Commit Graph

680 Commits (0d8a4cefbf349841e674d0a238d11513f896218d)

Author SHA1 Message Date
sinn3r e1cea699a7 yo, format police is in town for some law and order around here 2011-11-11 11:39:13 -06:00
Tod Beardsley 184eee0e64 Merge branch 'duqu' 2011-11-11 10:22:12 -06:00
Tod Beardsley e03b6d27d2 Adding a colon to Request keyword mostly just to test local changes 2011-11-11 10:20:52 -06:00
Marcus J. Carey ef1a86e839 adding email address 2011-11-11 09:44:18 -06:00
David Maloney 6ae8bbb6ce Fixes #5832 2011-11-10 21:57:24 -08:00
Marcus J. Carey 5a75a67830 cleaning up tabs and rename variables for clarity 2011-11-10 23:26:19 -06:00
sinn3r 7191542503 Merge branch 'master' of github.com:rapid7/metasploit-framework 2011-11-10 18:09:55 -06:00
sinn3r 457b7cb6d1 sinn3r: *knock, knock* Whitespace: who's there? sinn3r:Me, I kill you 2011-11-10 18:08:28 -06:00
wchen-r7 0675def3d4 Whitespace, I kill you. 2011-11-10 18:00:50 -06:00
Marcus J. Carey e140361ffd change keys to array instead of comma delimited string 2011-11-10 16:11:11 -06:00
Marcus J. Carey 7348a71c24 adding duqu_check.rb 2011-11-10 15:20:48 -06:00
wchen-r7 a9ebfbd604 Add feature #5912 2011-11-10 03:13:57 -06:00
wchen-r7 3ff1449995 Do report_note() 2011-11-10 02:16:25 -06:00
Carlos Perez 3ac11b7d44 Whitespace clean up
git-svn-id: file:///home/svn/framework3/trunk@14190 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-08 15:48:04 +00:00
Carlos Perez 4490bb4683 handle better certain options that may use = sign
git-svn-id: file:///home/svn/framework3/trunk@14189 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-08 15:14:00 +00:00
David Maloney 2d80d1e144 Fixes Cred Sourcing in report_auth_info() for post modules.
git-svn-id: file:///home/svn/framework3/trunk@14187 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-08 03:34:49 +00:00
Carlos Perez 28c2408fdd handle better certain options that may use = sign
git-svn-id: file:///home/svn/framework3/trunk@14186 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-08 03:22:54 +00:00
Wei Chen e767214411 Fix: whitespaces, svn propset, author e-mail format
git-svn-id: file:///home/svn/framework3/trunk@14175 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-06 22:02:26 +00:00
Wei Chen b1d38a44a4 Clenaup
git-svn-id: file:///home/svn/framework3/trunk@14174 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-06 21:23:21 +00:00
Wei Chen 70a64bf4db Fix indent level and whitespace
git-svn-id: file:///home/svn/framework3/trunk@14170 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-05 23:18:30 +00:00
Wei Chen 1272736b72 indent level fix
git-svn-id: file:///home/svn/framework3/trunk@14162 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-04 21:04:54 +00:00
David Maloney a0aebe98bb Adds the community submitted ePO database password post module
Did some minor code cleanup and replaced the hostname resolution with mubix's railgun
code to make the victim do the resolution. This should be more reliable.
Fixes #5210


git-svn-id: file:///home/svn/framework3/trunk@14160 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-04 20:15:14 +00:00
David Maloney 69193f9fe4 Some quick fixes to enum_cred_store
Fixes #5218


git-svn-id: file:///home/svn/framework3/trunk@14159 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-04 19:28:53 +00:00
David Maloney 07a41924a6 Added mubix's enum_termserv post module.
Fixes #5914


git-svn-id: file:///home/svn/framework3/trunk@14158 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-04 18:47:22 +00:00
Wei Chen 057725450c svn propset. fix author email format
git-svn-id: file:///home/svn/framework3/trunk@14154 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-04 08:16:36 +00:00
Carlos Perez f23389390b better handling of hosts with no USB History
git-svn-id: file:///home/svn/framework3/trunk@14153 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-03 22:59:39 +00:00
Carlos Perez 86a7807b97 Added a couple more checks for the names of the post modules provided
git-svn-id: file:///home/svn/framework3/trunk@14152 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-03 22:40:29 +00:00
Carlos Perez 1c5d44c40a Fix variable declaration
git-svn-id: file:///home/svn/framework3/trunk@14151 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-03 22:28:08 +00:00
HD Moore c7f0568769 Fix next vs return issue
git-svn-id: file:///home/svn/framework3/trunk@14149 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-03 18:34:30 +00:00
David Maloney 7091fc1eea Adding mubix's post modules
Fixes #5916
Fixes #5913
Fixes #5915


git-svn-id: file:///home/svn/framework3/trunk@14148 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-03 03:00:51 +00:00
David Maloney 131ffe4ab2 Fixed inconsistencies in how data was being passed to report_auth_info(). The command dispatcher and filezilla
server cred module both used the accessor :ptype but report_auth_info looks for :type. 

While ptype is what the db field is called, almsot everything else references :type so it is better
for consistency to keep everything at :type.

Fixes #5906



git-svn-id: file:///home/svn/framework3/trunk@14141 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-02 02:47:28 +00:00
David Maloney 4ab4a2cec7 fixes issues with with imvu, forgot the require statement.
git-svn-id: file:///home/svn/framework3/trunk@14140 4d416f70-5f16-0410-b530-b9f4589650da
2011-11-01 21:50:06 +00:00
Wei Chen 1b9a6bb20f Fix :host key
git-svn-id: file:///home/svn/framework3/trunk@14130 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-31 19:50:22 +00:00
Wei Chen 10dd6ff38e Fix "TypeError can't convert String into Hash" when using report_note()
git-svn-id: file:///home/svn/framework3/trunk@14129 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-31 19:48:20 +00:00
Wei Chen f64893d305 Consistent naming
git-svn-id: file:///home/svn/framework3/trunk@14122 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-30 08:20:18 +00:00
David Maloney f365050c6f Keeping the style police happy =)
git-svn-id: file:///home/svn/framework3/trunk@14119 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-29 19:54:32 +00:00
David Maloney 47ea0d7b96 Added WlanAPI Post modules. These will probably get an upgrade in the future pending some Railgun improvements Chao-mu is working on.
Fixes #5598


git-svn-id: file:///home/svn/framework3/trunk@14118 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-29 19:32:45 +00:00
David Maloney 391f39d6a3 Fixes #5165
git-svn-id: file:///home/svn/framework3/trunk@14111 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-29 00:33:16 +00:00
David Maloney 292a1d087b Fixes #4288
git-svn-id: file:///home/svn/framework3/trunk@14110 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-29 00:23:02 +00:00
Carlos Perez 86128d3373 Removed whitespaces
git-svn-id: file:///home/svn/framework3/trunk@14106 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-28 23:06:52 +00:00
David Maloney b15f878b2f Forgot to close out the registry hives when done. fixed now
git-svn-id: file:///home/svn/framework3/trunk@14100 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-28 18:00:10 +00:00
David Maloney 8be10d4abe Added the IVMU password collector post module submitted in #5582
git-svn-id: file:///home/svn/framework3/trunk@14099 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-28 17:50:16 +00:00
Carlos Perez de22020e6f Typos and undefined variable
git-svn-id: file:///home/svn/framework3/trunk@14097 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-28 14:46:49 +00:00
Carlos Perez ef808f20e8 Post module for enumerating on a host that is part of the domain domain members in its local groups, impersonation tokens of domain accounts and processes that run under domain accounts and on all cases checks if those domain accounts are part of the Domain Admins group
git-svn-id: file:///home/svn/framework3/trunk@14087 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-27 00:54:54 +00:00
Mario Ceballos b098257154 fixes a syntax error.
git-svn-id: file:///home/svn/framework3/trunk@14053 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-24 22:43:27 +00:00
Wei Chen 587f0fb4d6 This picasa module steals passwords, therefore should go to the credentials section
git-svn-id: file:///home/svn/framework3/trunk@14045 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-24 05:09:47 +00:00
Carlos Perez ef5d3e1d02 Added more messages for the different stages in case a problems happens to better pinpoint it.
git-svn-id: file:///home/svn/framework3/trunk@14039 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-24 01:12:38 +00:00
Carlos Perez f2e4278307 Fixed problems when running in x64 with a x64 payload
git-svn-id: file:///home/svn/framework3/trunk@14038 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-23 23:47:54 +00:00
Wei Chen 70c4061c64 These are the "myca" modules by Nick Freeman. Feature #5503
git-svn-id: file:///home/svn/framework3/trunk@14037 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-23 17:17:32 +00:00
Joshua Drake 62c8c6ea9f big msftidy pass, ping me if there are issues
git-svn-id: file:///home/svn/framework3/trunk@14034 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-23 11:56:13 +00:00
Joshua Drake 4481354b83 typo
git-svn-id: file:///home/svn/framework3/trunk@14023 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-22 03:04:02 +00:00
Carlos Perez ad1824ebec Multi post module execution against a selected session using macro/rc file
git-svn-id: file:///home/svn/framework3/trunk@14011 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-19 22:13:14 +00:00
Carlos Perez 75a1b18690 Persistence Meterpreter script re-wrote and optimized in to post module
git-svn-id: file:///home/svn/framework3/trunk@14010 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-19 22:09:29 +00:00
Carlos Perez d3a7e13b50 Fixed reporting of found hosts
git-svn-id: file:///home/svn/framework3/trunk@14009 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-19 22:08:56 +00:00
Carlos Perez 9329203eb9 Added payload selection and architecture check of payload for Windows Service PE output
git-svn-id: file:///home/svn/framework3/trunk@14008 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-19 22:08:23 +00:00
Carlos Perez 88dbc6adee Accidental assignment
git-svn-id: file:///home/svn/framework3/trunk@14005 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-19 13:04:40 +00:00
Carlos Perez f56f620222 Multi platform DNS Enumeration post modules, tested on OS X, Linux, Solaris and Windows
git-svn-id: file:///home/svn/framework3/trunk@14003 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-18 23:34:00 +00:00
Carlos Perez ee9be2d51e Multi platform post module for creating reverse tcp shells using scripting environments found on the target system, tested on Linux, OS X and Solaris
git-svn-id: file:///home/svn/framework3/trunk@14001 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-18 23:31:04 +00:00
Carlos Perez a5dc422f9a Windows Credential Store enumeration and decryption module by Kx499
git-svn-id: file:///home/svn/framework3/trunk@14000 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-18 23:25:28 +00:00
Wei Chen 975cc52bac Fix spelling errors
git-svn-id: file:///home/svn/framework3/trunk@13983 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-18 00:54:05 +00:00
Wei Chen 6e3b36e142 path could be nil but only checked using empty?. Defaulting value to ''
git-svn-id: file:///home/svn/framework3/trunk@13979 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 16:35:53 +00:00
Wei Chen 87ec1c390e We caught a problem with the module timing out (execution expired), this is an attempt to handle that more gracefully.
git-svn-id: file:///home/svn/framework3/trunk@13977 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 15:38:09 +00:00
Jonathan Cran bbfbb38a5f wording fix.
git-svn-id: file:///home/svn/framework3/trunk@13973 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 08:56:07 +00:00
David Rude 8e88a3eaba fix gsub error in foreach dir api usage
git-svn-id: file:///home/svn/framework3/trunk@13972 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 05:54:20 +00:00
Tod Beardsley c336d063da Mostly file format (unix linefeeds) and File.open() calls using binary. Fixed ranking for mozilla_nstreerange and disclosure and BID # for tugzip.
git-svn-id: file:///home/svn/framework3/trunk@13971 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 04:20:53 +00:00
Wei Chen 7ef8c16e75 Fix NoMethodERror undefined method 'each' for '[path]':String error.
paths might be a string instead of an array, because the function that does unix-based enumeration returns a string


git-svn-id: file:///home/svn/framework3/trunk@13970 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 04:15:58 +00:00
Wei Chen 0af43246a4 Fix bug #5688. Some distros might have a different location for command uname
git-svn-id: file:///home/svn/framework3/trunk@13969 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 03:55:05 +00:00
Tod Beardsley 3c36b0c975 Msftidy: knocking out all those trailing spaces. Screw those guys.
git-svn-id: file:///home/svn/framework3/trunk@13967 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 03:49:49 +00:00
Wei Chen 4c6a1923e7 Fix bug #5687
git-svn-id: file:///home/svn/framework3/trunk@13966 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 03:32:43 +00:00
Wei Chen 6194486a4c Fix bug #5689 (it needs a 'rescue' in order to catch an exception)
git-svn-id: file:///home/svn/framework3/trunk@13965 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 03:27:58 +00:00
Wei Chen d159937df6 If you don't have a 'rescue', you're not really catching an exception
git-svn-id: file:///home/svn/framework3/trunk@13964 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 03:25:12 +00:00
Tod Beardsley ea2c9d1a46 Adding missing Id and Rev SVN keywords.
git-svn-id: file:///home/svn/framework3/trunk@13961 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 01:27:28 +00:00
Wei Chen 6e6b5aa926 Apply fixes by jabra
git-svn-id: file:///home/svn/framework3/trunk@13960 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-17 00:21:37 +00:00
Wei Chen 7e1070c24e Fix "NoMethodError undefined method 'empty?' for nil:NilClass
git-svn-id: file:///home/svn/framework3/trunk@13959 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-16 23:23:57 +00:00
David Rude be642faa81 stack trace fix and whitespace clean up
git-svn-id: file:///home/svn/framework3/trunk@13946 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-16 04:39:28 +00:00
David Rude 028fd4203b stack trace fix and whitespace clean up
git-svn-id: file:///home/svn/framework3/trunk@13945 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-16 04:36:08 +00:00
HD Moore 6620476744 More consistency fixes for modules titles
git-svn-id: file:///home/svn/framework3/trunk@13932 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-15 19:41:40 +00:00
HD Moore 8fd0fdf979 Consistency for manage modules
git-svn-id: file:///home/svn/framework3/trunk@13931 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-15 19:40:23 +00:00
HD Moore bc986e82d4 Fix the title for consistency
git-svn-id: file:///home/svn/framework3/trunk@13930 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-15 19:39:30 +00:00
James Lee 77e9c9d973 whitespace and another typo
git-svn-id: file:///home/svn/framework3/trunk@13929 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-15 18:12:50 +00:00
James Lee 76bad7a4e4 typo
git-svn-id: file:///home/svn/framework3/trunk@13928 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-15 18:07:50 +00:00
Carlos Perez 89ab6c11a9 small logic error that made module in shell sessions only test odd elements in the IP array
git-svn-id: file:///home/svn/framework3/trunk@13926 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-15 01:37:50 +00:00
Chao Mu 4b9346e40e Switching my BSD modules to MSF_LICENSE to make life easier. Resistance is Futile! Assimilate!
git-svn-id: file:///home/svn/framework3/trunk@13925 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-14 23:29:52 +00:00
Carlos Perez c0910add22 keywords
git-svn-id: file:///home/svn/framework3/trunk@13920 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-14 02:44:30 +00:00
Carlos Perez e4ce0bcb42 Added additional product keys
git-svn-id: file:///home/svn/framework3/trunk@13919 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-14 02:42:54 +00:00
Carlos Perez 445f694e47 Change platform
git-svn-id: file:///home/svn/framework3/trunk@13915 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-13 22:42:05 +00:00
Carlos Perez 0859c99940 Cisco post module for enumerating information from a SSH or Telnet session to a Cisco device, can try to bruteforce the enable password
git-svn-id: file:///home/svn/framework3/trunk@13907 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-13 01:54:07 +00:00
Carlos Perez bf0150941e typo
git-svn-id: file:///home/svn/framework3/trunk@13906 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-13 01:50:15 +00:00
Carlos Perez 742a72ef1f typo
git-svn-id: file:///home/svn/framework3/trunk@13905 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-13 01:49:53 +00:00
Carlos Perez fccda688a6 Multi Platform post module for performing DNS Reverse Lookups using the tools installed on the host and the DNS server configured on the host.
git-svn-id: file:///home/svn/framework3/trunk@13899 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-12 23:26:10 +00:00
Carlos Perez dbdabf8607 Multi Platform post module for performing IPv4 ping sweeps using host built in ping command
git-svn-id: file:///home/svn/framework3/trunk@13897 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-12 23:20:34 +00:00
Carlos Perez b019f70d72 Post Module for injecting Windows Payloads in to memory works with x86 and x64 payloads and processes.
git-svn-id: file:///home/svn/framework3/trunk@13896 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-12 23:18:07 +00:00
Carlos Perez ab8b8802b5 issue with none domain machines fixed and added host resolution and reporting on domain controller using some of Mubix railgun fu
git-svn-id: file:///home/svn/framework3/trunk@13895 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-12 23:15:07 +00:00
Wei Chen 460353fec4 Migrate to process what? :-)
git-svn-id: file:///home/svn/framework3/trunk@13883 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-12 00:01:25 +00:00
Wei Chen 9a00527114 Check nil
git-svn-id: file:///home/svn/framework3/trunk@13881 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 21:57:20 +00:00
Wei Chen 39049a71ca Chk nil for user in case it returns nil, but password doesn't
git-svn-id: file:///home/svn/framework3/trunk@13880 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 21:55:30 +00:00
Wei Chen f1f1d16f8b handle possible nil return value
git-svn-id: file:///home/svn/framework3/trunk@13879 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 21:01:22 +00:00
Wei Chen 4a73a21277 registry_getvaldata might return nil due to a RequestError. Need to handle those before printing the values.
git-svn-id: file:///home/svn/framework3/trunk@13878 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 20:27:52 +00:00
Wei Chen d49ffd3fc8 Fix naming style, and some other format problems.
git-svn-id: file:///home/svn/framework3/trunk@13877 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 20:08:11 +00:00
Wei Chen 60296e9cf2 Change naming style for consistency
git-svn-id: file:///home/svn/framework3/trunk@13876 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 20:03:40 +00:00
Wei Chen ea0392724e Check nil first, and then check empty
git-svn-id: file:///home/svn/framework3/trunk@13875 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 19:01:09 +00:00
Wei Chen 44761f8755 Fix bug #5675 (nil:NilClass error). Also, nil should be checked first, and then .empty?
git-svn-id: file:///home/svn/framework3/trunk@13874 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 18:58:44 +00:00
Wei Chen 2d3a431fc2 FTP Navigator post module (Feature #5419)
git-svn-id: file:///home/svn/framework3/trunk@13869 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 05:45:03 +00:00
Wei Chen be4f473cfa Rename meebo for consistency
git-svn-id: file:///home/svn/framework3/trunk@13866 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 00:38:50 +00:00
Wei Chen 50d4e85c57 "bug" #5583 - Dyn-DNS client password extractor
git-svn-id: file:///home/svn/framework3/trunk@13863 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 21:41:36 +00:00
HD Moore 43e6b3066b Fix errant spaces, closes #5666, thanks jjarmoc!
git-svn-id: file:///home/svn/framework3/trunk@13858 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 21:07:55 +00:00
Wei Chen e1e74de44a Add enum_ie.rb (feature #5251)
git-svn-id: file:///home/svn/framework3/trunk@13834 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-07 21:02:05 +00:00
Carlos Perez 15432fa2f5 Fix misspelled word
git-svn-id: file:///home/svn/framework3/trunk@13826 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-07 00:31:28 +00:00
Carlos Perez 1aa5deca43 Updated migrate post module for Meterpreter adding support automatically creating a process with the proper architecture to migrate to and added support to kill original process.
git-svn-id: file:///home/svn/framework3/trunk@13825 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-07 00:22:27 +00:00
Wei Chen c97fc2c683 Fix typo
git-svn-id: file:///home/svn/framework3/trunk@13816 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-04 21:05:37 +00:00
Wei Chen 3398b9fa0b Add add_user_domain
git-svn-id: file:///home/svn/framework3/trunk@13813 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-04 15:50:12 +00:00
Wei Chen 5cf6ddc322 Add Windows enum domain post module
git-svn-id: file:///home/svn/framework3/trunk@13812 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-03 21:05:54 +00:00
Wei Chen d1a0a66a9d Add post module enum domain admin tokens (by jabra)
git-svn-id: file:///home/svn/framework3/trunk@13804 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-29 08:18:13 +00:00
Wei Chen f3d35a491c Bug fix #5542. Issue with String#each. Thx egyp7.
git-svn-id: file:///home/svn/framework3/trunk@13800 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-27 23:03:30 +00:00
David Rude 99d86fc9b7 Adds recording screenshots to disk in non-clobbering way
git-svn-id: file:///home/svn/framework3/trunk@13798 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-27 15:26:03 +00:00
James Lee 565fd957fb whitespace
git-svn-id: file:///home/svn/framework3/trunk@13789 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-24 23:26:40 +00:00
Matt Weeks de9e99bd3d Fix some TOCTOU confusion and database errors.
git-svn-id: file:///home/svn/framework3/trunk@13779 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-23 15:12:19 +00:00
Matt Weeks 1d2ddc55e8 Add UI for PXE attack reset.
git-svn-id: file:///home/svn/framework3/trunk@13753 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-18 20:44:16 +00:00
Carlos Perez c1446fa4d7 Migration of wmic script to post module
git-svn-id: file:///home/svn/framework3/trunk@13725 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-12 23:33:09 +00:00
Carlos Perez b7ed699abf Avoid using session.sock.peerhost to set host in reporting since this will return nil when working thru a pivot, use the address returned by session.tunnel_peer instead
git-svn-id: file:///home/svn/framework3/trunk@13716 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-11 03:10:14 +00:00
Matt Weeks acae5dcdc8 Killing puts.
Die, puts, die!!



git-svn-id: file:///home/svn/framework3/trunk@13715 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-11 02:42:39 +00:00
David Rude fafa615d46 Adds store_loot support for cached credentials
git-svn-id: file:///home/svn/framework3/trunk@13712 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-09 18:43:59 +00:00
James Lee e31acef6e9 whitespace cleanup
git-svn-id: file:///home/svn/framework3/trunk@13702 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-07 15:30:08 +00:00
Wei Chen eae3f97bfe Should have deleted this. The replacement for it is enum_devices.rb
git-svn-id: file:///home/svn/framework3/trunk@13692 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-04 17:22:50 +00:00
Wei Chen 3260721d6f Add post module that retrieves MS product key
git-svn-id: file:///home/svn/framework3/trunk@13686 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-03 04:16:42 +00:00
Carlos Perez 6de16f055a Fix formating problem when saving to file
git-svn-id: file:///home/svn/framework3/trunk@13671 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-31 17:20:16 +00:00
HD Moore 160e473943 Minor style tweaks
git-svn-id: file:///home/svn/framework3/trunk@13653 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-29 00:59:21 +00:00
HD Moore d2e0060417 Ruby is not Python
git-svn-id: file:///home/svn/framework3/trunk@13652 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-29 00:26:42 +00:00
David Rude 6146d0ab0f remove some extra whitespace
git-svn-id: file:///home/svn/framework3/trunk@13651 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-28 22:40:32 +00:00
David Rude 57814c4012 Add nbd_server post module and move forensics modules into a seperate directory
git-svn-id: file:///home/svn/framework3/trunk@13650 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-28 22:38:59 +00:00
Matt Weeks 6853221762 Fixes #5313 by adding logging support to pivoted PXE attacks, and displaying results as the module runs.
git-svn-id: file:///home/svn/framework3/trunk@13646 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-27 15:46:49 +00:00
David Rude 052feebc29 Adds Google Picasa Password Extractor Post module
git-svn-id: file:///home/svn/framework3/trunk@13643 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-26 18:32:42 +00:00
HD Moore b5070f9cad Adds a utility module to close sessions
git-svn-id: file:///home/svn/framework3/trunk@13636 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-25 19:07:18 +00:00
Tod Beardsley 3b32e28e0f Converting the ACTION datastore to the CMD datastore to avoid confusion with an :action attribute.
git-svn-id: file:///home/svn/framework3/trunk@13635 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-25 15:56:10 +00:00
Matt Weeks 06c3dabe31 Fixes #5312 for pivoted PXE attacks.
git-svn-id: file:///home/svn/framework3/trunk@13634 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-25 02:07:35 +00:00
Carlos Perez 110094de1b Post module for gathering Autologin User Credentials by Myo Soe
git-svn-id: file:///home/svn/framework3/trunk@13608 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-22 00:37:09 +00:00
David Rude 3792a8f4b7 Added enum_dirperms post module
git-svn-id: file:///home/svn/framework3/trunk@13603 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-21 05:58:38 +00:00
James Lee a924910b86 add user profile fu for firefox_creds, see #4954
git-svn-id: file:///home/svn/framework3/trunk@13597 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-20 05:13:17 +00:00
Carlos Perez db57999246 Reverse lookup module using Railgun, written by Mubix
git-svn-id: file:///home/svn/framework3/trunk@13594 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-20 01:23:24 +00:00
Chao Mu c77dfcc48e fixes #5232 Add DLL definition for crypt32. I removed a custom add too
git-svn-id: file:///home/svn/framework3/trunk@13560 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-14 21:08:55 +00:00
Wei Chen 20df63a94e enum_pci_devices.rb is now enum_devices.rb because it enums more than just PCI info
git-svn-id: file:///home/svn/framework3/trunk@13559 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-14 00:36:06 +00:00
Wei Chen ca569ef26f Apply changes to enum more items
git-svn-id: file:///home/svn/framework3/trunk@13558 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-14 00:34:03 +00:00
HD Moore 8b72de1af6 Cosmetic
git-svn-id: file:///home/svn/framework3/trunk@13557 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-13 16:51:49 +00:00
David Rude a1fdb3063f move credential collection modules to the new dir structure
git-svn-id: file:///home/svn/framework3/trunk@13529 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 18:18:48 +00:00
David Rude 1c008f3996 Add Meebo Notifier Password Collection post module by silent_dream
git-svn-id: file:///home/svn/framework3/trunk@13526 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 17:06:56 +00:00
James Lee ad941c67ad move the password-stealing modules into their own directory
git-svn-id: file:///home/svn/framework3/trunk@13512 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 17:48:30 +00:00
Wei Chen 89bc8ce10a Apply patch by David Maloney
git-svn-id: file:///home/svn/framework3/trunk@13504 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 01:42:59 +00:00
James Lee 9564d33c44 add proper require, fixes startup errors
git-svn-id: file:///home/svn/framework3/trunk@13501 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-09 19:24:37 +00:00
James Lee ca14e50290 fix syntax errors in 1.9+ Ruby is not python.
git-svn-id: file:///home/svn/framework3/trunk@13500 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-09 19:21:33 +00:00
David Rude b17248c911 Add forensic modules from Wesley McGrew
git-svn-id: file:///home/svn/framework3/trunk@13499 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-09 16:49:12 +00:00
Matt Weeks b2733c04db More PXE dust for extra magic!
git-svn-id: file:///home/svn/framework3/trunk@13493 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-05 17:10:27 +00:00
Carlos Perez 5dc78a8b00 Made SETPASS and advanced option
git-svn-id: file:///home/svn/framework3/trunk@13492 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-04 23:34:40 +00:00
Carlos Perez 3982cf51b4 run_as Post Module by Keith Faber
git-svn-id: file:///home/svn/framework3/trunk@13491 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-04 23:29:43 +00:00
Carlos Perez dca3aa9d6a Remove null bytes from passwords returned
git-svn-id: file:///home/svn/framework3/trunk@13478 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-03 00:48:35 +00:00
Wei Chen 1373d1043d Indent level fix
git-svn-id: file:///home/svn/framework3/trunk@13477 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-02 22:42:26 +00:00
Wei Chen 5db12c65eb Avoid trying to decode empty passwords
git-svn-id: file:///home/svn/framework3/trunk@13476 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-02 21:46:51 +00:00
Wei Chen e231ac7681 Name change
git-svn-id: file:///home/svn/framework3/trunk@13474 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-02 21:35:06 +00:00
Wei Chen 1b326839c9 Consistent naming style
git-svn-id: file:///home/svn/framework3/trunk@13456 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 19:16:00 +00:00
Wei Chen 2078b874af Wrong order. Should check nil first, and then ""
git-svn-id: file:///home/svn/framework3/trunk@13454 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 19:02:40 +00:00
Wei Chen c59a51667d return value for registry_enumkeys() should be checked
git-svn-id: file:///home/svn/framework3/trunk@13453 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:55:38 +00:00
Wei Chen 9d1bcc2cb2 return value from registry_enumkeys should be checked
git-svn-id: file:///home/svn/framework3/trunk@13452 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:52:19 +00:00
Wei Chen 50c9bc83cf Name change
git-svn-id: file:///home/svn/framework3/trunk@13451 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:47:11 +00:00
HD Moore ea2326fc3c Get the actual order right
git-svn-id: file:///home/svn/framework3/trunk@13450 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:28:46 +00:00
HD Moore a4b343e00b Delete nil returns, prevent stack traces
git-svn-id: file:///home/svn/framework3/trunk@13448 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:21:23 +00:00
Wei Chen 730e41263f Consistent naming
git-svn-id: file:///home/svn/framework3/trunk@13445 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 06:17:00 +00:00
Wei Chen 14dfc34930 This time should fix the issue with ruby 1.8 vs 1.9
git-svn-id: file:///home/svn/framework3/trunk@13444 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 05:40:08 +00:00
Wei Chen 7ff785f886 syntax change to make ruby 1.8 and 1.9 happy
git-svn-id: file:///home/svn/framework3/trunk@13443 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 05:05:26 +00:00
James Lee 2b912e3b4a add rob and cg's awesome smartlocker (now known as lockout_keylogger) as a post module, fixes #5105
git-svn-id: file:///home/svn/framework3/trunk@13429 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 18:50:24 +00:00
Carlos Perez e121e13083 pulled until post core can be re-worked for multi sessions
git-svn-id: file:///home/svn/framework3/trunk@13425 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 15:29:39 +00:00
Carlos Perez 49fb90b835 Service enumeration module by Keith Faber
git-svn-id: file:///home/svn/framework3/trunk@13423 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 15:11:52 +00:00
Wei Chen 973c6fdfc7 Change where print_good() is used.
git-svn-id: file:///home/svn/framework3/trunk@13406 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 06:26:22 +00:00
Wei Chen a64e223062 Indentation fix, and svn propset
git-svn-id: file:///home/svn/framework3/trunk@13401 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 02:17:54 +00:00
Wei Chen 625f8c8591 Add Trillian Instant Messenger password decoder (post module)
git-svn-id: file:///home/svn/framework3/trunk@13400 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 02:14:59 +00:00
Wei Chen 5d38a47fc6 Indentation fix for metadata
git-svn-id: file:///home/svn/framework3/trunk@13399 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:29:15 +00:00
Wei Chen b6c09d17a9 creds shouldn't have to re-initialize all the time
git-svn-id: file:///home/svn/framework3/trunk@13398 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:22:00 +00:00
Wei Chen e7622da121 Better use of print_good()
git-svn-id: file:///home/svn/framework3/trunk@13397 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:19:33 +00:00
Wei Chen 7e01518b69 Minor indentation fix
git-svn-id: file:///home/svn/framework3/trunk@13396 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:18:02 +00:00
Wei Chen c07a891476 Add Nimbuzz Instant Messenger post module
git-svn-id: file:///home/svn/framework3/trunk@13395 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:14:03 +00:00
Carlos Perez 1d879e39df Added patch from thelightcosine for profile mixin
git-svn-id: file:///home/svn/framework3/trunk@13393 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 22:56:40 +00:00
Carlos Perez cb4183e1dc Check the presences of xml file for sites and for recent connections.
git-svn-id: file:///home/svn/framework3/trunk@13392 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 22:39:28 +00:00
Carlos Perez bdd76a6182 Fix Typo and handling of OTR key file if not present.
git-svn-id: file:///home/svn/framework3/trunk@13391 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 22:38:51 +00:00
Carlos Perez f0877e1c5b Applied patch from lightcosine for profile mixin, minor fixes and some code standard changes
git-svn-id: file:///home/svn/framework3/trunk@13386 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 12:35:50 +00:00
Carlos Perez f685e179cd Do not error if time can not be obtained
git-svn-id: file:///home/svn/framework3/trunk@13383 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 21:31:21 +00:00
Carlos Perez 2a6b9957d0 fixed problem with the command execution
git-svn-id: file:///home/svn/framework3/trunk@13377 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 19:37:43 +00:00
Carlos Perez eedc77e2ba fixed problem where it looped when ran as system
git-svn-id: file:///home/svn/framework3/trunk@13370 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 15:44:29 +00:00
David Rude 5b7a8ad6a3 Fix a stack trace when loading sqlite gem
git-svn-id: file:///home/svn/framework3/trunk@13369 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 15:35:35 +00:00
David Rude 29335244d2 reworked some logic
git-svn-id: file:///home/svn/framework3/trunk@13368 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 15:12:28 +00:00
David Rude 0e2dfbaa98 Fix a typo
git-svn-id: file:///home/svn/framework3/trunk@13367 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 14:54:56 +00:00
Wei Chen f3fecacc0f Fix bug #5066
git-svn-id: file:///home/svn/framework3/trunk@13366 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 14:38:19 +00:00
Carlos Perez d1c701a92a added platform check and message for none nix systems
git-svn-id: file:///home/svn/framework3/trunk@13365 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 14:25:56 +00:00
Carlos Perez 3b85b2d08b check for empty keys returning nil
git-svn-id: file:///home/svn/framework3/trunk@13364 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 13:51:37 +00:00
Carlos Perez 49d1bbe9d2 make sure nil is not returned for systems with no share history
git-svn-id: file:///home/svn/framework3/trunk@13361 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 13:14:11 +00:00
Wei Chen 41f72deee2 Add PCI devices enum post module
git-svn-id: file:///home/svn/framework3/trunk@13358 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 04:53:14 +00:00
Tod Beardsley c41d60ab1b Description clean up and a tiny bit of whitespace changes. Also changed one use of eql?() to == since that's nearly always better, says me.
git-svn-id: file:///home/svn/framework3/trunk@13357 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 02:39:49 +00:00
Wei Chen eced6619e9 I believe I meant 'next', not 'break'
git-svn-id: file:///home/svn/framework3/trunk@13344 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 16:25:42 +00:00
Wei Chen f15dc33ae6 Add store_loot feature
git-svn-id: file:///home/svn/framework3/trunk@13343 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 01:49:51 +00:00
James Lee 4135572816 i don't like giving up based on matching platform since it means we have to rewrite stuff if those APIs ever get implemented in posix, but for now it prevents stack traces
git-svn-id: file:///home/svn/framework3/trunk@13341 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 00:21:21 +00:00
Wei Chen 4793cd9aed ugh, I gots to fix my Engrish
git-svn-id: file:///home/svn/framework3/trunk@13340 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-25 22:55:40 +00:00
Wei Chen d56ba5d645 Add Ipswitch iMail user data enumeration post module
git-svn-id: file:///home/svn/framework3/trunk@13339 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-25 22:44:51 +00:00
David Rude e0430ee69b Remote the Post::File mixin its not needed
git-svn-id: file:///home/svn/framework3/trunk@13335 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-25 15:29:18 +00:00
Wei Chen 2ed6d1e0ac report_auth_info() should not be used because we're not storing host IP
git-svn-id: file:///home/svn/framework3/trunk@13298 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 23:09:04 +00:00
Wei Chen 21aae8f749 Exercising my author e-mail format dictatorship for some of the win gather post mods
git-svn-id: file:///home/svn/framework3/trunk@13296 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 20:09:26 +00:00
Wei Chen 38638a2daf Internet Download Manager password decoder by Silent Dream
git-svn-id: file:///home/svn/framework3/trunk@13295 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 19:55:20 +00:00
Wei Chen 320cdb40de Fix bug #4968
git-svn-id: file:///home/svn/framework3/trunk@13292 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 04:52:31 +00:00
Chao Mu 253f656b07 fixes #4751 "New Post Module: SmartFTP Password Extraction." Brought to us by thelightcosine/David Maloney. Thank you for such a fantastic module!
git-svn-id: file:///home/svn/framework3/trunk@13289 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-21 21:44:58 +00:00
Carlos Perez 86644e4941 fix typos
git-svn-id: file:///home/svn/framework3/trunk@13256 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-20 03:02:15 +00:00
David Rude 52c0231e3b Add the system user in the loot
git-svn-id: file:///home/svn/framework3/trunk@13254 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-20 01:33:57 +00:00
Carlos Perez 059acd8f95 deregister option SESSION since it is not used and remove redundant nil default value, library already sets it as nil.
git-svn-id: file:///home/svn/framework3/trunk@13252 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-20 00:15:11 +00:00
HD Moore ec6dc4641d Consistency fix
git-svn-id: file:///home/svn/framework3/trunk@13251 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 23:28:09 +00:00
HD Moore 33ce5df8ca Resolve a number of problems with the new multi modules
git-svn-id: file:///home/svn/framework3/trunk@13249 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 23:27:28 +00:00
James Lee 775257320d these need to be Post to live in post/
git-svn-id: file:///home/svn/framework3/trunk@13248 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 23:10:47 +00:00
Carlos Perez f544b85d47 Post module that selects the best method to safely dump hashes depending on the Windows Version, permission and role, will normalize the data returned by the lsass injection method and accounts names with none ASCII chars.
git-svn-id: file:///home/svn/framework3/trunk@13246 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 22:25:07 +00:00
Carlos Perez 843b03686e Modules for executing Meterpreter commands and post modules against several sessions.
git-svn-id: file:///home/svn/framework3/trunk@13245 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 22:14:06 +00:00
Carlos Perez 866d250178 Fixed double output being saved
git-svn-id: file:///home/svn/framework3/trunk@13243 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 21:52:38 +00:00
David Rude c066ee0a90 no need for railgun_setup
git-svn-id: file:///home/svn/framework3/trunk@13230 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 18:05:59 +00:00
David Rude 6e8992acaf no need for VERBOSE using vprint_status
git-svn-id: file:///home/svn/framework3/trunk@13228 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 17:40:19 +00:00
David Rude d96ac36dac vprint_status!
git-svn-id: file:///home/svn/framework3/trunk@13227 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 17:38:24 +00:00
David Rude b877d3c639 Added memory_grep post module and updated the GetProcessHeaps definition in railgun
git-svn-id: file:///home/svn/framework3/trunk@13225 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 17:06:26 +00:00
James Lee c412a836ed add VERBOSE option to all modules and vprint_* methods to use it
git-svn-id: file:///home/svn/framework3/trunk@13183 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 15:33:35 +00:00
James Lee 6c8bde17b0 works for meterpreter, too (tested with java)
git-svn-id: file:///home/svn/framework3/trunk@13175 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 20:29:19 +00:00
James Lee a1299f90c8 don't break if /proc/scsi/scsi doesn't exist or is unreadable
git-svn-id: file:///home/svn/framework3/trunk@13173 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 19:43:09 +00:00
Carlos Perez 8e5c5e114d Check for when reg key list is nil
git-svn-id: file:///home/svn/framework3/trunk@13157 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-12 21:05:44 +00:00
Carlos Perez c97971732d cleaned up the logic and added the mods to enum_osx
git-svn-id: file:///home/svn/framework3/trunk@13131 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-08 20:45:56 +00:00
Carlos Perez 0f7166335d removed unused code and added comments, also improve a bit the extraction of the hashes in the case Lion is configured and integrated with AD
git-svn-id: file:///home/svn/framework3/trunk@13125 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-08 02:35:50 +00:00
Carlos Perez 08e8f3aba7 Improvements for dumping OSX Lion NT Hashes
git-svn-id: file:///home/svn/framework3/trunk@13122 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 21:28:32 +00:00
Carlos Perez 4cfaa74194 Improvements and fixes for dumping OSX Lion Hashes
git-svn-id: file:///home/svn/framework3/trunk@13117 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 14:53:10 +00:00
Carlos Perez 283537d5c6 Updated for Lion, tested against Development Gold Master
git-svn-id: file:///home/svn/framework3/trunk@13113 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 03:53:44 +00:00
Carlos Perez d381682ae5 update description
git-svn-id: file:///home/svn/framework3/trunk@13112 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 03:51:36 +00:00
Carlos Perez b8a232eaf5 Support for dumping OSX Lion SHA512 Salted hashes, thanks to hammackj for helping in figuring out how to parse the new format
git-svn-id: file:///home/svn/framework3/trunk@13111 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 03:46:33 +00:00
Carlos Perez 9b146c7b3e Outlook Saved Password Enumeration Post Module by Justin Cacak
git-svn-id: file:///home/svn/framework3/trunk@13109 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 03:04:06 +00:00
James Lee ba3594b7c4 don't run commands we don't need if previous commands gave us the answer. also add a check for /dev/vmnet to detect VMWare hosts
git-svn-id: file:///home/svn/framework3/trunk@13101 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-05 17:11:18 +00:00
David Rude 0107d52d5b Adds FlashFXP FTP Password Gathering post module by thelightcosine
git-svn-id: file:///home/svn/framework3/trunk@13040 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-27 17:42:28 +00:00
David Rude d4ed8d7984 Fix the Registry mixin include
git-svn-id: file:///home/svn/framework3/trunk@13003 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-22 13:53:37 +00:00
David Rude 9f96f73d53 Added CoreFTP Gather Post Module from thelightcosine
git-svn-id: file:///home/svn/framework3/trunk@13002 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-22 12:17:14 +00:00
HD Moore 18c8f8dbe2 This adds IllWill's Bitcoin waller.dat Post module
git-svn-id: file:///home/svn/framework3/trunk@12993 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 03:26:07 +00:00
Carlos Perez 68e3691411 Change Post Mixin for Windows platform in its own separate class and minor fixes on modules and scripts
git-svn-id: file:///home/svn/framework3/trunk@12990 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 00:38:04 +00:00
Carlos Perez ff7f68b470 Change Post Mixin for Solaris platform in its own separate class
git-svn-id: file:///home/svn/framework3/trunk@12988 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 23:33:59 +00:00
Carlos Perez 5d3bb04ac0 Change Post Mixin for Linux platform in its own separate class
git-svn-id: file:///home/svn/framework3/trunk@12985 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 23:27:57 +00:00
HD Moore 346018c321 Disable NTLMv2 Session for Windows 2000 servers
git-svn-id: file:///home/svn/framework3/trunk@12984 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 22:54:13 +00:00
HD Moore 846172fa1a Split options based on shellwords, pass as a hash, this prevents commas in option values from breaking things and allows quotes to be used
git-svn-id: file:///home/svn/framework3/trunk@12983 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 20:54:46 +00:00
James Lee d31dd42c69 whitespace
git-svn-id: file:///home/svn/framework3/trunk@12981 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 19:41:35 +00:00
James Lee 399efb965f fix missing require, add meterp to session types so it works in php/java meterp. and who knows maybe posix, too.
git-svn-id: file:///home/svn/framework3/trunk@12979 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 16:50:11 +00:00
James Lee 2217a454a9 missing include, fixes stack trace when running checkvm on a physical victim machine
git-svn-id: file:///home/svn/framework3/trunk@12976 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 05:21:52 +00:00
HD Moore 64ea35d743 Remove executable prop
git-svn-id: file:///home/svn/framework3/trunk@12951 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-15 20:41:27 +00:00
amaloteaux 316f1ee08b typo
git-svn-id: file:///home/svn/framework3/trunk@12950 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-15 20:08:07 +00:00
HD Moore d43a019302 Fix typo and trim whitespace
git-svn-id: file:///home/svn/framework3/trunk@12947 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-15 02:45:36 +00:00
HD Moore 092817d449 Finally merging Cachedump into the SVN tree. Thanks to everyone who helped and again for their patience
git-svn-id: file:///home/svn/framework3/trunk@12946 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-15 01:06:22 +00:00
Carlos Perez f6a967a336 chenged pkg to pkginfo
git-svn-id: file:///home/svn/framework3/trunk@12941 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-14 20:39:16 +00:00
Patrick Webster cb39e2b5a9 Fixed typo.
git-svn-id: file:///home/svn/framework3/trunk@12939 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-14 13:48:22 +00:00
Carlos Perez 6b1891d72a checkvm post module for Solaris it will detect if Solaris is running in as a Zone, VMware, VirtualBox, Xen or Qemu/KVM virtual machine.
git-svn-id: file:///home/svn/framework3/trunk@12938 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-14 00:50:33 +00:00
Carlos Perez 709402bba6 Added IDE Model Check
git-svn-id: file:///home/svn/framework3/trunk@12937 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-13 23:46:25 +00:00
HD Moore 0ea8936c0d Fix module titles to be consistent
git-svn-id: file:///home/svn/framework3/trunk@12935 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-13 03:35:32 +00:00
Carlos Perez 6582d6ee58 Added Amazon Linux enumeration
git-svn-id: file:///home/svn/framework3/trunk@12934 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-13 01:46:54 +00:00
Carlos Perez 02b78c0cd2 Added dmidecode output checking
git-svn-id: file:///home/svn/framework3/trunk@12932 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-13 01:31:58 +00:00
Carlos Perez d6cdb3ec45 Initial Linux Post Module to detect is target host is a Hyper-V, Xen, VMware, Qemu/KVM or VirtualBox VM.
git-svn-id: file:///home/svn/framework3/trunk@12931 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-13 01:07:27 +00:00
Carlos Perez 611b0c9e88 Fix false positive on win 7 x64 with vmware installed
git-svn-id: file:///home/svn/framework3/trunk@12927 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-12 14:50:55 +00:00
Wei Chen f6c54d0fae Using store_loot to store screenshots instad (see #4693). Also, if xwd fails, then we don't save it.
git-svn-id: file:///home/svn/framework3/trunk@12907 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 23:22:15 +00:00
Carlos Perez 2191055a71 will skip accounts locked with no password
git-svn-id: file:///home/svn/framework3/trunk@12903 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 11:28:30 +00:00
Wei Chen fbe81ed82a tab fix
git-svn-id: file:///home/svn/framework3/trunk@12901 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 05:19:09 +00:00
Wei Chen 1a1b89e59d Added post mod to enum linux cron
git-svn-id: file:///home/svn/framework3/trunk@12900 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 05:18:05 +00:00
Carlos Perez 37246299eb Keywords
git-svn-id: file:///home/svn/framework3/trunk@12899 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 03:39:34 +00:00
Carlos Perez 1fced297f4 Indents and Keywords
git-svn-id: file:///home/svn/framework3/trunk@12898 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 03:36:48 +00:00
Carlos Perez 2910308b3b Initial set of Solaris post modules tested against Solaris 10 and 11
git-svn-id: file:///home/svn/framework3/trunk@12896 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 03:08:47 +00:00
Wei Chen f334eafca4 Changes to some commands based on Eric Romang Blog's suggestions.
git-svn-id: file:///home/svn/framework3/trunk@12890 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-09 15:33:03 +00:00
Carlos Perez 13f0c5197d Add support for Oracle and Arch linux, thanks to Robin Wood for the Arch info
git-svn-id: file:///home/svn/framework3/trunk@12888 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-09 12:51:23 +00:00
James Lee d19b5af71a add a post module for stealing mRemote saved passwords, fixes #4641; thanks David Maloney!
git-svn-id: file:///home/svn/framework3/trunk@12877 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-06 22:54:31 +00:00
David Rude 26482bf926 Added WS_FTP Client password gather post module, thanks thelightcosine!
git-svn-id: file:///home/svn/framework3/trunk@12867 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-06 16:53:14 +00:00
Wei Chen ba345df338 Added screenshot capture feature in xwd format
git-svn-id: file:///home/svn/framework3/trunk@12842 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-03 15:02:59 +00:00
Wei Chen 5db2a90fe3 Added enum_linux.rb
git-svn-id: file:///home/svn/framework3/trunk@12838 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-03 00:26:29 +00:00
Carlos Perez 237f03f8e9 Windows Post Module for gathering Total Commander FTP client saved passwords
git-svn-id: file:///home/svn/framework3/trunk@12810 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-02 00:20:41 +00:00
HD Moore f20adabf8c Fixes #4626 by checking for an out of bounds value before using the type as an array index
git-svn-id: file:///home/svn/framework3/trunk@12809 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 23:47:16 +00:00
Carlos Perez 5d06a5f366 Linux post Module for dumping hashes in to a unshadowed pwd file
git-svn-id: file:///home/svn/framework3/trunk@12808 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 22:57:36 +00:00
Carlos Perez e030fb0a1e Linux post Module for enumerating startup of configured services
git-svn-id: file:///home/svn/framework3/trunk@12807 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 22:51:50 +00:00
Carlos Perez 849600d31e Updated to use new post libraries
git-svn-id: file:///home/svn/framework3/trunk@12806 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 22:49:24 +00:00
Wei Chen e549e8d539 open_key() call should been part of the begin/rescue block
git-svn-id: file:///home/svn/framework3/trunk@12801 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 19:05:40 +00:00
Carlos Perez 67ec93585a Multi platform ssh_cred post module by Jim Halfpenny, modified the calls to be cmd_exec and added method to identify proper platform in the case the platform is not properly set for the session like in the case of ssh_login aux module.
git-svn-id: file:///home/svn/framework3/trunk@12797 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 12:46:27 +00:00
Carlos Perez 07158d11b4 slackware packages are not managed by rpm by default
git-svn-id: file:///home/svn/framework3/trunk@12796 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 11:52:36 +00:00
Carlos Perez 2473e9c754 Made the printing of the packages optional
git-svn-id: file:///home/svn/framework3/trunk@12795 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 03:37:37 +00:00
Carlos Perez 33d1e147a7 Typos and Keywords
git-svn-id: file:///home/svn/framework3/trunk@12794 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 03:27:17 +00:00
Carlos Perez 0e1bc2f4d6 Linux Post Module for enumerating installed packages.
git-svn-id: file:///home/svn/framework3/trunk@12793 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 03:25:17 +00:00
Jonathan Cran 9bdca1f6e2 oops, add a comma back
git-svn-id: file:///home/svn/framework3/trunk@12633 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-16 05:53:49 +00:00
Jonathan Cran 71f6f8c583 copypasta fix
git-svn-id: file:///home/svn/framework3/trunk@12631 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-16 04:07:18 +00:00
Carlos Perez 71dc6ba9d9 Needs more work removing for now
git-svn-id: file:///home/svn/framework3/trunk@12630 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-16 03:19:07 +00:00
Carlos Perez d50613deaa Keywords
git-svn-id: file:///home/svn/framework3/trunk@12618 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-15 18:12:29 +00:00
Carlos Perez 672c8961be OpenSSH Information Gather Module, tested against OSX and Linux
git-svn-id: file:///home/svn/framework3/trunk@12617 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-15 17:28:20 +00:00
David Rude 3c133a1415 added some more verbosity so its clear things are happening, moved the session.type check to be more immediate
git-svn-id: file:///home/svn/framework3/trunk@12594 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-12 17:56:18 +00:00
Wei Chen 90278f308b Fixed issue with 'break'. Added x64 support.
git-svn-id: file:///home/svn/framework3/trunk@12570 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-09 18:27:54 +00:00
David Rude 3b5cf3826a Added TheLightCosines OpenSSL ChangeCipherSpec DoS aux module
git-svn-id: file:///home/svn/framework3/trunk@12538 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-04 19:08:28 +00:00
Wei Chen eb2c0a5919 Fixed more typos
git-svn-id: file:///home/svn/framework3/trunk@12527 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-03 05:29:59 +00:00
Wei Chen c4e8889119 Fixed typo.
git-svn-id: file:///home/svn/framework3/trunk@12526 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-03 05:27:54 +00:00
Wei Chen c0baf731f8 Updated print_error() for sqlite3's rescue
git-svn-id: file:///home/svn/framework3/trunk@12524 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-03 05:23:51 +00:00
Wei Chen 352fc92539 Show OTR key and save it to disk
git-svn-id: file:///home/svn/framework3/trunk@12493 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-01 22:36:20 +00:00
Wei Chen 94832059e5 The path fix would work if I remembered to uncomment the code... geez.
git-svn-id: file:///home/svn/framework3/trunk@12487 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-01 00:32:17 +00:00
Wei Chen b763d66b39 Fixed two issues: NoMethodError undefined method `text' for nil:NilClass and The system cannot find the file specified.
git-svn-id: file:///home/svn/framework3/trunk@12486 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-01 00:20:57 +00:00
HD Moore d9bee35456 Handle cases where iTunes is not installed or the base user directory has been changed
git-svn-id: file:///home/svn/framework3/trunk@12468 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-29 16:10:29 +00:00
David Rude 5e374e1d36 Post module title changes for consistency
git-svn-id: file:///home/svn/framework3/trunk@12455 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-27 16:25:15 +00:00
Wei Chen 46c919cc8a Removed meetRequirements(). No need since it's already specified in SessionTypes.
git-svn-id: file:///home/svn/framework3/trunk@12454 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-27 15:48:35 +00:00
Wei Chen 2f6b941584 Fixed a bug with "TypeError can't convert nil into String"
git-svn-id: file:///home/svn/framework3/trunk@12453 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-27 15:41:37 +00:00
HD Moore 95e9153b33 Move to Windows to reflect the removal of the OS X target
git-svn-id: file:///home/svn/framework3/trunk@12452 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-27 15:29:56 +00:00
James Lee dbf2f5a4af add a post module for stealing obfuscated winscp stored passwords, fixes #4210, thanks TheLightCosine!
git-svn-id: file:///home/svn/framework3/trunk@12449 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-26 23:55:56 +00:00