647936e291
Add more yarddoc to Rex::Exploitation::Powershell
...
encode_code doesn't use eof
no need to unicode encode in gzip as this is handled by encode_code
2014-04-23 01:07:54 +01:00
88fe619c48
Yarddoc exploit::powershell
2014-04-23 00:15:55 +01:00
4c66e86f73
Dont add extra space in args
2014-04-22 14:44:01 +01:00
0f942d8c3d
Still :shorten command args
2014-04-19 18:58:26 +01:00
270b4b9728
Catch first arg with shorten
2014-04-19 18:54:42 +01:00
9f05760c50
Merge with Meatballs' initial changes
...
Clean up arch detection code and dedup Msf/Rex
Reduce generated payload size
2014-04-18 00:28:48 -04:00
5c3289bbc6
merge fix
2014-04-17 21:26:04 -04:00
0956ae5789
Fix payload selection
2014-03-02 20:56:55 +00:00
1ca690eccf
Do some rspec
2014-03-02 20:37:08 +00:00
c9a2135959
Merge in semperv
2014-03-02 19:07:13 +00:00
0056c26047
import msf exploit
2014-02-12 22:06:18 -05:00
c76341c82d
Dont dsub Invoke-Command etc...
2014-02-09 17:45:30 +00:00
151e45d8d1
Better exception descriptions
2014-02-09 12:52:56 +00:00
77dda5dc67
Give option to remove badchars
2014-02-09 12:34:25 +00:00
0379dc128c
Raise exception on known issues
2014-02-09 12:15:02 +00:00
02f1ff27ee
Add option to encode inner payload
2014-02-09 00:55:26 +00:00
f398c982e3
Include option to ensure payload is fully encoded
2014-02-08 23:51:13 +00:00
ad308efc05
Really minimize commandline size
2014-02-08 22:53:47 +00:00
c76862b391
Reduce payload size
2014-02-08 22:11:17 +00:00
b10df54dbb
Dont need to encode the compress payload
2014-02-08 21:34:51 +00:00
435cc9b93f
Add single quote encapsulation
...
For WMI and psh_web_delivery
2013-12-16 15:13:13 +00:00
6c83109422
Really fix wmi
2013-11-23 16:44:44 +00:00
259d5a2dba
Backout Set-Variable as it is 3.0 only
2013-11-23 01:15:13 +00:00
1c60373f68
Reinstate %COMSPEC%
2013-11-23 00:45:04 +00:00
c194fdc67e
Fixup WMI
...
-c doesn't like $var assignments
2013-11-23 00:31:11 +00:00
3cbf768d16
Small size reductions
2013-11-22 22:58:42 +00:00
4fc8bb2b4b
Auto arch detection
2013-10-22 00:42:59 +01:00
971d0b7536
Generate args
2013-09-27 12:48:10 +01:00
5add142789
Choose smallest smallest
2013-09-20 13:47:51 +01:00
9aca98a9d4
Dont need to bypass
2013-09-17 19:12:49 +01:00
60328d5b2a
Bypass no profile and hidden by default
2013-09-13 21:22:15 +01:00
9ade4cb671
Refactor
2013-09-13 20:43:09 +01:00
aa4ad2b005
Change to ' and remove "
2013-09-13 20:23:18 +01:00
243d3d6ebd
Apply comments
2013-09-13 19:19:54 +01:00
7e5e0f7fc8
Retab lib
2013-08-30 16:28:33 -05:00
e1cfe7cfe2
Update datastore changes
2013-07-29 15:31:59 +01:00
4df3b0215c
replace lib/msf/core/exploit/powershell.rb, thanks @Meatballs1
2013-07-20 19:55:01 -04:00
dc15c5b505
Merge branch 'master' into powershell_import
...
Resolve conflicts from old code being pulled into master.
Conflicts:
lib/msf/core/exploit/powershell.rb
modules/exploits/windows/smb/psexec_psh.rb
2013-07-20 19:29:55 -04:00
4554cc6e51
Import Powershell libs and modules (again)
...
Add Rex powershell parser:
reads PSH, determines functions, variables, blocks
compresses and cleans up the code it's read, obfuscates
handles string literals and reserved variable names
extracts code blocks and functions for reuse
turns powersploit into a useful sub-component for MSF
Rewire Msf powershell modules
Make use of Rex parser
Handles payload generation, substituions
Brings convenience methods - byte array generation and download
Re-add .NET compiler
Compiles .NET code (C#/VB.NET) in memory
Can generate binary output file (dynamic persistence)
Handles code-signing (steal cert with mimikatz, sign your bin)
Not detected by AV (still...)
Update payload generation
GZip compression and decompression (see Rex module as well)
msftidy violations for space efficiency - each char counts
Re-submit psexec-psh
Makes use of updated Msf and Rex modules
Runs shellcode in-memory (in a hidden PSH window)
Completely bypasses all AVs tested for the last year...
2013-07-04 14:04:19 -04:00
1a0bdf335e
Retab lib
2013-07-04 12:09:46 +01:00
a76ee6c2ec
Add flexibility to lib
2013-07-04 11:03:48 +01:00
1368c1c27f
Move options to lib
2013-07-04 10:25:08 +01:00
03de8c1c3d
Pull in exploit/powershell
2013-07-04 09:54:40 +01:00
Meatballs
RageLtMan
Tab Assassin