Brent Cook
3d1861b3f4
Land #6526 , integrate {peer} string into logging by default
2016-02-15 15:19:26 -06:00
James Lee
ad026b3a7a
Add #peer to Tcp
2016-01-28 13:58:24 -06:00
William Vu
d6facbe339
Land #6421 , ADB protocol and exploit
2016-01-22 20:45:44 -06:00
joev
00f1511b46
Use the right op for the data checksum.
2016-01-03 01:48:25 -06:00
joev
849857a418
Fix spacing issues in message.rb.
2016-01-02 22:57:26 -06:00
joev
6668dbec41
Remove stray binding.pry.
2016-01-02 22:50:06 -06:00
joev
dcd36b74db
Last mile polish and tweaks.
2016-01-02 22:41:38 -06:00
joev
9c85c5d4fe
Add newline.
2016-01-02 01:17:28 -06:00
joev
a88471dc8d
Add ADB client and module for obtaining shell.
2016-01-02 01:13:53 -06:00
Brent Cook
e23b5c5435
Land #6179 , add NTP initial crypto nak spoofing module
2015-12-24 15:46:18 -06:00
wchen-r7
d6921fa133
Add Atlassian HipChat for Jira Plugin Velocity Template Injection
...
CVE-2015-5603
Also fixes a bug in response.rb (Fix #6254 )
2015-11-18 11:34:25 -06:00
jvazquez-r7
00d09744fb
Land #6118 , @wchen-r7's new methods for Rex HTTP response
2015-11-03 10:42:42 -06:00
Jon Hart
ced20ba51c
Refactor NTP symmetric packet creation; add vuln detection to NAK to the future
2015-11-02 12:46:58 -08:00
wchen-r7
1805774b16
Resolve #6020 , Better RPC exception handling
...
Resolve #6020 . Avoid trying to rescue RuntimeError.
2015-10-28 11:16:44 -05:00
Jon Hart
f2b6d37630
Add WIP module for Cisco Talos' NTP 'NAK to the future'
2015-10-27 18:10:07 -07:00
wchen-r7
f6b9f38326
This method is not needed because Nokogiri does that already
2015-10-23 19:38:17 -05:00
wchen-r7
065d042ec4
Update doc a little bit
2015-10-21 16:29:27 -05:00
wchen-r7
12cdd786a6
Add more Nokogiri and RKelly support for Rex::Proto::Http::Response
...
These new methods allow the module writer to being able to parse
HTML/XML/JSON responses properly without using regex first.
2015-10-21 16:26:31 -05:00
Brent Cook
157bab4f0d
Land #5518 , TFTP::Client retransmit lost data blocks on upload
2015-09-23 21:58:42 -05:00
HD Moore
9e98385417
Fix #5716 by correctly setting the data length
2015-09-02 15:16:25 -05:00
Jon Hart
407d701fd9
Remove unnecessary version_random_case option
2015-08-20 10:05:16 -07:00
Jon Hart
2e4944b8ec
Remove unnecessary version_random_case option
2015-08-20 10:05:04 -07:00
Brent Cook
015d045730
read max_size bytes at a time
2015-08-18 15:56:57 -05:00
Brent Cook
b40c36688c
check send retry count and abort in excess
2015-07-31 16:17:34 -05:00
Brent Cook
6e146794a2
fix indents and style
2015-07-31 14:48:02 -05:00
Mo Sadek
4cd6e0c72b
Added "Failed" to line 121 of kdc_request.rb
2015-07-13 11:27:32 -05:00
Mo Sadek
6a5645d747
Changed "Filed" to "Failed" in multiple files
2015-07-13 11:21:20 -05:00
jvazquez-r7
7eeb8805ee
Do minor code cleanup
2015-06-19 13:37:02 -05:00
Th3R3p0
8ea09532c8
removed a debugging line
2015-06-17 13:13:00 -04:00
Th3R3p0
e30b0e0cda
forced client to version 3 for servers and added comments. This adds support for RFB version 4 servers. Tested on 004.001
2015-06-17 12:57:24 -04:00
Th3R3p0
772a5dd7df
Created array and added support for version 4
2015-06-17 12:31:51 -04:00
David Barksdale
91a06fb6fb
TFTP::Client retransmit lost data blocks on upload
...
Retransmit data blocks until we receieve a matching ACK.
2015-06-09 15:53:33 -05:00
Brent Cook
c3438955d4
Land #5169 , stop reading when the HTTP socket is closed
2015-05-01 11:40:49 -05:00
Brent Cook
27f6adcd81
Land #5110 , teach Http::Response to extract hidden form inputs
2015-04-24 13:30:57 -05:00
rwhitcroft
70f94bbd96
break loop if socket is closed
2015-04-21 11:09:17 -04:00
William Vu
79ca0a56f9
Land #4171 , Steam protocol support
2015-04-20 15:35:06 -05:00
wchen-r7
f280e5191b
I forgot to move this require statement
2015-04-16 21:11:09 -05:00
wchen-r7
3493d25ff9
Move all this to Rex
2015-04-16 21:07:23 -05:00
rwhitcroft
602e9c8df1
Update client.rb
2015-04-16 16:06:16 -04:00
rwhitcroft
6ef86b69a7
Fix loop spinning in HttpClient
2015-04-16 10:49:47 -04:00
jvazquez-r7
2e52817b24
Add DecodeError
2015-04-05 18:16:19 -05:00
jvazquez-r7
85a70d401b
Introduce Rex::Proto::Rmi::DecodeError
2015-04-05 18:15:04 -05:00
jvazquez-r7
72c36eb23e
Use concatenation
2015-04-05 15:57:50 -05:00
jvazquez-r7
e3bbb7c297
Solve conflicts
2015-04-03 14:57:49 -05:00
root
4ba761986f
Correct YARD doc comments
2015-04-02 16:14:25 +05:00
jvazquez-r7
6ea42f6599
Fix description
2015-03-24 12:30:27 -05:00
jvazquez-r7
39e87f927a
Make code consistent
2015-03-24 11:44:26 -05:00
jvazquez-r7
04341bfc78
Support JMX_ROLE again
2015-03-23 17:32:26 -05:00
jvazquez-r7
d8d4c23d60
JMX code refactoring
2015-03-23 17:06:51 -05:00
jvazquez-r7
962bb670de
Remove old JMX mixin
2015-03-23 15:48:10 -05:00
jvazquez-r7
5c3134a616
Add first support to gather information from RMI registries
2015-03-19 11:16:04 -05:00
jvazquez-r7
14be07a2c4
Update java_rmi_server modules
2015-03-17 21:29:52 -05:00
jvazquez-r7
6315e07312
Add specs for UniqueIdentifier
2015-03-17 20:38:43 -05:00
jvazquez-r7
87b777e923
Refactor moving code to rex
2015-03-17 17:15:32 -05:00
jvazquez-r7
1c064f6b46
Land #3074 , @0x41414141 SMB Share mixin
2015-03-04 10:16:04 -06:00
jvazquez-r7
8328c5c5e9
Add specs for SMB_FIND_FILE_BOTH_DIRECTORY_INFO requests
2015-03-03 12:43:41 -06:00
jvazquez-r7
eb3aedf4a7
Define constants for WordCount in responses
2015-02-28 18:15:14 -06:00
jvazquez-r7
89a033c194
Delete unnecessary paddings due to miscalculations
2015-02-26 15:54:00 -06:00
William Vu
0a51ca12a5
Download all of every file implicitly
2015-02-26 14:10:53 -06:00
William Vu
d0ca1b2dc6
Delete a thing I added for no reason
2015-02-26 14:06:10 -06:00
William Vu
5996256ccc
Fix formatting
2015-02-26 14:05:50 -06:00
jvazquez-r7
c73ffea1b9
Do minor cleanup
2015-02-26 12:50:45 -06:00
HD Moore
d75f55e493
Rex should not depend on ActiveSupport, .blank? is not stdlib Ruby
2015-02-26 11:23:38 -06:00
jvazquez-r7
970f0c94b2
Create CREATE_ANDX constants
2015-02-26 10:44:07 -06:00
Matthew Hall
ab1bb0e50d
bugfixes to https://github.com/jvazquez-r7/metasploit-framework/tree/review_3074_clean_server
...
to provide consistent support for various exploits and OS SMB Commands.
Reintroduces smb_cmd_trans_query_path_info_network for use with the Struts2 JSP injection vulnerability.
Reintroduces smb_cmd_trans_query_file_info_basic for common use with rundll32.
Corrects some issues with filename formatting and pattern matching for file requests (can still be improved).
2015-02-26 16:10:34 +00:00
William Vu
ed9213eb4c
Add fsquery check to fs{download,delete} methods
2015-02-25 17:37:20 -06:00
William Vu
ea5b6f66d4
Add UEL to fsdownload method
2015-02-25 17:35:34 -06:00
William Vu
5d3c7f3b4a
Add fsquery method
2015-02-25 17:18:23 -06:00
William Vu
1f981dd336
Add FSQUERY constant
2015-02-25 17:00:27 -06:00
jvazquez-r7
993c75ec77
Update Offset counts with constants
2015-02-25 16:25:16 -06:00
William Vu
91f0713056
Add fsdelete method
2015-02-25 15:41:40 -06:00
William Vu
a096a17e21
Add FSDELETE constant
2015-02-25 15:39:51 -06:00
William Vu
80d8491d09
Add fsdownload method
2015-02-25 15:00:31 -06:00
William Vu
e8c2c3687d
Replace "pathname" with "path"
...
This always bothered me, since I usually say "path."
2015-02-25 15:00:18 -06:00
William Vu
02ea7a0282
Add FSDOWNLOAD constant
2015-02-25 15:00:11 -06:00
jvazquez-r7
df50aa0f06
Use constants for DataCount and DataCountTotal
2015-02-25 14:11:38 -06:00
jvazquez-r7
f21959a8a2
Add constants for session setup actions
2015-02-25 13:31:57 -06:00
jvazquez-r7
e967cfbfb3
Create Access rights constants
2015-02-25 13:22:16 -06:00
jvazquez-r7
1caffbea2d
Add constants for Negotiation Capabilities
2015-02-25 12:50:33 -06:00
jvazquez-r7
50d50d5353
Define constants for SMB Flags
2015-02-25 12:28:25 -06:00
jvazquez-r7
e5d9bb0a47
Update from master
2015-02-25 11:37:13 -06:00
jvazquez-r7
ec9be4531b
Add SMB_CREATE_ANDX_RES_PKT template
2015-02-25 11:33:08 -06:00
jvazquez-r7
d10385cfed
Add template for SMB_TREE_CONN_ANDX_RES_PKT
2015-02-24 19:27:25 -06:00
jvazquez-r7
642765aeb5
Delete comments
2015-02-24 18:27:02 -06:00
jvazquez-r7
bb36899699
Do templates names consistent
2015-02-24 18:26:46 -06:00
jvazquez-r7
d29e9fc20b
Parse TRAN2_FIND_FIRST2 commands
2015-02-24 17:02:49 -06:00
Brent Cook
ab4a416958
comment out duplicate keys that can only be used for reference
...
ruby is ignoring all but the second instances, and 2.2 still throws a
warning
2015-02-24 08:50:02 -06:00
William Vu
5eec07d4d1
Fix duplicate hash key "jpeg"
...
In lib/rex/proto/http/server.rb.
2015-02-24 05:19:42 -06:00
jvazquez-r7
ea483f14a1
Try to fix logic for query information levels
2015-02-23 17:17:33 -06:00
jvazquez-r7
3fca26a5de
Add support for SMB_COM_TRANSACTION2 data blocks and params
2015-02-23 16:37:39 -06:00
jvazquez-r7
a06d07d6da
Clean smb_cmd_trans2_query_file_information dispatching
2015-02-23 12:03:08 -06:00
jvazquez-r7
3d7381b62a
Handle TRANS2 commands
2015-02-23 11:33:49 -06:00
jvazquez-r7
52a0e6dd1c
Mark a couple of handlers for later review
2015-02-20 16:28:04 -06:00
jvazquez-r7
a91d19e0e7
Add template for SMB_QUERY_FILE_STANDARD_INFO
2015-02-20 10:58:15 -06:00
jvazquez-r7
21978a1bfe
Add template for SMB_QUERY_FILE_BASIC_INFO
2015-02-20 10:40:45 -06:00
jvazquez-r7
cf63e09188
Add templates for SMB_FIND_FILE_FULL_DIRECTORY_INFO_HDR and SMB_FIND_FILE_NAMES_INFO_HDR
2015-02-20 09:17:51 -06:00
jvazquez-r7
f2405a5dc0
Create SMB_FIND_FILE_BOTH_DIRECTORY_INFO_HDR_LENGTH constant
2015-02-20 00:35:26 -06:00
jvazquez-r7
571dffa317
Create template for SMB_FIND_FILE_BOTH_DIRECTORY_INFO
2015-02-20 00:22:33 -06:00
jvazquez-r7
94ad64546c
Create TRANS2_PARAMETERS template
2015-02-19 23:16:52 -06:00
jvazquez-r7
b24b94ddd3
Do first cleanup of find_first2 handlers
2015-02-19 19:08:56 -06:00