Commit Graph

306 Commits (223d22c2e608b586bac806086afc549b020d21c0)

Author SHA1 Message Date
Matt Miller e22b38ee8c one other change
git-svn-id: file:///home/svn/incoming/trunk@3555 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 07:07:00 +00:00
Matt Miller 8b4ddab401 fix for module caching issues with rexploit
git-svn-id: file:///home/svn/incoming/trunk@3554 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 07:05:41 +00:00
HD Moore c0a8b6cf22 Fixed auxiliarytarget issue, updated frame.rb to handle on-demand module loading
git-svn-id: file:///home/svn/incoming/trunk@3551 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-04 16:46:15 +00:00
HD Moore 0b1d97f653 Committed
git-svn-id: file:///home/svn/incoming/trunk@3550 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-01 16:16:08 +00:00
bmc 29b182eea8 * expose junk uri end
* expose junk param start


git-svn-id: file:///home/svn/incoming/trunk@3547 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:59:41 +00:00
Matt Miller abd3c7a77f fix for module reloading with rexploit
git-svn-id: file:///home/svn/incoming/trunk@3542 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-24 15:47:10 +00:00
Matt Miller 7cc1d53247 more improvements to demand module loading, fixes some incorrect assumptions
git-svn-id: file:///home/svn/incoming/trunk@3539 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 17:58:21 +00:00
Matt Miller f796330f60 fix for warnings and file does not exist errors in demand loading
git-svn-id: file:///home/svn/incoming/trunk@3538 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 17:17:25 +00:00
Matt Miller 20550431d6 fix for error when exploit is removed
git-svn-id: file:///home/svn/incoming/trunk@3537 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 16:36:58 +00:00
Matt Miller 3a37749de6 support for demand-loading of modules to improve load speed, expect problems
git-svn-id: file:///home/svn/incoming/trunk@3534 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 03:10:58 +00:00
bmc 553144418a * two tiny optimizations:
* Platform is far more frequently the reason for skipping, so make that first.
  * compact!, the builtin for deleting nil entries in an array


git-svn-id: file:///home/svn/incoming/trunk@3532 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-19 04:09:18 +00:00
bmc a73f024ce1 * less duplication, since the common case is just fine for all but a few instances
git-svn-id: file:///home/svn/incoming/trunk@3531 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-19 03:58:18 +00:00
vlad902 f2ab112647 Add verbosity flag (except for errors.)
git-svn-id: file:///home/svn/incoming/trunk@3530 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-18 17:12:25 +00:00
bmc 882e8601d3 * use utf-7 'mode' instead of utf-7
git-svn-id: file:///home/svn/incoming/trunk@3527 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-13 22:52:55 +00:00
bmc a0af1e9598 * a more complete selection of various unicode types supported by most browsers
git-svn-id: file:///home/svn/incoming/trunk@3523 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 17:29:37 +00:00
bmc 1c51681efe * add <object> base64 encoded objects, with 1 byte pad, 2 byte pad, and random space injection. Works fine on ie 4, firefox, and safari.
git-svn-id: file:///home/svn/incoming/trunk@3522 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 15:45:37 +00:00
Matt Miller 9c537c42fd missed option
git-svn-id: file:///home/svn/incoming/trunk@3520 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-08 01:12:26 +00:00
Matt Miller 6a52aae59a switch to use a service specific user/pass datastore option to avoid payload conflicts
git-svn-id: file:///home/svn/incoming/trunk@3519 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-08 01:07:47 +00:00
bmc ca315abe1b * add uri-encoding as an evasion method (though, exploits could hard code it if they need to...)
git-svn-id: file:///home/svn/incoming/trunk@3516 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:10 +00:00
bmc 32dfdc114c * allow a request to pass a timeout (and by allowing passing a timeout, the ability to not parse the response)
git-svn-id: file:///home/svn/incoming/trunk@3511 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:22:47 +00:00
HD Moore 5b497d5e4d Added Irix platform
Tweaked reverse.rb to use a subshell and background it
Added Irix lpdexec


git-svn-id: file:///home/svn/incoming/trunk@3505 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 18:10:08 +00:00
vlad902 3acdd81b9e metasploit -> mozilla
git-svn-id: file:///home/svn/incoming/trunk@3504 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 01:56:34 +00:00
HD Moore 868d7bf561 Working findtag + samba
Removed call to evasions that didnt have corresponding definition


git-svn-id: file:///home/svn/incoming/trunk@3501 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 21:04:50 +00:00
bmc 40961655d6 * enable evasions on the socket as they come in
git-svn-id: file:///home/svn/incoming/trunk@3498 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:56:50 +00:00
bmc 3adb2211b8 * add tcp segment size evasion
* add tcp write delay evasion


git-svn-id: file:///home/svn/incoming/trunk@3497 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:55:56 +00:00
bmc 620dfad4a9 gee, these were not cut and paste targets...
git-svn-id: file:///home/svn/incoming/trunk@3490 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:33:49 +00:00
bmc 2f2790386f providing the XDR alias is important...
git-svn-id: file:///home/svn/incoming/trunk@3489 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:31:28 +00:00
bmc d4d73114c1 * add the following evasions for attacks against HTTP servers:
HTTP::chunked
    HTTP::header_folding
    HTTP::junk_headers
    HTTP::junk_slashes
    HTTP::junk_directories
    HTTP::junk_params
    HTTP::junk_self_referring_directories
    HTTP::junk_pipeline

* add the following evasions for attacks against HTTP clients:
    HTTP::junk_headers
    HTTP::compression (was gzip)

* added an exploit mixin for HTML based attacks with HTML based evasions.  eg: aim_goaway.rb
    HTML::unicode
    HTML::javascript::base64
    HTML::javascript::escape


git-svn-id: file:///home/svn/incoming/trunk@3458 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 22:02:35 +00:00
HD Moore b4ad4a5d75 Tabs vs Spaces
git-svn-id: file:///home/svn/incoming/trunk@3453 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 05:33:08 +00:00
bmc 7f9baa9744 * update OptEnum so that desc displays the valid options, less duplication of data
* add OptEnum to the test suite


git-svn-id: file:///home/svn/incoming/trunk@3442 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-25 19:15:09 +00:00
HD Moore bdfd2c5152 Recon modules and the recon event subsystem have been temporarily removed.
The 'auxiliary' system is designed to replace it and recon features will
slowly be moved back into the framework


git-svn-id: file:///home/svn/incoming/trunk@3438 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-24 03:59:44 +00:00
HD Moore 9dc316e932 Updated license
git-svn-id: file:///home/svn/incoming/trunk@3429 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-22 19:28:05 +00:00
HD Moore f485585e7c License information displayed by info
git-svn-id: file:///home/svn/incoming/trunk@3428 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-22 19:25:55 +00:00
HD Moore 1bffccf605 New licensing terms, revision bump to v3
git-svn-id: file:///home/svn/incoming/trunk@3425 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 22:10:20 +00:00
vlad902 0d2fab2f27 Support for SunRPC
git-svn-id: file:///home/svn/incoming/trunk@3422 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 02:45:07 +00:00
vlad902 126c71d25a Basic sunrpc interface
git-svn-id: file:///home/svn/incoming/trunk@3421 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 02:44:54 +00:00
HD Moore 737a1cb711 Pass socket context to child sockets from server, pass context from http mixin to socket
git-svn-id: file:///home/svn/incoming/trunk@3402 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:35:44 +00:00
HD Moore e02eb0d2eb Fixed to NOP vs Nop, Encoder vs ENCODER, setting the preferred NOP
Fixed multiple CPU spinning bugs in the alpha2 encoders
Fixed SiteReference to expose site type and value


git-svn-id: file:///home/svn/incoming/trunk@3401 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:09:40 +00:00
Matt Miller ba0b13292b support for preferred nop
git-svn-id: file:///home/svn/incoming/trunk@3399 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 01:11:26 +00:00
HD Moore de9452dc34 Enum fix
git-svn-id: file:///home/svn/incoming/trunk@3396 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 23:32:51 +00:00
HD Moore 374f7f0c11 Added Enum
git-svn-id: file:///home/svn/incoming/trunk@3395 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 23:30:59 +00:00
Matt Miller ef8e171e2a fix clearing user defined options to work correctly
git-svn-id: file:///home/svn/incoming/trunk@3389 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 16:11:32 +00:00
HD Moore 64f86f88aa alpha-2
git-svn-id: file:///home/svn/incoming/trunk@3388 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 04:32:30 +00:00
Matt Miller f1596d0d26 fix for obscure ruby thing
git-svn-id: file:///home/svn/incoming/trunk@3380 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 03:56:08 +00:00
HD Moore 08027a53c7 Added HPUX, defined licensing in COPYING
git-svn-id: file:///home/svn/incoming/trunk@3378 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 03:36:43 +00:00
Matt Miller 2e19a86843 added license to all modules
git-svn-id: file:///home/svn/incoming/trunk@3377 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 02:59:47 +00:00
HD Moore 884fffa28c Ported the unix revers command payloads and handler
git-svn-id: file:///home/svn/incoming/trunk@3372 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-14 20:12:53 +00:00
Matt Miller c81e6a799d properly pass encoder selection on to payload encoder
git-svn-id: file:///home/svn/incoming/trunk@3367 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-11 18:16:33 +00:00
Matt Miller 79e055c7fd fix termination of bind handler thread
git-svn-id: file:///home/svn/incoming/trunk@3349 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-08 19:49:14 +00:00
Matt Miller 60abf5cff5 fix for compat matching with one side set and one side not
git-svn-id: file:///home/svn/incoming/trunk@3343 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-08 03:19:11 +00:00