1
mirror of https://github.com/rapid7/metasploit-framework synced 2024-11-05 14:57:30 +01:00
Commit Graph

42837 Commits

Author SHA1 Message Date
David Maloney
722d9a278c
Land #8580, cachedump iteration count fix
lands rogdham's fixes for the ms cache dump post module
2017-06-19 14:04:07 -05:00
David Maloney
27469f8fac
Land #8582, Rogdham Hashdump fixes
Land's Rogdham's fixes to the Hashdump post module
to support Windows 10!
2017-06-19 13:40:40 -05:00
David Maloney
6d38dffbe1
convert conditionals to case statements
just a little tidying up by using case statements
2017-06-19 13:40:00 -05:00
h00die
071dc09b1f fix spelling 2017-06-19 10:31:24 -05:00
OJ
a48f0fcec6
Remove references to Meterpreter CRYPTO TLVs
This feature wasn't supported, and so the TLVs are no longer needed.
2017-06-19 16:53:33 +10:00
Rogdham
a01796d114 Make hashdump module work on Windows 10, fix #7936 2017-06-18 16:35:17 +02:00
Tim
03116d7933
Land #8543, add error handling to ARM linux reverse tcp stager 2017-06-18 15:38:16 +08:00
Tim
210a4cb299 fix indent 2017-06-18 15:35:23 +08:00
Mzack9999
7fb36edd50 corrected msftidy warnings 2017-06-17 22:58:47 +02:00
Mzack9999
31a5cc94b2 Easy File Sharing HTTP Server 7.2 - Post Overflow exploit 2017-06-17 22:35:21 +02:00
Rogdham
75fab600c5 Add iteration count to cachedump module, fix #8560 2017-06-17 22:23:41 +02:00
Rogdham
86f5f3f002 Fix AES key length in cachedump module, fix #8525 2017-06-17 11:20:29 +02:00
RageLtMan
42d1fae2e6 Upstream console search additions and fixes
The -S flag for console commands, backed by search functionality
in Rex' tables, originally pushed upstream in #1604 (iirc), lacks
coverage for a number of commands which benefit a good deal from
inline filtering of the potentially large number of results.

Push more -S flags and surrounding table functionality upstream
to provide coverage for the console commands included in framework.

Include a fix for deleting hosts when DB references are a problem.

Include a fix for the upstream route command wherein scope must be
defined for the routing target by assuming a /32 without explicit
definition.

Note:
  With this in place, console behavior when filtering results is
roughly analagous to the R7 filtering in web UI, which should help
those of us trying to use both maintain corresponding workflows.

Testing:
  Used in-house for years, though changes to the diff from upstream
and our fork (expunging some internal code) are untested, so would
appreciate eyes and hands on.
2017-06-16 20:28:51 -04:00
William Webb
652e237131
add missing .to_binary_s calls 2017-06-16 13:39:04 -05:00
Metasploit
9ce0bb9345
Bump version of framework to 4.14.28 2017-06-16 10:02:07 -07:00
SecureAB
ef7434b59b added new authentitcity_token scheme 2017-06-16 16:54:38 +02:00
tkmru
1773a5f188 fix indent 2017-06-16 15:57:09 +09:00
@tkmru
4647f3410a Merge pull request #1 from timwr/fix-8543
fix mmap return cmp
2017-06-16 15:30:02 +09:00
Brent Cook
55b71e115f
Land #8535, MSGRPC module minor fixes 2017-06-15 21:44:34 -05:00
thesubtlety
49d998f7d9 catch invalid tokens 2017-06-15 21:45:29 -04:00
Brent Cook
53253bfa37
Land #8558, Fix AMT scanner when parsing mangled HTML 2017-06-15 20:42:33 -05:00
OJ
f4158eeac9
Land #8568 : Move php_preamble before $ipaddr and $port 2017-06-16 11:16:30 +10:00
thesubtlety
f4ffade406 add ability to specify API token instead of password 2017-06-15 21:05:53 -04:00
William Vu
5f74da9023 Move php_preamble before $ipaddr and $port
php_preamble contains a <?php tag now, so we need to move it to the top.
2017-06-15 19:50:57 -05:00
OJ
c634931f0d
Updated payload cached size after the python3 fix 2017-06-16 09:05:31 +10:00
OJ
2c0f41ee8f
Fix session guid handling in python 3
I made the mistake of using str.decode() which isn't a thing in python3
(works fine in 2). So this commit fixes it so that the GUID string
itself is generated directly as a byte string, so that the call to
decode() isn't needed at all.
2017-06-16 09:01:29 +10:00
Tim
9cf9d22bae fix mmap return cmp 2017-06-16 06:26:40 +08:00
Pearce Barry
9d57197736
Land #8551, Update processmaker_exec module with workspace support 2017-06-15 17:12:35 -05:00
Pearce Barry
cab64fc8b2
Land #8564, Fix cryptolog desc 2017-06-15 13:39:56 -05:00
Tod Beardsley
49383f8f3a Update and fix grammar to the CryptoLog module
After talking to the vendor, it appears that the PHP version of CryptoLog has been EOL'ed since 2009. It has since been replaced with an ASP.NET version, which, obviously, is no longer vulnerable to these PHP exposures.
2017-06-15 13:00:44 -05:00
Tod Beardsley
b6fd0ce5e3 Merge pull request #16 from rapid7/master
Resync with upstream
2017-06-15 12:55:18 -05:00
William Vu
549f9e74d8 Fix AMT scanner for mangled HTML (no </p>)
Also stores proof using the correct :info for report_vuln (not :proof).
2017-06-14 16:54:32 -05:00
Mehmet Ince
c147779097
Add CVE number to the symantec-messaging-gateway-exec module 2017-06-14 23:07:58 +03:00
James Lee
c1372456e2
Land #8326, support LLMNR ANY responses 2017-06-14 14:01:44 -05:00
Pearce Barry
e64fcfc6f1
Land #8534, Fix nessus_template_list command argument parsing 2017-06-14 08:29:30 -05:00
RageLtMan
32fbad7fca Style changes for cmd_ps cleanup 2017-06-14 01:28:21 -04:00
James Lee
55f0edb732
Land #8491, fixes for service_persistence 2017-06-13 17:17:53 -05:00
Brendan Coles
0766f92013 Add option for workspace 2017-06-13 12:46:36 +00:00
Jeffrey Martin
cbbb57d1a5
Land #8526, Refactor QNAP and airOS modules for creds 2017-06-12 14:46:11 -05:00
William Vu
a40e7164d8 Refactor QNAP module for traditional creds 2017-06-12 14:41:58 -05:00
William Vu
bb9d1a6768
Land #8507, Riverbed SteelHead VCX file read 2017-06-12 10:39:48 -05:00
Pearce Barry
704a1218fa
Land #8498, store more specific credential wordpress_directory_traversal_dos 2017-06-12 10:13:52 -05:00
Pearce Barry
80e91e9de2
Minor fixups. 2017-06-12 09:51:30 -05:00
Metasploit
0515980138
Bump version of framework to 4.14.27 2017-06-12 07:39:14 -07:00
RageLtMan
762427b447 Clean up cmd_ps table output for Mettle
Mettle can run in all sorts of environments where some colums of a
process table will be nil. The existing implementation compacts
rows going into the table while providing filtering for the colum
contents only by checking the output of the first row in the proc
table.

Check column filters against all rows to ensure proper table init.
Check columns going into table for match against header.
Do not compact nil values in the table rows - some things, like
kthreads/workers dont have a path while other PIDs will.
2017-06-12 01:20:59 -04:00
tkmru
93c4b3fffc update CacheSize 2017-06-12 01:39:13 +09:00
tkmru
1862900aae add error handling 2017-06-12 01:36:13 +09:00
tkmru
17d7bb0c64 add label and regster value to comment 2017-06-11 20:38:47 +09:00
h00die
a349eb9a0d fixes per peer review 2017-06-10 14:29:53 -04:00
Mehmet Ince
6ae540d889
Adding Symantec messaging gateway rce 2017-06-10 12:23:12 +03:00