Commit Graph

748 Commits

Author SHA1 Message Date
pingport80 309e39c45a
remove backtraces from ruby scripts 2021-03-24 14:52:19 -05:00
Spencer McIntyre abd15f723c Update dockerfile comments and pin jar versions
Pin the JAR versions so future travelers know what I was using today.
This should make the build deterministic. You're welcome.
2021-03-11 12:09:29 -06:00
Spencer McIntyre 3ecf0914e1 Use 'none' as the original ysoserial type, increase the size
Increasing the size to occupy two bytes seems to be helping stabilize
the generation for both the ROME and CommonsCollections1 payloads.
2021-03-11 12:09:29 -06:00
Spencer McIntyre 515d8fa853 Revert a subset of the changes from d39b1c911d which broke a payload
Adjusting the value used as a buffer offset in commit d39b1c911d broke
the CommonsCollections1 YSoSerial payload chain.
2021-03-11 12:09:29 -06:00
Spencer McIntyre 64387ff9c0 Fix multiple issues with find_ysoserial_offsets
1) The output of ysoserial changed so update the number of dropped lines.
2) Pin the diff-lcs gem to version 1.3 because 1.4 breaks the script
3) Generate all payloads by default
2021-03-11 12:09:29 -06:00
Alan Foster b06c5c12aa
Rubocop recently landed modules continued 2021-02-25 14:13:40 +00:00
Alan Foster 260527076c
Require rubocop for new modules 2021-02-23 23:05:48 +00:00
agalway-r7 275e9c5454
Land #14696, Further Zeitwerk lands to improve boot speed
Zeitwerk rex folder
2021-02-19 10:33:37 +00:00
Brendan Coles f4c37bd446 msftidy: Add info check for exploit module notes 2021-02-15 11:01:01 +00:00
Brendan Coles a1c316c679 msftidy: Fix exploit module checks for author and stack buffer overflow 2021-02-13 04:10:13 +00:00
dwelch-r7 b95be3ed10 Zeitwerk `rex` folder 2021-02-08 12:24:12 +00:00
firefart 1af4aaeb91 update WPVDB link type 2021-02-06 12:20:03 +01:00
Alan Foster 7cb8876e92
Ensure msftidy runs on ci 2021-01-29 12:29:15 +00:00
adfoster-r7 ffd59c3254
Land #14651, msftidy: Add check for module description 2021-01-25 11:17:39 +00:00
Brendan Coles b5d746cc44 msftidy: Add check for module description 2021-01-22 23:29:16 +00:00
dwelch-r7 d437a32374 remove `msf/util` requires 2021-01-18 14:21:54 +00:00
dwelch-r7 b816373b94 remove `msf/ui` requires 2021-01-18 14:21:54 +00:00
dwelch-r7 a19575d6bb New lines and undoing debug changes 2021-01-06 12:48:16 +00:00
dwelch-r7 c11f6b61a3 Eagerly require `msf/core` for namespacing reasons 2021-01-06 10:22:51 +00:00
dwelch-r7 c0912b358c Fix tests 2021-01-05 16:20:42 +00:00
dwelch-r7 bad5ccbc49 Remove `msf/base` requires 2021-01-05 14:59:46 +00:00
dwelch-r7 1617b3ec9b Use zeitwerk for lib/msf/core folder 2020-12-07 10:31:45 +00:00
Spencer McIntyre 1151d3dcc7
Land #14419, Update external dev scripts and wordpress wordlists 2020-11-24 17:48:05 -05:00
h00die f8a51d0445 fix up joomla python code 2020-11-21 12:43:30 -05:00
h00die 4de58b8596 python 4 space not ruby 2 2020-11-21 12:43:06 -05:00
h00die 92a9d50ea9 add joomla component update script 2020-11-21 12:36:21 -05:00
h00die e2e086ba6f mention joomla 2020-11-21 11:56:33 -05:00
h00die 15b5a811e4 update check external scripts and wordpress files 2020-11-21 11:52:18 -05:00
Tim W b4b2ae44c1 add heredoc awareness to msftidy 2020-11-17 18:06:17 +08:00
gwillcox-r7 b524e5676f
Apply RuboCop fixes to tools/dev/check_external_scripts.rb 2020-08-05 11:48:55 -05:00
gwillcox-r7 38e116d5be
Add in fix to prevent us from having to clone the sqlmap project every time that we want to decloak another sqlmap file 2020-08-05 11:40:49 -05:00
gwillcox-r7 5460e35e84
Add in additional checks to the decloak() function to check if python or python3 is installed and to try both options, to try ensure the git repo is cloned correctly, and to make sure that operations complete successfully before moving onto the next one. Also added in fixes from review notes for minor issues. 2020-08-05 11:10:39 -05:00
h00die 41058775b3 add sharphound exe, rubocop, and final update run 2020-08-04 09:06:45 -04:00
h00die 9663d3378f add sqlmap decloak 2020-08-04 08:48:30 -04:00
h00die 42b2f306d1 adding udf and john to external scripts 2020-08-04 08:46:47 -04:00
Spencer McIntyre 73cace16a3 Add checks to msftidy_docs and update the template for them 2020-07-23 20:37:39 -04:00
Adam Galway 1a2bf98222
creates standard elog & updates exisiting usages 2020-06-22 12:48:39 +01:00
William Vu 437a056f67
Land #13364, .NET deserialization tool 2020-05-05 11:02:31 -05:00
Spencer McIntyre 1134ac69a0 Add missing newline to the ysoserial/dot_net tool 2020-04-30 16:45:38 -04:00
Spencer McIntyre 09d2008c20 Show some serialized payload information in the output 2020-04-29 18:02:24 -04:00
Spencer McIntyre 197365b610 Finish up the .NET deserialization tool 2020-04-29 17:50:07 -04:00
Spencer McIntyre 0a12522445 Add the initial YSoSerial.NET tool 2020-04-28 20:46:07 -04:00
Josh 68c9cfb593
ZDI Public numbers should be limited to 4 digits
to avoid false negatives per the discussion at #13311
2020-04-28 18:48:10 -05:00
Spencer McIntyre 3e51730ae3
Land #11359, Add the shiro_rememberme_v124_deserialize module 2020-04-28 15:35:06 -04:00
gwillcox-r7 5f997ef814
Land #13340, Fix broken PKS and update link 2020-04-27 15:44:52 -05:00
William Vu ab210f15f1 chmod +x find_ysoserial_offsets.rb 2020-04-27 12:19:27 -05:00
bcoles fb057a3016 fixed
Co-Authored-By: L-codes <20529064+L-codes@users.noreply.github.com>
2020-04-27 10:50:34 -05:00
L d31882fe15 Modify unkown to unknown 2020-04-27 10:50:34 -05:00
bcoles 884d0ca4a2 fixed tools/payloads/ysoserial/find_ysoserial_offsets.rb
Co-Authored-By: L-codes <20529064+L-codes@users.noreply.github.com>
2020-04-27 10:50:33 -05:00
L 645a4c6d26 Remove ysoserial JRMPClient && JRMPListener payload 2020-04-27 10:50:09 -05:00