Commit Graph

63653 Commits

Author SHA1 Message Date
Spencer McIntyre df04435d49 Only recalculate sometimes
Recalculations are time consuming, so only do it if necessary.
2022-03-21 17:00:31 -04:00
h00die ff7b017e14
Land #16361, docs for adb_server_exec 2022-03-21 09:24:04 -04:00
Tim W a4956bfe7c
Land #16358, fix apk injection on some apks by finding the correct hook point 2022-03-21 07:36:00 +00:00
Brendan Coles 4cd021ce4b Add exploit/android/adb/adb_server_exec documentation 2022-03-21 00:37:15 +00:00
Brendan Coles d9bd985cef Msf::Payload::Apk: find_hook_point: Return full packagename.classname 2022-03-19 21:08:02 +00:00
Tim W bdb729a43b
Land #16340, fall back to running apktool with --use-aapt2 if apktool fails 2022-03-19 11:47:56 +00:00
Metasploit 5faf25dbe3
automatic module_metadata_base.json update 2022-03-17 16:16:27 -05:00
Spencer McIntyre ccdc2db9e7
Land #16309, Catch an exception in ssh_login
The ssh_login module would crash when the channel used to execute the
commands to gather the platform information reported that they failed.
2022-03-17 16:41:47 -04:00
Spencer McIntyre da1e4853b8
Land #16317, Free UDP ports after use 2022-03-17 16:39:09 -04:00
Metasploit 1b31cc9a7c
automatic module_metadata_base.json update 2022-03-17 15:23:17 -05:00
Spencer McIntyre acf3906953 Add another instance of missing error handling 2022-03-17 16:07:31 -04:00
bwatters 54ad2b82c3
Land #16249, Add in Exchange Mixin - Initial Version with Version Detection
Merge branch 'land-16249' into upstream-master
2022-03-17 15:04:17 -05:00
Metasploit 374220f72f
Bump version of framework to 6.1.35 2022-03-17 12:05:14 -05:00
Grant Willcox 1bfc0feedb
Remove default options from HttpUsername and HttpPassword as blank strings are still considered setting the option when it comes to OptString, and this leads to falsely assuming the strings are set by the user when they are not 2022-03-17 11:29:06 -05:00
Grant Willcox 6ee0ef0c8a
Add in appropriate warning message in case we hit a snag, might help people out who hit a similar issue. Issue is highly tempermental and sometimes goes away for no reason so its hard to pin down but logging in this way should help. I tried doing things manually in code but it didn't seem to help and I don't want to block the code from working on something like this. 2022-03-17 11:29:05 -05:00
Grant Willcox ce062973cb
Make changes from review process, redo code for module to make it make less requests, and generally improve overal operations. 2022-03-17 11:29:05 -05:00
Grant Willcox c1d6dced8d
Update library code to read exchange versions from exchange_versions.json and populate exchange_versions.json with initial info 2022-03-17 11:29:01 -05:00
Grant Willcox 419c9ea554
Fix review comments to simplify regex, and also add in new is_exchange? function to check if a target is running Exchange Server or not. 2022-03-17 11:29:00 -05:00
Grant Willcox 1f53e9d1c4
Rubocop and fix a mistake on commenting too much of the code out from testing 2022-03-17 11:29:00 -05:00
Grant Willcox 269cd5cfed
Add in Exchange Version mixin and module example 2022-03-17 11:28:53 -05:00
Hynek Petrak 43cec440ac
Treat failed proof as successful connection with nil proof.
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
2022-03-17 14:05:17 +01:00
Metasploit f9a74d4203
automatic module_metadata_base.json update 2022-03-16 17:48:55 -05:00
Grant Willcox e197669274
Land #16284, Add CVE-2021-31126 DoS Module 2022-03-16 17:29:47 -05:00
Hynek Petrak 2841f70048 Catch exception from net/ssh/connection/session.rb:381 2022-03-16 23:11:21 +01:00
Grant Willcox 0f2813f70c
Update module and documentation for edits found whilst doing final pass of code 2022-03-16 16:55:03 -05:00
mauricelambert e678615f27
Fix items from code review 2022-03-16 16:54:38 -05:00
mauricelambert 33e12bf06f
Correct CVE number, comments and documentation 2022-03-16 16:54:24 -05:00
mauricelambert b745a24a9d
Random payload && TARGETURI option 2022-03-16 16:54:15 -05:00
mauricelambert d35b2528df
Add markdown documentation for rb_dos_iis_2022_21907 2022-03-16 16:54:14 -05:00
mauricelambert 7c806a8723
Add auxiliary module for DOS IIS Server 2022-03-16 16:53:59 -05:00
Ashley Donaldson 40c422cdf7
Close NBNS, mDNS and LLMNR sockets when their modules are complete 2022-03-17 08:12:26 +11:00
Ashley Donaldson 972c260969
Fix double dereference by moving DNS cleanup into separate function, and force to run as job. 2022-03-17 08:12:25 +11:00
Ashley Donaldson 7fe9d0b2b6
Don't start the DNS server twice 2022-03-17 08:02:31 +11:00
Metasploit c63490c050
automatic module_metadata_base.json update 2022-03-16 08:56:13 -05:00
bwatters b4de9fa92a
Land #16344, Add module for CVE-2022-21999 and More Railgun Definitions
Merge branch 'land-16344' into upstream-master
2022-03-16 08:37:05 -05:00
Shelby Pace 381b91de45
change wording in arch check
Co-authored-by: Brendan <bwatters@rapid7.com>
2022-03-15 16:45:36 -05:00
Grant Willcox 008071888c
Land #16347, Catch SocketError when normalizing the hostname 2022-03-15 16:45:29 -05:00
Grant Willcox 3dfa082465
Land #16342, Update documentation/modules/payload/android/meterpreter/reverse_tcp.md to add in BlueStack reference and fix msftidy errors 2022-03-15 14:16:48 -05:00
Grant Willcox 24f8ffb273
Land #16350, Fix encrypted shells crashing with no DB connection 2022-03-15 13:56:03 -05:00
Spencer McIntyre e28ee9ca53 Improve an error message when addr is nil
The normalized value can be nil when the hostname failed to resolve.
That is not helpful in the exception information, so use the original
value.
2022-03-15 14:01:26 -04:00
space-r7 e96ec401bf
add arch check, fix logic error, add aka note 2022-03-15 12:58:39 -05:00
Anshik Singh 9fbd547fcb
Add in Bluestacks reference and then polish up documentation to fix msftidy errors and typos. 2022-03-15 11:01:30 -05:00
sjanusz a3f4af1775
Fix encrypted shells crashing with no DB connection 2022-03-15 16:00:30 +00:00
Spencer McIntyre a6a63d0895 Rename scope to zone_id 2022-03-15 11:14:41 -04:00
Metasploit c0185f65bf
automatic module_metadata_base.json update 2022-03-15 08:24:21 -05:00
Spencer McIntyre 4dd7fc60e6
Land #16324, Fix broken DNS native_server 2022-03-15 09:06:03 -04:00
Ashley Donaldson 8cc2b87f59
Use Dnsruby::Message for all inputs 2022-03-15 16:41:05 +11:00
Metasploit f524588355
automatic module_metadata_base.json update 2022-03-14 17:48:07 -05:00
bwatters c936c45167
Land #16186, Add Python Meterpreter Command Payloads
Merge branch 'land-16186' into upstream-master
2022-03-14 17:29:03 -05:00
Grant Willcox 2142c877ad
Land #16262, Use bash instead of netcat as a default payload 2022-03-14 17:18:37 -05:00