fb5b228984
Merge branch 'master' into staging/rails-upgrade
2016-05-02 11:33:35 -05:00
050061762b
Fix db_manager rspec tests
...
MS-255
2016-04-28 13:17:02 -05:00
d4b89edf9c
Fix #6398 , Missing Content-Length header in HTTP POST
...
RFC-7230 states that a Content-Length header is normally sent in
a POST request even when the value (length) is 0, indicating an
empty payload body. Rex HTTP client failed to follow this spec,
and caused some modules to fail (such as winrm_login).
Fix #6398
2016-04-28 11:44:10 -05:00
e7f0163c2e
Apparently super doesn't work the same here in 2.3
...
But it doesn't matter, the value just needs to be before the current
time, so replace it with a simpler solution.
2016-04-26 10:35:41 -05:00
47d52a250e
Fix #6806 and #6820 - Fix send_request_cgi! redirection
...
This patch fixes two problems:
1. 6820 - If the HTTP server returns a relative path
(example: /test), there is no host to extract, therefore the HOST
header in the HTTP request ends up being empty. When the web
server sees this, it might return an HTTP 400 Bad Request, and
the redirection fails.
2. 6806 - If the HTTP server returns a relative path that begins
with a dot, send_request_cgi! will literally send that in the
GET request. Since that isn't a valid GET request path format,
the redirection fails.
Fix #6806
Fix #6820
2016-04-25 14:30:46 -05:00
816bc91e45
Resolve #6807 , remove all OSVDB references.
...
OSVDB is no longer a vulnerability database, therefore all the
references linked to it are invalid.
Resolve #6807
2016-04-23 12:32:34 -05:00
7ff5a5fd7e
switch mainframe payloads to fixed size
2016-04-23 11:40:05 -04:00
e75ce8b248
update test to hook exist? rather than exists?
2016-04-21 06:56:48 -04:00
e70d967b4e
Land #6763 , Add rspec for lib/metasploit/framework/login_scanner/redis
2016-04-18 10:05:24 -07:00
3a623862e3
Merge branch 'master' into staging/rails-upgrade
2016-04-15 10:55:43 -05:00
d3e5dffe26
whitespace
2016-04-13 22:20:42 -05:00
6ce7055130
Land #6737 , Added reverse shell JCL payload for z/OS
2016-04-13 22:19:15 -05:00
09873f2f9c
Land #6717 , Add new cmd mainframe payload (generic_jcl) for z/OS
2016-04-13 22:10:23 -05:00
6c5886afba
Resolve #6736 , Add rspec for login_scanner/redis lib
...
Resolve #6736
2016-04-08 11:41:08 -05:00
8f3f2f74b4
Move shared example from pro into framework
...
MS-1361
2016-04-07 13:09:52 -05:00
f5415c8058
Move pro concern logic into framework
...
MS-1361
2016-04-07 10:59:40 -05:00
22d08fdf39
Revert #6748 , premature Gemfile* changes
2016-04-06 14:52:22 -05:00
8de58e4b80
Merge branch 'master' into staging/rails-upgrade
2016-04-04 09:30:01 -05:00
f7dd326b16
Land #6455 , Fix dns labels/names size limits for lib/net/dns/names/names
2016-04-01 21:57:09 -05:00
6a4d7e3b58
Revshell cmd JCL payload for z/OS
...
Added a JCL-based reverse shell. Uses the same source code as the
shellcode version does. Source code is in
external/source/shellcode/mainframe/shell_reverse_tcp.s
2016-03-31 20:42:42 -05:00
46d4b533f3
Add rspec for lib/net/dns/names/names.rb
2016-03-31 11:29:30 -05:00
bc48ebd43b
Use patch_finder for msu_finder
2016-03-29 23:21:01 -05:00
1bcd3fac25
Land #6724 , Import workspace IP validation from Mdm
...
MS-902
2016-03-29 18:31:47 -05:00
3b0170e87d
Import workspace IP validation from Mdm
...
This allows us to actually test the validations, since the code calls
out to Rex::Socket::RangeWalker.
MS-902
2016-03-29 17:56:22 -05:00
a6518b5273
Add generic JCL cmd payload for z/OS (mainframe)
...
This payload does nothing but return successfully. It can be used to
test exploits and as a basis for other JCL cmd payloads.
2016-03-28 21:01:39 -05:00
c4735bd72a
Fix rspec pull_request_finder_spec.rb
2016-03-24 20:56:46 -05:00
57984706b8
Resolve merge conflict with Gemfile
2016-03-24 18:13:31 -05:00
1375600780
Land #6644 , datastore validation on assignment
2016-03-17 11:16:12 -05:00
32fe9ae55d
Remove dead version check in db_manager.rb
...
The check appears to have been orphaned in the db_manager refactor, but
I can't track down the exact commit.
2016-03-16 15:24:55 -05:00
903807d039
update spec for pre-check
2016-03-15 14:21:01 -05:00
dabe5c8465
Land #6655 , use MetasploitModule as module class name
2016-03-13 13:48:31 -05:00
88697a5d3f
Merge branch 'master' into staging/rails-upgrade
2016-03-08 15:22:04 -06:00
860159fa00
Update rspec
2016-03-08 11:37:25 -06:00
58b8c35146
Escape HTML for KB and update rspec
2016-03-08 10:10:10 -06:00
3123175ac7
use MetasploitModule as a class name
2016-03-08 14:02:44 +01:00
659af68b16
Land #6388 , update msftidy check for new preferred Metasploit module base class
2016-03-06 17:12:20 -06:00
cc436fe438
update to new preferred base class for modules
2016-03-06 17:11:51 -06:00
a2c3b05416
Land #6405 , prefer default module base class of simply 'Metasploit'
2016-03-06 17:10:55 -06:00
e1db3ef369
Land #6388 , Update msftidy to error when module super class is incorrect
2016-03-06 16:53:11 -06:00
0fc4ebf4ab
Land #6618 , Improve Content-Length behavior in Rex HTTP
2016-03-06 16:38:44 -06:00
8faae94338
Land #6592 , make linux/x86/shell_reverse_tcp's shell path configurable and remove shell_reverse_tcp2
2016-03-06 15:33:53 -06:00
c2f7360a9a
replace deprecated 'ignore' with 'transient'
2016-02-29 14:57:09 -06:00
bff4b4d5fc
Fix #6609 and #6587 - Change Content-Length behavior in Rex HTTP
...
This patches changes two things:
1. If a module has a custom Content-Length, it will respect that
instead of forcing its own.
2. If a request does not have anything in the body, the
Content-Length header will not be set.
Fix #6609
Fix #6587
2016-02-29 10:50:21 -06:00
814d53aee0
Add rspec for Msf::Util::DocumentGenerator::PullrequestFinder
2016-02-24 15:13:04 -06:00
753e0f7693
Add rspec for Msf::Util::DocumentGenerator::DocumentNormalizer
2016-02-23 15:34:34 -06:00
39f1113bca
Remove unused spec.
2016-02-18 22:20:13 -06:00
44eb2d6a80
Merge branch 'upstream/master' into default-xor
2016-02-11 14:30:18 +10:00
2386cb1344
Land #6527 , add support for importing Burp suite vuln exports
2016-02-10 13:19:21 -06:00
942eec5fee
Update rspec
2016-02-07 12:37:08 -06:00
4dcbd7c1ae
Add a nokogiri xml stream parser for Burp issue xml and rename original burp parser to burp session parser so both are supported.
2016-02-04 10:30:56 -06:00
53d4e31844
Allow OptPath to valid symbolic paths that need expansion
2016-02-03 14:12:03 -08:00
c0ed57db43
Land #6267 , the rest of the rspec3 updates
2016-01-29 11:36:58 -06:00
d35d0993c1
should -> expect
2016-01-29 11:36:38 -06:00
ac822943b1
Land #6267 , update to rspec3
2016-01-29 11:33:30 -06:00
8c94d3c1bd
adjust namespec for rspec3
2016-01-29 11:32:22 -06:00
b6bc862c1b
Land #6267 , fix Rex::Parser::Ini#each_group
2016-01-29 11:19:40 -06:00
6187354392
Land #6226 , Add Wordpress XML-RPC system.multicall Credential BF
2016-01-23 00:12:46 -06:00
781ff4bb7d
Rspec is deprecated. Use RSpec instead.
2016-01-22 20:39:40 -06:00
6bbfc5a869
Fix rspec
2016-01-22 20:27:45 -06:00
0f9cf812b7
Bring wordpress_xmlrpc_login back, make wordpress_multicall as new
2016-01-22 18:54:20 -06:00
e6147d60e2
fix rspecs
2016-01-22 23:43:13 +01:00
f92f59a4c8
remove corresponding spec files
2016-01-22 23:38:44 +01:00
216986f7af
Do API documentation, rspec, and other small changes
2016-01-21 17:22:14 -06:00
478cd2ed5c
check database.yml path
2016-01-21 20:32:32 +01:00
ac0b489a90
Revert bad merge and include expect calls
2016-01-21 10:28:38 +10:00
f68b2b56fa
use hardcoded path
2016-01-19 23:51:28 +01:00
aaa1174ca5
fix rspec errors without database
2016-01-19 20:28:58 +01:00
18fe9bd96f
Merge branch 'upstream/master' into default-xor
2016-01-13 10:05:59 +10:00
7f9b804060
Land #6410 , remove JtR binaries, update for independent framework releases
2016-01-06 14:16:49 -06:00
388bfec46c
Land #6415 , update rspec3 conventions
2016-01-06 12:14:15 -06:00
92503c0ff6
Remove extra check_setup call
2016-01-06 11:01:35 -06:00
480913cb32
Add rspec
2016-01-06 01:41:13 -06:00
06a75e1339
re-enable deprecation errors
...
had to disable this to let transpec do
dynamic analysis. re-enabling now to throw
an error on any deprecation warning
2015-12-31 16:57:17 -06:00
c6656e4031
example_group and hook_scope conversions
...
not strictly required, these conversions keep us
up to date with latest rspec conventions and best practices
which will prevent use from having to convert them when they become
deprecated later
2015-12-31 16:56:13 -06:00
0a8cc8e01c
basic transpec conversions
...
no options apssed, first run of transpec
not much to report
2015-12-31 16:43:26 -06:00
8090bbc750
Changes to support framework as a gem
2015-12-30 11:00:45 -06:00
46a3c839b4
Refactor existing tests that had been duplicating get_std*
2015-12-24 11:03:11 -08:00
be84ed13a2
Update msftidy spec to be more easily added to
2015-12-24 10:55:13 -08:00
f029cd0c9a
Add common helpers for capturing stdout/stderr
2015-12-24 10:54:51 -08:00
5ac4e9aa6b
Correct payload fixture
2015-12-23 12:55:01 -08:00
83f0c2fa05
Add beginnings of rspec coverage for msftidy
2015-12-23 12:53:12 -08:00
6eda702b25
Land #6292 , add reverse_tcp command shell for Z/OS (MVS)
2015-12-23 14:11:37 -06:00
7d8ecf2341
Add Joomla mixin
2015-12-18 21:14:04 -06:00
eccf61bec5
ensure that the metasploit database environment variable is unset
2015-12-14 14:29:25 -06:00
6551df6446
update bitlocker for rspec3
2015-12-10 21:52:15 -06:00
fb578e9063
use explicit exceptions for raise_error
2015-12-10 21:47:22 -06:00
f59446851f
update namespace
2015-12-10 21:47:22 -06:00
99931aff44
Call stance only if module implements stance
2015-12-10 21:47:22 -06:00
b29459747b
stub out private meterpreter accessor method net
2015-12-10 21:47:22 -06:00
2a6db4092d
fix stub on Database specs
2015-12-10 21:47:22 -06:00
a96445b302
switch out expect with a proper mock by allow
2015-12-10 21:47:22 -06:00
d0d09097d5
stub out name on foo_inst in the option_container_spec
2015-12-10 21:47:22 -06:00
9a59671330
switch expect to allow on runas_spec cases
2015-12-10 21:47:22 -06:00
e8440f9798
remove deprecated syntax from text_spec
2015-12-10 21:47:22 -06:00
5056321d34
replace before block expecations with allow statements
...
comment out some before statements that seem to be causing a problem
2015-12-10 21:47:22 -06:00
1a36bcb525
Replace expect with allow the directory_spec
2015-12-10 21:47:22 -06:00
cd0d774db6
replace deprecated unsub, and replace expecations with allows
...
in base_spec
2015-12-10 21:47:22 -06:00
c5d77c3476
change stubs from expect to allow on directory_spec
2015-12-10 21:47:22 -06:00
5b568f2e4b
added missing expectation wrapper
2015-12-10 21:47:22 -06:00
1521fd0a95
remove unnecessary message chain call
2015-12-10 21:47:22 -06:00
b84bd0327d
fix MSSQL test stubs
2015-12-10 21:47:22 -06:00
5c733a3b6d
fix stub on module loader test
2015-12-10 21:47:22 -06:00
71ce9b377a
change module manager stub from expect to allow
2015-12-10 21:47:22 -06:00
69bb683d0a
fix typo in runas spec and change some more expects to allow
2015-12-10 21:47:22 -06:00
2fc0c0b326
switch expect stubs
...
in ui_driver shared context to allows
2015-12-10 21:47:22 -06:00
93d4be2301
replace stubbing expects with allow statements
2015-12-10 21:47:22 -06:00
bf9da1440e
change module_manager to allow from expect
2015-12-10 21:47:22 -06:00
605756a500
and receive needed to be and_return
2015-12-10 21:47:22 -06:00
aca4c6a986
Change include_context on jmx specs
2015-12-10 21:47:22 -06:00
d5d177b782
Use Msf::StringIO on query_spec
2015-12-10 21:47:22 -06:00
2dbb610d99
Use Msf::StringIO on find_spec
2015-12-10 21:47:22 -06:00
5600119fca
Use Msf::StringIO on trans2_spec
2015-12-10 21:47:22 -06:00
07ab7bac9c
Use Msf::StringIO on query_path_information_spec
2015-12-10 21:47:22 -06:00
21ea110aef
Use Msf::StringIO on query_file_information_spec
2015-12-10 21:47:22 -06:00
6405c8102d
Use Msf::StringIO on find_first2_spec
2015-12-10 21:47:22 -06:00
eeca2f4b8a
Use Msf::StringIO on session_setup_and_spec
2015-12-10 21:47:22 -06:00
692a3cb24c
Use Msf::StringIO on read_andx_spec
2015-12-10 21:47:22 -06:00
87a189d990
Use Msf::StringIO on nt_create_andx_spec
2015-12-10 21:47:22 -06:00
7933fa5356
Use Msf::StringIO on negotaite_spec
2015-12-10 21:47:22 -06:00
60de01432c
Use Msf::StringIO in close_spec
2015-12-10 21:47:22 -06:00
085598f6d2
Use lets
2015-12-10 21:47:22 -06:00
2beb42a734
Use msf_data attribute
2015-12-10 21:47:22 -06:00
b61a7f43ef
Use Msf::StringIO context on registry_spec
2015-12-10 21:47:22 -06:00
bc80bf7fdb
use Msf::StringIO on client_spec
2015-12-10 21:47:22 -06:00
046a73b3b3
Use set_msf_data on connection_spec
2015-12-10 21:47:22 -06:00
3d0fcdf84d
Add set_msf_data
2015-12-10 21:47:22 -06:00
2041149d54
Use Msf::StringIO in connection_spec
2015-12-10 21:47:22 -06:00
4872628ff5
Try to make it generic
2015-12-10 21:47:22 -06:00
236c28b6fb
Add shared context
2015-12-10 21:47:22 -06:00
11ea7ee5b9
update mocks for smb specs
2015-12-10 21:47:22 -06:00
c3e2615a23
Implement stub methods instead using allow which verifies
...
MSP-13484
2015-12-10 21:47:22 -06:00
bb7c463c44
Remove operators after .to with matchers
...
MSP-13484
2015-12-10 21:47:22 -06:00
76d1f6ba0a
Fix Rex::Psot::Meterpreter::PacketParser spec
...
MSP-13484
Use allow instead of expect because call count isn't important.
2015-12-10 21:47:22 -06:00
04ea44e76b
eq {} -> eq({})
...
So that the `{}` isn't interpreted as a block to `eq`.
2015-12-10 21:47:22 -06:00
f31e578780
Add missing RSpec. before describe
2015-12-10 21:47:22 -06:00
bde4f8bbe7
Fix allows in Exploit::Remote::Java::Rmi::Client::Jmx::Server spec
...
MSP-13484
2015-12-10 21:47:22 -06:00
e3f2db8f09
Fix allows in Exploit::Remote::Java::Rmi::Client::Jmx::Connection
...
MSP-13484
2015-12-10 21:47:22 -06:00
c754dca48b
fix allows in Exploit::Remote::JAva::Rmi::Client spec
...
MSP-13484
2015-12-10 21:47:22 -06:00
61e1dc2363
Fix allows in FirefoxAddonGenerator spec
...
MSP-13484
2015-12-10 21:47:22 -06:00
2d8d876eaa
Fix allow errors in BrowserAutopwn2 specs
...
MSP-13484
2015-12-10 21:47:22 -06:00
00ad6afd4f
Fix typo shoftname -> shortname
...
MSP-13484
2015-12-10 21:47:22 -06:00
164f24ef8a
Fix stubbing on class instead of instance
...
MSP-13484
2015-12-10 21:47:22 -06:00
fbddd4cc47
Fix IO stubbing
...
MSP-13484
2015-12-10 21:47:22 -06:00
db42c9f760
Fix service double stubbing
...
MSP-13484
2015-12-10 21:47:22 -06:00
c46b97cef9
=~ <Array> -> match_array
...
MSP-13484
2015-12-10 21:47:22 -06:00
99eaa8efb3
Change some expects back to allows to match old stubs
...
MSP-13484
2015-12-10 21:47:22 -06:00
f48f8c1540
Use `be` before operators
...
MSP-13484
2015-12-10 21:47:22 -06:00
4f23b83fa3
.should\n -> expect().to
...
MSP-13484
2015-12-10 21:47:22 -06:00
53f5c019f9
Fix doubles
...
MSP-13484
2015-12-10 21:47:22 -06:00
3d64c52c9a
it { should_not -> it { is_expected.not_to
...
MSP-13484
2015-12-10 21:47:22 -06:00
6f71810010
it { should -> it { is_expected.to
...
MSP-13484
2015-12-10 21:47:22 -06:00
ba88de84ec
Fix mocking errors
...
MSP-13484
2015-12-10 21:47:22 -06:00
910b630d96
it { should == -> it { is_expected.to eq
...
MSP-13484
2015-12-10 21:47:22 -06:00
a8f766ffbd
Fix unimplemented method allows
...
MSP-13484
2015-12-10 21:47:22 -06:00
05585acb89
.should_not -> expect().not_to
...
MSP-13484
2015-12-10 21:47:22 -06:00
64a870aac0
Fix not implemented error by using double
...
MSP-13484
2015-12-10 21:47:22 -06:00
337be4355d
Fix Msf::DBManager spec upgrade problems
...
MSP-13484
2015-12-10 21:47:22 -06:00
d1f64363b1
.any_instance -> *_any_isntance_of()
...
MSP-13484
2015-12-10 21:47:22 -06:00
d7d484a862
Use double to properly expect unimplemented methods
...
MSP-13484
2015-12-10 21:47:22 -06:00
cd57ed289f
Fix mistaken substitution
...
MSP-13484
2015-12-10 21:47:22 -06:00
0eb68ef16c
.should_not_receive -> expect().not_to receive
...
MSP-13484
2015-12-10 21:47:22 -06:00
4cec58d78c
.stub_chain -> expect().to receive_message_chain
...
MSP-13484
2015-12-10 21:47:22 -06:00
4870909afc
.should -> expect().to
...
MSP-13484
2015-12-10 21:47:22 -06:00
2534b18f4c
.stub -> expect().to receive
...
MSP-13484
2015-12-10 21:47:22 -06:00
03c649bb91
should_receive -> expect().to receive
...
MSP-13484
2015-12-10 21:47:22 -06:00
6f29e9a4cf
.should == -> expect().to eq
...
MSP-13484
2015-12-10 21:47:22 -06:00
3fff6cabce
should_not == -> expect().not_to eq
...
MSP-13484
2015-12-10 21:47:22 -06:00
fc9ca84da5
shared_context -> RSpec.shared_context
...
MSP-13484
shared_context must be qualified as global patching is disabled in
spec_helper.
2015-12-10 21:47:22 -06:00
2b02b9e081
shared_examples -> RSpec.shared_examples
...
MSP-13484
2015-12-10 21:47:22 -06:00
d6bf0fd781
decribe -> RSpec.describe
...
MSP-13484
Disabled expose_dsl_globally in spec_helper, so need to qualify
top-level describe.
2015-12-10 21:47:22 -06:00
ed1e984b6a
Update spec_helper with all rspec 3 features
...
MSP-13484
Copied from metasploit-cache.
2015-12-10 21:47:22 -06:00
39da306b1d
Land #6057 , @danilbaz's module for dumping Bitlocker master key (FVEK)
2015-12-08 18:16:39 -08:00
080ec26afb
Land #4489 , Update SMB admin modules to use Scanner & fixes
2015-12-08 14:49:26 -06:00
f2a33cb1ad
The word "should" is not needed.
2015-12-08 11:18:36 -06:00
c747ffc05a
Implement support for TLV packet XORing, and RECV removal
2015-12-08 16:37:10 +10:00
6483eca00a
Update payloads_spec for pymet stageless reverse http
2015-11-30 11:28:36 -05:00
9bcbd12407
Updated spec for mainframe rev shell
2015-11-26 21:34:27 -06:00
f37adf9ff8
Add incomplete spec for Rex::Parser::Ini
2015-11-20 15:18:14 -08:00
c2483faec8
Add Bitlcoker spec file
2015-11-20 19:28:08 +01:00
4a707b33a2
Add rspec coverage for cowsay. Achievement unlocked
2015-11-13 10:26:47 -08:00
15eb135295
Resolve merge conflicts
2015-11-09 18:15:40 -08:00
a71d7ae2ae
Land #6089 , @jvazquez-r7 Fix HTTP mixins namespaces
2015-11-05 16:56:41 -06:00
9c347fbaae
Land #6195 , remove ff buildid from os.js
2015-11-05 15:01:15 -06:00
00d09744fb
Land #6118 , @wchen-r7's new methods for Rex HTTP response
2015-11-03 10:42:42 -06:00
be23da1c1f
Merge branch 'upstream-master' into land-6120-python-stageless
2015-10-30 17:26:26 -05:00
d53be873dc
Updating master to metasploit/master
2015-10-26 09:24:24 -05:00
f6b9f38326
This method is not needed because Nokogiri does that already
2015-10-23 19:38:17 -05:00
810665847b
Add stageless python meterpreter to the payloads spec
2015-10-22 08:40:50 -04:00
12cdd786a6
Add more Nokogiri and RKelly support for Rex::Proto::Http::Response
...
These new methods allow the module writer to being able to parse
HTML/XML/JSON responses properly without using regex first.
2015-10-21 16:26:31 -05:00
28ca34c40a
Fix conflicts
2015-10-16 15:38:59 -05:00
773b523d27
Fix namespaces in specs
2015-10-15 11:54:36 -05:00
1c4686eff0
Move specs folder
2015-10-15 11:50:10 -05:00
8057b3edae
Fix specs to pass again
2015-10-15 09:40:39 -05:00
fa9a33cae8
Move specs to the correct folder
2015-10-15 09:19:43 -05:00
30d2a3f2a9
Land #5999 , teach PSH web delivery to use a proxy
2015-10-14 11:05:45 -05:00
cd2e9d4232
Move Msf::Java to the normal Msf::Exploit::Remote namespace
2015-10-09 13:24:34 -07:00
5e9faad4dc
Revert "Merge branch using Rex sockets as IO"
...
This reverts commit c48246c91c3cd9dc4fde
2015-10-09 14:09:12 -05:00
3aa7b513d5
Delete safe_get_once
2015-10-09 13:34:38 -05:00
3cd9dc4fde
Fix JMX Server specs
2015-10-09 12:17:44 -05:00
62272e64ed
Fix RMI Registry specs
2015-10-09 12:16:59 -05:00
12d2594095
Add StringIO stub to Msf::Java::Rmi::Client::Jmx::Connection
2015-10-09 12:00:35 -05:00
3d1ec54f02
Stub has_read_data?
2015-10-09 11:36:24 -05:00
6549f48d4e
Added new class MainframeShell for mainframe(z/os)
...
This class is built upon and overrides certain methods in the generic
CommandShell class. Primarily it is here to control when and if bytes
sent to/from mainframe (z/os) targets get encoded/decoded from cp1047
(ebcdic<->ascii). This would be the default shell for upcoming
mainframe based payloads.
2015-10-08 17:11:31 -05:00
f57f0991ab
Update rspec
2015-10-06 15:42:31 -05:00
bc46b41bbe
Change tools structure
2015-10-05 22:34:47 -05:00
5a7ac8c29a
Land #6030 , @wchen-r7's Microsoft Patch Finder
2015-10-02 13:33:27 -05:00
33ea5fdd12
Use named subjects
2015-10-02 13:32:32 -05:00
5862a66221
Pass specs again
2015-10-02 11:50:41 -05:00
69f3d88ea6
Ensure uniq on #find_msb_numbers
2015-10-02 11:38:36 -05:00
55f6fe7037
Land #5510 , update x86/alpha* encoders to be SaveRegister aware
2015-10-01 15:07:10 -05:00
d551f421f8
Land #5799 , refactor WinSCP module and library code to be more useful and flexible
2015-10-01 14:35:10 -05:00
0b9e4b33ed
update spec to ignore -a
2015-10-01 14:11:29 -05:00
39dc181588
Update rpsec
2015-10-01 00:26:07 -05:00
e2098822eb
Update msu_finder and rspec
2015-09-30 23:00:46 -05:00
c92f65838e
rspec for TechnetMsbSearch
2015-09-30 20:52:32 -05:00
764c9c88a6
More work on rspec
2015-09-29 21:56:40 -05:00
bc1be7f213
some progress with rspec
2015-09-29 17:20:30 -05:00
d4b9b8e1a4
Stub out :create_match_for_vuln on MatchSet since we already test it
...
MSP-13119
2015-09-29 16:36:59 -05:00
393a71cf46
Merge branch 'master' of github.com:rapid7/metasploit-framework into bug/MSP-13119/rework-match-result-creation
...
Conflicts:
Gemfile.lock
2015-09-29 15:00:22 -05:00
4fe0aede3d
Add rspec
2015-09-29 14:50:56 -05:00
54f9a3b25a
Land #6013 , add mainframe as a platform and architecture
2015-09-29 13:28:23 -05:00
49bb3f2e3f
Complete tests for capture_sendto
2015-09-28 13:27:58 -07:00
aa8c4e2792
Added rspec tests for zarch and ebcdic(cp1047)
...
Basic tests for zarch (64bit BE) and ebcdic<->ascii conversion required
to communicate with mainframes.
2015-09-28 13:31:30 -05:00
e1c3d3e277
Stub unit tests for capture_sendto. Unsure if these will be possible
2015-09-27 15:51:40 -07:00
66c9222968
Make web_delivery proxy aware
2015-09-23 20:45:51 +01:00
52e3405192
Passing report_exploit_success specs
...
MSP-13119
2015-09-23 11:12:02 -05:00
dc84b3b1ba
Passing report_exploit_failure specs
...
MSP-13119
2015-09-23 10:54:13 -05:00
fb051edc2e
Changed the rspec
2015-09-18 12:48:30 -05:00
359306a1a4
Add specs to exploit_attempt to cover report_exploit_failure
...
MSP-13119
2015-09-18 12:25:21 -05:00
d3a73149a2
Add specs around match result creation in exploit attempt
...
MSP-13119
2015-09-18 12:04:45 -05:00
c7f15ca940
Rework how match results get created
...
MSP-13119
* Create match result when we create vuln attempt
2015-09-14 12:18:47 -05:00
eaf51a2113
Land #5722 , @vallejocc's busybox work
2015-09-04 13:36:44 -05:00
05e1a69fe5
Add specs for prepend
2015-09-04 11:14:53 -05:00
3d428ef33d
Fix spec like I shoulda done before landing #5736
2015-09-03 14:23:30 -05:00
7665747d1c
Land #5736 , certutil cmdstager
...
Ferreal this time.
2015-09-03 14:21:21 -05:00
82b27c9038
Revert "Land #5736 , certutil cmdstager"
...
This reverts commit 93eb42dfa3
2015-09-03 14:18:28 -05:00
956c8e550d
Fix spec like I shoulda done before landing #5736
2015-09-03 13:53:21 -05:00
93eb42dfa3
Land #5736 , certutil cmdstager
2015-09-03 13:13:24 -05:00
70b5336356
Merge branch 'upstream-master' into land-5890-android-post-api
2015-09-03 09:51:35 -05:00
9f9bbce034
Land #5840 , add LLMNR & mDNS modules
2015-09-02 18:30:29 -05:00
8e1a0e039e
Add spec
2015-09-01 22:04:35 +01:00
779ece3096
Correct workspace unit tests
2015-08-28 12:19:42 -07:00
06712817cf
Fix specs
2015-08-28 14:06:04 -05:00
54243d411e
Change spec file name
2015-08-28 13:28:34 -05:00
0f9032100d
Stub print_status to allow testing of workspace...
...
and other things that may use print_status rather than print line
2015-08-28 11:10:35 -07:00
52a11cc383
Use correct calls to cmd_workspace
2015-08-28 11:03:47 -07:00
fc7a93ac30
Fix syntax and style
2015-08-28 10:51:57 -07:00
aaa8b2c907
Add rspec coverage for the rest of workspace while here
2015-08-28 10:47:51 -07:00
3f7c8e03e2
Update workspace command to support deleting all workspaces
2015-08-28 10:23:41 -07:00
ad3e37fda2
Fix rspec
2015-08-26 02:38:13 -05:00
3f994e964d
Change method name and update rspec
2015-08-25 23:23:26 -05:00
3412f31f85
Add Android POST API
2015-08-24 18:37:25 -05:00
b37efd29b0
Modified module busybox_pingnet.rb to avoid sending an ash script but executing each ping command separately. Added some fixes. Modified spec file for busybox.rb.
2015-08-23 12:17:17 +02:00
83ca4e984f
Land #5772 , @wchen-r7's fixes #5753 , support Origin for the creds command
2015-08-21 16:07:45 -05:00
68a802b980
Merge pull request #5834 from gmikeska-r7/bug/MSP-13064/SVV-validations-not-created
...
Bug/msp 13064/svv validations not created
2015-08-19 12:47:59 -05:00
0a7ac2d758
Delete another debug puts
2015-08-17 15:28:48 -05:00
09c888bc49
Fix minor things
2015-08-17 15:27:26 -05:00
c52da9f50d
Add regression spec for #5856
2015-08-17 14:32:20 -05:00
f25a5da46f
Do Minor fixes
2015-08-14 12:37:49 -05:00
66148336e1
Modify tests to resolve false negative
...
MSP-13064
2015-08-14 11:48:52 -05:00
6b1e911041
Instantiate payload modules so parameter validation occurs
...
Calling .new on payload modules does not perform parameter validation, leading
to a number cached sizes based on invalid parameters. Most notably,
normalization does not occur either, which makes all OptBool params default to
true.
2015-08-14 11:35:39 -05:00
3a7cea51b4
Merge master and fix Net::DNS::RR merge conflicts
2015-08-13 08:53:25 -07:00
25dde141d6
fix rspec
2015-07-24 15:24:18 -05:00
844b47e8ce
Additional changes
2015-07-18 14:10:46 +07:00
0929b54cd3
Update spec for notes help menu
2015-07-16 00:43:08 -05:00
886ca47dfb
Land #5650 , @wchen-r7's browser autopwn 2
2015-07-15 10:21:44 -05:00
4f8f640189
Rename autopwnv2 to just autopwn2
2015-07-14 17:38:51 -05:00
2276e355aa
Fix a typo
2015-07-14 10:51:15 -05:00
60444c208b
Land #5658 , MSF version includes git hash now
2015-07-14 09:21:25 -05:00
a2bdd0bab9
Land #5541 , add more compat fixed-cmd 64-bit BSD payloads
...
Merge branch 'land-5541-bsd-shellcode' into upstream-master
2015-07-13 21:01:55 -05:00
88a00b1ed8
We don't use MessagePack anymore
2015-07-12 14:45:46 -05:00
a7424c93a0
Update BES rspec
2015-07-12 01:26:43 -05:00
eabf561a1f
Fix some BES rspec
2015-07-11 22:16:10 -05:00
5a858d68a5
Add rspec for browser_profile_manager
2015-07-11 21:11:31 -05:00
b2d723e4a3
Rspec
2015-07-11 19:13:20 -05:00
b1208e1337
Pending rspec
2015-07-11 00:16:48 -05:00
8349a274ea
use and include git hash of Framework as part of the version
...
Because we do not always update the version number, multiple releases have
shown version string, which is not useful for helping debug issues, or for
knowing what features are enabled.
This adds the git hash or reads from a file a copy of the git hash (useful for
doing packaged builds without git) so that it is clear the origin of a
particular metasploit-framework version.
2015-07-10 18:03:37 -05:00
c8c3e1a258
Fix rspec
2015-07-10 13:42:25 -05:00
f59c99e2ff
Remove msfcli, please use msfconsole -x instead
...
msfcli is no longer supported, please use msfconsole.
Announcement on SecurityStreet:
Weekly Metasploit Wrapup
Posted by Tod Beardsley in Metasploit on Jan 23, 2015 11:57:05 AM
2015-07-09 12:50:02 -05:00
fdb715c9dd
Merge branch 'upstream-master' into bapv2
2015-07-07 13:45:39 -05:00
6d30dfd93e
Remove the parts that are not broken for BES spec
2015-07-06 23:28:52 -05:00
a9eeae56cb
Remove the broken parts in browser_autopwnv2_spec
2015-07-06 22:24:32 -05:00
653c4808b2
update framework version spec
2015-07-06 10:42:48 -05:00
b9a8308138
Replace BAP profiles with a framework-instance hash
2015-07-02 12:53:24 -05:00
9bd920b169
Merge branch 'upstream-master' into bapv2
2015-06-27 12:19:55 -05:00
88e58cbdc5
Better performance
2015-06-27 12:19:07 -05:00
bf7e0695d0
Land #5570 , @todb-r7 Removes references to Iconv gem, since it's deprecated
2015-06-19 17:19:03 -05:00
bd097e3264
Land #5497 , Refactor LoginScanner::SNMP to be fast and less buggy
2015-06-19 14:57:36 -05:00
66fecb2832
Add some specs around changed methods
...
See #4525
2015-06-19 13:23:07 -05:00
9da99a8265
Merge branch 'upstream-master' into bapv2
2015-06-19 11:36:27 -05:00
5fa864b097
done with rspec
2015-06-17 16:23:39 -05:00
b1f68556f9
More testcases
2015-06-17 02:52:59 -05:00
089579e354
This is how much rspec I have so far for browser_autopwnv2_spec.rb
2015-06-16 23:04:12 -05:00
a99b001bd7
payloads_spec.rb modified, payloads added
2015-06-16 05:33:30 -04:00
aef3a17b20
payloads added to payload_spec.rb
2015-06-16 04:43:08 -04:00
a53ca53a6a
Fix inconstancy - multi/handler
2015-06-12 21:23:51 +01:00
ed69e5f902
Redo BES rspec
2015-06-09 23:45:41 -05:00
6eb25743e3
Merge branch 'upstream-master' into bapv2
2015-06-09 10:10:00 -05:00
1fe2361e12
Add rspec for BrowserProfileManager
2015-06-09 02:23:27 -05:00
101c5a29ed
Add x86 specs
2015-06-08 16:47:26 -05:00
34d83f3881
Add specs for Rex AlphaMixed mods
2015-06-08 16:01:29 -05:00
3fb0a5f23e
Add specs for Rex AlphaUpper mods
2015-06-08 15:53:11 -05:00
1f11cd5470
Lands #5446 , support for 64-bit native powershell payloads
2015-06-07 14:16:19 -05:00
6b05302059
Fixes #5459 , refactors LoginScanner::SNMP
2015-06-06 00:50:55 -05:00
c003602993
Remove report_store_local from the spec
2015-06-04 18:54:15 -05:00
dddbf3886b
Updated payload spec to be in the correct order and updated payload cached size
2015-06-02 18:33:06 +01:00
e103b2365a
Update payload sizes and add new payloads to spec
2015-05-25 11:31:15 +10:00
820727e24d
Add missing payloads to spec
2015-05-18 22:21:08 +10:00
28abceaec5
Update payload sizes and specs
2015-05-18 21:22:54 +10:00
e41ae93524
Payload sizes, specs and more
2015-05-18 14:58:10 +10:00
bf2b113abb
Merge branch 'upstream/master' into update-x64-stagers
2015-05-18 13:28:36 +10:00
1653acd527
Land #5344 , print payload size from msfvenom
2015-05-15 09:49:05 -05:00
7b2aee2a60
Merge branch 'upstream/master' into update-x64-stagers
2015-05-15 12:27:40 +10:00
83fbd41970
Merge branch 'upstream/master' into multi-transport-support
...
Conflicts:
Gemfile.lock
modules/payloads/singles/cmd/windows/powershell_bind_tcp.rb
2015-05-14 14:50:25 +10:00
018833a326
Fix rspec
2015-05-13 20:48:52 -05:00
9549d572cc
Land #5280 , update to Ruby on Rails 4.0
...
This upgrades a number of other gems as a side-effect.
2015-05-12 16:48:49 -05:00
0dbfc1e02b
Merge the stager size work from mult-transport-support
2015-05-12 07:50:56 +10:00
fe51f552b8
Make stageless, and reverse_tcp x64 non-dynamic
2015-05-12 07:37:12 +10:00
d9068b7719
Fix up payload cache sizes, and powershell include
2015-05-11 17:43:51 +10:00
b922da8f80
Add support for x64 reverse_http
...
Still need to bake in support for proxies in the stagers, but wer'e
getting there.
2015-05-11 17:24:31 +10:00
fd827db6dd
Fix up bind stager payload sizes
2015-05-07 10:13:27 +10:00
78c58088fe
Land #5314 , set snmp defaults for constrained values
2015-05-06 16:27:41 -05:00
9d7a7cb68d
Merge branch 'upstream/master' into multi-transport-support
...
Conflicts:
lib/msf/core/payload/linux/bind_tcp.rb
2015-05-07 07:24:22 +10:00
5b2627c027
switch
2015-05-06 16:15:21 -05:00
5573c6c7e8
remove hardcoded defaults from spec
...
ensure that we test for there being defaults in the underlying scanner
2015-05-06 15:57:14 -05:00
0493f58834
Reenable metasm bind_tcp stager
2015-05-06 09:34:35 -05:00
3c2e6bb698
rollback linux bind_tcp stager metasm port
...
The new metasm port of the linux bind_tcp stager doesn't yet generate valid
executables. While we're debugging the problem, this reverts the bind_tcp.rb
stager to use the static ASM again.
2015-05-06 09:26:04 -05:00
013781fb9c
Land #5292 , WordPress custom file version check
2015-05-05 11:21:18 -05:00
18791ce933
Clean up code
2015-05-05 11:19:40 -05:00
26e7fe15f9
Merge branch 'upstream' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
2015-05-05 11:00:38 -05:00
05e4af8162
Land #5214 , initial meterpreter session recovery support
2015-05-04 16:25:27 -05:00
e6ea5511ca
update linux and windows meterpreters to use metasploit-payloads
2015-05-04 09:44:36 -05:00
55967172be
allow custom regex
2015-05-02 21:06:15 +02:00
9678479abb
check version from custom file
2015-05-02 18:34:10 +02:00
c6806b4e5f
Land #5102 , @wchen-r7's ManageEngine Desktop Central Login Utility
2015-05-01 15:20:21 -05:00
b037560c90
Do minor style fixes
2015-05-01 15:01:13 -05:00
9f0b2d4f0f
One expectation for every example
2015-05-01 14:57:48 -05:00
d880f50b98
Normalize
2015-05-01 14:54:42 -05:00
213d34ce61
Delete unnecessary let
2015-05-01 14:54:12 -05:00
8163c3cdda
Merge branch 'master' into staging/rails-4.0
...
Conflicts:
Gemfile.lock
plugins/nessus.rb
2015-04-28 15:33:46 -05:00
59d6ad5a6d
Restore specs
2015-04-27 17:00:19 -05:00
c3f18aa899
Complete the #4989 revert
2015-04-27 16:26:34 -05:00
6a4d63ca4f
Drop explicit IPAddr to String coercion
...
MSP-12611
2015-04-27 10:48:13 -05:00
1fd601510c
Lands #5194 , merges in PowerShell session support & initial payloads
2015-04-26 16:01:51 -05:00
1cc167a7fb
Inserted ARCH_X86 payloads, removed interactive_powershell and updated base powershell session
2015-04-26 18:50:42 +01:00
19d26da11e
updated to remove powershell stand-alone payloads
2015-04-25 08:15:48 +01:00
7afb6e1aa6
Removed stand-alone payloads and will push these as a seperate fork request.
2015-04-25 07:57:43 +01:00
996cf9bf5c
Dynamic payloads
2015-04-25 07:43:48 +01:00
de09b6e330
Typo in payload spec
2015-04-25 07:30:09 +01:00
d7bc050e96
updates to payload spec
2015-04-25 07:16:17 +01:00
David Maloney
dmohanty-r7
wchen-r7
James Lee
Brent Cook
thao doan
Fernando Arias
William Vu
Bigendian Smalls
Adam Cammack
Christian Mehlmauer
Gregory Mikeska
joev
OJ
Brian Patterson
Jon Hart
Chris Doughty
jvazquez-r7
Luke Imhoff
Spencer McIntyre
BAZIN-HSC
Louis Sato
HD Moore
Meatballs
Mo Sadek
jvicente
xistence
Samuel Huckins
Tod Beardsley
root
g0tmi1k
benpturner
darkbushido
Matt Buck