Commit Graph

6968 Commits (37f4783d55e7fb7f966aa670214156e97cef648d)

Author SHA1 Message Date
HD Moore 37f4783d55 Adds -u to the connect command
git-svn-id: file:///home/svn/framework3/trunk@9788 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-12 03:15:45 +00:00
James Lee a5786cdc64 stop using some older exploits in browser_autopwn in favor of ie_behaviors which works on more versions
git-svn-id: file:///home/svn/framework3/trunk@9787 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-12 02:51:50 +00:00
James Lee f80d08651f document.write breaks stuff. build a div and put stuff in it instead
git-svn-id: file:///home/svn/framework3/trunk@9786 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-12 00:45:37 +00:00
James Lee eab025103c include non-javascript exploits when javascript is on
git-svn-id: file:///home/svn/framework3/trunk@9785 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 23:53:47 +00:00
James Lee 9f37d46f7b minimize autopwn settings
git-svn-id: file:///home/svn/framework3/trunk@9784 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 23:21:04 +00:00
James Lee 28e40bdc9f add java_calendar_deserialize to browser_autopwn
git-svn-id: file:///home/svn/framework3/trunk@9783 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 23:16:51 +00:00
James Lee 1dd2dd2315 add java as a regular platform
git-svn-id: file:///home/svn/framework3/trunk@9782 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 19:46:55 +00:00
Stephen Fewer a47ced6ac4 Partial solution for #1448. Fall back to CreateProcessWithTokenW when CreateProcessAsUser fails with ERROR_PRIVILEGE_NOT_HELD. While only available on 2003 and above this works on my server 2008 test case which was failing before.
git-svn-id: file:///home/svn/framework3/trunk@9781 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 18:36:57 +00:00
James Lee a73a995e0f Scripts mustn't return.
git-svn-id: file:///home/svn/framework3/trunk@9780 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 17:34:03 +00:00
Stephen Fewer 7a57ca57a6 Bug fix for a misplaced & in call to DestroyEnvironmentBlock() during process_execute(), was causing a hang on Vista and an Access Violation on server 2008.
git-svn-id: file:///home/svn/framework3/trunk@9779 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 16:37:50 +00:00
James Lee 11bad248c5 add a simple script for turning a regular checkout into a mini version
git-svn-id: file:///home/svn/framework3/trunk@9778 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 16:13:20 +00:00
Joshua Drake ec39be6e11 workaround odd racket bug
git-svn-id: file:///home/svn/framework3/trunk@9777 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 07:23:46 +00:00
Carlos Perez 4efb7f4c1f Fixed false positive in OS detection do to bad regx
git-svn-id: file:///home/svn/framework3/trunk@9776 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 01:42:48 +00:00
Carlos Perez 5787ef30c0 Give more detail of what is happening when running with SYSTEM privs
git-svn-id: file:///home/svn/framework3/trunk@9775 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 01:32:13 +00:00
Carlos Perez 1add80fe24 fixed problems when running with SYSTEM privs
git-svn-id: file:///home/svn/framework3/trunk@9774 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 01:22:53 +00:00
Carlos Perez 3edac7bb7c fixed problems when running as SYSTEM and under Windows 2003 Systems
git-svn-id: file:///home/svn/framework3/trunk@9773 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 01:22:29 +00:00
Carlos Perez fd296af041 forgot to update option parsing
git-svn-id: file:///home/svn/framework3/trunk@9772 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 20:48:16 +00:00
Carlos Perez e2d3a84c50 re-named to enum_logged_on_users so as to fit more what it does
git-svn-id: file:///home/svn/framework3/trunk@9771 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 20:19:49 +00:00
Carlos Perez ddb599d7d0 Script for enumerating and downloading Firefox Databases on a Host
git-svn-id: file:///home/svn/framework3/trunk@9770 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 20:00:32 +00:00
Carlos Perez 200828e90a Script for enumerating VMWare products on a target host, including their settings and versions
git-svn-id: file:///home/svn/framework3/trunk@9769 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 17:03:11 +00:00
Carlos Perez 85ff4e22b9 refactor several calls to use now Meterpreter mixin
git-svn-id: file:///home/svn/framework3/trunk@9768 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 16:55:50 +00:00
Carlos Perez 4ff03fadb8 changed -c to -cl option do to conflict with sessions command
git-svn-id: file:///home/svn/framework3/trunk@9767 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 16:36:51 +00:00
Joshua Drake a731efa5ce add a more specific error message when the module creation fails
git-svn-id: file:///home/svn/framework3/trunk@9766 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 16:10:38 +00:00
Carlos Perez 5c4c4f92d0 Script for enumerating current logged on users and SID's for logged on accounts
git-svn-id: file:///home/svn/framework3/trunk@9765 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 15:19:11 +00:00
HD Moore d0c8f91f21 Bump to 3.4.1
git-svn-id: file:///home/svn/framework3/trunk@9764 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 15:19:01 +00:00
HD Moore cc963785fc Bump to -release, final should be cut soon
git-svn-id: file:///home/svn/framework3/trunk@9763 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 15:18:34 +00:00
Carlos Perez 08aac797f5 resolved function name conflict with mixin
git-svn-id: file:///home/svn/framework3/trunk@9762 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 13:44:26 +00:00
James Lee 212d9c3fd3 workaround the new module behaviour of copying for jobs by grabbing the copy out of the job context
git-svn-id: file:///home/svn/framework3/trunk@9761 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 23:57:54 +00:00
HD Moore 55763051aa Enable threading of the tcp connect scan (per host)
git-svn-id: file:///home/svn/framework3/trunk@9760 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 22:21:34 +00:00
HD Moore d3a6418e53 Revert changes to elevate, still not getting around restrictions on primary token creation, needs a deeper look
git-svn-id: file:///home/svn/framework3/trunk@9759 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:59:31 +00:00
Tod Beardsley d1726ddadf I fell down a rathole trying to debug something today, but at least now I can always find my way back with this. It parses metasploit modules to see if you're using all the datastore elements you declared and if you declared all your datastore elements. Don't try to get too fancy with it -- my metaprogramming is all driven by regex, so it'll be easy to trick me if you want to with funny-looking code with weird linebreaks.
git-svn-id: file:///home/svn/framework3/trunk@9758 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:44:52 +00:00
HD Moore 3d01172af5 Binaries for the previous commit
git-svn-id: file:///home/svn/framework3/trunk@9757 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:41:06 +00:00
HD Moore d5932fc2fd Switch the namedpipe code to convert the thread token to a primary token first
git-svn-id: file:///home/svn/framework3/trunk@9756 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:40:44 +00:00
HD Moore ec9156827e Switch the elevator methods to DuplicateHandleEx to get a primary token
git-svn-id: file:///home/svn/framework3/trunk@9755 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:23:05 +00:00
HD Moore 29f9f6671e This *should* fix all cases where execute -t would fail to use an impersonated token
git-svn-id: file:///home/svn/framework3/trunk@9754 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 19:32:51 +00:00
James Lee 7fd71dcbcb note the updated version of ruby
git-svn-id: file:///home/svn/framework3/trunk@9753 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 19:29:34 +00:00
HD Moore 16134447d9 Cleanup / cosmetic for dcerpc, make EBADF pretend to be EOFError in terms of what exception is raised
git-svn-id: file:///home/svn/framework3/trunk@9752 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 19:05:16 +00:00
HD Moore 972e7bc282 Clean up some of the token impersonation code around process execution
git-svn-id: file:///home/svn/framework3/trunk@9751 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 18:54:20 +00:00
HD Moore 42f8dc10c0 Change the timeout from 0
git-svn-id: file:///home/svn/framework3/trunk@9750 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 18:03:48 +00:00
HD Moore adf33feb0e Catch an odd corner case with zero timeouts - this broke dcerpc over tcp
git-svn-id: file:///home/svn/framework3/trunk@9749 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 17:58:59 +00:00
Joshua Drake 0c2c35cc47 fix disclosure date
git-svn-id: file:///home/svn/framework3/trunk@9748 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 16:54:25 +00:00
HD Moore 2d65cb602b Fix boolean handling
git-svn-id: file:///home/svn/framework3/trunk@9747 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 16:34:18 +00:00
Joshua Drake 3b7842eb0e add dtp spoofer module from Spencer McIntyre
git-svn-id: file:///home/svn/framework3/trunk@9746 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 16:23:53 +00:00
Joshua Drake 5d4d225abe add blurb about += vs <<
git-svn-id: file:///home/svn/framework3/trunk@9745 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 16:19:22 +00:00
Joshua Drake c1f74794eb style compliance fixes
git-svn-id: file:///home/svn/framework3/trunk@9744 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 23:34:50 +00:00
Joshua Drake ad9f0d91b9 add tftp server auxiliary
git-svn-id: file:///home/svn/framework3/trunk@9743 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 23:34:33 +00:00
Joshua Drake 573fc216dd add write support, tftproot, output dir for tftp server
git-svn-id: file:///home/svn/framework3/trunk@9742 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 23:34:29 +00:00
Joshua Drake d83ca6c901 add a few more strings
git-svn-id: file:///home/svn/framework3/trunk@9741 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 21:05:36 +00:00
Carlos Perez 16541abdde sent array instead of string to mixin call
git-svn-id: file:///home/svn/framework3/trunk@9740 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 20:31:26 +00:00
Carlos Perez e0d9c41b5f did not write info when file did not exists, problem fixed
git-svn-id: file:///home/svn/framework3/trunk@9739 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 20:28:56 +00:00