Commit Graph

795 Commits (309618a3f8bfa93b64e0816f369bfbf327e657eb)

Author SHA1 Message Date
HD Moore 8746882bf4 Changed the defaut win32 process back to lsass.exe until we come up with a better solution -- spools just results in nothing happening in many cases.
git-svn-id: file:///home/svn/framework3/trunk@4145 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-16 03:49:56 +00:00
HD Moore f925120ddd Wifi updates
git-svn-id: file:///home/svn/framework3/trunk@4129 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 21:45:28 +00:00
Matt Miller b306da967d exit thread instead of exit proc
git-svn-id: file:///home/svn/framework3/trunk@4127 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 19:18:04 +00:00
Matt Miller 2627f5b7f9 hurray for the next stager
git-svn-id: file:///home/svn/framework3/trunk@4126 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 19:17:00 +00:00
Matt Miller 702d6a6544 added recovery stub for kiidleloop
git-svn-id: file:///home/svn/framework3/trunk@4122 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 04:38:45 +00:00
HD Moore dddc4a7640 New stager from johnycsh
git-svn-id: file:///home/svn/framework3/trunk@4121 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 04:14:57 +00:00
HD Moore 00b2cafec8 md5 was replaced with digest/md5 in 1.9 and 1.8.5
git-svn-id: file:///home/svn/framework3/trunk@4119 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-09 19:54:40 +00:00
HD Moore fa91b4b5dd Bug fixes to rescue statements (was catching relative exception class, not the main exception class)
git-svn-id: file:///home/svn/framework3/trunk@4086 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-29 17:41:19 +00:00
HD Moore 38b01597e8 Fix base64
git-svn-id: file:///home/svn/framework3/trunk@4057 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-26 02:42:04 +00:00
Matt Miller 465ea3c677 initial integration of basic kernel-mode payload support
git-svn-id: file:///home/svn/framework3/trunk@4044 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 23:59:14 +00:00
Matt Miller fa14510b78 starting integration of kernel-mode payloads
git-svn-id: file:///home/svn/framework3/trunk@4043 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 21:40:38 +00:00
Matt Miller f1fb05690f misc bugfixes in the http subsystem
git-svn-id: file:///home/svn/framework3/trunk@4019 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 09:27:39 +00:00
Matt Miller abf2e057c8 apache chunked encoding win32 port
git-svn-id: file:///home/svn/framework3/trunk@4017 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 08:31:54 +00:00
Matt Miller 934230a005 fix for variable ref
git-svn-id: file:///home/svn/framework3/trunk@3917 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-19 20:24:55 +00:00
Matt Miller 00ffcc3835 support for meterpreter scripts
git-svn-id: file:///home/svn/framework3/trunk@3916 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-19 03:15:25 +00:00
Matt Miller 9018329f1a added cleanup to meterp
git-svn-id: file:///home/svn/framework3/trunk@3908 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 23:12:46 +00:00
HD Moore 4c5b257a94 Fix a bug that prevents jobs from being cleaned up
git-svn-id: file:///home/svn/framework3/trunk@3900 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 20:07:25 +00:00
Matt Miller 902136a85e fixing up a few things
git-svn-id: file:///home/svn/framework3/trunk@3898 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 07:21:41 +00:00
HD Moore 475df9c08b Added the stderr log sink
git-svn-id: file:///home/svn/framework3/trunk@3895 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 05:50:10 +00:00
HD Moore 0b71dc5d04 A few updates to add NT Trans2 secondary requests, fix an authentication issue, and support a new denial of service module
git-svn-id: file:///home/svn/framework3/trunk@3885 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-14 05:41:54 +00:00
Matt Miller 3e69f46a3a added support for manual ranking
git-svn-id: file:///home/svn/framework3/trunk@3866 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-12 05:34:58 +00:00
HD Moore 47039ff3fa First round of bugfixes for encoders. Alphanumeric encoders no longer default the BufferRegister option, since this can lead to non-compatible exploits falling through to these encoders, selecting them, and then crashing. The new method uses a dynamic (not quite poly) geteip generator, that while not yet alphanumeric compatible, it handles most of the known use cases. Remaining items:
1) Figure out how to handle unicode geteip (unicode encoded, alphanum probably)
2) Add keys to the unicode payloads to force a corresponding keyu on the exploit side to enable 




git-svn-id: file:///home/svn/framework3/trunk@3863 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 05:10:48 +00:00
Matt Miller 7a051c8ee1 bidirectional pipe
git-svn-id: file:///home/svn/framework3/trunk@3862 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 02:21:23 +00:00
Matt Miller a3f620b224 buffered input
git-svn-id: file:///home/svn/framework3/trunk@3861 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 02:21:12 +00:00
Matt Miller b0ba01973c fix for calling stat remotely instead of locally
git-svn-id: file:///home/svn/framework3/trunk@3854 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-05 18:34:52 +00:00
HD Moore fb6f80dd5b Bugfix
git-svn-id: file:///home/svn/framework3/trunk@3853 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-02 06:49:06 +00:00
HD Moore be356d7505 Updated to reflect the new license of Rex
git-svn-id: file:///home/svn/framework3/trunk@3850 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-01 15:50:10 +00:00
Matt Miller 860c016887 fix for relative issue
git-svn-id: file:///home/svn/framework3/trunk@3849 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-01 00:57:31 +00:00
Matt Miller 1583f4e276 fix to not attempt to output text if there is no output handle
git-svn-id: file:///home/svn/framework3/trunk@3848 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-29 00:48:33 +00:00
HD Moore 7a0c8d2c8d Cleanup
git-svn-id: file:///home/svn/framework3/trunk@3846 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-28 00:24:34 +00:00
Spoon M 190922400e fixed up some exception issues in standalone meterp. Should eventually stop catching ::Exception since its too vague
git-svn-id: file:///home/svn/framework3/trunk@3842 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-24 22:54:06 +00:00
Spoon M 34ec11dfed I have been careless with my sword.
git-svn-id: file:///home/svn/framework3/trunk@3839 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 23:08:36 +00:00
Spoon M d42381f3e1 I have been careless with my sword.
git-svn-id: file:///home/svn/framework3/trunk@3838 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 23:03:58 +00:00
Spoon M d89ac6478c more meterp decoupling
git-svn-id: file:///home/svn/framework3/trunk@3836 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 22:50:27 +00:00
Spoon M 06e9f91b28 Make it so you can require meterpreter without having to require rex.rb, steps towards a standalone meterp
git-svn-id: file:///home/svn/framework3/trunk@3835 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 21:35:03 +00:00
Matt Miller cc6900d2ec fix to bind_tcp handler where it wouldn't use the proper comm
git-svn-id: file:///home/svn/framework3/trunk@3834 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-17 01:57:52 +00:00
Matt Miller d8b2f95178 auto load stdapi before interact, implement type? interface
git-svn-id: file:///home/svn/framework3/trunk@3833 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-15 04:07:25 +00:00
Matt Miller a724d42aa0 added mcafee mcsubmgr exploit, added functional avoid utf8 encoder
git-svn-id: file:///home/svn/framework3/trunk@3830 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-14 08:55:37 +00:00
HD Moore d3b9cf1b20 Added rerun command to auxiliary
Fixed range_walker to allow multiple ranges
Version scanner now mostly works



git-svn-id: file:///home/svn/framework3/trunk@3824 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-13 00:08:40 +00:00
HD Moore 651a1a7965 Bug fix to support NT 4.0
git-svn-id: file:///home/svn/framework3/trunk@3822 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-12 23:07:25 +00:00
HD Moore c5542fd347 Major reworking of the recon stuff, there is a new mixin called Auxiliary::Scanner that
supports per-range, per-host, and per-batch requests. The reporting stuff has been moved
into a new mixin for it. The old recon stuff was pulled out and sample modules for the
scanner mixin were added. Almost time to re-import skape's old recon foo using Scanner :-)




git-svn-id: file:///home/svn/framework3/trunk@3820 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-12 08:31:38 +00:00
Matt Miller 7bd26e4925 fixed bug in service manager hardcore alias, new passivex dll/proj files
git-svn-id: file:///home/svn/framework3/trunk@3807 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-08 03:29:26 +00:00
Matt Miller 2c2af2b1bd fix typo
git-svn-id: file:///home/svn/framework3/trunk@3804 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-03 05:02:28 +00:00
HD Moore 25c08bb206 Bug fixes, list of known bugs, final prep for beta-1
git-svn-id: file:///home/svn/framework3/trunk@3803 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-02 06:30:36 +00:00
HD Moore cac9561b61 Bug fix for previous workaround
git-svn-id: file:///home/svn/framework3/trunk@3799 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-01 01:50:26 +00:00
HD Moore 4ef104e869 Readline fix
git-svn-id: file:///home/svn/framework3/trunk@3798 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 20:00:20 +00:00
bmc f8897ac164 stdio doesn't support readline
git-svn-id: file:///home/svn/framework3/trunk@3797 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 19:59:29 +00:00
HD Moore 8006479e6b Fix for OS X socket bugs
git-svn-id: file:///home/svn/framework3/trunk@3796 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 19:22:21 +00:00
Matt Miller 023b63bff8 potential fix for msfpescan issue
git-svn-id: file:///home/svn/framework3/trunk@3793 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 13:44:58 +00:00
HD Moore 377e606929 Added javascript and win32 pe output formats
git-svn-id: file:///home/svn/framework3/trunk@3787 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 04:05:20 +00:00
HD Moore e55cff59e1 Fixed Rex::Arch.endian()
Added Rex::Text.to_unescape()
Added two mozilla exploits
Fixed firefox exploit to use new api




git-svn-id: file:///home/svn/framework3/trunk@3784 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 02:50:41 +00:00
HD Moore d0bc17f17a Minor updates
git-svn-id: file:///home/svn/framework3/trunk@3778 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 21:31:02 +00:00
Matt Miller 21f4a10d32 the File.open's were correct, they needed to use the local File class and not Rex::Post::File
git-svn-id: file:///home/svn/framework3/trunk@3775 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 17:13:06 +00:00
HD Moore a2592959c3 Readline mode disabledby defualt for interactive sessios
Fixed an issue with exploit.rb directly running a session command after the session command had been renamed



git-svn-id: file:///home/svn/framework3/trunk@3774 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-29 23:01:38 +00:00
HD Moore c081d7b2b1 Fixed continuaion across trap error, minor tweaks under readline
git-svn-id: file:///home/svn/framework3/trunk@3772 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-29 20:03:05 +00:00
HD Moore 6677b4ba71 Minor bug fixes to remove extra 'p' calls
Rewrite of stdio/readline to support Windows




git-svn-id: file:///home/svn/framework3/trunk@3766 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 22:28:19 +00:00
HD Moore eb4b7ad1ad No longer used
git-svn-id: file:///home/svn/framework3/trunk@3764 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 20:56:23 +00:00
HD Moore b4a0f34021 Using readline5 solves all hangs
git-svn-id: file:///home/svn/framework3/trunk@3763 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 05:35:29 +00:00
HD Moore eeb894b70c Change from stdin to readconsoleinput
git-svn-id: file:///home/svn/framework3/trunk@3762 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 05:03:56 +00:00
HD Moore cb933d9b03 Test
git-svn-id: file:///home/svn/framework3/trunk@3761 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 04:31:36 +00:00
HD Moore edb1f1a7ba IT WORKS!!!!
git-svn-id: file:///home/svn/framework3/trunk@3759 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 04:16:39 +00:00
HD Moore a021982e03 Enabled patched readline hackery
git-svn-id: file:///home/svn/framework3/trunk@3757 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 03:39:27 +00:00
HD Moore db8c76f679 Various hacks for win32 mode
git-svn-id: file:///home/svn/framework3/trunk@3756 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 00:59:00 +00:00
bmc 5b319613ab * add html encoding
git-svn-id: file:///home/svn/framework3/trunk@3755 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-24 19:25:59 +00:00
HD Moore 1a7ba78dc8 Removed a dumb debugging line that was accidentally comitted
git-svn-id: file:///home/svn/framework3/trunk@3752 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-20 04:43:52 +00:00
Spoon M f95d4174de BLARGGGG. Actually remove the null terminating byte (instead of returning the same string, bug). Another bug treating all registry keys that are a string as a dword...
git-svn-id: file:///home/svn/framework3/trunk@3749 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 20:37:38 +00:00
Spoon M 41890a86f2 use loop do instead of while 1 (ruby warning, literal in condition)
git-svn-id: file:///home/svn/framework3/trunk@3748 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:34:15 +00:00
Spoon M df32aedf44 added parens to fix precedence/void context bug
git-svn-id: file:///home/svn/framework3/trunk@3747 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:32:09 +00:00
Spoon M 1af7c1dd23 Change to an assignment, ruby warnings about a void context (which is true)
git-svn-id: file:///home/svn/framework3/trunk@3746 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:30:43 +00:00
HD Moore 775183661d Split trans into two routines, one of which sets maxparm/maxdata to zero, which is required to trigger the mailslot bug. Thanks Nico!
git-svn-id: file:///home/svn/framework3/trunk@3741 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-13 03:04:53 +00:00
HD Moore 35568b570a Demo code added for MS06-035, mailslot write added to client.rb
git-svn-id: file:///home/svn/framework3/trunk@3740 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-11 20:02:45 +00:00
bmc 6e6b1bb2a7 * NDR has been moved, so remove the tests for now, removing the code later
git-svn-id: file:///home/svn/framework3/trunk@3734 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-28 13:35:19 +00:00
HD Moore 2b603db2bb Merge from side branch to fix a bug
git-svn-id: file:///home/svn/framework3/trunk@3732 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-27 23:00:49 +00:00
HD Moore d1efbad1e7 Minor updates
git-svn-id: file:///home/svn/framework3/trunk@3722 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-23 06:20:52 +00:00
HD Moore b2895bec0d Minor sanity checks added
git-svn-id: file:///home/svn/framework3/trunk@3697 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-17 17:36:19 +00:00
HD Moore c6436b501a IPv6 needed this fix as well
git-svn-id: file:///home/svn/incoming/trunk@3673 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-16 03:56:08 +00:00
Matt Miller 3e37b5993f fix unpack in from_sockaddr
git-svn-id: file:///home/svn/incoming/trunk@3672 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-16 03:11:53 +00:00
Matt Miller 4f21fc4709 fix for pack crap
git-svn-id: file:///home/svn/incoming/trunk@3671 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-16 03:03:40 +00:00
bmc 3c2a871399 * fix dotted_ip? to be more strict
git-svn-id: file:///home/svn/incoming/trunk@3670 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 22:41:57 +00:00
bmc e70b6f7cfe * add dotted quad validation tests (to prove the current one is broken :P )
git-svn-id: file:///home/svn/incoming/trunk@3669 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 22:41:31 +00:00
Matt Miller 54540f7eb7 fix regex
git-svn-id: file:///home/svn/incoming/trunk@3668 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 21:17:05 +00:00
Matt Miller e312f588a2 delay issue on win32 fixed by wrapping socket calls
git-svn-id: file:///home/svn/incoming/trunk@3667 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 20:53:20 +00:00
bmc f4545e50ed fix comment
git-svn-id: file:///home/svn/incoming/trunk@3663 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-14 22:12:36 +00:00
bmc 9352454791 * add warnings, gonna go away soon
git-svn-id: file:///home/svn/incoming/trunk@3659 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-13 21:26:34 +00:00
bmc 1ec5099398 ndr is really just an encoding mechanism, and its not unique to DCERPC. so... move it here
git-svn-id: file:///home/svn/incoming/trunk@3658 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-13 20:33:01 +00:00
HD Moore 989fb37f33 Woops, forgot to keep it compatible with ipv4 :/
git-svn-id: file:///home/svn/incoming/trunk@3657 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 21:09:00 +00:00
HD Moore ebf46cf535 Fixes for IPv6 compatibility
git-svn-id: file:///home/svn/incoming/trunk@3656 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 21:02:58 +00:00
Matt Miller 1a61d3d2fb changes to support native win32
git-svn-id: file:///home/svn/incoming/trunk@3654 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 20:53:15 +00:00
bmc 049b71e236 move username & password to the test suite config thingie
git-svn-id: file:///home/svn/incoming/trunk@3652 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-01 15:30:26 +00:00
bmc ac2d76eb71 add default smb username & password for testing in the test config
git-svn-id: file:///home/svn/incoming/trunk@3651 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-01 15:29:39 +00:00
bmc c9a3258f81 removing dup trans function with a no_response argument to trans
git-svn-id: file:///home/svn/incoming/trunk@3650 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-01 15:18:53 +00:00
bmc 09786d3eaa tiny cleanups
git-svn-id: file:///home/svn/incoming/trunk@3649 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-31 21:49:46 +00:00
bmc 2f33ece43b * cleanup extra whitespaces at the end of the line
* collect = good


git-svn-id: file:///home/svn/incoming/trunk@3648 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-30 17:18:27 +00:00
HD Moore c3e0146443 Cleanups to SMB tests, minor fixes.
git-svn-id: file:///home/svn/incoming/trunk@3646 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-30 16:11:00 +00:00
HD Moore 18bb4f9e6d Fixed spaces before paranethesis issues in dcerpc/packet.rb
Fixed comment in smb/client.rb
Fixed ReadAndX in smb/client.rb
Updated ReadAndX struct in constants.rb


git-svn-id: file:///home/svn/incoming/trunk@3643 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-15 16:44:44 +00:00
pusscat c02749067f Add nonupper encoder, like nonalpha, but with badchar support instead of lowercase char range
git-svn-id: file:///home/svn/incoming/trunk@3641 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-08 15:04:50 +00:00
HD Moore 71ac31446f SupportWords for a tree connect response are arbitrary new words that increment the WordCount, hopefully this wont break response parsing for the actual payload/bytecount. The current struct2 system can't take abitrary WordCount responses into account yet :-/
git-svn-id: file:///home/svn/incoming/trunk@3635 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-05 13:53:16 +00:00
HD Moore 64827d1238 New evasion options for controlling how many fake uuids to place before and after the real uid when eexploiting DCERPC bugs
Added a new evasion option for picking readAndX/writeAndX or transNamedPipe methods for DCERPC delivery, however a struct2 issue seems to be breaking this (will investigate tomorrow).

Fixed a typo in the initialize method of the OpenPipe class


git-svn-id: file:///home/svn/incoming/trunk@3634 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-03 05:53:37 +00:00
HD Moore 1fd5d698a2 Migrated client.rb to new smb time api (missed one)
Removed debugging print from the SMB mixin


git-svn-id: file:///home/svn/incoming/trunk@3632 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-03 04:49:47 +00:00
HD Moore 44f578bf41 Changed 'boolean' flags to true/false from 0/1 in client.rb
Updated constants.rb to more accurately reflect packet structure in SMB responses
Updated client.rb to match the changes to constants
Updated utils.rb to include smb to unix conversation routines for time fields
Updated utils.rb to create security blobs for both client and server packets


git-svn-id: file:///home/svn/incoming/trunk@3631 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-03 04:43:19 +00:00
HD Moore 1a54cc810a Fixed numerous issues involving smb/dcerpc interaction
Fixed 'bad' use of method definition (space after method name, will be depreciated soon)


git-svn-id: file:///home/svn/incoming/trunk@3626 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-30 19:49:27 +00:00
pusscat 5bfe1048e0 change the randbase 0x41 fix to work for shell_reverse_tcp
git-svn-id: file:///home/svn/incoming/trunk@3625 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-27 16:23:02 +00:00
HD Moore 42bc7496cf All sorts of fun changes to smb/dcerpc, the basics are:
1) Clean up SMB constants, add new ones, define which ones are supported by dialect
2) DCERPC over SMB uses a 'OpenPipe' class, not an 'OpenFile'
3) A new DCERPC option called 'smb_pipeio' allows the user to switch between Read/Write and TransactNamedPipe()


git-svn-id: file:///home/svn/incoming/trunk@3622 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 16:59:44 +00:00
pusscat 0f142d18e4 Fix to ensure that 0x41 isn't randomly generated to prematurely break our decode loop
git-svn-id: file:///home/svn/incoming/trunk@3620 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 15:50:05 +00:00
Matt Miller 55c3c1247b support to use proper pointer representation and 64-bit integers in struct
git-svn-id: file:///home/svn/incoming/trunk@3617 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 21:09:36 +00:00
bmc df49cfabb0 * add SSL TCP server support, using runtime generated/signed keys
* add HTTPS support

note, SSL service tests don't work.  Right now, the tests just bail early.  The
client spins forever trying to get data.  When the client & server are in
seperate processes, this isn't a problem.  A threaded test implementation is
closer, as data sent from the client gets to the server just fine.


git-svn-id: file:///home/svn/incoming/trunk@3616 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 18:49:00 +00:00
pusscat 71e3323dbd Adjust verboten ranges
git-svn-id: file:///home/svn/incoming/trunk@3615 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 17:49:04 +00:00
pusscat 25b60466ad Fix ecx count
Fix jle -> jge


git-svn-id: file:///home/svn/incoming/trunk@3614 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 15:42:40 +00:00
pusscat 5b8ceaf72f Make sure that table gets updated
git-svn-id: file:///home/svn/incoming/trunk@3611 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 15:01:25 +00:00
Matt Miller 4c92672cb3 initial work on adding x64 support, not all finished yet
git-svn-id: file:///home/svn/incoming/trunk@3610 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 14:57:42 +00:00
pusscat 0e0a8ee0b3 Move bad block check >.<
git-svn-id: file:///home/svn/incoming/trunk@3609 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 14:38:34 +00:00
HD Moore e439b5a32d Changed default read size for analuze, needs better logic
Changed pattern_offset to work like 2.x - from lin0xx


git-svn-id: file:///home/svn/incoming/trunk@3608 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-21 21:06:31 +00:00
pusscat 4a781e59cd Replace JE with JLE to remove lowercase range instruction
git-svn-id: file:///home/svn/incoming/trunk@3607 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-21 13:28:04 +00:00
bmc 71fc4bd219 * random states
* random hostnames


git-svn-id: file:///home/svn/incoming/trunk@3605 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-21 03:59:07 +00:00
pusscat f678425f07 Add non-alpha encoder (not quite done, but passes tests with \xcc)
git-svn-id: file:///home/svn/incoming/trunk@3604 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-20 21:11:33 +00:00
pusscat 9c02084f20 More dec -> mod for +/- offset support
git-svn-id: file:///home/svn/incoming/trunk@3603 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-20 15:07:10 +00:00
pusscat 44b14f01cb Fix alpha_uppercase:
dec -> mod (in accordance with +/- offset ability)
    remove 0x37 from mod suffix, which is unnecessary and screwing the fixups by one char


git-svn-id: file:///home/svn/incoming/trunk@3602 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-20 14:35:18 +00:00
HD Moore 589205e5ff Nearly 100% functional
git-svn-id: file:///home/svn/incoming/trunk@3600 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-16 04:41:54 +00:00
HD Moore 17d2ba798b More work on the msfpescan port
git-svn-id: file:///home/svn/incoming/trunk@3599 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-16 01:56:17 +00:00
HD Moore da41886856 lib/msf/core/module_manager.rb - bug fixes to make it work with ruby-cvs
lib/rex/arch/x86.rb - removed illegal 'break' statements

lib/rex/peparsey* - imported from spn/, renamed classes to Rex
msfpescan - first version from spoonm


git-svn-id: file:///home/svn/incoming/trunk@3598 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-15 20:26:41 +00:00
Matt Miller be710b65a2 fix poly generation bug
git-svn-id: file:///home/svn/incoming/trunk@3596 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-14 04:09:53 +00:00
Spoon M 4b9033be00 pack bug found during bh eu
git-svn-id: file:///home/svn/incoming/trunk@3594 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-10 00:21:43 +00:00
HD Moore f4736c3eae Minor improvements
git-svn-id: file:///home/svn/incoming/trunk@3593 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-08 06:35:35 +00:00
Matt Miller 243127447b some meterp bugfixes found while creating a blog post :)
git-svn-id: file:///home/svn/incoming/trunk@3592 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-07 03:02:37 +00:00
HD Moore 7b4fb0d6aa Tons of fixes for aux/recon/db
git-svn-id: file:///home/svn/incoming/trunk@3589 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-03 04:33:30 +00:00
bmc 676a582814 oops, forgot to add these
git-svn-id: file:///home/svn/incoming/trunk@3582 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-30 15:13:14 +00:00
bmc dbf0fcf0f2 * add object_id and random object_id call evasion
git-svn-id: file:///home/svn/incoming/trunk@3579 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-29 20:46:29 +00:00
bmc 839ad37dc4 * update testset
git-svn-id: file:///home/svn/incoming/trunk@3578 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-29 19:34:46 +00:00
bmc c96065fc3b * update testset, thanks to changes HD made
git-svn-id: file:///home/svn/incoming/trunk@3577 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-29 19:34:25 +00:00
bmc ca5da765c5 * fix oddball bug with newlines thanks to using Regexp to split chars
git-svn-id: file:///home/svn/incoming/trunk@3576 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-29 18:40:15 +00:00
bmc d631902fc1 text.rb
git-svn-id: file:///home/svn/incoming/trunk@3575 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-29 18:39:42 +00:00
bmc 9a0b748a4b * add header test suite
git-svn-id: file:///home/svn/incoming/trunk@3567 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-09 19:52:34 +00:00
bmc 5b675262be properlly support responses when we get a request like this:
(echo "GET / HTTP/1.0"; echo ) |nc IP PORT


git-svn-id: file:///home/svn/incoming/trunk@3566 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-09 19:51:37 +00:00
HD Moore 5411701d3f Aux mode updates
git-svn-id: file:///home/svn/incoming/trunk@3564 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-09 17:28:37 +00:00
bmc 223d22c2e6 * object cleanups
* add tcp request fragmentation support


git-svn-id: file:///home/svn/incoming/trunk@3562 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-08 19:13:27 +00:00
bmc f5ec95bf80 * blah, rex exceptions
git-svn-id: file:///home/svn/incoming/trunk@3560 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-08 17:25:59 +00:00
bmc 9d54b40c63 * blah. rex exceptions
git-svn-id: file:///home/svn/incoming/trunk@3559 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-08 17:25:40 +00:00
bmc dde940e876 * moving XDR to Rex::Encoder, since its really an encoder. BTW, one of the tests fails... this I know, I didn't write the code that implements it, just the test that fails :P
git-svn-id: file:///home/svn/incoming/trunk@3558 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 22:44:49 +00:00
bmc 93870878fe * no self wrapper to unicode
* update tests to make more sense when they fail


git-svn-id: file:///home/svn/incoming/trunk@3557 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 20:19:30 +00:00
bmc 57d50528f2 * add
git-svn-id: file:///home/svn/incoming/trunk@3556 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 16:41:48 +00:00
HD Moore feca661373 Fixed typos in the license
Fixed exception issues


git-svn-id: file:///home/svn/incoming/trunk@3552 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 06:50:25 +00:00
bmc 279abda264 * uri encoding is now part of Rex::Text
* add junk param start
* add junk URI end


git-svn-id: file:///home/svn/incoming/trunk@3546 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:55:22 +00:00
bmc 53dfa3c83d * forgot the 'none' encoding in the test
git-svn-id: file:///home/svn/incoming/trunk@3545 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:53:36 +00:00
bmc 64c7a2063f * add uri encoding as a text modifier
* add multibyte hex encoding.  useful for %u


git-svn-id: file:///home/svn/incoming/trunk@3544 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:51:17 +00:00
bmc 59f16d0a1b * add MS's widechar encoding support, named uhwtfms :P (note, to use in something like a URI, it needs to be cleaned up... since you have to send %uXXXX instead of just 2 bytes raw encoded)
git-svn-id: file:///home/svn/incoming/trunk@3541 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-22 23:29:34 +00:00
bmc 8422da47dd * verify we get all of the random entries we expect on a few of iterations
git-svn-id: file:///home/svn/incoming/trunk@3529 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-14 01:04:29 +00:00
bmc b56432346e * all non-printable characters are utf-8 by default
git-svn-id: file:///home/svn/incoming/trunk@3528 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-14 01:04:06 +00:00
bmc bce161e622 * add utf-8 support, with overlong and invalid overlong encodings
* update utf-7 support to a mode to specify "all"


git-svn-id: file:///home/svn/incoming/trunk@3526 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-13 22:52:01 +00:00
bmc b091a21f2b * to_unicode now supports more than just utf-16le, which is still the default.
* add tests for all of the unicode variations.


git-svn-id: file:///home/svn/incoming/trunk@3524 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 17:30:41 +00:00
bmc 524c0a3f74 * add 'none' encoding
git-svn-id: file:///home/svn/incoming/trunk@3521 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 15:44:15 +00:00
bmc 1351ceed1c * add support to hex/%u encode a URI
git-svn-id: file:///home/svn/incoming/trunk@3517 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:57 +00:00
bmc c2c01a2d9e * use full path to the const, since in odd situations, the const isn't in scope. (WTF?)
git-svn-id: file:///home/svn/incoming/trunk@3513 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:24:45 +00:00
bmc 0f6055c73c support both POST and SEARCH as basic post request types.
git-svn-id: file:///home/svn/incoming/trunk@3512 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:23:52 +00:00
bmc f5affd4b41 ugh, nasty bug where if an exception is raised during on_client_data in which the client was shut down, the select loop will still state that the client has data to be processed, which causes an exception to be raised, starting to loop over again
git-svn-id: file:///home/svn/incoming/trunk@3496 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:54:08 +00:00
bmc f3ae631d59 tabify
git-svn-id: file:///home/svn/incoming/trunk@3488 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 18:42:14 +00:00
vlad902 27e12952d0 Replace get_once with get()
git-svn-id: file:///home/svn/incoming/trunk@3487 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 00:01:57 +00:00
bmc 6c8f513e47 * add "good" char list as well, since well... otherwise its painful.
git-svn-id: file:///home/svn/incoming/trunk@3485 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-31 22:25:55 +00:00
bmc 8d2582dffa use a slightly different port than other tests
git-svn-id: file:///home/svn/incoming/trunk@3483 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 22:11:36 +00:00
bmc 750e119a76 * use a slightly different port than other tests
git-svn-id: file:///home/svn/incoming/trunk@3482 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 22:11:09 +00:00
bmc d668b87f68 * remove some comments
git-svn-id: file:///home/svn/incoming/trunk@3481 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 22:09:58 +00:00
HD Moore f4c07e8a54 Catch an exception thrown if no default route exists
git-svn-id: file:///home/svn/incoming/trunk@3480 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 21:57:24 +00:00
bmc cd06c10aba * fixup include path
git-svn-id: file:///home/svn/incoming/trunk@3478 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 18:58:16 +00:00
bmc 93ad7045ba * rex exception names are used, therefor rex/exceptions is required
git-svn-id: file:///home/svn/incoming/trunk@3477 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 18:50:43 +00:00
bmc f76becf428 * make the connection failure use 1 instead of 0, since many OSs bitch differentlly about port 0 than other ports
git-svn-id: file:///home/svn/incoming/trunk@3476 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 18:49:08 +00:00
bmc 05b9aacbc1 'none' is an ok content-encoding, just does nothing... (passed in from the exploit mixin)
git-svn-id: file:///home/svn/incoming/trunk@3475 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 17:31:32 +00:00
HD Moore c1b9129bca A couple more assertions in the tcp_server test suite.
Added template for the winamp pls overflow (unc computer name)


git-svn-id: file:///home/svn/incoming/trunk@3474 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 17:25:44 +00:00
bmc be31eead6f * client and server (once accepted) should have the same functionality. so, make the tests do that.
git-svn-id: file:///home/svn/incoming/trunk@3473 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 17:12:51 +00:00
HD Moore 5661598ef3 Addign read function >>
git-svn-id: file:///home/svn/incoming/trunk@3472 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 16:37:41 +00:00
bmc 9193668e9d * use a different port than the UDP tests, as to allow running the tests in parallel
git-svn-id: file:///home/svn/incoming/trunk@3471 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 15:47:47 +00:00
bmc 48611adb2c * making constants look like reality is a good thing
git-svn-id: file:///home/svn/incoming/trunk@3470 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 15:13:25 +00:00
HD Moore 9b9bd2b7a7 Fixed bugs in io/stream:
1) no longer modify the buffer argument in send
 2) no longer duplicate the buffer argument in write

Added some basic telnet control character detection to socket:
 1) ^D closes a connection
 2) ^C closes a connection
 3) ^Z just prints it out

Problems with control character handling in msfd:
 1) The current handlers are signal based, could be more than one msfd client
 2) Calling ui._suspend isn't possible from the Input driver class (no context now)


git-svn-id: file:///home/svn/incoming/trunk@3462 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-28 07:12:35 +00:00
bmc 98dcf5b539 * s/\t/ / doesn't always work...
git-svn-id: file:///home/svn/incoming/trunk@3461 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-28 01:23:46 +00:00
bmc 20fec01d68 * add junk pipelined request support
* fix socket creation on pipelined requests
* when a server says that the connection should be closed (Connection: closed), then close the connection, since its going to regardless, and we don't want to loose our state
* support non-standard line termination in headers.  ie \n instead of \r\n
* add junk headers (X-rand: rand)
* add header folding (for evasion)
* add parse_header_re (still leaving parse_header around, though its dead code ATM) that does the right thing on non-standard line endings
* move 'gzip' to a 'compression' option
* add 'deflate' compression option (really, just raw zlib, and only firefox does deflate right)
* fix a bunch of TE:chunked decoding bugs based based on the fact that Apache doesn't always close chunks appropriately
* modify parse_body to not return state, since it doesn't always do that, and the return isn't used... self.state is.
* add TE:chunked request support
* normalize URIs in requests before saving them
* Move params out of the URI, but when the uri is requested, and the method is GET, and there are params, return a URI that has the params that are approrpiately encoded (needed for junk_params, see below)
* move request.to_s support of params to use the request params array when a POST, allows use of junk params support (see below).  NOTE:  If the body is provided, use the body instead of params, in case you want to hardcode the params in a POST request, eg: php_xmlrpc_eval.rb
* Add junk params when building a param list, eg: a=b becomes asdfasdf=asdrt32a&asdfad=okhgasd&a=b&hjklasdf=hkasgd
* add URI junk slash support (eg: /////foo.html)
* param splitting now supports both '&', and ';', which CGI.pm and PHP both allow
* add URI junk directory support, eg: /asdf/../foo.html
* add param encoding support, eg: param A with value '=' is  A=%3d
* add URI junk self referring directory support, eg: /././foo.html


git-svn-id: file:///home/svn/incoming/trunk@3457 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 21:57:44 +00:00
bmc 6064bf7c60 * add jmp and jmp_reg
git-svn-id: file:///home/svn/incoming/trunk@3455 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 21:14:24 +00:00
HD Moore b4ad4a5d75 Tabs vs Spaces
git-svn-id: file:///home/svn/incoming/trunk@3453 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 05:33:08 +00:00
HD Moore e9b4b96f0d Tabs vs spaces
git-svn-id: file:///home/svn/incoming/trunk@3452 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 05:29:06 +00:00
HD Moore 93045fa927 Tab fixes
git-svn-id: file:///home/svn/incoming/trunk@3451 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 05:28:16 +00:00
bmc a1db0b6196 space to tab (happy skape?)
git-svn-id: file:///home/svn/incoming/trunk@3445 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-25 21:57:30 +00:00
HD Moore ffd0ffe5b5 Patches in from PC
git-svn-id: file:///home/svn/incoming/trunk@3441 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-24 23:08:20 +00:00
bmc 98b9a977f4 * these need to go away
git-svn-id: file:///home/svn/incoming/trunk@3440 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-24 16:01:49 +00:00
bmc 6c76e44013 this needs to go away
git-svn-id: file:///home/svn/incoming/trunk@3439 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-24 16:00:45 +00:00
HD Moore bdfd2c5152 Recon modules and the recon event subsystem have been temporarily removed.
The 'auxiliary' system is designed to replace it and recon features will
slowly be moved back into the framework


git-svn-id: file:///home/svn/incoming/trunk@3438 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-24 03:59:44 +00:00
bmc 55ba865f30 * few cleanups plus addition of self referring directories (eg: /././././)
git-svn-id: file:///home/svn/incoming/trunk@3437 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-23 23:57:50 +00:00
bmc 52fa0da439 * add support for inserting junk directories, slashes, and params
git-svn-id: file:///home/svn/incoming/trunk@3436 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-23 21:58:53 +00:00
vlad902 2346b83ef4 Slightly re-structured and bug fixed
git-svn-id: file:///home/svn/incoming/trunk@3420 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 02:44:01 +00:00
vlad902 d051386d63 Basic SunRPC wrapper
git-svn-id: file:///home/svn/incoming/trunk@3419 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 02:43:44 +00:00
bmc 6927b64028 * comment out sync on close for the SSL connection, since it was causing an infinite recursion when calling close
git-svn-id: file:///home/svn/incoming/trunk@3412 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-20 19:04:17 +00:00
bmc 9913f6d953 * add SSL support to the client (pass another arg to enable)
git-svn-id: file:///home/svn/incoming/trunk@3411 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-20 18:59:24 +00:00
Matt Miller ce7ebecbcb fix from pusscat
git-svn-id: file:///home/svn/incoming/trunk@3409 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-19 16:55:09 +00:00
Matt Miller cd7f1d1979 patch for unicode/to_hex/other changes from bmc
git-svn-id: file:///home/svn/incoming/trunk@3408 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-19 15:12:22 +00:00
Matt Miller 5cee818623 poly encoder fixes
git-svn-id: file:///home/svn/incoming/trunk@3406 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-18 15:43:48 +00:00
Matt Miller 12a51dc9df somewhat of a fix for badchar issue with poly encoders, kinda lame though
git-svn-id: file:///home/svn/incoming/trunk@3405 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-18 15:32:49 +00:00
Matt Miller 423b023de8 patch for badchar stuff
git-svn-id: file:///home/svn/incoming/trunk@3404 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-18 15:21:41 +00:00
HD Moore 9bea97d358 Fixed typo
git-svn-id: file:///home/svn/incoming/trunk@3403 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 19:34:44 +00:00
HD Moore 737a1cb711 Pass socket context to child sockets from server, pass context from http mixin to socket
git-svn-id: file:///home/svn/incoming/trunk@3402 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:35:44 +00:00
HD Moore e02eb0d2eb Fixed to NOP vs Nop, Encoder vs ENCODER, setting the preferred NOP
Fixed multiple CPU spinning bugs in the alpha2 encoders
Fixed SiteReference to expose site type and value


git-svn-id: file:///home/svn/incoming/trunk@3401 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:09:40 +00:00
vlad902 dc83e49db2 Initial revision
git-svn-id: file:///home/svn/incoming/trunk@3400 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 01:12:38 +00:00
vlad902 da81906949 rpc -> sunrpc
git-svn-id: file:///home/svn/incoming/trunk@3397 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 01:09:15 +00:00
Matt Miller 788b3ddeed encoder changes
git-svn-id: file:///home/svn/incoming/trunk@3394 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 22:34:22 +00:00
Matt Miller 0b27b07a5d possible fix for header parsing issue
git-svn-id: file:///home/svn/incoming/trunk@3390 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 16:29:22 +00:00
vlad902 87478e0f3d Remove done TODO
git-svn-id: file:///home/svn/incoming/trunk@3371 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-14 17:50:02 +00:00
vlad902 e9c3b312d6 Add functionality to self.set and fix a recursion bug (introduced by me, d'oh)
git-svn-id: file:///home/svn/incoming/trunk@3370 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-14 17:45:42 +00:00
Matt Miller 679d192173 patch to allow non-default server name
git-svn-id: file:///home/svn/incoming/trunk@3369 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-11 22:16:20 +00:00
vlad902 9e4530ff30 Modified the manner in which set and clear worked to make them more interconnected
and better!


git-svn-id: file:///home/svn/incoming/trunk@3356 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-09 02:07:56 +00:00
Matt Miller 43495bd398 more poly
git-svn-id: file:///home/svn/incoming/trunk@3334 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-08 01:10:45 +00:00
Matt Miller c35e687659 jmp/call additive is no polyified
git-svn-id: file:///home/svn/incoming/trunk@3332 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 23:38:55 +00:00
Matt Miller 1931181ef2 remove dbg messages
git-svn-id: file:///home/svn/incoming/trunk@3324 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 19:08:03 +00:00
Matt Miller b6395069ee fixed a few bugs for px
git-svn-id: file:///home/svn/incoming/trunk@3323 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 18:59:04 +00:00
Matt Miller ae5c816e85 various enhancements to support passivex, seems to be functional, somewhat
git-svn-id: file:///home/svn/incoming/trunk@3322 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 10:04:30 +00:00
Matt Miller daf5eebd28 added skylined copyright notice
git-svn-id: file:///home/svn/incoming/trunk@3321 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 15:42:03 +00:00
Matt Miller d1e8d89f07 partial fix for float problem
git-svn-id: file:///home/svn/incoming/trunk@3316 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 02:26:22 +00:00
Matt Miller f9d058887b initial import of alpha2 from pusscat
git-svn-id: file:///home/svn/incoming/trunk@3313 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 00:57:14 +00:00
HD Moore 8049b32cbc Patches from <anon>
git-svn-id: file:///home/svn/incoming/trunk@3310 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-05 22:20:28 +00:00
Matt Miller 65e987c4e1 fix for job cleanup issue
git-svn-id: file:///home/svn/incoming/trunk@3305 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-05 01:54:38 +00:00
Matt Miller 1a73949451 added gzip detection
git-svn-id: file:///home/svn/incoming/trunk@3302 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-03 04:07:20 +00:00
HD Moore 96d4591b87 Updates to httpserver mixin, gzip encoding added to text, bugfix to wordstar, added metafile exploit, will rename and make it nice later
git-svn-id: file:///home/svn/incoming/trunk@3299 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-02 07:49:52 +00:00
HD Moore 9fc93bbe56 Miscellaneous fixes, changes to CMD payloads
git-svn-id: file:///home/svn/incoming/trunk@3296 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-02 01:12:36 +00:00
HD Moore f468b10cff Tweaks
git-svn-id: file:///home/svn/incoming/trunk@3286 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:03:02 +00:00
vlad902 f3252ec6f8 Change the way disassemble works so it works on FreeBSD.
It did not work previously because FreeBSD does not support echo -ne


git-svn-id: file:///home/svn/incoming/trunk@3285 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 21:15:32 +00:00
vlad902 6dba54f49f Added test cases for mov_byte, mov_word, and mov_dword
git-svn-id: file:///home/svn/incoming/trunk@3281 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 20:27:11 +00:00
vlad902 44e0c1e5bc Added mov reg, DWORD support to set()
git-svn-id: file:///home/svn/incoming/trunk@3280 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 20:26:41 +00:00
vlad902 61c715ac27 Add some register aliases + documentation, and correct a bound
git-svn-id: file:///home/svn/incoming/trunk@3279 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 20:26:06 +00:00
vlad902 0d9875d40f Put in a better assembly test case (xor eax, eax can be either \x31\xc0 OR \x33\xc0)
git-svn-id: file:///home/svn/incoming/trunk@3278 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 20:24:44 +00:00
Matt Miller a4b622d425 fix for nop ui thing maybe
git-svn-id: file:///home/svn/incoming/trunk@3267 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 02:38:18 +00:00
Matt Miller 1497704a6c polymorphic buffer generation library
git-svn-id: file:///home/svn/incoming/trunk@3263 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-29 04:42:44 +00:00
HD Moore 3fa5d999a2 No more select(nil, nil, nil, X)
git-svn-id: file:///home/svn/incoming/trunk@3259 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-27 04:40:06 +00:00
HD Moore 93c3178732 No so worky
git-svn-id: file:///home/svn/incoming/trunk@3257 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-27 03:07:46 +00:00
HD Moore 412629e5c3 Stuff.. more changes to come
git-svn-id: file:///home/svn/incoming/trunk@3253 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-25 22:47:38 +00:00
Matt Miller b6a8514afe fix prompt display for stdio mode
git-svn-id: file:///home/svn/incoming/trunk@3251 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-21 04:32:06 +00:00
HD Moore 7a26ec55bf Proxy chaining patch from bmc
git-svn-id: file:///home/svn/incoming/trunk@3244 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-18 02:19:21 +00:00
HD Moore 082a62afd7 NetDDE + smb code frmo pusscat
git-svn-id: file:///home/svn/incoming/trunk@3243 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-18 02:07:33 +00:00
HD Moore 88658064df /usr/bin/ruby vs /usr/bin/env ruby
git-svn-id: file:///home/svn/incoming/trunk@3242 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-17 06:46:23 +00:00
Matt Miller 1a40e7b90c renamed command for stinko
git-svn-id: file:///home/svn/incoming/trunk@3238 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-15 05:56:10 +00:00
Matt Miller 410770bae6 fixes for some socket association stuff
git-svn-id: file:///home/svn/incoming/trunk@3233 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-15 04:46:52 +00:00
Matt Miller f61c5f4ece merge patch from bmc to speed up rand_base
git-svn-id: file:///home/svn/incoming/trunk@3228 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 20:13:35 +00:00
Matt Miller 043b81a400 timestomp ui
git-svn-id: file:///home/svn/incoming/trunk@3225 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 03:40:44 +00:00
Matt Miller 9612409872 timestomp integration
git-svn-id: file:///home/svn/incoming/trunk@3219 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:34:05 +00:00
HD Moore e79c9f8658 Something is still breaking, use w3who, show payloads, exploit, breaks
git-svn-id: file:///home/svn/incoming/trunk@3218 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:21:23 +00:00
Matt Miller 255f149799 added an edit command
git-svn-id: file:///home/svn/incoming/trunk@3217 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-13 15:25:24 +00:00
HD Moore 6063908cd4 Catch ugly Interrupt error in msfconsole, fixed tabs in simpleclient
git-svn-id: file:///home/svn/incoming/trunk@3213 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-13 06:27:34 +00:00
HD Moore f9edc88699 SMB/DCERPC errors/exceptions
Added default tab targets for TARGET/PAYLOAD/ENCODER/NOP


git-svn-id: file:///home/svn/incoming/trunk@3212 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-13 06:22:56 +00:00
Matt Miller fec5c3ebab sam stuff all happy
git-svn-id: file:///home/svn/incoming/trunk@3211 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-13 06:12:07 +00:00
HD Moore 557153e01c Code from Brian Caswell
git-svn-id: file:///home/svn/incoming/trunk@3210 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-13 06:08:40 +00:00
Matt Miller e645a3f467 initial import of the priv esc extension
git-svn-id: file:///home/svn/incoming/trunk@3209 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-13 05:59:59 +00:00
Matt Miller 954588ea9e support for RevertToSelf
git-svn-id: file:///home/svn/incoming/trunk@3207 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-13 03:57:20 +00:00
Matt Miller 22278ce458 vncinject payload
git-svn-id: file:///home/svn/incoming/trunk@3201 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-12 07:07:19 +00:00
Matt Miller 6eae4ca6cb opcode enhancement to dump xml
git-svn-id: file:///home/svn/incoming/trunk@3200 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-10 07:37:46 +00:00
Matt Miller 7421057221 some useful tools, msfweb daemonize, fix pattern creation
git-svn-id: file:///home/svn/incoming/trunk@3197 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-09 00:03:52 +00:00
Matt Miller b8fead6d97 doc update and improved msfopcode output
git-svn-id: file:///home/svn/incoming/trunk@3195 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-08 18:09:11 +00:00
Matt Miller ffc30f497c nasm shell
git-svn-id: file:///home/svn/incoming/trunk@3193 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-08 15:37:10 +00:00