HD Moore
c31f70cfb6
Switch to METERPRETER_UA as intended
2012-07-02 00:02:47 -05:00
HD Moore
27bdf78a5a
Add support for user-agent control
2012-06-30 23:00:08 -05:00
HD Moore
75f1484d63
Respin of binaries to remove debug output
2012-06-24 13:40:27 -05:00
HD Moore
6e61878393
Respin of meterpreter bins (add Win 8 to sysinfo, fix a few bugs)
2012-06-24 13:27:10 -05:00
James Lee
709f860e8d
Undo mode change from previous commit
2012-05-16 16:09:10 -06:00
James Lee
62f6ed97a7
Windows binaries for new loadlib API
2012-05-16 16:07:55 -06:00
James Lee
4ed55dc958
Fall back to MIB method if we can't get netmasks
...
Misses IPv6 addresses, but at least doesn't break everything.
[Fixes #6525 ]
2012-03-16 11:30:25 -06:00
James Lee
ba1ed93ee2
Check for a 0 prefix length
...
If the OnLinkPrefixLength is 0, something is wrong, try the value in the
prefix linked list. Appears to fix v4 addresses on XP but not 2k3.
[See #6525 ]
2012-03-16 03:46:10 -06:00
James Lee
9aaf6af072
Return network prefixes when available
...
Solves #6525 on Vista+. Win2k still works using the old MIB method
(which doesn't support ipv6). Win2k3 and XP are still busted for
unknown reasons.
2012-03-16 01:50:26 -06:00
James Lee
d09a80594c
Add bins for listing all addresses
...
[Fixes #6476 ]
2012-03-13 13:14:43 -06:00
James Lee
eccd62717e
Binaries for new netlink code
...
Includes a Windows dll to add support for route metrics.
2012-02-24 16:42:13 -07:00
HD Moore
25100584eb
Related to r13582 (binaries)
...
git-svn-id: file:///home/svn/framework3/trunk@13583 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-19 05:10:13 +00:00
HD Moore
0b331ac7b7
Commit new bins
...
git-svn-id: file:///home/svn/framework3/trunk@13347 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 20:54:51 +00:00
HD Moore
ec6ef32002
Merge in the binaries
...
git-svn-id: file:///home/svn/framework3/trunk@13090 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-02 04:04:22 +00:00
HD Moore
b7a0ac7989
Posix style (bins)
...
git-svn-id: file:///home/svn/framework3/trunk@13062 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-29 06:31:14 +00:00
HD Moore
92bb531af5
New bins, new functions, more info soon
...
git-svn-id: file:///home/svn/framework3/trunk@13059 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-29 06:12:03 +00:00
HD Moore
9220506ba2
Merge in recent meterpreter work. These are not the commits you are looking for (more info on what all this is later this week).
...
git-svn-id: file:///home/svn/framework3/trunk@13053 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-28 21:26:43 +00:00
HD Moore
db413592e9
This commit adds support for the -r (remote machine name) parameter to the reg command and extends the api to support a remote machine name. Closes #1894
...
git-svn-id: file:///home/svn/framework3/trunk@12924 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-12 00:01:29 +00:00
HD Moore
6dd65e56f2
All changes look good, merging
...
git-svn-id: file:///home/svn/framework3/trunk@12921 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-11 23:17:42 +00:00
HD Moore
36d4de74f8
Fresh meterpreter binaries, including a 64-bit version of the sniffer extension
...
git-svn-id: file:///home/svn/framework3/trunk@12915 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-11 22:41:08 +00:00
Stephen Fewer
41e5a4c61d
Fix for #3482 , the empty value occurs when no service pack is present. The fix simply tests for this. Also remove the two unused params on the _snprintf call.
...
git-svn-id: file:///home/svn/framework3/trunk@11542 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-11 14:29:16 +00:00
Matt Weeks
599df0a71a
Fix error with recording on certain Windows versions.
...
git-svn-id: file:///home/svn/framework3/trunk@11311 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-12 20:12:03 +00:00
Matt Weeks
61242f3c2c
Catch invalid webcam frame requests.
...
git-svn-id: file:///home/svn/framework3/trunk@11160 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-29 02:23:01 +00:00
Matt Weeks
2e72926638
Add audio (microphone) recording support to stdapi.
...
git-svn-id: file:///home/svn/framework3/trunk@11087 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-22 00:32:39 +00:00
Matt Weeks
560c1847c3
Properly return error if no webcams present (instead of killing session).
...
git-svn-id: file:///home/svn/framework3/trunk@11041 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-14 19:59:31 +00:00
Matt Weeks
594a46bfc7
Merge webcam extension into stdapi.
...
git-svn-id: file:///home/svn/framework3/trunk@10997 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 22:36:54 +00:00
HD Moore
2e9138ebbc
This commit overhauls much of the meterpreter timeouts and staging processes. This fixes a bug with concurrent session handling, reduces CPU load by caching a single SSL certificate for all sessions, increases all of the critical timeouts, and generally makes mass ownage work better. We still need to limit the maximum number of concurrent on_session() threads to something sane to prevent sesssion spikes from dragging out the process even longer. The C-side meterpreter change is minimal and will only help with future compatibility if we move to non-blocking fd's for the SSL socket.
...
git-svn-id: file:///home/svn/framework3/trunk@10595 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 04:11:47 +00:00
Stephen Fewer
7957c8872e
add in the new bins (and delete the old railgun dll)
...
git-svn-id: file:///home/svn/framework3/trunk@10320 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-14 23:31:35 +00:00
Stephen Fewer
a0f86c62e3
Meterpreter search support to leverage the index on older systems (2000/XP/2003) via Windows Desktop Search v2.
...
git-svn-id: file:///home/svn/framework3/trunk@10187 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-30 09:50:41 +00:00
Stephen Fewer
aa6ef3615e
...and the bins for file searching.
...
git-svn-id: file:///home/svn/framework3/trunk@10166 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-27 14:45:36 +00:00
HD Moore
30d3440b5d
New bins, implements the server side of multi-call railgun
...
git-svn-id: file:///home/svn/framework3/trunk@9806 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-13 19:19:21 +00:00
Stephen Fewer
a47ced6ac4
Partial solution for #1448 . Fall back to CreateProcessWithTokenW when CreateProcessAsUser fails with ERROR_PRIVILEGE_NOT_HELD. While only available on 2003 and above this works on my server 2008 test case which was failing before.
...
git-svn-id: file:///home/svn/framework3/trunk@9781 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 18:36:57 +00:00
Stephen Fewer
7a57ca57a6
Bug fix for a misplaced & in call to DestroyEnvironmentBlock() during process_execute(), was causing a hang on Vista and an Access Violation on server 2008.
...
git-svn-id: file:///home/svn/framework3/trunk@9779 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 16:37:50 +00:00
HD Moore
d3a6418e53
Revert changes to elevate, still not getting around restrictions on primary token creation, needs a deeper look
...
git-svn-id: file:///home/svn/framework3/trunk@9759 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:59:31 +00:00
HD Moore
ec9156827e
Switch the elevator methods to DuplicateHandleEx to get a primary token
...
git-svn-id: file:///home/svn/framework3/trunk@9755 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:23:05 +00:00
HD Moore
29f9f6671e
This *should* fix all cases where execute -t would fail to use an impersonated token
...
git-svn-id: file:///home/svn/framework3/trunk@9754 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 19:32:51 +00:00
HD Moore
972e7bc282
Clean up some of the token impersonation code around process execution
...
git-svn-id: file:///home/svn/framework3/trunk@9751 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 18:54:20 +00:00
HD Moore
38d15c016d
Rebuilds of meterpreter, including x64
...
git-svn-id: file:///home/svn/framework3/trunk@9716 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:47:35 +00:00
HD Moore
e34bbc281a
Merge railgun binary and new builds
...
git-svn-id: file:///home/svn/framework3/trunk@9710 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:29:37 +00:00
HD Moore
c6c956ab46
Small patch to enable a new stager
...
git-svn-id: file:///home/svn/framework3/trunk@8984 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 05:21:15 +00:00
Stephen Fewer
edf030df53
...and finally the bins!
...
git-svn-id: file:///home/svn/framework3/trunk@8789 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-11 17:12:31 +00:00
Stephen Fewer
4ed9e71b76
Commit the meterpreter C side (and bins) for transparent zlib (zlib.c copied from the posix meterpreter source) compression of TLV's and channels. To use transparent compression with channels, create them with CHANNEL_FLAG_COMPRESS. To use transparent compression with any TLV value, bitwise or the TLV type with TLV_META_TYPE_COMPRESSED (Don't create the TLV type with TLV_META_TYPE_COMPRESSED as the compressed flag is removed on the remote end after compression). For consistency with the ruby side we could at a later stage add a boolean compress parameter to all the packet_add_tlv_* functions so you don't have to manually specify TLV_META_TYPE_COMPRESSED flag.
...
git-svn-id: file:///home/svn/framework3/trunk@8515 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-16 14:56:24 +00:00
Stephen Fewer
23901c83ea
...and the bins.
...
git-svn-id: file:///home/svn/framework3/trunk@8433 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-09 16:48:13 +00:00
Stephen Fewer
b12ac46d9e
...and the stdapi bins.
...
git-svn-id: file:///home/svn/framework3/trunk@8385 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-06 18:00:09 +00:00
HD Moore
42b331b47f
Fix #790 . Initialize the client state to be alive, tweak a few things on the meterpreter side
...
git-svn-id: file:///home/svn/framework3/trunk@8327 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-29 18:52:44 +00:00
Stephen Fewer
0099fedeb3
...and the bins for the ps command fix.
...
git-svn-id: file:///home/svn/framework3/trunk@8323 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-29 12:01:26 +00:00
HD Moore
284af1260a
Disable debug tracing
...
git-svn-id: file:///home/svn/framework3/trunk@8312 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 23:10:58 +00:00
HD Moore
f3408fd327
Fixes #744 . The core issue was the migrate code waiting on SetEvent, but the migrate stub was blocked on a WSASocket due to a pending packet_receive in the main server thread. Simply settin the thread termination signal did not work, as the SSL_read was already in progress. This change forcible terminates the main server thread before waiting on the event in order to bypass this deadlock. The downside is a failed migrate has no way to recover if it makes it this far.
...
git-svn-id: file:///home/svn/framework3/trunk@8309 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 22:55:41 +00:00
Stephen Fewer
6772efb79c
...and finally the bins.
...
git-svn-id: file:///home/svn/framework3/trunk@8297 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 13:59:00 +00:00
Stephen Fewer
c92d7b68bf
...and the bins!
...
git-svn-id: file:///home/svn/framework3/trunk@8159 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 11:10:55 +00:00