1
mirror of https://github.com/rapid7/metasploit-payloads synced 2024-11-20 14:39:22 +01:00
Commit Graph

3440 Commits

Author SHA1 Message Date
sjanusz-r7
4f19a1c4ae Fix Memory Search variable shadowing 2024-01-04 16:34:08 +00:00
sjanusz-r7
92d04de09c Add maximum match length limit to regex matcher 2023-12-11 14:06:32 +00:00
sjanusz-r7
8f51ee7e6d Move defs to top of file, remove pointer-to-pointer, make RegexNeedle contain static-size arrays 2023-12-11 14:06:32 +00:00
sjanusz-r7
72b39289d0 Compile regex in-place, rename CHAR to CHAR_RE due to Windows typedef'ing CHAR, correctly free compiled needle and associated buffer 2023-12-11 14:06:32 +00:00
sjanusz-r7
6e2889d64c Add Windows Memory Search support using regex 2023-12-11 14:06:30 +00:00
Metasploit
6858efcdb8 Bump metasploit-payloads to 2.0.162 2023-12-05 09:42:39 -06:00
bwatters-r7
4810c5cc6a
Land #687, Add version detection for newer Windows
Merge branch 'land-687' into upstream-master
2023-12-05 09:28:06 -06:00
Spencer McIntyre
4e789ee80f Identify Windows Server 2003 as well 2023-11-29 15:56:38 -05:00
Spencer McIntyre
6bedffb29a Add version detection for newer Windows
Add version detection by checking the build number for Server 2019,
Server 2022 and Windows 11.
2023-11-28 13:32:34 -05:00
Metasploit
f539248b2e Bump metasploit-payloads to 2.0.161 2023-11-22 10:03:21 -06:00
Spencer McIntyre
9f8a20c8be
Land #685, Fix Java TCP server socket binding
Don't listen on IPv6 when 0.0.0.0 srvhost is requested
2023-11-22 10:49:09 -05:00
Spencer McIntyre
e12217d5ed Set line endings to LF as the other files Java use 2023-11-22 10:28:30 -05:00
Ashley Donaldson
167fedee4b Use versioning functionality for this change; also, fix it 2023-11-21 15:28:01 +11:00
Ashley Donaldson
926b6ec6da Don't listen on IPv6 when 0.0.0.0 srvhost is requested 2023-11-20 14:53:20 +11:00
Metasploit
2b3e70ca91 Bump metasploit-payloads to 2.0.160 2023-10-24 09:43:11 -05:00
adfoster-r7
0d77538da2
Land #682, Swap ChaCha20 to AES-256-CBC for at-rest encryption 2023-10-24 15:29:18 +01:00
sjanusz-r7
cf1b82f07e Test AES-256-CBC and ChaCha20 crypto 2023-10-24 14:26:35 +01:00
sjanusz-r7
1bc7e3e3ae Use the correct encrypted payload header in tests 2023-10-24 14:25:49 +01:00
sjanusz-r7
aaf3d1130e Don't run rspec tests twice 2023-10-24 11:53:07 +01:00
sjanusz-r7
1a17ffc65b Allow for backwards-compatible decryption 2023-10-24 11:52:40 +01:00
sjanusz-r7
62c599b2ff Swap ChaCha20 to AES-256-CBC for at-rest encryption 2023-10-24 10:07:07 +01:00
Metasploit
bf5bc65b88 Bump metasploit-payloads to 2.0.159 2023-10-16 06:08:07 -05:00
adfoster-r7
5894466c3c
Land #680, Correctly encrypt Java & Android files in Rake task 2023-10-16 11:54:20 +01:00
sjanusz-r7
dddb65e342 Glob directories recursively when copying files 2023-10-16 11:24:30 +01:00
sjanusz-r7
eb5f2bdcd2 Correctly encrypt Java & Android files in Rake task 2023-10-13 16:51:13 +01:00
Metasploit
d2808773b5 Bump metasploit-payloads to 2.0.158 2023-10-13 07:19:53 -05:00
adfoster-r7
5d29d8f4d7
Land #679, Add at rest encryption to Meterpreter payloads 2023-10-13 13:01:44 +01:00
sjanusz-r7
1f843612af Use random sequence of bytes for key & iv 2023-10-13 12:52:30 +01:00
sjanusz-r7
4b921c26ff Use a parsable header for at rest encrypted payloads 2023-10-13 12:28:22 +01:00
sjanusz-r7
6c3e6a26a0 Remove redundant receive call 2023-10-13 11:36:02 +01:00
sjanusz-r7
0f146a91a2 Fix hash mismatch by creating a digest of encrypted file contents 2023-10-12 17:19:25 +01:00
sjanusz-r7
10caac0285 Pad encryption header to 64 bytes 2023-10-12 17:11:06 +01:00
sjanusz-r7
93d467cd4a Move encryption/decryption into a separate Crypto module 2023-10-12 14:33:32 +01:00
Metasploit
294eaf66e1 Bump metasploit-payloads to 2.0.157 2023-10-11 11:57:39 -05:00
jheysel-r7
387a38e4cf
Land #672, OpenJDK reflection fix
This PR resolves issue #647 which outlined how
the java meterpretr no longer worked with openjdk 17
due to reflection changes.
2023-10-11 12:30:08 -04:00
sjanusz-r7
e1f8da57e4 Add tests for reading encrypted payloads 2023-10-10 11:41:35 +01:00
sjanusz-r7
5520fec2a4 Add generation & reading of encrypted payloads 2023-10-09 15:29:22 +01:00
Metasploit
b145c82fb1 Bump metasploit-payloads to 2.0.156 2023-10-04 06:56:36 -05:00
Adam Robinson
1235b9f0b2
Approving cortex.yaml
PD-41096 Auto-add cortex.yaml
2023-10-04 12:42:28 +01:00
Simon Irwin
22af342ce7 PD-41096 Auto-add cortex.yaml 2023-10-02 14:11:56 +01:00
Metasploit
62d19a760b Bump metasploit-payloads to 2.0.155 2023-09-29 11:47:07 -05:00
adfoster-r7
fa3045af89
Land #673, Add RSpec and raising errors when files are inaccessible 2023-09-29 17:33:12 +01:00
sjanusz-r7
de45e2f3b8 Add RSpec & raising errors when files are inaccessible 2023-09-29 16:25:42 +01:00
Metasploit
31c7726995 Bump metasploit-payloads to 2.0.154 2023-09-29 06:04:09 -05:00
Simon Janusz
1dad85add9
Land #677, Ensure manifest files are available in gem 2023-09-29 11:39:30 +01:00
adfoster-r7
f5cd7c27aa Ensure manifest files are available in gem 2023-09-29 11:14:42 +01:00
Metasploit
c22a31f661 Bump metasploit-payloads to 2.0.153 2023-09-28 08:33:43 -05:00
adfoster-r7
61b0b396a7
Land #676, Fix Android compilation issues - Add Java parent to AndroidPayload 2023-09-28 14:08:44 +01:00
sjanusz-r7
b25b57281c Add Java parent to AndroidPayload 2023-09-28 12:46:11 +01:00
Ashley Donaldson
ab44891b79 Neater use of classloader, from review 2023-09-25 10:38:50 +10:00