477468147b
cleanup exceptions, optimize query length, add some entropy
...
git-svn-id: file:///home/svn/framework3/trunk@8153 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 05:09:40 +00:00
7c402d1d79
changed a comment
...
git-svn-id: file:///home/svn/framework3/trunk@8152 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 01:56:31 +00:00
52b71077d3
major overhaul of ms09-004 (cve-2008-5416) exploit
...
git-svn-id: file:///home/svn/framework3/trunk@8151 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 01:51:48 +00:00
08eb80f4a9
use the authbrute mixin
...
git-svn-id: file:///home/svn/framework3/trunk@8150 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-18 22:22:22 +00:00
cb9cf943b4
Remove the database lookups so we don't trigger lockout policies unnecessarily. We'll probably have to revisit this at some point
...
git-svn-id: file:///home/svn/framework3/trunk@8145 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-18 21:19:28 +00:00
d4c42806f6
can't really be a scanner since a sid is needed for each host
...
git-svn-id: file:///home/svn/framework3/trunk@8141 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-17 17:56:05 +00:00
bbe10b439f
let the user know when a client connects
...
git-svn-id: file:///home/svn/framework3/trunk@8140 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-16 01:00:01 +00:00
6c572466fa
make the oracle login a scanner for consistency. see 757
...
git-svn-id: file:///home/svn/framework3/trunk@8139 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-16 00:59:06 +00:00
69f609bdcd
Updated description to make the source of the exploit clear and why it only triggers reliably vs 6 now. Adjusts the heap spray to be slightly bigger
...
git-svn-id: file:///home/svn/framework3/trunk@8138 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-16 00:55:42 +00:00
a0326fc842
add CVE and OSVDB refs
...
git-svn-id: file:///home/svn/framework3/trunk@8137 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 22:05:02 +00:00
579a6fe799
Metasploit port of the IE "Aurora" exploit, based on this sample: http://wepawet.iseclab.org/view.php?hash=1aea206aa64ebeabb07237f1e2230d0f&type=js
...
git-svn-id: file:///home/svn/framework3/trunk@8136 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 21:36:04 +00:00
2ba892aa69
Report host mac, name, and whether its a VM
...
git-svn-id: file:///home/svn/framework3/trunk@8133 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 15:49:13 +00:00
7390b1d42d
Add and improve database reporting to existing scanner modules
...
git-svn-id: file:///home/svn/framework3/trunk@8131 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 03:25:34 +00:00
90221c1191
Consistency change
...
git-svn-id: file:///home/svn/framework3/trunk@8130 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 02:58:59 +00:00
0b7df74615
Rename modules to be consistent with the new convention
...
git-svn-id: file:///home/svn/framework3/trunk@8129 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 02:55:08 +00:00
fba8a1d110
added a German target with 0x0a0a0a0a as the spray addr
...
git-svn-id: file:///home/svn/framework3/trunk@8125 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-14 22:24:56 +00:00
df1cb6b36e
move smb/login. see 757
...
git-svn-id: file:///home/svn/framework3/trunk@8121 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-14 18:51:04 +00:00
54095a585e
update the auth bruteforcer, and use it in smb/login
...
git-svn-id: file:///home/svn/framework3/trunk@8116 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-14 16:58:43 +00:00
396e894cdb
Finger user enumerator
...
git-svn-id: file:///home/svn/framework3/trunk@8109 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 23:37:14 +00:00
9bb14e1c4e
Add a telnet banner grabber
...
git-svn-id: file:///home/svn/framework3/trunk@8108 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 21:46:48 +00:00
831833667a
Minor tweak (run inside of sh -c '')
...
git-svn-id: file:///home/svn/framework3/trunk@8107 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 20:19:51 +00:00
dded66d71a
Fixed up to work against Windows 2000 -> Windows 7
...
git-svn-id: file:///home/svn/framework3/trunk@8106 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 14:37:15 +00:00
de2a293c26
Lookup users via SAMR
...
git-svn-id: file:///home/svn/framework3/trunk@8103 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 00:27:11 +00:00
a2b883ff3d
Adds a SID lookup module
...
git-svn-id: file:///home/svn/framework3/trunk@8101 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-12 07:39:53 +00:00
f9f4f31fdd
Changed to checking the size and not the line count on queries
...
git-svn-id: file:///home/svn/framework3/trunk@8083 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-07 17:52:40 +00:00
b1f79c6342
Use nohup to prevent the telnet session close from killing the command
...
git-svn-id: file:///home/svn/framework3/trunk@8082 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-07 00:10:03 +00:00
8399ff46b2
oops, left out a var
...
git-svn-id: file:///home/svn/framework3/trunk@8081 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-06 20:55:41 +00:00
c51c14bcba
fix typos :-/
...
git-svn-id: file:///home/svn/framework3/trunk@8080 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-06 20:09:34 +00:00
97338e6848
add exploit module for cve-2007-2280 (split from other)
...
git-svn-id: file:///home/svn/framework3/trunk@8079 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-06 20:04:58 +00:00
75ff9d327a
_2 == cve-2009-3844
...
git-svn-id: file:///home/svn/framework3/trunk@8078 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-06 20:01:08 +00:00
3a9b384554
renamed the moduled
...
git-svn-id: file:///home/svn/framework3/trunk@8077 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-06 19:29:11 +00:00
4a0051d93a
lots of updates, preparing to split into two modules
...
git-svn-id: file:///home/svn/framework3/trunk@8076 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-06 19:28:19 +00:00
6a10d6b6ca
Cleanup for tcp mixin, report smb version better, downcase service names
...
git-svn-id: file:///home/svn/framework3/trunk@8074 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-05 18:47:04 +00:00
888b7637c0
Add OSVDB ref, fixed exploit-db refs
...
git-svn-id: file:///home/svn/framework3/trunk@8071 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-05 11:49:12 +00:00
905d391d5e
add exploit module for bigant 2.52 usv bug
...
git-svn-id: file:///home/svn/framework3/trunk@8070 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-05 08:24:35 +00:00
efb3dbb2af
minor tweaks
...
git-svn-id: file:///home/svn/framework3/trunk@8069 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-05 00:35:46 +00:00
789d875d24
record addr for stack hijacking
...
git-svn-id: file:///home/svn/framework3/trunk@8068 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-05 00:02:15 +00:00
9a9c92d785
added description, sql2ksp3 target, minor reliability improvement
...
git-svn-id: file:///home/svn/framework3/trunk@8067 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-04 22:07:03 +00:00
c62e314ac4
Add OSVDB ref
...
git-svn-id: file:///home/svn/framework3/trunk@8063 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-04 13:02:18 +00:00
1239ce132e
added exploit module nettransport.rb from dookie
...
git-svn-id: file:///home/svn/framework3/trunk@8062 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-03 16:07:54 +00:00
bb07ea9854
many updates, now supporting two diff techniques
...
git-svn-id: file:///home/svn/framework3/trunk@8061 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-03 08:10:28 +00:00
3c6cbbc47e
make sure IE service packs don't throw off the version comparison
...
git-svn-id: file:///home/svn/framework3/trunk@8049 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-31 21:24:00 +00:00
e2a0ff92ce
add check and auto-target selection
...
git-svn-id: file:///home/svn/framework3/trunk@8048 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-31 16:26:32 +00:00
64e524545e
Update OSVDB ref
...
git-svn-id: file:///home/svn/framework3/trunk@8045 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-31 13:30:35 +00:00
23d7f53f3a
add exploit module for cve-2008-5416
...
git-svn-id: file:///home/svn/framework3/trunk@8044 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-31 05:18:55 +00:00
2283e029db
crossing fingers, big cr removal batch
...
git-svn-id: file:///home/svn/framework3/trunk@8038 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 22:24:22 +00:00
53d9a9167d
save the discovered version
...
git-svn-id: file:///home/svn/framework3/trunk@8036 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 18:23:03 +00:00
37d84a5ccc
save the discovered version
...
git-svn-id: file:///home/svn/framework3/trunk@8035 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 18:21:07 +00:00
37bec306a7
ruby 1.9 / unpack fix
...
git-svn-id: file:///home/svn/framework3/trunk@8032 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 09:02:55 +00:00
4827d81966
formatting fixes
...
git-svn-id: file:///home/svn/framework3/trunk@8029 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 00:48:16 +00:00
02eb7ab80d
massive changes to the database api. Auxiliary::Report is now just a bunch of stubs into the main DBManager, most aux modules should just work, but they haven't all been tested. introduces a get_auth_info method for pulling credentials out of the db. other db api methods should be more standardized now. cross your fingers
...
git-svn-id: file:///home/svn/framework3/trunk@8028 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 23:48:45 +00:00
68eb240639
Updates to match the new Racket namespace
...
git-svn-id: file:///home/svn/framework3/trunk@8026 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 23:32:50 +00:00
48c2184fb2
reinstated linux bruteforce target from msf2 exploit
...
git-svn-id: file:///home/svn/framework3/trunk@8025 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 22:57:02 +00:00
57fd341f4a
added auto targeting, XPSP1 target, updated 2ksp4 target, notes, description
...
git-svn-id: file:///home/svn/framework3/trunk@8023 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 19:22:43 +00:00
922cef26fa
Store the domain name in the SMB client object, along with other fields provided by NTLMSSP responses. Show the domain name and netbios name in the version scanner. Update MS06-070 to remove the default target, use the domain name from the server response, and use a more reliable return address for 2000 SP4.
...
git-svn-id: file:///home/svn/framework3/trunk@8022 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 14:00:49 +00:00
6170998ba3
add exploit module for cve-2006-4691
...
git-svn-id: file:///home/svn/framework3/trunk@8021 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 05:13:57 +00:00
58f2c933d5
Update nbname to log to the database
...
git-svn-id: file:///home/svn/framework3/trunk@8020 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 04:26:46 +00:00
4ccfc076f9
ruby 1.8 compat fix
...
git-svn-id: file:///home/svn/framework3/trunk@8014 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 22:53:39 +00:00
1f2c1e7866
corrected cve, removed cr's, added keywords
...
git-svn-id: file:///home/svn/framework3/trunk@8012 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 21:12:11 +00:00
a247de77ec
add the SingleStaticBit for the CVE-2008-4193 exploit - comments welcome
...
git-svn-id: file:///home/svn/framework3/trunk@8011 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 20:39:43 +00:00
45a9d50d0d
add exploit module for CVE-2008-4193
...
git-svn-id: file:///home/svn/framework3/trunk@8010 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 20:38:50 +00:00
364880fb4d
Bump the session wait to 10 seconds
...
git-svn-id: file:///home/svn/framework3/trunk@8004 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 14:27:33 +00:00
5ac485eb48
Add OSVDB reference
...
git-svn-id: file:///home/svn/framework3/trunk@8002 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 12:33:40 +00:00
c9c8eb3f12
Updated modules from tebo
...
git-svn-id: file:///home/svn/framework3/trunk@8001 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 05:07:50 +00:00
4728a29bae
Two new modules from dijital1
...
git-svn-id: file:///home/svn/framework3/trunk@8000 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 04:36:25 +00:00
131462fa8b
Fix service name reporting
...
git-svn-id: file:///home/svn/framework3/trunk@7999 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 00:37:56 +00:00
5757216f9a
This overhauls the database reporting code - all report_* functions now add their write operation to a queue that is processed sequentially in the background. This prevents concurrency issues around database writes, but prevents modules from immediately using the results of their report_* calls in the database. Still todo is a method for waiting on the write to have occurred
...
git-svn-id: file:///home/svn/framework3/trunk@7997 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 00:21:21 +00:00
33bb229207
Keywords
...
git-svn-id: file:///home/svn/framework3/trunk@7995 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-27 14:10:54 +00:00
83296f8b23
MySQL simple enumeration module using the new MySQL mixin
...
git-svn-id: file:///home/svn/framework3/trunk@7994 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-27 14:03:39 +00:00
166489ad5f
Update a few scanner modules to write to the database properly
...
git-svn-id: file:///home/svn/framework3/trunk@7992 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-27 07:30:50 +00:00
308bdcccb2
Fixes #733 (using open vs ::Up, may need a revert and a change to the importers instead). Update the sweep_udp module to store host, mac, name info
...
git-svn-id: file:///home/svn/framework3/trunk@7990 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 22:08:49 +00:00
16062eed2d
Holiday present from EgiX
...
git-svn-id: file:///home/svn/framework3/trunk@7989 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 18:50:44 +00:00
095bc2167d
Patch from antoine to use the netbios parsing code from nbname
...
git-svn-id: file:///home/svn/framework3/trunk@7984 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 18:10:13 +00:00
634294cb1f
Handle oddball servers that return no names
...
git-svn-id: file:///home/svn/framework3/trunk@7983 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 12:13:18 +00:00
1a818ebf77
Adds a NetBIOS name scanner - can obtain hostname, mac address, logged in user (when Messenger is running), and alternate interface IPs
...
git-svn-id: file:///home/svn/framework3/trunk@7981 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 08:51:03 +00:00
1cc9fa7dad
Print the site name for the 404 message
...
git-svn-id: file:///home/svn/framework3/trunk@7980 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 05:53:29 +00:00
3d421cfefd
SQLMap update and consitency fix for Bernardo's name
...
git-svn-id: file:///home/svn/framework3/trunk@7979 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 05:24:37 +00:00
9ec132d86f
Fixes #720 . Adds inquis's mysql brute forcer using the new mixin
...
git-svn-id: file:///home/svn/framework3/trunk@7978 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 05:22:34 +00:00
d0969746a4
Mostly cosmetic changes from local tree
...
git-svn-id: file:///home/svn/framework3/trunk@7970 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 03:31:20 +00:00
06cea605c7
spaces -> tab
...
git-svn-id: file:///home/svn/framework3/trunk@7966 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-24 21:27:24 +00:00
b13e185943
Giant update from tebo, fixing up SunRPC and the nsfmount module
...
git-svn-id: file:///home/svn/framework3/trunk@7961 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-23 13:44:53 +00:00
87176f9591
Correct a syntax error in adobe_u3d_meshdecl
...
git-svn-id: file:///home/svn/framework3/trunk@7959 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-23 12:50:55 +00:00
e35ac1822a
fix formatting
...
git-svn-id: file:///home/svn/framework3/trunk@7956 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-23 04:23:56 +00:00
92c703ba6f
Wait a second before deleting the file, catch an exception on delete, combined these reduce some of the issues around psexec
...
git-svn-id: file:///home/svn/framework3/trunk@7954 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-23 04:02:59 +00:00
b933f49ec3
this exploit always uses an exe, so default EXITFUNC to process so we don't leave processes lying around
...
git-svn-id: file:///home/svn/framework3/trunk@7950 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-23 01:29:16 +00:00
a49a48bff4
fix formatting
...
git-svn-id: file:///home/svn/framework3/trunk@7943 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-22 00:18:53 +00:00
1e6c9bef74
fix uri for check/detect
...
git-svn-id: file:///home/svn/framework3/trunk@7942 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 23:10:38 +00:00
d5afd6c670
fixed typo/formatting in description
...
git-svn-id: file:///home/svn/framework3/trunk@7941 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 23:05:44 +00:00
6219116ebf
removed exit calls
...
git-svn-id: file:///home/svn/framework3/trunk@7940 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 23:03:03 +00:00
d0098095a4
hopefully resolved some hang issues
...
git-svn-id: file:///home/svn/framework3/trunk@7939 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 22:57:36 +00:00
9afb67aa5f
removed exit call
...
git-svn-id: file:///home/svn/framework3/trunk@7936 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 22:10:18 +00:00
5830e359b6
corrected "privileged" flag
...
git-svn-id: file:///home/svn/framework3/trunk@7932 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 18:18:18 +00:00
19d32b6c97
add jabra to author list
...
git-svn-id: file:///home/svn/framework3/trunk@7931 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 17:01:12 +00:00
544efd879b
Add OSVDB references
...
git-svn-id: file:///home/svn/framework3/trunk@7929 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 11:53:20 +00:00
47ef693b77
add CVE references!
...
git-svn-id: file:///home/svn/framework3/trunk@7928 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 09:38:42 +00:00
86dc8da1bb
bump ranking up
...
git-svn-id: file:///home/svn/framework3/trunk@7927 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 07:56:48 +00:00
4b883322f5
moved length adjustment
...
git-svn-id: file:///home/svn/framework3/trunk@7926 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-20 22:45:33 +00:00
3767b6be7a
add exploit module for cve-2008-4828
...
git-svn-id: file:///home/svn/framework3/trunk@7925 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-20 22:40:14 +00:00
6f243f6515
add exploit module for cve-2009-3853
...
git-svn-id: file:///home/svn/framework3/trunk@7924 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-20 11:09:39 +00:00
6a1f43b3df
rename again :)
...
git-svn-id: file:///home/svn/framework3/trunk@7920 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-19 01:09:03 +00:00
7ef085f9b2
resolved conflict, attempt #2 to rename
...
git-svn-id: file:///home/svn/framework3/trunk@7919 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-19 01:08:41 +00:00
8f7c820ac9
renamed module
...
git-svn-id: file:///home/svn/framework3/trunk@7918 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-19 01:04:03 +00:00
be42efdd1b
Update the PDF modules to work on a wider range of versions
...
git-svn-id: file:///home/svn/framework3/trunk@7917 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-19 01:02:32 +00:00
de84d7e989
updated badchars and removed alphnumeric encoding.
...
git-svn-id: file:///home/svn/framework3/trunk@7916 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-19 00:08:32 +00:00
82d84605e4
advisory says it should work against 5.5, but this module causes js syntax errors, so only run it on 6
...
git-svn-id: file:///home/svn/framework3/trunk@7914 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-18 19:38:52 +00:00
8c12722f9b
add database reporting to endpoint_mapper. fixes #695
...
git-svn-id: file:///home/svn/framework3/trunk@7913 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-18 01:51:31 +00:00
c8495272a8
add exploit module for cve-2009-3214
...
git-svn-id: file:///home/svn/framework3/trunk@7911 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-18 00:19:04 +00:00
442bbe9e14
language cleanup
...
git-svn-id: file:///home/svn/framework3/trunk@7910 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 23:02:01 +00:00
2bb2729064
fix an undefined constant bug reported to the mailing list by Razeor
...
git-svn-id: file:///home/svn/framework3/trunk@7908 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 16:14:27 +00:00
f2ec7795e2
Reliability improvement for the Acrobat bug - use the lame old 0x0c0c0c0c, but this works on the widest range of versions
...
git-svn-id: file:///home/svn/framework3/trunk@7907 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 14:43:05 +00:00
80fa601a2c
Fixes #667 . Automigrates this to avoid timer
...
git-svn-id: file:///home/svn/framework3/trunk@7905 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 06:02:34 +00:00
bcdb44b835
See #667 . This adds InitialAutoRunScript support, to be defaulted by browser modules (and others)
...
git-svn-id: file:///home/svn/framework3/trunk@7904 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 06:00:14 +00:00
5ef4545a1b
fd.read -> fd.read(fd.stat.size)
...
git-svn-id: file:///home/svn/framework3/trunk@7903 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 05:22:40 +00:00
026924c9b6
fixed sync issues between browser/fileformat modules
...
git-svn-id: file:///home/svn/framework3/trunk@7902 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 05:19:30 +00:00
2baa4a1efa
port changes from Lurene to browser version
...
git-svn-id: file:///home/svn/framework3/trunk@7901 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 05:16:35 +00:00
aef9a5c7b2
re-commit of changes from r7892
...
git-svn-id: file:///home/svn/framework3/trunk@7900 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 05:11:45 +00:00
b37c34579b
add exploit module for cve-2009-3869
...
NOTE: no policy change is required for this exploit to succeed.
git-svn-id: file:///home/svn/framework3/trunk@7899 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 04:52:40 +00:00
d0a37bd506
Fix tab indentations
...
git-svn-id: file:///home/svn/framework3/trunk@7898 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 04:00:00 +00:00
0fa275b53b
Cleanups
...
Allow arbitrary (non-unicode) targets
git-svn-id: file:///home/svn/framework3/trunk@7895 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-16 21:44:18 +00:00
e563e91d35
added browser versions of yesterdays adobe pdf exploits from jabra
...
git-svn-id: file:///home/svn/framework3/trunk@7894 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-16 20:37:57 +00:00
9a6839e412
add exploit module for cve-2009-2459
...
git-svn-id: file:///home/svn/framework3/trunk@7893 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-16 03:32:44 +00:00
82dc3eb3bf
added reference, couple of test results
...
git-svn-id: file:///home/svn/framework3/trunk@7892 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-16 00:14:47 +00:00
a81d8d23bd
revamp version tests and the way exploits are run. fixes 673
...
git-svn-id: file:///home/svn/framework3/trunk@7891 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-16 00:13:57 +00:00
191e98dc54
changed module name
...
git-svn-id: file:///home/svn/framework3/trunk@7890 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 23:17:24 +00:00
1875e86f7a
remove executable bit
...
git-svn-id: file:///home/svn/framework3/trunk@7889 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 23:14:15 +00:00
d9aca586a2
tested against 9.1.0
...
git-svn-id: file:///home/svn/framework3/trunk@7888 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 23:12:08 +00:00
115899d24d
add minver and maxver. slightly tricky because the vuln affects moz 1.7 and ff 1.0
...
git-svn-id: file:///home/svn/framework3/trunk@7886 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 21:54:24 +00:00
008c72e255
add proper version
...
git-svn-id: file:///home/svn/framework3/trunk@7885 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 21:49:32 +00:00
2070bd4756
took notes on targets from various other exploits
...
git-svn-id: file:///home/svn/framework3/trunk@7884 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 20:37:34 +00:00
56c2d32b1e
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@7883 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 20:37:15 +00:00
3677711cb0
adding OSVDB ref
...
git-svn-id: file:///home/svn/framework3/trunk@7882 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 20:34:01 +00:00
7b34f7b0f2
add exploit module for cve-2009-4324
...
git-svn-id: file:///home/svn/framework3/trunk@7881 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 20:15:08 +00:00
2570fcee15
get rid of some more ^Ms
...
git-svn-id: file:///home/svn/framework3/trunk@7880 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 18:47:29 +00:00
48c3709a25
correct maxver
...
git-svn-id: file:///home/svn/framework3/trunk@7879 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 18:46:53 +00:00
196ee82179
bye-bye crlf
...
git-svn-id: file:///home/svn/framework3/trunk@7878 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 18:13:27 +00:00
f3a0bbc6d6
rename to make a bit more sense
...
git-svn-id: file:///home/svn/framework3/trunk@7875 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 06:05:30 +00:00
2c88e2eb62
rename to make a bit more sense
...
git-svn-id: file:///home/svn/framework3/trunk@7874 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 05:41:29 +00:00
d81c581f21
oops, remove hard coded payload
...
git-svn-id: file:///home/svn/framework3/trunk@7873 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 05:32:52 +00:00
4c1034ad7f
add exploit module for cve-2006-2502
...
git-svn-id: file:///home/svn/framework3/trunk@7871 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 04:41:31 +00:00
b1c9b7e927
a few more svn:keywords fixes
...
git-svn-id: file:///home/svn/framework3/trunk@7870 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 02:11:42 +00:00
d5eb4d8217
add svn:keywords property
...
git-svn-id: file:///home/svn/framework3/trunk@7869 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 02:08:43 +00:00
8a95baa810
add exploit module for cve-2008-1697 from bannedit/muts
...
git-svn-id: file:///home/svn/framework3/trunk@7868 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 00:32:42 +00:00
1813a0fb9a
updated technique
...
git-svn-id: file:///home/svn/framework3/trunk@7867 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 00:32:07 +00:00
0cf566c0b9
fixes 688. better return address for greater reliability, works against FF-1.0.4 and Moz-1.7.1 on XPSP3 and 2kAS-SP0
...
git-svn-id: file:///home/svn/framework3/trunk@7865 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 23:27:28 +00:00
c799df8559
target is no good. offsets change on different installs.
...
git-svn-id: file:///home/svn/framework3/trunk@7864 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 23:07:21 +00:00
88b9ee18af
clarified some version info
...
git-svn-id: file:///home/svn/framework3/trunk@7863 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 23:01:34 +00:00
c831cda3f5
milworm/exploitdb 9277 only covers m3u and mpf, not pls
...
git-svn-id: file:///home/svn/framework3/trunk@7862 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 22:59:32 +00:00
8317b69aca
corrected disclosure date
...
git-svn-id: file:///home/svn/framework3/trunk@7860 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 22:44:37 +00:00
2524840348
renamed, new targets, now using seh...
...
git-svn-id: file:///home/svn/framework3/trunk@7859 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 22:40:56 +00:00
1dc2c41837
added OSVDB and exploit-db refs
...
git-svn-id: file:///home/svn/framework3/trunk@7858 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 22:29:10 +00:00
4d645796af
add exploit module from dookie
...
git-svn-id: file:///home/svn/framework3/trunk@7856 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 21:27:43 +00:00
837c70715d
Reference updates from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@7854 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 20:09:46 +00:00
ef0d86720a
updated description, added xp sp2+sp3 target, see #687
...
git-svn-id: file:///home/svn/framework3/trunk@7853 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 19:04:40 +00:00
0efbe3baf9
Remove the debug print
...
git-svn-id: file:///home/svn/framework3/trunk@7852 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 18:56:19 +00:00
97757c37a0
Adds an exploit module for the zabbix agent command execution flaw (no cve/bid/osvdb)
...
git-svn-id: file:///home/svn/framework3/trunk@7851 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 18:24:24 +00:00
e02f62e3aa
Switch to a return address that also works on SP0
...
git-svn-id: file:///home/svn/framework3/trunk@7849 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 17:14:08 +00:00
20222a44ea
Fix. Thats next step
...
git-svn-id: file:///home/svn/framework3/trunk@7847 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 05:58:57 +00:00
d6ee7c58ce
New wmap moule for generic checks
...
git-svn-id: file:///home/svn/framework3/trunk@7846 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 05:49:44 +00:00
7e4d03be86
This adds support for the old exe format to msfencode using -t exe-small and allows encoder modules to change preferences based on the platform, which fully solves #430 .
...
git-svn-id: file:///home/svn/framework3/trunk@7840 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 19:03:35 +00:00
c287573213
A few more wmap cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@7839 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 06:56:01 +00:00
1029ecd7f8
Cleanup wmap, add the missing database tables back, rename to have a wmap_prefix
...
git-svn-id: file:///home/svn/framework3/trunk@7837 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 05:24:48 +00:00
fb7a522bb3
Fixes #682 by correcting the BID (thanks Kurt!)
...
git-svn-id: file:///home/svn/framework3/trunk@7836 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 04:02:23 +00:00
3b52cd2e0d
Adds a DoS module for the recent NTP (server to server) issue from Tod Beardsley
...
git-svn-id: file:///home/svn/framework3/trunk@7835 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 02:56:20 +00:00
f1a975a14e
fix typo, remove automatic target
...
git-svn-id: file:///home/svn/framework3/trunk@7834 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-12 21:44:04 +00:00
ea0a1eea7d
add ranking...
...
git-svn-id: file:///home/svn/framework3/trunk@7833 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-12 20:14:24 +00:00
002b043d4c
added exploit module hp_nnm_snmp.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7832 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-12 20:06:14 +00:00
5f65d6bb32
properly commit references from Steve Tornio :)
...
git-svn-id: file:///home/svn/framework3/trunk@7828 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-11 21:24:18 +00:00
34408c5e3e
add exploit module for CVE-2009-3867 (JRE getSoundbank)
...
git-svn-id: file:///home/svn/framework3/trunk@7827 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-11 21:18:31 +00:00
740fd67b74
add OSVDB reference from Steven Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@7826 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-11 20:41:37 +00:00
3a2f75e318
Improved performance for SRV record enumeration, added Additional SRV records and fix problem with Wildcard enumeration
...
git-svn-id: file:///home/svn/framework3/trunk@7825 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-11 20:24:55 +00:00
3ac51c7396
added exploit module symantec_altirisdeployment_runcmd.rb.
...
git-svn-id: file:///home/svn/framework3/trunk@7821 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-11 02:36:01 +00:00
95f9c1dacf
note file version
...
git-svn-id: file:///home/svn/framework3/trunk@7820 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 23:23:16 +00:00
dea639229b
rank exploit
...
git-svn-id: file:///home/svn/framework3/trunk@7819 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 23:20:36 +00:00
18f96c3395
add exploit module for xenorate bof
...
git-svn-id: file:///home/svn/framework3/trunk@7818 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 23:19:44 +00:00
fc8a2b2a2e
add exploit module for audio workstation from dookie
...
git-svn-id: file:///home/svn/framework3/trunk@7814 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 20:46:53 +00:00
fb1a8a8283
add exploit module for audio workstation from dookie
...
git-svn-id: file:///home/svn/framework3/trunk@7813 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 20:46:34 +00:00
e724ceaf33
add exploit for gAlan from loneferret
...
git-svn-id: file:///home/svn/framework3/trunk@7812 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 20:41:40 +00:00
076c8d92ea
clarification
...
git-svn-id: file:///home/svn/framework3/trunk@7811 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 20:31:34 +00:00
9eb6063448
hopefully an improvement in reliability
...
git-svn-id: file:///home/svn/framework3/trunk@7810 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 20:28:32 +00:00
21cbb87fac
fixup whitespace
...
git-svn-id: file:///home/svn/framework3/trunk@7804 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 18:07:16 +00:00
d8a4926a22
add framework tag comments to top
...
git-svn-id: file:///home/svn/framework3/trunk@7803 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 17:35:40 +00:00
11bbbbd38f
add exploit module for cve-2009-3837 from dookie
...
git-svn-id: file:///home/svn/framework3/trunk@7802 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 17:34:58 +00:00
6c98f3c03d
add exploit module for cve-2009-1394
...
git-svn-id: file:///home/svn/framework3/trunk@7797 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 08:24:37 +00:00
4cb050010b
add exploitability detection (by trying %n)
...
git-svn-id: file:///home/svn/framework3/trunk@7791 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 23:53:26 +00:00
5ddfffc94f
only accept one connection for bind_perl shells. fixes 669
...
git-svn-id: file:///home/svn/framework3/trunk@7790 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 23:49:50 +00:00
c1c06d6ea1
adds ranking.. more aux. modules need this to be listed.
...
git-svn-id: file:///home/svn/framework3/trunk@7789 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 23:29:53 +00:00
215879334a
minor tweaks to targets
...
git-svn-id: file:///home/svn/framework3/trunk@7788 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 23:19:19 +00:00
d56daab7d8
little comment heh
...
git-svn-id: file:///home/svn/framework3/trunk@7784 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 22:27:11 +00:00
164dd4201a
updated badchars, rh6.2 target, added %8x detection check
...
git-svn-id: file:///home/svn/framework3/trunk@7782 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 21:51:46 +00:00
4fcdceccb7
No ruby access on the common target
...
git-svn-id: file:///home/svn/framework3/trunk@7776 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 15:13:35 +00:00
3c08bc0c80
Rename and reference update from the microsoft patch
...
git-svn-id: file:///home/svn/framework3/trunk@7775 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 15:06:26 +00:00
8a784339c4
Remove a debug print
...
git-svn-id: file:///home/svn/framework3/trunk@7774 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 14:00:21 +00:00
ba1b032207
Adds coverage for the QTSS metachar injection bug
...
git-svn-id: file:///home/svn/framework3/trunk@7772 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 13:23:59 +00:00
88de26e46c
re-enable pdf obfuscation
...
git-svn-id: file:///home/svn/framework3/trunk@7771 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 06:19:32 +00:00
e2f70c8928
detect fmt str specifier capabilities, rework stack dumping
...
git-svn-id: file:///home/svn/framework3/trunk@7769 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 02:19:07 +00:00
1fec10cb44
finish and test target for redhat 6.2
...
git-svn-id: file:///home/svn/framework3/trunk@7765 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 23:52:11 +00:00
4bcc8a93a3
attempt to improve reliability of u3d pdf exploits
...
git-svn-id: file:///home/svn/framework3/trunk@7762 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 22:08:32 +00:00
87c85b5176
removed executable generation routines from Rex::Text (use Msf::Util::EXE), Fixes #660
...
git-svn-id: file:///home/svn/framework3/trunk@7760 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 21:24:45 +00:00
9b4f521df5
two more similar exploit modules, cleaned up naming
...
git-svn-id: file:///home/svn/framework3/trunk@7759 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 20:20:30 +00:00
9da59988a6
updated disclosure date
...
git-svn-id: file:///home/svn/framework3/trunk@7758 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 20:10:17 +00:00
5995ddca97
reduce ranking due to egghunter instability
...
git-svn-id: file:///home/svn/framework3/trunk@7757 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 19:53:11 +00:00
cb5d02af20
remove debug code
...
git-svn-id: file:///home/svn/framework3/trunk@7756 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 19:52:15 +00:00
6ae2293a79
add exploit module for cve-2009-0133
...
git-svn-id: file:///home/svn/framework3/trunk@7755 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 19:50:21 +00:00
bfa405cb2b
add exploit module for cve-2009-0133
...
git-svn-id: file:///home/svn/framework3/trunk@7754 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 19:50:00 +00:00
d86bfedc3e
osvdb reference from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@7752 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 16:29:53 +00:00
0961ce3523
add exploit module for cve-2009-3693
...
git-svn-id: file:///home/svn/framework3/trunk@7749 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 03:08:46 +00:00
ed70daf9b1
update references
...
git-svn-id: file:///home/svn/framework3/trunk@7746 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 21:30:11 +00:00
2dfcd26370
oops, dupe of auxiliary/admin/symantec/cba_exec.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7745 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 21:28:53 +00:00
cb6fbe8894
add exploit module for cve-2009-1429
...
git-svn-id: file:///home/svn/framework3/trunk@7744 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 20:39:00 +00:00
e04a491905
updated references
...
git-svn-id: file:///home/svn/framework3/trunk@7743 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 20:26:43 +00:00
ce42156e38
minor tweaks
...
git-svn-id: file:///home/svn/framework3/trunk@7742 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 20:24:30 +00:00
f6d491a996
add exploit module from dookie
...
git-svn-id: file:///home/svn/framework3/trunk@7741 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 20:24:12 +00:00
90342d0fa0
add exploit module from dookie
...
git-svn-id: file:///home/svn/framework3/trunk@7740 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 20:21:25 +00:00
b3df3730c0
report_note() expects :type, not :ntype
...
git-svn-id: file:///home/svn/framework3/trunk@7738 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 17:03:24 +00:00
ff83f1cd2f
add ranking to every exploit module, pfew!
...
git-svn-id: file:///home/svn/framework3/trunk@7724 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-06 05:50:37 +00:00
2cf9c3ce2b
revision fixups
...
git-svn-id: file:///home/svn/framework3/trunk@7723 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-06 05:16:11 +00:00
17249f29d3
cve roulette also cve-2009-4054
...
git-svn-id: file:///home/svn/framework3/trunk@7722 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-06 05:00:06 +00:00
619f82a420
ugh, rh6.1 isn't vulnerable either
...
git-svn-id: file:///home/svn/framework3/trunk@7720 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-06 03:42:37 +00:00
576d55f821
added some missing CVE references
...
git-svn-id: file:///home/svn/framework3/trunk@7719 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-06 02:30:42 +00:00
b35928ba19
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@7718 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 23:35:26 +00:00
f55d2202c3
renamed and cleaned up.
...
git-svn-id: file:///home/svn/framework3/trunk@7717 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 14:40:42 +00:00
ad4ab0d5ad
renamed and fixed description.
...
git-svn-id: file:///home/svn/framework3/trunk@7716 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 14:30:22 +00:00
9afd42de81
renamed and fixed description.
...
git-svn-id: file:///home/svn/framework3/trunk@7715 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 14:24:36 +00:00
8ada83595d
cleaned up a bit.
...
git-svn-id: file:///home/svn/framework3/trunk@7714 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 14:18:24 +00:00
b731291878
cleaned up name and description.
...
git-svn-id: file:///home/svn/framework3/trunk@7713 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 14:14:23 +00:00
3358b9113f
removed writing to a file. only print if get a hit.
...
git-svn-id: file:///home/svn/framework3/trunk@7710 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-04 23:54:14 +00:00
d93be3e873
typo in description
...
git-svn-id: file:///home/svn/framework3/trunk@7702 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-04 18:46:45 +00:00
5c271db9b5
add OSVDB reference from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@7695 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-04 15:52:20 +00:00
e8e98b9be6
add exploit module for cve-2000-0573
...
git-svn-id: file:///home/svn/framework3/trunk@7693 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-04 07:50:53 +00:00
80422f24c4
added exploit module ca_arcserve_342.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7690 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-04 02:55:00 +00:00
93d02320cf
updated oracle mixin and adjusted affected modules. now compatible with ruby 1.8 and 1.9
...
git-svn-id: file:///home/svn/framework3/trunk@7688 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-03 23:57:02 +00:00
9ebcd40a4e
Updated references to work better with NeXpose integration
...
git-svn-id: file:///home/svn/framework3/trunk@7683 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-03 15:27:29 +00:00
8e0eef03c6
see #594 . remove some extraneous junk, don't run the shell in a terminal (it dies immediately). space is the only badchar. still doesn't actually work without a modification to encoder/cmd/generic_sh.
...
git-svn-id: file:///home/svn/framework3/trunk@7680 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-03 09:09:56 +00:00
8e5d2b98b0
prefer the echo encoder over the simpler and more error prone ifs encoder
...
git-svn-id: file:///home/svn/framework3/trunk@7679 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-03 08:39:22 +00:00
b8302e6f61
changed default target
...
git-svn-id: file:///home/svn/framework3/trunk@7675 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-03 00:04:33 +00:00
b9a97f310e
fixed typo in targets
...
git-svn-id: file:///home/svn/framework3/trunk@7674 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-02 23:50:09 +00:00
267ed23223
this exploits an ssh server, moving to ssh dir
...
git-svn-id: file:///home/svn/framework3/trunk@7673 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-02 22:31:13 +00:00
dcc05c7494
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@7672 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-02 21:06:36 +00:00
10d636c894
applied patch provided by Erwin Paternotte
...
git-svn-id: file:///home/svn/framework3/trunk@7670 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-02 17:38:13 +00:00
faa27f93b9
updated with the bid id
...
git-svn-id: file:///home/svn/framework3/trunk@7669 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-02 12:20:40 +00:00
25106b555f
log to the appropiated place.
...
git-svn-id: file:///home/svn/framework3/trunk@7664 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-01 23:00:42 +00:00
b48e5d34e7
added svn keywords
...
git-svn-id: file:///home/svn/framework3/trunk@7660 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-01 20:36:55 +00:00
b0403cfde2
OSVDB references from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@7658 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-01 16:44:25 +00:00
38d04631e6
recorded some additional test results
...
git-svn-id: file:///home/svn/framework3/trunk@7657 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-01 16:42:58 +00:00
ec45ea8c22
minor cleanups, removed 0day text, Fixes #573
...
git-svn-id: file:///home/svn/framework3/trunk@7646 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-30 18:42:00 +00:00
16ae0112d1
Typo fix from antoine
...
git-svn-id: file:///home/svn/framework3/trunk@7645 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-30 14:17:17 +00:00
bcd7343803
Fixes #563 . Make fakedns act like a normal passive aux module
...
git-svn-id: file:///home/svn/framework3/trunk@7640 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-29 15:27:37 +00:00
75ca12439e
Added new testing options
...
git-svn-id: file:///home/svn/framework3/trunk@7638 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-29 04:00:26 +00:00
09cb98678f
added exploit module intersystems_cache.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7631 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-28 15:26:21 +00:00
6e975b57ee
Include Auxiliary Report
...
git-svn-id: file:///home/svn/framework3/trunk@7629 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-26 20:39:15 +00:00
Joshua Drake
James Lee
HD Moore
Steve Tornio
Carlos Perez
Mario Ceballos
kris
Mike Smith