Commit Graph

1501 Commits (36f3a82b5cfc8ce54f58dd2db414bcb289903b17)

Author SHA1 Message Date
Raphael Mudge 3544226ae1 fixed hashdump in Armitage (wasn't reporting all dumped credentials to creds db)
git-svn-id: file:///home/svn/framework3/trunk@13457 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 19:27:27 +00:00
Matt Weeks f866b3ecdf Use different check to see if SSL will work.
git-svn-id: file:///home/svn/framework3/trunk@13440 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 00:56:40 +00:00
HD Moore b8da8e755f Add additional indexes to the schema
git-svn-id: file:///home/svn/framework3/trunk@13437 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 22:59:40 +00:00
Matt Weeks 630fb999f8 Don't display or load events table by default. Also, only reload visible windows on refresh.
git-svn-id: file:///home/svn/framework3/trunk@13436 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 21:51:07 +00:00
Raphael Mudge e80f1951ba oops, typo in function to view loot locally.
git-svn-id: file:///home/svn/framework3/trunk@13432 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 21:02:08 +00:00
Raphael Mudge c5de25781f removed a restriction preventing users from clearing default workspace. Also modified module launcher to automatically escapes paths on Windows.
git-svn-id: file:///home/svn/framework3/trunk@13431 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 19:47:20 +00:00
Matt Weeks 8447141a0c Include check for crypto algorithm support.
git-svn-id: file:///home/svn/framework3/trunk@13430 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 19:38:35 +00:00
Matt Weeks b4a58989c4 Give choice of rpcd to connect to when last remembered connection is still running.
git-svn-id: file:///home/svn/framework3/trunk@13424 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 15:22:27 +00:00
Raphael Mudge ddc2696974 improved Armitage UI responsiveness and reliability through several changes.
git-svn-id: file:///home/svn/framework3/trunk@13418 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 06:07:25 +00:00
Jonathan Cran d4e85c1dfa sample lab configuration
git-svn-id: file:///home/svn/framework3/trunk@13409 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 18:21:45 +00:00
Raphael Mudge d83606af6e let's try that again, small bug fix to restore client-side attack menus.
git-svn-id: file:///home/svn/framework3/trunk@13388 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 15:05:21 +00:00
Raphael Mudge c361f45980 Armitage 07.28.11 - Users may now configure payloads for client-side exploits through module launcher. Added a payload helper. Fixed several bugs.
git-svn-id: file:///home/svn/framework3/trunk@13387 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 14:48:56 +00:00
Tod Beardsley 2c73f47046 Widen the cred ptype column.
git-svn-id: file:///home/svn/framework3/trunk@13384 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 22:05:56 +00:00
amaloteaux b9bb5c454d psnuffle : add a smb protocol decoder
git-svn-id: file:///home/svn/framework3/trunk@13375 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 18:06:28 +00:00
James Lee b412dac37f sniffer works, see #2418
git-svn-id: file:///home/svn/framework3/trunk@13360 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 06:29:49 +00:00
James Lee 3fe4c2524c add linux bins to go with r13346
git-svn-id: file:///home/svn/framework3/trunk@13349 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 21:17:00 +00:00
HD Moore 0b331ac7b7 Commit new bins
git-svn-id: file:///home/svn/framework3/trunk@13347 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 20:54:51 +00:00
James Lee 0f95070f3f add a request type for grabbing the host's directory separator, fixes #4892
git-svn-id: file:///home/svn/framework3/trunk@13346 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 20:51:33 +00:00
Tod Beardsley c54e18d757 Fixes #5038. Removes all instances of Racket objects, as far as I can tell. If I missed any through my mighty grep -ril racket . statement, please reopen!
git-svn-id: file:///home/svn/framework3/trunk@13342 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 01:29:21 +00:00
Raphael Mudge 5653e865aa update to call db.creds the correct way.
git-svn-id: file:///home/svn/framework3/trunk@13310 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-23 04:58:30 +00:00
Matt Weeks 9ebbe84a4a Update to version 4.
Add first-run detection that farms out database initialization to msfconsole.
Autostart RPC if no other option is selected.
Check for RPC death in startup.
More lenient socket timeouts.



git-svn-id: file:///home/svn/framework3/trunk@13301 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-23 00:05:38 +00:00
Raphael Mudge fc3ef02698 Armitage now calls db.loots and db.creds rather than parsing output of creds and loots commands directly.
git-svn-id: file:///home/svn/framework3/trunk@13288 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-21 21:44:00 +00:00
Raphael Mudge 7c16ed5efb Armitage 07.19.11 - you may now run a post-module against multiple sessions at once. Shift+click on a tab to close all tabs with the same name. This release also further improves the logging feature.
git-svn-id: file:///home/svn/framework3/trunk@13236 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 20:36:12 +00:00
James Lee 3c261c346f add support for java/meterpreter/reverse_http. assuming i didn't miss any files, fixes #4946, thanks mihi!
git-svn-id: file:///home/svn/framework3/trunk@13213 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 23:15:06 +00:00
HD Moore 16840ebfa5 Add profiles table
git-svn-id: file:///home/svn/framework3/trunk@13202 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 21:39:21 +00:00
James Lee 1d25a6d7d1 add an exploit for java's rmid and rmiregistry code-execution-by-design and supporting source. fixes #4378, thanks mihi!
git-svn-id: file:///home/svn/framework3/trunk@13185 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 20:42:31 +00:00
James Lee f8a307f873 use append mode for stderr when creating processes with proc_open in windows, see http://us2.php.net/manual/en/function.proc-open.php#97012 . also, if windows doesn't give us a valid path to cmd.exe from the COMSPEC env var, just use cmd.exe and hope it's in the path
git-svn-id: file:///home/svn/framework3/trunk@13176 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 20:34:05 +00:00
Matt Weeks 8f79fd1e5f Add "crack passwords" option.
git-svn-id: file:///home/svn/framework3/trunk@13169 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 03:06:07 +00:00
Matt Weeks fdf6660a55 Properly filter error messages which have changed,
escape options passed through command line,
run database reload in separate thread,
and make connecting to the database even more automagical.



git-svn-id: file:///home/svn/framework3/trunk@13168 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 02:39:16 +00:00
Matt Weeks 338a13baac Fix minor error.
git-svn-id: file:///home/svn/framework3/trunk@13167 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 02:36:42 +00:00
Raphael Mudge 83f8017bb0 Armitage 07.12.11 - Added post-module recommendations for a session and "crack passwords" button in credentials tab. Fixed a race condition causing file browser updates to fail occasionally. Enhanced the loot viewer.
git-svn-id: file:///home/svn/framework3/trunk@13159 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-13 01:36:23 +00:00
HD Moore 7737cb22d9 Make sure KoreLogic is attributed
git-svn-id: file:///home/svn/framework3/trunk@13150 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-11 01:15:40 +00:00
HD Moore 90ced404b3 Updates to the jtr code, supports ruby 1.8.7 now, fixes #4908
git-svn-id: file:///home/svn/framework3/trunk@13149 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-11 01:07:46 +00:00
HD Moore a4ea859a4f Check in a snapshot of jtr
git-svn-id: file:///home/svn/framework3/trunk@13135 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-09 02:11:54 +00:00
Wei Chen 83cb04c0d6 Add x64 elf default template
git-svn-id: file:///home/svn/framework3/trunk@13128 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-08 19:22:13 +00:00
HD Moore 84dee0f06c Add a quick little cpuinfo tool
git-svn-id: file:///home/svn/framework3/trunk@13120 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 20:31:15 +00:00
James Lee f01d29e4a5 add support for absolute paths, fixes #4874
git-svn-id: file:///home/svn/framework3/trunk@13108 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-06 21:35:51 +00:00
Raphael Mudge 3fd8320501 Armitage 070211 - added logging, fixed several bugs, usability improvements.
git-svn-id: file:///home/svn/framework3/trunk@13091 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-02 22:59:52 +00:00
HD Moore ec6ef32002 Merge in the binaries
git-svn-id: file:///home/svn/framework3/trunk@13090 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-02 04:04:22 +00:00
James Lee 9e4b36d7ac keep channels around until all their data has been read, fixes #4818, and see #4688
git-svn-id: file:///home/svn/framework3/trunk@13077 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-30 10:28:04 +00:00
HD Moore 17145d07b6 Add some new tables
git-svn-id: file:///home/svn/framework3/trunk@13074 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-30 06:49:04 +00:00
James Lee 68185cb48d fix a deadlock when trying to kill spawned processes
git-svn-id: file:///home/svn/framework3/trunk@13073 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-30 05:44:27 +00:00
HD Moore b7a0ac7989 Posix style (bins)
git-svn-id: file:///home/svn/framework3/trunk@13062 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-29 06:31:14 +00:00
HD Moore 92bb531af5 New bins, new functions, more info soon
git-svn-id: file:///home/svn/framework3/trunk@13059 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-29 06:12:03 +00:00
HD Moore 9220506ba2 Merge in recent meterpreter work. These are not the commits you are looking for (more info on what all this is later this week).
git-svn-id: file:///home/svn/framework3/trunk@13053 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-28 21:26:43 +00:00
James Lee 606b8e68b6 add svn repo cert fingerprints. hopefully fixes some update problems on installations before this change went into the installers (3.7.2)
git-svn-id: file:///home/svn/framework3/trunk@13043 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-27 20:30:44 +00:00
HD Moore 0d0f3804bb Merge in the macro column
git-svn-id: file:///home/svn/framework3/trunk@13027 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-25 18:18:24 +00:00
HD Moore e4eb2a4af0 Add a new table for managing background listeners
git-svn-id: file:///home/svn/framework3/trunk@13024 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-25 06:57:47 +00:00
Matt Weeks 234bbda9eb And compiled.
git-svn-id: file:///home/svn/framework3/trunk@13022 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-25 03:53:55 +00:00
HD Moore 25a2d846e2 Add the settings column
git-svn-id: file:///home/svn/framework3/trunk@13011 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-23 07:04:20 +00:00
HD Moore fbe525873a Add the new macro table
git-svn-id: file:///home/svn/framework3/trunk@12929 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-12 19:04:05 +00:00
HD Moore db413592e9 This commit adds support for the -r (remote machine name) parameter to the reg command and extends the api to support a remote machine name. Closes #1894
git-svn-id: file:///home/svn/framework3/trunk@12924 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-12 00:01:29 +00:00
HD Moore 6dd65e56f2 All changes look good, merging
git-svn-id: file:///home/svn/framework3/trunk@12921 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-11 23:17:42 +00:00
HD Moore 36d4de74f8 Fresh meterpreter binaries, including a 64-bit version of the sniffer extension
git-svn-id: file:///home/svn/framework3/trunk@12915 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-11 22:41:08 +00:00
Matt Weeks 2ea3e5ee0f Fix issues with showing popups on exit, and make it clear why start/connect fails on bad creds.
git-svn-id: file:///home/svn/framework3/trunk@12914 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-11 22:25:14 +00:00
Tod Beardsley 3fde9c6f1f Reworking how imported crendentials work.
git-svn-id: file:///home/svn/framework3/trunk@12908 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-11 02:40:02 +00:00
James Lee d1b971c5f2 no need for a static sig anymore
git-svn-id: file:///home/svn/framework3/trunk@12835 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-03 00:13:44 +00:00
Matt Weeks d4e9e303c6 rejigger session list columns.
git-svn-id: file:///home/svn/framework3/trunk@12789 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-31 23:09:44 +00:00
Jonathan Cran 1e35034d36 updated lab yml
git-svn-id: file:///home/svn/framework3/trunk@12778 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-31 01:14:01 +00:00
HD Moore cab5d26181 Add the database table for api keys
git-svn-id: file:///home/svn/framework3/trunk@12755 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-28 03:41:37 +00:00
HD Moore 96e6e22795 Add the task_id to the reports table
git-svn-id: file:///home/svn/framework3/trunk@12751 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-27 23:57:56 +00:00
Matt Weeks 23ee4b3aa8 Display additional version info in about box.
git-svn-id: file:///home/svn/framework3/trunk@12658 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-18 21:43:52 +00:00
Tod Beardsley 60dcac616e Renames some nessus-imported vulnerabilities to drop the NSS identifier and just stick with the plugin name (if available). Also drops junk NSS-0 vulnerabilities.
git-svn-id: file:///home/svn/framework3/trunk@12653 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-17 22:18:43 +00:00
HD Moore bf6cab2644 Define Vuln as well for this migration to succeeed
git-svn-id: file:///home/svn/framework3/trunk@12629 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-16 02:39:57 +00:00
HD Moore cd1c6416f3 Add the missing ExploitedHost model to the migration
git-svn-id: file:///home/svn/framework3/trunk@12628 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-16 02:32:16 +00:00
Tod Beardsley 056cde292f Deprecate the exploited_host table. Vulns that indicate a successful exploit without opening a session should set the :exploited_at timestamp.
git-svn-id: file:///home/svn/framework3/trunk@12623 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-15 22:19:00 +00:00
Matt Weeks 543ec2c3a1 Format fix.
git-svn-id: file:///home/svn/framework3/trunk@12613 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-14 17:19:28 +00:00
James Lee 98fb399825 remove logging again, silly debugging
git-svn-id: file:///home/svn/framework3/trunk@12606 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-13 01:31:04 +00:00
James Lee 6e06b61e48 php doesn't reuse array indexes with [], so do some acrobatics to figure out a real channel id. fixes #4418
git-svn-id: file:///home/svn/framework3/trunk@12605 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-13 01:22:53 +00:00
Matt Weeks 5fa2a9458f Don't encode when not instructed.
git-svn-id: file:///home/svn/framework3/trunk@12561 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-07 21:22:03 +00:00
James Lee b61d83a0ae add a last-seen column to the sessions table so we can cull dead sessions on startup
git-svn-id: file:///home/svn/framework3/trunk@12432 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-25 16:11:02 +00:00
Matt Weeks 971b6f96f6 pxesploit update; compatibility with x64, compatibility with different windows versions.
Still no custom payload yet.



git-svn-id: file:///home/svn/framework3/trunk@12430 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-25 02:51:07 +00:00
Raphael Mudge 350e1b6fe9 Armitage 04.24.11: added an MOTD option for collaboration mode, added a "Pass Session" option to send a session elsewhere, explicitly set ExitOnSession to false to prevent listeners from dieing
git-svn-id: file:///home/svn/framework3/trunk@12423 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-24 16:21:45 +00:00
HD Moore d27457ad91 Convert binary fields from text to binary
git-svn-id: file:///home/svn/framework3/trunk@12410 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-22 20:44:13 +00:00
James Lee 86bca6438f add a routes table; delete each comm's routes when flushing
git-svn-id: file:///home/svn/framework3/trunk@12377 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-20 17:49:27 +00:00
James Lee 8c0773ba71 and the bin for r12372, see #3898
git-svn-id: file:///home/svn/framework3/trunk@12373 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-19 22:40:13 +00:00
HD Moore 761b7d887f Merge patch from Stephen Haywood to make the PE service template easier to compile. Fixes #4167
git-svn-id: file:///home/svn/framework3/trunk@12367 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-19 14:44:29 +00:00
Raphael Mudge 417991e534 fixed a potential deadlock condition with Armitage's screenshot/webcam snap tab
git-svn-id: file:///home/svn/framework3/trunk@12360 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-19 02:47:03 +00:00
Raphael Mudge 1d766918af undoing silly syntax error... will fix bug, fo realz, laterz
git-svn-id: file:///home/svn/framework3/trunk@12350 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-18 16:24:45 +00:00
Raphael Mudge 406c3ed598 fixed a dead-lock condition with the screenshots/webcam tab
git-svn-id: file:///home/svn/framework3/trunk@12349 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-18 16:01:56 +00:00
Matt Weeks fa808addd0 New Icon.
git-svn-id: file:///home/svn/framework3/trunk@12345 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-17 13:29:01 +00:00
Matt Weeks 86ef20a6c2 Removing unnecessary print.
git-svn-id: file:///home/svn/framework3/trunk@12340 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-16 23:07:12 +00:00
Matt Weeks 41d3b6fb93 Accessibility/personalization: Allow choosing custom foreground/background color.
git-svn-id: file:///home/svn/framework3/trunk@12337 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-16 22:12:34 +00:00
Matt Weeks 8e60901ebf Add support for changing font size application-wide. Also make Look and Feel changes immediately visible and added jar output format support for payloads.
git-svn-id: file:///home/svn/framework3/trunk@12332 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-16 02:15:35 +00:00
Wei Chen ce2687cafe Added swf trigger file
git-svn-id: file:///home/svn/framework3/trunk@12329 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-16 02:08:03 +00:00
Tod Beardsley d63fe9a7ba Adding a column for local_id to the sessions table in order to better handle database-mediated session operations.
git-svn-id: file:///home/svn/framework3/trunk@12321 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-14 23:14:36 +00:00
Raphael Mudge 97f4531536 Armitage 04.13.11 - several updates to improve stability and reliability
git-svn-id: file:///home/svn/framework3/trunk@12315 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-14 04:26:14 +00:00
Raphael Mudge e905f13827 Armitage 04.10.11 - added loot browser, added ARP scan through Meterpreter menu, added Scan menu item to launch MSF discovery modules against host, nmap now displays output in a tab, and fixed several bugs.
git-svn-id: file:///home/svn/framework3/trunk@12287 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-10 05:06:26 +00:00
Mike Smith d5d9d56081 Create a dedicated db table to track sessions & session events.
* Add new db tables for session & session_events
* Migrate existing session data from events db table
* Modify session report methods to log to the new tables


git-svn-id: file:///home/svn/framework3/trunk@12273 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-07 21:59:32 +00:00
Matt Weeks aa72f18ec2 Use quotes less. Fixes browsing to directories with spaces in them issue.
git-svn-id: file:///home/svn/framework3/trunk@12222 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-03 00:26:25 +00:00
Matt Weeks 6024459780 Better autoreconnect on crash/kill.
git-svn-id: file:///home/svn/framework3/trunk@12149 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-26 18:53:16 +00:00
David Rude 8c614a9296 made the shellcode request random to avoid signatures
git-svn-id: file:///home/svn/framework3/trunk@12148 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-26 16:00:52 +00:00
David Rude ff3659aa37 Lots of work to make this a lot more reliable =)
git-svn-id: file:///home/svn/framework3/trunk@12146 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-26 06:35:28 +00:00
Wei Chen bdccc67d1d Added Crash file for CVE-2010-3275 (VLC AMV file)
git-svn-id: file:///home/svn/framework3/trunk@12136 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-25 21:01:30 +00:00
Tod Beardsley 9895d01d51 Moving lib_mysqludf_sys*.dll to a more obvious subdirectory of the exploit binaries.
git-svn-id: file:///home/svn/framework3/trunk@12128 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-24 17:48:19 +00:00
Matt Weeks b220156911 Get rid of error message for non-error.
git-svn-id: file:///home/svn/framework3/trunk@12120 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-24 00:15:18 +00:00
Tod Beardsley b1178686cf Fixes #3988. Adds a command execution module for PostgreSQL by uploading a UDF library and adding sys_exec() as a temporary function. Requires the target to be Windows, uses Bernardo Damele A. G.'s binaries.
Also fixes a typo in the arguments to handler which clears up a heretofore mysterious exception (see exploit.rb).



git-svn-id: file:///home/svn/framework3/trunk@12111 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-23 19:36:07 +00:00
David Rude d7266b6551 Add CVE-2011-0609 exploit for Adobe Flash
git-svn-id: file:///home/svn/framework3/trunk@12089 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-23 04:31:48 +00:00
Matt Weeks 5274cfdc13 Save workspace.
git-svn-id: file:///home/svn/framework3/trunk@12076 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-23 00:21:37 +00:00
Matt Weeks 1a68ab3b07 Retry on certain timeouts, and properly synchronize timeouts.
git-svn-id: file:///home/svn/framework3/trunk@12075 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-22 23:58:10 +00:00
Matt Weeks b1b0004aa4 Stack trace on session list errors. Should help addressing #3677
git-svn-id: file:///home/svn/framework3/trunk@12064 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-22 01:05:48 +00:00
Matt Weeks 299de38302 Fix some option processing.
git-svn-id: file:///home/svn/framework3/trunk@12054 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-21 03:40:26 +00:00
Matt Weeks fd4712e795 Typo.
git-svn-id: file:///home/svn/framework3/trunk@12053 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-21 03:13:15 +00:00
Matt Weeks b06e9b5696 Fix locking issue and set default LnF to nimbus. (works better with, e.g. Backtrack)
git-svn-id: file:///home/svn/framework3/trunk@12052 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-21 03:08:20 +00:00
Matt Weeks b413b8aa99 Fix null pointer bug.
git-svn-id: file:///home/svn/framework3/trunk@12047 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-21 01:49:54 +00:00
Matt Weeks 931e2179b7 Add ability to arbitrarily change Look and Feel.
git-svn-id: file:///home/svn/framework3/trunk@12038 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-20 20:17:51 +00:00
Matt Weeks ea274d1537 Tabs-moveable in, out of, and between windows.
Databse nmap and export added.
Number of view preferences added.
Some bugs fixed.



git-svn-id: file:///home/svn/framework3/trunk@12031 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-20 00:59:38 +00:00
Joshua Drake fb6107ffb5 enable java payloads, currently via one-off method
git-svn-id: file:///home/svn/framework3/trunk@12012 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-17 23:57:11 +00:00
James Lee b20a247eac typo fix, thanks knicklighter
git-svn-id: file:///home/svn/framework3/trunk@12001 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-16 23:10:34 +00:00
Joshua Drake 4644110962 add exploit for cve-2010-4452, currently windows only and no payloads :(
git-svn-id: file:///home/svn/framework3/trunk@11982 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-16 04:50:25 +00:00
Raphael Mudge ebb41c327e Armitage 03.16.11: Fixed a deadlock conditon, improved responsiveness of meterpreter and command shell, and added an execute option to the file browser.
git-svn-id: file:///home/svn/framework3/trunk@11981 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-16 04:20:56 +00:00
Tod Beardsley 5e715c22db Final touchup on Oracle login scanner -- adds a pile of defaults from the existing CSV wordlist.
git-svn-id: file:///home/svn/framework3/trunk@11967 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-15 21:16:18 +00:00
Matt Weeks fa3c038f1d Check for nulls/nils when retrieving client list
git-svn-id: file:///home/svn/framework3/trunk@11963 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-15 16:52:01 +00:00
Raphael Mudge 1fc2f8defe Fixed host import not working with remote connections. Increased auto-download wait time of generated payload via teaming server. Increased meterpreter command time out for teaming mode clients.
git-svn-id: file:///home/svn/framework3/trunk@11940 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-12 06:00:32 +00:00
Matt Weeks 27aaab9e8d Save window sizes and make formatting nicer.
git-svn-id: file:///home/svn/framework3/trunk@11939 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-12 00:49:29 +00:00
amaloteaux 78396e94f9 move linux meterpreter bin to the correct place
git-svn-id: file:///home/svn/framework3/trunk@11938 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-11 20:29:25 +00:00
Raphael Mudge 49d3d1f222 fixed a deadlock condition in Armitage.
git-svn-id: file:///home/svn/framework3/trunk@11931 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-11 06:38:04 +00:00
Raphael Mudge 2ce51a0b74 Armitage 03.10.11 update--added lock to prevent multiple Armitage clients from resolving host OS info via sysinfo. Fixed a race condition that broke Add Hosts.
git-svn-id: file:///home/svn/framework3/trunk@11928 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-11 01:39:00 +00:00
Raphael Mudge 79a65cf38a Armitage 03.10.11--improved scalability of teaming features. Added persistence to meterpreter access menu. You can now right-click hosts in the services view. Improved GUI responsiveness.
git-svn-id: file:///home/svn/framework3/trunk@11922 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-10 04:56:22 +00:00
Tod Beardsley 42531e097f Fixes #3916. Adds a module for mysql delivery of a payload via a UDF, using Bernardo's quite excellent UDF libraries.
git-svn-id: file:///home/svn/framework3/trunk@11899 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-08 22:42:26 +00:00
Matt Weeks dafb085772 Unify option handling code, reducing duplicate code while improving payload option handling and enabling payload handlers to be run in console.
git-svn-id: file:///home/svn/framework3/trunk@11895 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-08 02:53:04 +00:00
Raphael Mudge 9c3d8f4a52 intermediate update: collaboration server now caches Armitage's polling of sessions, hosts, and services to reduce load on msfrpcd.
git-svn-id: file:///home/svn/framework3/trunk@11884 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-06 04:03:40 +00:00
Matt Weeks 14bc4ecbe7 Fix bugs with rerunning post modules and searching.
git-svn-id: file:///home/svn/framework3/trunk@11883 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-05 22:37:17 +00:00
David Rude 37e9ad1ed4 Added SAP Management Console auxiliary scanner modules
git-svn-id: file:///home/svn/framework3/trunk@11858 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-02 10:18:31 +00:00
Raphael Mudge 44a075a597 fixed webcam snap feature and added transparent file download pass-through when collaboration server is enabled
git-svn-id: file:///home/svn/framework3/trunk@11841 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-27 06:49:16 +00:00
Raphael Mudge ae68bed610 Armitage 02.25.11. This release fixes several small bugs.
git-svn-id: file:///home/svn/framework3/trunk@11827 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-26 00:10:29 +00:00
Raphael Mudge 268094a758 Removed remnants of my development environment from server.sl. Now the collab mode will start.
git-svn-id: file:///home/svn/framework3/trunk@11793 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-22 14:28:43 +00:00
Raphael Mudge 87c4ca4839 Armitage 02.22.11 - added features for team-based hacking: meterpreter sharing and safe shell locking/unlocking.
git-svn-id: file:///home/svn/framework3/trunk@11791 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-22 04:58:41 +00:00
et dd05954b34 Fix wmap to test parameters, error inj. module as example
git-svn-id: file:///home/svn/framework3/trunk@11790 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-22 04:27:40 +00:00
Matt Weeks f3d805bc1f compiled
git-svn-id: file:///home/svn/framework3/trunk@11782 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-21 18:18:47 +00:00
James Lee 6eac24e940 handle dead resources more gracefully
git-svn-id: file:///home/svn/framework3/trunk@11770 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-18 00:24:18 +00:00
Raphael Mudge 63918bb52e Armitage 02.13.11:
- Added tab completion to Meterpreter console
- Added smart feature degredation when managing remote Metasploit RPC instances
- Added a console to watch msfrpcd stdout (when launched via Start MSF button)



git-svn-id: file:///home/svn/framework3/trunk@11749 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-14 05:15:31 +00:00
Tod Beardsley 14e6809b2b migrations for tags
git-svn-id: file:///home/svn/framework3/trunk@11726 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-08 18:53:55 +00:00
Matt Weeks fd03824a46 Fix errors when msfrpc is killed outside of msfgui.
git-svn-id: file:///home/svn/framework3/trunk@11720 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-08 00:51:01 +00:00
James Lee 758da50090 use the correct length for copying arguments, fixes #3526, thanks mihi!
git-svn-id: file:///home/svn/framework3/trunk@11700 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-02 21:26:29 +00:00
Matt Weeks 8a32407375 Oops, use this one.
git-svn-id: file:///home/svn/framework3/trunk@11637 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-25 02:25:02 +00:00
Matt Weeks 5ef1cbe966 Add GUI ability to disable DB, and properly restore saved options.
git-svn-id: file:///home/svn/framework3/trunk@11627 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-23 22:23:27 +00:00
Raphael Mudge 83c4e76ad7 Fixed a deadlock issue with Armitage's automatic use of sysinfo to get OS info when needed. Also fixed a bug causing the Windows command shell to not work on when using Armitage on Windows (kind of ironic).
git-svn-id: file:///home/svn/framework3/trunk@11626 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-22 03:40:32 +00:00
Matt Weeks 067c612d9e Make creds visible to RPC and GUI.
git-svn-id: file:///home/svn/framework3/trunk@11602 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-19 20:09:18 +00:00
Raphael Mudge 1c2a968327 Armitage 1/18/11: added optional table view for targets, preliminary support for post/ modules, Armitage uses sysinfo to populate DB host OS when a session exists, and several bug fixes.
git-svn-id: file:///home/svn/framework3/trunk@11588 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-17 19:19:28 +00:00
Matt Weeks 3b7253aa8b Add generic support for post modules.
Now supporting options.
Also, code clean up and better comments



git-svn-id: file:///home/svn/framework3/trunk@11582 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-16 00:06:22 +00:00
Matt Weeks 71ff357bf1 Add support for bypassuac and SNMP post modules and update scripts which have been converted to post modules.
git-svn-id: file:///home/svn/framework3/trunk@11578 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-14 04:05:14 +00:00
Tod Beardsley 5145bd551d Adding a module_uuid field for tasks, for better tracking.
git-svn-id: file:///home/svn/framework3/trunk@11567 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 23:37:44 +00:00
Stephen Fewer 41e5a4c61d Fix for #3482, the empty value occurs when no service pack is present. The fix simply tests for this. Also remove the two unused params on the _snprintf call.
git-svn-id: file:///home/svn/framework3/trunk@11542 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-11 14:29:16 +00:00
James Lee dd61fa950f when socket creation fails, return a relevant windows error code so the client will raise ::Rex::ConnectionError instead of just erroring out with a RequestError. This fixes some problems with backtraces when routing through a php meterp. See r9794, #3481.
git-svn-id: file:///home/svn/framework3/trunk@11532 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-10 08:31:10 +00:00
James Lee bf8a534a72 clean up process handling in php meterp a bit, fixes the 'shell' command and hopefully makes process interaction a little more robust.
git-svn-id: file:///home/svn/framework3/trunk@11531 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-10 08:04:17 +00:00
Matt Weeks d25cda1f74 Add sound recording support to GUI.
git-svn-id: file:///home/svn/framework3/trunk@11530 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-10 02:50:45 +00:00
Matt Weeks 91151f1d1d Update persistence options dialog.
git-svn-id: file:///home/svn/framework3/trunk@11522 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-08 18:27:21 +00:00
Joshua Drake 08f3f44f98 allow bypassuac to work on x64 or x86, allow payload selection, cleanup indents
git-svn-id: file:///home/svn/framework3/trunk@11514 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-08 00:43:01 +00:00
Matt Weeks b2ed512f44 Fix advanced/evasion opts display.
git-svn-id: file:///home/svn/framework3/trunk@11510 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-07 21:01:41 +00:00
Matt Weeks b098690d5c Can now save webcam frame; console history now kept per-window.
git-svn-id: file:///home/svn/framework3/trunk@11487 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-06 17:55:44 +00:00
HD Moore c003e4b8ef Merge R3L1K's UAC bypass module into the trunk
git-svn-id: file:///home/svn/framework3/trunk@11483 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-06 16:59:25 +00:00
Matt Weeks 99ab6a59dd Msfgui fixes:
Make module window work better with smaller screens. 
Fix option title display issues on GTK and in smaller windows. 
RPC backend handles tabs and avoids crash on embedded nulls. 
Cancelling exit confirmation aborts exit. 
Reopening file browser and other session windows is faster and saves location. 
Remove defunct vendor on about window.



git-svn-id: file:///home/svn/framework3/trunk@11461 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-02 22:34:27 +00:00
Jonathan Cran aea0aa6789 updated lab configuration file
git-svn-id: file:///home/svn/framework3/trunk@11442 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-29 15:52:56 +00:00
HD Moore 7350c2860c Merge Armitage 12.22.10 and a front-end script into Metasploit proper
git-svn-id: file:///home/svn/framework3/trunk@11426 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-28 15:50:52 +00:00
Matt Weeks a3126ad8b5 Fix typo error on re-selecting stored target while loading a previously run module.
git-svn-id: file:///home/svn/framework3/trunk@11379 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-20 01:59:29 +00:00
Matt Weeks d390c2eb80 Reduce number of menu items on module lists to work with a little bit smaller screens and clean up log output.
git-svn-id: file:///home/svn/framework3/trunk@11378 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-20 00:57:38 +00:00
Matt Weeks 599df0a71a Fix error with recording on certain Windows versions.
git-svn-id: file:///home/svn/framework3/trunk@11311 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-12 20:12:03 +00:00
HD Moore cff22d7a56 Consistency change to make snmp act like other login modules
git-svn-id: file:///home/svn/framework3/trunk@11303 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-12 07:27:35 +00:00
James Lee dd992fe77a move javaCompile classes into the data directory so they'll be in the classpath for various java exploits
git-svn-id: file:///home/svn/framework3/trunk@11264 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-09 01:02:13 +00:00
James Lee 05d073c467 move the evil-looking metasploit.PayloadApplet to the more inocuous SiteLoader.class, re-enable rjb compiling for the applet class
git-svn-id: file:///home/svn/framework3/trunk@11249 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-07 20:43:53 +00:00
Joshua Drake fbd340aae8 add an adodb based cmdstager, fixes #1431
git-svn-id: file:///home/svn/framework3/trunk@11247 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-07 18:51:12 +00:00
HD Moore f448dbace3 Fix up old migrations to make MySQL happy
git-svn-id: file:///home/svn/framework3/trunk@11244 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-07 17:41:44 +00:00
Mike Smith 722ff65e14 Add workspaces.limit_to_network db column
git-svn-id: file:///home/svn/framework3/trunk@11238 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-06 22:19:03 +00:00
Joshua Drake 3fa31f9c32 avoid mysql limitation, fixes #2976
git-svn-id: file:///home/svn/framework3/trunk@11235 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-06 22:03:34 +00:00
Matt Weeks d28cc9bb5a Fixes #3290, allows address to be specified in an address bar and allows downloading multiple files.
git-svn-id: file:///home/svn/framework3/trunk@11229 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-05 20:06:28 +00:00
HD Moore b6cdf424d3 Expand host comments
git-svn-id: file:///home/svn/framework3/trunk@11221 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-04 03:59:30 +00:00
HD Moore 7765bac17b Add the new migration
git-svn-id: file:///home/svn/framework3/trunk@11220 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-04 03:38:12 +00:00
HD Moore 64e9209a60 This patches the old migration to work with mysql and switches these fields to :text, along with adding a :request column to both web_pages and web_vulns
git-svn-id: file:///home/svn/framework3/trunk@11219 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-04 03:19:01 +00:00
James Lee 02ac14c3c0 export the _start symbol so gdb can debug the resulting elf
git-svn-id: file:///home/svn/framework3/trunk@11185 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-01 01:07:48 +00:00
Matt Weeks afa572e03b Fix issue with scroll bars not being shown when many sessions were visible but the window had been resized to a small size.
git-svn-id: file:///home/svn/framework3/trunk@11184 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 23:52:25 +00:00
James Lee 191c4e8eb7 make java_signed_applet work with generic java payloads, but keep the default target as Windows/x86 since it is by far the most common victim.
git-svn-id: file:///home/svn/framework3/trunk@11172 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 03:50:40 +00:00
Matt Weeks aa827488cd Auto-load database connection info from windows install into database connection dialog if connection info is missing.
git-svn-id: file:///home/svn/framework3/trunk@11170 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 01:34:26 +00:00
Joshua Drake 99b2bdd8d7 remove silly users, the -f bug is for actual username not FROMUSER, *facepalm*
git-svn-id: file:///home/svn/framework3/trunk@11167 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 00:18:24 +00:00
Matt Weeks 3812aa95f4 Add webcam support to GUI.
git-svn-id: file:///home/svn/framework3/trunk@11161 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-29 02:31:59 +00:00
Matt Weeks 61242f3c2c Catch invalid webcam frame requests.
git-svn-id: file:///home/svn/framework3/trunk@11160 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-29 02:23:01 +00:00
Matt Weeks c3f98de6f5 Add task scheduler permissions escalation support to GUI.
git-svn-id: file:///home/svn/framework3/trunk@11153 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 15:48:05 +00:00
Joshua Drake b56e7852e9 add rservices default FROMUSERS_FILE, go -froot!
git-svn-id: file:///home/svn/framework3/trunk@11141 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 06:02:24 +00:00
Matt Weeks 2e72926638 Add audio (microphone) recording support to stdapi.
git-svn-id: file:///home/svn/framework3/trunk@11087 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-22 00:32:39 +00:00
James Lee 6f7af42667 add an exploit for cve-2010-3563, thanks Matthias Kaiser
git-svn-id: file:///home/svn/framework3/trunk@11078 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-19 23:02:35 +00:00
Matt Weeks c424d6b403 Make options more consistent when launching a handler.
git-svn-id: file:///home/svn/framework3/trunk@11054 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-17 00:26:39 +00:00
Matt Weeks 2a333d8106 Properly handle cancelling certain GUI commands, and issuing them multiple times, etc.
git-svn-id: file:///home/svn/framework3/trunk@11044 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-14 20:39:14 +00:00
Matt Weeks 7f53f36150 Sanity check on connecting. Also IDE update.
git-svn-id: file:///home/svn/framework3/trunk@11043 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-14 20:12:20 +00:00
Matt Weeks 560c1847c3 Properly return error if no webcams present (instead of killing session).
git-svn-id: file:///home/svn/framework3/trunk@11041 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-14 19:59:31 +00:00
Matt Weeks bbf5cb9e5f Typo.
git-svn-id: file:///home/svn/framework3/trunk@11040 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-14 19:57:48 +00:00
Joshua Drake 77bc5cf6cd Big VNC update:
* Created Rex::Proto::RFB
 * Updated vnc_none_auth scanner to use Rex::Proto::RFB::Client
 * Added vnc_login (refactored from carstein)
 * Created an initial vnc_passwords.txt file
 * Removed cipher/des.rb - incompatible license
 * Updated getvncpw script to use new Rex::Proto::RFB::Cipher.decrypt




git-svn-id: file:///home/svn/framework3/trunk@11033 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-14 03:37:45 +00:00
Carlos Perez c492737f0f Fixed format issue
git-svn-id: file:///home/svn/framework3/trunk@11032 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-14 02:37:37 +00:00
Matt Weeks 594a46bfc7 Merge webcam extension into stdapi.
git-svn-id: file:///home/svn/framework3/trunk@10997 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 22:36:54 +00:00
James Lee 089ace9726 update the static-signed jar for java_signed_applet, fixes #3015
git-svn-id: file:///home/svn/framework3/trunk@10993 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 21:00:29 +00:00
James Lee 85640627ab add ability to drop an executable from the jar. see #406, thanks mihi
git-svn-id: file:///home/svn/framework3/trunk@10973 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-10 19:54:56 +00:00
Matt Weeks 2d2e1989aa Fix memory leak.
git-svn-id: file:///home/svn/framework3/trunk@10964 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-09 23:37:56 +00:00
Matt Weeks db602dd478 Add functional in-memory webcam support.
git-svn-id: file:///home/svn/framework3/trunk@10954 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-09 02:24:28 +00:00
Joshua Drake cf7cc156a2 add xampp default user/pass
git-svn-id: file:///home/svn/framework3/trunk@10936 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-06 23:50:12 +00:00
Matt Weeks ec70016b53 Don't update data if no data received.
git-svn-id: file:///home/svn/framework3/trunk@10934 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-06 19:43:47 +00:00
Matt Weeks 7d6add8a35 Fix prompt error, update prompt even if no data received.
git-svn-id: file:///home/svn/framework3/trunk@10931 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-06 17:38:29 +00:00
Matt Weeks f15b370127 And add logging.
git-svn-id: file:///home/svn/framework3/trunk@10930 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-06 17:04:47 +00:00
Matt Weeks bc983ea52c Run meterpreter GUI commands in background to not interfere with active shell or other channel interaction.
Also simplify calling commands in file browser and process viewer.



git-svn-id: file:///home/svn/framework3/trunk@10929 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-06 16:51:48 +00:00
Tod Beardsley f6415186a8 Adds the imported_creds table.
git-svn-id: file:///home/svn/framework3/trunk@10923 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-06 01:01:20 +00:00
et d6b3c176a3 parsers changes
git-svn-id: file:///home/svn/framework3/trunk@10916 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-05 04:01:30 +00:00
Matt Weeks b15ba92567 Add rank; fix issue with searching.
git-svn-id: file:///home/svn/framework3/trunk@10873 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-02 23:35:12 +00:00
Matt Weeks db4c6ae246 Properly show compatible payloads. Important for cross-platform exploits.
git-svn-id: file:///home/svn/framework3/trunk@10870 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-02 22:41:49 +00:00
James Lee dcb850f56a merge patches to fix a race condition in java meterpreter stager and a compatibility fix for gcj-based JVMs, thanks mihi\! java meterpreter now works with tomcat_mgr_deploy, see #3009
git-svn-id: file:///home/svn/framework3/trunk@10864 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-02 19:59:57 +00:00
Matt Weeks c94c95bb04 Make the bottom button work too.
git-svn-id: file:///home/svn/framework3/trunk@10859 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-02 00:22:57 +00:00
Matt Weeks 6970e1834e Fix bug with summarized options.
git-svn-id: file:///home/svn/framework3/trunk@10858 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-02 00:05:25 +00:00
Joshua Drake b572414eac add exploit for cve-2010-3654
git-svn-id: file:///home/svn/framework3/trunk@10857 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-01 22:34:13 +00:00
Joshua Drake 21f16f63a1 style compliance fixes
git-svn-id: file:///home/svn/framework3/trunk@10855 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-01 21:45:49 +00:00
Matt Weeks 3dd35cdcd4 Msfgui log fix. Fix identification of empty host list when consoles have been opened. Also change colors. Colors were a dumb idea.
git-svn-id: file:///home/svn/framework3/trunk@10849 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-30 22:12:15 +00:00
pks 20b96ae0c1 Partial implementation of in memory execution and update binary
git-svn-id: file:///home/svn/framework3/trunk@10839 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-28 12:44:39 +00:00
Matt Weeks 85e7c799f7 Log modules runs that are started through console.
git-svn-id: file:///home/svn/framework3/trunk@10811 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-24 20:20:10 +00:00
Matt Weeks ec15abd8dc Add SSL support to connection starting/connecting.
git-svn-id: file:///home/svn/framework3/trunk@10810 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-24 20:09:04 +00:00
Matt Weeks 5619b7d57e Fix for 3.5.
git-svn-id: file:///home/svn/framework3/trunk@10808 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-24 13:17:19 +00:00
Matt Weeks 780bdb32d3 Try ruby.exe first.
git-svn-id: file:///home/svn/framework3/trunk@10807 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-24 00:59:11 +00:00
Matt Weeks cdef02c382 Add new command to try when starting msfrpcd.
git-svn-id: file:///home/svn/framework3/trunk@10801 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-23 23:13:12 +00:00
Matt Weeks 32875e1524 Propery highlight recent modules.
git-svn-id: file:///home/svn/framework3/trunk@10799 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-23 22:02:22 +00:00
Matt Weeks 560d79bb78 Standardize duplicate-option removal.
git-svn-id: file:///home/svn/framework3/trunk@10797 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-23 21:37:58 +00:00
Jonathan Cran 9c0c6552f0 removing loader.jar, per #2894
git-svn-id: file:///home/svn/framework3/trunk@10795 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-23 20:03:45 +00:00
Matt Weeks a2801e5dc1 Add detach/kill support to interacting meterpreter channels over RPC. Also clean some duplicated code in session interaction.
git-svn-id: file:///home/svn/framework3/trunk@10794 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-23 17:05:48 +00:00
James Lee d898ac91dd compile for 1.2 for compatibility with older servers
git-svn-id: file:///home/svn/framework3/trunk@10787 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 21:00:37 +00:00
James Lee f33d7cc670 revamp java payloads and make shells work with tomcat_mgr_deploy. tested java_trusted_chain and java_tester to verify that this doesn't break other java payload usage. see #3009 and #2973, meterpreter doesn't work yet, so not marking resolved.
git-svn-id: file:///home/svn/framework3/trunk@10781 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 10:19:51 +00:00
Joshua Drake 6bd75bb2d5 add shockwave exploit from abysssec/rel1k
git-svn-id: file:///home/svn/framework3/trunk@10779 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 03:15:22 +00:00
James Lee ecc98849a6 remove debugging error_reporting
git-svn-id: file:///home/svn/framework3/trunk@10778 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-21 22:47:16 +00:00
Joshua Drake 4c9c175602 add default user/pass for ZDI-10-214
git-svn-id: file:///home/svn/framework3/trunk@10746 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-19 14:26:08 +00:00
James Lee 5960dc6753 take out debugging
git-svn-id: file:///home/svn/framework3/trunk@10745 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-19 12:51:09 +00:00
Joshua Drake f997b37245 remove the kitrap0d meterpreter script in favor of the "getsystem" implementation, fixes #800, fixes #801
git-svn-id: file:///home/svn/framework3/trunk@10739 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-18 23:57:41 +00:00
Matt Weeks 63d578dd7e Add GUI support to service permissions escalate script.
git-svn-id: file:///home/svn/framework3/trunk@10723 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-17 23:34:37 +00:00
HD Moore f88033f0cc Merge in R3L1K's Powershell enhancements and powerdump code (hashdump through powershell)
git-svn-id: file:///home/svn/framework3/trunk@10721 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-17 17:39:43 +00:00
Matt Weeks 881f8e7919 Better error handling in gui shutdown code
git-svn-id: file:///home/svn/framework3/trunk@10710 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-16 19:18:53 +00:00
Matt Weeks ca127fcf43 Display error in getting session list without displaying a new dialog window.
git-svn-id: file:///home/svn/framework3/trunk@10709 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-16 18:54:54 +00:00
Matt Weeks f644580ec3 Minor fix on recent modules.
git-svn-id: file:///home/svn/framework3/trunk@10702 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-16 00:19:42 +00:00
Matt Weeks ec4343c686 Improved object/XML conversion in XMLRPC code and changed config file to reuse the same code
so that normal java HashMaps, Lists, Strings, etc can be used instead of converting to and 
from DOM nodes (easier to store complex objects). Module list is now stored with time each 
module was first seen, and recent modules are highlighted. Accompanying minor edits included.



git-svn-id: file:///home/svn/framework3/trunk@10701 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-15 23:02:53 +00:00
Mike Smith 756e6d2ad8 Remove unsupported msfweb interface. (fixes #503)
* This will significantly decrease the size of the msf install (~5 MB)
* ActiveRecord & ActiveSupport are still used, and have been moved to lib/

git-svn-id: file:///home/svn/framework3/trunk@10682 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-14 18:45:16 +00:00
Matt Weeks 43b221002b Fix corrupt jar.
git-svn-id: file:///home/svn/framework3/trunk@10678 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-14 01:21:04 +00:00
Matt Weeks 11bd6b2a95 Change conf file location to main msf conf dir; add scripts.
git-svn-id: file:///home/svn/framework3/trunk@10677 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-14 01:10:17 +00:00
Matt Weeks 51169377a9 Remove bad shell hack.
git-svn-id: file:///home/svn/framework3/trunk@10676 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-14 00:39:45 +00:00
Matt Weeks 2ba327c3aa Don't lose history when connection is unsuccessful or connection info when not starting up an rpcd.
git-svn-id: file:///home/svn/framework3/trunk@10675 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-14 00:34:07 +00:00
Matt Weeks e981b89ed4 Add Ctrl+C and Ctrl+Z support to gui console.
git-svn-id: file:///home/svn/framework3/trunk@10641 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-11 15:57:01 +00:00
James Lee abf19e002d tweak the models
git-svn-id: file:///home/svn/framework3/trunk@10618 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-09 08:35:41 +00:00
James Lee 988bbd13f1 associate clients with a campaign
git-svn-id: file:///home/svn/framework3/trunk@10601 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 17:20:57 +00:00
HD Moore 2e9138ebbc This commit overhauls much of the meterpreter timeouts and staging processes. This fixes a bug with concurrent session handling, reduces CPU load by caching a single SSL certificate for all sessions, increases all of the critical timeouts, and generally makes mass ownage work better. We still need to limit the maximum number of concurrent on_session() threads to something sane to prevent sesssion spikes from dragging out the process even longer. The C-side meterpreter change is minimal and will only help with future compatibility if we move to non-blocking fd's for the SSL socket.
git-svn-id: file:///home/svn/framework3/trunk@10595 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 04:11:47 +00:00
HD Moore 04276d333a Add category, confidence, description, and blame to the web_vulns table.
git-svn-id: file:///home/svn/framework3/trunk@10591 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 01:51:28 +00:00
pks 754225a80d Implement per dispatch run channel_write of packets, remove __FUNCTION__ due to dprintf changes, and fix shutting down networkpug interfaces. Re-add networkpug binary.
git-svn-id: file:///home/svn/framework3/trunk@10586 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-07 11:52:38 +00:00
Matt Weeks cb453a97ab Temporary workaround for #2261 - make new console for shell.
git-svn-id: file:///home/svn/framework3/trunk@10578 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-06 23:10:18 +00:00
HD Moore f69a1190a4 Commit the EICAR Canary check for meddling AVs
git-svn-id: file:///home/svn/framework3/trunk@10536 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-04 03:07:58 +00:00
HD Moore 8a567dd3a8 Add query to web_form/web_path
git-svn-id: file:///home/svn/framework3/trunk@10526 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-02 22:55:54 +00:00
HD Moore 5b7296931d This patch merges in support for four new database tables focused on tracking web application information along with a tweak to the task manager code to allow tasks to be run from within tasks without fear of deadlock.
git-svn-id: file:///home/svn/framework3/trunk@10523 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-02 18:48:29 +00:00
Matt Weeks dc108abc56 Oops. Typo.
git-svn-id: file:///home/svn/framework3/trunk@10506 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-28 23:19:18 +00:00
James Lee 337a0be8fc adjust templates, move SerializedPrefs into its own file
git-svn-id: file:///home/svn/framework3/trunk@10494 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-27 04:12:04 +00:00
pks 14cabd2611 Allow debugging to be enabled.
This will make it easier to hopefully track down bugs.

exploitme-posix.c - make complete stack executable. On some kernel versions, execstack doesn't do the trick.

git-svn-id: file:///home/svn/framework3/trunk@10485 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-26 05:58:59 +00:00
Matt Weeks 2290b47c96 Add encoder support to exploits
git-svn-id: file:///home/svn/framework3/trunk@10480 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-26 00:07:02 +00:00
pks 740e2c1ab2 Change base from 0x90040000 to 0x20040000.
This is more portable across kernel versions / patches it seems. This
will be better for SEGMEXEC compatibility as well.

git-svn-id: file:///home/svn/framework3/trunk@10455 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-24 04:06:28 +00:00
pks 50241faa57 Implement a sniffer for posix meterpreter using libpcap.
This version of the sniffer supports packet filtering after the packet count variable, like so:

meterpreter > sniffer_interfaces

1 - 'eth0' ( type:0 mtu:1514 usable:false dhcp:false wifi:false )
2 - 'any' ( type:0 mtu:1514 usable:false dhcp:false wifi:false )
3 - 'lo' ( type:0 mtu:1514 usable:false dhcp:false wifi:false )

meterpreter > use sniffer
Loading extension sniffer...success.
meterpreter > sniffer_start 1 500000 icmp <-- picks up only icmp packets.
[*] Capture started on interface 1 (500000 packet buffer)
meterpreter > sniffer_stop 1
[*] Capture stopped on interface 1

git-svn-id: file:///home/svn/framework3/trunk@10424 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 11:43:30 +00:00
pks a179836fca Initial import of networkpug, a pivoting interface using libpcap to monitor/inject packets on a interface on the remote machine.
git-svn-id: file:///home/svn/framework3/trunk@10423 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 09:35:46 +00:00
pks 4fd054476c Update the posix meterpreter binaries.
git-svn-id: file:///home/svn/framework3/trunk@10420 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 05:14:07 +00:00
James Lee 5ae74d8913 mar my nice migration with a new one.
git-svn-id: file:///home/svn/framework3/trunk@10392 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-20 07:43:49 +00:00
James Lee c0137c7d61 migrations for campaigns
git-svn-id: file:///home/svn/framework3/trunk@10380 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-19 23:45:40 +00:00
Matt Weeks 6736f6d5be Make encoding payloads a million times faster.
git-svn-id: file:///home/svn/framework3/trunk@10374 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-19 02:45:55 +00:00
Matt Weeks 16f2e33442 Better support issuing commands to multiple sessions.
git-svn-id: file:///home/svn/framework3/trunk@10360 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-17 22:18:52 +00:00
Matt Weeks 908976c70a Add ability to refresh console list, and only start polling for input on sessions when the window is opened.
git-svn-id: file:///home/svn/framework3/trunk@10359 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-17 21:41:08 +00:00
Matt Weeks 9712a99e42 Properly save host connecting to.
git-svn-id: file:///home/svn/framework3/trunk@10356 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-17 21:13:42 +00:00
Matt Weeks c68861e4f4 Logout if not stopping the rpc daemon.
git-svn-id: file:///home/svn/framework3/trunk@10349 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-17 17:43:45 +00:00
Mike Smith 2b891db0e1 Use the fully-qualified name of the User class. Also, use a bulk UPDATE
instead of one UPDATE per record.

git-svn-id: file:///home/svn/framework3/trunk@10348 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-17 16:12:27 +00:00
Mike Smith 6eed30a78d Add migration to make user.admin required
Revert r10296, which was a bad idea because it did not fix the problem if the
original version of the migration had already been applied.

git-svn-id: file:///home/svn/framework3/trunk@10333 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-16 17:29:14 +00:00
Stephen Fewer 7957c8872e add in the new bins (and delete the old railgun dll)
git-svn-id: file:///home/svn/framework3/trunk@10320 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-14 23:31:35 +00:00
Joshua Drake 007ffc1821 updated binary, see #2418
git-svn-id: file:///home/svn/framework3/trunk@10316 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-14 20:38:14 +00:00
Tod Beardsley 088e862e16 Adds a migration for report template tracking.
git-svn-id: file:///home/svn/framework3/trunk@10303 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-13 12:17:57 +00:00
Matt Weeks f18ce42d1f Remove unnecessary options to console run.
git-svn-id: file:///home/svn/framework3/trunk@10298 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 22:40:13 +00:00
Matt Weeks cefe0ecb45 Add ability to run modules in console, some other fixes.
git-svn-id: file:///home/svn/framework3/trunk@10297 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 21:54:19 +00:00
Mike Smith 0d043457f6 Make user.admin db column not null.
git-svn-id: file:///home/svn/framework3/trunk@10296 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 18:21:56 +00:00
James Lee 07f1b6affb update to java meterpreter, now supports file search, thanks mihi! see #406
git-svn-id: file:///home/svn/framework3/trunk@10295 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 17:55:10 +00:00
Matt Weeks 12b15506c6 Log database connection, plugin loading/unloading, and session upgrades.
git-svn-id: file:///home/svn/framework3/trunk@10292 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 16:35:03 +00:00
Matt Weeks cb41474f49 fix typo and import errors.
git-svn-id: file:///home/svn/framework3/trunk@10291 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 16:17:12 +00:00
Matt Weeks 711cf6d9ef Prefer autodetect on importing, since other options are deprecated.
git-svn-id: file:///home/svn/framework3/trunk@10290 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 16:13:26 +00:00
Matt Weeks 995b289635 Add session upgrade capability to command shells.
git-svn-id: file:///home/svn/framework3/trunk@10289 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 15:59:19 +00:00
Matt Weeks f8dafa0308 Display platform on session list for meterpreter sessions.
git-svn-id: file:///home/svn/framework3/trunk@10288 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 15:31:42 +00:00
Joshua Drake eaf8ef00d0 add initial version of cve-2010-2883 exploit
git-svn-id: file:///home/svn/framework3/trunk@10263 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-08 23:05:18 +00:00
Mike Smith af5a77dee5 Add workspaces.owner_id database field
git-svn-id: file:///home/svn/framework3/trunk@10262 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-08 17:51:24 +00:00
James Lee 85126af521 add an exploit module for cve-2010-0094, thanks Matthias Kaiser.
git-svn-id: file:///home/svn/framework3/trunk@10255 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-08 08:20:55 +00:00
James Lee b453665e5f avoid infinite recursion when links cause circular directory paths by not following symlinks
git-svn-id: file:///home/svn/framework3/trunk@10244 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-05 22:18:43 +00:00
James Lee 35fab7b5ae default to the current directory instead of failing
git-svn-id: file:///home/svn/framework3/trunk@10243 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-05 22:08:05 +00:00
James Lee efeffe3185 add support for file search to php meterp
git-svn-id: file:///home/svn/framework3/trunk@10242 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-05 21:49:48 +00:00
James Lee 9060ce379b add preliminary support for querying registry values when running on Windows
git-svn-id: file:///home/svn/framework3/trunk@10241 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-05 20:54:32 +00:00
Matt Weeks b24a7db785 Add workspace support throughout GUI; add/select/remove db workspace and set default workspace when running modules.
git-svn-id: file:///home/svn/framework3/trunk@10233 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-03 17:13:53 +00:00
Matt Weeks 207cefb25a And add compiled.
git-svn-id: file:///home/svn/framework3/trunk@10228 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-03 00:45:02 +00:00
Matt Weeks 62e27afa36 Add support for deleting items and add clients, notes, and loots db queries.
git-svn-id: file:///home/svn/framework3/trunk@10226 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-03 00:43:06 +00:00
Joshua Drake 1bd084ff9f add posix meterpreter linux x86 binaries from philip
git-svn-id: file:///home/svn/framework3/trunk@10223 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-02 16:56:47 +00:00
HD Moore a447149907 Add the script to generate the VxWorks master password list. Add the script to scan a memory image looking for a known password hash. Add two sorted dictionaries of the first 20k collided values (covers most typeable passwords). One dictionary is a straight wordlist, the other is used by vxdigger.rb. The full master password list can be generated with vxmaster.rb
git-svn-id: file:///home/svn/framework3/trunk@10220 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-02 14:55:34 +00:00
Matt Weeks 9e86da570e Initialize framework after forking when running msfrpcd as a daemon. Fixes #2465 by running database task thread in daemon.
git-svn-id: file:///home/svn/framework3/trunk@10207 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-31 23:24:54 +00:00
Matt Weeks 6dcd8a8269 Use new search command and script for search/download in gui.
git-svn-id: file:///home/svn/framework3/trunk@10198 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-30 22:59:46 +00:00
Stephen Fewer a0f86c62e3 Meterpreter search support to leverage the index on older systems (2000/XP/2003) via Windows Desktop Search v2.
git-svn-id: file:///home/svn/framework3/trunk@10187 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-30 09:50:41 +00:00
Matt Weeks 77aa35c53f Allow viewing connection details.
git-svn-id: file:///home/svn/framework3/trunk@10182 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-29 02:50:03 +00:00
Matt Weeks d5b31adc6d Only enable menus when connected to an msfrpc server
git-svn-id: file:///home/svn/framework3/trunk@10180 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-28 19:56:11 +00:00
Matt Weeks a32e88b509 Simplify calling RPC functions in gui with implicit argument array.
git-svn-id: file:///home/svn/framework3/trunk@10179 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-28 19:43:38 +00:00
Matt Weeks 60105d8f24 Basic gui plugin support.
git-svn-id: file:///home/svn/framework3/trunk@10178 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-28 19:23:19 +00:00
Matt Weeks 633f84888e Add support for database connect and disconnect, saving connection details.
git-svn-id: file:///home/svn/framework3/trunk@10176 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-28 18:09:30 +00:00
Stephen Fewer aa6ef3615e ...and the bins for file searching.
git-svn-id: file:///home/svn/framework3/trunk@10166 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-27 14:45:36 +00:00
Matt Weeks 8f52ae02df Tabs disabled until loaded from database, auto-load database on connect, and more simplified database calls,
git-svn-id: file:///home/svn/framework3/trunk@10161 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-26 23:49:35 +00:00
James Lee af9ea771a0 remove unnecessary stuff from the old msfgui
git-svn-id: file:///home/svn/framework3/trunk@10157 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-26 15:31:27 +00:00
Joshua Drake 2d14c0054f add two contributed linux armle payloads, thx guys!
git-svn-id: file:///home/svn/framework3/trunk@10152 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 21:44:33 +00:00
Joshua Drake 64e07a095f rename x86 elf template src file
git-svn-id: file:///home/svn/framework3/trunk@10151 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 21:03:41 +00:00
Matt Weeks 4af82f2937 Add import capability and simplify reloading database.
git-svn-id: file:///home/svn/framework3/trunk@10133 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 02:05:03 +00:00
Tod Beardsley 1db9d8eb01 Fixes #2444. Adds an ExploitedHost table, adds the db_exploited command, adds the report_exploit() function.
Tested with meterpreter, shell, and clientside exploit sessions. 


git-svn-id: file:///home/svn/framework3/trunk@10130 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-24 21:57:04 +00:00
Matt Weeks f94e174d97 Initial Database support, with improved basic view.
git-svn-id: file:///home/svn/framework3/trunk@10124 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-24 00:22:49 +00:00
James Lee 7381ab8b6d duh, dont actually need this
git-svn-id: file:///home/svn/framework3/trunk@10093 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-21 07:19:49 +00:00
James Lee 6b08dfed61 Add exploit module for cve-2010-08040. This is an awesome bug and my description field doesn't do it justice
git-svn-id: file:///home/svn/framework3/trunk@10092 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-21 06:38:29 +00:00
Matt Weeks 57b48314a6 Add logging support to console sessions.
git-svn-id: file:///home/svn/framework3/trunk@10084 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 19:07:15 +00:00
James Lee 249016056e and the bins. see #406
git-svn-id: file:///home/svn/framework3/trunk@10074 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 07:04:39 +00:00
Matt Weeks 937606ab1f Ability to close consoles and discover old consoles.
git-svn-id: file:///home/svn/framework3/trunk@10068 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 23:22:22 +00:00
Matt Weeks 6c38930db6 Do not poll for output on hidden windows. Improves performance with many windows open.
git-svn-id: file:///home/svn/framework3/trunk@10066 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 23:02:31 +00:00
Joshua Drake 2545410bc7 make exe template names more consistent
git-svn-id: file:///home/svn/framework3/trunk@10065 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 21:08:51 +00:00
Joshua Drake ec169b9722 add amd64 dll pe template
git-svn-id: file:///home/svn/framework3/trunk@10064 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 20:49:28 +00:00
Joshua Drake 41382b503b add a 64-bit compile mode for pe/dll
git-svn-id: file:///home/svn/framework3/trunk@10063 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 20:49:12 +00:00
Tod Beardsley 5b6f110efa Wrapping credential migration in a rescue to ensure it never fails; there are no schema changes in this migration, so a failure in migrating credentials to the Cred table shouldn't block future changes to the schema.
git-svn-id: file:///home/svn/framework3/trunk@10062 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 19:51:13 +00:00
Tod Beardsley bae0bbbdbd See #2412. Migrates existing auth.* notes to the new Creds table. Anything unexpected should fall through to a new note of "migrated_auth".
git-svn-id: file:///home/svn/framework3/trunk@10058 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 17:35:56 +00:00
Stephen Fewer 49d34d048f ...and the bins
git-svn-id: file:///home/svn/framework3/trunk@10054 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 11:35:17 +00:00
Joshua Drake 139f9f442b add addtl root passwords from xanda, fixes #2354
git-svn-id: file:///home/svn/framework3/trunk@10047 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-18 23:09:55 +00:00
Tod Beardsley 6d6a547b34 Fixes #2412. Adds a creds table, modifies the db_report_auth API, adds the db_creds and db_add_cred commands.
git-svn-id: file:///home/svn/framework3/trunk@10034 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-18 00:58:20 +00:00
Matt Weeks f3648b15cc Add console support to gui. Includes tab completion.
git-svn-id: file:///home/svn/framework3/trunk@10033 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-18 00:30:41 +00:00
Mike Smith d2d419e1a7 Default to user.admin = true
git-svn-id: file:///home/svn/framework3/trunk@10032 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-18 00:07:56 +00:00
Mike Smith 8785f22454 Update db schema to add user.admin and project_membership table.
git-svn-id: file:///home/svn/framework3/trunk@10030 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-17 23:46:41 +00:00
James Lee ec1db10fa3 stupid missing files. /me grumbles
git-svn-id: file:///home/svn/framework3/trunk@9975 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-09 17:49:01 +00:00
James Lee 4a5f800064 i swear i added this before.
git-svn-id: file:///home/svn/framework3/trunk@9973 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-09 16:18:35 +00:00
Joshua Drake 4f148f9374 oops, add updateX data files, see #2329
git-svn-id: file:///home/svn/framework3/trunk@9964 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-06 19:43:25 +00:00
Matt Weeks ffb4b611c6 Confirm rpc exit for menu close operations too.
git-svn-id: file:///home/svn/framework3/trunk@9947 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-03 02:42:41 +00:00
James Lee 02167b8d16 move the stdapi constants into the stdapi extension to save a little space when php meterpreter is standalone
git-svn-id: file:///home/svn/framework3/trunk@9939 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-27 21:16:15 +00:00
Jonathan Cran d227b4f211 example lab mappings
git-svn-id: file:///home/svn/framework3/trunk@9932 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-26 15:35:44 +00:00
Matt Weeks 7f87cb9e55 Fix for date error on job.info call.
git-svn-id: file:///home/svn/framework3/trunk@9916 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-23 21:54:18 +00:00
Matt Weeks 9b0e9fca55 Support stopping rpcd on exit, based on user confirmation. Fixes #2287
git-svn-id: file:///home/svn/framework3/trunk@9915 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-23 21:28:39 +00:00
Matt Weeks ed74422a62 Fix for Linux error on get system icon call. Fixes bug #2283
git-svn-id: file:///home/svn/framework3/trunk@9894 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 23:57:02 +00:00
James Lee 14263662e5 missed a file
git-svn-id: file:///home/svn/framework3/trunk@9882 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 05:05:02 +00:00
Matt Weeks 6aa24fd26e And compiled.
git-svn-id: file:///home/svn/framework3/trunk@9878 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 03:08:04 +00:00
James Lee 119f9328fc remove debug prints. =/
git-svn-id: file:///home/svn/framework3/trunk@9875 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 00:57:03 +00:00
James Lee 08d705c1db add java meterpreter and update java_calendar_deserialize to be able to use it, see #406
git-svn-id: file:///home/svn/framework3/trunk@9874 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 00:53:24 +00:00
HD Moore 7963d65f28 Only allow a single instance of a generated DLL to execute (prevent duplicate sessions, like with LNK)
git-svn-id: file:///home/svn/framework3/trunk@9871 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 23:24:57 +00:00
HD Moore f87b7bc59e Fix up the DLL payloads
git-svn-id: file:///home/svn/framework3/trunk@9868 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 22:13:34 +00:00
James Lee 2a8a058519 add a bind stager for php
git-svn-id: file:///home/svn/framework3/trunk@9855 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-17 22:42:12 +00:00
Matt Weeks b6ef239f15 ... and compiled
git-svn-id: file:///home/svn/framework3/trunk@9848 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-16 21:48:07 +00:00
HD Moore 626c3f7d96 Swap out templates for one without a msvcrt71 dependency
git-svn-id: file:///home/svn/framework3/trunk@9836 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-15 16:58:47 +00:00
Matt Weeks 85d07af548 Multiple-session script execution fixed.
Build config updated for netbeans 6.9 and current tree.



git-svn-id: file:///home/svn/framework3/trunk@9830 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-14 19:27:23 +00:00
Matt Weeks 2f6d0777ae Initial commit of compiled java gui.
git-svn-id: file:///home/svn/framework3/trunk@9817 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-13 23:00:15 +00:00
James Lee 8de510f914 add udp support for tunneling. tested with udp_probe
git-svn-id: file:///home/svn/framework3/trunk@9816 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-13 22:51:15 +00:00
HD Moore 30d3440b5d New bins, implements the server side of multi-call railgun
git-svn-id: file:///home/svn/framework3/trunk@9806 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-13 19:19:21 +00:00
HD Moore 16851f56c9 Swizzle.
git-svn-id: file:///home/svn/framework3/trunk@9796 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-12 21:51:11 +00:00
Stephen Fewer a47ced6ac4 Partial solution for #1448. Fall back to CreateProcessWithTokenW when CreateProcessAsUser fails with ERROR_PRIVILEGE_NOT_HELD. While only available on 2003 and above this works on my server 2008 test case which was failing before.
git-svn-id: file:///home/svn/framework3/trunk@9781 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 18:36:57 +00:00
Stephen Fewer 7a57ca57a6 Bug fix for a misplaced & in call to DestroyEnvironmentBlock() during process_execute(), was causing a hang on Vista and an Access Violation on server 2008.
git-svn-id: file:///home/svn/framework3/trunk@9779 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 16:37:50 +00:00
HD Moore d3a6418e53 Revert changes to elevate, still not getting around restrictions on primary token creation, needs a deeper look
git-svn-id: file:///home/svn/framework3/trunk@9759 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:59:31 +00:00
HD Moore 3d01172af5 Binaries for the previous commit
git-svn-id: file:///home/svn/framework3/trunk@9757 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:41:06 +00:00
HD Moore ec9156827e Switch the elevator methods to DuplicateHandleEx to get a primary token
git-svn-id: file:///home/svn/framework3/trunk@9755 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:23:05 +00:00
HD Moore 29f9f6671e This *should* fix all cases where execute -t would fail to use an impersonated token
git-svn-id: file:///home/svn/framework3/trunk@9754 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 19:32:51 +00:00
HD Moore 972e7bc282 Clean up some of the token impersonation code around process execution
git-svn-id: file:///home/svn/framework3/trunk@9751 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 18:54:20 +00:00
James Lee 114ca4e535 replace / and \ with the current system's directory separator so it doesn't matter what the user types
git-svn-id: file:///home/svn/framework3/trunk@9727 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 20:40:19 +00:00
HD Moore 38d15c016d Rebuilds of meterpreter, including x64
git-svn-id: file:///home/svn/framework3/trunk@9716 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:47:35 +00:00
HD Moore ce1116e622 Add railgun binary
git-svn-id: file:///home/svn/framework3/trunk@9711 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:29:55 +00:00
HD Moore e34bbc281a Merge railgun binary and new builds
git-svn-id: file:///home/svn/framework3/trunk@9710 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:29:37 +00:00
Tod Beardsley 7e247e2f29 db migration to convert services info from varchar(65535) to text, and save info as a yaml'ed form in order to preserve funny characters.
git-svn-id: file:///home/svn/framework3/trunk@9633 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-28 22:42:50 +00:00
James Lee 2638153f46 abstract connect out into it's own function
git-svn-id: file:///home/svn/framework3/trunk@9617 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-25 00:39:48 +00:00
Mike Smith cae5de9bdc Add reports.downloaded_at db column.
git-svn-id: file:///home/svn/framework3/trunk@9608 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-24 16:13:46 +00:00
James Lee c9c3e806a5 use $GLOBALS instead of assuming vars declared outside of a function will be global. allows it to work inside a create_function() eval
git-svn-id: file:///home/svn/framework3/trunk@9597 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-23 22:38:01 +00:00
James Lee c3d183c98d split stadpi out into an extension, add a reverse_tcp stager, make the main meterpreter stage-aware so it will work as a standalone or eval'd by a stager that sets $msgsock and $msgsock_type; see #2128
git-svn-id: file:///home/svn/framework3/trunk@9594 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-23 20:00:27 +00:00
Stephen Fewer 33086db682 Commit a simple x64 service exe template + source based directly off the x86 version (couldn't find the original source anywhere but this also builds to an x86 service.exe template if needed).
git-svn-id: file:///home/svn/framework3/trunk@9564 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-20 18:15:41 +00:00
James Lee 998509529c don't consider compression when looking for a tlv
git-svn-id: file:///home/svn/framework3/trunk@9527 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-15 17:55:37 +00:00
James Lee dacd38c49c consolidate debugging functions in the file
git-svn-id: file:///home/svn/framework3/trunk@9517 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-15 00:33:24 +00:00
James Lee 7498c30b30 replace $setsockopt with a function, remove unused hexdump function
git-svn-id: file:///home/svn/framework3/trunk@9516 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-14 23:20:57 +00:00
James Lee e2740c9e2b watch stderr as well as stdout
git-svn-id: file:///home/svn/framework3/trunk@9513 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-14 05:01:37 +00:00
James Lee a39a0df5dc shell interaction works in linux, still broken in windows. kill and ps work in windows now
git-svn-id: file:///home/svn/framework3/trunk@9512 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-13 16:44:22 +00:00
James Lee 975e2c326e ps now works in windows by shelling out to tasklist.exe
git-svn-id: file:///home/svn/framework3/trunk@9497 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-11 22:07:23 +00:00
Joshua Drake 74b30535c4 oops, forgot swf
git-svn-id: file:///home/svn/framework3/trunk@9474 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-10 20:14:45 +00:00
James Lee 4f2c63dae7 add templates for creating linux armle ELFs, thanks Civ
git-svn-id: file:///home/svn/framework3/trunk@9455 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-09 07:20:21 +00:00
James Lee d47ded220f overhaul socket handling to use fsockopen if socket_create isn't available. portfwd now works on default Windows and Ubuntu installs
git-svn-id: file:///home/svn/framework3/trunk@9450 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-08 07:59:36 +00:00
James Lee f13417be08 stdapi is still in the base payload, but this file needs to exist
git-svn-id: file:///home/svn/framework3/trunk@9446 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-07 17:00:47 +00:00
et 334f4915f1 Add parsers
git-svn-id: file:///home/svn/framework3/trunk@9441 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-06 03:48:25 +00:00
Mike Smith 0de01754ff Change event.info db column type from varchar(65535) to text
git-svn-id: file:///home/svn/framework3/trunk@9434 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-05 00:33:31 +00:00
James Lee ff0af3fb5a turn off debug logging
git-svn-id: file:///home/svn/framework3/trunk@9428 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 15:59:45 +00:00
James Lee 07ec574c3c fail if the socket couldn't connect
git-svn-id: file:///home/svn/framework3/trunk@9427 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 15:28:11 +00:00
HD Moore b3b2ac9ef1 Adds hsagent
git-svn-id: file:///home/svn/framework3/trunk@9421 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 14:16:40 +00:00
HD Moore 17793d8ede Add new SID: frealek: an addition to metasploit/data/wordlists/sid.txt : "CLRExtProc", source : default listener.ora from Oracle XE 10g 10.2.0.1.0
git-svn-id: file:///home/svn/framework3/trunk@9420 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 14:11:39 +00:00
James Lee b23696a916 Woot, portfwd works.
git-svn-id: file:///home/svn/framework3/trunk@9418 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 02:43:17 +00:00
James Lee c068e8e6dc standardize whitespace
git-svn-id: file:///home/svn/framework3/trunk@9413 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-03 23:18:21 +00:00
James Lee 5c87771a89 basic client sockets, connect and write work
git-svn-id: file:///home/svn/framework3/trunk@9404 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-03 04:45:48 +00:00
James Lee e4e2bc61a4 break out of the main loop when we get eof (or any other area) on the main socket. fixes infinite loop in the server when client exits
git-svn-id: file:///home/svn/framework3/trunk@9402 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-03 00:24:55 +00:00
James Lee 975b207710 switch debug logging to the webserver error_log for easier perusement; add fs_stat which fixes downloads; only return success from delete_file if it actually deleted the file
git-svn-id: file:///home/svn/framework3/trunk@9399 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-02 22:43:03 +00:00
James Lee 4f0ee6d44c add support for deleting files
git-svn-id: file:///home/svn/framework3/trunk@9398 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-02 18:36:14 +00:00
James Lee cf4597df3f use posix_getuid if it exists
git-svn-id: file:///home/svn/framework3/trunk@9397 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-02 18:08:09 +00:00
James Lee fe43e91bad initial commit of php meterpreter, see #391. upload, download, cd, pwd, ls, cat, sysinfo, getpid, and ps all work fine.
* execute works with channel read/write but no interact yet
* getuid is weird, since php's get_current_user() and getmyuid() return the owner of the file instead of the running uid (wtf?)



git-svn-id: file:///home/svn/framework3/trunk@9393 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-02 08:28:39 +00:00
Joshua Drake 6d1e7bdaa5 big commit - lots of cmdstager changes
created 4 cmd stagers (instead of just one): CmdStagerVBS, CmdStagerDebugAsm, CmdStagerDebugWrite, CmdStagerTFTP
created a TFTPServer mixin
created Msf::Exploit::EXE mixin to generate executables
updated all uses of CmdStager to use CmdStagerVBS for the time being
add exploit for cve-2001-0333 using CmdStagerTFTP
updated tftp server to wait for transfers to finish (up to 30 seconds) before shutting down
write debug.exe stager stub in 16-bit assembly (used in CmdStagerDebugAsm)


git-svn-id: file:///home/svn/framework3/trunk@9375 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-26 22:39:56 +00:00
James Lee 0c1878f620 fix buggy migration that caused attempts to set the boundary field in workspace before it existed, fixes #1724
git-svn-id: file:///home/svn/framework3/trunk@9269 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-10 06:59:33 +00:00
James Lee abbd6aeef7 change vulns.data to vulns.info, fixes #1660
git-svn-id: file:///home/svn/framework3/trunk@9265 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-09 23:32:43 +00:00
HD Moore 47cea7bbb3 Respin of the service file
git-svn-id: file:///home/svn/framework3/trunk@9226 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-05 18:25:26 +00:00
Joshua Drake 0e72894e58 more cleanups
git-svn-id: file:///home/svn/framework3/trunk@9212 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-03 17:13:09 +00:00
HD Moore cbd675e369 Add user.prefs
git-svn-id: file:///home/svn/framework3/trunk@9191 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-01 22:02:00 +00:00
HD Moore 501820d9cb Handle deeper objects through recursion
git-svn-id: file:///home/svn/framework3/trunk@9182 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-30 21:43:28 +00:00
HD Moore 661293c906 Patch the xml serializer to force binary encoding with newer versions of Ruby - fixes some annoying serialization issues
git-svn-id: file:///home/svn/framework3/trunk@9181 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-30 21:35:03 +00:00
Mike Smith 4c1aa287a5 Add workspace.description and host.comments database columns.
git-svn-id: file:///home/svn/framework3/trunk@9173 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-29 22:22:05 +00:00
James Lee 16cd48e4dc turn constants into class vars, fixes #1767
git-svn-id: file:///home/svn/framework3/trunk@9172 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-29 21:49:18 +00:00
Joshua Drake 879a92ffbf change WriteLine to Write
git-svn-id: file:///home/svn/framework3/trunk@9089 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-16 00:24:56 +00:00
Joshua Drake 5aea21fcb8 speel more godoer
git-svn-id: file:///home/svn/framework3/trunk@9080 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-15 02:09:08 +00:00
Joshua Drake e5d0e54de8 reduce payload space to 2048
git-svn-id: file:///home/svn/framework3/trunk@9078 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 22:16:31 +00:00
Joshua Drake f3bc38dc81 use nul padding
git-svn-id: file:///home/svn/framework3/trunk@9077 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 22:15:02 +00:00
Joshua Drake a9885c041d use nul padding
git-svn-id: file:///home/svn/framework3/trunk@9076 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 22:14:21 +00:00
Joshua Drake 7c9d347c23 use nul padding
git-svn-id: file:///home/svn/framework3/trunk@9075 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 22:14:08 +00:00
Joshua Drake 730b27eed1 fixup some of the payload exe generation/templating stuff, add pe/dll template+src
git-svn-id: file:///home/svn/framework3/trunk@9073 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 21:44:23 +00:00
Joshua Drake b251c0c4b7 re-organize template source
git-svn-id: file:///home/svn/framework3/trunk@9072 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 20:12:00 +00:00
Mario Ceballos c4fbda758f add db2admin/db2admin to the default wordlist.
git-svn-id: file:///home/svn/framework3/trunk@9043 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-08 23:16:28 +00:00
et 0e78719eaf Simple parsing modules
git-svn-id: file:///home/svn/framework3/trunk@9042 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-08 03:40:08 +00:00
et 62ba505f10 Extra parsing modules
git-svn-id: file:///home/svn/framework3/trunk@9030 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-07 03:32:50 +00:00
et b2ac91dd03 Dumb error on path handling
git-svn-id: file:///home/svn/framework3/trunk@9014 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-05 03:09:48 +00:00
et 097a9614c9 SWF decompilation using flare
git-svn-id: file:///home/svn/framework3/trunk@9008 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-04 05:22:26 +00:00
et 39c371acf9 Parsing fixes
git-svn-id: file:///home/svn/framework3/trunk@8991 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 05:52:22 +00:00
HD Moore c6c956ab46 Small patch to enable a new stager
git-svn-id: file:///home/svn/framework3/trunk@8984 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 05:21:15 +00:00
Mike Smith 86ac69b394 Add columns to workspaces & hosts tables.
git-svn-id: file:///home/svn/framework3/trunk@8956 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-29 22:26:35 +00:00
James Lee 0391cd5f28 typo fix
git-svn-id: file:///home/svn/framework3/trunk@8951 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-29 06:04:52 +00:00
HD Moore d49ed8b366 Expand serialized data fields
git-svn-id: file:///home/svn/framework3/trunk@8946 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-28 16:49:53 +00:00
et 70b15c923c more detail in form parsing
git-svn-id: file:///home/svn/framework3/trunk@8930 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-26 03:15:00 +00:00
et 4265707030 start to parse forms
git-svn-id: file:///home/svn/framework3/trunk@8929 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-26 02:39:19 +00:00
HD Moore 091abc9c6b Some extra defaults
git-svn-id: file:///home/svn/framework3/trunk@8922 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-25 21:58:24 +00:00
HD Moore 3a88909c06 Rename for consistency
git-svn-id: file:///home/svn/framework3/trunk@8903 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-24 20:33:21 +00:00
HD Moore aa1c65f4e6 Add a quick and dirty HTTP scanner
git-svn-id: file:///home/svn/framework3/trunk@8901 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-24 20:28:09 +00:00
Stephen Fewer 75661291fa and the bins, tiny modification to the ruby side and update the README.
git-svn-id: file:///home/svn/framework3/trunk@8891 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-24 00:03:32 +00:00
HD Moore e3fd6e18d3 Add a generic purpose field
git-svn-id: file:///home/svn/framework3/trunk@8868 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-22 00:08:17 +00:00
et 5949b91612 Using hpricot
git-svn-id: file:///home/svn/framework3/trunk@8862 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-21 00:13:12 +00:00
HD Moore 8e058e40cb Rename user to username
git-svn-id: file:///home/svn/framework3/trunk@8838 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-17 14:03:25 +00:00
Carlos Perez f49d84992c Applied Patch provided by Rob Fuller Mubix
git-svn-id: file:///home/svn/framework3/trunk@8820 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-15 00:37:45 +00:00
HD Moore 5e26eb9498 Adds name and info to the loot table:
git-svn-id: file:///home/svn/framework3/trunk@8816 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-14 15:38:52 +00:00
Joshua Drake 0f0d6b9dff add OWASP BWA root user/pass to default lists
git-svn-id: file:///home/svn/framework3/trunk@8810 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-13 08:28:48 +00:00
HD Moore 9288f34fbf Add a results column
git-svn-id: file:///home/svn/framework3/trunk@8804 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-12 15:58:02 +00:00
HD Moore 5957dd5393 Add tasks
git-svn-id: file:///home/svn/framework3/trunk@8791 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-11 18:42:21 +00:00
Stephen Fewer edf030df53 ...and finally the bins!
git-svn-id: file:///home/svn/framework3/trunk@8789 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-11 17:12:31 +00:00
HD Moore 3d601c0be9 Add a new table
git-svn-id: file:///home/svn/framework3/trunk@8778 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-11 03:02:13 +00:00
HD Moore bd3d6b55f6 Add alert fields
git-svn-id: file:///home/svn/framework3/trunk@8766 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-10 17:31:47 +00:00
Stephen Fewer 31b7b637a4 The new VNC DLL bins.
git-svn-id: file:///home/svn/framework3/trunk@8747 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-08 14:53:37 +00:00
Stephen Fewer 195d1ab4b8 Commit snojobs jpeg patch for espia with an x64 build and some minor changes on the ruby side (The 'screenshot' command is now 'screengrab' to avoid a future conflict with changes happening in stdapi).
git-svn-id: file:///home/svn/framework3/trunk@8726 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-05 15:50:24 +00:00
Joshua Drake d370ab62c6 don't wait for shell.run to finish
git-svn-id: file:///home/svn/framework3/trunk@8718 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-04 22:33:16 +00:00
Joshua Drake cc9113397c add exploit for IE Windows Help vulnerability
git-svn-id: file:///home/svn/framework3/trunk@8682 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-01 23:14:20 +00:00
HD Moore 1fff5f447f Add loot content-type
git-svn-id: file:///home/svn/framework3/trunk@8667 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-26 19:33:49 +00:00
HD Moore 20c96a191d Fix loots, add users
git-svn-id: file:///home/svn/framework3/trunk@8593 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-22 22:57:02 +00:00
HD Moore 091e01978e Mad loot
git-svn-id: file:///home/svn/framework3/trunk@8587 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-22 22:00:46 +00:00
Mike Smith e59082f6b5 Added "created_at" and "updated_at" timestamps all primary tables (fixes #838)
git-svn-id: file:///home/svn/framework3/trunk@8555 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-18 21:57:01 +00:00
Joshua Drake 4800d6841c commit cmd stager stuff from bannedit
git-svn-id: file:///home/svn/framework3/trunk@8518 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-16 16:38:19 +00:00
Stephen Fewer 4ed9e71b76 Commit the meterpreter C side (and bins) for transparent zlib (zlib.c copied from the posix meterpreter source) compression of TLV's and channels. To use transparent compression with channels, create them with CHANNEL_FLAG_COMPRESS. To use transparent compression with any TLV value, bitwise or the TLV type with TLV_META_TYPE_COMPRESSED (Don't create the TLV type with TLV_META_TYPE_COMPRESSED as the compressed flag is removed on the remote end after compression). For consistency with the ruby side we could at a later stage add a boolean compress parameter to all the packet_add_tlv_* functions so you don't have to manually specify TLV_META_TYPE_COMPRESSED flag.
git-svn-id: file:///home/svn/framework3/trunk@8515 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-16 14:56:24 +00:00
HD Moore 85c59038ed Add rsnake's RFI index
git-svn-id: file:///home/svn/framework3/trunk@8504 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-15 15:37:04 +00:00
James Lee 2f4ab39712 new, much smaller, elf template
git-svn-id: file:///home/svn/framework3/trunk@8448 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-11 02:31:36 +00:00
Joshua Drake f82c53db2a move 70k binary to data/exploits instead of hex encoded in the exploit
git-svn-id: file:///home/svn/framework3/trunk@8446 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-10 23:17:19 +00:00
Stephen Fewer 23901c83ea ...and the bins.
git-svn-id: file:///home/svn/framework3/trunk@8433 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-09 16:48:13 +00:00
HD Moore eaa930b9ce Sample wordlists
git-svn-id: file:///home/svn/framework3/trunk@8419 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-08 23:00:02 +00:00
Tod Beardsley d374c16662 Fixed up reporting for DB2 and tested; also added other default usernames for db2.
git-svn-id: file:///home/svn/framework3/trunk@8411 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-08 18:54:50 +00:00
Tod Beardsley 0b6c44b2cb Adding reporting to postgres_login. Logging version info more verbosely for authenticated login, since it's way useful.
git-svn-id: file:///home/svn/framework3/trunk@8408 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-08 17:35:58 +00:00
Stephen Fewer b12ac46d9e ...and the stdapi bins.
git-svn-id: file:///home/svn/framework3/trunk@8385 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-06 18:00:09 +00:00
et accf417bb7 Fix crawl module example
git-svn-id: file:///home/svn/framework3/trunk@8378 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-06 05:16:29 +00:00
Joshua Drake 4f9490f63f add default username/passwords for IBM Cognos Express Tomcat Manager
git-svn-id: file:///home/svn/framework3/trunk@8368 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-04 20:34:55 +00:00
Tod Beardsley 6e8e6ef16a Fixes #769 by implementing a brute force module for Postgres. A couple notes: If you guess wrong at the database name, you still can try to login with a username and password -- you'll get a successful auth, but then get disconnected. So, that's pretty neat.
Also, since Postgres-PR uses the stock TCPSocket object, connection timeouts and other errors take forever. This is avoided in the brute forcer by pre-validating the connection with Rex::Socket, but this is a hack -- it would be better to convert Postgres-PR to a Rex::Socket flavor, so you also get nicer error messages and what all. I did fork it off the main distribute it already anyway, so may as well will open a feature bug on this, but it's pretty low priority.




git-svn-id: file:///home/svn/framework3/trunk@8366 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-03 21:45:13 +00:00
natron 3ecabe1be9 Adds static signed jar and user messages letting them know.
git-svn-id: file:///home/svn/framework3/trunk@8328 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-29 19:47:40 +00:00
HD Moore 42b331b47f Fix #790. Initialize the client state to be alive, tweak a few things on the meterpreter side
git-svn-id: file:///home/svn/framework3/trunk@8327 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-29 18:52:44 +00:00
HD Moore 7684a6a260 Expand all data/info fields to 4k. Closes #791
git-svn-id: file:///home/svn/framework3/trunk@8325 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-29 17:06:37 +00:00
Stephen Fewer 0099fedeb3 ...and the bins for the ps command fix.
git-svn-id: file:///home/svn/framework3/trunk@8323 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-29 12:01:26 +00:00
Stephen Fewer fc6eca57ec ...and finally the bins.
git-svn-id: file:///home/svn/framework3/trunk@8320 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-29 01:14:23 +00:00
HD Moore 284af1260a Disable debug tracing
git-svn-id: file:///home/svn/framework3/trunk@8312 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 23:10:58 +00:00
HD Moore f3408fd327 Fixes #744. The core issue was the migrate code waiting on SetEvent, but the migrate stub was blocked on a WSASocket due to a pending packet_receive in the main server thread. Simply settin the thread termination signal did not work, as the SSL_read was already in progress. This change forcible terminates the main server thread before waiting on the event in order to bypass this deadlock. The downside is a failed migrate has no way to recover if it makes it this far.
git-svn-id: file:///home/svn/framework3/trunk@8309 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 22:55:41 +00:00
natron 69ad365b46 Added STDERR to pure java payload, cleaned up user's view.
git-svn-id: file:///home/svn/framework3/trunk@8308 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 22:53:36 +00:00
Stephen Fewer 6772efb79c ...and finally the bins.
git-svn-id: file:///home/svn/framework3/trunk@8297 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 13:59:00 +00:00
natron cd5e5880d2 Initial commit of Msf::Exploit::Java mixin and multi/browser/java_signed_applet exploit.
git-svn-id: file:///home/svn/framework3/trunk@8267 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 19:46:39 +00:00
HD Moore cf26fcb9ad Fixes #784. Adds .NET server support
git-svn-id: file:///home/svn/framework3/trunk@8256 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 07:02:07 +00:00
HD Moore 9ea99c37a8 Updated DLL (Win7 - Trap)
git-svn-id: file:///home/svn/framework3/trunk@8244 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 20:25:30 +00:00
HD Moore 4b637c4912 Updated with new target system, signature for 2000 SP4, fixed SP4 usage, but the priv esclation is non-functional, use twunk16/debug depending on what is available.
git-svn-id: file:///home/svn/framework3/trunk@8240 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 19:13:28 +00:00
et 96d6e7bd9b In progress. crawling
git-svn-id: file:///home/svn/framework3/trunk@8236 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 04:21:07 +00:00
HD Moore a898901ad3 Switch to twunk_16 for Windows 7 compatibility
git-svn-id: file:///home/svn/framework3/trunk@8230 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 18:07:48 +00:00
HD Moore 9a27a8dc01 Check the new binaries back in
git-svn-id: file:///home/svn/framework3/trunk@8227 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 16:56:41 +00:00
Tod Beardsley 359e1ad53a See #726. Adds a DB2 scanner and brute forcer.
git-svn-id: file:///home/svn/framework3/trunk@8223 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 15:58:24 +00:00
HD Moore b0f0bc1c32 Add a dot
git-svn-id: file:///home/svn/framework3/trunk@8218 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 00:28:55 +00:00
HD Moore 0c16bd9736 Switch to Zarvox, add ruby scripts to generate new sound samples
git-svn-id: file:///home/svn/framework3/trunk@8217 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-24 18:56:48 +00:00
HD Moore 0535e59b6e Nuke a duplicate file
git-svn-id: file:///home/svn/framework3/trunk@8216 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-24 18:33:49 +00:00
HD Moore acceb274da Integrate a sound plugin, based on Robin Wood's patch
git-svn-id: file:///home/svn/framework3/trunk@8215 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-24 18:33:32 +00:00
Joshua Drake 40be42676b new tomcat_mgr_login aux module
- uses auth_brute mixin
- has old and new default users/passes/pairs
- replaces older modules/auxiliary/admin/http/tomcat_manager.rb


git-svn-id: file:///home/svn/framework3/trunk@8201 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-22 20:31:51 +00:00
Stephen Fewer de691597b6 ...and finally the bins :)
git-svn-id: file:///home/svn/framework3/trunk@8200 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-22 19:48:21 +00:00
HD Moore 8058fb22e8 Purge these copies until the secondary thread issue is fixed
git-svn-id: file:///home/svn/framework3/trunk@8180 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-20 13:36:48 +00:00
HD Moore 2574416a29 Add the associated binaries
git-svn-id: file:///home/svn/framework3/trunk@8169 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 22:31:06 +00:00
Stephen Fewer c92d7b68bf ...and the bins!
git-svn-id: file:///home/svn/framework3/trunk@8159 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 11:10:55 +00:00
HD Moore 396e894cdb Finger user enumerator
git-svn-id: file:///home/svn/framework3/trunk@8109 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 23:37:14 +00:00
James Lee fd89f4e6cd add an events table
git-svn-id: file:///home/svn/framework3/trunk@8104 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 06:40:34 +00:00
HD Moore 42b3a5774d Adds the process username to the ps output (when possible).
git-svn-id: file:///home/svn/framework3/trunk@8056 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-02 03:41:21 +00:00
HD Moore 4d7aec7c2d Fixes #745. This commit changes how token manipulation works, adds the steal_token, drop_token, and getprivs commands. Tested on NT 4.0, 2000 SP4, XP SP3, 2003 SP2, Vista, and Windows 7
git-svn-id: file:///home/svn/framework3/trunk@8055 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-02 00:35:10 +00:00
HD Moore 9bf88af0cc Add 64-bit
git-svn-id: file:///home/svn/framework3/trunk@8047 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-31 15:56:09 +00:00
HD Moore 98f83bbab1 Adds reg queryclass
git-svn-id: file:///home/svn/framework3/trunk@8046 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-31 15:52:30 +00:00
Joshua Drake 2283e029db crossing fingers, big cr removal batch
git-svn-id: file:///home/svn/framework3/trunk@8038 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 22:24:22 +00:00
James Lee 3109ae1b53 add the migration for notes. fixes 742
git-svn-id: file:///home/svn/framework3/trunk@8033 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 16:23:40 +00:00
Mike Smith 29920bc94b Unpack rack-1.0.1 into vendor/gems directory
This allows msfweb to be run without requiring rack to be pre-installed as a
gem.


git-svn-id: file:///home/svn/framework3/trunk@8031 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 05:39:21 +00:00
Mike Smith 94ea648902 Patch rails so that migrations can be run even when Base.logger == nil
git-svn-id: file:///home/svn/framework3/trunk@8017 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 01:04:48 +00:00
Mike Smith 912038dda3 Moving rails-2.3.5/ to rails/
git-svn-id: file:///home/svn/framework3/trunk@8016 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 00:19:06 +00:00
Mike Smith a554ab15ef Upgrade from rails 2.3.2 to 2.3.5
git-svn-id: file:///home/svn/framework3/trunk@8015 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 00:17:51 +00:00
James Lee c44497d04b add tebo's rpc wordlist
git-svn-id: file:///home/svn/framework3/trunk@7964 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-24 00:19:00 +00:00
HD Moore 0f798f4674 Updated template, a little bit smaller
git-svn-id: file:///home/svn/framework3/trunk@7946 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-22 14:12:25 +00:00
HD Moore 68aafc8e13 Fixes #658 by adding a 250ms sleep to the dispatch of the close call.
git-svn-id: file:///home/svn/framework3/trunk@7934 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 19:53:10 +00:00
Joshua Drake b37c34579b add exploit module for cve-2009-3869
NOTE: no policy change is required for this exploit to succeed.



git-svn-id: file:///home/svn/framework3/trunk@7899 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 04:52:40 +00:00
Mike Smith f9ffc8b8bc Add db_workspace command & other db refactoring.
* Added "workspaces" table and associated ActiveRecord class.
 * Moved ActiveRecord models from db_objects.rb into separate files.
 * Do the DB migration check every time you connect (was previously done
   during db_create).
 * Use :dependent => :destroy associations so that we don't have to
   manually delete the dependent objects.

git-svn-id: file:///home/svn/framework3/trunk@7861 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 22:52:34 +00:00
Joshua Drake 255724d640 compile java applet with 1.3, Fixes #685
git-svn-id: file:///home/svn/framework3/trunk@7850 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 17:26:19 +00:00
HD Moore 8c7c62bcbc Major update to the directory list based on the thousands of idiots scanning metasploit.com. Thanks! :)
git-svn-id: file:///home/svn/framework3/trunk@7845 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 04:35:31 +00:00
HD Moore 1029ecd7f8 Cleanup wmap, add the missing database tables back, rename to have a wmap_prefix
git-svn-id: file:///home/svn/framework3/trunk@7837 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 05:24:48 +00:00
Joshua Drake 34408c5e3e add exploit module for CVE-2009-3867 (JRE getSoundbank)
git-svn-id: file:///home/svn/framework3/trunk@7827 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-11 21:18:31 +00:00
HD Moore cf6732d570 Fresh bins (including sniffer). See #672
git-svn-id: file:///home/svn/framework3/trunk@7807 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 18:36:01 +00:00
Stephen Fewer be588716c5 Bug fix for meterpreter on NT4 (Tested on NT4.0 SP6). Add a function thread_open() in thread.c to wrap the use kernel32!OpenThread and ntdll!NtOpenThread for backwards compatibility.
git-svn-id: file:///home/svn/framework3/trunk@7806 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 18:12:51 +00:00
HD Moore 6da0fda5ed Updated meterpreter binaries with a slight change to the thread schedule (solves a looping problem when the socket is dead).
git-svn-id: file:///home/svn/framework3/trunk@7793 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 05:42:47 +00:00
Mike Smith 529b31e502 We don't want an id column in vulns_refs
git-svn-id: file:///home/svn/framework3/trunk@7777 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 18:58:00 +00:00
HD Moore ff19b649f3 See #662. This should fix most of the meterpreter-side issues with sockets, there is still a second piece of this which is unflushed data on the local forwards from the ruby code.
git-svn-id: file:///home/svn/framework3/trunk@7761 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 22:08:06 +00:00
HD Moore 353fa1dba5 Updated binaries (32/64) with the first round of socket fixes
git-svn-id: file:///home/svn/framework3/trunk@7751 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 15:01:44 +00:00
Mike Smith 61b556a0d1 Initialize the database schema using ActiveRecord migrations
git-svn-id: file:///home/svn/framework3/trunk@7739 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 17:03:27 +00:00
HD Moore bc1aee3b4e Add a data file with the names of phishing logs (based on autowhaler)
git-svn-id: file:///home/svn/framework3/trunk@7735 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 15:47:49 +00:00
HD Moore e99e2a8d95 Rebuild with Stephen's mutex changes (rebuild of sniffer, but checking in the others as well to match).
git-svn-id: file:///home/svn/framework3/trunk@7734 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 14:44:35 +00:00
Stephen Fewer 56a64a0e2d Commit the latest windows x86/x64 build of the multi-threaded meterpreter (An x64 build of espia has been added too).
git-svn-id: file:///home/svn/framework3/trunk@7733 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 13:07:26 +00:00
HD Moore dfa0d155fc See #607. Switch sniffer code to use mutexes
git-svn-id: file:///home/svn/framework3/trunk@7728 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 05:19:46 +00:00
HD Moore 8a186921e7 Rebuilt Stephen's changes locally, including the sniffer extension
git-svn-id: file:///home/svn/framework3/trunk@7700 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-04 17:54:01 +00:00
Stephen Fewer 10d9105708 Initial commit of the multi-threaded meterpreter binaries. Only x86 today (minus the sniffer extension), x64 will follow next Monday.
git-svn-id: file:///home/svn/framework3/trunk@7699 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-04 17:39:32 +00:00
HD Moore 15dca2285f Scrub the build path from the executable
git-svn-id: file:///home/svn/framework3/trunk@7636 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-28 22:55:54 +00:00
et 2db0b95f30 Remove table
git-svn-id: file:///home/svn/framework3/trunk@7630 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-26 20:53:46 +00:00
HD Moore c44bcf3299 Add the stub site/dns lists for airpwn/dnspwn
git-svn-id: file:///home/svn/framework3/trunk@7491 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-13 19:17:14 +00:00
HD Moore d892264ad7 Adds a DoS proof of concept for MS09-065 (EOT)
git-svn-id: file:///home/svn/framework3/trunk@7470 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 23:48:53 +00:00
Stephen Fewer 8c48a9a3f5 Commit the PassiveX DLL updated to build with Visual Studio C++ 2008. Removed some compiler warnings. Use VirtualProtect to make second stage RWX. Use WSASocketA() over socket() for second stage compatibility. Seems to now work with the shell stage (Tested on XPSP2/IE7) but still not working with meterpreter.
git-svn-id: file:///home/svn/framework3/trunk@7461 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 00:39:38 +00:00
HD Moore 5d997f1b26 Reset the manifest to normal privs, this was causing issues on Vista
git-svn-id: file:///home/svn/framework3/trunk@7406 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-08 03:40:47 +00:00
HD Moore 683e7f4650 Move hosts content into namelist, missed piece of #470
git-svn-id: file:///home/svn/framework3/trunk@7404 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-08 00:17:59 +00:00
HD Moore 9d7d1a0c1d Fixes #470. Add the hostlist from fierce
git-svn-id: file:///home/svn/framework3/trunk@7402 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-08 00:10:13 +00:00
HD Moore 90808980c4 Fixes #474. Adds rack back into the vendor lib tree
git-svn-id: file:///home/svn/framework3/trunk@7373 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-06 14:44:24 +00:00
HD Moore bec5fd192f Updated template, this one plays with vista better
git-svn-id: file:///home/svn/framework3/trunk@7350 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-04 16:02:45 +00:00
HD Moore 58ac7efcfa Fixes #457. Oddly enough, it was the nop sled garbling registers
git-svn-id: file:///home/svn/framework3/trunk@7342 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-03 23:50:32 +00:00
HD Moore 86bcabc411 Swizzle again.
git-svn-id: file:///home/svn/framework3/trunk@7336 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-03 19:55:42 +00:00
HD Moore 244f71601c See #432. Remove unused components of the rails directory
git-svn-id: file:///home/svn/framework3/trunk@7332 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-03 16:54:33 +00:00
HD Moore a8113889ed Swizzle.
git-svn-id: file:///home/svn/framework3/trunk@7330 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-03 05:17:38 +00:00
HD Moore 80a262f991 Fixes #423. Using /s on a regex forces an encoding that cant match random binary gibberish
git-svn-id: file:///home/svn/framework3/trunk@7322 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 17:59:45 +00:00
Stephen Fewer 54f952129a A fresh build of the x64 meterpreter and extensions to sync up with the recent changes with SSL in #7311 and the addition of the rm/del command from #7291
git-svn-id: file:///home/svn/framework3/trunk@7316 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 16:49:01 +00:00
HD Moore 21e82d8b69 This patch implements a much more flexible executable creation scheme at the cost of exe size. This also adds the "-x" option to msfencode, allowing the user to specify their own executable template for generation.
git-svn-id: file:///home/svn/framework3/trunk@7315 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 04:11:43 +00:00
HD Moore 2c15be2100 Make a copy of the win32 exe template
git-svn-id: file:///home/svn/framework3/trunk@7314 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 03:19:20 +00:00
HD Moore e5e89906d0 Switch the meterpreter to SSLv3 and try to generate a slightly more realistic CN for the certificate. The goal is to work through a wider range of inline proxies.
git-svn-id: file:///home/svn/framework3/trunk@7311 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-31 20:44:23 +00:00
HD Moore 5234fe8ff8 Fixes 416. Adds the rm/del commands to meterpreter, fixes build problems triggered by the POSIX code merge
git-svn-id: file:///home/svn/framework3/trunk@7291 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-27 02:31:07 +00:00
HD Moore e7638ef887 Fixes #397. Webrick requires :BindAddress but msfweb only passed in :Host, likely an api change was missed during a rails upgrade.
git-svn-id: file:///home/svn/framework3/trunk@7277 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 17:33:05 +00:00
HD Moore e94360f7cf The script now downloads this as needed
git-svn-id: file:///home/svn/framework3/trunk@7256 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 20:47:16 +00:00
HD Moore 9904861e94 Prevent rails from overloading require, another big speed boost from Yoann, and it looks like we can avoid it
git-svn-id: file:///home/svn/framework3/trunk@7247 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 17:07:48 +00:00
HD Moore a6c738a89f Add Milo's prefetch meterpreter script, see http://milo2012.wordpress.com/2009/10/22/meterpreter-script-for-prefetch-tool/
git-svn-id: file:///home/svn/framework3/trunk@7229 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 05:25:20 +00:00
cg d565fef520 support for McKesson Horizon Clinical Infrastructure Oracle passwords for oracle login_brute http://seclists.org/fulldisclosure/2009/Oct/261
git-svn-id: file:///home/svn/framework3/trunk@7223 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-21 23:32:44 +00:00
HD Moore 8325b46694 Add Alexander Sotirov's metsvc binaries to the metepreter data directory
git-svn-id: file:///home/svn/framework3/trunk@7214 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 18:43:27 +00:00
HD Moore ed021ad08d Fixes #260. Remove the 'raw' option for payloads ni msfweb, this just causes encoding issues to pop up and isn't useful.
git-svn-id: file:///home/svn/framework3/trunk@7174 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-17 06:09:59 +00:00
HD Moore 5f57666f44 Woops! Commit the h2b script needed for mssql_payload
git-svn-id: file:///home/svn/framework3/trunk@7166 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 13:52:14 +00:00
et 18b340a8c3 Uppercase .cvs
git-svn-id: file:///home/svn/framework3/trunk@7138 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 16:11:51 +00:00
et 1655c43e28 Added .svn,.cvs to wmap dirs. Thanks mubix
git-svn-id: file:///home/svn/framework3/trunk@7137 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 14:57:44 +00:00
Mario Ceballos acf828461c updated oraenum.rb with an additional wordlist.
git-svn-id: file:///home/svn/framework3/trunk@7093 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-29 21:58:01 +00:00
HD Moore bf5068f6b1 Fixes #288 and #320. This should fix the BSoD issue with the sniffer module (other than the mac filter change, this matches the vendor's example) and confirmed that the keyscan_dump fix works
git-svn-id: file:///home/svn/framework3/trunk@7066 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-26 16:26:05 +00:00
et 3993aaf79c espia dll
git-svn-id: file:///home/svn/framework3/trunk@7064 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-26 04:25:37 +00:00
Stephen Fewer 1937839e79 Patch meterpreter's sysinfo command to resolve the system language and architecture.
git-svn-id: file:///home/svn/framework3/trunk@7028 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 13:09:48 +00:00
Stephen Fewer 36d60d5d12 Commit the x64 build of the meterpreter incognito extension.
git-svn-id: file:///home/svn/framework3/trunk@7009 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-07 09:25:25 +00:00
Stephen Fewer ff9efacffa Commit the x64 build of the meterpreter priv extension.
git-svn-id: file:///home/svn/framework3/trunk@7008 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-07 09:17:29 +00:00
Stephen Fewer d584b4d314 Fixed migrate for x64 meterpreter (Tested on Win 7 and 2003).
git-svn-id: file:///home/svn/framework3/trunk@6999 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-04 01:40:48 +00:00
Stephen Fewer 8bb0efb97e the first binaries for the windows x64 meterpreter. only metsrv and stdapi for now. source code to follow later.
git-svn-id: file:///home/svn/framework3/trunk@6998 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-03 17:50:41 +00:00
Stephen Fewer 1cb3c42589 First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
git-svn-id: file:///home/svn/framework3/trunk@6989 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-31 10:28:26 +00:00
HD Moore cf10a62dcc Merge in the beginnings of x64 support from Stephen Fewer
git-svn-id: file:///home/svn/framework3/trunk@6972 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-23 23:47:33 +00:00
HD Moore 2247b483d9 Updated pSnuffle sniffer code from _MAX_
git-svn-id: file:///home/svn/framework3/trunk@6965 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-19 14:07:33 +00:00
HD Moore da32f1bdea Updated meterpreter code/binaries to scrub memory after use, works around Peter's memoryze signatures from BH/DC 2009
git-svn-id: file:///home/svn/framework3/trunk@6942 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-08 14:22:32 +00:00
HD Moore ed02a67367 Updated to match the new hashing alg from Stephen Fewer
git-svn-id: file:///home/svn/framework3/trunk@6924 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-31 17:58:11 +00:00
HD Moore 5e74e80c89 Update psnuffle modules to use payload_data
git-svn-id: file:///home/svn/framework3/trunk@6899 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-25 14:11:55 +00:00
HD Moore 2a7467dd7f Update the meterp binaries with clean builds from svn
git-svn-id: file:///home/svn/framework3/trunk@6888 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-24 04:01:26 +00:00
James Lee 739207bf4a merge browser_autopwn back into trunk. This changes the database schema slightly, so make sure to db_destroy and db_create before using the database features.
git-svn-id: file:///home/svn/framework3/trunk@6873 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 20:14:35 +00:00
HD Moore 238f8d798f Let vulns refer to hosts w/o a service, add a mac and address6 field to the hosts table.
git-svn-id: file:///home/svn/framework3/trunk@6866 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 13:25:33 +00:00
HD Moore b3e36e5692 Reduce the size of the generated executables (works better with sqlmap and other tools that need small exes). Payloads are now capped at 2048 and the amount of random data appended to the exe has been reduced.
git-svn-id: file:///home/svn/framework3/trunk@6849 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-20 13:55:29 +00:00
James Lee 529ded22ae reverting last commit; somebody didn't cross their fingers
git-svn-id: file:///home/svn/framework3/trunk@6847 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 20:48:47 +00:00
James Lee c3dc1ecb55 reintegrate browser_autopwn into trunk; cross your fingers and hope this works
git-svn-id: file:///home/svn/framework3/trunk@6846 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 17:27:36 +00:00
HD Moore 0d931953cf The sniffer module is now compiled against the dnet headers for packet decodes
git-svn-id: file:///home/svn/framework3/trunk@6831 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-18 00:10:10 +00:00
HD Moore be6bb23b5e Psnuffle modules
git-svn-id: file:///home/svn/framework3/trunk@6824 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:39:06 +00:00
Mario Ceballos 3d3ea9788c added auxiliary module login_brute.rb and oracle_default_passwords.csv.
git-svn-id: file:///home/svn/framework3/trunk@6819 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 14:20:22 +00:00
Mario Ceballos c66e25978d remove duplicate sid.
git-svn-id: file:///home/svn/framework3/trunk@6818 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 13:41:56 +00:00
HD Moore f8c2a203fd OSVDB references updates from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@6812 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 16:02:24 +00:00
Mario Ceballos 4f88b5a5c1 added auxiliary module sid_brute.rb and sid.txt wordlist.
git-svn-id: file:///home/svn/framework3/trunk@6807 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 00:03:50 +00:00
HD Moore 148ca687f5 Updated libraries and source code now using OpenSSL
git-svn-id: file:///home/svn/framework3/trunk@6773 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 03:10:39 +00:00
HD Moore e8784d68fb Fixes up the sniffer to handle large packet captures better, fixes a regression in the sysinfo command.
git-svn-id: file:///home/svn/framework3/trunk@6768 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-12 13:17:37 +00:00
HD Moore 6e85581e2f Updates from jabra for the phishing modules
git-svn-id: file:///home/svn/framework3/trunk@6767 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-12 03:57:25 +00:00
HD Moore f76d73a823 Free packet memory when the capture is stopped
git-svn-id: file:///home/svn/framework3/trunk@6765 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-11 18:19:42 +00:00
HD Moore 4989f9bdbe Fixes a bug where if the sniffer SDK could not initialize, it would still be treated as initialized the next time it was checked.
git-svn-id: file:///home/svn/framework3/trunk@6764 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-11 17:52:40 +00:00
HD Moore 645ca020e9 Fixes a memory corruption issue with the SSL file descriptor (was using a stack reference instead of the Remote->fd reference), adds the source code sans the Packet SDK for the sniffer module
git-svn-id: file:///home/svn/framework3/trunk@6763 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-11 17:32:50 +00:00
HD Moore 82cf85680c Adds the sniffer extension for testing
git-svn-id: file:///home/svn/framework3/trunk@6762 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-11 13:39:43 +00:00
HD Moore 608ca7aae8 This patch removes some of the meterpreter compiler warnings and fixes migration over SSL
git-svn-id: file:///home/svn/framework3/trunk@6761 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-09 22:44:33 +00:00
HD Moore 7b516e06fe Transfer the migration payload over SSL, still working on a crash bug after migration completes
git-svn-id: file:///home/svn/framework3/trunk@6756 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-09 03:22:10 +00:00
HD Moore 485d3fcb17 Merge in the meterpreter binaries with the new kernel32 loader code
git-svn-id: file:///home/svn/framework3/trunk@6745 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-05 20:27:33 +00:00
HD Moore 0c4c05fb24 Commit the SSL-updated meterpreter binaries
git-svn-id: file:///home/svn/framework3/trunk@6741 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-05 05:22:06 +00:00
HD Moore 43372de9f0 Fix a bug in the new SSL code that broke large transfers
git-svn-id: file:///home/svn/framework3/trunk@6720 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-27 01:52:36 +00:00
HD Moore a74d3a3f38 Switches meterpreter to SSL by default, using the PolarSSL library. To build this, just place polarssl.lib into an workspace/common/Release/
git-svn-id: file:///home/svn/framework3/trunk@6718 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-26 23:18:53 +00:00
HD Moore 3596ea9676 Cleanup patch
git-svn-id: file:///home/svn/framework3/trunk@6715 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-25 21:07:53 +00:00
HD Moore d981332b89 Better search behavior for console and msfweb
git-svn-id: file:///home/svn/framework3/trunk@6706 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-24 01:31:16 +00:00
HD Moore 2283e0ffe4 Update executable template and API
git-svn-id: file:///home/svn/framework3/trunk@6682 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 17:42:17 +00:00
HD Moore 5f14719035 Handle cygwin support
git-svn-id: file:///home/svn/framework3/trunk@6673 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 00:18:18 +00:00
HD Moore c72263e9c3 Adds antoine's tftp brute forcer
git-svn-id: file:///home/svn/framework3/trunk@6667 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-17 20:52:47 +00:00
HD Moore b8efb1bbf9 Add Stephen Fewer's shiny exploit for the Java deserialization flaw
git-svn-id: file:///home/svn/framework3/trunk@6664 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-16 17:19:44 +00:00
HD Moore d69a1f6ff0 Adding the new msfweb tree, using rails 2.2.3 and newer prototype
git-svn-id: file:///home/svn/framework3/trunk@6651 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-14 15:17:53 +00:00
HD Moore ae1d18c88e Move out the old msfweb tree, replacing it with rails 2.2.3 and newer prototype
git-svn-id: file:///home/svn/framework3/trunk@6650 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-14 15:17:09 +00:00
Patrick Webster adac1d9c85 Added webdav in the dir list.
git-svn-id: file:///home/svn/framework3/trunk@6561 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-18 03:25:25 +00:00
HD Moore 6b5893f1f0 Import the ruby snmp library into the tree. Making a few adjustments to make it msf-friendly
git-svn-id: file:///home/svn/framework3/trunk@6529 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-08 03:35:59 +00:00
et 746a3c533a ext. sample dll. not ready for production enviroments
git-svn-id: file:///home/svn/framework3/trunk@6506 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-29 03:38:42 +00:00
et 0c859dc35e Minor fixes regarding target_host handling
git-svn-id: file:///home/svn/framework3/trunk@6477 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-12 02:00:50 +00:00
HD Moore b360e42171 Updated sysinfo and setdesktop code
git-svn-id: file:///home/svn/framework3/trunk@6462 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-07 15:46:45 +00:00
HD Moore e1a6d31c58 Add a SNMP brute force scanner
git-svn-id: file:///home/svn/framework3/trunk@6421 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:09:04 +00:00
HD Moore 89ecdd9ac8 Mostly working setdesktop code, removed grabdesktop
git-svn-id: file:///home/svn/framework3/trunk@6393 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-25 23:14:14 +00:00
HD Moore 8b27f5faef Updated binaries, adds enumdesktops, setdesktop is still broken
git-svn-id: file:///home/svn/framework3/trunk@6383 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-23 21:05:13 +00:00
HD Moore e6f6824618 Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
git-svn-id: file:///home/svn/framework3/trunk@6371 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-23 05:17:40 +00:00
HD Moore ebcc19c54b Recompiled, adds the grabdesktop, keyscan_start, keyscan_stop, and keyscan_dump commands to UI
git-svn-id: file:///home/svn/framework3/trunk@6367 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-22 23:58:58 +00:00
HD Moore 13706d1bde Tons of new Mac OS X code from Dino Dai Zovi and Charlie Miller, more to follow
git-svn-id: file:///home/svn/framework3/trunk@6353 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-18 23:28:24 +00:00
natron 5069038ecd Fixes meterpreter's migrate function to work on DEP-enabled boxes (ticket 275). Patch by Stephen Fewer (harmonysecurity.com).
git-svn-id: file:///home/svn/framework3/trunk@6347 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-16 21:10:58 +00:00
et 8c145efd35 Email module sample config script
git-svn-id: file:///home/svn/framework3/trunk@6164 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-19 01:18:41 +00:00
HD Moore b80f50b6cb Fixes #268. Updates the executable template and provides a bug fix for msfencode to force the encoded version
git-svn-id: file:///home/svn/framework3/trunk@6043 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-24 08:41:35 +00:00
kris a30adcdca5 Fix Javascript payload generation in msfweb: was passing the invalid
"javascript", so it now chooses "js_le" or "js_be" based on endianness


git-svn-id: file:///home/svn/framework3/trunk@6042 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-24 06:57:32 +00:00
kris 9aa29aa876 add java payload generation option to msfweb
git-svn-id: file:///home/svn/framework3/trunk@6041 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-24 06:29:41 +00:00
HD Moore 5822ab75a7 Adds an exploit module (universal) for the new internet explorer xml bug. This module shows off the .NET memory techniques discovered by Alexander Sotirov and Mark Dowd. This code should bypass DEP, ASLR, and NX :-)
git-svn-id: file:///home/svn/framework3/trunk@6012 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-12 01:45:00 +00:00
et 8547688d7d Added wmap profiles capabilities to use as a method to run specific modules
git-svn-id: file:///home/svn/framework3/trunk@5988 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-01 03:48:23 +00:00
et 3e19245054 Fixed handling of root website directory. Minor presentation fixes in test modules
git-svn-id: file:///home/svn/framework3/trunk@5987 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-30 22:41:09 +00:00
HD Moore cfbb600304 fixes #259. pass in badchars properly
git-svn-id: file:///home/svn/framework3/trunk@5957 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 06:41:42 +00:00
HD Moore 1acebca6c2 Remove test cases from gems
git-svn-id: file:///home/svn/framework3/trunk@5938 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-17 06:14:09 +00:00
HD Moore 25a8621e72 This giant pile of bizzare image foo solves an issue with GLib not being able to parse international path names.
git-svn-id: file:///home/svn/framework3/trunk@5934 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-17 04:34:09 +00:00
HD Moore 14d31c805e Fixes #254. Key off refname instead of name
git-svn-id: file:///home/svn/framework3/trunk@5929 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 21:14:38 +00:00
HD Moore e90c534500 Changes to the directory scanner
git-svn-id: file:///home/svn/framework3/trunk@5907 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:10:03 +00:00
HD Moore 76f0f4202e Updated directory list
git-svn-id: file:///home/svn/framework3/trunk@5906 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 02:36:44 +00:00
et 22f54d8742 Wmap directory file updated
git-svn-id: file:///home/svn/framework3/trunk@5903 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 02:15:38 +00:00
et b4cbe4ff8d Multiple bug fixes. Fixed query modules now resolved to correct function. Corrected in proxy and wmap code handling of RHOSTS as hostnames are not in use. Fixed reporting as target port was not handled properly and modules modified to reflect new wmap_target methods.
git-svn-id: file:///home/svn/framework3/trunk@5869 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 04:38:05 +00:00
HD Moore 6fe6f3d229 In with the new
git-svn-id: file:///home/svn/framework3/trunk@5858 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 01:18:35 +00:00
HD Moore 2b431d10d6 Out with new
git-svn-id: file:///home/svn/framework3/trunk@5857 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 01:17:03 +00:00
HD Moore 95f48966ed Add the msfcli exe
git-svn-id: file:///home/svn/framework3/trunk@5838 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 20:09:16 +00:00
HD Moore 187f79eddf Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
git-svn-id: file:///home/svn/framework3/trunk@5837 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 20:08:24 +00:00
HD Moore b53695f7db The psexec module now uses a service-compatible exe, shellcode is spawned in a subprocess and the service cleans up properly
git-svn-id: file:///home/svn/framework3/trunk@5829 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 23:06:37 +00:00
et 107d3eef05 Added new directory list by Corey Lebleu
git-svn-id: file:///home/svn/framework3/trunk@5821 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-01 02:40:46 +00:00
HD Moore 56a413d803 Reflective DLL injection payloads from Stephen Fewer
git-svn-id: file:///home/svn/framework3/trunk@5806 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 22:17:32 +00:00
et f98c87ff22 added directory scanner
git-svn-id: file:///home/svn/framework3/trunk@5775 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 02:31:52 +00:00
et 7e73ed8c15 first attempt of reporting implementation.
git-svn-id: file:///home/svn/framework3/trunk@5771 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 20:32:14 +00:00
et ff546b3c0a added reports table
git-svn-id: file:///home/svn/framework3/trunk@5763 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-17 13:40:11 +00:00
et c153d1fea0 Wmap database merged, new wmap_generic module, fix website tree display and docs.
git-svn-id: file:///home/svn/framework3/trunk@5740 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-12 03:46:49 +00:00
HD Moore af9a8eba9a Swap back to 8192 until the exploits which use it are updated.
git-svn-id: file:///home/svn/framework3/trunk@5694 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-27 17:13:11 +00:00
HD Moore 14e8e75cb6 Another, smaller, win32 wrapper
git-svn-id: file:///home/svn/framework3/trunk@5693 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-27 05:02:36 +00:00
HD Moore 16d2825b83 Wrap the shellcode in SEH
git-svn-id: file:///home/svn/framework3/trunk@5692 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 23:35:47 +00:00
HD Moore b94d10f53c Switch the exe back to windows mode (vs console)
git-svn-id: file:///home/svn/framework3/trunk@5691 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 23:01:58 +00:00
HD Moore 6d5ac7eead Switches the executable template to something a little nicer and adds exe output to msfencode
git-svn-id: file:///home/svn/framework3/trunk@5689 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 22:34:51 +00:00
HD Moore b001e4684d Import first version of WMAP from ET LoWNOISE
git-svn-id: file:///home/svn/framework3/trunk@5675 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-22 22:32:20 +00:00
HD Moore 3522c69796 Add the missing semi-colon from postgres.sql
git-svn-id: file:///home/svn/framework3/trunk@5661 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-16 04:19:01 +00:00
HD Moore 962e8688f2 Changing the default sites list, adding more entries
git-svn-id: file:///home/svn/framework3/trunk@5619 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-08 06:01:10 +00:00
HD Moore cc8ae206b6 First batch of karmetasploit updates
git-svn-id: file:///home/svn/framework3/trunk@5618 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-08 06:00:30 +00:00
HD Moore cd33fcca2c New loading screen
git-svn-id: file:///home/svn/framework3/trunk@5617 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-08 05:16:15 +00:00
James Lee 2d344e64df browser_autopwn now works with mozilla_compareto, mozilla_navigatorjava, and firefox_queryinterface; increased reliability of OS and browser detection
git-svn-id: file:///home/svn/framework3/trunk@5563 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 07:28:05 +00:00
HD Moore 4b626e5359 Updated forms
git-svn-id: file:///home/svn/framework3/trunk@5552 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-14 05:35:57 +00:00
Matt Miller d94bfaf373 better support for nx with dllinject payloads/meterp
git-svn-id: file:///home/svn/framework3/trunk@5510 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-26 06:34:12 +00:00
Matt Miller e63a121341 merge incognito updates from Luke Jennings
git-svn-id: file:///home/svn/framework3/trunk@5499 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-28 16:57:49 +00:00
HD Moore 77f7be3e75 New, cleaner form snippets
git-svn-id: file:///home/svn/framework3/trunk@5493 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-23 04:17:30 +00:00
HD Moore 231529d684 Nuke these for now, need to rebuild
git-svn-id: file:///home/svn/framework3/trunk@5492 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-23 03:44:24 +00:00
HD Moore 16170bd716 Let the GUI handle -r, change default window size to fit smaller screens, updated HTTP capture code, added keywords to payload
git-svn-id: file:///home/svn/framework3/trunk@5491 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-22 23:20:35 +00:00
HD Moore 84d921633b Fun with saved passwords
git-svn-id: file:///home/svn/framework3/trunk@5490 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-22 18:48:21 +00:00
HD Moore 2eb50c4bb7 Top 500 sites from alexa
git-svn-id: file:///home/svn/framework3/trunk@5489 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-21 22:52:51 +00:00
HD Moore e237177e6d Remove the JS function
git-svn-id: file:///home/svn/framework3/trunk@5488 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-21 22:47:26 +00:00
HD Moore 2084024822 Small bugfixes to HTTP capture
git-svn-id: file:///home/svn/framework3/trunk@5486 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-21 21:49:10 +00:00
HD Moore 929888a714 Configurable HTTP capture service
git-svn-id: file:///home/svn/framework3/trunk@5484 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-21 21:04:11 +00:00
HD Moore 032edb7e39 Adds a monkey-patch for the WEBrick directory traversal flaw
git-svn-id: file:///home/svn/framework3/trunk@5434 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-06 17:21:45 +00:00
HD Moore 509fc09382 Lots of updates related to <secret project X>.
git-svn-id: file:///home/svn/framework3/trunk@5424 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-02 04:46:13 +00:00
HD Moore ce797ee523 Shiny new version of the vnc payload, fixes #176
git-svn-id: file:///home/svn/framework3/trunk@5357 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-26 22:17:11 +00:00
HD Moore 151d928280 Nuke ruby-pcapx (pcaprub replaces it)
git-svn-id: file:///home/svn/framework3/trunk@5345 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-25 03:09:04 +00:00