60299c2adb
Add EDB-25305 - That ColdFusion 10 sub0 0day stuff
...
This is just an aux module that extract passwords from
password.properties. Yes, this can leverage a shell too, but
obviously that's best implemented in #1737 , or as a new exploit.
We'll see.
2013-05-12 21:23:53 -05:00
63b0eace32
Add a missing require
2013-05-04 22:39:57 -05:00
4227c23133
Add a reference for Safari module
2013-04-29 14:07:55 -05:00
431cba8f36
Update print_status labels.
2013-04-29 11:13:53 -05:00
c2a1d296a2
Rename DOWNLOAD_URI -> DOWNLOAD_PATH.
...
Conflicts:
modules/auxiliary/gather/apple_safari_webarchive_uxss.rb
2013-04-29 11:11:06 -05:00
55e0ec3187
Add support for DOWNLOAD_URI option.
...
* Fixes some comments that were no longer accurate.
Conflicts:
modules/auxiliary/gather/apple_safari_webarchive_uxss.rb
2013-04-29 11:10:19 -05:00
c27245e092
Touch descriptions for module and options
2013-04-26 13:05:16 -05:00
b4606ba60a
Remove unnecessary puts call.
2013-04-26 12:55:02 -05:00
ca6d6fbc84
msftidy for whitespace
2013-04-26 12:44:11 -05:00
16769a9260
Fixing path normalization
2013-04-26 12:40:24 -05:00
2fa16f4d36
Rewrite relative script URLs to be absolute.
...
* Adds rescue clauses around URI parsing/pulling
* Actually use the URI_PATH datastore option.
2013-04-26 11:25:20 -05:00
993356c73e
Add safari webarchive uxss to framework as an aux module.
2013-04-25 11:14:16 -05:00
e377e30873
unscrewing syntax error
2013-03-20 15:04:31 -05:00
fd20eba35e
Expanding the title and desc for external_ip
...
Also allowing the capitalization on "via" to be small.
2013-03-20 14:42:12 -05:00
2684e6103c
use of send_request_cgi
2013-03-11 20:36:47 +01:00
9c89599737
cleanup before merge external_ip
2013-03-11 20:35:25 +01:00
546e24a9c6
Merge branch 'external_ip_discovery' of https://github.com/sempervictus/metasploit-framework into sempervictus-external_ip_discovery
2013-03-11 20:35:07 +01:00
2160718250
Fix file header comment
...
[See #1555 ]
2013-03-07 17:53:19 -06:00
25f3f935c4
Apply Egypt's cleanup
...
Remove revision, raise the exception itself, remove scanner mixin,
datastore['RHOST'] unstead of RHOSTS, and useles agent var removed.
2013-03-07 18:34:12 -05:00
dfe3a4f394
msftidy and module placement per todb
2013-03-06 17:36:01 -05:00
4212c36566
Fix up basic auth madness
2013-03-01 11:59:02 -06:00
c290bc565e
Merge branch 'master' into feature/http/authv2
2013-02-28 14:33:44 -06:00
cae1939914
Kinda too long
2013-02-25 13:44:11 -06:00
2c0a916c83
Made the password optional
2013-02-23 17:14:30 -05:00
b221711ecd
Added basic error handling
2013-02-23 10:24:04 -05:00
67c2c3da20
Code Review Feedback
...
Fixed the USER/PASS that I missed in last review
Converted from Scanner module to Gather
2013-02-23 10:09:23 -05:00
0ae489b37b
last of revert-merge snaffu
2013-02-19 23:16:46 -06:00
829cf0f076
name changed to dns_srv_enum
2013-02-15 16:20:55 +01:00
d1ba860409
changing filename for dns_srv
2013-02-15 16:20:33 +01:00
374faf9b02
cleanup for dns_srv
2013-02-15 16:19:48 +01:00
9d4bd763a6
Merge branch 'darkoperator-dnsenum2dnssrv' of https://github.com/darkoperator/metasploit-framework into darkoperator-darkoperator-dnsenum2dnssrv
2013-02-15 16:19:31 +01:00
38f5fbced3
cleanup for dns_reverse_lookup
2013-02-15 12:56:01 +01:00
f1e3dab45f
Merge branch 'darkoperator-dnsenum2dnsreverselookup' of https://github.com/darkoperator/metasploit-framework into darkoperator-darkoperator-dnsenum2dnsreverselookup
2013-02-15 12:55:39 +01:00
6aed858f80
cleanup for dns_bruteforce
2013-02-15 12:37:46 +01:00
1be003a4d0
Merge branch 'darkoperator-dnsenum2dnsbruteforce' of https://github.com/darkoperator/metasploit-framework into darkoperator-darkoperator-dnsenum2dnsbruteforce
2013-02-15 12:37:27 +01:00
57e1d1baa5
cleanup for dns_info
2013-02-15 12:03:08 +01:00
bcd59aa8fa
Typo word module does not go in the name.
2013-02-14 21:56:24 -04:00
1d64de6c11
Typo word module does not go in the name.
2013-02-14 21:55:38 -04:00
7f7b4e5a97
more changes to description and name
2013-02-14 21:49:57 -04:00
faf970cf1f
more changes to description and name
2013-02-14 21:47:43 -04:00
1b8610042a
more changes to description and name
2013-02-14 21:46:21 -04:00
0b9d4d976f
more changes to description and name
2013-02-14 21:44:31 -04:00
23320a5dde
Fix spelling problems
2013-02-14 15:48:11 -04:00
a7d4f5ff4a
Fix spelling problems
2013-02-14 15:46:36 -04:00
7f97ff271f
Fix spelling problems
2013-02-14 15:44:32 -04:00
1872b137f5
Fix spelling problems
2013-02-14 15:41:17 -04:00
e8ccfae048
Fix spelling problems
2013-02-14 15:38:17 -04:00
6c85e5242e
change wildcard message to print_warning
2013-02-11 12:04:30 -04:00
431641fec9
added check for retry options
2013-02-11 12:02:15 -04:00
fd6f00f641
added report note for wildcard
2013-02-11 11:37:20 -04:00
5f10704697
applied fixes
2013-02-11 11:31:13 -04:00
55efe01bf7
Applied fixes
2013-02-11 11:23:06 -04:00
fd15436a96
Added new line to end of file.
2013-02-08 20:52:49 -04:00
78f81843f6
Added new line to end of file.
2013-02-08 20:51:37 -04:00
eda3fc0715
Added new line to end of file.
2013-02-08 20:50:23 -04:00
166b59b61a
Added new line to end of file.
2013-02-08 20:48:57 -04:00
ac8194ed07
Split of DNS SRV Record Enumeration from enum_dns
2013-02-08 10:09:34 -04:00
256ab7f737
Split of DNS Reverse Lookup from enum_dns
2013-02-08 09:50:21 -04:00
906585798d
Split of DNS General Info from enum_dns
2013-02-08 09:49:19 -04:00
2186db5295
Split of DNS Name Brutforce from enum_dns
2013-02-08 09:48:32 -04:00
39cdb89831
Oh don't be so sensitive about it.
...
Fixnum vs String
2013-01-31 15:04:13 -06:00
c174e6a208
Correctly use normalize_uri()
...
normalize_uri() should be used when you're joining URIs. Because if
you're merging URIs after it's normalized, you could get double
slashes again.
2013-01-30 23:23:41 -06:00
690ef85ac1
Fix trailing slash problem
...
These modules require the target URI to be a directory path. So
if you remove the trailing slash, the web server might return a
301 or 404 instead of 200.
Related to: [SeeRM: #7727 ]
2013-01-28 13:19:31 -06:00
702638a6a3
final cleanup
2013-01-14 17:36:24 +01:00
b11fd48b05
implemented juans feedback
2013-01-14 17:06:52 +01:00
8b85f7d977
fix msftidy
2013-01-14 14:55:53 +01:00
0acbcfd964
fix url path
2013-01-14 14:39:50 +01:00
c17ee70e66
Use target_uri for the wordpress url
2013-01-14 14:34:34 +01:00
0c95938b1d
Added a request to force db caching
2013-01-13 20:12:37 +01:00
27f100d37c
fix email
2013-01-12 14:24:29 +01:00
d36c966931
spaces
2013-01-12 14:22:38 +01:00
93b5980210
fix
2013-01-12 14:13:54 +01:00
0b8094eb5d
w3_total_cache
2013-01-12 14:09:59 +01:00
ef6eec949c
Move impersonate_ssl
...
To 'gather', because it grabs stuff, not scans.
2013-01-11 17:22:27 -06:00
e4a6669927
msftidy: remove $Revision$
2013-01-03 01:05:45 +01:00
95948b9d7c
msftidy: remove $Revision$
2013-01-03 00:58:09 +01:00
ca890369b1
msftidy: remove $Id$
2013-01-03 00:54:48 +01:00
b0e4931de8
When 'credentials' is empty, it is empty.......
2012-11-29 10:22:20 -06:00
b3a473aec0
Forgot to remove this option
2012-11-28 18:48:33 -06:00
0415d31c61
Update description
2012-11-28 16:07:21 -06:00
52c2437d5a
Add OSVDB-83199 as a cred collecting aux module
...
From #1102
2012-11-28 15:56:13 -06:00
e9f7873afc
Version cleanup
...
Remove all values that are neither 0 nor $Revision$.
2012-10-22 20:57:02 +02:00
8fce975593
Aux module raise an error because Report module is not included in the source
2012-09-05 10:38:36 +02:00
c7de73e7bf
Clean up SVN metadata
2012-09-04 19:36:10 -05:00
7b8ab53661
Use :unique_data option for dns.enum reporting
...
Otherwise, you will only report the last thing that comes through on
that host for the dns.enum note type.
2012-09-04 19:32:29 -05:00
6db09ba20c
Key notes on nameserver IP, not discovered IP
2012-08-16 21:31:23 -05:00
7005216d1f
Fix axfr support for auxiliary/gather/enum_dns
...
AXFR support in net-dns is broken. This fixes it, and makes the
requisite modifications to enum_dns module. Basic problem is that AXFR
responses consist of a chain of DNS replies, not a single reply with
multiple answers. Previously, only the first of these replies, the SOA
record, was returned. Also added some exception handling to avoid
problems like #483 .
2012-08-16 20:40:24 -05:00
0311caf4df
Alternate means of looking up NS IP
...
Sometimes a nameserver won't have an A record for its own name. Check
for this and fall back to using the system resolver via
Rex::Socket.gethostbyname. Example:
$ dig +short zonetransfer.me NS
ns12.zoneedit.com.
ns16.zoneedit.com.
$ dig +short @ns12.zoneedit.com ns12.zoneedit.com A
$ dig +short @ns16.zoneedit.com ns12.zoneedit.com A
$ dig +short @ns16.zoneedit.com ns16.zoneedit.com A
$
Also removed an extra A lookup that was unnecessary.
2012-08-16 11:48:37 -05:00
c0bf362084
Fix the fix for enum_dns
2012-06-18 18:37:56 -05:00
c68476cce2
Add DNS/TCP to enum_dns
2012-06-18 10:47:03 -04:00
7bb3679fef
Errors are different from mere failures (enum_dns)
...
This makes a clear distinction between errors and failures when
performing zone transfers, and logs accordingly.
[See #483 ]
2012-06-15 18:11:25 -05:00
5a49ac50f1
Shorten option description on enum_dns
2012-06-15 10:33:49 -05:00
3f0431cf51
Massive whitespace destruction
...
Remove whitespace found at the end of the line
2012-06-06 00:36:17 -05:00
c30af98b53
Massive whitespace destruction
...
Remove all the lines that have nothing but whitespace
2012-06-06 00:22:36 -05:00
0fcc53b0a2
Handle nil for get_once
2012-06-04 15:31:10 -05:00
babababeb1
1. Fix enum_dns: .txt is not (or no longer a method)
...
2. Patch snmp_enum: bug #6500
2012-05-04 13:23:27 -05:00
cc76438a75
Merge branch 'jlee-r7-http-print-standardization'
2012-04-25 15:38:46 -05:00
f77efbf89e
Change the rest of print_*
2012-04-25 14:24:17 -05:00
b955569b10
Update the use of get2() in order to support ruby 1.9.3
2012-04-20 01:37:24 -05:00
7f0fb84743
Fix up desc again on enum_dns
2012-03-28 14:33:23 -06:00
sinn3r
HD Moore
Tod Beardsley
Joe Vennix
Tod Beardsley
jvazquez-r7
James Lee
RageLtMan
David Maloney
sinn3r
Matt Andreko
Carlos Perez
Christian Mehlmauer
Michael Schierl
Cristiano Maruti
Daniel Miller