1
mirror of https://github.com/rapid7/metasploit-payloads synced 2024-11-20 14:39:22 +01:00
Commit Graph

2694 Commits

Author SHA1 Message Date
Spencer McIntyre
3a3003724d Extract the extension name for logging purposes 2020-06-18 15:06:38 -04:00
Spencer McIntyre
7d672ce7bf Use DER instead of PEM encoding for RSA keys in Python 2020-06-18 14:34:30 -04:00
Spencer McIntyre
c8312f9c73
Land #397, Change from PEM to DER for crypt TLV negotiation 2020-06-18 13:54:31 -04:00
Metasploit
29b41f4807 Bump metasploit-payloads to 2.0.5 2020-06-18 12:43:41 -05:00
Spencer McIntyre
4c452b0ad3
Land #414, Fix config generation for migration 2020-06-18 09:02:40 -04:00
OJ
45624d2389
Fix config generation for migration 2020-06-18 09:15:50 +10:00
OJ
aacaf43ace
Revert mistaken modification to pom.xml 2020-06-15 17:13:03 +10:00
Metasploit
50790e89f3 Bump metasploit-payloads to 2.0.4 2020-06-12 08:44:32 -05:00
Spencer McIntyre
25efce032c
Land #404, Remove the old Mimikatz extension 2020-06-12 09:34:43 -04:00
Metasploit
6a655c6ff6 Bump metasploit-payloads to 2.0.3 2020-06-11 10:51:07 -05:00
Spencer McIntyre
538381ba08
Land #399, Add TLV encryption support to the Python Meterpreter 2020-06-11 11:38:25 -04:00
OJ
c5f8f893ac
Remove the mimikatz extension
Also turn off PDB generation for the sniffer extension.
2020-06-11 08:34:17 +10:00
Metasploit
6c51b5849c Bump metasploit-payloads to 2.0.2 2020-06-10 09:11:40 -05:00
Jeffrey Martin
5e1362eb26
add bump of metasploit-payloads to 2.0.1 2020-06-10 08:39:30 -05:00
OJ
f06122e2b6
Land #406 - Fix NameError in _core_enumextcmd 2020-06-10 07:45:13 +10:00
Spencer McIntyre
dee9e10d7e Fix a NameError in _core_enumextcmd 2020-06-09 17:21:56 -04:00
OJ
50048d02ca
Fix up TLV types and remove ones that don't exist 2020-06-09 10:57:44 +10:00
OJ
6419fa9e40
Fix buffer meta type values, typos and function calls 2020-06-09 10:57:44 +10:00
OJ
30f232a7fd
Adjust TLV types and fix up code to deal with new raw api 2020-06-09 10:57:44 +10:00
OJ
5fc2117325
Adjust the tlv raw function and remove some unnecessary headers 2020-06-09 10:57:43 +10:00
OJ
53dc79f384
Update PHP to use DER instead of PEM for RSA 2020-06-09 10:57:43 +10:00
OJ
5c959187ea
Support pub key in DER instead of PEM
Easy change on the Windows side, we just needed to remove the code that
converts PEM to DER and off we go.
2020-06-09 10:54:28 +10:00
OJ
b37ebe0666
Merge remote-tracking branch 'zs/wip/pr/399' into python-tlv-enc 2020-06-07 09:07:43 +10:00
Spencer McIntyre
2165857599 Make some change for Python version compatibility 2020-06-05 12:05:42 -04:00
OJ
2c8ca18d2d
Updated with some more comments 2020-06-05 08:41:24 +10:00
Brent Cook
3bdd83779f
Land #395, Replace METHOD string with COMMAND_ID integer 2020-05-28 16:22:02 -05:00
Brent Cook
44be44ed89 bump to 2.0.0 2020-05-28 16:21:40 -05:00
Metasploit
873ad69319 Bump metasploit-payloads to 1.4.3 2020-05-20 22:53:06 -05:00
Brent Cook
b70d38ab9f
Land #393, fix java meterpreter shell stderr output 2020-05-20 22:44:00 -05:00
OJ
9019b2fa05
Land Tim's string comparison fix 2020-05-18 19:50:50 +10:00
Tim W
79e2018f0d fix stdapi_channel_open 2020-05-18 17:02:22 +08:00
OJ
42a785b33f
Add RSA encryption support 2020-05-11 19:09:23 +10:00
OJ
e9e5894eca
Updated powershell extension binding IDs 2020-05-08 17:17:25 +10:00
OJ
bfd6e9af0d
Enable encryption of TLV packges with AES
Still need to support RSA encryption of the generated key
2020-05-07 19:37:22 +10:00
OJ
1945275be3
Get the last of the android stuff working 2020-05-04 19:14:14 +10:00
OJ
28d522561b
Finalised android support.. I think.
Still can't get it to build because I'm a java/mvn noob. NO idea what's
going on.
2020-05-04 17:19:56 +10:00
OJ
fad9548108
Adjust the extension and command identifiers (windows) 2020-05-04 14:04:34 +10:00
OJ
fc0079e98a
Update enumeration commands to support the id range 2020-05-01 15:55:43 +10:00
OJ
d3f3a513de
Update command id maps for php, java and python 2020-05-01 15:42:45 +10:00
OJ
6163be1142
Updated powershell extension with appropriate command map 2020-05-01 15:41:31 +10:00
OJ
8669ba8996
Merge branch 'remove-tlv-command-strings' of github.com:OJ/metasploit-payloads into remove-tlv-command-strings 2020-05-01 15:38:21 +10:00
OJ
3f574e3521
Implement extendion IDs and refactor command enum
Enumeration of commands was a bit of a hack, and still resultsed in
strings (like "stdapi") to appear in binaries, and also meant that
extensions needed to identify themselves.

This code changes the way this works. Extensions no longer have a name.
Instead they have an internal ID tha maps to the command sets they
support. To enumerate extension commands, MSF will ask for a range of
commands, and if any command IDs fit within that range, they'll be
returned.

This moves us towards a nicer way of handling things across all the
meterpreters.
2020-05-01 15:36:07 +10:00
Tim W
48a9c6c77e fix java meterpreter > shell stderr 2020-04-30 16:03:36 +08:00
OJ
5e31a39eaa
Finalise changes to Java for Command ID support 2020-04-30 17:44:59 +10:00
OJ
dc40ddc38d
Rename the tcp channel open command in python 2020-04-30 15:57:43 +10:00
OJ
c466527fb6
First pass of java support for UINT comamnd
Also had to fix up some implementation issues (such as riding off the
back of the command functionality to make channels... noooo!
2020-04-30 13:39:58 +10:00
OJ
409e6cce6d
Update python meterpreter to use UINT command ids
This is based heavily off the work that zeroSteiner did last year.
2020-04-29 16:59:51 +10:00
OJ
c9284388d9
Update PHP meterpreter to support UINT command IDs 2020-04-29 15:42:25 +10:00
OJ
c7f7bc2fc0
Remove method strings from TLV packets
We now use ints, and hopefully this means we don't have as much obvious
stuff in the binaries!

```
$ # Before:
$ strings metsrv.x86.dll | grep core_ | wc -l
46
$ # After:
$ strings metsrv.x86.dll | grep core_ | wc -l
0
```
Big win, and it's even bigger for the likes of stdapi.

Had to fix a bunch of other stuff along the way, including a subtle
issue with the Powershell Meterp bindings.
2020-04-28 23:41:06 +10:00
Metasploit
2824292111 Bump metasploit-payloads to 1.4.2 2020-04-24 21:10:32 -05:00