David Rude
|
d96ac36dac
|
vprint_status!
git-svn-id: file:///home/svn/framework3/trunk@13227 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 17:38:24 +00:00 |
Joshua Drake
|
486ca773e4
|
unpack the bytes so that we can do proper math on them
git-svn-id: file:///home/svn/framework3/trunk@13226 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 17:33:02 +00:00 |
David Rude
|
b877d3c639
|
Added memory_grep post module and updated the GetProcessHeaps definition in railgun
git-svn-id: file:///home/svn/framework3/trunk@13225 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 17:06:26 +00:00 |
Wei Chen
|
25c89c2e7a
|
Put the short jmp in there
git-svn-id: file:///home/svn/framework3/trunk@13224 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 15:07:00 +00:00 |
HD Moore
|
628f29c551
|
Correctly throw a not-supported error on older ruby
git-svn-id: file:///home/svn/framework3/trunk@13223 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 14:49:34 +00:00 |
James Lee
|
becf8d756c
|
standardize db_creds and db_exploited, hopefully keeping the same level of flexibility. see #4963
git-svn-id: file:///home/svn/framework3/trunk@13222 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 11:16:36 +00:00 |
James Lee
|
c39d75ceee
|
fix a typo that causes stack traces whan searching for 'app:client'
git-svn-id: file:///home/svn/framework3/trunk@13220 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 08:35:25 +00:00 |
James Lee
|
115a331e6b
|
remove db_add_{note,host}; replace them with options to db_{notes,hosts}, see #4963
git-svn-id: file:///home/svn/framework3/trunk@13219 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 08:13:55 +00:00 |
James Lee
|
7b7b9670d2
|
add -a to db_hosts to replace db_add_hots, see #4963
git-svn-id: file:///home/svn/framework3/trunk@13218 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 06:09:10 +00:00 |
HD Moore
|
ad53b4f115
|
A couple really minor tweaks to metasm samples and code
git-svn-id: file:///home/svn/framework3/trunk@13217 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 05:50:17 +00:00 |
Chao Mu
|
13b3fe841e
|
adds new mixin for enumerating windows profiles. fixes #4864 . Thank you David Maloney!
git-svn-id: file:///home/svn/framework3/trunk@13216 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 04:35:31 +00:00 |
James Lee
|
4188db3a6d
|
honor the Spawn option when creating a jar
git-svn-id: file:///home/svn/framework3/trunk@13215 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 02:54:38 +00:00 |
HD Moore
|
7dbb56b38b
|
No longer default a target for XP systems; some obscure builds of XP Embedded SP1 have a different offset and not good way to differentiate
git-svn-id: file:///home/svn/framework3/trunk@13214 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 01:40:26 +00:00 |
James Lee
|
3c261c346f
|
add support for java/meterpreter/reverse_http. assuming i didn't miss any files, fixes #4946, thanks mihi!
git-svn-id: file:///home/svn/framework3/trunk@13213 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-18 23:15:06 +00:00 |
Wei Chen
|
3ca9b51984
|
oops, a little mistake in the description
git-svn-id: file:///home/svn/framework3/trunk@13212 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-18 20:46:08 +00:00 |
Wei Chen
|
821e9dd68b
|
Updated metadata, merged code with #4923. Thx Joff.
git-svn-id: file:///home/svn/framework3/trunk@13211 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-18 20:39:27 +00:00 |
Jonathan Cran
|
9b72b12050
|
filtering on command line strings should be a bit heavier
git-svn-id: file:///home/svn/framework3/trunk@13210 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-18 20:26:26 +00:00 |
Jonathan Cran
|
8f82a29638
|
allow a '!' in the filter
git-svn-id: file:///home/svn/framework3/trunk@13209 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-18 20:17:28 +00:00 |
HD Moore
|
764bb36f44
|
Wait a little longer for a session (5 seconds)
git-svn-id: file:///home/svn/framework3/trunk@13208 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-18 16:05:51 +00:00 |
HD Moore
|
f683a2d26f
|
Note that IE doesnt support inline base64 (thanks resetter)
git-svn-id: file:///home/svn/framework3/trunk@13207 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-18 15:38:47 +00:00 |
HD Moore
|
8887fe86b8
|
Either the offset or the env page moves around for this exploit on some non-english systems, do not default the target for 2003 SP0
git-svn-id: file:///home/svn/framework3/trunk@13206 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-18 14:59:55 +00:00 |
HD Moore
|
2ea46552ad
|
Apply a fix that was already in reverse_https
git-svn-id: file:///home/svn/framework3/trunk@13205 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-18 14:17:19 +00:00 |
Wei Chen
|
d13654740a
|
Update some jboss modules' metadata associated with CVE-2010-0738
git-svn-id: file:///home/svn/framework3/trunk@13204 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-18 05:18:25 +00:00 |
Joshua Drake
|
efd7a94bd0
|
comment out class puts (assuming it was for debugging only)
git-svn-id: file:///home/svn/framework3/trunk@13203 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-18 03:26:12 +00:00 |
HD Moore
|
16840ebfa5
|
Add profiles table
git-svn-id: file:///home/svn/framework3/trunk@13202 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-17 21:39:21 +00:00 |
Chao Mu
|
d23a5f6092
|
"The GetFileSecurityA and GetFileSecurityW functions have a "RequestedInformation" that is defined as a PBLOB and should be a DWORD." - Keith Faber. Thank you Keith! see #4364
git-svn-id: file:///home/svn/framework3/trunk@13201 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-17 17:48:09 +00:00 |
HD Moore
|
cccbdf9fab
|
This patch allows meterpreter to work with file paths and user names that are not of the US-ASCII character set.
git-svn-id: file:///home/svn/framework3/trunk@13200 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-17 17:32:52 +00:00 |
Chao Mu
|
1e1d7c534d
|
"This is the first update to the Railgun Advapi32.dll Definitions. It adds some of the Windows CryptoAPI function calls." - David Maloney. see #4746
git-svn-id: file:///home/svn/framework3/trunk@13199 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-17 17:17:48 +00:00 |
Chao Mu
|
572a5a5b8b
|
Added method "functions" to DLLWrapper that grabs the DLL's "functions" so that people can continue to test for function existence via .functions['blah'], evne though I hate this, I want to be backwards compatible. This will be deprecated eventually
git-svn-id: file:///home/svn/framework3/trunk@13198 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-17 15:15:26 +00:00 |
Wei Chen
|
2eeffc39fc
|
Add Iconics GENESIS32 GenBroker exploit by lincoln and corelanc0d3r
git-svn-id: file:///home/svn/framework3/trunk@13197 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-17 15:01:46 +00:00 |
Carlos Perez
|
f3b404b971
|
Misspelled variable
git-svn-id: file:///home/svn/framework3/trunk@13196 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-17 14:30:06 +00:00 |
HD Moore
|
1bb9470e59
|
Adds the ability to set the cookies, authentication, and arbitrary headers
git-svn-id: file:///home/svn/framework3/trunk@13195 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-16 13:29:28 +00:00 |
Wei Chen
|
681563adc9
|
Fix that extra tab in the description
git-svn-id: file:///home/svn/framework3/trunk@13194 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-16 05:21:20 +00:00 |
Wei Chen
|
2e93ba06ba
|
Add HP NNM ToolBar.exe exploit aganist the OvOSLocale cookie parameter
git-svn-id: file:///home/svn/framework3/trunk@13193 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-16 05:14:33 +00:00 |
Wei Chen
|
86b40e894b
|
Make room for another exploit against ToolBar.exe
git-svn-id: file:///home/svn/framework3/trunk@13192 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-16 04:45:21 +00:00 |
James Lee
|
642cddf620
|
fix startup-time plugin loading when there is a space in the path.
git-svn-id: file:///home/svn/framework3/trunk@13189 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-15 23:46:37 +00:00 |
James Lee
|
bd07523c35
|
send the fuzz case instead of a constant value. fixes #4939, thanks Silent Dream for the patch
git-svn-id: file:///home/svn/framework3/trunk@13188 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-15 23:09:33 +00:00 |
James Lee
|
0d585ffb4c
|
add the source files for RMILoader and RMIPayload. fixes #4738, which has nothing to do with #4378 that i dyslexified in r13185
git-svn-id: file:///home/svn/framework3/trunk@13187 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-15 22:28:40 +00:00 |
James Lee
|
857cfc88b0
|
keywords
git-svn-id: file:///home/svn/framework3/trunk@13186 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-15 20:44:08 +00:00 |
James Lee
|
1d25a6d7d1
|
add an exploit for java's rmid and rmiregistry code-execution-by-design and supporting source. fixes #4378, thanks mihi!
git-svn-id: file:///home/svn/framework3/trunk@13185 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-15 20:42:31 +00:00 |
Matt Weeks
|
1162aafa1e
|
p function causes problems with rpc.
git-svn-id: file:///home/svn/framework3/trunk@13184 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-15 18:45:05 +00:00 |
James Lee
|
c412a836ed
|
add VERBOSE option to all modules and vprint_* methods to use it
git-svn-id: file:///home/svn/framework3/trunk@13183 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-15 15:33:35 +00:00 |
HD Moore
|
483abeab72
|
Change this to query the class name of the input
git-svn-id: file:///home/svn/framework3/trunk@13182 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-15 04:22:32 +00:00 |
Chao Mu
|
59015b2cbf
|
Closes Redmine issue 3073 (Railgun DLL cache/definition loader needs a rewrite). Major overhaul of how railgun handles DLLs and requests to them. def_*.rb files are now formed differently, this may break your code if you made changes to railgun/def/def_* or railgun.rb, see http://blog.minorcrash.com/2011/07/new-way-to-add-dlls-to-railgun.html
git-svn-id: file:///home/svn/framework3/trunk@13181 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-15 00:18:01 +00:00 |
Matt Weeks
|
b1afbfeb96
|
Fix rpc error with console detect code.
Un-breaks rpc/msfgui/armitage.
Reference r13160 r13161 r13179
git-svn-id: file:///home/svn/framework3/trunk@13180 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-14 22:45:20 +00:00 |
James Lee
|
bc77523a01
|
revert r13161, hopefully unbreaking msfgui and armitage
git-svn-id: file:///home/svn/framework3/trunk@13179 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-14 22:01:28 +00:00 |
James Lee
|
c64efb676b
|
don't raise RequestErrors that kill a whole module when we can't open a file
git-svn-id: file:///home/svn/framework3/trunk@13178 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-14 21:59:35 +00:00 |
James Lee
|
f8a307f873
|
use append mode for stderr when creating processes with proc_open in windows, see http://us2.php.net/manual/en/function.proc-open.php#97012 . also, if windows doesn't give us a valid path to cmd.exe from the COMSPEC env var, just use cmd.exe and hope it's in the path
git-svn-id: file:///home/svn/framework3/trunk@13176 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-14 20:34:05 +00:00 |
James Lee
|
6c8bde17b0
|
works for meterpreter, too (tested with java)
git-svn-id: file:///home/svn/framework3/trunk@13175 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-14 20:29:19 +00:00 |
James Lee
|
39c20b2935
|
cosmetic
git-svn-id: file:///home/svn/framework3/trunk@13174 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-14 20:27:25 +00:00 |