Commit Graph

607 Commits (3b732cc4baa7f1e84c324750808ed3aac351ab70)

Author SHA1 Message Date
HD Moore 4281e18e45 Decrementing the minimal byte size to match lower-mtu networks
git-svn-id: file:///home/svn/framework3/trunk@4083 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-29 05:24:39 +00:00
Matt Miller 6a4c32401e added support to list which exploit a session was spawned through
git-svn-id: file:///home/svn/framework3/trunk@4061 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-28 01:50:04 +00:00
Matt Miller 68a5fb928d added PrependUser and AppendUser to extended options
git-svn-id: file:///home/svn/framework3/trunk@4056 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-26 01:48:10 +00:00
Matt Miller 5ae0993151 added PrependUser and AppendUser to extended options
git-svn-id: file:///home/svn/framework3/trunk@4055 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-26 01:44:25 +00:00
HD Moore d366f3a90c Working lorcon interface
git-svn-id: file:///home/svn/framework3/trunk@4053 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-25 19:16:55 +00:00
Matt Miller 2c5cf95d0f removed modules that don't currently function
git-svn-id: file:///home/svn/framework3/trunk@4052 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-25 13:29:25 +00:00
Matt Miller 6c2ad54dfd license array
git-svn-id: file:///home/svn/framework3/trunk@4050 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-20 14:24:02 +00:00
Matt Miller e6b9e4f24b a few tweaks to make things more reliable, added wfs_delay
git-svn-id: file:///home/svn/framework3/trunk@4045 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-17 00:16:04 +00:00
Matt Miller 465ea3c677 initial integration of basic kernel-mode payload support
git-svn-id: file:///home/svn/framework3/trunk@4044 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 23:59:14 +00:00
Matt Miller fa14510b78 starting integration of kernel-mode payloads
git-svn-id: file:///home/svn/framework3/trunk@4043 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 21:40:38 +00:00
Matt Miller c12e3f2992 better implementation
git-svn-id: file:///home/svn/framework3/trunk@4042 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 19:04:39 +00:00
Matt Miller 34f388d0e5 added code to support HEX var substitution
git-svn-id: file:///home/svn/framework3/trunk@4041 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 18:51:34 +00:00
Matt Miller 7b0c80b922 mixins method
git-svn-id: file:///home/svn/framework3/trunk@4040 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 08:06:52 +00:00
Matt Miller b354c82258 ypops overflow ported
git-svn-id: file:///home/svn/framework3/trunk@4021 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-12 03:24:31 +00:00
Matt Miller abf2e057c8 apache chunked encoding win32 port
git-svn-id: file:///home/svn/framework3/trunk@4017 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 08:31:54 +00:00
Matt Miller b477547a3d partial fix for mod cache issue? committed vlad's new stagers
git-svn-id: file:///home/svn/framework3/trunk@4013 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-10 06:44:15 +00:00
HD Moore dea617c67a Unspammed
git-svn-id: file:///home/svn/framework3/trunk@4011 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-06 04:02:55 +00:00
Spoon M c7ffe342e5 ug, I hate the world
git-svn-id: file:///home/svn/framework3/trunk@4010 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-05 03:08:15 +00:00
HD Moore 17e97fc84c Fix the duplicate connection problem for dcerpc bugs
git-svn-id: file:///home/svn/framework3/trunk@4008 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-02 21:32:00 +00:00
HD Moore 070f9af55f Reverse connection payloads now listen on 0.0.0.0 by default.
git-svn-id: file:///home/svn/framework3/trunk@4000 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-01 16:56:17 +00:00
HD Moore f14f8d144c Updated the framework revision
git-svn-id: file:///home/svn/framework3/trunk@3997 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-01 05:26:02 +00:00
HD Moore ec987e0f28 Bug fix for passive-exploits
Bug fix for a crash in the DB import for XML




git-svn-id: file:///home/svn/framework3/trunk@3920 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-21 14:51:58 +00:00
Matt Miller 00ffcc3835 support for meterpreter scripts
git-svn-id: file:///home/svn/framework3/trunk@3916 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-19 03:15:25 +00:00
HD Moore fa5503d0ea Fix the case of hosts with no services
git-svn-id: file:///home/svn/framework3/trunk@3915 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-18 06:22:43 +00:00
HD Moore d559ad6a4e Postgres driver layer is complete, but not yet tested
git-svn-id: file:///home/svn/framework3/trunk@3909 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-18 00:05:09 +00:00
Matt Miller 9018329f1a added cleanup to meterp
git-svn-id: file:///home/svn/framework3/trunk@3908 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 23:12:46 +00:00
HD Moore c525ac455b Updated command set
git-svn-id: file:///home/svn/framework3/trunk@3907 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 22:07:52 +00:00
HD Moore c3876b6dd6 Updates for the autopwn stuff...
git-svn-id: file:///home/svn/framework3/trunk@3906 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 08:00:37 +00:00
Matt Miller d3670564a0 hopeful commit to uber session stupid number 2
git-svn-id: file:///home/svn/framework3/trunk@3905 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 07:26:22 +00:00
HD Moore f5298f5a94 The postgres plugin is updated and now works with autopwn/load/etc
git-svn-id: file:///home/svn/framework3/trunk@3904 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 07:17:27 +00:00
HD Moore f3b79d2c2c Default to X86
git-svn-id: file:///home/svn/framework3/trunk@3903 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 05:07:47 +00:00
HD Moore 7fc40e4734 More work towards automation
git-svn-id: file:///home/svn/framework3/trunk@3902 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 00:39:23 +00:00
HD Moore 0d1137e562 More work on the database backend
git-svn-id: file:///home/svn/framework3/trunk@3901 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 20:08:13 +00:00
HD Moore a309a6755b Fix background job support
git-svn-id: file:///home/svn/framework3/trunk@3899 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 20:07:07 +00:00
HD Moore 6a9f9ebee7 Cleanups for database management, use a persistent sqlite3 database with the db_sqlite3 plugin
git-svn-id: file:///home/svn/framework3/trunk@3897 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 06:45:06 +00:00
HD Moore 033da6245a Display an ugly warning message if a broken module is found in the tree
git-svn-id: file:///home/svn/framework3/trunk@3896 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 06:27:14 +00:00
HD Moore 6b4105db8e Tab completion of RHOST options based the available services and the current RPORT
git-svn-id: file:///home/svn/framework3/trunk@3894 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 05:33:50 +00:00
HD Moore ccbe1cc876 Import CONST
git-svn-id: file:///home/svn/framework3/trunk@3888 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-14 05:51:24 +00:00
Matt Miller d11604cca9 filter out privileged payloads used with non-privileged exploits
git-svn-id: file:///home/svn/framework3/trunk@3869 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-12 05:58:07 +00:00
Matt Miller 3e69f46a3a added support for manual ranking
git-svn-id: file:///home/svn/framework3/trunk@3866 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-12 05:34:58 +00:00
HD Moore 47039ff3fa First round of bugfixes for encoders. Alphanumeric encoders no longer default the BufferRegister option, since this can lead to non-compatible exploits falling through to these encoders, selecting them, and then crashing. The new method uses a dynamic (not quite poly) geteip generator, that while not yet alphanumeric compatible, it handles most of the known use cases. Remaining items:
1) Figure out how to handle unicode geteip (unicode encoded, alphanum probably)
2) Add keys to the unicode payloads to force a corresponding keyu on the exploit side to enable 




git-svn-id: file:///home/svn/framework3/trunk@3863 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 05:10:48 +00:00
Matt Miller 06aca0378e changes to start supporting new msfweb
git-svn-id: file:///home/svn/framework3/trunk@3860 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 01:29:05 +00:00
Matt Miller e8d45bbf1b changes to start supporting new msfweb
git-svn-id: file:///home/svn/framework3/trunk@3859 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 01:28:59 +00:00
pusscat 366dea259c Add smtp mixin for exchange exploit.
git-svn-id: file:///home/svn/framework3/trunk@3855 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-06 17:44:12 +00:00
HD Moore be356d7505 Updated to reflect the new license of Rex
git-svn-id: file:///home/svn/framework3/trunk@3850 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-01 15:50:10 +00:00
HD Moore 904449b923 Post-Beta2 bugfix for 'show payloads' and the new generic payload system.
git-svn-id: file:///home/svn/framework3/trunk@3847 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-28 05:45:36 +00:00
HD Moore 7a0c8d2c8d Cleanup
git-svn-id: file:///home/svn/framework3/trunk@3846 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-28 00:24:34 +00:00
Matt Miller e7ffef974c fix to make it so there aren't errors with Msf::Payload::Generic
git-svn-id: file:///home/svn/framework3/trunk@3845 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-27 06:56:32 +00:00
Matt Miller ea06abe5bb support for generic payloads
git-svn-id: file:///home/svn/framework3/trunk@3843 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-26 02:13:25 +00:00
Matt Miller 66b99d69ae more fixes for the meterpreter pivoting issues
git-svn-id: file:///home/svn/framework3/trunk@3840 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-22 07:19:59 +00:00
Matt Miller cc6900d2ec fix to bind_tcp handler where it wouldn't use the proper comm
git-svn-id: file:///home/svn/framework3/trunk@3834 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-17 01:57:52 +00:00
Matt Miller d8b2f95178 auto load stdapi before interact, implement type? interface
git-svn-id: file:///home/svn/framework3/trunk@3833 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-15 04:07:25 +00:00
Matt Miller a724d42aa0 added mcafee mcsubmgr exploit, added functional avoid utf8 encoder
git-svn-id: file:///home/svn/framework3/trunk@3830 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-14 08:55:37 +00:00
HD Moore 90fc7fa94e Abstracted the RHOST references from inside the mixins.
Added a mssql_ping_parse method to the mssql mixin



git-svn-id: file:///home/svn/framework3/trunk@3827 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-13 18:03:28 +00:00
HD Moore d3b9cf1b20 Added rerun command to auxiliary
Fixed range_walker to allow multiple ranges
Version scanner now mostly works



git-svn-id: file:///home/svn/framework3/trunk@3824 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-13 00:08:40 +00:00
HD Moore 845f80af59 Bug fix to AddressRange option
Reworked TCP/UDP exploit mixins to allow the source of rhost/rport/etc to be overloaded
Reworked Scanner mixin to deregister RHOST and overflow self.rhost



git-svn-id: file:///home/svn/framework3/trunk@3823 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-12 23:08:20 +00:00
HD Moore c5542fd347 Major reworking of the recon stuff, there is a new mixin called Auxiliary::Scanner that
supports per-range, per-host, and per-batch requests. The reporting stuff has been moved
into a new mixin for it. The old recon stuff was pulled out and sample modules for the
scanner mixin were added. Almost time to re-import skape's old recon foo using Scanner :-)




git-svn-id: file:///home/svn/framework3/trunk@3820 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-12 08:31:38 +00:00
Matt Miller 7bd26e4925 fixed bug in service manager hardcore alias, new passivex dll/proj files
git-svn-id: file:///home/svn/framework3/trunk@3807 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-08 03:29:26 +00:00
HD Moore 25c08bb206 Bug fixes, list of known bugs, final prep for beta-1
git-svn-id: file:///home/svn/framework3/trunk@3803 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-02 06:30:36 +00:00
HD Moore c36519cfbf Fix bind_Tcp being killed too early
git-svn-id: file:///home/svn/framework3/trunk@3792 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 06:58:29 +00:00
HD Moore 377e606929 Added javascript and win32 pe output formats
git-svn-id: file:///home/svn/framework3/trunk@3787 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 04:05:20 +00:00
Matt Miller 7594389a96 added midstager support for staging over-sized payloads
git-svn-id: file:///home/svn/framework3/trunk@3780 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 22:49:19 +00:00
HD Moore 164f34cc80 Massive speed improvements to set PAYLOAD.
Tab completion for exploit names works for demand-loaded modules



git-svn-id: file:///home/svn/framework3/trunk@3779 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 22:28:47 +00:00
Matt Miller 144249b34d bump thread priority in encoded payload generation to fix thread starvation issues
git-svn-id: file:///home/svn/framework3/trunk@3777 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 18:45:36 +00:00
HD Moore a2592959c3 Readline mode disabledby defualt for interactive sessios
Fixed an issue with exploit.rb directly running a session command after the session command had been renamed



git-svn-id: file:///home/svn/framework3/trunk@3774 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-29 23:01:38 +00:00
HD Moore 817c4c189f Timeouts added for handlers
git-svn-id: file:///home/svn/framework3/trunk@3773 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-29 22:37:39 +00:00
HD Moore 651508ea46 ar4 -> b1
git-svn-id: file:///home/svn/framework3/trunk@3768 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 22:46:09 +00:00
HD Moore 6677b4ba71 Minor bug fixes to remove extra 'p' calls
Rewrite of stdio/readline to support Windows




git-svn-id: file:///home/svn/framework3/trunk@3766 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 22:28:19 +00:00
HD Moore b4a0f34021 Using readline5 solves all hangs
git-svn-id: file:///home/svn/framework3/trunk@3763 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 05:35:29 +00:00
HD Moore db8c76f679 Various hacks for win32 mode
git-svn-id: file:///home/svn/framework3/trunk@3756 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 00:59:00 +00:00
HD Moore 5c142b2059 Random fixes for warntings
git-svn-id: file:///home/svn/framework3/trunk@3750 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-19 07:24:47 +00:00
HD Moore ff28b148d1 Fix from nico
git-svn-id: file:///home/svn/framework3/trunk@3745 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 01:32:21 +00:00
HD Moore d1efbad1e7 Minor updates
git-svn-id: file:///home/svn/framework3/trunk@3722 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-23 06:20:52 +00:00
HD Moore 14dabc399e Added DOS aux modules
Temporarily added RRAS_MAGIC


git-svn-id: file:///home/svn/incoming/trunk@3666 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 15:52:01 +00:00
bmc d89f5fa9d1 * change where NDR is grabbed from
git-svn-id: file:///home/svn/incoming/trunk@3660 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-13 21:27:01 +00:00
Matt Miller 1a61d3d2fb changes to support native win32
git-svn-id: file:///home/svn/incoming/trunk@3654 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 20:53:15 +00:00
HD Moore 7d0690ed2e Cleanups in preparation for alpha-r4
git-svn-id: file:///home/svn/incoming/trunk@3645 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-30 15:44:48 +00:00
HD Moore 18bb4f9e6d Fixed spaces before paranethesis issues in dcerpc/packet.rb
Fixed comment in smb/client.rb
Fixed ReadAndX in smb/client.rb
Updated ReadAndX struct in constants.rb


git-svn-id: file:///home/svn/incoming/trunk@3643 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-15 16:44:44 +00:00
HD Moore 43387ea793 register_options() always overrides the datastore
resolves the problem reported by Nicolas P.


git-svn-id: file:///home/svn/incoming/trunk@3642 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-11 16:11:06 +00:00
pusscat c02749067f Add nonupper encoder, like nonalpha, but with badchar support instead of lowercase char range
git-svn-id: file:///home/svn/incoming/trunk@3641 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-08 15:04:50 +00:00
HD Moore f959995bb1 Added the missing BSD license
git-svn-id: file:///home/svn/incoming/trunk@3638 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-06 17:13:22 +00:00
HD Moore 64827d1238 New evasion options for controlling how many fake uuids to place before and after the real uid when eexploiting DCERPC bugs
Added a new evasion option for picking readAndX/writeAndX or transNamedPipe methods for DCERPC delivery, however a struct2 issue seems to be breaking this (will investigate tomorrow).

Fixed a typo in the initialize method of the OpenPipe class


git-svn-id: file:///home/svn/incoming/trunk@3634 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-03 05:53:37 +00:00
HD Moore 304001a454 Removal of obsolete DCERPC code
git-svn-id: file:///home/svn/incoming/trunk@3633 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-03 05:23:52 +00:00
HD Moore 1fd5d698a2 Migrated client.rb to new smb time api (missed one)
Removed debugging print from the SMB mixin


git-svn-id: file:///home/svn/incoming/trunk@3632 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-03 04:49:47 +00:00
HD Moore 1a54cc810a Fixed numerous issues involving smb/dcerpc interaction
Fixed 'bad' use of method definition (space after method name, will be depreciated soon)


git-svn-id: file:///home/svn/incoming/trunk@3626 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-30 19:49:27 +00:00
HD Moore f9b23371b8 aux -> auxiliary to fix a windows isue
git-svn-id: file:///home/svn/incoming/trunk@3624 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-27 05:16:03 +00:00
HD Moore d0b3483d41 Fixored
git-svn-id: file:///home/svn/incoming/trunk@3621 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 16:51:05 +00:00
HD Moore 55e7111d6a Blacklist bytes making up the actual badchars too
git-svn-id: file:///home/svn/incoming/trunk@3619 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 05:26:17 +00:00
HD Moore 07e157efdf Working on encoder fixes
git-svn-id: file:///home/svn/incoming/trunk@3618 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 05:14:55 +00:00
pusscat 7ef4741966 Hehe - sorry guys ;)
git-svn-id: file:///home/svn/incoming/trunk@3606 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-21 12:31:11 +00:00
pusscat f678425f07 Add non-alpha encoder (not quite done, but passes tests with \xcc)
git-svn-id: file:///home/svn/incoming/trunk@3604 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-20 21:11:33 +00:00
HD Moore da41886856 lib/msf/core/module_manager.rb - bug fixes to make it work with ruby-cvs
lib/rex/arch/x86.rb - removed illegal 'break' statements

lib/rex/peparsey* - imported from spn/, renamed classes to Rex
msfpescan - first version from spoonm


git-svn-id: file:///home/svn/incoming/trunk@3598 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-15 20:26:41 +00:00
HD Moore 457f476b4c Changed to use spoon's meethod
git-svn-id: file:///home/svn/incoming/trunk@3590 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-03 04:50:26 +00:00
HD Moore 7b4fb0d6aa Tons of fixes for aux/recon/db
git-svn-id: file:///home/svn/incoming/trunk@3589 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-03 04:33:30 +00:00
HD Moore bd6ee5ecf8 Background auxiliary modules
git-svn-id: file:///home/svn/incoming/trunk@3588 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-03 00:33:06 +00:00
HD Moore ccb5aeac2f No need, since exploit mixins are now compat
git-svn-id: file:///home/svn/incoming/trunk@3587 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-02 23:32:17 +00:00
HD Moore 2299abf723 More recon hackery
git-svn-id: file:///home/svn/incoming/trunk@3586 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-02 23:26:33 +00:00
HD Moore b4189e521d More recon hackery
git-svn-id: file:///home/svn/incoming/trunk@3585 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-02 22:33:34 +00:00
HD Moore 3aa45638df Added -c, -r, -v options to msfconsole
git-svn-id: file:///home/svn/incoming/trunk@3584 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-02 16:28:02 +00:00
HD Moore 46709d6222 cosmetic
git-svn-id: file:///home/svn/incoming/trunk@3581 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-30 15:06:41 +00:00
HD Moore 096a7e6c71 Fixed event dispatching for db objects
git-svn-id: file:///home/svn/incoming/trunk@3574 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-21 05:29:26 +00:00
HD Moore bab8745ba8 Backend code
git-svn-id: file:///home/svn/incoming/trunk@3573 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-21 04:37:48 +00:00
HD Moore e7a6f2b4b3 The 'set' command now allows the value to contain spaces
git-svn-id: file:///home/svn/incoming/trunk@3572 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-19 18:39:43 +00:00
Matt Miller a6726c8df7 fix for option import issue when options had spaces
git-svn-id: file:///home/svn/incoming/trunk@3571 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-16 16:33:32 +00:00
HD Moore 05bda2529a More aux, first hack on multi-target firefox exploit
git-svn-id: file:///home/svn/incoming/trunk@3565 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-09 17:32:53 +00:00
HD Moore 5411701d3f Aux mode updates
git-svn-id: file:///home/svn/incoming/trunk@3564 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-09 17:28:37 +00:00
bmc 1f9b1d3806 * add request fragmentation as an IDS evasion
git-svn-id: file:///home/svn/incoming/trunk@3563 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-08 19:14:10 +00:00
Matt Miller e22b38ee8c one other change
git-svn-id: file:///home/svn/incoming/trunk@3555 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 07:07:00 +00:00
Matt Miller 8b4ddab401 fix for module caching issues with rexploit
git-svn-id: file:///home/svn/incoming/trunk@3554 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 07:05:41 +00:00
HD Moore c0a8b6cf22 Fixed auxiliarytarget issue, updated frame.rb to handle on-demand module loading
git-svn-id: file:///home/svn/incoming/trunk@3551 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-04 16:46:15 +00:00
HD Moore 0b1d97f653 Committed
git-svn-id: file:///home/svn/incoming/trunk@3550 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-01 16:16:08 +00:00
HD Moore 7e26814b6c actions
git-svn-id: file:///home/svn/incoming/trunk@3549 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-28 06:09:00 +00:00
bmc 29b182eea8 * expose junk uri end
* expose junk param start


git-svn-id: file:///home/svn/incoming/trunk@3547 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:59:41 +00:00
Matt Miller abd3c7a77f fix for module reloading with rexploit
git-svn-id: file:///home/svn/incoming/trunk@3542 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-24 15:47:10 +00:00
Matt Miller 7cc1d53247 more improvements to demand module loading, fixes some incorrect assumptions
git-svn-id: file:///home/svn/incoming/trunk@3539 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 17:58:21 +00:00
Matt Miller f796330f60 fix for warnings and file does not exist errors in demand loading
git-svn-id: file:///home/svn/incoming/trunk@3538 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 17:17:25 +00:00
Matt Miller 20550431d6 fix for error when exploit is removed
git-svn-id: file:///home/svn/incoming/trunk@3537 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 16:36:58 +00:00
Matt Miller 3a37749de6 support for demand-loading of modules to improve load speed, expect problems
git-svn-id: file:///home/svn/incoming/trunk@3534 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 03:10:58 +00:00
bmc 553144418a * two tiny optimizations:
* Platform is far more frequently the reason for skipping, so make that first.
  * compact!, the builtin for deleting nil entries in an array


git-svn-id: file:///home/svn/incoming/trunk@3532 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-19 04:09:18 +00:00
bmc a73f024ce1 * less duplication, since the common case is just fine for all but a few instances
git-svn-id: file:///home/svn/incoming/trunk@3531 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-19 03:58:18 +00:00
vlad902 f2ab112647 Add verbosity flag (except for errors.)
git-svn-id: file:///home/svn/incoming/trunk@3530 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-18 17:12:25 +00:00
bmc 882e8601d3 * use utf-7 'mode' instead of utf-7
git-svn-id: file:///home/svn/incoming/trunk@3527 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-13 22:52:55 +00:00
Matt Miller 9a634f0df9 fix to import options in exploit simple
git-svn-id: file:///home/svn/incoming/trunk@3525 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-11 16:01:23 +00:00
bmc a0af1e9598 * a more complete selection of various unicode types supported by most browsers
git-svn-id: file:///home/svn/incoming/trunk@3523 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 17:29:37 +00:00
bmc 1c51681efe * add <object> base64 encoded objects, with 1 byte pad, 2 byte pad, and random space injection. Works fine on ie 4, firefox, and safari.
git-svn-id: file:///home/svn/incoming/trunk@3522 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 15:45:37 +00:00
Matt Miller 9c537c42fd missed option
git-svn-id: file:///home/svn/incoming/trunk@3520 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-08 01:12:26 +00:00
Matt Miller 6a52aae59a switch to use a service specific user/pass datastore option to avoid payload conflicts
git-svn-id: file:///home/svn/incoming/trunk@3519 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-08 01:07:47 +00:00
bmc ca315abe1b * add uri-encoding as an evasion method (though, exploits could hard code it if they need to...)
git-svn-id: file:///home/svn/incoming/trunk@3516 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:10 +00:00
bmc 32dfdc114c * allow a request to pass a timeout (and by allowing passing a timeout, the ability to not parse the response)
git-svn-id: file:///home/svn/incoming/trunk@3511 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:22:47 +00:00
HD Moore 0ea7fc3ec4 Minor tweaks
git-svn-id: file:///home/svn/incoming/trunk@3508 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 20:18:45 +00:00
HD Moore dc42740402 Added a new JObs tab
git-svn-id: file:///home/svn/incoming/trunk@3507 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 19:43:05 +00:00
HD Moore 5b497d5e4d Added Irix platform
Tweaked reverse.rb to use a subshell and background it
Added Irix lpdexec


git-svn-id: file:///home/svn/incoming/trunk@3505 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 18:10:08 +00:00
vlad902 3acdd81b9e metasploit -> mozilla
git-svn-id: file:///home/svn/incoming/trunk@3504 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 01:56:34 +00:00
HD Moore 868d7bf561 Working findtag + samba
Removed call to evasions that didnt have corresponding definition


git-svn-id: file:///home/svn/incoming/trunk@3501 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 21:04:50 +00:00
bmc 40961655d6 * enable evasions on the socket as they come in
git-svn-id: file:///home/svn/incoming/trunk@3498 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:56:50 +00:00
bmc 3adb2211b8 * add tcp segment size evasion
* add tcp write delay evasion


git-svn-id: file:///home/svn/incoming/trunk@3497 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:55:56 +00:00
bmc 620dfad4a9 gee, these were not cut and paste targets...
git-svn-id: file:///home/svn/incoming/trunk@3490 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:33:49 +00:00
bmc 2f2790386f providing the XDR alias is important...
git-svn-id: file:///home/svn/incoming/trunk@3489 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:31:28 +00:00
HD Moore e01b5aee85 More code
git-svn-id: file:///home/svn/incoming/trunk@3468 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-29 03:08:04 +00:00
HD Moore 7a086113d3 More gooey
git-svn-id: file:///home/svn/incoming/trunk@3467 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-29 00:10:25 +00:00
HD Moore 495a1dd88d More of the gui working
git-svn-id: file:///home/svn/incoming/trunk@3466 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-28 23:33:55 +00:00
HD Moore adadbbe6ae Minr updates
git-svn-id: file:///home/svn/incoming/trunk@3465 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-28 20:22:18 +00:00
HD Moore bb6d5c38a3 Better WX stub
git-svn-id: file:///home/svn/incoming/trunk@3464 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-28 20:11:28 +00:00
bmc d4d73114c1 * add the following evasions for attacks against HTTP servers:
HTTP::chunked
    HTTP::header_folding
    HTTP::junk_headers
    HTTP::junk_slashes
    HTTP::junk_directories
    HTTP::junk_params
    HTTP::junk_self_referring_directories
    HTTP::junk_pipeline

* add the following evasions for attacks against HTTP clients:
    HTTP::junk_headers
    HTTP::compression (was gzip)

* added an exploit mixin for HTML based attacks with HTML based evasions.  eg: aim_goaway.rb
    HTML::unicode
    HTML::javascript::base64
    HTML::javascript::escape


git-svn-id: file:///home/svn/incoming/trunk@3458 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 22:02:35 +00:00
HD Moore b4ad4a5d75 Tabs vs Spaces
git-svn-id: file:///home/svn/incoming/trunk@3453 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 05:33:08 +00:00
bmc 7f9baa9744 * update OptEnum so that desc displays the valid options, less duplication of data
* add OptEnum to the test suite


git-svn-id: file:///home/svn/incoming/trunk@3442 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-25 19:15:09 +00:00
HD Moore bdfd2c5152 Recon modules and the recon event subsystem have been temporarily removed.
The 'auxiliary' system is designed to replace it and recon features will
slowly be moved back into the framework


git-svn-id: file:///home/svn/incoming/trunk@3438 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-24 03:59:44 +00:00
HD Moore 9dc316e932 Updated license
git-svn-id: file:///home/svn/incoming/trunk@3429 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-22 19:28:05 +00:00
HD Moore f485585e7c License information displayed by info
git-svn-id: file:///home/svn/incoming/trunk@3428 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-22 19:25:55 +00:00
HD Moore 1bffccf605 New licensing terms, revision bump to v3
git-svn-id: file:///home/svn/incoming/trunk@3425 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 22:10:20 +00:00