HD Moore
|
8a186921e7
|
Rebuilt Stephen's changes locally, including the sniffer extension
git-svn-id: file:///home/svn/framework3/trunk@7700 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-04 17:54:01 +00:00 |
Stephen Fewer
|
10d9105708
|
Initial commit of the multi-threaded meterpreter binaries. Only x86 today (minus the sniffer extension), x64 will follow next Monday.
git-svn-id: file:///home/svn/framework3/trunk@7699 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-04 17:39:32 +00:00 |
|
HD Moore
|
15dca2285f
|
Scrub the build path from the executable
git-svn-id: file:///home/svn/framework3/trunk@7636 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-28 22:55:54 +00:00 |
et
|
2db0b95f30
|
Remove table
git-svn-id: file:///home/svn/framework3/trunk@7630 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-26 20:53:46 +00:00 |
|
HD Moore
|
c44bcf3299
|
Add the stub site/dns lists for airpwn/dnspwn
git-svn-id: file:///home/svn/framework3/trunk@7491 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-13 19:17:14 +00:00 |
|
HD Moore
|
d892264ad7
|
Adds a DoS proof of concept for MS09-065 (EOT)
git-svn-id: file:///home/svn/framework3/trunk@7470 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-11 23:48:53 +00:00 |
|
Stephen Fewer
|
8c48a9a3f5
|
Commit the PassiveX DLL updated to build with Visual Studio C++ 2008. Removed some compiler warnings. Use VirtualProtect to make second stage RWX. Use WSASocketA() over socket() for second stage compatibility. Seems to now work with the shell stage (Tested on XPSP2/IE7) but still not working with meterpreter.
git-svn-id: file:///home/svn/framework3/trunk@7461 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-11 00:39:38 +00:00 |
|
HD Moore
|
5d997f1b26
|
Reset the manifest to normal privs, this was causing issues on Vista
git-svn-id: file:///home/svn/framework3/trunk@7406 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-08 03:40:47 +00:00 |
|
HD Moore
|
683e7f4650
|
Move hosts content into namelist, missed piece of #470
git-svn-id: file:///home/svn/framework3/trunk@7404 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-08 00:17:59 +00:00 |
|
HD Moore
|
9d7d1a0c1d
|
Fixes #470. Add the hostlist from fierce
git-svn-id: file:///home/svn/framework3/trunk@7402 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-08 00:10:13 +00:00 |
|
HD Moore
|
90808980c4
|
Fixes #474. Adds rack back into the vendor lib tree
git-svn-id: file:///home/svn/framework3/trunk@7373 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-06 14:44:24 +00:00 |
|
HD Moore
|
bec5fd192f
|
Updated template, this one plays with vista better
git-svn-id: file:///home/svn/framework3/trunk@7350 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-04 16:02:45 +00:00 |
|
HD Moore
|
58ac7efcfa
|
Fixes #457. Oddly enough, it was the nop sled garbling registers
git-svn-id: file:///home/svn/framework3/trunk@7342 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-03 23:50:32 +00:00 |
|
HD Moore
|
86bcabc411
|
Swizzle again.
git-svn-id: file:///home/svn/framework3/trunk@7336 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-03 19:55:42 +00:00 |
|
HD Moore
|
244f71601c
|
See #432. Remove unused components of the rails directory
git-svn-id: file:///home/svn/framework3/trunk@7332 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-03 16:54:33 +00:00 |
|
HD Moore
|
a8113889ed
|
Swizzle.
git-svn-id: file:///home/svn/framework3/trunk@7330 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-03 05:17:38 +00:00 |
|
HD Moore
|
80a262f991
|
Fixes #423. Using /s on a regex forces an encoding that cant match random binary gibberish
git-svn-id: file:///home/svn/framework3/trunk@7322 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-02 17:59:45 +00:00 |
|
Stephen Fewer
|
54f952129a
|
A fresh build of the x64 meterpreter and extensions to sync up with the recent changes with SSL in #7311 and the addition of the rm/del command from #7291
git-svn-id: file:///home/svn/framework3/trunk@7316 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-01 16:49:01 +00:00 |
|
HD Moore
|
21e82d8b69
|
This patch implements a much more flexible executable creation scheme at the cost of exe size. This also adds the "-x" option to msfencode, allowing the user to specify their own executable template for generation.
git-svn-id: file:///home/svn/framework3/trunk@7315 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-01 04:11:43 +00:00 |
|
HD Moore
|
2c15be2100
|
Make a copy of the win32 exe template
git-svn-id: file:///home/svn/framework3/trunk@7314 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-01 03:19:20 +00:00 |
|
HD Moore
|
e5e89906d0
|
Switch the meterpreter to SSLv3 and try to generate a slightly more realistic CN for the certificate. The goal is to work through a wider range of inline proxies.
git-svn-id: file:///home/svn/framework3/trunk@7311 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-31 20:44:23 +00:00 |
|
HD Moore
|
5234fe8ff8
|
Fixes 416. Adds the rm/del commands to meterpreter, fixes build problems triggered by the POSIX code merge
git-svn-id: file:///home/svn/framework3/trunk@7291 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-27 02:31:07 +00:00 |
|
HD Moore
|
e7638ef887
|
Fixes #397. Webrick requires :BindAddress but msfweb only passed in :Host, likely an api change was missed during a rails upgrade.
git-svn-id: file:///home/svn/framework3/trunk@7277 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-26 17:33:05 +00:00 |
|
HD Moore
|
e94360f7cf
|
The script now downloads this as needed
git-svn-id: file:///home/svn/framework3/trunk@7256 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-25 20:47:16 +00:00 |
|
HD Moore
|
9904861e94
|
Prevent rails from overloading require, another big speed boost from Yoann, and it looks like we can avoid it
git-svn-id: file:///home/svn/framework3/trunk@7247 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-25 17:07:48 +00:00 |
|
HD Moore
|
a6c738a89f
|
Add Milo's prefetch meterpreter script, see http://milo2012.wordpress.com/2009/10/22/meterpreter-script-for-prefetch-tool/
git-svn-id: file:///home/svn/framework3/trunk@7229 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-23 05:25:20 +00:00 |
|
cg
|
d565fef520
|
support for McKesson Horizon Clinical Infrastructure Oracle passwords for oracle login_brute http://seclists.org/fulldisclosure/2009/Oct/261
git-svn-id: file:///home/svn/framework3/trunk@7223 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-21 23:32:44 +00:00 |
|
HD Moore
|
8325b46694
|
Add Alexander Sotirov's metsvc binaries to the metepreter data directory
git-svn-id: file:///home/svn/framework3/trunk@7214 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-20 18:43:27 +00:00 |
|
HD Moore
|
ed021ad08d
|
Fixes #260. Remove the 'raw' option for payloads ni msfweb, this just causes encoding issues to pop up and isn't useful.
git-svn-id: file:///home/svn/framework3/trunk@7174 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-17 06:09:59 +00:00 |
|
HD Moore
|
5f57666f44
|
Woops! Commit the h2b script needed for mssql_payload
git-svn-id: file:///home/svn/framework3/trunk@7166 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-15 13:52:14 +00:00 |
|
et
|
18b340a8c3
|
Uppercase .cvs
git-svn-id: file:///home/svn/framework3/trunk@7138 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-11 16:11:51 +00:00 |
|
et
|
1655c43e28
|
Added .svn,.cvs to wmap dirs. Thanks mubix
git-svn-id: file:///home/svn/framework3/trunk@7137 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-11 14:57:44 +00:00 |
Mario Ceballos
|
acf828461c
|
updated oraenum.rb with an additional wordlist.
git-svn-id: file:///home/svn/framework3/trunk@7093 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-29 21:58:01 +00:00 |
|
HD Moore
|
bf5068f6b1
|
Fixes #288 and #320. This should fix the BSoD issue with the sniffer module (other than the mac filter change, this matches the vendor's example) and confirmed that the keyscan_dump fix works
git-svn-id: file:///home/svn/framework3/trunk@7066 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-26 16:26:05 +00:00 |
|
et
|
3993aaf79c
|
espia dll
git-svn-id: file:///home/svn/framework3/trunk@7064 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-26 04:25:37 +00:00 |
|
Stephen Fewer
|
1937839e79
|
Patch meterpreter's sysinfo command to resolve the system language and architecture.
git-svn-id: file:///home/svn/framework3/trunk@7028 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-10 13:09:48 +00:00 |
|
Stephen Fewer
|
36d60d5d12
|
Commit the x64 build of the meterpreter incognito extension.
git-svn-id: file:///home/svn/framework3/trunk@7009 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-07 09:25:25 +00:00 |
|
Stephen Fewer
|
ff9efacffa
|
Commit the x64 build of the meterpreter priv extension.
git-svn-id: file:///home/svn/framework3/trunk@7008 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-07 09:17:29 +00:00 |
|
Stephen Fewer
|
d584b4d314
|
Fixed migrate for x64 meterpreter (Tested on Win 7 and 2003).
git-svn-id: file:///home/svn/framework3/trunk@6999 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-04 01:40:48 +00:00 |
|
Stephen Fewer
|
8bb0efb97e
|
the first binaries for the windows x64 meterpreter. only metsrv and stdapi for now. source code to follow later.
git-svn-id: file:///home/svn/framework3/trunk@6998 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-03 17:50:41 +00:00 |
|
Stephen Fewer
|
1cb3c42589
|
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
git-svn-id: file:///home/svn/framework3/trunk@6989 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-31 10:28:26 +00:00 |
|
HD Moore
|
cf10a62dcc
|
Merge in the beginnings of x64 support from Stephen Fewer
git-svn-id: file:///home/svn/framework3/trunk@6972 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-23 23:47:33 +00:00 |
|
HD Moore
|
2247b483d9
|
Updated pSnuffle sniffer code from _MAX_
git-svn-id: file:///home/svn/framework3/trunk@6965 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-19 14:07:33 +00:00 |
|
HD Moore
|
da32f1bdea
|
Updated meterpreter code/binaries to scrub memory after use, works around Peter's memoryze signatures from BH/DC 2009
git-svn-id: file:///home/svn/framework3/trunk@6942 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-08 14:22:32 +00:00 |
|
HD Moore
|
ed02a67367
|
Updated to match the new hashing alg from Stephen Fewer
git-svn-id: file:///home/svn/framework3/trunk@6924 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-31 17:58:11 +00:00 |
|
HD Moore
|
5e74e80c89
|
Update psnuffle modules to use payload_data
git-svn-id: file:///home/svn/framework3/trunk@6899 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-25 14:11:55 +00:00 |
|
HD Moore
|
2a7467dd7f
|
Update the meterp binaries with clean builds from svn
git-svn-id: file:///home/svn/framework3/trunk@6888 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-24 04:01:26 +00:00 |
James Lee
|
739207bf4a
|
merge browser_autopwn back into trunk. This changes the database schema slightly, so make sure to db_destroy and db_create before using the database features.
git-svn-id: file:///home/svn/framework3/trunk@6873 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-22 20:14:35 +00:00 |
|
HD Moore
|
238f8d798f
|
Let vulns refer to hosts w/o a service, add a mac and address6 field to the hosts table.
git-svn-id: file:///home/svn/framework3/trunk@6866 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-22 13:25:33 +00:00 |
|
HD Moore
|
b3e36e5692
|
Reduce the size of the generated executables (works better with sqlmap and other tools that need small exes). Payloads are now capped at 2048 and the amount of random data appended to the exe has been reduced.
git-svn-id: file:///home/svn/framework3/trunk@6849 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-20 13:55:29 +00:00 |