Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
134 commits
Select commit Hold shift + click to select a range
b9c8c63
lib post linux comments and specs
h00die Nov 27, 2024
61705db
more specs for linux post libraries
h00die Nov 27, 2024
cde6600
more specs for linux post libraries
h00die Dec 2, 2024
9ccc0a3
lib spec progress
h00die Dec 5, 2024
80d15ae
more specs and progress
h00die Dec 11, 2024
5dd55f0
Add initial NAA-cred-snarfing code.
smashery Dec 9, 2024
2d7985b
Add crypto structures
smashery Dec 10, 2024
76c2983
Working NAA retrieval on recent SCCM
smashery Dec 10, 2024
03a4acf
Rubocop fixes
smashery Dec 10, 2024
fd3f313
Report multiple NAA creds, if present
smashery Dec 10, 2024
a8a782e
Get working without autodiscovery
smashery Dec 10, 2024
6ec6909
MsfTidy fixes
smashery Dec 10, 2024
d52874a
Allow sessions to be not required. Added documentation.
smashery Dec 10, 2024
6054d7c
Better error handling for NAA
smashery Dec 11, 2024
0a45480
Properly support multiple NAA creds
smashery Dec 11, 2024
c2495af
Properly support there being no NAA creds
smashery Dec 11, 2024
335825a
Search for all policies with secrets, rather than just NAAConfig
smashery Dec 11, 2024
556e52d
Add missing option docs
smashery Dec 13, 2024
a11616d
Add support for older encryptions
smashery Dec 13, 2024
ad44afe
Rubocop fixes
smashery Dec 13, 2024
4c7d1d8
Changes from code review
smashery Dec 13, 2024
7badd24
Removed unused sccm file
smashery Dec 15, 2024
c6e3df8
Report creds to DB
smashery Dec 16, 2024
25cb219
Apply escaping args to other command shells
smashery Dec 17, 2024
851beb7
Change from code review
smashery Dec 19, 2024
262e4b8
ignore sleeps
h00die Dec 21, 2024
2e3661a
rubocop specs
h00die Dec 21, 2024
e024c11
Don't do any escaping on platforms with unknown escaping
smashery Jan 9, 2025
66f49c2
post linux spec fixes
h00die Feb 12, 2025
4bb8c30
post linux spec fixes
h00die Feb 12, 2025
1bb9fc9
compile spec fixes
h00die Feb 18, 2025
b328d3f
better specs for packages lib
h00die Feb 19, 2025
da06e5a
additional specs for packages
h00die Feb 19, 2025
e689d85
additional specs for packages
h00die Feb 19, 2025
df8ad37
Remove comment
h00die Feb 20, 2025
4d4b88c
Add D-Tale unauth RCE module (CVE-2025-0655)
Takahiro-Yoko Feb 23, 2025
40726d1
Remove unnecessary & guard operator
Takahiro-Yoko Feb 26, 2025
d9c2ed8
merge freebsd and solaris for packages lib
h00die Feb 26, 2025
29cb441
remove solaris check since its in freebsd code branch
h00die Feb 26, 2025
c9afd44
Add the NIST SP 800 38f key wrap function
zeroSteiner Feb 25, 2025
e159ea5
Add the NIST SP 800 108 key derivation function
zeroSteiner Feb 20, 2025
b8429cb
Update lib/msf/core/post/linux/packages.rb
h00die Feb 27, 2025
11818c2
Switch to using Rex's Crypto module
zeroSteiner Feb 27, 2025
2fd0511
Add some basic NIST SP 800 108 specs
zeroSteiner Feb 27, 2025
36b13f5
Land #19862, updating Linux post library - additional comments, specs…
msutovsky-r7 Feb 28, 2025
149c442
Moving HTTP Digest Authentication response counting moved into separa…
msutovsky-r7 Feb 28, 2025
62b8ded
Vuln cert finder minor fix plus doc update
jheysel-r7 Feb 28, 2025
d2dd9a6
Add docs for ESC4,13 and 15 vulnerable template configuration
jheysel-r7 Feb 28, 2025
810e7c4
Adds scripts to find and replace dead module reference links
cgranleese-r7 Feb 7, 2025
acd692e
Adds two scripts to handle dead module reference links
cgranleese-r7 Feb 21, 2025
0017fbd
Updates more dead links
cgranleese-r7 Feb 28, 2025
df8b0de
Fixes some invalid links
cgranleese-r7 Feb 28, 2025
b3602b2
Merge pull request #19919 from jheysel-r7/fix/nil_check/esc_cert_finder
smcintyre-r7 Feb 28, 2025
b4ca537
Merge pull request #19920 from jheysel-r7/docs/vuln_cert_finder_update
smcintyre-r7 Feb 28, 2025
8ac44d5
automatic module_metadata_base.json update
Feb 28, 2025
57e3045
Fixes crash when searching modules by target
cgranleese-r7 Feb 28, 2025
7a5ff2a
Adds tests for nil scenarios
cgranleese-r7 Feb 28, 2025
ee89d10
Gem bump for get_naa_creds module
jheysel-r7 Feb 28, 2025
316ecd4
Use FETCH_FILELESS as default
Takahiro-Yoko Mar 1, 2025
77c3ce5
Improve:
Takahiro-Yoko Mar 1, 2025
5cc5563
Msf::Post:Linux::System.get_sysinfo: Add support for several Linux di…
bcoles Mar 1, 2025
65d2b63
Update vulnerable version
Takahiro-Yoko Mar 2, 2025
94fcda9
Removing unnecessary function
msutovsky-r7 Mar 3, 2025
47351e4
Use FETCH_DELETE as default
Takahiro-Yoko Mar 3, 2025
3c4d0aa
Land #19899, D-Tale remote code execution module
msutovsky-r7 Mar 3, 2025
c9421a6
automatic module_metadata_base.json update
Mar 3, 2025
b1b8ad3
Merge pull request #19922 from cgranleese-r7/fixes-crash-when-searchi…
adfoster-r7 Mar 3, 2025
60e9cae
Merge pull request #19926 from jheysel-r7/gem_bump_for_get_naa_module
adfoster-r7 Mar 3, 2025
eef2e4c
Merge pull request #19918 from msutovsky-r7/feat/separate_class_http_…
adfoster-r7 Mar 3, 2025
b94418a
Enable LDAP sessions by default
zeroSteiner Mar 3, 2025
4d57710
Make timeout configurable and nil check content
jheysel-r7 Mar 3, 2025
b0fec4e
Merge pull request #19933 from zeroSteiner/feat/enable-ldap-sessions
adfoster-r7 Mar 3, 2025
b1d0eed
Merge pull request #19712 from smashery/naa_creds
jheysel-r7 Mar 3, 2025
59b862c
automatic module_metadata_base.json update
Mar 3, 2025
8d7bbdd
Sonicwall module
msutovsky-r7 Mar 4, 2025
daf5e1c
include ERB::Util for html_escape
fabpiaf Mar 4, 2025
54465f3
Land #19917, Add NIST SP 800 Crypto Primitives
dledda-r7 Mar 4, 2025
91f1db3
Update ubuntu versions for github actions
adfoster-r7 Mar 4, 2025
d626886
Merge pull request #19940 from adfoster-r7/update-ubuntu-versions-for…
smcintyre-r7 Mar 4, 2025
8d3d8d8
Call #validate in run_simple like it is in call_simple
zeroSteiner Mar 1, 2025
112b8f5
Call #validate before walking the rhosts
zeroSteiner Mar 3, 2025
f2e29a3
Remove dead code that shouldn't get hit anymore
zeroSteiner Mar 4, 2025
f12ddc7
Apply the same refactoring to posts
zeroSteiner Mar 4, 2025
f2bcf34
Apply the same refactoring to exploits
zeroSteiner Mar 4, 2025
2422f8b
Add specs to test the #validate method
zeroSteiner Mar 4, 2025
bf5ae87
Use dynamically generated session
Takahiro-Yoko Mar 5, 2025
fa4dd1d
Add error handling on unknown shell type
smashery Mar 5, 2025
7a1892e
Land #19745, applying argument escaping to other shells
msutovsky-r7 Mar 5, 2025
58fbf9e
Update server.rb
fabpiaf Mar 5, 2025
1bea1ba
Addressing comments in PR
msutovsky-r7 Mar 5, 2025
8102bed
Merge pull request #19896 from cgranleese-r7/adds-scripts-for-dead-mo…
adfoster-r7 Mar 5, 2025
8604c72
Merge pull request #19895 from cgranleese-r7/update-dead-module-refer…
adfoster-r7 Mar 5, 2025
c62f041
automatic module_metadata_base.json update
Mar 5, 2025
c698979
Land #19935, SonicWall NSv HTTP Login Module
dledda-r7 Mar 5, 2025
03277a4
automatic module_metadata_base.json update
Mar 5, 2025
03b9070
Land #19927, get_sysinfo add support for several Linux distros
dledda-r7 Mar 5, 2025
95e8b31
Merge pull request #19925 from zeroSteiner/fix/auxiliary/validate
adfoster-r7 Mar 5, 2025
dbce824
Add a warning for MS08-068 when applicable
zeroSteiner Mar 5, 2025
7950d86
Use the existing #validate method for options
zeroSteiner Nov 8, 2024
5e3953e
Add a new mixin for handling multiple targets
zeroSteiner Nov 8, 2024
b43dc8b
Switch relay modules, add ESC8 check method
zeroSteiner Nov 8, 2024
0116d0c
Actually count the hosts
zeroSteiner Nov 11, 2024
4004c1f
Add #signing_required to SMB::SimpleClient
zeroSteiner Nov 11, 2024
4422cb5
Update target_host information
zeroSteiner Nov 12, 2024
04842ea
Add a check method to the smb_relay module
zeroSteiner Nov 12, 2024
f6c8b98
Finish up the ESC8 check after more research
zeroSteiner Nov 12, 2024
37e92f7
Merge pull request #19639 from zeroSteiner/feat/mod/relay/checks
jheysel-r7 Mar 5, 2025
ef638ae
automatic module_metadata_base.json update
Mar 5, 2025
c3ffdb1
Merge pull request #19946 from zeroSteiner/feat/mod/relay/ms08-068-wa…
jheysel-r7 Mar 5, 2025
787205e
Bump version of framework to 6.4.53
msjenkins-r7 Mar 6, 2025
233c710
Update modules/exploits/linux/http/dtale_rce_cve_2025_0655.rb
Takahiro-Yoko Mar 6, 2025
edb47d9
Update function name after applied suggestion
Takahiro-Yoko Mar 6, 2025
196d95b
Land #19944, adding dynamic session for module CVE-2025-0655
msutovsky-r7 Mar 7, 2025
da00168
automatic module_metadata_base.json update
Mar 7, 2025
992b01b
Merge pull request #19937 from fabpiaf/patch-1
adfoster-r7 Mar 7, 2025
281b728
initial module and documentation
h00die-gr3y Mar 7, 2025
44bdc5b
Update documentation/modules/exploit/linux/http/invoiceshelf_unauth_r…
h00die-gr3y Mar 10, 2025
e341398
small update on module and documentation
h00die-gr3y Mar 10, 2025
1ca57c8
added base64 encoding in php payload execution
h00die-gr3y Mar 11, 2025
f3d644c
Use real SiteReference instances
zeroSteiner Mar 10, 2025
661ac23
Merge pull request #19955 from zeroSteiner/feat/lib/adcs-mm-updates/1
bwatters-r7 Mar 12, 2025
7603b5d
automatic module_metadata_base.json update
Mar 12, 2025
a5edf5b
automatic module_metadata_base.json update
Mar 12, 2025
b228e3b
Land #19956, Routine dependency updates
cgranleese-r7 Mar 13, 2025
557b2c7
Enable longpaths on windows github actions runners
dwelch-r7 Mar 13, 2025
a1093b0
Merge pull request #19959 from dwelch-r7/enable-longpaths
adfoster-r7 Mar 13, 2025
0ca2599
update based on review comments
h00die-gr3y Mar 14, 2025
84012fd
fixed invalid attackerkb reference
h00die-gr3y Mar 14, 2025
9961bfb
Land #19950, module for InvoiceShelf unauthenticated PHP deserialization
msutovsky-r7 Mar 14, 2025
c382de8
automatic module_metadata_base.json update
Mar 14, 2025
76289d9
Bump version of framework to 6.4.54
msjenkins-r7 Mar 14, 2025
741a222
Land #19961, fixing incorrect URL in the InvoiceNinja module
msutovsky-r7 Mar 14, 2025
ef79506
automatic module_metadata_base.json update
Mar 14, 2025
27d9ce3
fix: Gemfile to reduce vulnerabilities
snyk-bot Jul 16, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 12 additions & 2 deletions .github/workflows/command_shell_acceptance.yml
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,7 @@ jobs:
matrix:
os:
- windows-2019
- ubuntu-20.04
- ubuntu-latest
ruby:
- '3.2'
include:
Expand All @@ -73,7 +73,7 @@ jobs:
- { command_shell: { name: powershell }, os: windows-2022 }

# Linux
- { command_shell: { name: linux }, os: ubuntu-20.04 }
- { command_shell: { name: linux }, os: ubuntu-latest }

# CMD
- { command_shell: { name: cmd }, os: windows-2019 }
Expand Down Expand Up @@ -126,6 +126,11 @@ jobs:
with:
path: metasploit-framework

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
env:
BUNDLE_FORCE_RUBY_PLATFORM: true
Expand Down Expand Up @@ -175,6 +180,11 @@ jobs:
if: always()
run: sudo apt-get -y --no-install-recommends install libpcap-dev graphviz

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
if: always()
env:
Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/docs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,11 @@ jobs:
- name: Checkout code
uses: actions/checkout@v4

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
uses: ruby/setup-ruby@v1
with:
Expand Down
10 changes: 10 additions & 0 deletions .github/workflows/ldap_acceptance.yml
Original file line number Diff line number Diff line change
Expand Up @@ -72,6 +72,11 @@ jobs:
docker compose build
docker compose up --wait -d

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
env:
# Nokogiri doesn't release pre-compiled binaries for preview versions of Ruby; So force compilation with BUNDLE_FORCE_RUBY_PLATFORM
Expand Down Expand Up @@ -121,6 +126,11 @@ jobs:
if: always()
run: sudo apt-get -y --no-install-recommends install libpcap-dev graphviz

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
if: always()
env:
Expand Down
10 changes: 10 additions & 0 deletions .github/workflows/mssql_acceptance.yml
Original file line number Diff line number Diff line change
Expand Up @@ -82,6 +82,11 @@ jobs:
- name: Checkout code
uses: actions/checkout@v4

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
env:
# Nokogiri doesn't release pre-compiled binaries for preview versions of Ruby; So force compilation with BUNDLE_FORCE_RUBY_PLATFORM
Expand Down Expand Up @@ -138,6 +143,11 @@ jobs:
if: always()
run: sudo apt-get -y --no-install-recommends install libpcap-dev graphviz

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
if: always()
env:
Expand Down
10 changes: 10 additions & 0 deletions .github/workflows/mysql_acceptance.yml
Original file line number Diff line number Diff line change
Expand Up @@ -80,6 +80,11 @@ jobs:
- name: Checkout code
uses: actions/checkout@v4

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
env:
# Nokogiri doesn't release pre-compiled binaries for preview versions of Ruby; So force compilation with BUNDLE_FORCE_RUBY_PLATFORM
Expand Down Expand Up @@ -137,6 +142,11 @@ jobs:
if: always()
run: sudo apt-get -y --no-install-recommends install libpcap-dev graphviz

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
if: always()
env:
Expand Down
10 changes: 10 additions & 0 deletions .github/workflows/postgres_acceptance.yml
Original file line number Diff line number Diff line change
Expand Up @@ -82,6 +82,11 @@ jobs:
- name: Checkout code
uses: actions/checkout@v4

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
env:
# Nokogiri doesn't release pre-compiled binaries for preview versions of Ruby; So force compilation with BUNDLE_FORCE_RUBY_PLATFORM
Expand Down Expand Up @@ -139,6 +144,11 @@ jobs:
if: always()
run: sudo apt-get -y --no-install-recommends install libpcap-dev graphviz

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
if: always()
env:
Expand Down
16 changes: 13 additions & 3 deletions .github/workflows/shared_meterpreter_acceptance.yml
Original file line number Diff line number Diff line change
Expand Up @@ -69,12 +69,12 @@ jobs:
os:
- macos-13
- windows-2019
- ubuntu-20.04
- ubuntu-latest
ruby:
- '3.2'
meterpreter:
# Python
- { name: python, runtime_version: 3.6 }
- { name: python, runtime_version: 3.8 }
- { name: python, runtime_version: 3.11 }

# Java
Expand All @@ -92,7 +92,7 @@ jobs:

# Mettle
- { meterpreter: { name: mettle }, os: macos-13 }
- { meterpreter: { name: mettle }, os: ubuntu-20.04 }
- { meterpreter: { name: mettle }, os: ubuntu-latest }

runs-on: ${{ matrix.os }}

Expand Down Expand Up @@ -190,6 +190,11 @@ jobs:
path: metasploit-framework
ref: ${{ inputs.metasploit_framework_commit }}

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
env:
BUNDLE_FORCE_RUBY_PLATFORM: true
Expand Down Expand Up @@ -344,6 +349,11 @@ jobs:
if: always()
run: sudo apt-get -y --no-install-recommends install libpcap-dev graphviz

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
if: always()
env:
Expand Down
10 changes: 10 additions & 0 deletions .github/workflows/shared_smb_acceptance.yml
Original file line number Diff line number Diff line change
Expand Up @@ -74,6 +74,11 @@ jobs:
docker compose build
docker compose up --wait -d

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
env:
# Nokogiri doesn't release pre-compiled binaries for preview versions of Ruby; So force compilation with BUNDLE_FORCE_RUBY_PLATFORM
Expand Down Expand Up @@ -143,6 +148,11 @@ jobs:
if: always()
run: sudo apt-get -y --no-install-recommends install libpcap-dev graphviz

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
if: always()
env:
Expand Down
6 changes: 5 additions & 1 deletion .github/workflows/verify.yml
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,6 @@ jobs:
- '3.3'
- '3.4'
os:
- ubuntu-20.04
- ubuntu-latest
include:
- os: ubuntu-latest
Expand All @@ -89,6 +88,11 @@ jobs:
- name: Checkout code
uses: actions/checkout@v4

# https://github.com/orgs/community/discussions/26952
- name: Support longpaths
if: runner.os == 'Windows'
run: git config --system core.longpaths true

- name: Setup Ruby
env:
# Nokogiri doesn't release pre-compiled binaries for preview versions of Ruby; So force compilation with BUNDLE_FORCE_RUBY_PLATFORM
Expand Down
8 changes: 4 additions & 4 deletions Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -35,16 +35,16 @@ group :development, :test do
gem 'rake'
# Define `rake spec`. Must be in development AND test so that its available by default as a rake test when the
# environment is development
gem 'rspec-rails'
gem 'rspec-rails', '>= 8.0.0'
gem 'rspec-rerun'
# Required during CI as well local development
gem 'rubocop'
# Required during CI as well local development - pinned due to CI failure on: rubocop-1.73.2/lib/rubocop/config_loader.rb:272:in `read'
gem 'rubocop', '1.67.0'
end

group :test do
# automatically include factories from spec/factories
gem 'test-prof'
gem 'factory_bot_rails'
gem 'factory_bot_rails', '>= 6.5.0'
# Make rspec output shorter and more useful
gem 'fivemat'
# rspec formatter for acceptance tests
Expand Down
Loading
Loading