40898 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Louis Sato	3ced5aece1	added default name for nexpose site cred	2017-01-25 10:30:30 -06:00
Louis Sato	1c6d7ee33e	additional changes for Nexpose XXE Arbitrary File Read	2017-01-25 10:29:58 -06:00
Jeffrey Martin	eeba1e0bb2	first pass of upgrading nexpose gem to latest	2017-01-25 10:16:48 -06:00
Brent Cook	2541360a02	Land #7869, Merge branch 'land-7869-preg' into upstream-master	2017-01-25 03:48:22 -06:00
Brent Cook	9414b8ff4e	update payload sizes	2017-01-25 03:47:44 -06:00
William Vu	48ed8a72c2	Add helpful comment	2017-01-24 20:03:39 -06:00
William Vu	ec8add6caa	Always check and print status	2017-01-24 20:00:17 -06:00
William Vu	42a8e2a113	Remove extraneous variable	2017-01-24 19:50:31 -06:00
William Vu	97050a6c47	Fix nil bug in scan	2017-01-24 19:49:23 -06:00
Brent Cook	d48ec09934	Land #7868, add cmdline configuration for stageless mettle payloads	2017-01-24 09:51:43 -06:00
Brent Cook	2e1d381e2e	bump gem	2017-01-24 09:48:40 -06:00
Jeffrey Martin	7ce9bd574b	Land #7866, Re-set the TLV names for migration	2017-01-23 17:02:59 -06:00
OJ	a3cf400566	Re-set the TLV names for migration stuff	2017-01-24 07:36:56 +10:00
bwatters	253e39e18c	Land #7680, Fix #7679, LoginScanner should abort if there is no creds to try	2017-01-23 14:08:32 -06:00
wchen-r7	d9ead4484e	Mock :password	2017-01-23 13:42:30 -06:00
wchen-r7	f4db90edeb	Land #7852, Firefox nsSMILTimeContainer::NotifyTimeChange() rce	2017-01-23 11:56:01 -06:00
wchen-r7	04648888b3	Be conservative and do NormalRanking	2017-01-23 11:55:30 -06:00
wchen-r7	5de09d3455	Check username & password options	2017-01-23 11:42:04 -06:00
Brent Cook	53af3f286e	Land #7863, address tlv enum consistency (and add spec!)	2017-01-23 09:42:57 -06:00
Jeffrey Martin	2c8cd80a2b	revert change to TLV_TYPE_MIGRATE_LEN in #7856	2017-01-23 09:23:32 -06:00
Jeffrey Martin	7cf812ed99	add rspec test for inspect on all TLV_TYPE objects	2017-01-23 09:19:53 -06:00
Jeffrey Martin	677d070179	make tlv enum of migrate length consistent	2017-01-23 09:19:53 -06:00
Brent Cook	ff2b8dcf99	Revert "Land #7605, Mysql privilege escalation, CVE-2016-6664" - premature merge ... This reverts commit 92a1c1ece4, reversing changes made to 9b16cdf602.	2017-01-22 19:16:33 -06:00
Brent Cook	92a1c1ece4	Land #7605, Mysql privilege escalation, CVE-2016-6664	2017-01-22 17:17:28 -06:00
Pearce Barry	9b16cdf602	Land #7845, Fix Msf::Exploit::EXE shellcode/template mismatch	2017-01-22 16:09:41 -06:00
Brent Cook	981f318688	Land #7847, fix smali code injection for more APKs	2017-01-22 15:47:18 -06:00
Brent Cook	d9602f49a2	bump payloads	2017-01-22 15:45:45 -06:00
Brent Cook	414977125f	Merge remote-tracking branch 'upstream/master' into land-7847-	2017-01-22 14:11:40 -06:00
Brent Cook	f61314d2d6	Land #7856, Fix incorrect translations in TLV inspection code	2017-01-22 11:08:05 -06:00
Brent Cook	19f485b0ef	Land #7830, Added docs for tomcat_mgr_deploy and tomcat_mgr_upload	2017-01-22 11:04:13 -06:00
Brent Cook	b493ee98b6	Land #7857, added apache_commons_fileupload_dos docs	2017-01-22 10:54:32 -06:00
Brent Cook	ac2ceca5e3	Land #7804, Switch the creds command to use named options	2017-01-22 10:49:19 -06:00
Brent Cook	89b8df7a0e	Land #7862, Ruby 2.4 local fixes	2017-01-22 10:44:10 -06:00
Brent Cook	77e596263b	update lock	2017-01-22 10:43:06 -06:00
Brent Cook	6a2d036ea8	depend on regular rb-readline, bugs fixed upstream	2017-01-22 10:20:05 -06:00
Brent Cook	99047fa8a1	be stricter in what we accept for payload uri ... datastore needs to contain something to produce a valid URI	2017-01-22 10:20:04 -06:00
Brent Cook	9581f18392	handle nil pathname	2017-01-22 10:20:04 -06:00
Brent Cook	dc506c1dd6	present? is not a method of Pathname	2017-01-22 10:20:04 -06:00
Brent Cook	66e9f1d334	fix doc normalizer spec	2017-01-22 10:20:04 -06:00
Brent Cook	15a4ec629b	remove TRUE	2017-01-22 10:20:03 -06:00
Brent Cook	836da6177f	Cipher::Cipher is deprecated	2017-01-22 10:20:03 -06:00
Brent Cook	f69b4a330e	handle Ruby 2.4 Fixnum/Bignum -> Integer deprecations	2017-01-22 10:20:03 -06:00
Brent Cook	68816f6c5e	Land #7787, add ability to acquire the android wakelock	2017-01-22 10:03:09 -06:00
Brent Cook	28211c3b73	bump payloads	2017-01-22 10:02:41 -06:00
Brent Cook	441222c2b5	Merge remote-tracking branch 'upstream/master' into land-7787-	2017-01-22 09:44:11 -06:00
William Webb	5d08e0b24e	Land #7858, Make shell_command_token time out again	2017-01-21 13:18:37 -06:00
h00die	12a4a62737	Land #7848, a Disk Savvy Enterprise bof	2017-01-21 09:11:43 -05:00
Gabor Seljan	bda464fd6b	Increase output	2017-01-21 10:51:58 +01:00
Gabor Seljan	e3043b0889	Use random string as egg	2017-01-21 10:28:47 +01:00
Tim	67ec66cc83	Land #7846, add CSV and vCard support to dump_contacts	2017-01-21 16:46:14 +08:00