1
mirror of https://github.com/rapid7/metasploit-payloads synced 2024-12-02 20:36:40 +01:00
Commit Graph

123 Commits

Author SHA1 Message Date
Tim W
b56124555e
Land #513, fix php stdapi loading on php 5.3.29 2021-12-07 08:12:22 +00:00
Tim W
25e012bcd9 resolve_host should return NULL on failure 2021-12-07 08:10:52 +00:00
adfoster-r7
4db3392680
Fix Meterpreter for php 5.3 2021-12-06 23:23:29 +00:00
Tim W
cb078144cd
Land #494, add date filtering to fs_search 2021-09-27 17:20:08 +01:00
Tim W
8c99f50b1e canonicalize php search results on Windows 2021-09-24 19:34:12 +01:00
Tim W
9473d00274 fix php recursive search 2021-09-22 22:44:23 +01:00
Tim W
3760e1d41e fix php 1970-01-01 search date 2021-09-22 22:44:18 +01:00
Spencer McIntyre
14e3ffde17 Only return the username for getuid 2021-09-22 14:00:16 -04:00
Tim W
0d2f0f380d whitespace fixup 2021-09-22 15:48:12 +01:00
test
e43f437a2c Clarified variable names 2021-09-20 15:38:13 +01:00
test
8d5a1c5c8a Java/Android and bug fix for Python/PHP 2021-09-20 15:38:13 +01:00
test
af46841e62 Updated PHP and Python payloads 2021-09-20 15:38:13 +01:00
Tim W
41d51af8c9
Land #482, add stdapi_net_resolve_hosts to php meterpreter 2021-04-12 12:23:44 +01:00
Justin Steven
7938a9cf5f
Stop using deprecated PHP array indexing syntax
https://wiki.php.net/rfc/deprecate_curly_braces_array_access
2021-04-09 22:59:18 +10:00
Spencer McIntyre
1d2f143a22 Add stdapi_net_resolve_host(s) support to the PHP meterpreter 2021-03-31 17:02:20 -04:00
William Vu
8e3933bed7 Revert "Undo commit for #441"
This reverts commit 8361d5367a, reversing
changes made to db3d5f0896.
2020-10-11 20:49:06 -05:00
William Vu
8c5ab95cd2 Revert "Land #441 - Fix missing TLV migration from string to int"
This reverts commit eb1d51b94e, reversing
changes made to b6ce0dff18.
2020-10-11 20:08:15 -05:00
Justin Steven
68e3e0cb4e
Fix missing TLV migration from strings -> ints
Fixes #440
2020-10-11 13:57:13 +10:00
Justin Steven
5387ff7629
Fix typo 2020-08-17 17:17:33 +10:00
Justin Steven
46b8c5fda1
Fix #428 PHP 5.1.6 unexpected '[' 2020-08-17 16:31:00 +10:00
OJ
5fc2117325
Adjust the tlv raw function and remove some unnecessary headers 2020-06-09 10:57:43 +10:00
OJ
53dc79f384
Update PHP to use DER instead of PEM for RSA 2020-06-09 10:57:43 +10:00
OJ
fc0079e98a
Update enumeration commands to support the id range 2020-05-01 15:55:43 +10:00
OJ
d3f3a513de
Update command id maps for php, java and python 2020-05-01 15:42:45 +10:00
OJ
c9284388d9
Update PHP meterpreter to support UINT command IDs 2020-04-29 15:42:25 +10:00
Adam Cammack
390c52f755
Let PHP Meterpreter renegotiate CryptTLV 2019-06-12 15:51:42 -05:00
Tim W
0492872cd9 fix #330, fix php ls 2019-03-13 19:20:19 +08:00
Brent Cook
7e2181700a update stat struct sizes 2019-02-06 17:51:21 -06:00
Jeffrey Martin
2a4a764969
Land #234, Implement TLS transport for PHP meterpreter 2018-10-22 15:23:40 -05:00
William Vu
ceb05b8dc4 Add PHP Meterpreter chmod 2018-09-21 00:38:01 -05:00
Pearce Barry
6c9bf01346
Minor tweak to ensure last requested length is accurate. 2018-03-01 17:26:52 -06:00
Brent Cook
913e254fea fix reliability for PHP packet dispatch
A bug in the read function would cause a too-large read when there are multiple
packets or other things in the control channel. This would cause the subsequent
packet to fail to parse, leading to the current message getting discarded.
2018-02-27 06:51:44 -06:00
Brent Cook
96fb621adc
add missing semicolon 2018-01-26 17:26:45 -06:00
Brent Cook
27fe856cb4 whitespace 2018-01-16 10:26:00 -06:00
Brent Cook
7f4dc5e525 you say potato, I say cononical 2018-01-16 10:16:15 -06:00
Brent Cook
bc22f457a3 remove read-only attribute on delete 2018-01-16 10:16:03 -06:00
Brent Cook
0429040ff5 a little more simplification 2017-10-27 05:09:22 -07:00
Brent Cook
f85caa2738 minor cleanup 2017-10-27 05:01:56 -07:00
RageLtMan
d216d47c53 Implement TLS transport for PHP meterpreter
This is the payloads section of MSF #7669

Implement SSL transport via streams, atop the current version of
PHP meterpreter (with GUIDs and all).

This version does everything in a single file, relying on the MSF
payload generation component to perform string substitution in
order to convert the "connect($ipaddr, $port, $proto='tcp')" to
"function connect($ipaddr, $port, $proto='ssl')."
2017-10-27 05:01:56 -07:00
2dimka
31d45584b5 Fix unexpected syntax error '[' in PHP 5.2.4 on Metasploitable2 VM 2017-10-03 20:54:36 +03:00
Anant Shrivastava
f5f594192b fix for php create_function errors
based on findings listed https://github.com/rapid7/metasploit-framework/issues/8858 it was identified that the php webshell was not working at all. Hence a fix to get it to work in both suhosin and non suhosin environment.
2017-08-20 12:19:14 +05:30
OJ
b363584648
Merge branch 'upstream/master' into transport-agnostic-packet-encryption 2017-08-08 17:37:25 +10:00
jvoisin
5c0e0bdb42 Add an alternative to eval to bypass suhosin 2017-07-13 15:18:09 +02:00
OJ
73985d150c
Update PHP meterpreter to support 32 bit encryption flags 2017-07-03 17:15:10 +10:00
OJ
4204e798de
Add encryption of AES key to php meterp 2017-06-28 20:17:14 +10:00
OJ
d75ddcdb2c
Add AES support to PHP
Still doesn't take into account the given public key, but we're getting
there.
2017-06-28 20:07:42 +10:00
OJ
df6748130d
Update php meterpreter to support new packet header
This doesn't enable support for AES encryption PHP meterp yet, that's
coming later.
2017-06-26 16:48:01 +10:00
OJ
813760a9e2
Remove support for the crypto context
Crypto context stuff appears to have only ever been supported in
Meterpreter on Windows. The only thing it allowed for is XOR, which is
redundant given that we have packet level XOR in place. Also, it would
appear that MSF didn't have support for it anyway!

With the move torwards packet-level encryption, this is unnecessary so
it needs to go bye bye.
2017-06-19 16:51:54 +10:00
OJ
cf575a05dd
Add session GUID support to Meterpreter payloads 2017-06-06 17:24:36 +10:00
OJ
6872495da6
Remove Migrate TLVs from php/py, adjust for Java 2017-01-24 07:38:59 +10:00