Commit Graph

62625 Commits

Author SHA1 Message Date
Jeffrey Martin d802a9ee0b
remove rubocop exemption no longer required 2021-11-23 07:58:07 -06:00
Jeffrey Martin 08a1fb0c8e
remove stray comment 2021-11-22 14:39:07 -06:00
Jeffrey Martin 21a6a18d92
trade `URI.encode` & `URI.escape` for Ruby 3
Ruby 3 removed the `URI.escape` methods however access to
the a parse for the same RFC is stil available at `URI::DEFAULT_PARSER.escape`.

Per the Ruby forum [comment](https://bugs.ruby-lang.org/issues/17309#note-1) this should equal.
2021-11-22 14:11:03 -06:00
Metasploit 5863ff7e35
automatic module_metadata_base.json update 2021-11-18 17:24:22 -06:00
Grant Willcox 7f6d661ff7
Land #15866, Add Exploit For CVE-2021-38294 (Apache Storm Nimbus getTopologyHistory RCE) 2021-11-18 17:02:50 -06:00
Grant Willcox 725c5f8d8c
Add in another scenario into documentation and add additional detail to one setup step 2021-11-18 17:01:25 -06:00
Spencer McIntyre d7cb7804e6 Implement some changes from PR feedback 2021-11-18 16:35:13 -05:00
Grant Willcox 7b06ee9701
Land #15889, Add validation for resizeable interactive shells 2021-11-18 14:12:56 -06:00
Grant Willcox 3a9eb24bd3
Land #15887, Respect path expansion when performing path-based tab completion 2021-11-18 12:24:49 -06:00
Metasploit 3534d511af
Bump version of framework to 6.1.16 2021-11-18 12:04:17 -06:00
dwelch-r7 3b74021e19 Add validation for resizable interactive shells 2021-11-18 13:05:01 +00:00
Ashley Donaldson 81338225f0
Respect path expansion when performing path-based tab completion 2021-11-18 14:50:22 +11:00
Grant Willcox a915c3ce5c
Add fixes for some of the issues raised during the review process on both the documentation and module side of things 2021-11-17 17:25:50 -06:00
Metasploit 163dbf2cc1
automatic module_metadata_base.json update 2021-11-17 15:27:48 -06:00
Grant Willcox 9023c61ac8
Land #15851, User Agent Refresh 2021-11-17 15:08:52 -06:00
Grant Willcox 1d20393452
We should be safe to change the user agent for Google as well since we are communicating with Google's servers and as far as I can tell changing the user agent doesn't really change the results at all 2021-11-17 15:08:27 -06:00
Metasploit f91623cf4b
automatic module_metadata_base.json update 2021-11-17 09:13:17 -06:00
Christophe De La Fuente 6c57ee376a
Land #15755, Azure Active Directory Login Scanner Module 2021-11-17 15:53:22 +01:00
Matthew Dunn e3423317e0
Merge pull request #1 from jmartin-r7/azure-use-AuthBrute
Use AuthBrute to take advantage of library funcitons and checks
2021-11-16 17:37:11 -05:00
Jeffrey Martin f208e59541
ensure realm reported on credential
remove default DOMAIN to make input required
2021-11-16 15:36:04 -06:00
Jeffrey Martin 8c15fde679
adjust service reporting 2021-11-16 14:23:33 -06:00
Jeffrey Martin 5af7847b52
ensure address in an IP when reporting service 2021-11-16 12:39:41 -06:00
Jeffrey Martin 680f068adc
move text encode into XML generation 2021-11-16 12:39:41 -06:00
Jeffrey Martin 7b3c9f9d13
utilize AuthBrute more 2021-11-16 12:34:17 -06:00
adfoster-r7 3d4587b44e
Land #15879, Rename local instance variable to thread_list and handle a missing batch_size value on threads 2021-11-16 17:01:53 +00:00
Spencer McIntyre 9fa65092d1 Switch to the new Rex stopwatch function 2021-11-16 10:12:57 -05:00
Jeffrey Martin 4498e5d2e1
add guards for thread variable access 2021-11-16 07:53:51 -06:00
Jeffrey Martin b84b3b73ef
use a more descriptive variable name 2021-11-16 07:51:23 -06:00
Ashley Donaldson f020c99a85
Implement suggestions from code review 2021-11-16 11:07:48 +11:00
Grant Willcox d7047cdb6f
Land #15867, Update example modules 2021-11-15 15:32:45 -06:00
Jeffrey Martin 8e34a330f1
rename local instance variable for thread list 2021-11-15 15:07:12 -06:00
Grant Willcox a620b425dd
Fix a few capitalization errors 2021-11-15 14:56:25 -06:00
Grant Willcox fc05f53688
Reword comments a bit to make it cleare to end users how to use some of the libraries we provide 2021-11-15 14:54:13 -06:00
h00die e2ec4438a4 further update examples 2021-11-15 15:16:08 -05:00
Grant Willcox e65b10c57c
Land #15862, Expand environment variables on Linux Meterpreter 2021-11-15 14:15:41 -06:00
Metasploit 359ef2239c
automatic module_metadata_base.json update 2021-11-15 13:46:09 -06:00
Spencer McIntyre a100cd77ae
Land #15858, Add exploit for CVE-2021-42237 2021-11-15 14:24:47 -05:00
Grant Willcox 2dc3f4050a
Land #15878, Better tab completion experience when navigating directories in Meterpreter 2021-11-15 10:50:47 -06:00
Grant Willcox e6f38b3226
Rename dir parameter in Dir.match to match_dir to make more sense with new changes 2021-11-15 10:50:11 -06:00
Metasploit 548789b751
automatic module_metadata_base.json update 2021-11-15 10:04:38 -06:00
Spencer McIntyre b428863d9e
Land #15875, Bash payload works outside of bash 2021-11-15 10:46:05 -05:00
Ashley Donaldson 7bf75c0de5
Better support tab completing through a series of directories when using meterpreter 2021-11-15 17:22:38 +11:00
Ashley Donaldson 7549aaaf61
Remove warning now that bash payloads should work in this situation 2021-11-15 15:56:59 +11:00
Ashley Donaldson 40e45bdaed
Ensure bash payload executes from a bash context 2021-11-15 14:44:11 +11:00
Ashley Donaldson 90695e8399
Use expand_path in other file/directory-based meterpreter commands 2021-11-15 12:18:56 +11:00
Ashley Donaldson 32bf9f60d1
Explicitly select platforms to manually perform path expansion 2021-11-15 11:44:08 +11:00
h00die 93a1473e49 fix return add http timeout 2021-11-13 04:46:38 -05:00
h00die 69c0c367fe rubocop and example updates 2021-11-13 04:33:24 -05:00
Spencer McIntyre 0b3f95abca Writeup the module docs and move the protocol code 2021-11-12 15:15:51 -05:00
Spencer McIntyre 1f1e0fc2cc Write and use a check method 2021-11-12 14:08:19 -05:00