5d8ca84113
use the user-supplied login info
...
git-svn-id: file:///home/svn/framework3/trunk@6152 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-14 17:51:46 +00:00
cb327d40fc
Fix up the dialup code
...
git-svn-id: file:///home/svn/framework3/trunk@6150 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-14 05:46:10 +00:00
430d7cb424
fixed BID number.
...
git-svn-id: file:///home/svn/framework3/trunk@6145 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 14:41:14 +00:00
bc1f2da254
added exploit module winzip_fileview.rb from dean.
...
git-svn-id: file:///home/svn/framework3/trunk@6144 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 14:04:53 +00:00
70feb8152c
Switch to the new TTY session type
...
git-svn-id: file:///home/svn/framework3/trunk@6141 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 07:02:22 +00:00
4fdca1f6d7
Update info to reflect TTY class
...
git-svn-id: file:///home/svn/framework3/trunk@6138 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 06:47:53 +00:00
5b75b5d5a6
Move interact_tty to the TTY arch
...
git-svn-id: file:///home/svn/framework3/trunk@6137 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 06:47:04 +00:00
331eaaa602
Add basic framework for the new TTY architecture
...
git-svn-id: file:///home/svn/framework3/trunk@6136 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 06:46:32 +00:00
ae09877067
nfs mount scanner
...
git-svn-id: file:///home/svn/framework3/trunk@6135 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 02:21:35 +00:00
e7aecca838
more awesomeness from tebo
...
git-svn-id: file:///home/svn/framework3/trunk@6133 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-12 05:18:05 +00:00
12fc714f48
add NUM, SSID and BSSID fakeap options
...
git-svn-id: file:///home/svn/framework3/trunk@6128 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 17:14:34 +00:00
2325f5ce49
Added aux module filezilla_admin_user.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6127 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 14:38:10 +00:00
0d1ca42ed6
Adds support for exploitation over dialup via the new Telephony library.
...
git-svn-id: file:///home/svn/framework3/trunk@6120 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 06:09:02 +00:00
288075f7a0
add report_auth_info to some modules that authenticate. thanks, tebo
...
git-svn-id: file:///home/svn/framework3/trunk@6118 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:52:07 +00:00
348ffe7894
add snmp_scan module from tebo
...
git-svn-id: file:///home/svn/framework3/trunk@6116 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:26:44 +00:00
7874476b58
add smb_login scanner module from tebo
...
git-svn-id: file:///home/svn/framework3/trunk@6115 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:25:54 +00:00
3ee6eaede8
added exploit module nis2004_antispam.rb that makes use of egypts newly added heap spray stuff.
...
git-svn-id: file:///home/svn/framework3/trunk@6109 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-10 14:00:49 +00:00
39ac677f6e
removed scanner functionality & code fix
...
git-svn-id: file:///home/svn/framework3/trunk@6106 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-10 03:26:50 +00:00
f2e6a86cb2
oracle sid enumeration auxiliary module
...
git-svn-id: file:///home/svn/framework3/trunk@6099 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 13:02:30 +00:00
cf04190a8a
Moved tftp to Windows DoS targets. Hmm svn client bug?
...
git-svn-id: file:///home/svn/framework3/trunk@6096 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 05:39:57 +00:00
0b9e8cd2b9
Added aux filezilla_server_port.rb. Moved dos aux to OS-based folder.
...
git-svn-id: file:///home/svn/framework3/trunk@6095 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 05:33:26 +00:00
2de1dc9947
No need for string cast. thanks kris/raif.
...
git-svn-id: file:///home/svn/framework3/trunk@6094 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 03:22:04 +00:00
ddafdad942
added support for 2k3.
...
git-svn-id: file:///home/svn/framework3/trunk@6092 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 00:39:08 +00:00
9b210702a3
add scanner functionality to oracle_version.rb and removed some comments from options.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6088 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-08 01:57:28 +00:00
4ac15b3a83
oracle version auxiliary module using tns mixin
...
git-svn-id: file:///home/svn/framework3/trunk@6087 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 23:34:03 +00:00
a41e16ded3
Added ursoft_w32dasm.rb file format module.
...
git-svn-id: file:///home/svn/framework3/trunk@6083 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 11:18:44 +00:00
ee86b19834
added tns mixin to support oracle8i listener overflow and other tns
...
related stuff.
git-svn-id: file:///home/svn/framework3/trunk@6082 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 03:07:01 +00:00
204ebd411f
Updated with changes from raif.
...
git-svn-id: file:///home/svn/framework3/trunk@6080 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 00:15:55 +00:00
fa950d64ef
updated with the authors email address.
...
git-svn-id: file:///home/svn/framework3/trunk@6076 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-05 13:09:18 +00:00
a2da72c0eb
Added tmlisten_traversal aux module from Anshul Pandey.
...
git-svn-id: file:///home/svn/framework3/trunk@6075 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-05 05:18:42 +00:00
e132179b2d
added exploit modules djvu_imageurl.rb, msworks_wkspictureinterface.rb and
...
sascam_get.rb from dean.
git-svn-id: file:///home/svn/framework3/trunk@6074 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-05 00:55:29 +00:00
33940517c5
added exploit modules ca_brightstor_addcolumn.rb and verypdf_pdfview.rb from dean.
...
git-svn-id: file:///home/svn/framework3/trunk@6073 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-04 21:51:04 +00:00
e7dda0000b
Wmap SSL module renamed and updated to check for MD5 signature algorithm.
...
git-svn-id: file:///home/svn/framework3/trunk@6062 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-03 05:20:20 +00:00
114067e7bb
standardize names
...
git-svn-id: file:///home/svn/framework3/trunk@6059 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-02 21:21:10 +00:00
200cedeb25
clean up name and description
...
git-svn-id: file:///home/svn/framework3/trunk@6058 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-02 21:18:51 +00:00
232145819b
Adding Linux/x86 inline IPv6 bind shell payload
...
git-svn-id: file:///home/svn/framework3/trunk@6036 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-21 07:10:27 +00:00
704a92d43a
add name to author list and switch some modules to use it
...
git-svn-id: file:///home/svn/framework3/trunk@6034 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 21:53:17 +00:00
0e8ce1cc46
Move my portspec parsing code from scanner/portscan/tcp to Rex as
...
Socket.portspec_crack and use it to also replace the incomplete
parsing code used for db_autopwn
git-svn-id: file:///home/svn/framework3/trunk@6033 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 20:34:05 +00:00
f1093ee6a9
added exploit module realtek_playlist.rb.
...
git-svn-id: file:///home/svn/framework3/trunk@6029 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 01:49:40 +00:00
6d1a0993e2
Adding Avahi < 0.6.24 DoS module (source port 0)
...
git-svn-id: file:///home/svn/framework3/trunk@6026 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 21:13:58 +00:00
248f1e9fc3
Remove "#{xxx.to_s}" redundancies ('s/\(#{[^}]*\)\.to_s}/\1}/g')
...
git-svn-id: file:///home/svn/framework3/trunk@6022 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 07:11:08 +00:00
45c08a9011
Fallback to heap spray if the .NET DLL does not load
...
git-svn-id: file:///home/svn/framework3/trunk@6015 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-17 04:19:54 +00:00
aa53df6535
add exploit module adobe_utilprintf.rb, browser based.
...
git-svn-id: file:///home/svn/framework3/trunk@6014 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-15 15:44:02 +00:00
5822ab75a7
Adds an exploit module (universal) for the new internet explorer xml bug. This module shows off the .NET memory techniques discovered by Alexander Sotirov and Mark Dowd. This code should bypass DEP, ASLR, and NX :-)
...
git-svn-id: file:///home/svn/framework3/trunk@6012 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-12 01:45:00 +00:00
42da7926ba
See #263 . Testing post-commit hook
...
git-svn-id: file:///home/svn/framework3/trunk@6010 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:56:52 +00:00
c838c7ef2f
See #263 . Testing post-commit hook
...
git-svn-id: file:///home/svn/framework3/trunk@6009 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:55:12 +00:00
d64cf0f22f
See #263 . Testing post-commit hook
...
git-svn-id: file:///home/svn/framework3/trunk@6008 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:53:52 +00:00
cb8230f817
Fixes #263 . Correct the max read() size for DCERPC over SMB
...
git-svn-id: file:///home/svn/framework3/trunk@6007 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:50:30 +00:00
1485e0564e
updated with some awesome stuff from Didier Stevens.
...
git-svn-id: file:///home/svn/framework3/trunk@6006 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-08 13:16:54 +00:00
daf317c25b
Added wmap generic email extractor as an example of direct access to the database.
...
git-svn-id: file:///home/svn/framework3/trunk@6003 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-08 00:51:16 +00:00
6df3ed8b25
git-svn-id: file:///home/svn/framework3/trunk@6001 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-07 15:02:20 +00:00
29c94ece40
removed hardcoded length for xrefPosition. thanks Didier Stevens.
...
git-svn-id: file:///home/svn/framework3/trunk@5999 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-05 13:13:57 +00:00
103e507635
newer version breaks..
...
git-svn-id: file:///home/svn/framework3/trunk@5998 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-04 21:57:54 +00:00
d47511baf2
updated target.
...
git-svn-id: file:///home/svn/framework3/trunk@5996 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-03 20:20:39 +00:00
381f6da682
added exploit module adobe_utilprintf.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5995 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-03 16:19:25 +00:00
e1e1f5d6a4
added fileformat mixin, fileformat exploit videolan_tivo.rb, and network based exploit videolan_tivo.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5993 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-03 01:23:27 +00:00
3e19245054
Fixed handling of root website directory. Minor presentation fixes in test modules
...
git-svn-id: file:///home/svn/framework3/trunk@5987 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-30 22:41:09 +00:00
815a4fdea7
Fixed namespace problems in auxiliary modules
...
git-svn-id: file:///home/svn/framework3/trunk@5984 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-28 21:04:28 +00:00
d185cce177
make it easier to comment out specific exploits
...
git-svn-id: file:///home/svn/framework3/trunk@5981 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-25 08:51:17 +00:00
0c0b171be4
use OptInt for numeric options
...
git-svn-id: file:///home/svn/framework3/trunk@5979 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-24 18:42:59 +00:00
17764d77ae
NUM is actually required
...
git-svn-id: file:///home/svn/framework3/trunk@5978 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-24 18:17:10 +00:00
110e7be0e9
Added wmap OPTIONS module by Chris Gates
...
git-svn-id: file:///home/svn/framework3/trunk@5977 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-23 19:42:42 +00:00
9144789a9b
Added module authentication verb bypass
...
git-svn-id: file:///home/svn/framework3/trunk@5976 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-22 04:34:59 +00:00
c92a64e687
Added module to test for file copies
...
git-svn-id: file:///home/svn/framework3/trunk@5975 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-22 04:34:00 +00:00
4ae6d81616
Add bind_ruby and reverse_ruby cmd payloads for unix and windows
...
git-svn-id: file:///home/svn/framework3/trunk@5967 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-20 03:42:55 +00:00
f54d91c53d
Add PWFILE for Cain&Abel compatibility (thanks grutz!)
...
git-svn-id: file:///home/svn/framework3/trunk@5966 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 20:42:17 +00:00
a585fca827
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@5958 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 06:58:01 +00:00
1935ad3ef7
don't advertise to the victim that we're trying to exploit them.
...
git-svn-id: file:///home/svn/framework3/trunk@5955 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 06:01:25 +00:00
4810fef77c
Report host and port to db in scanner/portscan/tcp
...
git-svn-id: file:///home/svn/framework3/trunk@5953 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 04:05:35 +00:00
d7ad8fa452
Adding Linux/x86 IPv6 bind and reverse-connect stagers
...
git-svn-id: file:///home/svn/framework3/trunk@5951 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 21:01:26 +00:00
3266bd9ecd
Add a better autofilter() / check()
...
git-svn-id: file:///home/svn/framework3/trunk@5950 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 20:15:20 +00:00
9a2d5aa9c4
Tag up all the DoS modules properly with the DoS mixin last
...
git-svn-id: file:///home/svn/framework3/trunk@5949 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 20:00:31 +00:00
6c240e14b1
Disbale DoS modules from automation
...
git-svn-id: file:///home/svn/framework3/trunk@5948 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 19:56:03 +00:00
e02574e1fc
add new object detection technique to browser_autopwn
...
git-svn-id: file:///home/svn/framework3/trunk@5941 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-17 07:53:44 +00:00
85a9db3bad
add DoS aux module for Pi3Web <=2.0.13 on Windows
...
git-svn-id: file:///home/svn/framework3/trunk@5924 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 04:35:47 +00:00
85926eb4ff
fix svn keywords
...
git-svn-id: file:///home/svn/framework3/trunk@5923 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 03:09:22 +00:00
d2c5c02556
fix svn keyword
...
git-svn-id: file:///home/svn/framework3/trunk@5922 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 03:03:19 +00:00
e14bf65099
Added domino_sametime_stmux module.
...
git-svn-id: file:///home/svn/framework3/trunk@5919 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-14 11:04:33 +00:00
086e9fb89a
Added veritas_netbackup_cmdexec module.
...
git-svn-id: file:///home/svn/framework3/trunk@5914 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 09:45:47 +00:00
97ffd10f89
Updated to support Windows targets.
...
git-svn-id: file:///home/svn/framework3/trunk@5912 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 09:01:24 +00:00
547f01f84a
Added new target.
...
git-svn-id: file:///home/svn/framework3/trunk@5911 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 08:31:04 +00:00
27667fc534
Fix wireless aux modules sending one more frame than specified
...
git-svn-id: file:///home/svn/framework3/trunk@5910 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 06:27:31 +00:00
cef75433ec
Fix non-404 errors
...
git-svn-id: file:///home/svn/framework3/trunk@5909 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:59:52 +00:00
af686334c9
Fix ecode processing
...
git-svn-id: file:///home/svn/framework3/trunk@5908 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:51:21 +00:00
e90c534500
Changes to the directory scanner
...
git-svn-id: file:///home/svn/framework3/trunk@5907 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:10:03 +00:00
4cbe6f975a
Added new modules for file detection based on the name of the path directory
...
git-svn-id: file:///home/svn/framework3/trunk@5905 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 02:26:09 +00:00
2a1536d8d6
Fixed reporting variable wmap dir listing module
...
git-svn-id: file:///home/svn/framework3/trunk@5901 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:59:51 +00:00
26692d3437
Added AIX Power payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5900 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:58:36 +00:00
dfbf6b34a5
Added Linux Power/Cell Broadband Engine Architecture payload modules and advanced payload options
...
git-svn-id: file:///home/svn/framework3/trunk@5899 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:57:53 +00:00
ec4fffaa61
Removing old AIX Power payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5897 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:52:57 +00:00
f5374fe2d2
Syntax fixups
...
git-svn-id: file:///home/svn/framework3/trunk@5894 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 19:31:11 +00:00
435ea807a4
Update the description and references to reflect (hah) MS08-068
...
git-svn-id: file:///home/svn/framework3/trunk@5890 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 20:46:21 +00:00
b665212b35
Make 2003 target universal
...
git-svn-id: file:///home/svn/framework3/trunk@5888 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 15:22:24 +00:00
54cd265f82
Purging the ms08-067 check. The check method results in memory corruption and there are still concerns about the source of the technique. We can reimplement this later when there is some free time and less angry people involved ;-)
...
git-svn-id: file:///home/svn/framework3/trunk@5887 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 15:01:45 +00:00
57172955ad
Clear the self.simple between ports
...
git-svn-id: file:///home/svn/framework3/trunk@5884 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:10:45 +00:00
5d0d88e5d2
Fix up the smb version module
...
git-svn-id: file:///home/svn/framework3/trunk@5883 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:08:04 +00:00
7b002d4288
remove unused exception variables
...
git-svn-id: file:///home/svn/framework3/trunk@5882 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:00:54 +00:00
07f087b969
Switch to the new exception format
...
git-svn-id: file:///home/svn/framework3/trunk@5880 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 05:12:52 +00:00
2380efac65
added auxiliary module db2rcmd.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5877 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 02:44:28 +00:00
b4cbe4ff8d
Multiple bug fixes. Fixed query modules now resolved to correct function. Corrected in proxy and wmap code handling of RHOSTS as hostnames are not in use. Fixed reporting as target port was not handled properly and modules modified to reflect new wmap_target methods.
...
git-svn-id: file:///home/svn/framework3/trunk@5869 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 04:38:05 +00:00
75feaa6fab
allow passing args to meterpreter scripts through AutoRunScript
...
git-svn-id: file:///home/svn/framework3/trunk@5853 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-08 19:39:06 +00:00
bc7b19f554
Adds keywords to some missing modules, adds an old/lame DoS module that was fixed in Vista SP1
...
git-svn-id: file:///home/svn/framework3/trunk@5849 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-07 22:11:58 +00:00
95d5624a96
Correct scratch/scratch typo
...
git-svn-id: file:///home/svn/framework3/trunk@5847 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-06 14:56:06 +00:00
308a90a01d
Complete international support for XP SP2 / XP SP3
...
git-svn-id: file:///home/svn/framework3/trunk@5846 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-06 06:08:45 +00:00
9ee7eb2e87
little typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@5845 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-05 19:31:55 +00:00
be3bfb36a9
Correct the DLL path
...
git-svn-id: file:///home/svn/framework3/trunk@5844 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-05 06:13:26 +00:00
0881649f14
The psexec and smb_relay module now automatically cleanup. The ms08-06 module now supports all languages of XP SP3.
...
git-svn-id: file:///home/svn/framework3/trunk@5841 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 22:27:59 +00:00
187f79eddf
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
...
git-svn-id: file:///home/svn/framework3/trunk@5837 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 20:08:24 +00:00
0193cd5219
fix session vs client variable problems with meterpreter AutoRunScript and make usage actually reflect what the code does
...
git-svn-id: file:///home/svn/framework3/trunk@5834 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 06:40:12 +00:00
8bb6ffe64a
Update ruby-lorcon path in wifun description
...
git-svn-id: file:///home/svn/framework3/trunk@5833 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 05:55:14 +00:00
1026957da1
Remove eton() definitions from aux modules since it's in the Lorcon mixin
...
git-svn-id: file:///home/svn/framework3/trunk@5831 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 03:03:22 +00:00
55bb15d695
Adding file2air aux wireless module which lets you write frames from binary
...
files to the air after optionally changing the addresses.
This module looks at ToDS and FromDS when replacing the addresses, which isn't
done in the original.
git-svn-id: file:///home/svn/framework3/trunk@5830 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 02:34:57 +00:00
b53695f7db
The psexec module now uses a service-compatible exe, shellcode is spawned in a subprocess and the service cleans up properly
...
git-svn-id: file:///home/svn/framework3/trunk@5829 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 23:06:37 +00:00
e02f740277
Handle multiple sessions by default
...
git-svn-id: file:///home/svn/framework3/trunk@5828 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 21:08:46 +00:00
133d7ce658
Adds an automatic default target to ms08-067, autodetects OS, SP, and language now.
...
git-svn-id: file:///home/svn/framework3/trunk@5827 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 20:37:51 +00:00
be30436058
Better SP2/SP3 check method from Rhys Kidd, Danish fingerprint from MaXe <security[at]intern0t.net>
...
git-svn-id: file:///home/svn/framework3/trunk@5826 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 17:24:49 +00:00
4b30f3ef1a
Update the check() comments to reflect new information >:(
...
git-svn-id: file:///home/svn/framework3/trunk@5825 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 15:29:51 +00:00
97b2adcc46
added the connect()/smb_login()
...
git-svn-id: file:///home/svn/framework3/trunk@5824 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 13:14:06 +00:00
f1789fc1b2
Adds the check() method and scanner module to ms08-067, massively upgrades the smb/version scanner, with better SP detection and remote language pack detection.
...
git-svn-id: file:///home/svn/framework3/trunk@5823 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 09:17:08 +00:00
d9ffc23128
Adds 0x40 to the badchars list, fixes a weird issue, found by Ramon
...
git-svn-id: file:///home/svn/framework3/trunk@5822 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-02 02:35:57 +00:00
4f45818a0f
The prefix change makes ms08-067 more reliable vs windows 2000
...
git-svn-id: file:///home/svn/framework3/trunk@5820 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 21:10:45 +00:00
de6c726e0a
New french targets from Antoine
...
git-svn-id: file:///home/svn/framework3/trunk@5818 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 15:34:17 +00:00
c5ad82fb68
Add SP2 German
...
git-svn-id: file:///home/svn/framework3/trunk@5817 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 14:15:16 +00:00
d366e8342a
Spanish target is SP3 not SP2
...
git-svn-id: file:///home/svn/framework3/trunk@5816 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 14:07:58 +00:00
7427d913c0
Added targets for Portuguese (Brazil) (NX) SP2/SP3 to ms08_067_netapi.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5815 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 11:45:52 +00:00
571d577bbd
Adds Windows XP SP0/SP1 targets for English
...
git-svn-id: file:///home/svn/framework3/trunk@5814 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 06:12:49 +00:00
e784bcd515
Adds Windows 2003 SP1 (NO NX and NX(is this needed)).
...
git-svn-id: file:///home/svn/framework3/trunk@5813 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 05:55:57 +00:00
7fcf5b3dc2
Lots of new targets merged in for MS08-067 including Brett Moore's 2003 SP2 DEP bypass
...
git-svn-id: file:///home/svn/framework3/trunk@5812 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 05:16:02 +00:00
56a413d803
Reflective DLL injection payloads from Stephen Fewer
...
git-svn-id: file:///home/svn/framework3/trunk@5806 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 22:17:32 +00:00
dfbc35da3c
Patch for ms08-067 from antoine, fixes braindead bug on my part, should increase reliability
...
git-svn-id: file:///home/svn/framework3/trunk@5805 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 17:21:07 +00:00
e9d133e9aa
Remove the while(true) which snuck into this module
...
git-svn-id: file:///home/svn/framework3/trunk@5803 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 07:21:53 +00:00
330bd2ef5b
Update some of my aux modules that require a successful login to not continue
...
running without it
git-svn-id: file:///home/svn/framework3/trunk@5802 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 00:52:38 +00:00
4740e6e452
Adding DoS aux module for the Victory FTP Server v5.0
...
git-svn-id: file:///home/svn/framework3/trunk@5801 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-29 21:57:31 +00:00
3c4aec43d5
Adding DoS aux module for the PacketTrap TFTP server
...
git-svn-id: file:///home/svn/framework3/trunk@5800 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-29 17:28:34 +00:00
f9f6c8d3e6
Adds an initial exploit for MS08-067, support for XP SP2/SP3 DEP, 2003 SP0/SP2 no-DEP.
...
git-svn-id: file:///home/svn/framework3/trunk@5798 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-28 07:35:17 +00:00
aec269616a
Ignore EACCES from connect in TCP portscanner aux module. This can be caused
...
by (at least) ICMPv6 Administratively Prohibited messages, on at least Linux.
I got these by scanning ports 21-23 on ipv6.google.com, for example.
git-svn-id: file:///home/svn/framework3/trunk@5797 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-28 02:55:10 +00:00
71885912b8
Allow more flexible (Nmap-esque) port specifications in TCP portscan aux module,
...
so things like "21-25,80,443", "1024-" and "-" behave like you expect. This
replaces the PORTSTART and PORTSTOP options with a single PORTS option.
git-svn-id: file:///home/svn/framework3/trunk@5796 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 23:33:34 +00:00
9d565f9a51
Fix CERT ref numbers in bailiwicked DNS aux modules
...
git-svn-id: file:///home/svn/framework3/trunk@5794 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 22:26:48 +00:00
e700980288
update the return. thanks jacop.
...
git-svn-id: file:///home/svn/framework3/trunk@5793 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 20:50:44 +00:00
c0ffd16629
Patch from antoine, corrected description and pre-calculated hashes
...
git-svn-id: file:///home/svn/framework3/trunk@5791 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 17:58:56 +00:00
75be2e33ad
Added module reporting and wmap_reports command
...
git-svn-id: file:///home/svn/framework3/trunk@5789 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 02:22:30 +00:00
ce58c15d6e
Switch to cain&abel / halflm tables compatible challenge
...
git-svn-id: file:///home/svn/framework3/trunk@5788 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-26 21:53:36 +00:00
ebc5294574
Added new wmap sqlmap module
...
git-svn-id: file:///home/svn/framework3/trunk@5787 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-25 03:26:50 +00:00
8d19ba7bbf
Changed AIX_VERSION to AIXLEVEL
...
git-svn-id: file:///home/svn/framework3/trunk@5786 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 13:22:12 +00:00
29e983567e
removed reports_exist check
...
git-svn-id: file:///home/svn/framework3/trunk@5785 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 04:23:54 +00:00
c4dc77c15b
fixed ip handling and CN parsing
...
git-svn-id: file:///home/svn/framework3/trunk@5784 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 03:19:24 +00:00
c66d6c4e46
Set property 'svn:keywords'
...
git-svn-id: file:///home/svn/framework3/trunk@5783 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:43:21 +00:00
eb0c6d1a65
Added missing Linux x86 payload modules from unixasm
...
git-svn-id: file:///home/svn/framework3/trunk@5782 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:19:50 +00:00
693202fd4b
Updated AIX POWER/PowerPC payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5781 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:04:18 +00:00
16612cacba
Rename
...
git-svn-id: file:///home/svn/framework3/trunk@5778 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 17:51:12 +00:00
822234771f
Initial import of the bea oracle weblogic apache plugin
...
git-svn-id: file:///home/svn/framework3/trunk@5777 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 17:44:57 +00:00
13ab6ed2d8
added ssl host name detection module
...
git-svn-id: file:///home/svn/framework3/trunk@5776 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 05:31:55 +00:00
f98c87ff22
added directory scanner
...
git-svn-id: file:///home/svn/framework3/trunk@5775 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 02:31:52 +00:00
e6127313c9
Updated AIX POWER/PowerPC payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5774 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:41:12 +00:00
f124597a56
Code cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:03:39 +00:00
7e73ed8c15
first attempt of reporting implementation.
...
git-svn-id: file:///home/svn/framework3/trunk@5771 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 20:32:14 +00:00
3de5bab19b
added exploit module zenturiprogramchecker_unsafe.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5769 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 13:15:53 +00:00
fbed757aa5
Added webrick_regex.rb module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5764 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-17 15:40:20 +00:00
fa1680b262
added exploit module ms08_059_his2006.rb.
...
git-svn-id: file:///home/svn/framework3/trunk@5760 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 22:41:01 +00:00
b1349daf8f
updated with new module format.
...
git-svn-id: file:///home/svn/framework3/trunk@5759 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 22:25:35 +00:00
1503250a5b
added aux module open_x11.rb provided by tebo.
...
git-svn-id: file:///home/svn/framework3/trunk@5758 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 15:15:29 +00:00
f59a3f04b2
Commit the simple tcp port scanner
...
git-svn-id: file:///home/svn/framework3/trunk@5757 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 14:00:56 +00:00
727f893ad8
added exploit module quick_tftp_pro_mode.rb from Patrik Wellsly.
...
git-svn-id: file:///home/svn/framework3/trunk@5756 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 11:21:06 +00:00
6cfdb104c4
Added titan626_site.rb module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5755 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 04:23:05 +00:00
fd95f81cd6
added exploit module systemrequirementslab_unsafe.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5754 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-14 19:19:39 +00:00
86148b4802
Added patch and module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5752 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-14 14:25:41 +00:00
8d760ebc1e
Added patch and module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5751 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-14 14:22:34 +00:00
b508358132
added exploit modules lpviewer_url.rb and softartisans_getdrivename.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5750 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-14 13:41:52 +00:00
c178428bc6
added aux module xmeasy560_nlst.rb from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5749 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 23:52:08 +00:00
e016ff2d76
cleanup patch from antoine
...
git-svn-id: file:///home/svn/framework3/trunk@5748 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 14:22:38 +00:00
4c091edac1
fixes #198 ; generic php eval exploit
...
git-svn-id: file:///home/svn/framework3/trunk@5746 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 05:55:10 +00:00
76dc2920d5
implemented in lib/msf/core/payload/php.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5745 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 05:49:11 +00:00
38b565399e
actually randomize myexec function name
...
git-svn-id: file:///home/svn/framework3/trunk@5744 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 05:31:36 +00:00
a7a7da9e28
Newer mercury module, more reliable using 0x0c0c0c0c return
...
git-svn-id: file:///home/svn/framework3/trunk@5742 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-12 17:11:14 +00:00
478c8b0824
Added wmap simple directoty listing module
...
git-svn-id: file:///home/svn/framework3/trunk@5741 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-12 04:59:39 +00:00
b1f3c83f7b
add support for finding .swp files
...
git-svn-id: file:///home/svn/framework3/trunk@5739 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-11 06:38:28 +00:00
de780fb2da
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@5738 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-11 05:49:27 +00:00
d7e706f6af
added aux module alphastor_librarymanager_exec.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5737 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-11 00:56:47 +00:00
2977f0741c
added aux module alphastor_librarymanager.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5735 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-10 15:28:01 +00:00
7e5c759dd0
Fixed and reference to browser autopwn.
...
git-svn-id: file:///home/svn/framework3/trunk@5733 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-10 04:25:18 +00:00
929ba19cc7
Switch packet dcoding from scruby to packetfu
...
git-svn-id: file:///home/svn/framework3/trunk@5728 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-10 02:26:05 +00:00
386eac82fa
fixer.
...
git-svn-id: file:///home/svn/framework3/trunk@5725 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-10 00:17:44 +00:00
48667711e6
added aux module alphastor_devicemanager.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5724 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-09 23:53:54 +00:00
7d85b1d198
Added Medal of Honor module from Jacopo Cervini.
...
git-svn-id: file:///home/svn/framework3/trunk@5721 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-07 12:03:12 +00:00
35240108de
Added patch and module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5720 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-06 13:16:08 +00:00
183830fab5
Make the MSSQL scanner a little better for automation
...
git-svn-id: file:///home/svn/framework3/trunk@5716 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-04 21:55:26 +00:00
02780a1d88
Improvements to the FTP mixin and scanner, still needs multiline read support
...
git-svn-id: file:///home/svn/framework3/trunk@5715 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-04 21:42:37 +00:00
2965f3b238
updated with better coverage.
...
git-svn-id: file:///home/svn/framework3/trunk@5712 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-04 12:00:43 +00:00
c1aa7babb7
Add the telnet capture module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5711 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-02 22:43:20 +00:00
6ad1a82101
fixed tabbing.
...
git-svn-id: file:///home/svn/framework3/trunk@5710 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-02 15:48:25 +00:00
fd256ec4a1
This massive commit changes the metasploit 3 module format. The new syntax allows for greater scalability and future improvements to the metasploit module loader. This change also makes it easier for users to add new modules, since the class name no longer needs to match the directory structure.
...
git-svn-id: file:///home/svn/framework3/trunk@5709 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-02 05:23:59 +00:00
67a25b6ce8
added exploit modules ms08_053_mediaencoder.rb, macrovision_unsafe.rb and
...
ms08_041_snapshotviewer.rb
git-svn-id: file:///home/svn/framework3/trunk@5707 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-01 22:40:57 +00:00
422e58c51f
Close the listening socket, allows the same shellcode to beused on the same port repeatedly, thanks antoine!
...
git-svn-id: file:///home/svn/framework3/trunk@5705 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-01 16:16:34 +00:00
fa3ce57fed
Implemented Auxiliary::WMAPScanUniqueQuery.
...
git-svn-id: file:///home/svn/framework3/trunk@5704 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-01 03:57:57 +00:00
cef8153df2
add aux module from Kris Katterjohn.
...
git-svn-id: file:///home/svn/framework3/trunk@5703 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-30 23:28:24 +00:00
647118f333
remove debug statements, add disabled_functions evasion in php findsock stuff
...
git-svn-id: file:///home/svn/framework3/trunk@5700 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-30 19:56:16 +00:00
12af69ed03
added exploit module realwin.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5699 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-30 13:32:29 +00:00
a4ee57c476
Applied patch from Kris Katterjohn to to correct the status message printed for logins.
...
git-svn-id: file:///home/svn/framework3/trunk@5697 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-30 01:50:08 +00:00
36a06e7576
initial commit of php findsock. This patch makes all http connections global and removes the "close if (!pipelining)" checks, so beware of bugs.
...
git-svn-id: file:///home/svn/framework3/trunk@5678 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 04:41:51 +00:00
b001e4684d
Import first version of WMAP from ET LoWNOISE
...
git-svn-id: file:///home/svn/framework3/trunk@5675 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-22 22:32:20 +00:00
James Lee
HD Moore
Mario Ceballos
cg
Patrick Webster
Ramon de C Valle