2017-03-13 16:13:59 -05:00
2a5815749c
Update rspec
2017-03-08 13:39:24 -06:00
702d1c2b7e
Fix bug for subject
2017-03-08 11:43:36 -06:00
ed22902fd4
Support the subject field
2017-03-08 11:40:08 -06:00
a634fec8b3
Fix typo
2017-03-07 16:51:17 -06:00
dc36bc4a0d
Add rspec
2017-03-07 16:49:42 -06:00
6ad8afb8b3
Add API to send a text message (SMS) to mobile devices
2017-03-02 16:47:55 -06:00
e5d0370a94
Fixes MS-1716, keep sessions in progress alive.
2017-02-24 12:56:05 -06:00
7f759384ab
fix missing payloads_spec
2017-02-07 15:02:29 +08:00
64e475a4ee
Land #7892 , Enhance the creds command to allow creating logins
2017-02-03 11:53:46 -06:00
1bb8c9bd93
missed userpass_file on CredentialCollection.empty?
2017-02-01 15:42:21 -06:00
0dcf0002ae
refactor empty test on CredentialCollection
2017-01-31 15:16:26 -06:00
1fcd20b7ef
adding a spec to show creating a core and login
2017-01-30 12:11:31 -06:00
c20cdc2943
cleaning up some of the specs
2017-01-30 10:43:28 -06:00
4480ea7877
Land #7827 , Cisco Firepower Management Console LoginScanner
2017-01-27 16:26:40 -06:00
781bc8420a
Add Advantech WebAccess LoginScanner module
2017-01-26 13:54:50 -06:00
253e39e18c
Land #7680 , Fix #7679 , LoginScanner should abort if there is no creds to try
2017-01-23 14:08:32 -06:00
d9ead4484e
Mock :password
2017-01-23 13:42:30 -06:00
7cf812ed99
add rspec test for inspect on all TLV_TYPE objects
2017-01-23 09:19:53 -06:00
ac2ceca5e3
Land #7804 , Switch the creds command to use named options
2017-01-22 10:49:19 -06:00
99047fa8a1
be stricter in what we accept for payload uri
...
datastore needs to contain something to produce a valid URI
2017-01-22 10:20:04 -06:00
66e9f1d334
fix doc normalizer spec
2017-01-22 10:20:04 -06:00
f69b4a330e
handle Ruby 2.4 Fixnum/Bignum -> Integer deprecations
2017-01-22 10:20:03 -06:00
d7f43a2c66
Fix base_spec
2017-01-17 15:58:30 -06:00
Brent Cook
David Maloney
William Webb
OJ
RageLtMan
Jeffrey Martin
darkbushido
Brent Cook
William Vu
bigendiansmalls
Adam Cammack
dmohanty-r7
wchen-r7
Pearce Barry
Tim
bwatters