485 Commits

Author SHA1 Message Date
OscarAkaElvis 4d10c6efe3 Update GitHub Actions and workflow security settings 2026-06-02 17:22:52 +02:00
OscarAkaElvis 0d9f34b3a1 Refactor var name and add to CHANGELOG.md regarding merged PR 2026-06-01 23:35:28 +02:00
Óscar Alfonso Díaz 6ecd570a29 Merge pull request #81 from TristanInSec/fix/download-path-traversal
Fix path traversal in download_dir via server-controlled filenames
2026-06-01 23:32:45 +02:00
TristanInSec b3bf74b6d2 Fix path traversal in download_dir via server-controlled filenames
download_dir() uses filenames from Get-ChildItem stdout directly in
File.join() to construct local paths. A rogue server can return names
containing ../ sequences, writing files outside the download directory.

Use File.basename() on server-supplied filenames for the local path to
strip directory components while preserving the original name for the
remote download path.
2026-05-26 09:23:40 -04:00
Óscar Alfonso Díaz 152f408500 Merge pull request #80 from noraj/readline
ruby 4.0 support, add readline gem dependency
2026-03-10 11:16:16 +01:00
noraj 439acabecc add missing readline-ext 2026-03-03 22:12:19 +01:00
Alexandre ZANNI b020567f93 gem install without doc 2026-02-27 01:04:43 +01:00
Alexandre ZANNI 7de5241c05 try no manual path, relying on auto 2026-02-27 00:53:53 +01:00
Alexandre ZANNI 1710a4e9b8 reverte build deps & update gems 2026-02-27 00:52:19 +01:00
Alexandre ZANNI 4ab2ec683e try with complete build deps 2026-02-27 00:07:39 +01:00
Alexandre ZANNI 12f1075be4 document changes for 4.1 2026-02-26 23:31:51 +01:00
Alexandre ZANNI c2a66e6e13 ruby 4.0 support 2026-02-26 23:31:30 +01:00
Óscar Alfonso Díaz 2d9447142d Merge pull request #78 from JoeyShapiro/dev
flush output of stdout
2026-02-20 19:21:05 +01:00
OscarAkaElvis 1aa1f12022 Add credits in README.md 2026-02-19 18:22:38 +01:00
Joseph Shapiro 7fe5fd9770 flush output of stdout 2026-01-23 21:28:06 -06:00
OscarAkaElvis 0ab00fc99b Update CHANGELOG.md 2026-01-09 11:49:56 +01:00
OscarAkaElvis ca2a85a839 Prepare version numbers for v4.1 2026-01-09 11:49:28 +01:00
Óscar Alfonso Díaz de40531bfb Merge pull request #76 from noraj/patch-1
accept bundler 4.x
2026-01-09 11:45:32 +01:00
Alexandre ZANNI 555e4634b2 accept bundler 4.x 2026-01-08 16:10:47 +01:00
OscarAkaElvis 6473f57b2e Update gemspec to 3.9 2025-12-07 16:32:54 +01:00
OscarAkaElvis 84a543cb87 Update gemspec to 3.9 v3.9 2025-12-07 16:31:50 +01:00
Óscar Alfonso Díaz 6f367c96dc Merge pull request #75 from Hackplayers/dev
Dev to master v3.9
2025-12-07 16:30:54 +01:00
OscarAkaElvis 4db760aadf Quick fix of a broken dependency for Ruby gem (syslog). Update to v3.9 2025-12-07 16:22:48 +01:00
Óscar Alfonso Díaz 2f840ad631 Merge pull request #74 from Hackplayers/dev
Dev to master v3.8
v3.8
2025-12-07 13:39:01 +01:00
OscarAkaElvis a02c2e711f Fix missing param in docs (README.md) 2025-12-06 13:18:46 +01:00
OscarAkaElvis 73669fcb76 Update docs (README.md) 2025-12-06 13:05:39 +01:00
OscarAkaElvis 0790eeed6f Reorder commands in menu 2025-12-06 13:04:59 +01:00
cybervaca 5db78dd01c Add controlled error message for expired Kerberos tickets 2025-12-06 13:00:10 +01:00
OscarAkaElvis 7f336098cd Fix order of the messages shown in the screen to show always header (version number) first 2025-12-06 12:31:08 +01:00
OscarAkaElvis 4f8c2e21b2 Update success messages 2025-12-06 12:24:34 +01:00
cybervaca 87ee6e62a9 Add *.kirbi and *.ccache files to .gitignore 2025-12-06 12:17:47 +01:00
cybervaca 46b0277ec0 Add support for Kerberos ticket files with -K parameter, including automatic format detection and conversion, reverse DNS lookup for FQDN, and enhanced error handling for connection issues. 2025-12-06 12:15:53 +01:00
cybervaca 26badabb0d Add persistent command history per user/host (stored in ~/.evil-winrm/history/) 2025-12-06 10:49:50 +01:00
cybervaca 9555daabb5 Fix autocomplete logic for upload/download commands and improve relative path handling with file validation 2025-12-06 10:23:32 +01:00
cybervaca 75558b5c50 Add clear/cls commands and Ctrl+L support for clearing screen 2025-12-06 10:14:41 +01:00
OscarAkaElvis 88285fef5d Update CHANGELOG.md 2025-09-26 09:20:20 +02:00
OscarAkaElvis c5403ed75d Remove comment 2025-09-26 09:19:25 +02:00
Óscar Alfonso Díaz 69f1c862c3 Merge pull request #70 from birk0/feature/ssl-kerberos-support
Support Kerberos authentication over SSL
2025-09-26 09:18:38 +02:00
birk0 42421cd828 Support Kerberos authentication over SSL 2025-09-26 12:45:14 +10:00
OscarAkaElvis d5631a1daa Update CHANGELOG.md 2025-09-06 12:55:44 +02:00
Óscar Alfonso Díaz e22ea42020 Merge pull request #69 from noraj/patch-1
add missing dependencies
2025-09-06 12:53:52 +02:00
Alexandre ZANNI b144694e67 reflect gemspec dependencies to docker 2025-09-05 20:51:36 +02:00
Alexandre ZANNI da21200046 add version requirements 2025-09-05 20:49:39 +02:00
Alexandre ZANNI 27e9e48d03 add missing dependencies
several previously standard libraries are no longer part of the default gems starting from Ruby 3.4 or 3.5, so they should be required to ensure compatibility with newer Ruby versions
2025-09-04 13:32:30 +02:00
OscarAkaElvis c22b7c287f Update CHANGELOG.md 2024-12-02 09:52:25 +01:00
Óscar Alfonso Díaz d734ccbde3 Merge pull request #68 from ArchiMoebius/dev
fix(kerberos): need krb5-libs to auth w/ gssapi
2024-12-02 09:46:37 +01:00
ArchiMoebius e75f1e0616 fix(kerberos): need krb5-libs to auth w/ gssapi 2024-12-01 15:12:00 -05:00
OscarAkaElvis 1f5352cabc Add trailing slash in docker badge link to standardize 2024-10-28 15:44:17 +01:00
OscarAkaElvis aba2ace9bd Update ruby gem badge 2024-10-28 15:41:19 +01:00
OscarAkaElvis 185ee0b4b6 Modify .editorconfig file to add indentation definition for gemspec file 2024-10-28 13:45:32 +01:00