1
mirror of https://github.com/rapid7/metasploit-payloads synced 2024-12-08 23:33:07 +01:00
Commit Graph

105 Commits

Author SHA1 Message Date
OJ
0cbb86c59b
Add localtime support to php, tidy python and c 2016-10-03 15:26:54 +10:00
OJ
00bebbbd46
Add localtime command to python meterp 2016-10-03 15:26:54 +10:00
root
a26e97b63d Fixed OSX crashes for python meterpreter 2016-05-23 23:00:25 +00:00
krzys-h
cad2ecf2b9 Fixed reconnecting of staged Python meterpreter
See rapid7/metasploit-framework#6842
2016-05-03 14:44:04 +02:00
Spencer McIntyre
c96eaae547 Do not reissue closed channel ids in the pymet 2016-03-01 13:09:16 -05:00
OJ
29f88366ac
Merge branch 'upstream/master' into default-xor 2016-01-13 07:34:40 +10:00
OJ
a8935d8f39 Add XOR to python 2015-12-08 20:29:40 +10:00
Spencer McIntyre
5a785a5e04 Support patching an http transport uri's path 2015-11-28 17:22:09 -05:00
Spencer McIntyre
000eb77f11 Add patch points for stageless python meterpreter 2015-10-21 18:16:19 -04:00
Brent Cook
dba1784c10 check if a process still exists before deleting it
patch from 1db376bed8
2015-08-25 18:04:18 -05:00
Jon Cave
387addf846 Pymet fix search_root always being set to '.' 2015-08-15 18:44:26 +01:00
Spencer McIntyre
07dfdd9464 Pymet immediately change transports on tcp failure 2015-07-16 11:00:43 -04:00
Spencer McIntyre
52cf468205 Pymet use incremental backoff for http recv pkt 2015-07-16 10:29:36 -04:00
Spencer McIntyre
3deb273cfa Pymet fix the new transport position 2015-07-15 19:45:34 -04:00
Spencer McIntyre
c099b56e74 Pymet fix transport automatic roll over 2015-07-14 15:18:11 -04:00
Spencer McIntyre
683179f4a2 Pymet fix previous transport index logic 2015-07-14 14:32:57 -04:00
Spencer McIntyre
76e649ef5e Pymet fix the order in which transports are added 2015-07-14 14:26:27 -04:00
Spencer McIntyre
92ed457a4d Pymet fix send uuid logic for Python 3.x 2015-07-06 11:20:34 -04:00
Spencer McIntyre
2c26bbd38f Pymet fix packet polling interval 2015-07-02 11:51:53 -04:00
Spencer McIntyre
5e7ec516e6 Pymet fix reverse_tcp transport for IPv6 addresses 2015-07-02 08:33:11 -04:00
Spencer McIntyre
368cb94bee Pymet fix transport next and prev for one transport 2015-07-02 08:23:02 -04:00
Spencer McIntyre
62ba1610d1 Pymet fixes for Python 3.x 2015-07-01 14:32:12 -04:00
Spencer McIntyre
b4d44bd079 Pymet transport stabilty and correction 2015-07-01 11:12:30 -04:00
Spencer McIntyre
aa5076ae6f Pymet support for core_transport_remove 2015-06-30 15:46:33 -04:00
Spencer McIntyre
b55f1247a9 Pymet fix bind and tcp socket cleanup logic 2015-06-30 15:25:23 -04:00
Spencer McIntyre
7f0d4fa1ce Pymet support for core_transport_sleep 2015-06-29 18:34:35 -04:00
Spencer McIntyre
2047958c1c Pymet transport changing improvements 2015-06-29 14:00:07 -04:00
Spencer McIntyre
1ff059a461 Pymet cleaner transport switching with responses 2015-06-28 13:16:00 -04:00
Spencer McIntyre
0b64d22704 Pymet support for changing transports 2015-06-27 20:57:45 -04:00
Spencer McIntyre
d9f9fc7bc6 Pymet support for creating and listing transports 2015-06-26 16:52:55 -04:00
Spencer McIntyre
68db19d3d4 Refactor the pymet to use transport objects 2015-06-26 14:56:31 -04:00
Spencer McIntyre
43c63a1639 Add pymet support for core_enumextcmd 2015-06-26 11:32:51 -04:00
OJ
84f5698c9d PHP meterpreter refactoring in prep for uuid work 2015-05-18 17:40:48 +10:00
OJ
281ebf1ca8 Stage UUIDs, generation options, php and python meterp uuid 2015-05-18 13:29:46 +10:00
Tim
3d3a2d475d Add TLV_TYPE_FILE_HASH 2015-05-10 14:18:16 +01:00
Brent Cook
5f52fefbef expand glob match 2015-05-04 03:56:15 -05:00
Brent Cook
b85528720b teach pymet how to glob on ls as well 2015-05-04 03:56:14 -05:00
Brent Cook
a1b2e2c327 fix crash on fork with OSX Python meterpreter using SystemConfiguration
Calling into SystemConfiguration before forking seems to allow the child
process to use it without a null pointer dereference.
2015-04-21 17:17:27 -05:00
Meatballs
221e6c6a74 Dont fork on OSX 2015-04-17 11:43:07 +01:00
OJ
b56bc0b513 Code fixes as per suggestions, fix build
* Use of `ERROR_FAILURE_WINDOWS` in python meterpreter.
* Moving of constants/logic to client_core instead of
command_dispatcher.
* Fix spec include.
2015-04-02 09:05:38 +10:00
OJ
684d178fe6 Merge branch 'upstream/master' into dynamic-transport 2015-04-01 18:53:20 +10:00
OJ
2f575ca273 Add machine_id functionality to python meterpreter 2015-04-01 17:50:50 +10:00
Spencer McIntyre
bd8441d963 Pymet dont validate ssl certs for 2.7.9/3.4.3 2015-03-25 19:49:42 -04:00
Spencer McIntyre
b847592cf5 Python reverse HTTPS stager 2015-03-21 12:43:14 -04:00
Brent Cook
5e547929be do not die if the uid/gid of a file is > 65535
The meterpreter stat command is a little broken in that it assumes uid/gids
16-bit. Prevent this from erroring with python meterpreter on a system with a
large uid/gid.
2015-03-20 22:34:01 -05:00
Spencer McIntyre
a8d7805644 Pymet support for creating and renaming unicode paths 2015-03-20 08:49:23 -04:00
Spencer McIntyre
bc53c1e843 Pymet improved unicode support for working directories 2015-03-19 18:31:42 -04:00
Spencer McIntyre
c521077984 Fix pymet for unicode files and directories
Closes #4958
2015-03-19 17:23:00 -04:00
Brent Cook
e507c71699 use the correct implementation for query_value_direct 2015-03-03 22:29:23 -06:00
Brent Cook
f3139b9316 add support for direct reg access to pymeterpreter
When testing this, I found that the python meterpreter hangs running the
following, with or without these changes.

```
use exploit/multi/handler
set payload python/meterpreter/reverse_tcp
set PythonMeterpreterDebug true
set lhost 192.168.43.1
exploit -j
sleep 5
use exploit/windows/local/trusted_service_path
set SESSION 1
check
```

This turned out to be that pymeterpreter ate all the rest of the data in the
recv socket by consuming 4k unconditionally. This would only be exposed if
there were multiple simultaneous requests so the recv buffer filled beyond a
single request, e.g. when using the registry enumeration functions.
2015-02-17 06:11:20 -06:00