Commit Graph

306 Commits (223d22c2e608b586bac806086afc549b020d21c0)

Author SHA1 Message Date
Matt Miller 8e72f20095 better support for random uri base in px
git-svn-id: file:///home/svn/incoming/trunk@3331 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 20:11:21 +00:00
Matt Miller b6395069ee fixed a few bugs for px
git-svn-id: file:///home/svn/incoming/trunk@3323 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 18:59:04 +00:00
Matt Miller ae5c816e85 various enhancements to support passivex, seems to be functional, somewhat
git-svn-id: file:///home/svn/incoming/trunk@3322 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 10:04:30 +00:00
Matt Miller 7a24c3556c to_native
git-svn-id: file:///home/svn/incoming/trunk@3320 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 15:35:06 +00:00
Matt Miller 237af88317 update to encoder and exploit classes to support target/exploit specific encoder type/encoder options
git-svn-id: file:///home/svn/incoming/trunk@3315 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 02:25:47 +00:00
Matt Miller f9d058887b initial import of alpha2 from pusscat
git-svn-id: file:///home/svn/incoming/trunk@3313 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 00:57:14 +00:00
HD Moore 8049b32cbc Patches from <anon>
git-svn-id: file:///home/svn/incoming/trunk@3310 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-05 22:20:28 +00:00
HD Moore d0c8775f56 Adds a new 'evasion' option type
git-svn-id: file:///home/svn/incoming/trunk@3309 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-05 03:57:12 +00:00
Matt Miller a590caaf77 fix for merging compat options and for mirroring Payload->Compat with Compat->Payload
git-svn-id: file:///home/svn/incoming/trunk@3304 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-03 04:43:40 +00:00
Matt Miller e63ba080a8 added support for use_gzip
git-svn-id: file:///home/svn/incoming/trunk@3303 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-03 04:24:03 +00:00
HD Moore 96d4591b87 Updates to httpserver mixin, gzip encoding added to text, bugfix to wordstar, added metafile exploit, will rename and make it nice later
git-svn-id: file:///home/svn/incoming/trunk@3299 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-02 07:49:52 +00:00
HD Moore 9fc93bbe56 Miscellaneous fixes, changes to CMD payloads
git-svn-id: file:///home/svn/incoming/trunk@3296 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-02 01:12:36 +00:00
Matt Miller 09d21fbced remove puts
git-svn-id: file:///home/svn/incoming/trunk@3295 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-01 22:26:18 +00:00
Matt Miller 6bbc5f7e17 remove all non-user defined datastore params when switching payloads
git-svn-id: file:///home/svn/incoming/trunk@3293 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 20:26:17 +00:00
HD Moore 8de634c25f timing fixes
git-svn-id: file:///home/svn/incoming/trunk@3292 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 19:49:12 +00:00
Matt Miller f2002f32d2 restore original buffer when init_state is called since encoders might modify it
git-svn-id: file:///home/svn/incoming/trunk@3290 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:47:53 +00:00
Matt Miller 00d15f8f1d reinitializing counters
git-svn-id: file:///home/svn/incoming/trunk@3289 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:26:34 +00:00
Matt Miller e9318c64d7 catch all exceptions
git-svn-id: file:///home/svn/incoming/trunk@3288 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:23:30 +00:00
HD Moore f468b10cff Tweaks
git-svn-id: file:///home/svn/incoming/trunk@3286 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:03:02 +00:00
HD Moore 2029e8a335 Revert stupid hack, done right now
git-svn-id: file:///home/svn/incoming/trunk@3277 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 06:49:25 +00:00
HD Moore 1d673f144c Claim the socket when a shell is found, regardless of the return value of create_session()..
git-svn-id: file:///home/svn/incoming/trunk@3276 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 06:40:41 +00:00
HD Moore f7e0579a3c Updates to sparc/ppc encoders, added find_key_verify()
git-svn-id: file:///home/svn/incoming/trunk@3274 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 06:05:23 +00:00
Matt Miller a4b622d425 fix for nop ui thing maybe
git-svn-id: file:///home/svn/incoming/trunk@3267 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 02:38:18 +00:00
Matt Miller e537fadb05 shikata ga nai
git-svn-id: file:///home/svn/incoming/trunk@3266 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 01:14:56 +00:00
HD Moore c8d273cec0 Wee, works
git-svn-id: file:///home/svn/incoming/trunk@3258 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-27 04:16:23 +00:00
Matt Miller 03ab9e8340 fix for nil deref and allow multi word compares in compat
git-svn-id: file:///home/svn/incoming/trunk@3256 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-27 02:42:46 +00:00
HD Moore 97129d0303 New modules, module renames
git-svn-id: file:///home/svn/incoming/trunk@3254 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-26 14:34:22 +00:00
HD Moore 412629e5c3 Stuff.. more changes to come
git-svn-id: file:///home/svn/incoming/trunk@3253 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-25 22:47:38 +00:00
Matt Miller 2baa7687fe only user-defined options are saved now
git-svn-id: file:///home/svn/incoming/trunk@3249 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-21 02:51:23 +00:00
HD Moore 7a26ec55bf Proxy chaining patch from bmc
git-svn-id: file:///home/svn/incoming/trunk@3244 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-18 02:19:21 +00:00
HD Moore 082a62afd7 NetDDE + smb code frmo pusscat
git-svn-id: file:///home/svn/incoming/trunk@3243 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-18 02:07:33 +00:00
HD Moore 88658064df /usr/bin/ruby vs /usr/bin/env ruby
git-svn-id: file:///home/svn/incoming/trunk@3242 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-17 06:46:23 +00:00
Matt Miller e434262050 fix for next
git-svn-id: file:///home/svn/incoming/trunk@3241 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-16 01:04:08 +00:00
Matt Miller 410770bae6 fixes for some socket association stuff
git-svn-id: file:///home/svn/incoming/trunk@3233 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-15 04:46:52 +00:00
HD Moore 6d087fe0f3 exploit.target now returns the default target_idx, even if its 0
git-svn-id: file:///home/svn/incoming/trunk@3232 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-15 04:34:26 +00:00
HD Moore 3d2bfd521c Fixed options() problem in the mixin, minor tweak in remote_agent
git-svn-id: file:///home/svn/incoming/trunk@3229 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-15 04:16:30 +00:00
HD Moore f2582ac38e /me feels slapped around
git-svn-id: file:///home/svn/incoming/trunk@3226 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 05:15:06 +00:00
HD Moore 2ecec3db87 More
git-svn-id: file:///home/svn/incoming/trunk@3223 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 03:14:51 +00:00
Matt Miller f37776f830 fix for mod platform
git-svn-id: file:///home/svn/incoming/trunk@3222 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:43:18 +00:00
Matt Miller 8d7e729261 fix for platform problem
git-svn-id: file:///home/svn/incoming/trunk@3221 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:37:19 +00:00
HD Moore e79c9f8658 Something is still breaking, use w3who, show payloads, exploit, breaks
git-svn-id: file:///home/svn/incoming/trunk@3218 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:21:23 +00:00
HD Moore 557153e01c Code from Brian Caswell
git-svn-id: file:///home/svn/incoming/trunk@3210 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-13 06:08:40 +00:00
Matt Miller 22278ce458 vncinject payload
git-svn-id: file:///home/svn/incoming/trunk@3201 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-12 07:07:19 +00:00
HD Moore b9638a7aa2 Removed debugging line
git-svn-id: file:///home/svn/incoming/trunk@3199 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-09 05:23:53 +00:00
Matt Miller be449c54a5 stagers stat works
git-svn-id: file:///home/svn/incoming/trunk@3183 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-06 19:37:59 +00:00
HD Moore 6c2da4d313 Imap exploits
Addition of MC as a common author
Added the IMAP mixin
Fixed bug in base64


git-svn-id: file:///home/svn/incoming/trunk@3172 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-05 05:00:27 +00:00
HD Moore 9b977bee1b Fixed some authors
git-svn-id: file:///home/svn/incoming/trunk@3163 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-02 01:18:51 +00:00
HD Moore 4d43e8f482 mnor
git-svn-id: file:///home/svn/incoming/trunk@3159 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-29 02:57:04 +00:00
Matt Miller ebf9cf5c48 add none to default
git-svn-id: file:///home/svn/incoming/trunk@3158 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-29 02:43:20 +00:00
Matt Miller a2df616bd4 devguide samples
git-svn-id: file:///home/svn/incoming/trunk@3154 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 23:49:48 +00:00
Matt Miller 5a42b1d86b msfd fixes
git-svn-id: file:///home/svn/incoming/trunk@3150 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 20:41:11 +00:00
Matt Miller 5bb104c993 msfd
git-svn-id: file:///home/svn/incoming/trunk@3146 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 16:36:06 +00:00
Matt Miller d99f972357 changes to comments
git-svn-id: file:///home/svn/incoming/trunk@3144 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 12:40:13 +00:00
HD Moore 9340ecdeab IIS exploits ported
Added on_new_session callback and session_created? flag to exploit
Fixed socket fd leak in Comm::Local


git-svn-id: file:///home/svn/incoming/trunk@3135 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-27 18:42:44 +00:00
HD Moore 7624b4d78a Bug fixes for alphanum vs alphanumeric
Added some target print code to the brightstor explotis
Added the backupexec epxloits


git-svn-id: file:///home/svn/incoming/trunk@3132 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-27 01:51:50 +00:00
HD Moore 40aa62968f Arkeia exploits added
git-svn-id: file:///home/svn/incoming/trunk@3129 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 19:56:03 +00:00
HD Moore f4d6a11fd7 Mixins
git-svn-id: file:///home/svn/incoming/trunk@3123 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 11:16:50 +00:00
HD Moore 7403e8bf23 Mssql code!
git-svn-id: file:///home/svn/incoming/trunk@3122 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 11:16:36 +00:00
HD Moore 9bf0d901cf Added the egghunter mixin
Consolidated all unicode routines to go through Rex::Text.to_unicode()
Added a new function for sending evil blobs through smb


git-svn-id: file:///home/svn/incoming/trunk@3114 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 02:34:39 +00:00
HD Moore fb8b56f55f Changed up the way mixins are handled, all exploits just require 'msf/core' and
all current mixins will be loaded. Egghunter was moved to a mixin and generates
based on target arch and platform.


git-svn-id: file:///home/svn/incoming/trunk@3111 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 00:04:26 +00:00
HD Moore fb47661a8f Serv-U exploit working, depends on searcher() in x86, many fixes to FTP mixin
git-svn-id: file:///home/svn/incoming/trunk@3103 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-25 20:02:21 +00:00
Matt Miller 6c4703add7 fix generation stuff
git-svn-id: file:///home/svn/incoming/trunk@3093 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-25 02:07:35 +00:00
Matt Miller 04a27c3475 msfweb payload generation functional
git-svn-id: file:///home/svn/incoming/trunk@3092 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-25 01:59:54 +00:00
Matt Miller 32c471498a more msfweb action
git-svn-id: file:///home/svn/incoming/trunk@3089 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 20:41:56 +00:00
Matt Miller 88c4916967 catch IOErrors in disconnect
git-svn-id: file:///home/svn/incoming/trunk@3084 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 19:15:24 +00:00
Matt Miller 96d75dcbb4 support for aborting sockets once a remote, non-find exploit succeeds
git-svn-id: file:///home/svn/incoming/trunk@3082 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 18:50:33 +00:00
HD Moore 81a1de755b SEH frame stuff integrated into ftp modules, added generate_seh_payload
git-svn-id: file:///home/svn/incoming/trunk@3081 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 18:30:56 +00:00
HD Moore bbe464e358 Added note to TODO, reordered some functios in FTP, will change these again
once we get the socket abort stuff going


git-svn-id: file:///home/svn/incoming/trunk@3080 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 17:45:00 +00:00
Matt Miller 68e661065d more msfweb foo
git-svn-id: file:///home/svn/incoming/trunk@3077 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 05:13:40 +00:00
Matt Miller a19e98757d more hackery on msfweb
git-svn-id: file:///home/svn/incoming/trunk@3076 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 04:23:43 +00:00
Matt Miller adc09f4aa1 hacking on msfweb
git-svn-id: file:///home/svn/incoming/trunk@3069 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 03:31:23 +00:00
Matt Miller 2f05b6959f updated sample to support console command dispatcher registration
git-svn-id: file:///home/svn/incoming/trunk@3059 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-23 14:34:11 +00:00
Matt Miller 36f6c79986 fixed up plugins to be loadable with local input/output handles
git-svn-id: file:///home/svn/incoming/trunk@3058 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-23 14:02:30 +00:00
Matt Miller 09a41d4d5c framework plugins
git-svn-id: file:///home/svn/incoming/trunk@3053 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-19 16:25:26 +00:00
Matt Miller 0e9c5bab5b logging fix, meterpreter multi-load fixed, advanced option display, meterpreter optino to autoload stdapi
git-svn-id: file:///home/svn/incoming/trunk@3052 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-19 15:09:41 +00:00
Matt Miller cbbce06ee0 fix for multiple exploit
git-svn-id: file:///home/svn/incoming/trunk@3046 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-18 00:26:19 +00:00
Matt Miller 07328a0841 partial fix
git-svn-id: file:///home/svn/incoming/trunk@3045 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-17 23:03:53 +00:00
HD Moore 4edf57d731 ms04_011 works perfectly
updated smb, evasion can be set via SMBEvasion datastore (temporary)
added the first osx exploit, cant test for a week or so


git-svn-id: file:///home/svn/incoming/trunk@3044 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-17 19:41:54 +00:00
HD Moore ee3745ef8c More tweaks
git-svn-id: file:///home/svn/incoming/trunk@3043 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-17 04:25:30 +00:00
HD Moore 16c5e232f5 Addition of get_once() in io::stream, rewritten recv code for smb/dcerpc, error handling in exploit mixins
git-svn-id: file:///home/svn/incoming/trunk@3042 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-16 17:56:07 +00:00
HD Moore 3150bd2f3a SMB mixin is mostly working now
git-svn-id: file:///home/svn/incoming/trunk@3037 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 23:02:17 +00:00
Matt Miller 510669e7ef option normalization
git-svn-id: file:///home/svn/incoming/trunk@3035 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 21:50:10 +00:00
Matt Miller fc42fef941 exploits now pass context when creating sockets
git-svn-id: file:///home/svn/incoming/trunk@3034 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 21:25:23 +00:00
Matt Miller 5676117bff last of normalized docs from last night
git-svn-id: file:///home/svn/incoming/trunk@3030 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 15:11:43 +00:00
Matt Miller b89a92f28f payloads now display multiple stages
git-svn-id: file:///home/svn/incoming/trunk@3025 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-12 05:11:56 +00:00
Matt Miller eeda1d06d7 woop
git-svn-id: file:///home/svn/incoming/trunk@3023 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:49:02 +00:00
Matt Miller 2f52fc9e02 bugfix
git-svn-id: file:///home/svn/incoming/trunk@3022 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:27:57 +00:00
Matt Miller 05a84cc7da bug fixes in x86 asm, jmp call additive, payload generation, and new exploit
git-svn-id: file:///home/svn/incoming/trunk@3021 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:22:03 +00:00
Matt Miller 61456015da persistent storage work
git-svn-id: file:///home/svn/incoming/trunk@3019 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-09 03:28:21 +00:00
Matt Miller d0a66d9ec1 route integration into the ui
git-svn-id: file:///home/svn/incoming/trunk@3017 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-08 18:00:17 +00:00
Matt Miller ac9b0edf94 bug fix
git-svn-id: file:///home/svn/incoming/trunk@3012 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-03 00:18:12 +00:00
Matt Miller efc687de84 fix up handlers
git-svn-id: file:///home/svn/incoming/trunk@3007 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 17:32:34 +00:00
Matt Miller 39c9af8069 updated comments to be more uniformed in class definition
git-svn-id: file:///home/svn/incoming/trunk@3005 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 16:56:39 +00:00
Matt Miller 6a5870ddcd updated comments to be more uniformed in class definition
git-svn-id: file:///home/svn/incoming/trunk@3004 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 16:49:45 +00:00
Matt Miller 15ce3c424b added is_usable check
git-svn-id: file:///home/svn/incoming/trunk@3003 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 14:18:50 +00:00
Matt Miller 1c3fc58349 updated logging levels and defined guidelines
git-svn-id: file:///home/svn/incoming/trunk@3002 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 00:27:59 +00:00
Matt Miller a9c7ecc42b bind and reverse handler unit tests
git-svn-id: file:///home/svn/incoming/trunk@2999 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 02:41:29 +00:00
Matt Miller 1605e575cd implemented some unit tests for modules
git-svn-id: file:///home/svn/incoming/trunk@2998 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 00:48:40 +00:00
Matt Miller efa51ca309 unit tests for encoders
git-svn-id: file:///home/svn/incoming/trunk@2997 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 00:30:20 +00:00
Matt Miller db6a30693b foo
git-svn-id: file:///home/svn/incoming/trunk@2996 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 00:02:51 +00:00