df9c3da47e
Land #10842 , Add Windows Post Module to roll back Windows Defender signatures
...
Merge branch 'land-10842' into upstream-master
2018-12-03 10:57:38 -06:00
a801d741c9
Remove old module
2018-11-30 17:28:54 -06:00
70031b6721
Shut up msftidy and document updates
2018-11-30 16:41:40 -06:00
3c992b7af1
Updated documentation and added options in the module to update or roll back
...
definitions
2018-11-30 16:25:33 -06:00
a41b9a77d8
Change the module name, fix cleanup, add documentation
2018-11-30 15:20:34 -06:00
1304f93f1f
Add more checks and a cleanup function
2018-11-29 10:39:46 -06:00
d6db5ebdfe
Land #10716 , Create PureVPN Credential Collector Post Explotation Module
2018-11-27 17:42:23 -06:00
830a80e598
Check -1 user/pass condition and improved exception handling
2018-11-27 16:23:09 -06:00
7f26364d5b
Changes suggested by OJ
2018-10-29 22:01:47 -05:00
b4c005c4d4
Land #10561 , Add Windows local privilege escalation - CVE-2018-0824
...
Merge branch 'land-10561' into upstream-master
2018-10-25 13:22:31 -05:00
569c2e03c9
Fix exploit relics and documentation
2018-10-23 17:15:34 -05:00
927a29530b
Remove duplicated files
2018-10-23 12:31:18 -05:00
74683ce951
Add Windows Post Module to disable Windows Defender signatures
2018-10-21 12:07:54 -05:00
47353553e5
Get everything together finally (still needs cleanup)
2018-10-19 18:15:44 -05:00
b678db8bb6
Remove spaces at EOL
2018-09-29 15:29:51 -04:00
8d1d6ff29f
Create PureVPN Credential Collector Post Explotation Module
2018-09-28 12:00:34 -04:00
87eb600510
Land #10611 , mRemote creds gather module fixes
...
Also update #10612 to align with these changes.
2018-09-10 15:25:09 -05:00
93a73f5e71
Fix store_loot OID
...
It's supposed to be a loot type, not the filename (now stored).
2018-09-10 15:19:28 -05:00
3ec4d2f22b
Normalize loot type OID
...
1. Include the vendor, product, and technology
2. Content type is already reported, extension changed
3. Original filename including extension is also reported
Can we get some sort of standard on the OID?
2018-09-10 15:06:07 -05:00
39a2d9d2a8
save xml files as xml
2018-09-09 21:24:39 -04:00
0072d9b9b1
save as xml since it is
2018-09-09 21:22:15 -04:00
70e22707c0
vi loves tabs but i dont
2018-09-09 21:19:17 -04:00
f926f6e9af
fix pathing in mremoteng
2018-09-09 21:07:47 -04:00
0aac9a4881
unmarshal
2018-08-30 20:49:09 +05:30
20daba6e2d
fix line endings
2018-08-28 11:33:17 -05:00
f1e4079641
move add_thread code to lib/rex/post/meterpreter/extensions/peinjector/peinjector.rb
2018-08-28 09:02:21 -05:00
015abca8af
MSFTidy module
2018-08-28 09:02:21 -05:00
bb151bb727
MSFTidy module
2018-08-28 09:02:21 -05:00
2251c4a712
Add peinjector post module
2018-08-28 09:02:21 -05:00
a020d48caf
Move module documentation to documentation directory
2018-07-13 04:46:25 +00:00
dbb0748c1c
Land #9998 , customizable golden ticket duration
2018-06-27 15:51:56 -05:00
d7770a98b2
s/Seperated/Separated/
2018-06-27 15:36:41 -05:00
c4bf12cbe0
ntds_grabber msftidy fixes
2018-06-26 08:22:11 -05:00
14da99bb3d
Fix missing RequestError in a few post modules
...
Should be Rex::Post::Meterpreter::RequestError.
2018-06-12 17:11:29 -05:00
a8fcd9d275
Fix display of uid in post/windows/gather/win_privs
...
`inspect` is not necessary and triggers display of Unicode characters as "\x.." instead of printing their value.
As discussed in PR #10044
2018-05-19 01:35:19 +02:00
08b81a418f
Customization of Golden Ticket Duration
...
- Post exploitation module updated
- Kiwi extention updated
Using mimikatz /startoffset and /endin params
Duration in hours, default already 10 years
2018-05-09 17:44:55 +02:00
916dfa56fe
Add author name to the wlan_probe_request post-exploitation module
2018-05-03 11:41:09 +02:00
f12f6d54a5
Land #9862 , Post-exploitation module for meterpreter (Windows) to send wireless probe requests
...
Merge branch 'land-9862' into upstream-master
2018-04-20 14:32:01 -05:00
2d33320921
Added a post-exploitation module to send wireless probe requests
2018-04-11 16:43:33 +02:00
be18930f12
Cleaned up output, only querying for %WINDIR% if necessary
2018-04-09 15:27:50 -05:00
c07f2f1a09
Update run_as.rb
2018-04-09 21:24:16 +05:30
c34b796f13
Remove temp file from dist after cmd execution
...
https://github.com/rapid7/metasploit-framework/issues/9830
2018-04-09 20:14:01 +05:30
0faf2f4e04
Land # 8007, Added NTDSgrab module to metasploit.
...
Merge branch 'land-8007' into upstream-master
2018-04-03 15:56:37 -05:00
e17be05e6a
Land #9595 , Add post module RID Hijacking on Windows
2018-04-03 14:12:34 -05:00
d6dc0a2d4f
Adjust rid_hijack.rb code style with rubocop recommendations.
2018-04-03 04:57:41 +02:00
57b048fbf7
Remove requires, changed in-place modification
2018-03-26 17:46:18 -05:00
18a1593de7
Clean up registry and fix bug when cleaning the windows local file
2018-03-02 02:31:09 -05:00
d1e91dfdfd
Fix bug
2018-03-01 22:19:03 -05:00
2bb8fc7325
Fix bug
2018-03-01 22:16:59 -05:00
174c47195a
Add options LocalExePath, StartupName, ServiceDescription
2018-02-27 05:32:07 -05:00
bwatters-r7
Wei Chen
Luisco100
Agora Security
William Vu
h00die
7echSec
alpiste
Brendan Coles
Jacob Robles
Clément Notin
Hypnoze57
Borja Merino
Aaron Soto
Auxilus
r4wd3r
Green-m