Joshua Drake
|
11bbbbd38f
|
add exploit module for cve-2009-3837 from dookie
git-svn-id: file:///home/svn/framework3/trunk@7802 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 17:34:58 +00:00 |
HD Moore
|
5ef9a1c040
|
Wipe the headers before reparsing
git-svn-id: file:///home/svn/framework3/trunk@7801 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 17:04:52 +00:00 |
|
HD Moore
|
1c98368351
|
Loop until a non-100 is found or the resp parser fails
git-svn-id: file:///home/svn/framework3/trunk@7800 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 16:57:21 +00:00 |
|
HD Moore
|
006d5d51fc
|
Fixes #674 by adding 100-continue support
git-svn-id: file:///home/svn/framework3/trunk@7799 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 16:54:27 +00:00 |
|
HD Moore
|
afa5b46674
|
Default the minrank for autopwn, otherwise this prevents usage from being shown when no args are present. Also breaks -t -p when no rank is specified
git-svn-id: file:///home/svn/framework3/trunk@7798 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 15:12:59 +00:00 |
|
Joshua Drake
|
6c98f3c03d
|
add exploit module for cve-2009-1394
git-svn-id: file:///home/svn/framework3/trunk@7797 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 08:24:37 +00:00 |
|
HD Moore
|
75c90b8ef9
|
Handle Errno::EINTR gracefully
git-svn-id: file:///home/svn/framework3/trunk@7796 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 06:13:14 +00:00 |
|
HD Moore
|
d2694ce5b9
|
Ignore errors on shutdown for the relay
git-svn-id: file:///home/svn/framework3/trunk@7795 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 06:09:15 +00:00 |
|
HD Moore
|
2a5a5207f5
|
Switch trunk to 3.3.2-testing until we cut this
git-svn-id: file:///home/svn/framework3/trunk@7794 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 05:48:12 +00:00 |
|
HD Moore
|
6da0fda5ed
|
Updated meterpreter binaries with a slight change to the thread schedule (solves a looping problem when the socket is dead).
git-svn-id: file:///home/svn/framework3/trunk@7793 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 05:42:47 +00:00 |
|
HD Moore
|
e731426666
|
Fixes #662. The socket pivoting is still not perfect, but this goes a long way
git-svn-id: file:///home/svn/framework3/trunk@7792 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 05:40:26 +00:00 |
|
Joshua Drake
|
4cb050010b
|
add exploitability detection (by trying %n)
git-svn-id: file:///home/svn/framework3/trunk@7791 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 23:53:26 +00:00 |
James Lee
|
5ddfffc94f
|
only accept one connection for bind_perl shells. fixes 669
git-svn-id: file:///home/svn/framework3/trunk@7790 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 23:49:50 +00:00 |
Mario Ceballos
|
c1c06d6ea1
|
adds ranking.. more aux. modules need this to be listed.
git-svn-id: file:///home/svn/framework3/trunk@7789 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 23:29:53 +00:00 |
|
Joshua Drake
|
215879334a
|
minor tweaks to targets
git-svn-id: file:///home/svn/framework3/trunk@7788 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 23:19:19 +00:00 |
|
James Lee
|
8d25dc00bc
|
bail if MinimumRank is invalid
git-svn-id: file:///home/svn/framework3/trunk@7787 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 23:07:58 +00:00 |
|
James Lee
|
084a10ded5
|
remove a debug print and deal with minrank being absent
git-svn-id: file:///home/svn/framework3/trunk@7786 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 22:42:06 +00:00 |
|
Joshua Drake
|
318750c68c
|
oops, forgot to update fmtstr_count_printed
git-svn-id: file:///home/svn/framework3/trunk@7785 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 22:37:34 +00:00 |
|
Joshua Drake
|
d56daab7d8
|
little comment heh
git-svn-id: file:///home/svn/framework3/trunk@7784 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 22:27:11 +00:00 |
|
James Lee
|
6665669b47
|
use range_walker to allow nmap notation in -I and -E arguments
git-svn-id: file:///home/svn/framework3/trunk@7783 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 21:52:03 +00:00 |
|
Joshua Drake
|
164dd4201a
|
updated badchars, rh6.2 target, added %8x detection check
git-svn-id: file:///home/svn/framework3/trunk@7782 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 21:51:46 +00:00 |
|
Joshua Drake
|
4a363329cb
|
fixed generating fmts from buffers with small value delta (eg \x02\x01\x03\x01)
git-svn-id: file:///home/svn/framework3/trunk@7781 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 21:50:17 +00:00 |
|
James Lee
|
683edd1462
|
add test to make sure num_ips == length
git-svn-id: file:///home/svn/framework3/trunk@7780 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 21:31:29 +00:00 |
|
James Lee
|
e0bd6dd6ed
|
don't bother checking for an address if our range is empty
git-svn-id: file:///home/svn/framework3/trunk@7779 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 21:28:44 +00:00 |
|
James Lee
|
48c8b35b5a
|
single ip addresses in the new rangewalker are separated by spaces, not commas. fixes 666
git-svn-id: file:///home/svn/framework3/trunk@7778 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 19:17:42 +00:00 |
Mike Smith
|
529b31e502
|
We don't want an id column in vulns_refs
git-svn-id: file:///home/svn/framework3/trunk@7777 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 18:58:00 +00:00 |
|
HD Moore
|
4fcdceccb7
|
No ruby access on the common target
git-svn-id: file:///home/svn/framework3/trunk@7776 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 15:13:35 +00:00 |
|
HD Moore
|
3c08bc0c80
|
Rename and reference update from the microsoft patch
git-svn-id: file:///home/svn/framework3/trunk@7775 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 15:06:26 +00:00 |
|
HD Moore
|
8a784339c4
|
Remove a debug print
git-svn-id: file:///home/svn/framework3/trunk@7774 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 14:00:21 +00:00 |
|
HD Moore
|
898c8655ff
|
Default rank to manual for the search command
git-svn-id: file:///home/svn/framework3/trunk@7773 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 13:57:46 +00:00 |
|
HD Moore
|
ba1b032207
|
Adds coverage for the QTSS metachar injection bug
git-svn-id: file:///home/svn/framework3/trunk@7772 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 13:23:59 +00:00 |
|
Joshua Drake
|
88de26e46c
|
re-enable pdf obfuscation
git-svn-id: file:///home/svn/framework3/trunk@7771 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 06:19:32 +00:00 |
|
James Lee
|
961e70fc34
|
add -f flag to exploit command to force running despite a conflicting MinimumRank value. fixes 628
git-svn-id: file:///home/svn/framework3/trunk@7770 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 02:49:27 +00:00 |
|
Joshua Drake
|
e2f70c8928
|
detect fmt str specifier capabilities, rework stack dumping
git-svn-id: file:///home/svn/framework3/trunk@7769 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 02:19:07 +00:00 |
|
Joshua Drake
|
061b4a36cf
|
add stack reading and detection for dpa/fpu fmt specifiers
git-svn-id: file:///home/svn/framework3/trunk@7768 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 02:18:12 +00:00 |
|
James Lee
|
6989949720
|
adds a global option, MinimumRank, which db_autopwn now checks to prevent running exploits below a certain rank. fixes #625, see #628
git-svn-id: file:///home/svn/framework3/trunk@7767 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 01:54:20 +00:00 |
|
HD Moore
|
4657436e1d
|
See #609. Force the EXITFUNC to process for persistence.rb's handler
git-svn-id: file:///home/svn/framework3/trunk@7766 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 00:18:43 +00:00 |
|
Joshua Drake
|
1fec10cb44
|
finish and test target for redhat 6.2
git-svn-id: file:///home/svn/framework3/trunk@7765 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 23:52:11 +00:00 |
|
Joshua Drake
|
f383949540
|
fix 1.9.1 compatability
git-svn-id: file:///home/svn/framework3/trunk@7764 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 23:50:29 +00:00 |
|
Joshua Drake
|
9abe0c0b03
|
added support for direct parameter access
git-svn-id: file:///home/svn/framework3/trunk@7763 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 23:50:02 +00:00 |
|
Joshua Drake
|
4bcc8a93a3
|
attempt to improve reliability of u3d pdf exploits
git-svn-id: file:///home/svn/framework3/trunk@7762 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 22:08:32 +00:00 |
|
HD Moore
|
ff19b649f3
|
See #662. This should fix most of the meterpreter-side issues with sockets, there is still a second piece of this which is unflushed data on the local forwards from the ruby code.
git-svn-id: file:///home/svn/framework3/trunk@7761 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 22:08:06 +00:00 |
|
Joshua Drake
|
87c85b5176
|
removed executable generation routines from Rex::Text (use Msf::Util::EXE), Fixes #660
git-svn-id: file:///home/svn/framework3/trunk@7760 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 21:24:45 +00:00 |
|
Joshua Drake
|
9b4f521df5
|
two more similar exploit modules, cleaned up naming
git-svn-id: file:///home/svn/framework3/trunk@7759 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 20:20:30 +00:00 |
|
Joshua Drake
|
9da59988a6
|
updated disclosure date
git-svn-id: file:///home/svn/framework3/trunk@7758 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 20:10:17 +00:00 |
|
Joshua Drake
|
5995ddca97
|
reduce ranking due to egghunter instability
git-svn-id: file:///home/svn/framework3/trunk@7757 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 19:53:11 +00:00 |
|
Joshua Drake
|
cb5d02af20
|
remove debug code
git-svn-id: file:///home/svn/framework3/trunk@7756 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 19:52:15 +00:00 |
|
Joshua Drake
|
6ae2293a79
|
add exploit module for cve-2009-0133
git-svn-id: file:///home/svn/framework3/trunk@7755 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 19:50:21 +00:00 |
|
Joshua Drake
|
bfa405cb2b
|
add exploit module for cve-2009-0133
git-svn-id: file:///home/svn/framework3/trunk@7754 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 19:50:00 +00:00 |
|
HD Moore
|
54c10c0c3d
|
Fixes #623 and fixes #622, implements a number of changes to the core channel dispatch code, sets timeouts on unmatched responses, and handles tcp relay writes with a threaded/timeout wrapper to avoid delays.
git-svn-id: file:///home/svn/framework3/trunk@7753 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 18:32:26 +00:00 |