bed40a83ee
fix #4337 : gracefully handle resolve_sid failure when enumerating user profiles
...
Rather than throwing a backtrace with an unresolvable SID, try to get as
much profile data as possible if resolve_sid fails.
```
[*] Determining session platform and type...
[-] Unexpected windows error 1332
[*] Checking for Firefox directory in:
C:\Users\Administrator\AppData\Roaming\Mozilla\
[-] Firefox not found
[*] Post module execution completed
```
2015-02-17 13:03:12 -06:00
a8f44ca68f
stop the http service when the reverse http handler stops
2015-02-17 12:38:20 -06:00
6eaa3c264c
Land #4763 , LSBackgroundOnly for safari_user_assisted_download_launch
2015-02-17 10:41:59 -06:00
e08206d192
Land #4768 , jvazquez-r7 reorganizes the SMB mixins
2015-02-17 10:36:19 -06:00
0597d2defb
Land #4560 , Massive Java RMI update
2015-02-17 10:07:07 -06:00
a22f5c1287
Add extra readme check for case sensitive servers
2015-02-14 23:43:04 +00:00
2c842ee6d7
Fix namespaces on Server
2015-02-13 17:34:55 -06:00
9b7bbc220b
Fix namespaces on Client
2015-02-13 17:33:41 -06:00
46c6ac9ca1
Redefine namespaces and requires
2015-02-13 17:09:06 -06:00
df1daff673
Move clients
2015-02-13 17:07:03 -06:00
067aadf3a4
Fix namespaces
2015-02-13 17:05:46 -06:00
f1ab7ed343
Mode smb.rb
2015-02-13 17:04:55 -06:00
7367402bf1
Add requires
2015-02-13 17:03:48 -06:00
ccabf30531
Move smb_server.rb
2015-02-13 16:58:19 -06:00
ce688f4247
Land #4765 , Rails4 compatible finder conversion
...
* find_or_initialize_by_DYNAMIC
2015-02-13 15:56:09 -06:00
7b7a6340c0
Land #4766 , fixes vuln import finder query
2015-02-13 14:29:04 -06:00
dc6a365a13
Fix finder query in Msf::DBManager::Vuln
...
MSP-12152
* This is part of updating finder queries to be Rails 4 compatibile
* In #find_vuln_by_details, pass in conditons hash crit rather than symbol :crit
2015-02-13 13:21:25 -06:00
6b99103cec
Land #4690 - Update Nessus plugin to support the latest REST API
...
Resolves #4447
2015-02-13 12:46:01 -06:00
dc1eab377c
Rails 4 finder conversion: convert find_or_initialize_by_x_and_y
...
MSP-12153
* convert to where(conditions).first_or_initialize
2015-02-13 12:39:44 -06:00
f5e0dddd3c
Correct authentication
...
Can't always be true
2015-02-13 11:48:10 -06:00
49c9c02b53
Hide the dropped osx app.
2015-02-12 23:08:46 -06:00
3ae3d56caa
Land #4745 , fixes #4711 , BrowserAutoPwn failing due to getpeername
2015-02-12 16:51:09 -06:00
39c0065560
Land #4758 , SMTPDeliver DATA header fix
2015-02-12 15:07:31 -06:00
f0bf881cc3
Land #4720 , update Rails 3-style .find(:first)
...
Eliminate the Rails 3-style .find(:first) calls, and replace with
Rails 4-compatible .first().
Fixes #4720 , also see MSP-12012
2015-02-12 14:30:13 -06:00
72878e0c14
fixes bug with smtp header order
...
SMTP servers that support pipelining will not accept any
commands other than MAILFROM and RCPTTO before the DATA
command. We were sending Date and Subject before Data
which would cause some mailservers to suddenly drop
the connection refusing to send the mail.
MSP-12133
2015-02-12 14:13:39 -06:00
50c72125a4
::Errno::EINVAL, disable obfuscation, revoke ms14-064
2015-02-12 11:54:01 -06:00
199dca75a6
Implement db_import and finalize plugin
2015-02-12 13:32:49 +05:00
7c57b9fb57
Fix Master - Pro build
...
MSP-12138
* revert to previous Rails 3 syntax.
2015-02-11 12:02:34 -06:00
64b69d597a
Add report_download and db_scan APIs
2015-02-11 14:11:10 +05:00
22811257db
Fix #4711 - Errno::EINVA (getpeername(2)) BrowserAutoPwn Fix
...
This patch fixes #4711 .
The problem here is that the browser sometimes will shutdown some of our
exploit's connections (in my testing, all Java), and that will cause Ruby
to call a rb_sys_fail with "getpeername(2)". The error goes all the
way to Rex::IO::StreamServer's monitor_listener method, which triggers a
"break" to quit monitoring. And then this causes another chain of reactions
that eventually forces BrowserAutoPwn to quit completely (while the
JavaScript on the browser is still running)
2015-02-10 18:28:02 -06:00
29c68ef1ec
End fixing namespaces
2015-02-10 11:55:14 -06:00
6e635211b3
Modify include
2015-02-10 10:59:56 -06:00
dba67bd1ee
Do more code reorganization
2015-02-10 10:58:57 -06:00
aa9e686965
Reorganize Java related mixin code
2015-02-10 10:52:44 -06:00
1f4fdb5d18
Update from master
2015-02-10 10:47:17 -06:00
e5fd9e70eb
clean plugin/nessus.rb implement additional APIs
2015-02-10 12:40:20 +05:00
0a42ac947a
Land #4737 , fix Socket Context usages
2015-02-09 17:34:03 -06:00
9a445e2027
Land #4707 , updates to finder syntax
...
Updates some Rails 3 style ActiveRecord calls to use the Rails 4 Arel
syntax, in preparation for our move to Rails 4.
Fixes #4707 , also see MSP-12018
2015-02-09 16:01:38 -06:00
2a3855c5af
Skip the psh prepend sleep time error when it is 0
2015-02-09 14:20:04 -05:00
133ae4cd04
Land #4679 , Windows Post Gather File from raw NTFS.
2015-02-08 18:50:50 +00:00
8cefe637df
bug with testing Win2k8 correction
2015-02-08 17:28:33 +01:00
8d982e3286
Pass the framework/module down into LoginScanner
2015-02-07 11:50:30 -06:00
985641dbc4
Add missing Context, fixes #4723
2015-02-07 11:27:57 -06:00
358ab2590e
Small tidyup
2015-02-07 11:35:47 +00:00
c20a81217c
More work for nessus-xmlrpc.rb
2015-02-07 00:09:02 -06:00
e8ba0b7c31
Fix broken commands
2015-02-06 19:07:43 -06:00
531743eff1
Land #4697 , updates to finder syntax
...
Updates some Rails 3 style ActiveRecord calls to use the Rails 4 Arel
syntax, in preparation for our move to Rails 4.
Fixes #4697 , also see MSP-12016
2015-02-06 15:41:11 -06:00
0fc4e09466
Rails 4 finder conversions
...
MSP-12017
* covert all(options), mapping options hashes to the
appropirate Rails 4 methods
2015-02-06 13:51:48 -06:00
1051f0fb82
Rails 4 finder conversion
...
MSP-12012
* convert find(:first, options) by mapping options
to methods
2015-02-06 10:15:50 -06:00
9a53859a77
Rails 4 finder conversion
...
MSP-12012
* covert find(:first) to first
2015-02-06 10:13:14 -06:00
4e0a62cb3a
Land #4664 , MS14-070 Server 2003 tcpip.sys priv esc
2015-02-05 18:49:15 -05:00
970c5d115a
spellcheck
2015-02-05 22:08:39 +01:00
5a39ba32f6
Make the ret instruction for token stealing optional
2015-02-05 14:00:38 -05:00
2744db4d11
Add nessus_scan_export and nessus_scan_export_status methods
2015-02-05 22:18:22 +05:00
434bca0b27
Land #4613 , auxiliary/server/capture/smb credential creation
2015-02-04 22:45:36 -06:00
df22ed2132
Land #4702 , Fix bug in Firefox XPCOM payload on Linux
2015-02-03 21:36:01 -06:00
c0e1440572
Land #4685 , @FireFart's module for Wordpress Platform Theme RCE
2015-02-03 17:35:59 -06:00
3deac54d3f
Convert find_or_initialize_by_X to Rails 4 compatible.
...
MSP-12018
2015-02-03 16:09:49 -06:00
ffe0e52cb6
The iax2 stack now works properly with asterisk 1.8
...
Note that the requirecalltoken=no setting is still required in the asterisk configuration at this point.
2015-02-02 22:29:13 -06:00
0ba34422d5
Pass the debugging option for IAX2 Client
2015-02-02 21:08:16 -06:00
ee1af83cc8
Go ahead and trim whitespace on all commands coming in.
2015-02-02 16:56:22 -06:00
797b5d0d55
Convert #find_or_create_by_x to #where().first_or_create
...
MSP-12016
2015-02-02 12:22:26 -06:00
dda87667c9
Land #4688 , fix for pcap magic number on 2.x
2015-02-02 11:00:13 -06:00
23af5f8c82
Nessus plugin for REST API
2015-02-01 13:54:35 +05:00
7f0af0211d
Land #4682 , exploit/http/server.rb breakup
2015-02-01 01:44:43 -06:00
7d1090baca
Convert #find(:all) to #where or #all
2015-02-01 00:31:58 -06:00
ad374c2e4f
Use ASCII-8BIT for comparing pcap magic number
...
In Ruby 2, source files are read as UTF-8 by default. When comparing
PCAP headers, we should use ASCII-8BIT or else the comparison will not
work. This should be backwards compatible with Ruby 1.9.
MSP-12092
2015-01-31 23:57:49 -06:00
8740fd9015
Convert #find_all_by_X to #where
2015-01-31 21:07:50 -06:00
2c956c0a0f
add wordpress platform theme rce
2015-01-31 22:02:44 +01:00
fbb85c0391
using string concatenation for performence
2015-01-31 05:13:44 +01:00
d9c64397fd
shorter the line, using more variables
2015-01-31 04:32:32 +01:00
0fce908045
add constant class
2015-01-31 04:19:27 +01:00
f4ec6bdc78
- use non-native pack/unpack directives
...
- coding: binary
- use constant for data_attribute
2015-01-31 03:59:23 +01:00
cf891efc14
Land #4674 , @wvu-r7 teaches msfconsole to read stdin as -
2015-01-30 18:25:09 -06:00
fdf88b9563
Land #4639 , incorrect use of #class fixes
...
case uses === internally. :)
2015-01-30 16:57:59 -06:00
253d8e60dd
Land #4388 , Meatballs1's golden ticket post module
2015-01-30 16:26:04 -06:00
1fbed1dcfc
Autoload instead of require
2015-01-30 15:42:16 -06:00
062529ce3b
Move HttpServer::HTML into its own file
2015-01-30 15:24:15 -06:00
3572ce9a37
Break PHPInclude into its own file
2015-01-30 15:16:54 -06:00
3954c0e3aa
Land #4654 , test module fixes
2015-01-30 15:00:54 -06:00
68b735dbda
Add a NTFS parser and a post module to dump files
...
This commit add a draft of an NTFS Parser and a post module
to gather file using the raw NTFS device (\\.\C:)
bypassing restriction like already open file with lock
Can be used to retreive file like NTDS.DIT without volume shadow copy
2015-01-30 19:16:44 +01:00
03169f231b
Handle one redirection on wordpress_and_online?
2015-01-30 10:26:23 -06:00
c098de27ee
Do safer body check
2015-01-30 10:22:43 -06:00
bc65d2f526
Make filename compatible with namespace
2015-01-30 10:22:07 -06:00
7504358db3
code style and typos
2015-01-30 15:57:32 +01:00
a0eaf2f626
add wordpress ghost scanner module
2015-01-30 15:29:51 +01:00
39004d265b
Increase default buffer sizes to reduce railgun calls
2015-01-30 11:20:03 +00:00
6b97618fb2
Improve resolve_sid API calls
2015-01-30 11:20:03 +00:00
02864b4401
Railgun DWORD handling
2015-01-30 11:20:03 +00:00
044e3bd608
Golden Ticketz Post module
2015-01-30 11:20:02 +00:00
aec0067d14
Land #4673 , screenshot -v hardcoded false fix
2015-01-29 19:40:15 -06:00
8f54e4d611
Implement "-" for msfconsole -r from stdin
...
More predictable than /dev/stdin, which is usually a symlink to
/proc/self/fd/0 or /dev/fd/0, but the feature is not guaranteed to be
present.
This isn't *terribly* useful, but it can be. -x is recommended, but it
doesn't allow for ERB directives. This is mostly for hax.
2015-01-29 19:26:56 -06:00
59eec8f81e
Land #4666 - Improve utility of meterpreter file upload command
...
Fix #4665
2015-01-29 19:12:31 -06:00
823c75908d
Fix #4672 - Fix Hardcoded false for screenshot -v
...
Fix #4672
2015-01-29 16:54:41 -06:00
212aeb9106
Improve utility of meterpreter file upload command
...
Rather than assume that the destination argument is a directory, check
first, and then do the same thing that 'cp' would do.
- If dest exists and is a directory, copy to the directory.
- If dest exists and is a file, copy over the file.
- If dest does not exist and is a directory, fail.
- If dest does not exist and is a file, create the file.
2015-01-29 13:45:15 -06:00
6ecb36df52
Land #4653 , get/set/unset description improvement
2015-01-29 13:28:06 -06:00
9d8d17805d
Land #4661 - Replace direct class comparison with kind_of?
2015-01-28 18:06:43 -06:00
bb17d75425
Replace direct class comparison with kind_of?
2015-01-28 17:00:15 -06:00
cc7be4a9c1
Land #4643 - Fix blank username bug in creds -u
...
Fix #4634
2015-01-28 15:31:54 -06:00
f0742a38e2
The get command too
2015-01-28 12:59:51 -06:00
Brent Cook
sinn3r
rastating
jvazquez-r7
Samuel Huckins
Christian Catalan
Sonny Gonzalez
joev
William Vu
Matt Buck
David Maloney
root
Tod Beardsley
Spencer McIntyre
Meatballs
Bazin Danil
HD Moore
root
Trevor Rosen
Brandon Turner
Christian Mehlmauer
James Lee