OJ
1fb386c93b
Remove metcli and bare extension projects
2020-04-22 13:01:26 +10:00
OJ
fef2c54b91
Change README to point to existing Choco package for VS2013
2020-04-22 07:17:10 +10:00
OJ
fda53ff14b
Update readme to reference vsconfig files
2020-04-21 20:18:04 +10:00
OJ
429c5f4bd8
Add VS configurations to the source to make it easy to install tools
2020-04-21 19:57:57 +10:00
OJ
42e833c8fa
Update readme slightly
2020-04-21 19:24:23 +10:00
OJ
6df6bc9c56
Update install and build instructions in the README
...
This now shows how to install various VS versions correctly from
scratch.
2020-04-21 18:14:18 +10:00
OJ
5ab1d39776
Slight makefile tweak
2020-04-21 10:21:51 +10:00
OJ
23b7a7b9ad
Finalise support for building on all the toolsets.
2020-04-21 09:37:11 +10:00
OJ
f8154f8e04
Finalise support for VS2013/VS2017/VS2019 & v120_xp/v141_xp
...
These changes allow us to build across multiple toolsets and VS
versions.
2020-04-21 08:10:42 +10:00
OJ
74c9c79892
Enable multie-CPU builds
...
Added /MP for parallel builds, and removed precompiled headers as /Yc
isn't compat with /MP.
Not enabled for the Powershell extension because of it's .NET-ness.
2020-04-16 15:30:17 +10:00
OJ
dbe13941c3
Update mimikatz code to avoid warnings
2020-04-16 11:06:59 +10:00
OJ
124a3a7c0c
Updated deps to include new LibreSSL stuff
2020-04-16 10:59:21 +10:00
OJ
f27e09e85f
Update deps, remove unused folder
2020-04-15 14:32:01 +10:00
OJ
8f5d4bef01
Replace OpenSSL with LibreSSL in the Python extension
...
This was a bit of a pain, but was well worth it. Had to add a couple of
hacks to make it all work, but this is a nicer solution than having to
depend on OpenSSL and its horrendous build experience.
2020-04-15 13:43:50 +10:00
OJ
306e2f9399
Update the bare template
2020-04-14 20:13:02 +10:00
OJ
3809651b79
Fix a slight issue with the old Mimikatz extension
2020-04-14 14:42:10 +10:00
OJ
ef721b1f3c
Update make file and dependencies
2020-04-14 14:24:30 +10:00
OJ
1aea69806a
Update sniffer SDK libs
2020-04-14 14:09:12 +10:00
OJ
078a3e960f
Finalise 'Release' build for both x86 and x64 _clean_
...
Still need to fix dependencies and whatnot as well.
2020-04-14 13:18:25 +10:00
OJ
1a6bb89845
Update to build against new libs, remove hacks to make things work
2020-04-14 12:40:02 +10:00
OJ
443bfca952
Update JPEG lib to build with VS2019 toolset 141_xp
2020-04-14 12:29:59 +10:00
OJ
712268fab7
Get Python extension building clean
...
Warnings as errors, builds clean. Had to do some horrible hacks:
1) Include custom implementation of a lib function just so we could
link against stuff built with older VS.
2) Include legacy symbols for old io for the same reason.
2020-04-14 12:13:30 +10:00
OJ
100ffd6d5b
First round of VS2019 changes
2020-04-14 10:28:08 +10:00
Brent Cook
2e9943af8d
Land #385 , enhance Windows extapi support for window enumeration
...
Merge remote-tracking branch 'upstream/pr/385' into upstream-master
2020-04-08 06:04:41 -05:00
Brent Cook
49b117838a
Land #384 , don't modify stageless config block in place
2020-04-07 17:15:33 -05:00
Brent Cook
bf8950ebe9
remove unneeded checks before free, one being an impossible scenario
2020-04-07 17:15:03 -05:00
cn-kali-team
6d7740cc72
Process Unicode support
2020-04-05 11:53:22 +08:00
cn-kali-team
451a094269
Process Unicode support
2020-04-05 11:53:16 +08:00
cn-kali-team
25f770dcb3
Process Unicode support
2020-04-05 11:53:06 +08:00
cn-kali-team
a8df9b3604
Process Unicode support
2020-04-05 11:52:08 +08:00
bwatters
903620268f
Land #377 , Reducing permissions requested for sys_steal_token
...
Merge branch 'land-377' into upstream-master
2020-04-02 08:37:42 -05:00
cn-kali-team
348aa69f68
Add window class name filter,Unicode Support etc.
2020-03-27 22:12:37 +08:00
cn-kali-team
443b6f2f23
add window class name filter
2020-03-27 22:12:04 +08:00
OJ
8b4d65de47
Fix stageless config block memory protection
...
I found an edge case where stageless payloads did not work when they
were embedded in .NET applications. The reason for this is because the
configuration block is stored alongside the code in stageless payloads
and hence is loaded into memory as part of the section when it's mapped.
This section, in native world, remains RWX, and hence we don't have a
problem reading from and writing to it. We write to it for various
reasons, such as when the session guid changes.
In .NET land, this section is mapped as RX instead of RWX. This means
that when we try to write to it, the program segfaults due to an access
violation.
This code modifies the loading of the configuration so that instead of
maintaining a pointer to the original configuration, it instead creates
a copy of it on the heap. I preferred this fix over marking the memory
as RWX, which obviously stands out a bit more.
2020-03-17 13:15:31 +10:00
Spencer McIntyre
03ddbd773e
Send addrinfo when opening a channel in Windows
2020-02-24 18:40:12 -05:00
Justin Bui
bad3ef7df4
Update config.c
...
Reduced permissions from ALL_ACCESS to the minimum access needed.
2020-02-12 20:18:18 -08:00
Francesco Soncina
b35cc0ac70
add support for PPID spoofing
...
fix #373
2019-12-17 00:57:49 +01:00
Brent Cook
363a90be11
Land #370 , update kiwi to latest mimikatz release
2019-12-06 09:34:15 -06:00
Brent Cook
c3624d73b2
bump to kiwi 2.2.0-20191125
2019-12-06 09:28:19 -06:00
Brent Cook
188fef721e
Land #366 , fix unhook extension logic around clr.dll
2019-12-05 17:02:55 -06:00
Brent Cook
03491bfa9b
Land #361 , add hidpi and multi-desktop support to espia screengrab extension
2019-12-05 16:51:39 -06:00
Brent Cook
81a4d8ad96
Land #360 , fix crypt key memory leak
2019-12-05 16:50:29 -06:00
OJ
d2f7bfd420
Update to kiwi 2.2.0-20190813
2019-11-17 13:14:07 +10:00
Francesco Soncina
b527e76abd
fix: syntax error
2019-11-07 17:19:16 +01:00
Francesco Soncina
e386835042
fix: exclude clr.dll from being unhooked
...
see https://github.com/rapid7/metasploit-framework/issues/12549
2019-11-07 17:11:02 +01:00
Tim W
a74dedca56
fix espia screenshot
2019-10-22 23:51:21 +08:00
max3raza
71762fe778
fix for memory leak
2019-09-09 22:20:17 +03:00
plowsec
389e71df32
Fix address truncation occurring in x64 Windows processes.
2019-09-06 14:50:13 +02:00
bwatters
f6808dde30
Land #352 , add windows keyevent api
...
Merge branch 'land-352' into upstream-master
2019-09-03 16:39:51 -05:00
Tim W
6253af16c8
use MapVirtualKey
2019-07-31 13:16:28 +08:00
