OJ
558d007d8e
Final tweak to avoid issues in session dump
2017-09-07 01:36:22 -05:00
OJ
f004e6f0f2
Fix session output for pivoted sessions
2017-09-07 01:36:22 -05:00
OJ
7acd772c10
Pivot session stability, display and handling
2017-09-07 01:36:21 -05:00
OJ
fdc9864b61
First working packet pivot session!
2017-09-07 01:36:20 -05:00
OJ
e3de01219a
Pushed on with more pivot code
2017-09-07 01:33:54 -05:00
OJ
abc80655b7
Progress in named pipe pivots, more to come
2017-09-07 01:33:54 -05:00
OJ
816e78b6f6
First pass of named pipe code for pivots
2017-09-07 01:33:53 -05:00
William Vu
36bbe00ea1
Land #8922 , db_nmap tab completion fix
2017-09-07 00:28:03 -05:00
yaya123456778908
bcec8c8eab
Update HACKING
2017-09-06 14:18:08 +03:00
h00die
be66ed8af3
Land #8788 exploits for Gh0st and PlugX malware controllers
2017-09-05 20:42:07 -04:00
james
44fb059cea
Add error checking to mssql_clr_payload
...
Additional error checking had been added to exploits/windows/mssql/mssql_clr_payload
If an error is encountered when changing the trustworthy or clr setting, the exploit fails with a message.
2017-09-05 18:48:22 -05:00
Professor-plum
33e1777bab
Merge pull request #1 from h00die/updates
...
Modules cleanup and add docs
2017-09-05 13:48:09 -06:00
Adam Cammack
b0dc44fb86
Land #8909 , Avoid saving some invalid creds
2017-09-05 12:43:03 -05:00
Tim
636d1a5fcb
fix #8921 , fix crash on nmap tab completion
2017-09-05 16:36:14 +08:00
h00die
d05c401866
modules cleanup and add docs
2017-09-04 20:57:23 -04:00
Pearce Barry
6051a1a1c1
Land #8910 , Use meta redirect instead of JS redirect in 2 modules
2017-09-01 13:50:02 -05:00
William Webb
055e88d261
Land #8897 , Rewrite timestomp command dispatcher to deal with arguments properly
2017-09-01 12:11:57 -05:00
Metasploit
92f5290a50
Bump version of framework to 4.16.5
2017-09-01 10:08:40 -07:00
Brent Cook
bcfab11ca9
land #8913 , fix false positives of telnet scanner vs http servers
2017-08-31 16:31:08 -05:00
Brent Cook
7c14a3d370
expand the check for weird HTTP / HTML serving servers
2017-08-31 16:30:02 -05:00
Tod Beardsley
86db2a5771
Land #8888 from @h00die, with two extra fixes
...
Fixes spelling and grammar in a bunch of modules. More to come!
2017-08-31 14:37:02 -05:00
Tod Beardsley
8a045e65aa
Spaces between commas
2017-08-31 14:29:23 -05:00
Tod Beardsley
642a13e820
Out out damn tick
2017-08-31 14:29:05 -05:00
Adam Cammack
3c1abe6437
Land #8904 , Add Meterpreter mid-stager for AArch64
2017-08-31 12:25:05 -05:00
Jin Qian
1a735c48b4
Fix MS2715, false positive when telneting against web server
...
Add a condition to identify when server returned HTML as login failure
2017-08-31 11:35:51 -05:00
Tim
86ee77ffb0
add aarch64 nops and fix aarch64 cmdstager
2017-08-31 18:48:58 +08:00
Adam Cammack
195c1e041f
Update payload specs and sizes
...
Adds the new Aarch64 and R payloads
fix merge
2017-08-31 18:48:56 +08:00
Tim
ffbf21cb1c
cleanup
2017-08-31 18:35:18 +08:00
Tim
7b71f60ea1
fix the stack
2017-08-31 18:35:18 +08:00
Tim
26f4fa3b09
setup stack
2017-08-31 18:35:17 +08:00
Tim
a2396991f0
stager not setting up stack
2017-08-31 18:35:17 +08:00
Tim
6dbe00158f
fix stager
2017-08-31 18:35:17 +08:00
james
49173818fd
Addresses #8674
...
This type of redirection will work without javascript being enabled.
Modules:
multi/browser/firefox_xpi_bootstrapped_addon
multi/browser/itms_overflow
More info on the meta element:
https://developer.mozilla.org/en-US/docs/Web/HTML/Element/meta
2017-08-30 23:16:46 -05:00
Pearce Barry
2bbba9c500
Avoid some ActiveRecord validation errors.
...
Per discussion with @bcoles in [PR 8759](https://github.com/rapid7/metasploit-framework/pull/8759#issuecomment-325028479 ), setting a login data's last_attempted_at value while also setting the status to UNTRIED will cause a validation error when there's a running+connected MSF DB.
This PR removes the handful of existing cases we're doing this (thx, @bcoles!).
2017-08-30 15:31:36 -05:00
Jon Hart
eec5d2ada9
Update description and add link to SIET
2017-08-30 11:52:11 -07:00
Brent Cook
202c936868
Land #8826 , git submodule remote command execution
2017-08-29 18:11:32 -05:00
Brent Cook
8928197584
rename module docs so they are viewable
2017-08-29 18:09:30 -05:00
Brent Cook
46eeb1bee0
update style
2017-08-29 17:44:39 -05:00
Pearce Barry
d5124fdc94
Land #8759 , Add TeamTalk Gather Credentials auxiliary module
2017-08-29 13:17:28 -05:00
Tim
e1b38ac3a3
fix malicious typo
2017-08-29 17:52:51 +08:00
Tim
5631ddc246
add docs for the git submodule vulnerability
2017-08-29 17:06:30 +08:00
Tim
39299c0fb8
randomize submodule path
2017-08-29 16:54:08 +08:00
Brendan Coles
c9e32fbb18
Remove last_attempted_at
2017-08-29 05:05:04 +00:00
Brent Cook
fbb0f206fb
Land #8903 , bump network_interfaces, add Android support
2017-08-28 20:33:34 -05:00
Brent Cook
b0c1bfaeb7
bump network_interfaces, add Android support
...
see #8780
2017-08-28 20:08:06 -05:00
h00die
a40429158f
40% done
2017-08-28 20:17:58 -04:00
Brent Cook
847407f1dd
Land #8899 , Make backgrounding messages more consistent
2017-08-28 18:51:22 -05:00
William Vu
0e1bafb2d1
Land #8902 , vendored robots gem
2017-08-28 16:42:38 -05:00
Metasploit
a0131f450e
Bump version of framework to 4.16.4
2017-08-28 14:34:39 -07:00
Pearce Barry
cc33b29f0d
Land #8901 , update nessus v2 import for consistent proto case
2017-08-28 15:54:47 -05:00