HD Moore
465af50f1e
Allow option overrides for the callers of open_pcap
...
git-svn-id: file:///home/svn/framework3/trunk@6855 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 17:48:10 +00:00
HD Moore
e70ac6cc19
Added a new set of match flags for cmd injection exploits (RequiredCmds). This reduces the number of 'bad' payloads listed for explot modules. A good example is disabling the netcat -e payloads for old Solaris exploits
...
git-svn-id: file:///home/svn/framework3/trunk@6854 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 15:20:35 +00:00
pusscat
4fd458a309
Update some identBuf documentation
...
git-svn-id: file:///home/svn/framework3/trunk@6853 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 14:54:34 +00:00
HD Moore
47ebd62092
Adds coverage for the DD-WRT web interface command execution flaw, adds two netcat -e payloads to work with it
...
git-svn-id: file:///home/svn/framework3/trunk@6852 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 12:56:42 +00:00
HD Moore
8ad948c127
Demonstrate how to send raw ethernet frames
...
git-svn-id: file:///home/svn/framework3/trunk@6851 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 10:54:24 +00:00
Mario Ceballos
4691f2b0e5
added exploit module netidentity_xtierrpcpipe.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6850 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 01:04:48 +00:00
HD Moore
b3e36e5692
Reduce the size of the generated executables (works better with sqlmap and other tools that need small exes). Payloads are now capped at 2048 and the amount of random data appended to the exe has been reduced.
...
git-svn-id: file:///home/svn/framework3/trunk@6849 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-20 13:55:29 +00:00
HD Moore
17d6de4247
Adds a reverse_tcp for metsvc
...
git-svn-id: file:///home/svn/framework3/trunk@6848 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 20:51:58 +00:00
James Lee
529ded22ae
reverting last commit; somebody didn't cross their fingers
...
git-svn-id: file:///home/svn/framework3/trunk@6847 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 20:48:47 +00:00
James Lee
c3dc1ecb55
reintegrate browser_autopwn into trunk; cross your fingers and hope this works
...
git-svn-id: file:///home/svn/framework3/trunk@6846 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 17:27:36 +00:00
HD Moore
e7eb7235a7
Fixes #298 . Thanks Shiyee!
...
git-svn-id: file:///home/svn/framework3/trunk@6845 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 16:07:59 +00:00
HD Moore
a6a8c04d2b
Continue loading even if pcaprub is not available
...
git-svn-id: file:///home/svn/framework3/trunk@6844 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 13:14:52 +00:00
James Lee
0044635e3b
remove a temp commit leftover
...
git-svn-id: file:///home/svn/framework3/trunk@6834 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-18 20:59:10 +00:00
HD Moore
309acbaa22
Remove extraneous comma
...
git-svn-id: file:///home/svn/framework3/trunk@6833 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-18 00:27:15 +00:00
HD Moore
282bcb4fae
Updated with osvdb and bid references.
...
git-svn-id: file:///home/svn/framework3/trunk@6832 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-18 00:15:48 +00:00
HD Moore
0d931953cf
The sniffer module is now compiled against the dnet headers for packet decodes
...
git-svn-id: file:///home/svn/framework3/trunk@6831 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-18 00:10:10 +00:00
HD Moore
2d319e9b5b
Updated to work better on OS X and avoid 'script is taking too long' errors on all platforms
...
git-svn-id: file:///home/svn/framework3/trunk@6830 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 23:57:59 +00:00
HD Moore
8d43d11798
Simple Raw wrapper for strings as a L5 object in Racket
...
git-svn-id: file:///home/svn/framework3/trunk@6829 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 23:14:25 +00:00
HD Moore
99bc63b11d
Adds support for Mac OS X intel (use the vforkshell payloads)
...
git-svn-id: file:///home/svn/framework3/trunk@6828 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 21:28:59 +00:00
HD Moore
d57bdecb1d
Remove the last stubbly bit of scruby
...
git-svn-id: file:///home/svn/framework3/trunk@6827 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:51:39 +00:00
HD Moore
5e07f7535f
Note that Scruby is no longer in the framework
...
git-svn-id: file:///home/svn/framework3/trunk@6826 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:43:27 +00:00
HD Moore
3ca75cb19e
Removing the old scruby library
...
git-svn-id: file:///home/svn/framework3/trunk@6825 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:43:01 +00:00
HD Moore
be6bb23b5e
Psnuffle modules
...
git-svn-id: file:///home/svn/framework3/trunk@6824 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:39:06 +00:00
HD Moore
7dcc3e5e47
Overhaul of all modules to use racket instead of scruby/packetfu
...
git-svn-id: file:///home/svn/framework3/trunk@6823 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:36:40 +00:00
HD Moore
5577fac39e
Closes #297 . Switches to the dnet headers for the sniffer packet decodes
...
git-svn-id: file:///home/svn/framework3/trunk@6822 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 19:39:31 +00:00
HD Moore
ed05516b9f
Force the Racket library to live under the Racket:: namespace, fixes a bug where tcp.payload was overwritten during fix!()
...
git-svn-id: file:///home/svn/framework3/trunk@6821 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 18:12:18 +00:00
HD Moore
9db072b2e4
cleans up the pcaprub code a little bit during packet receives
...
git-svn-id: file:///home/svn/framework3/trunk@6820 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 16:14:07 +00:00
Mario Ceballos
3d3ea9788c
added auxiliary module login_brute.rb and oracle_default_passwords.csv.
...
git-svn-id: file:///home/svn/framework3/trunk@6819 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 14:20:22 +00:00
Mario Ceballos
c66e25978d
remove duplicate sid.
...
git-svn-id: file:///home/svn/framework3/trunk@6818 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 13:41:56 +00:00
HD Moore
25f1043d63
Updated listing of licenses, urls, etc
...
git-svn-id: file:///home/svn/framework3/trunk@6817 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 04:33:00 +00:00
HD Moore
6ec4811bd0
Adds the bit-struct library to the source tree. Required by Racket
...
git-svn-id: file:///home/svn/framework3/trunk@6816 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 04:32:33 +00:00
HD Moore
9f88ed05e7
Adds the Racket library to the source tree. This library has been modified to change the require() statements so that all files are located under the 'racket' base directory.
...
git-svn-id: file:///home/svn/framework3/trunk@6815 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 04:29:41 +00:00
HD Moore
697d89c8cf
Wait on the pcap file handle to reduce cpu consumption during sniffing
...
git-svn-id: file:///home/svn/framework3/trunk@6814 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 02:24:21 +00:00
HD Moore
5e0213c662
Allow the Capture mixin to handle a pcap file instead (thanks Max!)
...
git-svn-id: file:///home/svn/framework3/trunk@6813 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 22:08:31 +00:00
HD Moore
f8c2a203fd
OSVDB references updates from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@6812 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 16:02:24 +00:00
HD Moore
2c4acca92a
Fixes #296 . Removes polarssl references
...
git-svn-id: file:///home/svn/framework3/trunk@6811 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 16:00:29 +00:00
HD Moore
54973cf93b
Fix the 500 error message to include a \r\n
...
git-svn-id: file:///home/svn/framework3/trunk@6810 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 05:20:39 +00:00
kris
8d6e48bc0b
Revamp the THREADS handling for aux run_host() and run_batch(). THREADS is
...
supposed to be the number of concurrent threads; however, what's been happening
is just the firing off of THREADS threads and then simply waiting for them all
to finish before doing another round.
Now it tries to keep new threads coming when possible. It's not exactly smart,
but should usually beat the previous method (when using multiple threads) and
should never be any worse.
Here's the relevant code comment:
# Assume that the oldest thread will be one of the
# first to finish and wait for it. After that's
# done, remove any finished threads from the list
# and continue on. This will open up at least one
# spot for a new thread
git-svn-id: file:///home/svn/framework3/trunk@6809 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 02:27:18 +00:00
kris
4b9785e1b7
Fix aux run_batch() handling when using multiple threads: it would often pass
...
modules a duplicate or even empty batch array.
git-svn-id: file:///home/svn/framework3/trunk@6808 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 00:20:54 +00:00
Mario Ceballos
4f88b5a5c1
added auxiliary module sid_brute.rb and sid.txt wordlist.
...
git-svn-id: file:///home/svn/framework3/trunk@6807 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 00:03:50 +00:00
Patrick Webster
f151ecc0ca
Added mirc_privmsg_server exploit module.
...
git-svn-id: file:///home/svn/framework3/trunk@6806 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 11:44:55 +00:00
kris
ea272e87dd
comment typo
...
git-svn-id: file:///home/svn/framework3/trunk@6805 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 06:40:23 +00:00
Mario Ceballos
6005ac7c3f
added exploit module tns_service_name.rb. updated ora_ntlm_stealer.rb to use the new mixin.
...
git-svn-id: file:///home/svn/framework3/trunk@6804 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 03:50:45 +00:00
HD Moore
6624dbd5ff
Adds coverage for SBerry's Firefox 3.5 exploit (win32 only atm).
...
git-svn-id: file:///home/svn/framework3/trunk@6803 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 21:59:35 +00:00
HD Moore
d5a15718b5
Fix up AutoRunScript support (reflective had not been updated before being switched as default)
...
git-svn-id: file:///home/svn/framework3/trunk@6802 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 21:36:23 +00:00
HD Moore
1ffa74cbb3
Fix the Benchmark method issue by loading active_support which extends Benchmark
...
git-svn-id: file:///home/svn/framework3/trunk@6801 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 18:27:34 +00:00
Mario Ceballos
55356c88e1
added auxiliary module tnscmd.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6800 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 16:48:56 +00:00
HD Moore
b018df89da
Some minor tweaks, looks like this module doesnt play nice with the new JS encrypter
...
git-svn-id: file:///home/svn/framework3/trunk@6799 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 11:59:33 +00:00
HD Moore
f897d1d3d5
Patch from jabra for enable mssql brute forcing
...
git-svn-id: file:///home/svn/framework3/trunk@6798 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 11:30:41 +00:00
Mario Ceballos
212dc2f2b0
addition of oracle mixin and sql client.
...
git-svn-id: file:///home/svn/framework3/trunk@6796 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 03:55:32 +00:00