Commit Graph

4148 Commits (08d50e0a5b374686211eb946318361d6666046f4)

Author SHA1 Message Date
HD Moore 465af50f1e Allow option overrides for the callers of open_pcap
git-svn-id: file:///home/svn/framework3/trunk@6855 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 17:48:10 +00:00
HD Moore e70ac6cc19 Added a new set of match flags for cmd injection exploits (RequiredCmds). This reduces the number of 'bad' payloads listed for explot modules. A good example is disabling the netcat -e payloads for old Solaris exploits
git-svn-id: file:///home/svn/framework3/trunk@6854 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 15:20:35 +00:00
pusscat 4fd458a309 Update some identBuf documentation
git-svn-id: file:///home/svn/framework3/trunk@6853 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 14:54:34 +00:00
HD Moore 47ebd62092 Adds coverage for the DD-WRT web interface command execution flaw, adds two netcat -e payloads to work with it
git-svn-id: file:///home/svn/framework3/trunk@6852 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 12:56:42 +00:00
HD Moore 8ad948c127 Demonstrate how to send raw ethernet frames
git-svn-id: file:///home/svn/framework3/trunk@6851 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 10:54:24 +00:00
Mario Ceballos 4691f2b0e5 added exploit module netidentity_xtierrpcpipe.rb
git-svn-id: file:///home/svn/framework3/trunk@6850 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 01:04:48 +00:00
HD Moore b3e36e5692 Reduce the size of the generated executables (works better with sqlmap and other tools that need small exes). Payloads are now capped at 2048 and the amount of random data appended to the exe has been reduced.
git-svn-id: file:///home/svn/framework3/trunk@6849 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-20 13:55:29 +00:00
HD Moore 17d6de4247 Adds a reverse_tcp for metsvc
git-svn-id: file:///home/svn/framework3/trunk@6848 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 20:51:58 +00:00
James Lee 529ded22ae reverting last commit; somebody didn't cross their fingers
git-svn-id: file:///home/svn/framework3/trunk@6847 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 20:48:47 +00:00
James Lee c3dc1ecb55 reintegrate browser_autopwn into trunk; cross your fingers and hope this works
git-svn-id: file:///home/svn/framework3/trunk@6846 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 17:27:36 +00:00
HD Moore e7eb7235a7 Fixes #298. Thanks Shiyee!
git-svn-id: file:///home/svn/framework3/trunk@6845 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 16:07:59 +00:00
HD Moore a6a8c04d2b Continue loading even if pcaprub is not available
git-svn-id: file:///home/svn/framework3/trunk@6844 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 13:14:52 +00:00
James Lee 0044635e3b remove a temp commit leftover
git-svn-id: file:///home/svn/framework3/trunk@6834 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-18 20:59:10 +00:00
HD Moore 309acbaa22 Remove extraneous comma
git-svn-id: file:///home/svn/framework3/trunk@6833 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-18 00:27:15 +00:00
HD Moore 282bcb4fae Updated with osvdb and bid references.
git-svn-id: file:///home/svn/framework3/trunk@6832 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-18 00:15:48 +00:00
HD Moore 0d931953cf The sniffer module is now compiled against the dnet headers for packet decodes
git-svn-id: file:///home/svn/framework3/trunk@6831 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-18 00:10:10 +00:00
HD Moore 2d319e9b5b Updated to work better on OS X and avoid 'script is taking too long' errors on all platforms
git-svn-id: file:///home/svn/framework3/trunk@6830 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 23:57:59 +00:00
HD Moore 8d43d11798 Simple Raw wrapper for strings as a L5 object in Racket
git-svn-id: file:///home/svn/framework3/trunk@6829 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 23:14:25 +00:00
HD Moore 99bc63b11d Adds support for Mac OS X intel (use the vforkshell payloads)
git-svn-id: file:///home/svn/framework3/trunk@6828 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 21:28:59 +00:00
HD Moore d57bdecb1d Remove the last stubbly bit of scruby
git-svn-id: file:///home/svn/framework3/trunk@6827 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:51:39 +00:00
HD Moore 5e07f7535f Note that Scruby is no longer in the framework
git-svn-id: file:///home/svn/framework3/trunk@6826 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:43:27 +00:00
HD Moore 3ca75cb19e Removing the old scruby library
git-svn-id: file:///home/svn/framework3/trunk@6825 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:43:01 +00:00
HD Moore be6bb23b5e Psnuffle modules
git-svn-id: file:///home/svn/framework3/trunk@6824 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:39:06 +00:00
HD Moore 7dcc3e5e47 Overhaul of all modules to use racket instead of scruby/packetfu
git-svn-id: file:///home/svn/framework3/trunk@6823 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:36:40 +00:00
HD Moore 5577fac39e Closes #297. Switches to the dnet headers for the sniffer packet decodes
git-svn-id: file:///home/svn/framework3/trunk@6822 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 19:39:31 +00:00
HD Moore ed05516b9f Force the Racket library to live under the Racket:: namespace, fixes a bug where tcp.payload was overwritten during fix!()
git-svn-id: file:///home/svn/framework3/trunk@6821 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 18:12:18 +00:00
HD Moore 9db072b2e4 cleans up the pcaprub code a little bit during packet receives
git-svn-id: file:///home/svn/framework3/trunk@6820 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 16:14:07 +00:00
Mario Ceballos 3d3ea9788c added auxiliary module login_brute.rb and oracle_default_passwords.csv.
git-svn-id: file:///home/svn/framework3/trunk@6819 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 14:20:22 +00:00
Mario Ceballos c66e25978d remove duplicate sid.
git-svn-id: file:///home/svn/framework3/trunk@6818 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 13:41:56 +00:00
HD Moore 25f1043d63 Updated listing of licenses, urls, etc
git-svn-id: file:///home/svn/framework3/trunk@6817 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 04:33:00 +00:00
HD Moore 6ec4811bd0 Adds the bit-struct library to the source tree. Required by Racket
git-svn-id: file:///home/svn/framework3/trunk@6816 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 04:32:33 +00:00
HD Moore 9f88ed05e7 Adds the Racket library to the source tree. This library has been modified to change the require() statements so that all files are located under the 'racket' base directory.
git-svn-id: file:///home/svn/framework3/trunk@6815 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 04:29:41 +00:00
HD Moore 697d89c8cf Wait on the pcap file handle to reduce cpu consumption during sniffing
git-svn-id: file:///home/svn/framework3/trunk@6814 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 02:24:21 +00:00
HD Moore 5e0213c662 Allow the Capture mixin to handle a pcap file instead (thanks Max!)
git-svn-id: file:///home/svn/framework3/trunk@6813 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 22:08:31 +00:00
HD Moore f8c2a203fd OSVDB references updates from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@6812 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 16:02:24 +00:00
HD Moore 2c4acca92a Fixes #296. Removes polarssl references
git-svn-id: file:///home/svn/framework3/trunk@6811 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 16:00:29 +00:00
HD Moore 54973cf93b Fix the 500 error message to include a \r\n
git-svn-id: file:///home/svn/framework3/trunk@6810 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 05:20:39 +00:00
kris 8d6e48bc0b Revamp the THREADS handling for aux run_host() and run_batch(). THREADS is
supposed to be the number of concurrent threads; however, what's been happening
is just the firing off of THREADS threads and then simply waiting for them all
to finish before doing another round.

Now it tries to keep new threads coming when possible.  It's not exactly smart,
but should usually beat the previous method (when using multiple threads) and
should never be any worse.

Here's the relevant code comment:

# Assume that the oldest thread will be one of the
# first to finish and wait for it.  After that's
# done, remove any finished threads from the list
# and continue on.  This will open up at least one
# spot for a new thread



git-svn-id: file:///home/svn/framework3/trunk@6809 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 02:27:18 +00:00
kris 4b9785e1b7 Fix aux run_batch() handling when using multiple threads: it would often pass
modules a duplicate or even empty batch array.


git-svn-id: file:///home/svn/framework3/trunk@6808 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 00:20:54 +00:00
Mario Ceballos 4f88b5a5c1 added auxiliary module sid_brute.rb and sid.txt wordlist.
git-svn-id: file:///home/svn/framework3/trunk@6807 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 00:03:50 +00:00
Patrick Webster f151ecc0ca Added mirc_privmsg_server exploit module.
git-svn-id: file:///home/svn/framework3/trunk@6806 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 11:44:55 +00:00
kris ea272e87dd comment typo
git-svn-id: file:///home/svn/framework3/trunk@6805 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 06:40:23 +00:00
Mario Ceballos 6005ac7c3f added exploit module tns_service_name.rb. updated ora_ntlm_stealer.rb to use the new mixin.
git-svn-id: file:///home/svn/framework3/trunk@6804 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 03:50:45 +00:00
HD Moore 6624dbd5ff Adds coverage for SBerry's Firefox 3.5 exploit (win32 only atm).
git-svn-id: file:///home/svn/framework3/trunk@6803 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 21:59:35 +00:00
HD Moore d5a15718b5 Fix up AutoRunScript support (reflective had not been updated before being switched as default)
git-svn-id: file:///home/svn/framework3/trunk@6802 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 21:36:23 +00:00
HD Moore 1ffa74cbb3 Fix the Benchmark method issue by loading active_support which extends Benchmark
git-svn-id: file:///home/svn/framework3/trunk@6801 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 18:27:34 +00:00
Mario Ceballos 55356c88e1 added auxiliary module tnscmd.rb
git-svn-id: file:///home/svn/framework3/trunk@6800 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 16:48:56 +00:00
HD Moore b018df89da Some minor tweaks, looks like this module doesnt play nice with the new JS encrypter
git-svn-id: file:///home/svn/framework3/trunk@6799 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 11:59:33 +00:00
HD Moore f897d1d3d5 Patch from jabra for enable mssql brute forcing
git-svn-id: file:///home/svn/framework3/trunk@6798 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 11:30:41 +00:00
Mario Ceballos 212dc2f2b0 addition of oracle mixin and sql client.
git-svn-id: file:///home/svn/framework3/trunk@6796 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 03:55:32 +00:00