OJ
1a6bb89845
Update to build against new libs, remove hacks to make things work
2020-04-14 12:40:02 +10:00
OJ
443bfca952
Update JPEG lib to build with VS2019 toolset 141_xp
2020-04-14 12:29:59 +10:00
OJ
712268fab7
Get Python extension building clean
...
Warnings as errors, builds clean. Had to do some horrible hacks:
1) Include custom implementation of a lib function just so we could
link against stuff built with older VS.
2) Include legacy symbols for old io for the same reason.
2020-04-14 12:13:30 +10:00
OJ
100ffd6d5b
First round of VS2019 changes
2020-04-14 10:28:08 +10:00
Brent Cook
2e9943af8d
Land #385 , enhance Windows extapi support for window enumeration
...
Merge remote-tracking branch 'upstream/pr/385' into upstream-master
2020-04-08 06:04:41 -05:00
Brent Cook
49b117838a
Land #384 , don't modify stageless config block in place
2020-04-07 17:15:33 -05:00
Brent Cook
bf8950ebe9
remove unneeded checks before free, one being an impossible scenario
2020-04-07 17:15:03 -05:00
cn-kali-team
6d7740cc72
Process Unicode support
2020-04-05 11:53:22 +08:00
cn-kali-team
451a094269
Process Unicode support
2020-04-05 11:53:16 +08:00
cn-kali-team
25f770dcb3
Process Unicode support
2020-04-05 11:53:06 +08:00
cn-kali-team
a8df9b3604
Process Unicode support
2020-04-05 11:52:08 +08:00
bwatters
903620268f
Land #377 , Reducing permissions requested for sys_steal_token
...
Merge branch 'land-377' into upstream-master
2020-04-02 08:37:42 -05:00
cn-kali-team
348aa69f68
Add window class name filter,Unicode Support etc.
2020-03-27 22:12:37 +08:00
cn-kali-team
443b6f2f23
add window class name filter
2020-03-27 22:12:04 +08:00
OJ
8b4d65de47
Fix stageless config block memory protection
...
I found an edge case where stageless payloads did not work when they
were embedded in .NET applications. The reason for this is because the
configuration block is stored alongside the code in stageless payloads
and hence is loaded into memory as part of the section when it's mapped.
This section, in native world, remains RWX, and hence we don't have a
problem reading from and writing to it. We write to it for various
reasons, such as when the session guid changes.
In .NET land, this section is mapped as RX instead of RWX. This means
that when we try to write to it, the program segfaults due to an access
violation.
This code modifies the loading of the configuration so that instead of
maintaining a pointer to the original configuration, it instead creates
a copy of it on the heap. I preferred this fix over marking the memory
as RWX, which obviously stands out a bit more.
2020-03-17 13:15:31 +10:00
Spencer McIntyre
03ddbd773e
Send addrinfo when opening a channel in Windows
2020-02-24 18:40:12 -05:00
Justin Bui
bad3ef7df4
Update config.c
...
Reduced permissions from ALL_ACCESS to the minimum access needed.
2020-02-12 20:18:18 -08:00
Francesco Soncina
b35cc0ac70
add support for PPID spoofing
...
fix #373
2019-12-17 00:57:49 +01:00
Brent Cook
363a90be11
Land #370 , update kiwi to latest mimikatz release
2019-12-06 09:34:15 -06:00
Brent Cook
c3624d73b2
bump to kiwi 2.2.0-20191125
2019-12-06 09:28:19 -06:00
Brent Cook
188fef721e
Land #366 , fix unhook extension logic around clr.dll
2019-12-05 17:02:55 -06:00
Brent Cook
03491bfa9b
Land #361 , add hidpi and multi-desktop support to espia screengrab extension
2019-12-05 16:51:39 -06:00
Brent Cook
81a4d8ad96
Land #360 , fix crypt key memory leak
2019-12-05 16:50:29 -06:00
OJ
d2f7bfd420
Update to kiwi 2.2.0-20190813
2019-11-17 13:14:07 +10:00
Francesco Soncina
b527e76abd
fix: syntax error
2019-11-07 17:19:16 +01:00
Francesco Soncina
e386835042
fix: exclude clr.dll from being unhooked
...
see https://github.com/rapid7/metasploit-framework/issues/12549
2019-11-07 17:11:02 +01:00
Tim W
a74dedca56
fix espia screenshot
2019-10-22 23:51:21 +08:00
max3raza
71762fe778
fix for memory leak
2019-09-09 22:20:17 +03:00
plowsec
389e71df32
Fix address truncation occurring in x64 Windows processes.
2019-09-06 14:50:13 +02:00
bwatters
f6808dde30
Land #352 , add windows keyevent api
...
Merge branch 'land-352' into upstream-master
2019-09-03 16:39:51 -05:00
Tim W
6253af16c8
use MapVirtualKey
2019-07-31 13:16:28 +08:00
bwatters
db171fb83a
Those should be usigned ints, not unsigned longs.
2019-07-23 10:21:21 -05:00
bwatters
509c1936a3
Update OS names to be more generic in kernel versions 10.0.x
2019-07-23 08:17:06 -05:00
Tim W
d95d827c8e
add windows mouse doubleclick
2019-06-20 15:26:07 +08:00
Tim W
ab53c872fa
fix windows move and click
2019-06-19 12:42:11 +08:00
Tim W
a29110ca5c
add windows keyevent api
2019-06-17 12:36:55 +08:00
Brent Cook
dfb79b11cd
Land #343 , update ReflectiveDLLInjection subproject
2019-06-01 19:53:13 -05:00
Tim W
48171ecc48
fix crash in keyboard_send on windows
2019-05-31 06:55:02 +08:00
Tim W
d2e9834ed0
update ReflectiveDLLInjection subproject
2019-05-16 14:04:23 +08:00
Tim W
16213667b7
add mouse api for windows
2019-05-13 02:32:27 +08:00
Tim W
35d908b6bf
add send_keys api for windows
2019-05-13 02:31:44 +08:00
Brent Cook
a1a38466a0
Land #322 , fix meterpreter > ls on 4gb files
2019-02-06 17:51:58 -06:00
Brent Cook
7e2181700a
update stat struct sizes
2019-02-06 17:51:21 -06:00
Tim W
783c52e118
fix windows meterpreter ls of 4gb files
2019-01-03 13:51:39 +08:00
Pernat1y
0ebf1193e7
Update README.md
2018-12-28 12:36:48 +02:00
Pernat1y
3530c98f8b
Updated links for Visual Studio
2018-12-28 12:17:44 +02:00
Brent Cook
1d694f16cb
Land #314 , update proxy autoconfig for Windows
2018-12-21 16:21:55 -06:00
Brent Cook
3762aa1568
Land #311 , add REG_MULTI_SZ read support
2018-12-21 16:10:14 -06:00
bwatters
6431374acf
Land #302 , Add universal unhooking call to meterpreter server
...
Merge branch 'land-302' into upstream-master
2018-12-12 16:12:56 -06:00
OJ
9b3a8280b1
Update to kiwi 2.1.1-20181203
2018-12-05 12:05:07 +10:00
