Update creds cracked password to work with remote database - #1

Open

adfoster-r7 wants to merge 966 commits into

manishkumar102317:add_new_column_in_credsfrom

adfoster-r7:update-creds-cracked-password-to-work-with-remote-database

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 11, 2023

Add ldap login scanner module
dwelch-r7
committed
8f013d7
Add LDAP login scanner
dwelch-r7
committed
fc89c99
Add missing require
dwelch-r7
committed
80757fc
Add ldap login scanner specs
dwelch-r7
committed
7a06ad8
Add remote ldap specs
dwelch-r7
committed
1af852b
Fix issue with username generation always adding domain
dwelch-r7
committed
586f27f
Updated check method and reliability
jheysel-r7
committed
b80f9a8
Merge branch 'clfs-driver-priv-esc' of github.com:jheysel-r7/metasploit-framework into clfs-driver-priv-esc
jheysel-r7
committed
e105a56
pick up netifaces updates, improve error catching
zgoldman-r7
committed
615aa8d
add unit test
zgoldman-r7
committed
a13d45e
another round of review comments
h00die
committed
94657d3
Add and use a Thrift client object
zeroSteiner
committed
fbf95ec
Update the Nimbus module to use the Thrift client
zeroSteiner
committed
ba84c04
update LICENSE with flask wordlist
h00die
committed
325910b

Commits on Sep 12, 2023

Add new PAC types required by DCs for accepting TGTs as valid
smashery
committed
6b8fe05
Use constants for LDAP::Auth conditional
dwelch-r7
committed
5713b74
Add more thrift types and methods for creating them
zeroSteiner
committed
2370171
Replace the binray blobs
zeroSteiner
committed
187cca8
Update nimbus_gettopologyhistory_cmd_exec
zeroSteiner
committed
8e8b8ad
Add additional error reporting to integration tests
adfoster-r7
committed
e070ba2
Add some lib docs
zeroSteiner
committed
8877400
Thanks to Spencer improved execute_command method
jheysel-r7
committed
b83a49e
Process escape sequences in the wordlist
smcintyre-r7
committed
c1cabdf
Land #18343, add support for configurable DNS resolver to metasploit-framework
adfoster-r7
authored
30e66c4
Land #18180, Flask unsign library, related modules
smcintyre-r7
committed
28c4902
automatic module_metadata_base.json update
msjenkins-r7
committed
6a84cc8

Commits on Sep 13, 2023

Merge branch 'rapid7:master' into apache_airflow_dag_rce
ismaildawoodjee
authored
78684dc
Update unit tests
smashery
committed
483e817
Don't add extra PACs for silver tickets
smashery
committed
5c93b38
Apply suggestions from code review

ismaildawoodjee
and
bwatters-r7
authored
008701f
Land #18330, Ivanti Sentry MICSLogService Auth Bypass resulting in RCE (CVE-2023-38035)
cgranleese-r7
authored
e82bff3
automatic module_metadata_base.json update
msjenkins-r7
committed
95b882b
Land #18357, Add additional error reporting to integration tests
cgranleese-r7
authored
814484c
Adds new search keywords to msfconsole
cgranleese-r7
committed
4bff7dd
Merge branch 'rapid7:master' into apache_airflow_dag_rce
ismaildawoodjee
authored
930063f
Fix msfrpc hanging forever if rsock pair doesnt connect
adfoster-r7
committed
bc2fdba
Add support to msfvenom for "-f octal".
j0ev
committed
0b73e4c
superset rce wip
h00die
committed
686d704
initial release module
h00die-gr3y
committed
4bb465b

Commits on Sep 14, 2023

Land #18250, CVE-2023-28252: Windows CLFS Driver Privilege Escalation
sjanusz-r7
authored
8b56dc0
automatic module_metadata_base.json update
msjenkins-r7
committed
c4396f2
second release module
h00die-gr3y
committed
094685f
Land #18362, Fix msfrpc hanging forever if rsock pair doesnt connect
adfoster-r7
authored
1b29c48
Update documentation/modules/exploit/windows/misc/ivanti_avalanche_mdm_bof.md

EgeBalci
and
cgranleese-r7
authored
9fbfe63
Update installation steps.
EgeBalci
committed
cf4757a
Bump version of framework to 6.3.35
msjenkins-r7
committed
126e6b6
working hashes for apache superset rce
h00die
committed
619a46d
third release module and documentation
h00die-gr3y
committed
784f311
still working on resetting values
h00die
committed
0c418fd
updated documentation
h00die-gr3y
committed
21cab0e
Land #18361, Adds new search keywords to msfconsole
adfoster-r7
authored
c558dae
Add some specs for thrift data types
zeroSteiner
committed
bf9ef45
Add some basic specs for the client too
zeroSteiner
committed
0368b23
Fix OptAddressLocal crash when IPAddr is nil
adfoster-r7
committed
871e1f4
Land #18358, Add a Thrift RPC client
jheysel-r7
committed
46832ab
automatic module_metadata_base.json update
msjenkins-r7
committed
85cf00e

Commits on Sep 15, 2023

solves #18371
gcarmix
committed
1efb3f7
Land #18369, Fix opt address local crash when ipaddr is nil
cgranleese-r7
authored
ba9f879
Correct Msf::ValidationError namespacing
dwelch-r7
committed
09c7575
Fix msfrpc hanging when updating saved command history
adfoster-r7
committed
a60e048
Land #18294, pick up netifaces updates, improve error catching
sjanusz-r7
authored
1378bfb
Merge branch 'rapid7:master' into apache_airflow_dag_rce
ismaildawoodjee
authored
d12b177
still working on resetting values
h00die
committed
a8da47e
Add spec for format without comment support.
j0ev
committed
1d51514
superset rce more stable
h00die
committed
e34ed10
fix related modules references
h00die
committed
13e7f6c
fix related modules references
h00die
committed
cd18319
fix related modules references
h00die
committed
dd947d4

Commits on Sep 17, 2023

Move module and documentation from multi/http to linux/http
ismaildawoodjee
committed
f9cdfef

Commits on Sep 18, 2023

Commits on Sep 19, 2023

Commits on Sep 20, 2023

Land #18374, fix related modules references
cgranleese-r7
authored
37b506c
automatic module_metadata_base.json update
msjenkins-r7
committed
2722067
Land #18380, Fix broken test suite when running in small console window
sjanusz-r7
authored
1ef030d
Makes improvement to enum_computers module
cgranleese-r7
committed
461e661
Don't store passwords to creds if the password wasn't needed for the auth type
dwelch-r7
committed
1609836
Actually delete the file I told you to delete
bwatters-r7
committed
03fa034
Add new spec for Msf::Simple::Payload.
j0ev
committed
91ce4c3
Fix incorrect parameter docstring.
j0ev
committed
b160626
Junos OS SRX and EX PHPRC Manipulation RCE
jheysel-r7
committed
da8c020
Updates addressing cdelafuente-r7 comments
h00die-gr3y
committed
6e11f43
Add comment support for "octal" format.
j0ev
committed
1d2dde9

Commits on Sep 21, 2023

Land #18365, TOTOLINK X5000R Wireless GigaBit Router Unauthenticed RCE [CVE-2023-30013]
cdelafuente-r7
committed
1e69086
automatic module_metadata_base.json update
msjenkins-r7
committed
a6adf81
review comments
h00die
committed
77c299d
Send default etypes first, and fall back to RC4 if it doesn't require pre-auth
smashery
committed
a7f2165
Removes mixin
cgranleese-r7
committed
6fdcc43
Improved request sending and added watchtower ref
jheysel-r7
committed
12de4dd
Remove raised exception in acceptance tests
adfoster-r7
committed
14ded7a
Update using metasploit docs
adfoster-r7
committed
e84d433
Add support for base32/64 comments.
j0ev
committed
75e9a0a
Add comment explaining UNSUPPORTED_LANGS in spec.
j0ev
committed
1b25ae5
Bump version of framework to 6.3.36
msjenkins-r7
committed
0d6aee8
Add documentation for auxiliary/scanner/http_traversal module
errorxyz
committed
e6f55d0
Address review comments
jheysel-r7
committed
127f010

Commits on Sep 22, 2023

Commits on Sep 24, 2023

code spell for a bunch of modules
h00die
committed
d64ed33

Commits on Sep 25, 2023

Land #18399, fix multiple spelling mistakes
adfoster-r7
authored
aa2a843
Added JAIL_BREAK option and corresponding methods
jheysel-r7
committed
b4539f1

Commits on Sep 26, 2023

updates from code review
bwatters-r7
committed
0b84fea
Finished JAIL_BREAK addition
jheysel-r7
committed
09f3a98
jvoisin suggestions
jheysel-r7
committed
9a1881c
rubocop
jheysel-r7
committed
3eaa4ad

Commits on Sep 27, 2023

Added LICENSE info
bwatters-r7
committed
a929d7b
Update documentation - Options section
cdelafuente-r7
committed
2c9932b
Land #18314, Windows Error Reporting RCE (CVE-2023-36874)
cdelafuente-r7
committed
1058291
automatic module_metadata_base.json update
msjenkins-r7
committed
cce28a9
Fix pass by reference bug on the module side
bwatters-r7
committed
a4c6b11
Land #18406, Fix pass by reference bug on the module side for windows error exploit
cdelafuente-r7
committed
bc8179e
Fix docs format in modules/auxiliary/scanner/http/http_traversal
errorxyz
committed
5060bb1
automatic module_metadata_base.json update
msjenkins-r7
committed
d5d2a52
general dependency update
jmartin-tech
committed
ef27b61
more general updates for security hygiene
jmartin-tech
committed
5310d00

Commits on Sep 28, 2023

add in coverage for CVE-2023-42793. Currently only a Windows target.
sfewer-r7
committed
fbd5e60
add in a Linux target
sfewer-r7
committed
ad7ff70
typo in comment
sfewer-r7
committed
96568bf
improve the check routine to explicitly look for either a header value or a cookie value that TeamCity is known to set
sfewer-r7
committed
9a6e2da
use the correct naming convention for normal options.
sfewer-r7
committed
89940e8
Minor code changes
smcintyre-r7
committed
e7ab983
Land #18408, JetBrains TeamCity CVE-2023-42793
smcintyre-r7
committed
36d8a34
automatic module_metadata_base.json update
msjenkins-r7
committed
d65db45
Responded to Christophes suggestions
jheysel-r7
committed
3f15de3
Bump version of framework to 6.3.37
msjenkins-r7
committed
8de942d
Update documentation/modules/exploit/freebsd/http/junos_phprc_auto_prepend_file.md

jheysel-r7
and
cdelafuente-r7
authored
4fecb4d
Changed WebSocket to SSH
jheysel-r7
committed
58642c1
Merge branch 'junos_phprc_auto_prepend_file' of github.com:jheysel-r7/metasploit-framework into junos_phprc_auto_prepend_file
jheysel-r7
committed
2928d47

Commits on Sep 29, 2023

Commits on Oct 2, 2023

add in exploit module for CVE-2023-40044 - WS_FTP unauthenticated RCE via .NET deserialization.
sfewer-r7
committed
53ed4a6
Land #18393, Update using metasploit docs
adfoster-r7
authored
c728671
Don't store creds for successful schannel ldap auth
dwelch-r7
committed
76a25c6
PD-41096 Auto-add cortex.yaml
simonirwin-r7
committed
6cefa8f
Show errors on inaccessible payload files
sjanusz-r7
committed
e70f356
Land #18197, Ldap login scanner module
jheysel-r7
committed
5087e0f
automatic module_metadata_base.json update
msjenkins-r7
committed
b078e8e
Explicitly state both the release name (e.g. 2022.0.2) and the version number (e.g. 8.8.2) in a more consistent way.
sfewer-r7
committed
1695a12
Land #18338, Get crackable ASREP hashes
jheysel-r7
committed
50e4269
Update on feedback from jmartin
bwatters-r7
committed
42f6bb8
Update lib/msf/ui/tip.rb

zeroSteiner
and
bwatters-r7
authored
3baf867
kibana telemetry rce
h00die
committed
88eb44b

Commits on Oct 3, 2023

Commits on Oct 4, 2023

Commits on Oct 6, 2023

Land #18256, general dependency update
adfoster-r7
authored
f3c1059
convert cmd_stager to fetch payloads
h00die
committed
a2a9bec
Fix how port forwards are listed
zeroSteiner
committed
d46e80f
Add pin to rails 7.0.x
adfoster-r7
committed
88c849d
Land #18430, Add pin to rails 7.0.x
dwelch-r7
authored
9372d9c
kibana telemetry rce rewritten to use fetch payloads
h00die
committed
931a67d
Update gem dependencies
adfoster-r7
committed
d11f15b
Enable using modules when deferred loading is turned on
dwelch-r7
committed
d60993f
Get stats from the cache instead of from frameworks list of loaded modules
dwelch-r7
committed
9eb4385
Revert accidental changes
dwelch-r7
committed
ef87168
Land #18432, Update gem dependencies
dwelch-r7
authored
022dca4
Land #18171, Enable using modules when deferred loading is turned on
adfoster-r7
authored
93fb0dd
Remove reline dependency update
adfoster-r7
committed
5e70971
Land #18433, Remove reline dependency update
adfoster-r7
authored
f7635b1
Update documentation/modules/exploit/linux/http/kibana_upgrade_assistant_telemetry_rce.md
jheysel-r7
authored
fe9afc9
Land #18417, Add Kibana Upgrade Assistant RCE
jheysel-r7
committed
fb834b2
automatic module_metadata_base.json update
msjenkins-r7
committed
b32fe19
wiki spelling fixes
h00die
committed
1541341
artica not artical or article
h00die
committed
76f5582

Commits on Oct 9, 2023

Improve UX for databse management prompts
adfoster-r7
committed
0875cc8

Commits on Oct 10, 2023

Land #18435, wiki spelling fixes
adfoster-r7
authored
d427d64
Improve stability of msfdb initialization on windows environments
adfoster-r7
committed
7235573
Fix reverse ssh handler warnings on windows bootup
adfoster-r7
committed
0c40794
Use an exec-in-place gadget for Python
smcintyre-r7
committed
59da286
Make the add_equals_to_base64 function private
smcintyre-r7
committed
47b0c01
spelling fixes on docs
h00die
committed
557a15a
Raise a more specific error message
smcintyre-r7
committed
45be501
Land #18431, Fix how port forwards are listed
bwatters-r7
committed
6af8d3f

Commits on Oct 11, 2023

undo some spelling fixes when upstream has those issues
h00die
committed
7ffc1ca
Land #18444, spelling fixes on docs
adfoster-r7
authored
0e62f3c
Land #18411, Fix incorrect scope condition when populating RHOSTS using services command
adfoster-r7
authored
6c33bf9
Update metasploit-payloads gem to 2.0.156
zeroSteiner
committed
7f7f106
Update metasploit side for java metasploit-payloads fix

smashery
authored and
smcintyre-r7
committed
8743665
Land #18355, Fixes OpenJDK reflection issue.
jheysel-r7
committed
7f4a9c4
Merge pull request #25 from smcintyre-r7/pr/collab/18351
h00die
authored
862a793

Commits on Oct 12, 2023

Addresses PR feedback
cgranleese-r7
committed
3da17d2
Use upstream ruby-mysql in Remote::MYSQL
rorymckinley
committed
1b17276
Initial commit of CVE-2023-43654
zeroSteiner
committed
5a6dc7f
Randomize components in the MAR file
zeroSteiner
committed
7a226ba
Support URIPATH in Java::HTTP::ClassLoader
zeroSteiner
committed
f712c67
Add a check method and populate module metadata
zeroSteiner
committed
0799f9d
Add module docs and print some messages
zeroSteiner
committed
4f73437
Add additional classes for payload loading
zeroSteiner
committed
5577413
Only randomize the URI once
zeroSteiner
committed
de8e392
Address comments from the review
zeroSteiner
committed
86b7ec4
Land #18427, Add TorchServer SSRF + RCE module
jheysel-r7
committed
1719d55
automatic module_metadata_base.json update
msjenkins-r7
committed
01ce90a
Land #18296, update more mysql modules to support newer authentication methods
adfoster-r7
authored
80d2fa7
Fix mysql authbypass running out of sockets
adfoster-r7
committed
075fe09
automatic module_metadata_base.json update
msjenkins-r7
committed
2fca548
Land #18383, improves enum_computers module
jheysel-r7
committed
d31a485
Bump version of framework to 6.3.39
msjenkins-r7
committed
fb77feb
Land #18351, Apache Superset RCE (CVE-2023-37941)
smcintyre-r7
committed
05dd2e1
automatic module_metadata_base.json update
msjenkins-r7
committed
2163c51

Commits on Oct 13, 2023