Commit Graph

18397 Commits

Author SHA1 Message Date
Spencer McIntyre bdb497ddd4 Dedent the websocket module 2021-11-05 10:41:07 -04:00
Spencer McIntyre a85cd3d5f6 Add logging to get_wsframe 2021-11-03 11:26:31 -04:00
Spencer McIntyre 3d2fd9bc90 Don't process partial WS frames 2021-11-02 17:13:26 -04:00
Spencer McIntyre 6930200422 Fix partial bindata reads within web sockets 2021-11-02 17:13:13 -04:00
Metasploit 429e36924a
Bump version of framework to 6.1.13 2021-10-28 12:10:01 -05:00
adfoster-r7 63da82d1f9
Fix iis internal ip module crash 2021-10-26 12:52:26 +01:00
Christophe De La Fuente 1befd545e3
Land #15558, add module to access a sessions filesystem in a browser 2021-10-25 18:37:42 +02:00
Tim W 86d1e3cb0a fix get_drives format 2021-10-25 17:30:47 +01:00
adfoster-r7 9bafafde21
Land #15788, Remove the AMSI bypass when necessary 2021-10-25 15:46:58 +01:00
Ashley Donaldson 71d7e80529
Extend StreamServer to provide callbacks required by some modules 2021-10-25 12:38:45 +11:00
Ashley Donaldson b9e3f1951d
Return immediately once the reverse listener is established 2021-10-25 12:38:45 +11:00
Ashley Donaldson e9386add64
Handle race condition whereby a port forward succeeds after we've exceeded our timeout.
Neatly cleans up the port.
2021-10-25 12:38:45 +11:00
Ashley Donaldson 68a074231e
Use logging rather than printing 2021-10-25 12:38:44 +11:00
Ashley Donaldson dba6ce56bc
Timeout is cursed - let's remove it 2021-10-25 12:38:44 +11:00
Ashley Donaldson 5a332b511e
Fixed rubocop errors 2021-10-25 12:38:44 +11:00
Ashley Donaldson 10421dcc08
Report peer info of connections to SSH reverse port forwards 2021-10-25 12:38:43 +11:00
Ashley Donaldson 99309bab29
Fix reliability issue with SSH reverse listener 2021-10-25 12:38:43 +11:00
Ashley Donaldson fdfecdc8ff
Initial work on reverse pivoting through SSH 2021-10-25 12:38:42 +11:00
Spencer McIntyre 78d2389cb2 Switch the prepend_protections_bypass
Switch to setting Powershell::prepend_protections_bypass to be
automatically determined by the module. If the generated command is too
large, disable the setting and regenerate the command.
2021-10-21 16:42:04 -04:00
Spencer McIntyre 48a89d7c9a Don't encode the final powershell command
It's unnecessary to encode the final Powershell command in this context
because the modified YSoSerial payload will properly treat the entire
string as the OS command to run.
2021-10-21 16:40:21 -04:00
Metasploit c7fd990633
Bump version of framework to 6.1.12 2021-10-21 12:03:56 -05:00
Spencer McIntyre 93105f009b
Land #15786, Add kubernetes enum module 2021-10-21 09:15:38 -04:00
adfoster-r7 9a50668c5b
Fix tunnel info crash when running the sessions command with a websocket based session 2021-10-21 13:06:22 +01:00
Tim W e52083a65c
Land #15785, add command name to meterpreter packet inspect 2021-10-21 12:14:17 +01:00
adfoster-r7 b306641755
Print token claims 2021-10-21 11:05:51 +01:00
adfoster-r7 f28ced60ee
Correctly store extracted loot 2021-10-21 11:02:10 +01:00
adfoster-r7 adbe6070ab
PR feedback 2021-10-21 11:02:09 +01:00
adfoster-r7 c0ba4bd619
Add kubernetes enum module 2021-10-21 11:01:25 +01:00
adfoster-r7 2f86b332f5
Land #15733, Add Module For Kubernetes Pod Authenticated Code Execution 2021-10-21 10:46:20 +01:00
alanfoster ae3efa0589 Add command name to Meterpreter packet inspect 2021-10-21 02:08:39 +01:00
adfoster-r7 e417a36fed
Land #15760, Honor json extension in store loot 2021-10-19 11:39:10 +01:00
adfoster-r7 3f64406255
Land #15732, Add flag for running command in pty 2021-10-18 23:52:10 +01:00
dwelch-r7 2c8ef87649 Add flag for running command in pty 2021-10-18 14:31:30 +01:00
William Vu 3e168149ca Increase AutoVerifySession timeout for PSH shells
The sweet spot is five seconds, which is also the default.
2021-10-14 16:58:04 -05:00
Metasploit d5cbb26f09
Bump version of framework to 6.1.11 2021-10-14 12:06:52 -05:00
dwelch-r7 dcb42da269
Land #15612, Add multiple moodle modules 2021-10-11 23:18:55 +01:00
adfoster-r7 25834f019b
Honor json extension in store loot 2021-10-11 12:01:31 +01:00
Grant Willcox 8b9b1092f6
Land #15706, Display TCP forwarding information for sessions and jobs for reverse shells 2021-10-07 13:23:06 -05:00
Grant Willcox cf479725b2
Add in string option for ReverseListenerComm to reverse_udp.rb so we don't encounter errors when calling select_com in lib/msf/core/handler/reverse/comm.rb 2021-10-07 12:07:24 -05:00
Metasploit 4440af5365
Bump version of framework to 6.1.10 2021-10-07 12:05:24 -05:00
Ashley Donaldson 5196071c22
Keep other instances of via_string to the same convention 2021-10-04 23:51:57 +11:00
Ashley Donaldson 71aab90b53
Added TCP pivot details for reverse_tcp_double handlers 2021-10-04 23:07:15 +11:00
Ashley Donaldson c9499fc70c
Show TCP forwarding information for UDP jobs and shells 2021-10-04 22:43:12 +11:00
Ashley Donaldson 0df82e9a21
HTTP payload listeners support ReverseListenerComm param, and display of the session it transits over 2021-10-04 20:27:06 +11:00
Grant Willcox 6541b85449
Land #15735, Update call to deprecated connection_config 2021-10-03 21:02:31 -05:00
Grant Willcox 2881adff04
Land #15737, Fix action handling for auxiliary modules 2021-10-03 20:31:10 -05:00
adfoster-r7 c19e4ad43c
Fix tab completion for action commands 2021-10-03 02:45:15 +01:00
adfoster-r7 84be79fa12
Fix action handling for auxiliary modules 2021-10-02 19:47:47 +01:00
jaydesl 6d2d680b5b
fix: update call to deprecated connection_config 2021-10-02 09:22:37 +01:00
Ashley Donaldson ef8628f1ad
Avoid modifying payload_uri, which may be used elsewhere 2021-10-02 14:57:26 +10:00