Commit Graph

10322 Commits (f2579fa7a06d0473a12bb8c0b951f52370f07fd5)

Author SHA1 Message Date
Tim W 31eab90c74 fix mettle cmd_exec 2019-04-18 15:30:26 +08:00
James Barnett 0c1d63c0ce
Update comments as regex is no longer supported 2019-04-17 13:00:42 -05:00
James Barnett 681a4c43c6
Make user and pass options on cred lookup literal
Fixes #11555
2019-04-17 12:37:59 -05:00
Brent Cook b35a1be946
Land #11724, Improve 'use' command to automatically search and fuzzy-match if possible 2019-04-17 02:38:29 -05:00
Brent Cook 3184800329
Land #11716, check for directory traversal on internal zip paths 2019-04-16 08:24:06 -05:00
Sonny Gonzalez cf7096f8ba
Target path normalization fixed 2019-04-15 16:35:15 -05:00
William Vu 23f28e8337 Implement "intelligent" use command with search -u 2019-04-12 18:06:08 -05:00
Sonny Gonzalez 04dcd8a1f9
A more robust path resolution
and better readable is_child_of? method
2019-04-12 11:01:14 -05:00
Tim W 7b09947551
Land #11675, add android app api commands 2019-04-12 23:21:00 +08:00
Sonny Gonzalez 6bf824d200
Zip import directory traversal mitigation 2019-04-11 19:08:37 -05:00
Brent Cook 0308f80c0e fix Failure scoping (needed for libraries) 2019-04-08 09:57:22 -05:00
CorrM 2ef2e65424 Ready 2019-04-02 18:06:56 -04:00
William Vu e577b8f46a Prefer print_status for status message 2019-04-01 11:30:11 -05:00
Brent Cook edca25d277 remove search 'use by number' option, only use if there is one match 2019-03-30 20:01:40 -05:00
Brent Cook a5dbf18ade fix the module showing path 2019-03-28 20:36:45 -05:00
Brent Cook 9e3ca56cdd error handling 2019-03-28 20:26:34 -05:00
Brent Cook 07ce0cf358 add search-by-number support that allows 'use' on the module in one easy step
This implements a feature request from a few years back, adding a numeric column to module search, as well as a '-u' option that automatically uses the first module that matches, or if the user specifies a number value, the nth module that matches.
2019-03-28 20:17:01 -05:00
Matthew Kienow 337e061a77
Skip operation if there is no active database 2019-03-27 13:03:37 -04:00
Brent Cook b2d047b0b1
Land #11622, merge common hash identifier code between modules 2019-03-26 13:12:00 -05:00
Matthew Kienow cf42f47e5b
Check that payload was returned before processing 2019-03-26 11:41:27 -04:00
Matthew Kienow dc3be3378d
Process workspace for use in the create operation 2019-03-25 19:41:51 -04:00
Matthew Kienow 6278563f25
Remove unused code 2019-03-25 19:38:28 -04:00
h00die 5ea406cd4c create hash identifier library 2019-03-23 14:02:34 -04:00
Brent Cook 6218d8920d
Land #11615, allow exporting creds to a JTR-compatible format 2019-03-23 09:08:35 -05:00
h00die 82a791369e remove extra spacing 2019-03-23 07:34:22 -04:00
h00die aada613cff Merge branch 'master' of https://github.com/rapid7/metasploit-framework into jtrout 2019-03-22 21:26:36 -04:00
Matt Robinson 771cd60a5e
Add missing get_payload() method 2019-03-22 21:25:23 -04:00
h00die 0613018fc2 remove unused function 2019-03-22 21:22:39 -04:00
h00die 6d59b29884 move jtr output to -o function 2019-03-22 21:03:06 -04:00
h00die f00c38cfe2 make creds exporter for jtr format 2019-03-22 15:04:58 -04:00
Brent Cook 712cbecab3
Land #11570, Add option to keep temp files with JTR modules 2019-03-22 05:16:56 -05:00
Brent Cook 11951c18ab
Land #11605, Improve tab completion for the load command. 2019-03-22 05:10:20 -05:00
bcoles 3f3395768a
Fix a potential regexp issue
Co-Authored-By: Green-m <greenm.xxoo@gmail.com>
2019-03-22 10:36:23 +08:00
bcoles 5a38cf17de
Typo fix.
Co-Authored-By: Green-m <greenm.xxoo@gmail.com>
2019-03-22 10:34:35 +08:00
h00die 49b936f0d5 fix case of variable 2019-03-21 20:54:32 -04:00
James Barnett 0a4932a61c
Remove swagger-ui css files 2019-03-21 12:52:30 -05:00
Green-m 2c05ce5377
Enhance the load completion. 2019-03-21 18:31:32 +08:00
Jacob Robles 24143f812c
Land #11466, Add Jenkins ACL bypass and metaprogramming RCE 2019-03-18 07:21:13 -05:00
Brendan Coles e00b21d319 2019 2019-03-17 06:43:43 +00:00
William Vu 6658584142 Update HttpServer documentation 2019-03-16 13:55:04 -05:00
h00die 14febf69aa add no cleanup to jtr modules 2019-03-16 11:39:59 -04:00
Brent Cook 2512156197
Land #11564, add a JavaMeterpreterDebug option to the java payloads 2019-03-15 08:19:58 -05:00
Brent Cook 69ff7b7698
Land #11561, Add OpenSUSE detection to Linux system lib 2019-03-15 07:57:26 -05:00
William Vu 9b8cc607ef
Land #11554, irb and pry for command shells 2019-03-14 13:59:07 -05:00
Tim W 5cfe5b4567 add JavaMeterpreterDebug option 2019-03-14 23:43:22 +08:00
William Vu 173f251845
Land #11558, Ubiquiti UniFi for SSH LoginScanner 2019-03-14 09:53:57 -05:00
Brendan Coles 56bff4f748 Add OpenSUSE detection to Linux system lib 2019-03-13 23:18:54 +00:00
Jacob Robles a00f4bf508
Check fix
Account for empty args array
2019-03-13 09:18:18 -05:00
h00die a0b1ca1767 detect unifi in ssh sessions 2019-03-12 20:35:32 -04:00
William Vu 7a1b11b1b8 Support command-specific help command 2019-03-12 19:08:32 -05:00