39455827aa
Land #15254 , use obfuscated powershell protection bypasses
2021-07-12 12:20:17 +01:00
9e61bf5752
Update the rex-powershell gem and unit tests
2021-07-09 15:35:37 -04:00
6817d0a0ee
Land #15382 , Add tests for aux and exploit cmd_check and cmd_run
2021-07-09 11:03:12 +01:00
e5241b412a
Add tests for aux and exploit cmd_check and cmd_run
2021-07-08 17:32:52 +01:00
6dd298ebb7
Land #15390 , Add tests for argument parsing
2021-07-08 16:19:37 +01:00
6196037fba
Update spec
2021-07-06 21:52:41 -05:00
7f883f14a5
Add tests for argument parsing
2021-07-04 18:03:33 +01:00
6abdeb1ac1
Land #15247 , add rubocop rule to enforce `Notes` in exploit module info
2021-06-11 10:45:38 +01:00
e8001333c3
Cleanup json rpc spec
2021-06-10 13:43:03 +01:00
87d69c7553
Land #15263 , adds payload flag to analyze
2021-06-03 16:03:46 +01:00
6202ce6a5a
Land #15268 , fixes aux module spec syntax errors
...
Fix syntax errors in auxiliary spec modules
2021-06-03 14:39:33 +01:00
d793e1b30c
Enforce more notes add more tests
2021-06-02 22:31:32 +01:00
11fb9e8e87
Land #15194 , Fix RPORT tab completion crash when connected to remote dataservice
2021-06-01 13:47:08 +01:00
134e820322
removes obsolete has_host? usage
2021-06-01 12:02:58 +01:00
73b269cf7e
Land #15225 , cookie jar cleanup
2021-06-01 10:49:56 +01:00
98a935f3cf
Fix syntax errors in auxiliary spec modules
2021-05-26 23:15:50 +01:00
814e510e17
Fix unit tests
2021-05-26 15:30:23 +01:00
85961be02e
Ran rubocop and tidied up
2021-05-25 13:25:34 +01:00
34dec4f026
Add rubocop rule to enforce presence of `SideEffects` in exploit module info
2021-05-25 00:58:14 +01:00
c84b651ca6
Remoce initial rhost http url attempt
2021-05-24 00:31:09 +01:00
5e4af7241d
prevent TLD use in tests & remove HTTP::Cookie DI
2021-05-20 17:49:21 +01:00
ac2c467121
Land #15011 , Enhance analyze command API to understand modules' needs
2021-05-14 14:30:33 +01:00
2b854610e9
Fix typo
2021-05-13 17:59:10 -05:00
1478a9bf5b
Expand mock vuln names in spec
2021-05-13 17:58:26 -05:00
0f73031833
Land #15165 , Add documentation for the new CookieJar functionality
2021-05-12 19:29:21 +01:00
b9720745d3
Land #15181 , Add auth brute credentials size calculation tests
2021-05-10 17:07:39 -05:00
8ed42473bd
Add auth brute credentials size calculation tests
2021-05-10 16:24:39 +01:00
bdf20d77db
Land #15149 , Ensure cookie jars are correctly duped
2021-05-07 14:51:40 +01:00
a22ebdf76d
cookie cleanup
2021-05-07 12:46:38 +01:00
0afef4b55c
Add auth brute unit tests
2021-05-07 10:19:16 +01:00
0be7452c28
Ensure cookie jars are correctly duped
2021-05-06 12:11:26 +01:00
6c6d7699ed
Land #14831 , Add CookieJar support to http_client
2021-04-30 14:08:04 +01:00
78295b654b
Land #14702 , Add module Redis extractor
2021-04-29 11:02:38 +10:00
7e2485260f
Fixes meterpreter tab completion issue
2021-04-28 10:52:05 +01:00
b2d5c4e57f
Added unit test
2021-04-28 16:24:37 +10:00
1b02344b55
consider vhost & expand tests
2021-04-20 15:12:54 +01:00
5df0f0b164
improvements to tests and api
2021-04-19 15:13:42 +01:00
88f17c5128
cleanup and removes cookies filtering
2021-04-16 17:31:11 +01:00
fc55d74b80
http-client cookie jar support and tests
2021-04-16 12:24:21 +01:00
7fe97cfda2
Add health check functionality
2021-04-16 01:59:22 +01:00
dbd0ac8203
Land #14985 , Updates the JSON RPC Web service to correctly use framework's database configuration, and adds support for foregrounding the JSON RPC web service
2021-04-15 11:22:07 +01:00
6d0aed92bc
Fix broken association handling for msfdb services command
2021-04-13 15:01:09 +01:00
14a3d48044
Fix grouping of transitive vulns and add spec
...
Properly merge the contents of the grouping sets when combining sets of
vulns. All permutations of simple double-transitive sets are now tested.
2021-04-09 03:53:52 -05:00
12c5dd6f44
Fix db connection support for rpc service
2021-04-02 05:30:34 +01:00
98df005c6c
Fix test
2021-04-01 15:57:28 +01:00
d63ff8a559
Fix search command for single characters
2021-03-22 19:02:31 +00:00
6aaf44c902
rubocop files and make the exclusions more localised
2021-03-15 13:27:37 +00:00
596e1fb6f8
Add rubocop rule to correct `Gem::Version` to `Rex::Version`
2021-03-15 11:17:47 +00:00
3bd430a7d0
Update the spec to reflect that the original type was removed
2021-03-11 12:09:29 -06:00
319f15d938
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
844e2f70d0
Land #14801 , Bump rex-text version to Re add color to search command
2021-02-24 17:04:36 +00:00
45e22d53d2
Re-add color to search command
2021-02-24 16:28:45 +00:00
abd7117a5f
Land #14735 , Require rubocop for new modules
2021-02-23 21:12:04 -06:00
260527076c
Require rubocop for new modules
2021-02-23 23:05:48 +00:00
f3ce9082b6
Enable word wrapped rex tables by default
2021-02-19 13:23:31 +00:00
275e9c5454
Land #14696 , Further Zeitwerk lands to improve boot speed
...
Zeitwerk rex folder
2021-02-19 10:33:37 +00:00
ecf8180538
Add custom whitespace cop for ignoring bindata
2021-02-15 20:26:05 +00:00
7fbbe23426
Remove more requires that were missed before
2021-02-08 14:51:58 +00:00
b95be3ed10
Zeitwerk `rex` folder
2021-02-08 12:24:12 +00:00
4c43a8081a
Land #14480 , Improve handling of external modules when missing runtime dependencies
2021-02-05 13:51:11 +00:00
3b8d87bdcb
Fix missing vhost in rhost http url feature
2021-02-04 16:52:43 +00:00
98349a6823
Improve handling of external modules when missing runtime dependencies
2021-02-02 14:49:16 +00:00
8f83de865c
Revert "Fix bug where vhost wasn't being set correctly when using rhost http url"
2021-02-01 16:33:18 +00:00
ff6a1f135c
Land #14629 , migrate msf folder to Zeitwerk
2021-01-22 14:21:26 +00:00
0fc8df31f2
Land #14609 , Fix bug where vhost wasn't being set correctly when using rhost http url
2021-01-19 11:10:50 -06:00
2d9e25d431
Add test case for vhost priority
2021-01-19 14:09:45 +00:00
2eb5208ae0
Rename shared example files to remove warnings
2021-01-19 12:32:58 +00:00
d437a32374
remove `msf/util` requires
2021-01-18 14:21:54 +00:00
b816373b94
remove `msf/ui` requires
2021-01-18 14:21:54 +00:00
da7a51fbca
Land #14584 , implement the zeitwerk autoloader within lib/msf/base
2021-01-18 13:11:08 +00:00
714db8bf43
Remove travis config files
2021-01-11 10:28:14 +00:00
bad5ccbc49
Remove `msf/base` requires
2021-01-05 14:59:46 +00:00
377a64f8ab
do not test iface in macOS for IPv6 inconsistency
2020-12-18 16:58:18 -06:00
90a99ae7c3
Land #14423 , Expand wordpress_scanner to look for themes & plugins
2020-12-09 09:12:28 -05:00
15fb9a1760
Remove the details from the wordpress checkcode tests
2020-12-08 17:05:27 -05:00
49a6b1b257
Remove requires that sneaked in while the PR was up
2020-12-07 11:02:10 +00:00
1617b3ec9b
Use zeitwerk for lib/msf/core folder
2020-12-07 10:31:45 +00:00
76e967353e
Add auxiliary support to autocheck mixin
2020-12-03 01:09:06 +00:00
bf60c4678d
to be to to eq
2020-11-22 08:47:10 -05:00
ac8f729d36
fix up some spec
2020-11-22 08:44:40 -05:00
d99db6ac0e
refactor test for ruby 2.7 deprecations
...
addresses `warning: deprecated Object#=~ is called on Array; it always returns nil`
2020-11-20 10:59:04 -06:00
2eb2fad212
Land #14294 , Allow adding details to CheckCodes, and update ms17_010_eternalblue to validate the target is x64
2020-11-19 14:09:55 +00:00
6aa2efca13
Land #14381 , Fixes rhost_http_url crashes when running the check method
2020-11-13 09:51:33 +00:00
7599bd4964
Adds tests for valid? method
2020-11-12 17:20:49 +00:00
4114dc596c
Land #14387 , ensures AutoCheck is always prepended
2020-11-12 15:44:34 +00:00
79a3328cd3
Validate that AutoCheck is prepended
2020-11-11 22:15:40 +00:00
5a6a530623
use more explicit date set in Timecop
2020-11-11 12:41:05 -06:00
708de57499
Land #14297 , Modified zabbix login to work with newer versions of zabbix
2020-11-02 15:59:22 -05:00
c62001c210
Improve the zabbix session gathering code as per Spencer's recommendation and update the spec checks accordingly
2020-10-30 14:14:14 -05:00
2b306abfee
Update debug command connection name logging
2020-10-27 12:54:27 +00:00
8b2227004d
Move the details back into the struct field for the array interface
2020-10-23 10:10:36 -04:00
30809787c4
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
c4c551fdef
Add disclosure date rubocop linting rule
2020-10-02 21:00:32 +01:00
d612962ef4
Land #14197 , start testing on Ruby 2.7
2020-10-02 11:26:20 -05:00
66f04a95b7
better enforcement of binary mode on test fixtures
2020-10-01 14:29:10 -05:00
c0b42ff7a2
Land #13995 , Add a Windows Secrets Dump module
2020-09-30 11:47:59 -04:00
5986bc98f1
Land #14171 , Replace erroneous calls to get_service with calls to service
2020-09-30 10:05:13 -05:00
67821e32c4
Password cracking integration
2020-09-29 20:36:39 +02:00
dceaf1d47c
force res and expected encoding in smb tests
2020-09-29 08:57:20 -05:00
0785e535aa
Land #14183 , update the debug command to additionally extract the web server logs
2020-09-29 12:48:55 +01:00
1a598b747d
Land #14186 , Add missing payload tests to rake spec file
2020-09-28 12:45:45 -05:00
9cb419ae8c
Resync with master branch
2020-09-28 15:45:02 +02:00
894ce6b72b
ignore cache size for peinject stage
2020-09-25 16:12:44 -05:00
2c9e2f79d9
optional user level
2020-09-25 15:48:31 -04:00
bccc17e4ae
updates tests to consider msf-ws.log
2020-09-25 14:45:33 +01:00
b790d697ac
add missing peinject stage payloads
2020-09-25 08:23:08 -05:00
92e41b2678
review comments
2020-09-23 10:36:26 -04:00
571504642a
fixes get_service calls
2020-09-22 12:54:58 +01:00
5eb2884c7e
fix tests
2020-09-21 19:35:46 -04:00
610d4d86d2
initial vyos implementation
2020-09-20 19:48:20 -04:00
9ef5822d3a
Revert "Replaces erroneous calls to get_service"
2020-09-18 19:09:25 +01:00
a5c30be10b
Land #14143 , Replace erroneous calls to get_service
2020-09-17 10:41:15 -05:00
14b233f957
fixes broken tests
2020-09-16 15:20:16 +01:00
e11840c2a5
land #14031 , F5 processor
2020-09-14 18:38:58 +02:00
daa10ea735
enhance user data parsing
2020-09-12 10:07:23 -04:00
177f720f80
Land #14021 , when searching modules for multiple text terms, the search will now require for all words to be matched
2020-08-27 20:02:55 +01:00
bba98d4f16
fix spec
2020-08-21 11:32:26 -04:00
9a64e3cd38
Land #13913 , [GSoC] Specs for the SQLi library
2020-08-20 17:43:11 -05:00
26a83d5d5c
rubocop
2020-08-20 14:31:18 -04:00
c8a541c187
pre rubocop
2020-08-20 14:27:51 -04:00
14e0ebe7f6
handle md5 and plaintext passwords
2020-08-20 10:25:08 -05:00
43fabcad53
arista
2020-08-20 10:25:08 -05:00
43ecb41575
Use and semantics when searching for text
2020-08-19 15:08:55 +01:00
3d1eba2b22
Land #13998 , Always use module cache for searching
...
Always use module cache for searching
2020-08-19 12:36:17 +01:00
f8523cb3e2
Add additional tests for edge cases
2020-08-19 09:37:03 +01:00
e7061439ef
Adds rhost url support behind a feature flag
...
Tidy up test
Return a string instead of a URI object
Code review comments
Rubcocop
2020-08-18 12:25:27 +01:00
baa33df45d
Always use module cache for searching
2020-08-14 19:14:54 +01:00
24d002b9e0
Fix Msf::Post::Windows::Priv#decrypt_secret_data
...
Fix the size caclculation of the decrypted data
2020-08-13 17:47:50 +02:00
e4b77616fa
Minor formatting (rubocop -a)
2020-08-08 03:49:29 +02:00
1f17b07746
use Timecop, separate query_proc from sqli_obj, and address other issues in the specs
2020-08-08 03:30:12 +02:00
231ad83773
Land #13860,Mikrotik Processing
...
Merge branch 'land-13860' into upstream-master
2020-08-07 14:48:22 -05:00
a1d7bb62a9
Add feature configuration persistence
2020-08-07 16:42:57 +01:00
d417f43b8d
Add WrappedTable support with feature flag integration
2020-08-07 16:42:54 +01:00
35017886b8
Land #13935 , Preliminary Version 6
2020-08-06 10:19:34 -05:00
9aa26d1208
Merge upstream into 6.x
2020-08-03 11:43:47 -05:00
8a86cad4a0
remove commented lines not needed
2020-07-31 11:56:52 -05:00
10e6c7a242
add missing fixture
2020-07-31 11:56:52 -05:00
0b65266ac1
adjust migration to proxy call to ActiveRecord
...
By adding proxy method the call to ActiveRecord::Migrator.migrations_paths
is decoupled from the migration task allowing more flexibility for the
underlying migration set selection to change in future Rails versions.
2020-07-31 11:56:51 -05:00
2c92d17ed9
refactor migration process for Rails 5
...
As noted in https://github.com/rails/rails/issues/36544 using
ActiveRecord migrations internally is not truly supported. This
workaround is valid for Rails 5 and might be easily adjusted
in Rails 6 although that is still TBD.
2020-07-31 11:56:51 -05:00
41776f093c
adjust xml spec to use FactoryBot for workspace
2020-07-31 11:56:51 -05:00
89d010a533
remove rails_bigdecimal_fix with rails 5 bump
2020-07-31 11:56:50 -05:00
772a24cb25
enforce json_rpc_spec to treat db as disabled
2020-07-31 11:56:50 -05:00
5d1c4dafa1
begin adjust migrations and remove old test
...
removed connection tests are from rails 3 expectations
2020-07-31 11:56:50 -05:00
07cbe426e2
Rails 5, all models inherit from ApplicationRecord
...
ApplicationRecord is a new superclass for all app models, analogous to app controllers subclassing ApplicationController instead of ActionController::Base. This gives apps a single spot to configure app-wide model behavior.
https://edgeguides.rubyonrails.org/upgrading_ruby_on_rails.html#active-record-models-now-inherit-from-applicationrecord-by-default
Deprecated Relation#uniq use Relation#distinct instead.
https://edgeguides.rubyonrails.org/5_0_release_notes.html#active-record-deprecations
2020-07-31 11:56:49 -05:00
d366666418
add Mikrotik SwOS
2020-07-30 11:29:25 -04:00
f48ed5027f
test #call_function, and not methods that might be implemented on specific DBMS only
2020-07-27 16:38:07 +02:00
50281473f1
Remove tests for removed functions
2020-07-27 09:57:41 -04:00
89fef9f9fe
Refactor and fix some specs, avoid sleeping in time-based shared examples
2020-07-27 03:15:16 +02:00
854df7e93b
Add shared examples for SQLi::Common, and some tests for MySQLi
2020-07-23 18:54:20 +02:00
a7e12bfa50
Land #13822 , update to the latest rubocop version
2020-07-22 10:18:31 +01:00
61a4fa61e5
simplify wifi block
2020-07-19 11:58:49 -04:00
e5e5faf084
add new field processors
2020-07-18 12:20:33 -04:00
eaf7161cae
mikrotik
2020-07-18 07:45:24 -04:00
65039a5091
Merge upstream into 6.x
2020-07-15 09:58:07 -05:00
384a71b06a
Land #13271 , Update auxiliary/server/capture/smtp to store credentials
2020-07-11 17:30:06 +00:00
20a5688a11
add specific error class to remove warning
2020-07-07 15:44:16 -05:00
4604488c05
Update rubocop version
2020-07-07 19:19:37 +01:00
2509bbfbc3
Remove rspec test focus, and ensure all tests run
2020-07-07 17:29:50 +01:00
ffc07d6c8f
Merge remote-tracking branch 'upstream/master' into pr/13787
2020-07-01 14:42:16 -05:00
89f7be3ef0
Improve error message
2020-07-01 14:20:04 -05:00
3737c6810c
Fix typo in debug command
2020-07-01 14:18:51 +01:00
4b78de5416
Refactor AutoCheck a bit more
2020-06-30 11:58:42 -05:00
b841246536
Update autocheck to use prepend instead of include, add ForceExploit functionality
2020-06-30 11:40:46 +01:00
babaee8c8e
adds debug command with spec tests
2020-06-29 15:38:56 +01:00
6007e13379
Fix edgecase in rubocop module description rule
2020-06-10 12:11:49 +01:00
5b69fe9757
reverse_python_ssl has has apparently stabilized in size
2020-06-09 08:59:52 +10:00
c08e86434b
Fix more specs
2020-06-09 08:58:27 +10:00
616fdaeb60
Fix up packe spec tests
2020-06-09 08:58:27 +10:00
5f8181efa7
Avoid auto-encoding payloads free of badchars
...
Payloads without any of the specified badchars will no longer be encoded
by default. This should hopefully lead to less surprising results when
using simple payloads (especially commands. Things that had incomplete
badchar analysis may break as a result, since not everything will be
encoded by default anymore. Sorry in advance if they do.
2020-05-07 10:58:03 -05:00
437a056f67
Land #13364 , .NET deserialization tool
2020-05-05 11:02:31 -05:00
e5be9ee9ef
add test for reverse_tcp_uuid stager with osx
2020-05-01 11:20:20 -05:00
b38648db12
Only fail on fatal XML syntax errors for the SoapFormatter
...
The library name in the XML needs to contain a space so it is not a valid URI.
2020-04-30 08:40:31 -04:00
d31882fe15
Modify unkown to unknown
2020-04-27 10:50:34 -05:00
48ed0ba3c5
Update java_deserialization_spec
2020-04-27 10:50:09 -05:00
af239303d2
Land #13257 , .NET Deserialization Library Improvements
2020-04-27 13:05:38 +02:00
090cf259ee
Add some additional unit testing through rspec
2020-04-22 15:53:59 -04:00
22e2a17873
cram-md5
2020-04-17 16:51:25 -04:00
15f4f7ea95
Land #13049 , Add fileformat exploit for libnotify plugin
...
Merge branch 'land-13049' into upstream-master
2020-04-16 16:03:14 -05:00
a13580bfd2
Fix the payload size tests for real this time
2020-04-16 15:35:38 -04:00
23319489b9
Remove unnecessary logic from ClassWithId
2020-04-15 18:11:45 -04:00
49580a48ac
Refactor exceptions and add more unit testing
2020-04-15 15:13:41 -04:00
82dc28e2c4
Use gadget chain classes for identification
2020-04-15 15:13:41 -04:00
46d5628d79
Add the WindowsIdentity gadget chain
2020-04-15 15:13:41 -04:00
f808121c84
Refactor formatters into modules
2020-04-15 15:13:41 -04:00
d6c2375eb8
Add chain consistency checks to the spec file
2020-04-15 15:13:41 -04:00
6a2561d2d1
remove excessive store_loot from cisco lib
2020-04-10 09:45:18 -04:00
d6d939b2ed
Land #12594 , add a Ubiquiti config importer mixin
2020-04-08 17:52:28 -04:00
89e257c722
Add spec
2020-03-26 06:55:05 +00:00
bf07b1c897
Landing #13039 , add color to search text matches and module ranks
2020-03-23 18:26:17 +00:00
04903daa4c
highlights search text & color codes module ranks
2020-03-23 17:42:17 +00:00
682653e9d9
PR comments
2020-03-13 13:32:59 +00:00
1137036ecb
Tidy up results tracking
2020-03-13 13:32:59 +00:00
55bd3f45be
run rubocop -a on new files
2020-03-13 13:32:58 +00:00
6762a7b147
Fix all the tests
2020-03-13 13:32:58 +00:00
54928c0e7b
fix tests
2020-03-13 13:32:58 +00:00
4705f9c2dc
Adds tests
2020-03-13 13:32:58 +00:00
9f76f3ef08
Use rpc specific job status tracker and add default no op tracker
2020-03-13 13:32:57 +00:00
34fc7528dd
Re-add original job state tracker code
...
This reverts commit 908ce3d3
2020-03-13 13:32:57 +00:00
bfd284b349
Add initial layout cops for the module super hash
2020-03-06 10:41:41 +00:00
3aeb6597a2
Landing #12980 , ensure json is always returned from the json rpc api
2020-03-04 12:14:53 +00:00
Tim W