sinn3r
6795c90eac
Some progress
2015-03-31 20:46:34 -05:00
sinn3r
97305629cb
Add Solarwinds FSM module
...
starter
2015-03-31 16:21:52 -05:00
Brent Cook
c666d0494f
Land #5043 @todb-r7's release fixups
2015-03-31 13:41:24 -05:00
Tod Beardsley
d1318d1b48
Fixups for release
2015-03-31 11:02:12 -05:00
OJ
86d8aab854
Land #5040 : Remove wininet hack for http/s meterp
2015-03-31 14:50:13 +10:00
Brent Cook
d89cd118e0
remove wininet workaround in meterpreter http/s
...
We had a workaround to close connections on very old wininet implementations
that would not do it themselves. With the new WinHttp API-using meterpreters
and stagers, we no longer should use this workaround. It can actually be
actively bad and prematurely close the connection.
This needs testing around different payloads, and they should be on real
networks, ideally where TCP really has to work to get data transfered.
2015-03-30 23:38:32 -05:00
Tod Beardsley
3f0f659eaf
Land #5019 , add rescues to some LoginScanners
2015-03-30 16:06:51 -05:00
Tod Beardsley
b770f8dca4
Land #5026 , #5027 , #5028 : Doc grammar
...
This merge covers three PRs. It /should/ autoresolve #5026 and #5028 , but
I will have to manually close #5027 with this comment.
2015-03-30 12:55:19 -05:00
sinn3r
613f4777ce
Land #5024 , add joomla_ecommercewd_sqli_scanner.rb
2015-03-30 12:45:09 -05:00
Tod Beardsley
f663f39e1f
Bring in #5026 for minor edits
2015-03-30 12:11:29 -05:00
Dillon Korman
be7ffc9a0d
Bring in #5027 for only a couple edits
...
Switching from " to ' is usually more trouble than it's worth, even if
it's more technically correct. The original PR had a great example of
that kind of error, where you accidentally screw up an interior
apostraphe.
[See #5027 ]
2015-03-30 12:08:52 -05:00
Tod Beardsley
7697ff1295
Revert a couple of the suggested edits
...
In the main, though, the edits are good. Just disagree with a couple.
[See #5028 ]
2015-03-30 12:04:15 -05:00
Tod Beardsley
ffc9659024
Bring in #5028 for more edits
2015-03-30 11:59:18 -05:00
sinn3r
2181c572b8
Land #5021 , nessus.rb "imported" status
2015-03-30 11:33:55 -05:00
sinn3r
8ea1ffc6ff
Land #5030 , CVE-2015-0313 Flash Exploit
2015-03-30 11:31:53 -05:00
David Maloney
103373a7eb
add back accidentally remvoed error
...
accidentally dropped Errno::ETIMEDOUT from the exception
handling
MSP-12389
2015-03-30 11:19:28 -05:00
jvazquez-r7
ee404713f1
Land #5014 , @wchen-r7's module for MS14-052
...
* As auxiliary module to gather info about existent local files
2015-03-30 11:02:56 -05:00
jvazquez-r7
8ff54ff98d
Add msb reference
2015-03-30 10:58:08 -05:00
sinn3r
9af1e76bf7
Obfuscate js
2015-03-30 10:52:01 -05:00
sinn3r
c7fa01c5ae
Rename file
2015-03-30 10:39:33 -05:00
Joshua Smith
3d2f9b282d
Land #5031 , fix ms10_104_sharepoint description
2015-03-30 00:00:21 -05:00
Samuel Huckins
13fc498523
Land #4948 , fixes several AppScan import issues
2015-03-29 23:33:01 -05:00
OJ
ae86f23b4d
Land #5033 : Fix logic in EncodedPayload
2015-03-30 10:16:35 +10:00
HD Moore
e65ac57d1b
Fix a logic check in EncodedPayload, which unbreaks stageless testing
2015-03-29 19:08:35 -05:00
h00die
28b9e89963
removed duplicate "uses" from description
2015-03-29 19:40:31 -04:00
OJ
d3d920b810
Land #5029 : Support large payloads for msfvenom EXE
2015-03-30 08:54:00 +10:00
jvazquez-r7
11c6f3fdca
Do reliable resolution of kernel32
2015-03-29 15:52:13 -05:00
HD Moore
a1c755161a
Add spec coverage for appender, fix injector
2015-03-29 11:52:06 -05:00
Dillon Korman
6c707c8ad8
Update README.md
2015-03-29 01:08:06 -10:00
HD Moore
607cc8fef6
Remove a stale comment
2015-03-29 01:54:07 -05:00
HD Moore
0a4a72f49d
Support templates with small text sections (win32)
2015-03-29 01:51:58 -05:00
HD Moore
b9b40edde9
Major speedup, especially for large shellcode (stageless)
2015-03-29 00:44:06 -05:00
Meatballs
fd45d92cb7
Add reference for mssql_local_hashdump
2015-03-29 02:14:20 +01:00
Meatballs
c430e5fab1
@m7x forgot to put a reference in
2015-03-29 02:13:31 +01:00
Dillon Korman
0d110ad896
Update CONTRIBUTING.md
...
Grammar and style.
2015-03-28 15:11:05 -10:00
Meatballs
8b622fb7ee
Land #4822 , grab MSSQL hashdump a la mssql_local_auth_bypass
2015-03-29 00:54:31 +00:00
Meatballs
9eca3a0ab5
Impersonation spec
2015-03-29 00:52:27 +00:00
Dillon Korman
6c36c8cec7
Update README.md
...
Grammar and style.
2015-03-28 14:51:15 -10:00
Meatballs
10029eedb9
Add command specs
2015-03-29 00:05:44 +00:00
Meatballs
f7e3abf760
sqlcmd specs and fixes
2015-03-28 23:23:00 +00:00
Meatballs
3b651aecdc
Specs for sqlserver check and fixes
2015-03-28 22:59:00 +00:00
Brandon Perry
9f0483248c
add TARGETURI datastore option
2015-03-28 15:46:41 -05:00
Meatballs
da49709845
Add yarddoc
2015-03-28 20:31:36 +00:00
Meatballs
8e22255a40
Small tidyup/rubocop
...
Signed-off-by: Meatballs <eat_meatballs@hotmail.co.uk>
2015-03-28 20:31:36 +00:00
Meatballs
9529eed41d
More specific matching
2015-03-28 20:31:35 +00:00
Meatballs
a30d8f7040
Add requires
2015-03-28 20:31:35 +00:00
Meatballs
2ed9489f38
Delete load line
2015-03-28 20:31:35 +00:00
Meatballs
a1d74c27c6
Check for only running services
2015-03-28 20:31:35 +00:00
Meatballs
99f79e8533
Use incognito token stealing rather than process migration if we have
...
the privileges required for successful impersonation.
2015-03-28 20:31:35 +00:00
Meatballs
9c2219124c
Remove some comments
2015-03-28 20:31:35 +00:00