Kerberos-trace - #1

Closed

eve0805 wants to merge 126 commits into

feature/kerberos-ticket-trace-as-tgs-ap-v1

Commits on Jan 20, 2026

feat: add support for short command execution in bind_netcat module
dledda-r7
committed
3477ec7

Commits on Jan 29, 2026

Update modules/payloads/singles/cmd/unix/bind_netcat.rb

dledda-r7
and
sjanusz-r7
authored
9459571

Commits on Feb 3, 2026

Allow toggling the SACL in queries
zeroSteiner
committed
5ae18d1
Add notes about the new option
zeroSteiner
committed
c8c7705

Commits on Feb 12, 2026

add x64 rc4 packer, sleep evasion routine and rc4 decrypter
litemars
committed
9610cdb

Commits on Feb 13, 2026

updating x64 rc4 packer to use Metasm
litemars
committed
bfbc408
changing jmp/call/pop instructions
litemars
committed
02d31df

Commits on Feb 18, 2026

add comment on support of memfd_create Kernel>3.17
litemars
committed
57b17a4

Commits on Feb 20, 2026

Update modules/evasion/linux/x64_rc4_packer.rb

litemars
and
msutovsky-r7
authored
b9b2537
updating the sleep evasion and the rc4_decrypter for x64
litemars
committed
cdd6679
add OptTimedelta datastore option and remove Kerberos-specific clock skew parsing
Nayeraneru
committed
ce2e23c

Commits on Feb 21, 2026

Feat: Add SPIP Saisies plugin RCE module (CVE-2025-71243)
Chocapikk
committed
a8f66a2
Fix: Update SPIP saisies doc with working lab setup
Chocapikk
committed
b904419
Fix: Update SPIP saisies doc with working lab setup
Chocapikk
committed
53652b3
Feat: Add LeakIX search module
Chocapikk
committed
692a79a
Fix: Resolve rubocop offenses in leakix_search module
Chocapikk
committed
a4d38cd
Fix: Remove non-existent LeakPy GitHub reference
Chocapikk
committed
d8d8449
Refactor: DRY print_table and empty_array helpers
Chocapikk
committed
20dd4af

Commits on Feb 23, 2026

Update Wordpress Mixin to log services

Nayeraneru
authored and
msutovsky-r7
committed
d069cba
Refactor WordPress service reporting

Nayeraneru
authored and
msutovsky-r7
committed
9aa58fc
Fix service name reporting for WordPress exploit

Nayeraneru
authored and
msutovsky-r7
committed
b227635

Commits on Feb 24, 2026

Update spec/lib/msf/core/exploit/http/wordpress/version_spec.rb

Nayeraneru
and
msutovsky-r7
authored
8fb5e4f
hashing adjustment
Nayeraneru
committed
e6452f5
Update modules/exploits/multi/http/spip_saisies_rce.rb

Chocapikk
and
jvoisin
authored
c905ec6
Fix: Address jvoisin's PR review feedback

Chocapikk
and
jvoisin
committed
ece296b

Commits on Feb 25, 2026

Commits on Feb 26, 2026

Running-Private-Modules.md: Remove duplicate cmds
g0tmi1k
committed
efe3ef8
Fix: Use validate method with OptionValidateError instead of validate_options!
Chocapikk
committed
5c4e5e4
Fix: Remove extra empty line in run method
Chocapikk
committed
2bc2a3e

Commits on Feb 27, 2026

Fix msfrpcd JSON-RPC SSL check incorrectly requiring msfdb init #21022
Aaditya1273
committed
2540a16
Fix httpcookie constructor to handle non string value
Hemang360
committed
a6eb33b
Fix cookie jar documentation examples and add test
Hemang360
committed
b250044
Fix reload_all failing with unknown command reload
SilentSobs
committed
22b63ae
moved rc4_packer to x64 sub-directory
litemars
committed
b6acc1f
changed description
litemars
committed
003ac7b
new line for linter
litemars
committed
c5c67fa

Commits on Mar 1, 2026

Remove type check

Hemang360
and
gardnerapp
authored
bfbc425

Commits on Mar 3, 2026

minor change for CI
Nayeraneru
committed
4b36301
Updates description
msutovsky-r7
committed
9c7264b

Commits on Mar 4, 2026

Refactor: Use option conditions for action-specific validation
Chocapikk
committed
6a97083
Fix: Revert action-specific options to non-required with manual validation
Chocapikk
committed
77df1f1
dhcp_server: Add DHCPINTERFACE
g0tmi1k
committed
2eb160a

Commits on Mar 5, 2026

Fix: Address msutovsky-r7 PR review feedback
Chocapikk
committed
4534a8a
Fix: Fallback check to Detected when plugin version unavailable
Chocapikk
committed
3d38e9b

Commits on Mar 6, 2026

Commits on Mar 7, 2026

Fix incompatible encoding error when command contains utf-8 characters
Hemang360
committed
f091439
Merge pull request #21070 from adfoster-r7/update-metasploit-data-models
adfoster-r7
authored
f9b47d4
Bump version of framework to 6.4.121
jenkins-metasploit
committed
ef79927

Commits on Mar 8, 2026

Revert "This adjusts module options that need a routable address"
adfoster-r7
authored
628275e
Merge pull request #21083 from rapid7/revert-20989-feat/lib/mod-address-opts
adfoster-r7
authored
2d908fe
automatic module_metadata_base.json update
jenkins-metasploit
committed
20473f4
Bump version of framework to 6.4.122
jenkins-metasploit
committed
5482e51

Commits on Mar 9, 2026

Land #21001, adds module for SPIP Saisies plugin (CVE-2025-71243)
msutovsky-r7
authored
c6aabc1
automatic module_metadata_base.json update
jenkins-metasploit
committed
4c87d1a
Merge pull request #21002 from Chocapikk/add-module-leakix-search
dledda-r7
authored
1af0a49
automatic module_metadata_base.json update
jenkins-metasploit
committed
9283a25
Merge pull request #20966 from litemars/add_Linux_evasion_module-rc4_packer_x64
dledda-r7
authored
b18611c
automatic module_metadata_base.json update
jenkins-metasploit
committed
fef03d3

Commits on Mar 10, 2026

Land #20961, adds service reporting to Wordpress mixin
msutovsky-r7
authored
e6ee6a7
fix: default option for base64 encoder
jbx81-1337
committed
e341db5
Land #21088, Fix base64 encoder
cdelafuente-r7
committed
437f738
automatic module_metadata_base.json update
jenkins-metasploit
committed
04ff6f8
Merge pull request #20885 from dledda-r7/feat/unix_bind_netcat_update
bwatters-r7
authored
5092b21
Switch to false by default
zeroSteiner
committed
7dcec2e
Revert "Land #21088, Fix base64 encoder"
adfoster-r7
committed
4f9b9d5
Revert "Land #20852, exposes encoder options for exploit and payloads"
adfoster-r7
committed
eba2c59
Merge pull request #21094 from adfoster-r7/revert-choose-encoder-updates
adfoster-r7
authored
50fe3a5
automatic module_metadata_base.json update
jenkins-metasploit
committed
777ce59
Bump version of framework to 6.4.123
jenkins-metasploit
committed
8ab51cf

Commits on Mar 11, 2026

Commits on Mar 12, 2026

OptString -> OptAddress
g0tmi1k
committed
b2f1e46
OptString -> OptAddressLocal
g0tmi1k
committed
3852276
OptAddress -> OptAddressLocal
g0tmi1k
committed
f7c4aac
autoroute.rb: OptAddress NETMASK - Drop CIDR

g0tmi1k
and
smcintyre-r7
committed
6a831a0
dhcp_server: Check to validate for _determine_server_comm
g0tmi1k
committed
33eb773
Merge pull request #20960 from g0tmi1k/dhcp_server
smcintyre-r7
authored
ccf5643
automatic module_metadata_base.json update
jenkins-metasploit
committed
019b857
Merge pull request #21020 from g0tmi1k/docs
smcintyre-r7
authored
7a7db96

Commits on Mar 13, 2026

Merge pull request #21081 from Hemang360/fix-utf8-encoding
adfoster-r7
authored
2bd9356
Merge pull request #21025 from Hemang360/cookie-jar-doc-fix
adfoster-r7
authored
c882d91
Merge pull request #21028 from SilentSobs/fix/reload-all-unknown-command
adfoster-r7
authored
efa1c8b
Merge pull request #21024 from Aaditya1273/fix-msfrpcd-json-rpc-ssl-check-21022
adfoster-r7
authored
fa75987
Merge pull request #21046 from msutovsky-r7/exploit/beyondtrust/updates_description
adfoster-r7
authored
510ec29
automatic module_metadata_base.json update
jenkins-metasploit
committed
ee3d2da
Land #20719, adds module for authenticated command injection in FreePBX filestore (CVE-2025-64328)
msutovsky-r7
authored
b3aa45f
automatic module_metadata_base.json update
jenkins-metasploit
committed
29d876e
Merge pull request #21074 from jeanmtr/pop3_login-doc
adfoster-r7
authored
fed897a
Fix: Lab setup documentation for first-time environments
Chocapikk
committed
8d44dcd
Fix: Use parent of fix commit (78178d1~1) for vulnerable Encoder checkout
Chocapikk
committed
8ad5924

Commits on Mar 16, 2026

Improve payload size generation script
adfoster-r7
committed
3768efb

Commits on Mar 17, 2026

Merge pull request #21124 from adfoster-r7/improve-payload-size-generation-script
adfoster-r7
authored
789b29d
automatic module_metadata_base.json update
jenkins-metasploit
committed
bf13628
Fix version check in ldap_esc_vulnerable_cert_finder
jheysel-r7
committed
d47a41c
Removed unnecessary code and module
Nayeraneru
committed
01d8879
Merge pull request #21139 from jheysel-r7/fix/ldap_esc_version_check
smcintyre-r7
authored
8b26a28
Merge pull request #20997 from Nayeraneru/OptTD
smcintyre-r7
authored
09bb033
automatic module_metadata_base.json update
jenkins-metasploit
committed
a1fa54e

Commits on Mar 18, 2026

Merge pull request #21076 from Chocapikk/avideo-encoder-getimage-cmd-injection
bwatters-r7
authored
5b5d1db
automatic module_metadata_base.json update
jenkins-metasploit
committed
b263ba7

Commits on Mar 19, 2026

Bump version of framework to 6.4.124
jenkins-metasploit
committed
e836223

Commits on May 15, 2026

Add KerberosTicketTrace support for AS/TGS/AP exchanges
eve0805
committed
ac46d36
Address review feedback for Kerberos ticket trace logging
eve0805
committed
52a37a4
Revert "Address review feedback for Kerberos ticket trace logging"
eve0805
committed
911b5a3
Improve Kerberos trace output consistency and spec
eve0805
committed
0c08640
Improve Kerberos readable trace formatting and spec
eve0805
committed
4a421a2
Improve Kerberos readable trace formatting and spec
eve0805
committed
d4c6871