Metasploit
0e3e7b594e
automatic module_metadata_base.json update
2024-03-25 06:44:56 -05:00
cgranleese-r7
9b4114eda0
Land #18961 , Adds session documentation
2024-03-25 11:23:05 +00:00
adfoster-r7
decba4350e
Additional changes to documentation
2024-03-25 10:53:08 +00:00
Metasploit
685a2e9df6
automatic module_metadata_base.json update
2024-03-22 12:49:46 -05:00
dwelch-r7
a674310c22
Land #18992 , Fix postgres version logging
2024-03-22 17:33:43 +00:00
adfoster-r7
acf9745200
Fix postgres version logging
2024-03-22 16:50:01 +00:00
Zach Goldman
2c307f1bb3
Adds session documentation
...
add more console output, add to pentesting side
split out session, help, query, query_interactive sections
add multiline examples
update mysql, smb
2024-03-21 09:52:10 -05:00
Metasploit
11c24ecdda
automatic module_metadata_base.json update
2024-03-21 08:20:16 -05:00
dwelch-r7
3de8b02287
Land #18985 , Fixes store_valid_credential conditional logic
2024-03-21 12:56:23 +00:00
cgranleese-r7
d750ea19eb
Fixes `store_valid_credential` conditional logic for `unix/webapp/wp_admin_shell_upload` module
2024-03-21 12:22:11 +00:00
Metasploit
3af4358281
Bump version of framework to 6.4.1
2024-03-21 03:37:19 -05:00
adfoster-r7
b461f08ba3
Land #18980 , improves basic shell help command
2024-03-20 21:27:12 +00:00
Metasploit
a0d162bc9f
automatic module_metadata_base.json update
2024-03-20 15:10:21 -05:00
Jack Heysel
2b90d33aef
Land #18618 , Add OpenNMS privesc and auth RCE
...
This module exploits built-in functionality in OpenNMS Horizon in order
to execute arbitrary commands as the opennms user. For versions 32.0.2
and higher, this module requires valid credentials for a user with
ROLE_FILESYSTEM_EDITOR privileges and either ROLE_ADMIN or ROLE_REST.
For versions 32.0.1 and lower, credentials are required for a user with
ROLE_FILESYSTEM_EDITOR, ROLE_REST, and/or ROLE_ADMIN privileges.
2024-03-20 12:54:16 -07:00
Zach Goldman
c16b8e6e64
adds help command to basic shells
2024-03-20 14:18:36 -05:00
adfoster-r7
fd8354340b
Land #18973 , improves the help menu for sessions
2024-03-20 19:11:18 +00:00
adfoster-r7
298e03b1cd
Land #18885 , update the sessions command to be consistent
2024-03-20 18:49:33 +00:00
Jack Heysel
6cd7f44197
rubocop
2024-03-20 11:39:19 -07:00
Jack Heysel
149dc15b21
Add check to see if notifications are enabled
2024-03-20 11:33:15 -07:00
Zach Goldman
2c9ade955e
make session query/shares help menu more explicit
2024-03-20 13:18:10 -05:00
Metasploit
1f1e6b2dbb
automatic module_metadata_base.json update
2024-03-20 12:55:38 -05:00
Spencer McIntyre
321e0730e0
Land #18957 , Bump Metasploit version to 6.4.0
2024-03-20 13:24:44 -04:00
Zach Goldman
1216bf1904
Land #18979 , Remove empty () when no DB selected for sql session prompts
2024-03-20 12:52:02 -04:00
cgranleese-r7
2a63d0d1f0
Land #18978 , Add user affordance for scanner modules that can create a new session
2024-03-20 16:50:29 +00:00
Dean Welch
ff5811e96b
Remove empty () when no DB selected for sql session prompts
2024-03-20 16:13:48 +00:00
adfoster-r7
d4cb976aa7
Land #18960 , improves handling of dying SMB and SQL sessions
2024-03-20 16:06:04 +00:00
Dean Welch
7e3048d2f7
Grammar
2024-03-20 15:45:07 +00:00
adfoster-r7
0399768f39
Land #18974 , Consistently refer to black hole as two words
2024-03-20 15:42:26 +00:00
Dean Welch
686acb4c7b
Correctly format CreateSession option in output
2024-03-20 15:06:20 +00:00
Spencer McIntyre
b363f6f87d
Alias blackhole to black-hole in the UI
2024-03-20 10:57:04 -04:00
cgranleese-r7
961a072de4
Improves handling of dying SMB and SQL sessions
2024-03-20 14:16:01 +00:00
adfoster-r7
c9fe98b522
Bump Metasploit version to 6.4.0
2024-03-20 13:46:08 +00:00
Dean Welch
4946fc297f
Add user affordance for scanner modules that can create a new session
2024-03-20 12:14:49 +00:00
Spencer McIntyre
2b3a723557
Consistently refer to black hole as two words
2024-03-19 20:49:28 -04:00
Jack Heysel
d03dfe8991
Land #18841 , Update sap_icm_paths.txt wordlist
...
This PR updates the sap_icm_paths.txt wordlist with the newest enteries.
2024-03-19 16:40:09 -07:00
bwatters
1e47b33857
Land #18971 , Adjust multiple DNS related things
...
Merge branch 'land-18971' into upstream-master
2024-03-19 12:34:51 -05:00
Metasploit
7f761d074d
automatic module_metadata_base.json update
2024-03-19 11:56:36 -05:00
Spencer McIntyre
b3b6f79594
Update the presentation of static entries
...
Keep the first line blank for consistency with rules and sort hostnames
and addresses.
2024-03-19 12:48:13 -04:00
Spencer McIntyre
0cf4737317
Add specs for resolver spell checking
2024-03-19 12:48:13 -04:00
Spencer McIntyre
5b1d0100d2
Add spell checking for resolvers
2024-03-19 12:48:07 -04:00
Spencer McIntyre
0f9986c787
Land #18947 , Fix inconsistent casing
...
Fix inconsistent casing in windows/local/wmi_persistence
2024-03-19 12:40:34 -04:00
cgranleese-r7
ca97d5d9eb
Land #18965 , Remove stale documentation link
2024-03-19 16:06:55 +00:00
adfoster-r7
ff775b7b23
Remove stale documentation link
2024-03-19 13:46:35 +00:00
Spencer McIntyre
e8b99343a6
Add static entries examples and fix black hole
2024-03-19 09:13:21 -04:00
Metasploit
7c7fa36685
automatic module_metadata_base.json update
2024-03-18 15:56:27 -05:00
Jack Heysel
bf0d81db03
Land #18838 , Improve Runc Priv Esc Check
...
This PR adds support for Debian and number of fixes and improvements for
the runc_cwd_priv_esc. Proir to this fix the module would report
vulnerable for a number of versions that the patch had been back ported
to.
2024-03-18 13:31:09 -07:00
Gaurav Jain
287b07281d
Use Rex Parser to parse options for sessions command
2024-03-15 18:50:19 +05:30
Gaurav Jain
02713fcadb
Update tests for sessions command
2024-03-15 01:26:18 +05:30
adfoster-r7
15c56a870e
Land #18895 , Add upload/download/delete/mkdir/rmdir to smb session
2024-03-14 10:51:48 +00:00
Metasploit
7cabfd7855
Bump version of framework to 6.3.61
2024-03-14 03:35:21 -05:00