e8ac568352
doesn't look like we're using the tcp mixin
2016-05-17 03:15:26 -05:00
08394765df
Fix #6879 , REXML::ParseException No close tag for /div
2016-05-17 03:14:00 -05:00
95db3a0307
Land #6878 , beholder: auto keystroke, screenshot, and webcam captures
2016-05-16 18:12:10 -05:00
04d70640b1
Land #6868 , Add axis2 payload generator for msfvenom
2016-05-16 17:48:50 -05:00
c40b8ea3fb
Land #6864 , Meterp Suspend
2016-05-16 11:13:43 -05:00
3ea2f62376
Land #6875 , update description for auxiliary/spoof/nbns/nbns_response
2016-05-15 12:34:53 -05:00
8e85e8f9d7
Land #6859 , Add TP-Link sc2020n Module
2016-05-15 12:33:54 -05:00
7f6237582e
Remove idle from usage, will implement in the future if needed
2016-05-15 12:32:05 -05:00
8e2c59c852
Disable webcam by default, webcam_stop can crash sessions
2016-05-15 11:49:22 -05:00
00a253ca60
Whitespace cleanup
2016-05-15 01:35:05 -05:00
05dbee7a94
Do not save empty keystrokes
2016-05-15 00:52:26 -05:00
da714e37b8
Skip stale sessions
2016-05-15 00:41:48 -05:00
a6bf624b31
Fun plugin to monitor keys/screens/webcams of active sessions
2016-05-15 00:24:58 -05:00
5361aaadbd
Update nbns_response.rb
...
Just correcting the description section of this module
2016-05-14 15:24:38 -07:00
21d74a64fe
Land #6874 , Improve exploit for CVE-2016-0854
2016-05-14 11:08:17 -05:00
0d176f2c92
remove a couple of unnecessary ternary ops
2016-05-14 11:07:43 -05:00
c7cbaa08c8
Land #6576 , add Search Engine Subdomains Collector (Bing / Yahoo / ..)
2016-05-14 10:50:53 -05:00
10dcc44e2d
Land #6446 , Speedup pattern_create/offset options parsing
2016-05-14 09:50:19 -05:00
680709c5f2
move requires into run
2016-05-14 09:50:02 -05:00
dd0d68a2b4
speed up options parsing (only require framework when running)
2016-05-14 09:47:08 -05:00
2e3e4f0069
Land #6296 , Added a multi-platform post module to generate TCP & UDP egress traffic
2016-05-14 00:03:00 -05:00
3542d907f7
simplify description, move the bulk of documentation to documentation/
2016-05-14 00:01:51 -05:00
8ce0365c7f
See rapid7/metasploit-payloads#98 , update cached payload sizes
2016-05-13 23:05:34 -05:00
307e565859
Land rapid7/metasploit-payloads#98 , Fix python meterpreter reverse_tcp reconnect.
2016-05-13 22:59:52 -05:00
f9af8446aa
Land #6873 , Resolve Rails 5.0 warning about default log levels
2016-05-13 22:54:12 -05:00
d398419971
Land #6832 , Check LHOST value before running shell_to_meterpreter, add docs
2016-05-13 22:50:22 -05:00
057c25e188
Land #6446 , Cleanup pattern_create/pattern_offset and document options
2016-05-13 22:09:35 -05:00
7cfc4d4523
fix odd indentation and style issues
2016-05-13 22:06:18 -05:00
901b793406
fix some minor indent and style issues
2016-05-13 21:51:54 -05:00
7b83b06ad5
whitespace and remove useless comments
2016-05-13 21:45:41 -05:00
a940481f62
Land #6834 , Authorized FTP JCL exploit for z/OS
2016-05-13 21:29:45 -05:00
5c494480e6
handle failure more gracefully
2016-05-13 21:29:25 -05:00
3b5db26ff5
Fix #6872 , change upload action for CVE-2016-0854 exploit
...
This patch includes the following changes:
* Instead of the uploadFile action, this patch uses uploadImageCommon
to be able to support both Advantech WebAccess builds: 2014 and
2015.
* It uses an explicit check instead of the passive version check.
* It cleans up the malicious file after getting a session.
* Added module documentation to explain the differences between
different builds of Advantech WebAccess 8.0s, and 8.1.
Fix #6872
2016-05-13 19:47:18 -05:00
1adca04c30
Add default config value for log levels (silence Rails 5.0 warning in msfconsole)
2016-05-13 16:51:27 -05:00
621a908b2d
Bump version of framework to 4.12.2
2016-05-13 12:51:58 -07:00
ba4bfca806
Revert "arg bad build, resetting version back one"
...
This reverts commit d86392e96b
2016-05-13 14:48:35 -05:00
d86392e96b
arg bad build, resetting version back one
2016-05-13 14:44:02 -05:00
b6a83f734d
Bump version of framework to 4.12.1
2016-05-13 12:39:43 -07:00
31050a8da7
Rails upgrade to 4.2.6
...
lands all of the rails 4.2 upgrade work
Merge branch 'staging/rails-upgrade'
2016-05-13 14:34:50 -05:00
6c11054d5a
Bump version of framework to 4.12.0
2016-05-13 11:46:03 -07:00
fd543f13af
fix deps
2016-05-13 13:34:18 -05:00
348a4f9fa8
Merge branch 'master' into staging/rails-upgrade
2016-05-13 13:03:22 -05:00
7fcddd5a05
Add axis2 payload generator
2016-05-12 22:48:07 +02:00
2d5cf6cfe4
Authorized FTP JCL exploit for z/OS
...
This exploit module allows a user with credentials to execute JCL on a
vulnerable mainframe system running z/OS and an appropriately configured
FTP server.
2016-05-12 14:46:31 -05:00
13adc3ee0a
Land #6865 , Add CVE-2015-3224 support to rails_web_console_v2_code_exec
2016-05-12 13:56:01 -05:00
a69432abe5
update module class and move to recon from manage
2016-05-12 12:42:04 -05:00
9f923cdb00
Merge branch 'master' into land-6296-egress
2016-05-12 12:36:47 -05:00
d9abb06a5a
Merge branch 'master' into staging/rails-upgrade
2016-05-12 11:18:51 -05:00
11a672e31d
use raw file write for cuke
...
the write_file method from aruba
was not working properly anymore, replaced it
with a raw ruby file write
2016-05-12 11:17:53 -05:00
4b23d2dc58
Adjusting exception handling
...
This commit adjusts the error handling to close the socket before
calling fail_with and adds specific exceptions to catch
2016-05-11 17:18:51 -05:00
wchen-r7
David Maloney
HD Moore
sho-luv
Brent Cook
Jenkins
Christian Mehlmauer
Bigendian Smalls
Nicholas Starke