Commit Graph

63899 Commits

Author SHA1 Message Date
adfoster-r7 253f791478
Land #16470, restrict ruby_smb to patch version 2022-04-19 10:15:08 +01:00
Jeffrey Martin 617df4da74
restrict ruby_smb to patch version
Based on 4fac10d8a7/CONTRIBUTING.md (versioning)

Locking version to patch level as framework takes performs manipulation of bindata structures.
2022-04-18 16:01:13 -05:00
space-r7 500d08f08e
Land #16426, fix osx stager crash in osx Monterey 2022-04-18 12:38:51 -05:00
space-r7 54f8d44639
add osx binary 2022-04-18 09:42:40 -05:00
h00die e927da2ffa
land #16359, docs for ipidseq aux module 2022-04-17 08:35:20 -04:00
h00die 079794c2de doc cleanup for ipidseq 2022-04-17 08:34:53 -04:00
Metasploit 6a9e73e689
automatic module_metadata_base.json update 2022-04-16 18:30:05 -05:00
Jeffrey Martin 7c8c0b5e05
Land #16446, Bump RubySMB 2022-04-16 18:10:19 -05:00
Metasploit 4e17ccede4
automatic module_metadata_base.json update 2022-04-16 15:45:52 -05:00
Grant Willcox 3f9e4e2d82
Land #16461, Move getsimplecms_unauth_code_exec.md documentation to http dir 2022-04-16 15:15:22 -05:00
Grant Willcox 8e4708205d
Land #16458, fortios_vpnssl_traversal_creds_leak: Add authors, notes, and references 2022-04-16 15:08:32 -05:00
Brendan Coles 66fe338297 Move getsimplecms_unauth_code_exec.md documentation to http dir 2022-04-16 16:53:34 +00:00
Brendan Coles e34201ce48 fortios_vpnssl_traversal_creds_leak: Add authors, notes, and references 2022-04-16 06:52:59 +00:00
Grant Willcox a977d48508
Land #16448, Add in dependency updates PR action 2022-04-15 17:08:03 -05:00
Metasploit d22065f09a
automatic module_metadata_base.json update 2022-04-14 13:53:48 -05:00
Jack Heysel 0d3f50522d
Land #16318 Add support to old KEX algorithms
This commit fix the issue #16138 by adding
support to old key exchange algorithms in
the net/ssh lib by defining the
append_all_supported_algorithms to true.
2022-04-14 11:29:39 -07:00
Metasploit 67e710b69b
Bump version of framework to 6.1.39 2022-04-14 12:31:53 -05:00
Jeffrey Martin 60e3e6e532
Land #16455, Remove railgun requirement from post file mixin 2022-04-14 12:04:47 -05:00
Metasploit ae9f12ab97
automatic module_metadata_base.json update 2022-04-14 11:59:59 -05:00
Grant Willcox 82be63ffdc
Land #16451, Use debug versions of extensions if MeterpreterDebugBuild is enabled 2022-04-14 11:34:08 -05:00
adfoster-r7 7f24482ade
Remove railgun requirement from post file mixin 2022-04-14 17:14:18 +01:00
adfoster-r7 22a3ae1bf5
Land #16411, expose detailed results for each module match 2022-04-14 17:06:57 +01:00
Jeffrey Martin 4bf199aff5
remove duplicate condition 2022-04-14 10:18:59 -05:00
Jack Heysel 04f042ae47
Land #16221, a wordpress_scanner bug fix
Adjust wordpress_url_rest_api definition to support
sites that don't place REST API under /index.php/
2022-04-13 14:22:17 -07:00
Metasploit e127f3013d
automatic module_metadata_base.json update 2022-04-13 11:09:40 -05:00
adfoster-r7 26e8ade3f7
Land #16396, add configuration for debug logging in PHP Meterpreter 2022-04-13 16:49:24 +01:00
dwelch-r7 be7510dba3 Additional mocking 2022-04-13 15:46:18 +01:00
dwelch-r7 aca1b8df9b Use debug versions of extensions if `MeterpreterDebugBuild` is enabled 2022-04-13 14:10:57 +01:00
sjanusz b5dd215cee
Update cached PHP Meterpreter payload size 2022-04-13 13:09:00 +01:00
Jeffrey Martin 3fe5e8b450
dependency updates PR action
In an effort to offer an opportunity for security review and approval
of gem updates after a version is tagged and pushed a new `bundle update`
be preformed and a branch pushed containing the isolate `Gemfile.lock` changes.

This new action will open a PR for committers to review and an land after
completing security review of updates in the gems.
2022-04-12 14:40:15 -05:00
sjanusz 630efa6dbe
Bump payloads version 2022-04-12 18:13:29 +01:00
sjanusz 5fdf82ff76
Add toggleable logging to console & file to PHP Meterpreter 2022-04-12 17:15:06 +01:00
Spencer McIntyre 052e56174d Bump the version of RubySMB to 3.1 2022-04-12 10:46:55 -04:00
Spencer McIntyre a4a9bc033a Fix building the SessionSetup request for MS17-010
RubySMB commit 8035d9c2 broke the exploit's SessionSetup request.
2022-04-12 10:45:17 -04:00
Metasploit cb9e412138
automatic module_metadata_base.json update 2022-04-12 06:58:49 -05:00
dwelch-r7 592690f22f
Land #16377, Add debug option to Python Meterpreter 2022-04-12 12:41:05 +01:00
sjanusz b0e4a16fa1
Update cached Python Meterpreter payload sizes 2022-04-12 11:39:56 +01:00
sjanusz 020e65c958
Bump payloads version 2022-04-12 11:28:09 +01:00
sjanusz fc73498919
Add debug option to Python Meterpreter 2022-04-12 10:54:26 +01:00
usiegl00 b9052be102
Use libdyld locator to fix osx stager on monterey
We locate the dyld_shared_cache in memory to find and resolve the
functions we need in libdyld.dylib. We retain the original dyld location
method on osx versions before Sierra.

Explicitly set length for osx x64 initial stage

The rdx register, used for passing the payload length, is being
clobbered by a system call in the new MacOS version. Instead of relying
on the register being untouched, we set it equal to the payload length.
2022-04-12 11:27:23 +09:00
Metasploit c786d9c150
automatic module_metadata_base.json update 2022-04-11 15:28:05 -05:00
Simon Janusz 45dcfda49a
Land #16418, Add debugging Meterpreter sessions navigation entry
Add debugging Meterpreter sessions navigation entry
2022-04-11 11:34:00 +01:00
adfoster-r7 f4a8baf9e2
Add pivoting section 2022-04-08 22:45:51 +01:00
Metasploit c252faf938
Bump version of framework to 6.1.38 2022-04-07 12:06:06 -05:00
Spencer McIntyre 5de966cfb1
Land #16382, CVE-2022-26904 SuperProfile LPE 2022-04-07 12:52:39 -04:00
Jeffrey Martin 8356b3cc1c
refactor analyze rpc interface & output format 2022-04-07 11:06:42 -05:00
Grant Willcox 51e37bbe42
Add in process kill off code for Meterpreter sessions, seems I forgot to include this 2022-04-07 10:48:08 -05:00
dwelch-r7 a82c936613
Land #16373, Add initial ruby 3.1 support 2022-04-07 16:44:02 +01:00
Grant Willcox 80d31636f8
Land #16398, add missing payload tests 2022-04-07 10:40:47 -05:00
Grant Willcox 619661a845
Land #16419, Fix crash when sorting modules by disclosure date 2022-04-06 16:50:08 -05:00