1
mirror of https://github.com/rapid7/metasploit-framework synced 2024-10-29 18:07:27 +01:00
Commit Graph

32184 Commits

Author SHA1 Message Date
sinn3r
6795c90eac Some progress 2015-03-31 20:46:34 -05:00
sinn3r
97305629cb Add Solarwinds FSM module
starter
2015-03-31 16:21:52 -05:00
Brent Cook
c666d0494f
Land #5043 @todb-r7's release fixups 2015-03-31 13:41:24 -05:00
Tod Beardsley
d1318d1b48
Fixups for release 2015-03-31 11:02:12 -05:00
OJ
86d8aab854
Land #5040: Remove wininet hack for http/s meterp 2015-03-31 14:50:13 +10:00
Brent Cook
d89cd118e0 remove wininet workaround in meterpreter http/s
We had a workaround to close connections on very old wininet implementations
that would not do it themselves. With the new WinHttp API-using meterpreters
and stagers, we no longer should use this workaround. It can actually be
actively bad and prematurely close the connection.

This needs testing around different payloads, and they should be on real
networks, ideally where TCP really has to work to get data transfered.
2015-03-30 23:38:32 -05:00
Tod Beardsley
3f0f659eaf
Land #5019, add rescues to some LoginScanners 2015-03-30 16:06:51 -05:00
Tod Beardsley
b770f8dca4
Land #5026, #5027, #5028: Doc grammar
This merge covers three PRs. It /should/ autoresolve #5026 and #5028, but
I will have to manually close #5027 with this comment.
2015-03-30 12:55:19 -05:00
sinn3r
613f4777ce Land #5024, add joomla_ecommercewd_sqli_scanner.rb 2015-03-30 12:45:09 -05:00
Tod Beardsley
f663f39e1f
Bring in #5026 for minor edits 2015-03-30 12:11:29 -05:00
Dillon Korman
be7ffc9a0d
Bring in #5027 for only a couple edits
Switching from " to ' is usually more trouble than it's worth, even if
it's more technically correct. The original PR had a great example of
that kind of error, where you accidentally screw up an interior
apostraphe.

[See #5027]
2015-03-30 12:08:52 -05:00
Tod Beardsley
7697ff1295
Revert a couple of the suggested edits
In the main, though, the edits are good. Just disagree with a couple.

[See #5028]
2015-03-30 12:04:15 -05:00
Tod Beardsley
ffc9659024
Bring in #5028 for more edits 2015-03-30 11:59:18 -05:00
sinn3r
2181c572b8
Land #5021, nessus.rb "imported" status 2015-03-30 11:33:55 -05:00
sinn3r
8ea1ffc6ff
Land #5030, CVE-2015-0313 Flash Exploit 2015-03-30 11:31:53 -05:00
David Maloney
103373a7eb
add back accidentally remvoed error
accidentally dropped Errno::ETIMEDOUT from the exception
handling

MSP-12389
2015-03-30 11:19:28 -05:00
jvazquez-r7
ee404713f1
Land #5014, @wchen-r7's module for MS14-052
* As auxiliary module to gather info about existent local files
2015-03-30 11:02:56 -05:00
jvazquez-r7
8ff54ff98d
Add msb reference 2015-03-30 10:58:08 -05:00
sinn3r
9af1e76bf7 Obfuscate js 2015-03-30 10:52:01 -05:00
sinn3r
c7fa01c5ae Rename file 2015-03-30 10:39:33 -05:00
Joshua Smith
3d2f9b282d
Land #5031, fix ms10_104_sharepoint description 2015-03-30 00:00:21 -05:00
Samuel Huckins
13fc498523
Land #4948, fixes several AppScan import issues 2015-03-29 23:33:01 -05:00
OJ
ae86f23b4d
Land #5033: Fix logic in EncodedPayload 2015-03-30 10:16:35 +10:00
HD Moore
e65ac57d1b Fix a logic check in EncodedPayload, which unbreaks stageless testing 2015-03-29 19:08:35 -05:00
h00die
28b9e89963 removed duplicate "uses" from description 2015-03-29 19:40:31 -04:00
OJ
d3d920b810
Land #5029 : Support large payloads for msfvenom EXE 2015-03-30 08:54:00 +10:00
jvazquez-r7
11c6f3fdca
Do reliable resolution of kernel32 2015-03-29 15:52:13 -05:00
HD Moore
a1c755161a Add spec coverage for appender, fix injector 2015-03-29 11:52:06 -05:00
Dillon Korman
6c707c8ad8 Update README.md 2015-03-29 01:08:06 -10:00
HD Moore
607cc8fef6 Remove a stale comment 2015-03-29 01:54:07 -05:00
HD Moore
0a4a72f49d Support templates with small text sections (win32) 2015-03-29 01:51:58 -05:00
HD Moore
b9b40edde9 Major speedup, especially for large shellcode (stageless) 2015-03-29 00:44:06 -05:00
Meatballs
fd45d92cb7
Add reference for mssql_local_hashdump 2015-03-29 02:14:20 +01:00
Meatballs
c430e5fab1
@m7x forgot to put a reference in 2015-03-29 02:13:31 +01:00
Dillon Korman
0d110ad896 Update CONTRIBUTING.md
Grammar and style.
2015-03-28 15:11:05 -10:00
Meatballs
8b622fb7ee
Land #4822, grab MSSQL hashdump a la mssql_local_auth_bypass 2015-03-29 00:54:31 +00:00
Meatballs
9eca3a0ab5
Impersonation spec 2015-03-29 00:52:27 +00:00
Dillon Korman
6c36c8cec7 Update README.md
Grammar and style.
2015-03-28 14:51:15 -10:00
Meatballs
10029eedb9
Add command specs 2015-03-29 00:05:44 +00:00
Meatballs
f7e3abf760
sqlcmd specs and fixes 2015-03-28 23:23:00 +00:00
Meatballs
3b651aecdc
Specs for sqlserver check and fixes 2015-03-28 22:59:00 +00:00
Brandon Perry
9f0483248c add TARGETURI datastore option 2015-03-28 15:46:41 -05:00
Meatballs
da49709845 Add yarddoc 2015-03-28 20:31:36 +00:00
Meatballs
8e22255a40 Small tidyup/rubocop
Signed-off-by: Meatballs <eat_meatballs@hotmail.co.uk>
2015-03-28 20:31:36 +00:00
Meatballs
9529eed41d More specific matching 2015-03-28 20:31:35 +00:00
Meatballs
a30d8f7040 Add requires 2015-03-28 20:31:35 +00:00
Meatballs
2ed9489f38 Delete load line 2015-03-28 20:31:35 +00:00
Meatballs
a1d74c27c6 Check for only running services 2015-03-28 20:31:35 +00:00
Meatballs
99f79e8533 Use incognito token stealing rather than process migration if we have
the privileges required for successful impersonation.
2015-03-28 20:31:35 +00:00
Meatballs
9c2219124c Remove some comments 2015-03-28 20:31:35 +00:00