0b71dc5d04
A few updates to add NT Trans2 secondary requests, fix an authentication issue, and support a new denial of service module
...
git-svn-id: file:///home/svn/framework3/trunk@3885 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-14 05:41:54 +00:00
d11604cca9
filter out privileged payloads used with non-privileged exploits
...
git-svn-id: file:///home/svn/framework3/trunk@3869 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-12 05:58:07 +00:00
3e69f46a3a
added support for manual ranking
...
git-svn-id: file:///home/svn/framework3/trunk@3866 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-12 05:34:58 +00:00
47039ff3fa
First round of bugfixes for encoders. Alphanumeric encoders no longer default the BufferRegister option, since this can lead to non-compatible exploits falling through to these encoders, selecting them, and then crashing. The new method uses a dynamic (not quite poly) geteip generator, that while not yet alphanumeric compatible, it handles most of the known use cases. Remaining items:
...
1) Figure out how to handle unicode geteip (unicode encoded, alphanum probably)
2) Add keys to the unicode payloads to force a corresponding keyu on the exploit side to enable
git-svn-id: file:///home/svn/framework3/trunk@3863 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 05:10:48 +00:00
7a051c8ee1
bidirectional pipe
...
git-svn-id: file:///home/svn/framework3/trunk@3862 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 02:21:23 +00:00
a3f620b224
buffered input
...
git-svn-id: file:///home/svn/framework3/trunk@3861 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 02:21:12 +00:00
06aca0378e
changes to start supporting new msfweb
...
git-svn-id: file:///home/svn/framework3/trunk@3860 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 01:29:05 +00:00
e8d45bbf1b
changes to start supporting new msfweb
...
git-svn-id: file:///home/svn/framework3/trunk@3859 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 01:28:59 +00:00
366dea259c
Add smtp mixin for exchange exploit.
...
git-svn-id: file:///home/svn/framework3/trunk@3855 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-06 17:44:12 +00:00
b0ba01973c
fix for calling stat remotely instead of locally
...
git-svn-id: file:///home/svn/framework3/trunk@3854 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-05 18:34:52 +00:00
fb6f80dd5b
Bugfix
...
git-svn-id: file:///home/svn/framework3/trunk@3853 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-02 06:49:06 +00:00
be356d7505
Updated to reflect the new license of Rex
...
git-svn-id: file:///home/svn/framework3/trunk@3850 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-01 15:50:10 +00:00
860c016887
fix for relative issue
...
git-svn-id: file:///home/svn/framework3/trunk@3849 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-01 00:57:31 +00:00
1583f4e276
fix to not attempt to output text if there is no output handle
...
git-svn-id: file:///home/svn/framework3/trunk@3848 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-29 00:48:33 +00:00
904449b923
Post-Beta2 bugfix for 'show payloads' and the new generic payload system.
...
git-svn-id: file:///home/svn/framework3/trunk@3847 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-28 05:45:36 +00:00
7a0c8d2c8d
Cleanup
...
git-svn-id: file:///home/svn/framework3/trunk@3846 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-28 00:24:34 +00:00
e7ffef974c
fix to make it so there aren't errors with Msf::Payload::Generic
...
git-svn-id: file:///home/svn/framework3/trunk@3845 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-27 06:56:32 +00:00
ea06abe5bb
support for generic payloads
...
git-svn-id: file:///home/svn/framework3/trunk@3843 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-26 02:13:25 +00:00
190922400e
fixed up some exception issues in standalone meterp. Should eventually stop catching ::Exception since its too vague
...
git-svn-id: file:///home/svn/framework3/trunk@3842 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-24 22:54:06 +00:00
66b99d69ae
more fixes for the meterpreter pivoting issues
...
git-svn-id: file:///home/svn/framework3/trunk@3840 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-22 07:19:59 +00:00
34ec11dfed
I have been careless with my sword.
...
git-svn-id: file:///home/svn/framework3/trunk@3839 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 23:08:36 +00:00
d42381f3e1
I have been careless with my sword.
...
git-svn-id: file:///home/svn/framework3/trunk@3838 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 23:03:58 +00:00
d89ac6478c
more meterp decoupling
...
git-svn-id: file:///home/svn/framework3/trunk@3836 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 22:50:27 +00:00
06e9f91b28
Make it so you can require meterpreter without having to require rex.rb, steps towards a standalone meterp
...
git-svn-id: file:///home/svn/framework3/trunk@3835 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 21:35:03 +00:00
cc6900d2ec
fix to bind_tcp handler where it wouldn't use the proper comm
...
git-svn-id: file:///home/svn/framework3/trunk@3834 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-17 01:57:52 +00:00
d8b2f95178
auto load stdapi before interact, implement type? interface
...
git-svn-id: file:///home/svn/framework3/trunk@3833 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-15 04:07:25 +00:00
a724d42aa0
added mcafee mcsubmgr exploit, added functional avoid utf8 encoder
...
git-svn-id: file:///home/svn/framework3/trunk@3830 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-14 08:55:37 +00:00
90fc7fa94e
Abstracted the RHOST references from inside the mixins.
...
Added a mssql_ping_parse method to the mssql mixin
git-svn-id: file:///home/svn/framework3/trunk@3827 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-13 18:03:28 +00:00
d3b9cf1b20
Added rerun command to auxiliary
...
Fixed range_walker to allow multiple ranges
Version scanner now mostly works
git-svn-id: file:///home/svn/framework3/trunk@3824 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-13 00:08:40 +00:00
845f80af59
Bug fix to AddressRange option
...
Reworked TCP/UDP exploit mixins to allow the source of rhost/rport/etc to be overloaded
Reworked Scanner mixin to deregister RHOST and overflow self.rhost
git-svn-id: file:///home/svn/framework3/trunk@3823 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-12 23:08:20 +00:00
651a1a7965
Bug fix to support NT 4.0
...
git-svn-id: file:///home/svn/framework3/trunk@3822 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-12 23:07:25 +00:00
c5542fd347
Major reworking of the recon stuff, there is a new mixin called Auxiliary::Scanner that
...
supports per-range, per-host, and per-batch requests. The reporting stuff has been moved
into a new mixin for it. The old recon stuff was pulled out and sample modules for the
scanner mixin were added. Almost time to re-import skape's old recon foo using Scanner :-)
git-svn-id: file:///home/svn/framework3/trunk@3820 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-12 08:31:38 +00:00
7bd26e4925
fixed bug in service manager hardcore alias, new passivex dll/proj files
...
git-svn-id: file:///home/svn/framework3/trunk@3807 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-08 03:29:26 +00:00
2c2af2b1bd
fix typo
...
git-svn-id: file:///home/svn/framework3/trunk@3804 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-03 05:02:28 +00:00
25c08bb206
Bug fixes, list of known bugs, final prep for beta-1
...
git-svn-id: file:///home/svn/framework3/trunk@3803 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-02 06:30:36 +00:00
cac9561b61
Bug fix for previous workaround
...
git-svn-id: file:///home/svn/framework3/trunk@3799 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-01 01:50:26 +00:00
4ef104e869
Readline fix
...
git-svn-id: file:///home/svn/framework3/trunk@3798 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 20:00:20 +00:00
f8897ac164
stdio doesn't support readline
...
git-svn-id: file:///home/svn/framework3/trunk@3797 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 19:59:29 +00:00
8006479e6b
Fix for OS X socket bugs
...
git-svn-id: file:///home/svn/framework3/trunk@3796 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 19:22:21 +00:00
023b63bff8
potential fix for msfpescan issue
...
git-svn-id: file:///home/svn/framework3/trunk@3793 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 13:44:58 +00:00
c36519cfbf
Fix bind_Tcp being killed too early
...
git-svn-id: file:///home/svn/framework3/trunk@3792 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 06:58:29 +00:00
377e606929
Added javascript and win32 pe output formats
...
git-svn-id: file:///home/svn/framework3/trunk@3787 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 04:05:20 +00:00
e55cff59e1
Fixed Rex::Arch.endian()
...
Added Rex::Text.to_unescape()
Added two mozilla exploits
Fixed firefox exploit to use new api
git-svn-id: file:///home/svn/framework3/trunk@3784 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 02:50:41 +00:00
7594389a96
added midstager support for staging over-sized payloads
...
git-svn-id: file:///home/svn/framework3/trunk@3780 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 22:49:19 +00:00
164f34cc80
Massive speed improvements to set PAYLOAD.
...
Tab completion for exploit names works for demand-loaded modules
git-svn-id: file:///home/svn/framework3/trunk@3779 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 22:28:47 +00:00
d0bc17f17a
Minor updates
...
git-svn-id: file:///home/svn/framework3/trunk@3778 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 21:31:02 +00:00
144249b34d
bump thread priority in encoded payload generation to fix thread starvation issues
...
git-svn-id: file:///home/svn/framework3/trunk@3777 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 18:45:36 +00:00
21f4a10d32
the File.open's were correct, they needed to use the local File class and not Rex::Post::File
...
git-svn-id: file:///home/svn/framework3/trunk@3775 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 17:13:06 +00:00
a2592959c3
Readline mode disabledby defualt for interactive sessios
...
Fixed an issue with exploit.rb directly running a session command after the session command had been renamed
git-svn-id: file:///home/svn/framework3/trunk@3774 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-29 23:01:38 +00:00
817c4c189f
Timeouts added for handlers
...
git-svn-id: file:///home/svn/framework3/trunk@3773 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-29 22:37:39 +00:00
c081d7b2b1
Fixed continuaion across trap error, minor tweaks under readline
...
git-svn-id: file:///home/svn/framework3/trunk@3772 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-29 20:03:05 +00:00
651508ea46
ar4 -> b1
...
git-svn-id: file:///home/svn/framework3/trunk@3768 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 22:46:09 +00:00
6677b4ba71
Minor bug fixes to remove extra 'p' calls
...
Rewrite of stdio/readline to support Windows
git-svn-id: file:///home/svn/framework3/trunk@3766 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 22:28:19 +00:00
eb4b7ad1ad
No longer used
...
git-svn-id: file:///home/svn/framework3/trunk@3764 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 20:56:23 +00:00
b4a0f34021
Using readline5 solves all hangs
...
git-svn-id: file:///home/svn/framework3/trunk@3763 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 05:35:29 +00:00
eeb894b70c
Change from stdin to readconsoleinput
...
git-svn-id: file:///home/svn/framework3/trunk@3762 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 05:03:56 +00:00
cb933d9b03
Test
...
git-svn-id: file:///home/svn/framework3/trunk@3761 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 04:31:36 +00:00
edb1f1a7ba
IT WORKS!!!!
...
git-svn-id: file:///home/svn/framework3/trunk@3759 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 04:16:39 +00:00
a021982e03
Enabled patched readline hackery
...
git-svn-id: file:///home/svn/framework3/trunk@3757 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 03:39:27 +00:00
db8c76f679
Various hacks for win32 mode
...
git-svn-id: file:///home/svn/framework3/trunk@3756 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 00:59:00 +00:00
5b319613ab
* add html encoding
...
git-svn-id: file:///home/svn/framework3/trunk@3755 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-24 19:25:59 +00:00
1a7ba78dc8
Removed a dumb debugging line that was accidentally comitted
...
git-svn-id: file:///home/svn/framework3/trunk@3752 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-20 04:43:52 +00:00
5c142b2059
Random fixes for warntings
...
git-svn-id: file:///home/svn/framework3/trunk@3750 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-19 07:24:47 +00:00
f95d4174de
BLARGGGG. Actually remove the null terminating byte (instead of returning the same string, bug). Another bug treating all registry keys that are a string as a dword...
...
git-svn-id: file:///home/svn/framework3/trunk@3749 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 20:37:38 +00:00
41890a86f2
use loop do instead of while 1 (ruby warning, literal in condition)
...
git-svn-id: file:///home/svn/framework3/trunk@3748 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:34:15 +00:00
df32aedf44
added parens to fix precedence/void context bug
...
git-svn-id: file:///home/svn/framework3/trunk@3747 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:32:09 +00:00
1af7c1dd23
Change to an assignment, ruby warnings about a void context (which is true)
...
git-svn-id: file:///home/svn/framework3/trunk@3746 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:30:43 +00:00
ff28b148d1
Fix from nico
...
git-svn-id: file:///home/svn/framework3/trunk@3745 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 01:32:21 +00:00
775183661d
Split trans into two routines, one of which sets maxparm/maxdata to zero, which is required to trigger the mailslot bug. Thanks Nico!
...
git-svn-id: file:///home/svn/framework3/trunk@3741 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-13 03:04:53 +00:00
35568b570a
Demo code added for MS06-035, mailslot write added to client.rb
...
git-svn-id: file:///home/svn/framework3/trunk@3740 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-11 20:02:45 +00:00
6e6b1bb2a7
* NDR has been moved, so remove the tests for now, removing the code later
...
git-svn-id: file:///home/svn/framework3/trunk@3734 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-28 13:35:19 +00:00
2b603db2bb
Merge from side branch to fix a bug
...
git-svn-id: file:///home/svn/framework3/trunk@3732 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-27 23:00:49 +00:00
d1efbad1e7
Minor updates
...
git-svn-id: file:///home/svn/framework3/trunk@3722 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-23 06:20:52 +00:00
b2895bec0d
Minor sanity checks added
...
git-svn-id: file:///home/svn/framework3/trunk@3697 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-17 17:36:19 +00:00
c6436b501a
IPv6 needed this fix as well
...
git-svn-id: file:///home/svn/incoming/trunk@3673 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-16 03:56:08 +00:00
3e37b5993f
fix unpack in from_sockaddr
...
git-svn-id: file:///home/svn/incoming/trunk@3672 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-16 03:11:53 +00:00
4f21fc4709
fix for pack crap
...
git-svn-id: file:///home/svn/incoming/trunk@3671 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-16 03:03:40 +00:00
3c2a871399
* fix dotted_ip? to be more strict
...
git-svn-id: file:///home/svn/incoming/trunk@3670 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 22:41:57 +00:00
e70b6f7cfe
* add dotted quad validation tests (to prove the current one is broken :P )
...
git-svn-id: file:///home/svn/incoming/trunk@3669 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 22:41:31 +00:00
54540f7eb7
fix regex
...
git-svn-id: file:///home/svn/incoming/trunk@3668 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 21:17:05 +00:00
e312f588a2
delay issue on win32 fixed by wrapping socket calls
...
git-svn-id: file:///home/svn/incoming/trunk@3667 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 20:53:20 +00:00
14dabc399e
Added DOS aux modules
...
Temporarily added RRAS_MAGIC
git-svn-id: file:///home/svn/incoming/trunk@3666 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 15:52:01 +00:00
f4545e50ed
fix comment
...
git-svn-id: file:///home/svn/incoming/trunk@3663 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-14 22:12:36 +00:00
d89f5fa9d1
* change where NDR is grabbed from
...
git-svn-id: file:///home/svn/incoming/trunk@3660 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-13 21:27:01 +00:00
9352454791
* add warnings, gonna go away soon
...
git-svn-id: file:///home/svn/incoming/trunk@3659 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-13 21:26:34 +00:00
1ec5099398
ndr is really just an encoding mechanism, and its not unique to DCERPC. so... move it here
...
git-svn-id: file:///home/svn/incoming/trunk@3658 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-13 20:33:01 +00:00
989fb37f33
Woops, forgot to keep it compatible with ipv4 :/
...
git-svn-id: file:///home/svn/incoming/trunk@3657 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 21:09:00 +00:00
ebf46cf535
Fixes for IPv6 compatibility
...
git-svn-id: file:///home/svn/incoming/trunk@3656 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 21:02:58 +00:00
1a61d3d2fb
changes to support native win32
...
git-svn-id: file:///home/svn/incoming/trunk@3654 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 20:53:15 +00:00
049b71e236
move username & password to the test suite config thingie
...
git-svn-id: file:///home/svn/incoming/trunk@3652 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-01 15:30:26 +00:00
ac2d76eb71
add default smb username & password for testing in the test config
...
git-svn-id: file:///home/svn/incoming/trunk@3651 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-01 15:29:39 +00:00
c9a3258f81
removing dup trans function with a no_response argument to trans
...
git-svn-id: file:///home/svn/incoming/trunk@3650 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-01 15:18:53 +00:00
09786d3eaa
tiny cleanups
...
git-svn-id: file:///home/svn/incoming/trunk@3649 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-31 21:49:46 +00:00
2f33ece43b
* cleanup extra whitespaces at the end of the line
...
* collect = good
git-svn-id: file:///home/svn/incoming/trunk@3648 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-30 17:18:27 +00:00
c3e0146443
Cleanups to SMB tests, minor fixes.
...
git-svn-id: file:///home/svn/incoming/trunk@3646 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-30 16:11:00 +00:00
7d0690ed2e
Cleanups in preparation for alpha-r4
...
git-svn-id: file:///home/svn/incoming/trunk@3645 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-30 15:44:48 +00:00
18bb4f9e6d
Fixed spaces before paranethesis issues in dcerpc/packet.rb
...
Fixed comment in smb/client.rb
Fixed ReadAndX in smb/client.rb
Updated ReadAndX struct in constants.rb
git-svn-id: file:///home/svn/incoming/trunk@3643 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-15 16:44:44 +00:00
43387ea793
register_options() always overrides the datastore
...
resolves the problem reported by Nicolas P.
git-svn-id: file:///home/svn/incoming/trunk@3642 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-11 16:11:06 +00:00
c02749067f
Add nonupper encoder, like nonalpha, but with badchar support instead of lowercase char range
...
git-svn-id: file:///home/svn/incoming/trunk@3641 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-08 15:04:50 +00:00
f959995bb1
Added the missing BSD license
...
git-svn-id: file:///home/svn/incoming/trunk@3638 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-06 17:13:22 +00:00
HD Moore
Matt Miller
pusscat
Spoon M