HD Moore
|
3250ab13e0
|
Add a parser for Retina XML
git-svn-id: file:///home/svn/framework3/trunk@10582 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-07 02:33:57 +00:00 |
|
HD Moore
|
b98732ae0a
|
This change allows the auth modules to automatically remove their input files when requested. This makes scripting with temporary files much easier
git-svn-id: file:///home/svn/framework3/trunk@10576 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-06 21:04:16 +00:00 |
|
HD Moore
|
cbcebc0cc8
|
Bug fixes to the importer
git-svn-id: file:///home/svn/framework3/trunk@10575 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-06 20:24:26 +00:00 |
|
HD Moore
|
af28507c36
|
Cleaner regex
git-svn-id: file:///home/svn/framework3/trunk@10571 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-06 18:10:39 +00:00 |
|
HD Moore
|
222c418fee
|
Accept MetasploitV4 as well as a base tag, preparing for 3.5.0
git-svn-id: file:///home/svn/framework3/trunk@10570 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-06 18:09:06 +00:00 |
|
HD Moore
|
0127137151
|
Reorganize methods and add recognition of v4
git-svn-id: file:///home/svn/framework3/trunk@10569 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-06 18:00:21 +00:00 |
|
HD Moore
|
683a82bfee
|
Switch out msfx/msfe terminology for just msf
git-svn-id: file:///home/svn/framework3/trunk@10565 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-06 15:55:28 +00:00 |
Tod Beardsley
|
e492136567
|
Handle slightly malformed MSFX zip imports. This introduces the nils_for_nulls function that basically takes any instance of NULL in the XML of an MSFX import and turns it into a proper Ruby nil. This helps avoid a lot of problems for reports that were created with NULLs accidentally included.
git-svn-id: file:///home/svn/framework3/trunk@10563 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-06 05:10:16 +00:00 |
|
Tod Beardsley
|
7041102df7
|
Fixes #2848, uses the half-guessing method of figuring out the "right" protocol.
git-svn-id: file:///home/svn/framework3/trunk@10562 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-06 04:18:01 +00:00 |
|
HD Moore
|
1b4190df38
|
This commit brings configurability to TCP Servers as to which Comm they use. The ReverseListenerComm and ListenerComm advanced options can be used to prevent a given listener from trying to bind a listener over the pivoted routed. This is useful for a number of situations and not possible to configure explicitly before.
git-svn-id: file:///home/svn/framework3/trunk@10534 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-04 02:11:22 +00:00 |
|
HD Moore
|
02b1979c27
|
Tweaks for vuln reporting
git-svn-id: file:///home/svn/framework3/trunk@10530 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-03 01:04:33 +00:00 |
|
HD Moore
|
6319d95456
|
Actually store the additional fields
git-svn-id: file:///home/svn/framework3/trunk@10529 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-03 00:45:44 +00:00 |
|
HD Moore
|
ddcb07bf97
|
Typos
git-svn-id: file:///home/svn/framework3/trunk@10528 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-03 00:23:18 +00:00 |
|
HD Moore
|
8a567dd3a8
|
Add query to web_form/web_path
git-svn-id: file:///home/svn/framework3/trunk@10526 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-02 22:55:54 +00:00 |
|
HD Moore
|
5b7296931d
|
This patch merges in support for four new database tables focused on tracking web application information along with a tweak to the task manager code to allow tasks to be run from within tasks without fear of deadlock.
git-svn-id: file:///home/svn/framework3/trunk@10523 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-02 18:48:29 +00:00 |
|
Tod Beardsley
|
6743dbfc62
|
Actually respect the allow_yaml status for imports on everything that might be serialized, and also streamlines unserialized_object a little.
git-svn-id: file:///home/svn/framework3/trunk@10505 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-28 17:52:48 +00:00 |
|
Tod Beardsley
|
ddb2f71674
|
Ensuring binary file reads, always.
git-svn-id: file:///home/svn/framework3/trunk@10501 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-28 03:13:10 +00:00 |
|
Tod Beardsley
|
dc79d360ac
|
Quick fix to avoid dying on badly formatted imported data (looks like a Nessus import problem, actually)
git-svn-id: file:///home/svn/framework3/trunk@10499 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-27 23:06:13 +00:00 |
|
Tod Beardsley
|
331f7a7b26
|
Handles REXML::ParseErrors without making a terrible mess.
git-svn-id: file:///home/svn/framework3/trunk@10497 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-27 15:40:33 +00:00 |
James Lee
|
7b2a29365f
|
fix report_note taking a Service obj in opts[:service]
git-svn-id: file:///home/svn/framework3/trunk@10493 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-27 03:52:39 +00:00 |
|
James Lee
|
478a15f827
|
doc the use of :name for services
git-svn-id: file:///home/svn/framework3/trunk@10465 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-24 21:25:18 +00:00 |
|
James Lee
|
7878273131
|
try to preserve the service name in the case of incorrect report_note usage
git-svn-id: file:///home/svn/framework3/trunk@10464 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-24 21:11:36 +00:00 |
|
Tod Beardsley
|
c00d56d560
|
Deal with services a little more intelligently if they're not already there when you report a note.
git-svn-id: file:///home/svn/framework3/trunk@10463 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-24 20:51:38 +00:00 |
|
Tod Beardsley
|
09cab24dbf
|
Report_note no longer tries to re-report a service name; it just re-reports port numbers and protocols. This is to avoid unidentifying identified services.
git-svn-id: file:///home/svn/framework3/trunk@10458 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-24 17:52:25 +00:00 |
|
James Lee
|
2a58f7433e
|
revamp report_note to compare data in ruby instead of SQL which was causing headaches with serialization
git-svn-id: file:///home/svn/framework3/trunk@10432 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-22 05:37:21 +00:00 |
|
James Lee
|
711fe18ac2
|
typo fix
git-svn-id: file:///home/svn/framework3/trunk@10379 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-19 23:22:32 +00:00 |
|
James Lee
|
940a096769
|
typo fix
git-svn-id: file:///home/svn/framework3/trunk@10378 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-19 23:13:02 +00:00 |
|
James Lee
|
5f0cc946b1
|
document report_note a little better, and modify several modules to use it correctly. fixes #2568
git-svn-id: file:///home/svn/framework3/trunk@10377 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-19 22:25:56 +00:00 |
|
Tod Beardsley
|
99e2218d13
|
Be a little more careful with credential sources and update new services in the current workspace.
git-svn-id: file:///home/svn/framework3/trunk@10339 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-16 19:45:51 +00:00 |
Joshua Drake
|
57dac0dbf8
|
remove newlines when importing from an ip list
git-svn-id: file:///home/svn/framework3/trunk@10230 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-03 15:04:09 +00:00 |
|
Tod Beardsley
|
b65be82387
|
Handle updating the updated_at time for just-checked credentials better.
git-svn-id: file:///home/svn/framework3/trunk@10213 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-01 22:06:52 +00:00 |
|
Tod Beardsley
|
21540e22ed
|
Checking in missing reporting stuff for bruteforce. Namely, report_exploit, also changes ftp's pw type to just "password" and re-opens newly verified sessions.
git-svn-id: file:///home/svn/framework3/trunk@10205 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-31 20:33:16 +00:00 |
|
Tod Beardsley
|
1db9d8eb01
|
Fixes #2444. Adds an ExploitedHost table, adds the db_exploited command, adds the report_exploit() function.
Tested with meterpreter, shell, and clientside exploit sessions.
git-svn-id: file:///home/svn/framework3/trunk@10130 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-24 21:57:04 +00:00 |
|
Tod Beardsley
|
acef967d5a
|
Updating importing to deal with importing credentials from Metasploit Express XML.
git-svn-id: file:///home/svn/framework3/trunk@10111 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-23 17:45:36 +00:00 |
|
Tod Beardsley
|
d0ea2737c5
|
Don't overwrite source_id just because we don't have one.
git-svn-id: file:///home/svn/framework3/trunk@10067 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-19 23:19:34 +00:00 |
|
Tod Beardsley
|
6d6a547b34
|
Fixes #2412. Adds a creds table, modifies the db_report_auth API, adds the db_creds and db_add_cred commands.
git-svn-id: file:///home/svn/framework3/trunk@10034 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-18 00:58:20 +00:00 |
|
Tod Beardsley
|
01c1d1d6df
|
Makes sure that Qualys reports only try to report sensible data -- fixes DB complaints about null in non-null contrained columns.
git-svn-id: file:///home/svn/framework3/trunk@9707 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 14:53:16 +00:00 |
|
Tod Beardsley
|
dffd8c0c97
|
Deal with marshaled data for msfx imports.
git-svn-id: file:///home/svn/framework3/trunk@9699 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 00:28:34 +00:00 |
|
HD Moore
|
d5e9453a9c
|
Allow yaml for v1/v2, not for v3, tested
git-svn-id: file:///home/svn/framework3/trunk@9691 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-06 19:33:27 +00:00 |
|
HD Moore
|
ef3dbf3841
|
Workaround for Ruby 1.8's fragile Marshal code
git-svn-id: file:///home/svn/framework3/trunk@9689 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-06 18:35:49 +00:00 |
|
HD Moore
|
8f967af2f3
|
Dont fallback to yaml for service.info, its either base64 or a string
git-svn-id: file:///home/svn/framework3/trunk@9686 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-06 18:17:14 +00:00 |
|
HD Moore
|
7847a645cd
|
Remove the 'delete'
git-svn-id: file:///home/svn/framework3/trunk@9681 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-06 16:44:04 +00:00 |
|
HD Moore
|
fbdf5dca3c
|
Try the three-way fallback for serialized fields (service.info and note.data)
git-svn-id: file:///home/svn/framework3/trunk@9680 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-06 16:33:27 +00:00 |
|
HD Moore
|
0d40a69f16
|
Dont mangle the service.info field this way
git-svn-id: file:///home/svn/framework3/trunk@9678 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-06 16:10:05 +00:00 |
|
Tod Beardsley
|
03918eeeda
|
Adds an explicit function for import file validation acceptability.
git-svn-id: file:///home/svn/framework3/trunk@9636 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-06-30 15:28:49 +00:00 |
|
Tod Beardsley
|
7e247e2f29
|
db migration to convert services info from varchar(65535) to text, and save info as a yaml'ed form in order to preserve funny characters.
git-svn-id: file:///home/svn/framework3/trunk@9633 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-06-28 22:42:50 +00:00 |
|
Tod Beardsley
|
4953b3b69f
|
If the :fix_services option is used for nmap, actually fix the services, and in addition, skip hosts which only present filtered ports.
git-svn-id: file:///home/svn/framework3/trunk@9585 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-06-22 22:37:14 +00:00 |
|
Tod Beardsley
|
3591143f3a
|
When importing MSFX data, just report unique collateral once.
git-svn-id: file:///home/svn/framework3/trunk@9584 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-06-22 20:30:43 +00:00 |
|
Tod Beardsley
|
50c59a9ab1
|
Skip nmap port imports where the result is unknown and the target is really localhost.
git-svn-id: file:///home/svn/framework3/trunk@9553 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-06-18 03:03:11 +00:00 |
|
Tod Beardsley
|
9924a8d40e
|
Incorporates a service name map that makes nmap scanning a little more useful for MSFX out of the gate.
git-svn-id: file:///home/svn/framework3/trunk@9536 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-06-16 18:22:42 +00:00 |