Christian Mehlmauer
6eedf6ac03
Land #4975 , egghunter tool, Resolve #4944
2015-03-24 06:20:30 +01:00
Christian Mehlmauer
71c544c3c5
added newline at end of file
2015-03-24 06:19:27 +01:00
sinn3r
3c4da5c3ff
Update BES rspec
2015-03-24 00:10:18 -05:00
William Vu
6353154865
Land #4983 , renamed WordPress modules
2015-03-23 23:49:40 -05:00
William Vu
e338b77389
Readd and deprecate renamed WordPress modules
2015-03-23 23:48:56 -05:00
sinn3r
db243a8225
x360_video_player_set_text_bof actually uses SetText for ActiveX
2015-03-23 23:36:20 -05:00
HD Moore
f6731f115f
Lands #4991 , fixes a potential backcompat issue w/meterpreter
2015-03-23 20:00:35 -05:00
sinn3r
3248f02c2c
These exploits use :activex, so I update the usage for them
2015-03-23 19:34:24 -05:00
OJ
25dcfc796a
Better support old binaries in rev http(s)
...
* Patch 256char URL if the 512char one doesn't work.
* Return an empty list in the case where the ext enum fails.
2015-03-24 10:14:44 +10:00
Brent Cook
1869977921
Land #4962 : OJ adjusts MSF to new metsrv needs
...
bump meterpreter bins to 0.0.17
2015-03-23 17:18:06 -05:00
Brent Cook
afe17e1f33
bump meterpreter bins to 0.0.17
2015-03-23 17:15:49 -05:00
sinn3r
2900f57afd
It looks like this works
2015-03-23 16:46:53 -05:00
William Vu
809bc52dfc
Land #4982 , tagging for msfconsole
2015-03-23 15:28:50 -05:00
sinn3r
0e1b9f90b4
Small details
2015-03-23 14:40:20 -05:00
andygoblins
89e27d98ab
Use relative URL to GET payload for WinXP
...
Relative URLs are simpler, and allow the exploit to work on attack machines in NAT environments. Example: attack machine is NATed and does not have a DNS hostname. SRVHOST must be 0.0.0.0 but the victim cannot access the attacker from Rex::Socket.source_address
2015-03-23 14:40:06 -05:00
sinn3r
e520ace1f1
Stash
2015-03-23 14:21:46 -05:00
Tod Beardsley
fe3f9c71cb
Land #4985 , Mozilla vuln from @joevennix
2015-03-23 14:05:35 -05:00
Tod Beardsley
21a97c0926
Add exploit for R7-2015-04, Firefox Proxy RCE
2015-03-23 13:44:41 -05:00
sinn3r
156520338d
Making some changes to how BES handles ActiveX
2015-03-23 12:21:27 -05:00
aushack
b191f92713
Renamed WordPress files to fit majority naming convention.
2015-03-23 18:15:04 +11:00
sinn3r
01caf161f8
Fix syntax error in db_spec.rb
2015-03-23 01:35:26 -05:00
sinn3r
2e75d14d56
Update rspec
2015-03-23 00:53:55 -05:00
William Vu
1a2a78b417
Land #4981 , msfvenom advanced/evasion options
2015-03-23 00:30:35 -05:00
William Vu
b87744c1a9
Add whitespace
2015-03-23 00:30:18 -05:00
William Vu
2f83a53884
Add missing fix for #4921
2015-03-23 00:26:18 -05:00
William Vu
8165ae35d0
Remove extraneous semicolon
2015-03-23 00:26:03 -05:00
William Vu
e176b21bcd
Land #4921 , db_nmap help and tab completion
2015-03-23 00:22:46 -05:00
OJ
20131110cd
Add verify_ssl file (missed in prev commit)
2015-03-23 13:22:10 +10:00
OJ
9c9d333a1b
Create verify ssl mixin, adjust some formatting
2015-03-23 13:21:08 +10:00
sinn3r
23685694ad
The tags column should be a virtual column
2015-03-22 21:04:37 -05:00
sinn3r
182018786b
This is probably the proper way to delete tags
2015-03-22 20:55:20 -05:00
sinn3r
ffe48e1ec8
Don't need order to delete
2015-03-22 20:43:11 -05:00
HD Moore
1b3dfe6635
Lands #4977 , updates test module to support arbitrary base filename.
2015-03-22 20:32:52 -05:00
HD Moore
3cb4fa293f
Show advanced/evasion options in msfvenom --payload-options
2015-03-22 20:24:26 -05:00
sinn3r
ef62fc3df7
Allow the delete mode for tags
2015-03-22 20:08:23 -05:00
sinn3r
b2cc3c4954
I found more bugs and fixed them
2015-03-22 18:21:57 -05:00
sinn3r
708eb42984
I fix bugs for tagging
2015-03-22 18:13:40 -05:00
nstarke
dac5b078f0
Minor fixes for format and style
...
This commit contains a few minor tweaks
for style and format. Some whitespace removed,
an erroneous 'return' removed, and using single
quotes for consistency. Updated as per request.
2015-03-22 22:51:21 +00:00
nstarke
16eab48012
Adding help and tab functions for db_nmap
...
These functions address certain problems
listed in GitHub issue #4353 , but do not
address all issues in that ticket. Most
notably, this commit adds basic tab
completion for db_nmap.
2015-03-22 22:45:56 +00:00
sinn3r
863cbcbddb
Add real tagging for the hosts command
2015-03-22 15:34:37 -05:00
jvazquez-r7
2d1adf6ef4
Land #4923 , @m-1-k-3's exploit for overflow on belkin routers
2015-03-22 02:05:35 -05:00
jvazquez-r7
ee74bb3c5b
The default concat operator should be ok
2015-03-22 02:05:02 -05:00
jvazquez-r7
5499b68e02
Do code cleanup
2015-03-22 01:58:32 -05:00
sinn3r
315948e403
Extra newline
2015-03-21 13:49:50 -05:00
Spencer McIntyre
9f176cab43
Land #4976 , @wchen-r7's Egghunter undefined esize fix
2015-03-21 13:34:37 -04:00
sinn3r
848dc07020
var name needs a default
2015-03-21 12:20:29 -05:00
sinn3r
f45e8f49eb
Custom var name
2015-03-21 12:18:02 -05:00
sinn3r
2be5ae3bab
Fix bugs
2015-03-21 12:14:00 -05:00
Spencer McIntyre
a407bc8d65
Fix the reverse_https stager CachedSize for the spec
2015-03-21 13:05:44 -04:00
Spencer McIntyre
7282968d8a
Python reverse HTTPS stager
2015-03-21 12:43:14 -04:00