infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
31,710 Commits
7 Branches
556 Tags
421 MiB
Commit Graph

31710 Commits (f676dc03c85b54df394b1f4fe5c48c04a4df44e5)

Author SHA1 Message Date
jvazquez-r7 3e8bbb6c9e Add documentation for SMB_COM_CLOSE handling 2015-03-02 10:36:13 -06:00
Brandon Turner 6b3de2850b
Merge remote-tracking branch 'origin/release' 2015-03-01 00:50:34 -06:00
Brandon Turner c86b56684a
Fix bug preventing updates in pro 
The RPC code previously tested return values to see if an error key was
equal to true.  In 251c284458, this was
changed to check if the error key was truthy.

The pro updater returns an error key with a string describing an error
(or an empty string for no error).  Ruby strings evaluate as truthy
which caused the new behavior to throw an error.  This prevented
checking for and applying updates.

This reverts to the original behavior of checking for true explicitly
instead of checking for a truthy value.

MSP-12235
 2015-02-28 23:46:57 -06:00
William Vu ef330b970b
Land #4860, @OJ's Seagate 0day hotness 2015-02-28 21:55:54 -06:00
OJ 905a539a00 Add exploit for Seagate Business NAS devices 
This module is an exploit for a pre-authenticated remote code execution
vulnerability in Seagate Business NAS products.
 2015-03-01 13:25:28 +10:00
Brandon Perry f8e3874203 add nil check 2015-02-28 20:43:19 -06:00
sinn3r 4a1fbbdc3b Use datastore to find payload name 2015-02-28 19:56:32 -06:00
jvazquez-r7 227cf4500d define constants for tree connect access rights 2015-02-28 18:38:45 -06:00
jvazquez-r7 e322aca1ba
Merge constants for reponses wordcounts 2015-02-28 18:24:47 -06:00
jvazquez-r7 eb3aedf4a7 Define constants for WordCount in responses 2015-02-28 18:15:14 -06:00
Matthew Hall 402fa127e6 Merge pull request #3 from jvazquez-r7/review_3074_clean_server 
Land the merge. Code looks good to me! :-) thanks @jvazquez-r7
 2015-02-28 22:10:17 +00:00
jvazquez-r7 7d8b78c2e8
Merge session_setup refactoring 2015-02-28 15:14:33 -06:00
sinn3r 5f8c14c958 Fix check for TrueClass, plus other small changes 2015-02-28 14:11:15 -06:00
sinn3r 6f4259f2de Revert #4859, temporary solution for unbreaking client 
This reverts commit 7ab86be72a, reversing
changes made to 49ae173057.
 2015-02-28 14:07:26 -06:00
sinn3r 1b699b0ddc Resolve merge conflict 
Conflicts:
	lib/msf/core/rpc/v10/client.rb
 2015-02-28 14:07:01 -06:00
jvazquez-r7 eb7ac02d1a Normalize handlers names 2015-02-28 12:14:58 -06:00
jvazquez-r7 1d602d38c9 Refactor SessionSetupAndx handler 2015-02-28 12:10:48 -06:00
William Vu b27c9b9efc
Land #4838, reverse_http{,s} listening service fix 2015-02-27 21:02:58 -06:00
Tod Beardsley 7ab86be72a
Land #4859, reverting #4823. 
PR #4823 caused some update issues. I think #4823's heart was in the
right place, and I imagine it was only one or two lines that caused the
failures.
 2015-02-27 17:55:29 -06:00
sinn3r ac81318e7a Revert #4823, changes for ruby style guide 
This reverts commit 885469ca52, reversing
changes made to fd73445d9b.

Please see: #4823 for why.
 2015-02-27 17:28:00 -06:00
sinn3r bdc9f684c2 Check True in error response for mspc 
Without this check, it causes Pro to behave different (malfunction)
 2015-02-27 17:21:23 -06:00
sinn3r ef9196ba6c Correct comment 2015-02-27 13:27:49 -06:00
sinn3r 7b6c39058a Correct target name 2015-02-27 13:24:57 -06:00
sinn3r 90aff51676 Add CVE-2014-7285, Symantec Web Gateway restore.php Command Injection 2015-02-27 12:31:29 -06:00
jvazquez-r7 544f88620d
Merge more mixin refactor 2015-02-27 01:55:14 -06:00
jvazquez-r7 e5e13108ed Refactor close handling 2015-02-26 23:50:10 -06:00
jvazquez-r7 5418cdad11 Refactor negotiate handling 2015-02-26 23:49:07 -06:00
jvazquez-r7 5ed1f8d44f Make opts optional 2015-02-26 23:39:17 -06:00
jvazquez-r7 882f0bdc0e Refactor read_andx request handling 2015-02-26 23:35:12 -06:00
jvazquez-r7 5b770f9f7a Refactor nt_create_andx requests 2015-02-26 23:31:09 -06:00
jvazquez-r7 70033576fe Refactor query information level 2015-02-26 23:22:57 -06:00
Brent Cook 49ae173057
Land #4844: the final tweaks to @wv-r7's PJL extensions 2015-02-26 17:39:49 -06:00
Brent Cook 1454ad79d8
Land #4844: @wv-r7 extends the PJL repetoire 2015-02-26 17:29:28 -06:00
jvazquez-r7 a3097b2854
Merge find information level refactoring 2015-02-26 16:50:16 -06:00
jvazquez-r7 d544da22b5 Always send answer 2015-02-26 16:47:05 -06:00
jvazquez-r7 45be95747f Refactor Find Information Levels 2015-02-26 16:46:34 -06:00
jvazquez-r7 89a033c194 Delete unnecessary paddings due to miscalculations 2015-02-26 15:54:00 -06:00
David Maloney 095431c323
fix note search conditions 
note search conditions needed to know about
vuln_id or else vuln notes would get overwritten

MSP-12183
 2015-02-26 15:48:04 -06:00
Tod Beardsley 14b46161e3
Land #4851, fix rb-readline-r7 checker 2015-02-26 15:19:17 -06:00
William Vu 260c603ffb Fix msfconsole -L 
s/rb-readline/rb-readline-r7/

Should have been in #4816 (#4128).
 2015-02-26 15:14:38 -06:00
Tod Beardsley f9b47a329d
Land #4800, remove Lorcon source 
It's maintained upstream, mentioned in #3200, and the modules that did
use these were themselves broken.
 2015-02-26 15:03:32 -06:00
jvazquez-r7 387c966550 Fix unnecessary paddings 2015-02-26 15:00:53 -06:00
David Maloney a72d49678a
only match by CVE refs 
the other refs can be non-specific and refer
to multiple distinct vulns, resulting in
incorrect refs being attached to a vuln leading to
a snowball effect with more and more vulns being
misidentified.

MSP-12183
 2015-02-26 14:57:16 -06:00
William Vu b35011012c Remove LORCON from LICENSE 2015-02-26 14:53:23 -06:00
William Vu b223dbdfcf Nuke external LORCON code from orbit 2015-02-26 14:52:01 -06:00
jvazquez-r7 500e4707ab Use smb_error 2015-02-26 14:35:52 -06:00
Bazin Danil 3aa68c30b0 => not => ! 2015-02-26 21:31:01 +01:00
Bazin Danil a427e417a3 -consomation +consumption 2015-02-26 21:23:09 +01:00
William Vu 3efae77212 Use /dev/null instead of /etc/passwd 
File.read returns "" on /dev/null. Don't try it on /dev/zero. :-)
 2015-02-26 14:19:25 -06:00
William Vu f625ad4f9c Remove unnecessary tests in spec 2015-02-26 14:12:39 -06:00