HD Moore
0d1f2055c5
Lands #4949 which fixes #4845
2015-03-18 15:31:22 -05:00
rwhitcroft
dab4333867
updated asm in block
2015-03-18 16:07:46 -04:00
rwhitcroft
7ae97393e0
fix x64/reverse_https stager shellcode
2015-03-18 15:34:31 -04:00
OJ
e943cb550f
Land #4585 : CVE-2015-0975 XXE in OpenNMS
2015-03-18 22:34:52 +10:00
OJ
d1a2f58303
Fix of regex for file capture and format tweaks
2015-03-18 22:17:44 +10:00
OJ
fa7242388b
Move the module to the correct location
2015-03-18 18:18:54 +10:00
OJ
d152c41826
Land #4934 : Proxy and auth support in reverse_http(s)
2015-03-18 17:42:19 +10:00
HD Moore
b62da42927
Merge branch 'master' into feature/add-proxies-to-wininet
2015-03-18 01:51:15 -05:00
OJ
b46e5f8d13
Land #4295 : Refactory proxy-enabled payload handling
2015-03-18 16:49:13 +10:00
HD Moore
c607cf7b11
Merging master
2015-03-18 01:45:44 -05:00
HD Moore
97def50cc2
Whitespace cleanup
2015-03-18 01:26:59 -05:00
HD Moore
8d3cb8bde5
Fix up meterpreter patching arguments and names
2015-03-18 01:25:42 -05:00
HD Moore
ef443c83b9
Fix overgreed search/replace
2015-03-18 01:21:53 -05:00
HD Moore
390a704cc7
Cleanup proxyhost/proxyport arguments to match new names
2015-03-18 01:19:05 -05:00
HD Moore
f7a06d8e44
Rework PROXY_{HOST|PORT|TYPE|USERNAME|PASSWORD) to the new syntax
2015-03-18 01:15:32 -05:00
HD Moore
3aa8cb69a4
Fix two use cases of PROXYHOST/PROXYPORT
2015-03-18 01:08:09 -05:00
HD Moore
87a489907c
Place an IPv6 proxy IP between brackets
2015-03-18 01:01:16 -05:00
HD Moore
259db269bd
Remove user/pass and invalid class from the options
2015-03-18 01:01:16 -05:00
HD Moore
2ab14e7e79
Adds IPv6 and option-related issues with the previous patch
2015-03-18 01:01:10 -05:00
HD Moore
0601946830
Don't mandate and default PROXY_HOST (miscopy from the proxy stager)
2015-03-18 01:00:04 -05:00
HD Moore
a4df6d539f
Cleanup proxy handling code (consistency & bugs)
...
One subtle bug was that each time a request was received, a null byte was being appended to the datastore options for PROXY_USERNAME and PROXY_PASSWORD. Eventually this would break new sessions. This change centralizes the proxy configuration and cleans up the logic.
2015-03-18 00:59:59 -05:00
HD Moore
85fb534e63
Fix up the offset detection again, cleanup redundant code
2015-03-18 00:59:25 -05:00
HD Moore
2f13988d7b
Use OptPort vs OptInt and cleanup the description
2015-03-18 00:59:25 -05:00
HD Moore
a01be365b0
Rework PROXYHOST/PROXYPORT to PROXY_HOST/PROXY_PORT
...
This also cleans up the windows reverse_https_proxy stager.
2015-03-18 00:59:13 -05:00
James Lee
bd4738b93e
Land #4827 , capture and nbns fixups
2015-03-17 17:37:55 -05:00
James Lee
d7fa0ec669
Let IPAddr#hton do the calculating
2015-03-17 17:36:45 -05:00
Brent Cook
47a7f99aae
Land #4930 , @hmoore-r7 winhttp stager certificate check
2015-03-17 16:22:46 -05:00
William Vu
d1d6378179
Land #4566 , Misfortune Cookie scanner improvements
2015-03-17 12:32:35 -05:00
jstnkndy
0490af8ba8
Added error checks, randomness, and uuid delimeter
2015-03-17 10:20:22 -04:00
jstnkndy
f3fc4003d0
typo
2015-03-17 10:19:40 -04:00
jstnkndy
b92d243c0e
Merge branch 'module-cve-2015-0975' of https://github.com/jstnkndy/metasploit-framework into module-cve-2015-0975
2015-03-17 10:18:32 -04:00
jstnkndy
e0a7f531cc
Added error checking, randomness, uuid delimiters
2015-03-17 10:10:51 -04:00
HD Moore
495a8f3a88
Lands #4936 , fixes a typo in post/windows/gather/credentials/steam
2015-03-16 20:25:07 -05:00
HD Moore
a35e5bc0b8
Lands #4938 , updates the spec template to match new tests
2015-03-16 18:28:46 -05:00
Brent Cook
db56fcb1b8
update tools/missing-payload-tests to give correct advice
...
The template spec for new payloads needed updating to match the new cached
payload size spec.
2015-03-16 18:10:10 -05:00
joev
dd824d9ed7
Land #4909 , the many addresses of joev.
2015-03-16 17:12:20 -05:00
Felix Wehnert
2a525958bd
fixed typo
...
Does no one tested this script on x64 yet ?
2015-03-16 20:15:26 +01:00
HD Moore
2ea984423b
while(true)->loop, use thread.join
2015-03-16 14:08:01 -05:00
HD Moore
5fd3637d34
Remove the i32 size specifier (not needed)
2015-03-16 14:00:51 -05:00
HD Moore
69d9280748
Fix yard docs, retries, push.i8 instructions. See commit 05138524e3
...
Note that StagerRetryCount is not defined here, but will be in the parent class once #4934 lands
2015-03-16 13:52:13 -05:00
HD Moore
05138524e3
Fix yard docs, fix retries, trim bytes, retested and working
2015-03-16 13:35:36 -05:00
HD Moore
69a808b744
StagerProxy -> PayloadProxy
2015-03-16 12:14:42 -05:00
William Vu
ac0e23d783
Land #4932 , hardcoded username fix
...
For mssql_escalate_execute_as_sqli.
2015-03-16 01:46:13 -05:00
HD Moore
f361e4ee52
Prefer the new-style proxy datastore options when available
2015-03-16 00:22:10 -05:00
HD Moore
7e89281485
Adds proxy (with authentication) support to reverse_http(s)
2015-03-16 00:03:31 -05:00
Scott Sutherland
00dbcc12ca
Removed imp_user var from escalate_privs func
2015-03-15 22:02:12 -07:00
William Vu
b0a8fd864c
Land #4929 , duplicate hash key fixes (final pass)
2015-03-15 20:38:41 -05:00
nullbind
5bebabb005
fixed hardcoded username
2015-03-15 19:45:02 -05:00
HD Moore
8e37342c50
Comment typo
2015-03-14 16:52:04 -05:00
HD Moore
0d12ca49a7
Work around lack of option normalization during size calculation
2015-03-14 16:19:13 -05:00