master
Support encrypted LDAP (ldap signing) over Kerberos and NTLM
Fixes modules to now correctly use a hash with report note
add support for header fields in JWT encode
Fix bug where relay server failed to work if the attacker used the URIPATH
Update Java::HTTP::ClassLoader and CmdStager::HTTP
Add offline Kerberos ticket trace output
Update #run_builtin_ldap_query for connection reuse
Enable adding Users, not just computers (if permissions allow)
Add database ref opts for kerberos and pkcs12
HTTP to LDAP Relay Module and Supporting Libraries
Merge pull request #21430 from jheysel-r7/feat/ntlm_relay_2_self
Fix merge conflict from #14202, in linear history
#{rhost}:#{rport} -> #{Rex::Socket.to_authority(rhost, rport)}
Use zeitwerk for lib/msf/core folder
peer review
Add in SCHANNEL support, and update modules to fix a hang when using to_json instead of get_operation_result.
Improve vuln and vuln attempt tracking
Track run_uuid/job_id & fix issues
code spell for a bunch of modules
Rework browser profiles, get back to functional mode
Add CSR tracing to CertificateTrace for AD CS enrollment
Address Copilot review: record peer-cert dedup only after output
Fix db2 scanner module crashes
Add smb session type
Zeitwerk `rex` folder
ftp: Report if host is up but service doesn't match
Fix encoding issues in files
Add full cert chain display in CertificateTrace full mode (Phase 4)
Implement copilot feedback
chore: lint
Reapply "This adjusts module options that need a routable address"
Add and use a Log4Shell mixin
Map the GKDI endpoint as a workaround
Handle missing hresult values
Fixed names that were missed while refactoring
Follow MS-LSAD and MS-LSAT spec for LSARPC & LookupSids
Fix #21338: NoMethodError undefined method `domain_handle' for nil
Update lib/msf/core/exploit/remote/ms_wkst.rb
Align on UDPSocket#recvfrom
Rubocop: Resolve Rubocop Style/RedundantRegexpArgument violations
Bump rails to 7.2
Guard postgres peer cert call with respond_to? for plain TCP connections
Use `opts['RHOST']` and `opts['RPORT']` to creating the `SNMP::Manager` instance in `connect_snmp`
Added support to depecreted key exchange algorithms
Add NTLMRelay2Self LPE
Fix: Separate SSL and SRVSSL using datastore fallback for backwards compatibility
GNU Inetutils Telnet Auth Bypass
Add ruby 3.1 support
trade `URI.encode` & `URI.escape` for Ruby 3
added: Option to adjust kerberos clock (issue-> #20587) - Added KrbClockSkew advanced option and parser to offset Kerberos timestamps - Propagate skew through Kerberos client/authenticators (LDAP/SMB/HTTP/WinRM/MSSQL) and scanners - Updated docs for new option and extended kerberos client specs for clock skew handling - Clean up kerberos client error handling/style per rubocop
Refactor some X11 code around
Fix usage of `Failure::` constant