James Lee
b3b68c1b90
Make stage encoding possible
...
* Fixes a bug in shikata where input greater than 0xffff length would
still use 16-bit counter
* Short circuits finding bad xor keys if there are no bad characters to
avoid
* Fixes huge performance issue with large inputs to xor-based encoders
due to the use of String#+ instead of String#<< in a loop. It now
takes ~3 seconds on modern hardware to encode a 750kB buffer with
shikata where it used to take more than 10 minutes. The decoding side
takes a similar amount of time and will increase the wait between
sending the second stage and opening a usable session by several
seconds.
I believe this addresses the intent of pull request 905
[See #905 ]
2013-01-13 21:07:39 -06:00
HD Moore
d656e3185f
Mark all libraries as defaulting to 8-bit strings
2012-06-29 00:18:28 -05:00
James Lee
aeeed02eee
more spaces at EOL
2011-11-20 12:01:19 +11:00
HD Moore
06372f3c40
See #430 . This adds the AllowWin32SEH option to the upper/mixed alphanumeric encoders, providing 100% alphanumeric payloads for Windows platforms
...
git-svn-id: file:///home/svn/framework3/trunk@7405 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-08 00:45:51 +00:00
James Lee
a127213a70
Assignment-by-reference causes breakage when using the Array.new(num, obj) syntax. Fixes #330
...
git-svn-id: file:///home/svn/framework3/trunk@7052 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-22 06:49:52 +00:00
HD Moore
cf10a62dcc
Merge in the beginnings of x64 support from Stephen Fewer
...
git-svn-id: file:///home/svn/framework3/trunk@6972 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-23 23:47:33 +00:00
Ramon de C Valle
f124597a56
Code cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:03:39 +00:00
Matt Miller
f61cde59c4
initial support for context encoding
...
git-svn-id: file:///home/svn/framework3/trunk@5081 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-31 04:01:30 +00:00
HD Moore
47039ff3fa
First round of bugfixes for encoders. Alphanumeric encoders no longer default the BufferRegister option, since this can lead to non-compatible exploits falling through to these encoders, selecting them, and then crashing. The new method uses a dynamic (not quite poly) geteip generator, that while not yet alphanumeric compatible, it handles most of the known use cases. Remaining items:
...
1) Figure out how to handle unicode geteip (unicode encoded, alphanum probably)
2) Add keys to the unicode payloads to force a corresponding keyu on the exploit side to enable
git-svn-id: file:///home/svn/framework3/trunk@3863 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 05:10:48 +00:00
pusscat
c02749067f
Add nonupper encoder, like nonalpha, but with badchar support instead of lowercase char range
...
git-svn-id: file:///home/svn/incoming/trunk@3641 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-08 15:04:50 +00:00
HD Moore
d0b3483d41
Fixored
...
git-svn-id: file:///home/svn/incoming/trunk@3621 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 16:51:05 +00:00
HD Moore
55e7111d6a
Blacklist bytes making up the actual badchars too
...
git-svn-id: file:///home/svn/incoming/trunk@3619 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 05:26:17 +00:00
HD Moore
07e157efdf
Working on encoder fixes
...
git-svn-id: file:///home/svn/incoming/trunk@3618 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 05:14:55 +00:00
pusscat
7ef4741966
Hehe - sorry guys ;)
...
git-svn-id: file:///home/svn/incoming/trunk@3606 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-21 12:31:11 +00:00
Matt Miller
237af88317
update to encoder and exploit classes to support target/exploit specific encoder type/encoder options
...
git-svn-id: file:///home/svn/incoming/trunk@3315 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 02:25:47 +00:00
Matt Miller
e537fadb05
shikata ga nai
...
git-svn-id: file:///home/svn/incoming/trunk@3266 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 01:14:56 +00:00
Matt Miller
5676117bff
last of normalized docs from last night
...
git-svn-id: file:///home/svn/incoming/trunk@3030 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 15:11:43 +00:00
Matt Miller
6a5870ddcd
updated comments to be more uniformed in class definition
...
git-svn-id: file:///home/svn/incoming/trunk@3004 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 16:49:45 +00:00
Matt Miller
72ad97dfd1
fixed up encoding, made payload generation pimper
...
git-svn-id: file:///home/svn/incoming/trunk@2746 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-13 21:09:07 +00:00
Matt Miller
9fe92b5347
added another encoder, fixed up some encoding stuff
...
git-svn-id: file:///home/svn/incoming/trunk@2713 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-10 20:49:13 +00:00
Matt Miller
f1975a4b0f
tearing up the house, fixed some invalid exception names, payload encoding rocks
...
git-svn-id: file:///home/svn/incoming/trunk@2712 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-10 19:35:46 +00:00
Spoon M
7bbae355d6
mass require moving of /lib
...
git-svn-id: file:///home/svn/incoming/trunk@2690 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-09 21:18:49 +00:00
Matt Miller
e78604b603
spruced things up a bit
...
git-svn-id: file:///home/svn/incoming/trunk@2499 4d416f70-5f16-0410-b530-b9f4589650da
2005-05-21 18:27:24 +00:00
Matt Miller
8a192dae88
moved shit around again
...
git-svn-id: file:///home/svn/incoming/trunk@2498 4d416f70-5f16-0410-b530-b9f4589650da
2005-05-21 17:57:00 +00:00