Commit Graph

960 Commits (4281e18e450e909314e9e5f74e21f55cc86a18ae)

Author SHA1 Message Date
HD Moore cb933d9b03 Test
git-svn-id: file:///home/svn/framework3/trunk@3761 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 04:31:36 +00:00
HD Moore edb1f1a7ba IT WORKS!!!!
git-svn-id: file:///home/svn/framework3/trunk@3759 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 04:16:39 +00:00
HD Moore a021982e03 Enabled patched readline hackery
git-svn-id: file:///home/svn/framework3/trunk@3757 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 03:39:27 +00:00
HD Moore db8c76f679 Various hacks for win32 mode
git-svn-id: file:///home/svn/framework3/trunk@3756 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 00:59:00 +00:00
bmc 5b319613ab * add html encoding
git-svn-id: file:///home/svn/framework3/trunk@3755 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-24 19:25:59 +00:00
HD Moore 1a7ba78dc8 Removed a dumb debugging line that was accidentally comitted
git-svn-id: file:///home/svn/framework3/trunk@3752 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-20 04:43:52 +00:00
HD Moore 5c142b2059 Random fixes for warntings
git-svn-id: file:///home/svn/framework3/trunk@3750 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-19 07:24:47 +00:00
Spoon M f95d4174de BLARGGGG. Actually remove the null terminating byte (instead of returning the same string, bug). Another bug treating all registry keys that are a string as a dword...
git-svn-id: file:///home/svn/framework3/trunk@3749 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 20:37:38 +00:00
Spoon M 41890a86f2 use loop do instead of while 1 (ruby warning, literal in condition)
git-svn-id: file:///home/svn/framework3/trunk@3748 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:34:15 +00:00
Spoon M df32aedf44 added parens to fix precedence/void context bug
git-svn-id: file:///home/svn/framework3/trunk@3747 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:32:09 +00:00
Spoon M 1af7c1dd23 Change to an assignment, ruby warnings about a void context (which is true)
git-svn-id: file:///home/svn/framework3/trunk@3746 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:30:43 +00:00
HD Moore ff28b148d1 Fix from nico
git-svn-id: file:///home/svn/framework3/trunk@3745 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 01:32:21 +00:00
HD Moore 775183661d Split trans into two routines, one of which sets maxparm/maxdata to zero, which is required to trigger the mailslot bug. Thanks Nico!
git-svn-id: file:///home/svn/framework3/trunk@3741 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-13 03:04:53 +00:00
HD Moore 35568b570a Demo code added for MS06-035, mailslot write added to client.rb
git-svn-id: file:///home/svn/framework3/trunk@3740 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-11 20:02:45 +00:00
bmc 6e6b1bb2a7 * NDR has been moved, so remove the tests for now, removing the code later
git-svn-id: file:///home/svn/framework3/trunk@3734 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-28 13:35:19 +00:00
HD Moore 2b603db2bb Merge from side branch to fix a bug
git-svn-id: file:///home/svn/framework3/trunk@3732 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-27 23:00:49 +00:00
HD Moore d1efbad1e7 Minor updates
git-svn-id: file:///home/svn/framework3/trunk@3722 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-23 06:20:52 +00:00
HD Moore b2895bec0d Minor sanity checks added
git-svn-id: file:///home/svn/framework3/trunk@3697 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-17 17:36:19 +00:00
HD Moore c6436b501a IPv6 needed this fix as well
git-svn-id: file:///home/svn/incoming/trunk@3673 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-16 03:56:08 +00:00
Matt Miller 3e37b5993f fix unpack in from_sockaddr
git-svn-id: file:///home/svn/incoming/trunk@3672 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-16 03:11:53 +00:00
Matt Miller 4f21fc4709 fix for pack crap
git-svn-id: file:///home/svn/incoming/trunk@3671 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-16 03:03:40 +00:00
bmc 3c2a871399 * fix dotted_ip? to be more strict
git-svn-id: file:///home/svn/incoming/trunk@3670 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 22:41:57 +00:00
bmc e70b6f7cfe * add dotted quad validation tests (to prove the current one is broken :P )
git-svn-id: file:///home/svn/incoming/trunk@3669 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 22:41:31 +00:00
Matt Miller 54540f7eb7 fix regex
git-svn-id: file:///home/svn/incoming/trunk@3668 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 21:17:05 +00:00
Matt Miller e312f588a2 delay issue on win32 fixed by wrapping socket calls
git-svn-id: file:///home/svn/incoming/trunk@3667 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 20:53:20 +00:00
HD Moore 14dabc399e Added DOS aux modules
Temporarily added RRAS_MAGIC


git-svn-id: file:///home/svn/incoming/trunk@3666 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-15 15:52:01 +00:00
bmc f4545e50ed fix comment
git-svn-id: file:///home/svn/incoming/trunk@3663 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-14 22:12:36 +00:00
bmc d89f5fa9d1 * change where NDR is grabbed from
git-svn-id: file:///home/svn/incoming/trunk@3660 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-13 21:27:01 +00:00
bmc 9352454791 * add warnings, gonna go away soon
git-svn-id: file:///home/svn/incoming/trunk@3659 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-13 21:26:34 +00:00
bmc 1ec5099398 ndr is really just an encoding mechanism, and its not unique to DCERPC. so... move it here
git-svn-id: file:///home/svn/incoming/trunk@3658 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-13 20:33:01 +00:00
HD Moore 989fb37f33 Woops, forgot to keep it compatible with ipv4 :/
git-svn-id: file:///home/svn/incoming/trunk@3657 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 21:09:00 +00:00
HD Moore ebf46cf535 Fixes for IPv6 compatibility
git-svn-id: file:///home/svn/incoming/trunk@3656 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 21:02:58 +00:00
Matt Miller 1a61d3d2fb changes to support native win32
git-svn-id: file:///home/svn/incoming/trunk@3654 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 20:53:15 +00:00
bmc 049b71e236 move username & password to the test suite config thingie
git-svn-id: file:///home/svn/incoming/trunk@3652 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-01 15:30:26 +00:00
bmc ac2d76eb71 add default smb username & password for testing in the test config
git-svn-id: file:///home/svn/incoming/trunk@3651 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-01 15:29:39 +00:00
bmc c9a3258f81 removing dup trans function with a no_response argument to trans
git-svn-id: file:///home/svn/incoming/trunk@3650 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-01 15:18:53 +00:00
bmc 09786d3eaa tiny cleanups
git-svn-id: file:///home/svn/incoming/trunk@3649 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-31 21:49:46 +00:00
bmc 2f33ece43b * cleanup extra whitespaces at the end of the line
* collect = good


git-svn-id: file:///home/svn/incoming/trunk@3648 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-30 17:18:27 +00:00
HD Moore c3e0146443 Cleanups to SMB tests, minor fixes.
git-svn-id: file:///home/svn/incoming/trunk@3646 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-30 16:11:00 +00:00
HD Moore 7d0690ed2e Cleanups in preparation for alpha-r4
git-svn-id: file:///home/svn/incoming/trunk@3645 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-30 15:44:48 +00:00
HD Moore 18bb4f9e6d Fixed spaces before paranethesis issues in dcerpc/packet.rb
Fixed comment in smb/client.rb
Fixed ReadAndX in smb/client.rb
Updated ReadAndX struct in constants.rb


git-svn-id: file:///home/svn/incoming/trunk@3643 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-15 16:44:44 +00:00
HD Moore 43387ea793 register_options() always overrides the datastore
resolves the problem reported by Nicolas P.


git-svn-id: file:///home/svn/incoming/trunk@3642 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-11 16:11:06 +00:00
pusscat c02749067f Add nonupper encoder, like nonalpha, but with badchar support instead of lowercase char range
git-svn-id: file:///home/svn/incoming/trunk@3641 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-08 15:04:50 +00:00
HD Moore f959995bb1 Added the missing BSD license
git-svn-id: file:///home/svn/incoming/trunk@3638 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-06 17:13:22 +00:00
HD Moore 71ac31446f SupportWords for a tree connect response are arbitrary new words that increment the WordCount, hopefully this wont break response parsing for the actual payload/bytecount. The current struct2 system can't take abitrary WordCount responses into account yet :-/
git-svn-id: file:///home/svn/incoming/trunk@3635 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-05 13:53:16 +00:00
HD Moore 64827d1238 New evasion options for controlling how many fake uuids to place before and after the real uid when eexploiting DCERPC bugs
Added a new evasion option for picking readAndX/writeAndX or transNamedPipe methods for DCERPC delivery, however a struct2 issue seems to be breaking this (will investigate tomorrow).

Fixed a typo in the initialize method of the OpenPipe class


git-svn-id: file:///home/svn/incoming/trunk@3634 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-03 05:53:37 +00:00
HD Moore 304001a454 Removal of obsolete DCERPC code
git-svn-id: file:///home/svn/incoming/trunk@3633 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-03 05:23:52 +00:00
HD Moore 1fd5d698a2 Migrated client.rb to new smb time api (missed one)
Removed debugging print from the SMB mixin


git-svn-id: file:///home/svn/incoming/trunk@3632 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-03 04:49:47 +00:00
HD Moore 44f578bf41 Changed 'boolean' flags to true/false from 0/1 in client.rb
Updated constants.rb to more accurately reflect packet structure in SMB responses
Updated client.rb to match the changes to constants
Updated utils.rb to include smb to unix conversation routines for time fields
Updated utils.rb to create security blobs for both client and server packets


git-svn-id: file:///home/svn/incoming/trunk@3631 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-03 04:43:19 +00:00
HD Moore 1a54cc810a Fixed numerous issues involving smb/dcerpc interaction
Fixed 'bad' use of method definition (space after method name, will be depreciated soon)


git-svn-id: file:///home/svn/incoming/trunk@3626 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-30 19:49:27 +00:00
pusscat 5bfe1048e0 change the randbase 0x41 fix to work for shell_reverse_tcp
git-svn-id: file:///home/svn/incoming/trunk@3625 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-27 16:23:02 +00:00
HD Moore f9b23371b8 aux -> auxiliary to fix a windows isue
git-svn-id: file:///home/svn/incoming/trunk@3624 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-27 05:16:03 +00:00
HD Moore 42bc7496cf All sorts of fun changes to smb/dcerpc, the basics are:
1) Clean up SMB constants, add new ones, define which ones are supported by dialect
2) DCERPC over SMB uses a 'OpenPipe' class, not an 'OpenFile'
3) A new DCERPC option called 'smb_pipeio' allows the user to switch between Read/Write and TransactNamedPipe()


git-svn-id: file:///home/svn/incoming/trunk@3622 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 16:59:44 +00:00
HD Moore d0b3483d41 Fixored
git-svn-id: file:///home/svn/incoming/trunk@3621 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 16:51:05 +00:00
pusscat 0f142d18e4 Fix to ensure that 0x41 isn't randomly generated to prematurely break our decode loop
git-svn-id: file:///home/svn/incoming/trunk@3620 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 15:50:05 +00:00
HD Moore 55e7111d6a Blacklist bytes making up the actual badchars too
git-svn-id: file:///home/svn/incoming/trunk@3619 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 05:26:17 +00:00
HD Moore 07e157efdf Working on encoder fixes
git-svn-id: file:///home/svn/incoming/trunk@3618 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-26 05:14:55 +00:00
Matt Miller 55c3c1247b support to use proper pointer representation and 64-bit integers in struct
git-svn-id: file:///home/svn/incoming/trunk@3617 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 21:09:36 +00:00
bmc df49cfabb0 * add SSL TCP server support, using runtime generated/signed keys
* add HTTPS support

note, SSL service tests don't work.  Right now, the tests just bail early.  The
client spins forever trying to get data.  When the client & server are in
seperate processes, this isn't a problem.  A threaded test implementation is
closer, as data sent from the client gets to the server just fine.


git-svn-id: file:///home/svn/incoming/trunk@3616 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 18:49:00 +00:00
pusscat 71e3323dbd Adjust verboten ranges
git-svn-id: file:///home/svn/incoming/trunk@3615 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 17:49:04 +00:00
pusscat 25b60466ad Fix ecx count
Fix jle -> jge


git-svn-id: file:///home/svn/incoming/trunk@3614 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 15:42:40 +00:00
pusscat 5b8ceaf72f Make sure that table gets updated
git-svn-id: file:///home/svn/incoming/trunk@3611 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 15:01:25 +00:00
Matt Miller 4c92672cb3 initial work on adding x64 support, not all finished yet
git-svn-id: file:///home/svn/incoming/trunk@3610 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 14:57:42 +00:00
pusscat 0e0a8ee0b3 Move bad block check >.<
git-svn-id: file:///home/svn/incoming/trunk@3609 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 14:38:34 +00:00
HD Moore e439b5a32d Changed default read size for analuze, needs better logic
Changed pattern_offset to work like 2.x - from lin0xx


git-svn-id: file:///home/svn/incoming/trunk@3608 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-21 21:06:31 +00:00
pusscat 4a781e59cd Replace JE with JLE to remove lowercase range instruction
git-svn-id: file:///home/svn/incoming/trunk@3607 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-21 13:28:04 +00:00
pusscat 7ef4741966 Hehe - sorry guys ;)
git-svn-id: file:///home/svn/incoming/trunk@3606 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-21 12:31:11 +00:00
bmc 71fc4bd219 * random states
* random hostnames


git-svn-id: file:///home/svn/incoming/trunk@3605 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-21 03:59:07 +00:00
pusscat f678425f07 Add non-alpha encoder (not quite done, but passes tests with \xcc)
git-svn-id: file:///home/svn/incoming/trunk@3604 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-20 21:11:33 +00:00
pusscat 9c02084f20 More dec -> mod for +/- offset support
git-svn-id: file:///home/svn/incoming/trunk@3603 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-20 15:07:10 +00:00
pusscat 44b14f01cb Fix alpha_uppercase:
dec -> mod (in accordance with +/- offset ability)
    remove 0x37 from mod suffix, which is unnecessary and screwing the fixups by one char


git-svn-id: file:///home/svn/incoming/trunk@3602 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-20 14:35:18 +00:00
HD Moore 589205e5ff Nearly 100% functional
git-svn-id: file:///home/svn/incoming/trunk@3600 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-16 04:41:54 +00:00
HD Moore 17d2ba798b More work on the msfpescan port
git-svn-id: file:///home/svn/incoming/trunk@3599 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-16 01:56:17 +00:00
HD Moore da41886856 lib/msf/core/module_manager.rb - bug fixes to make it work with ruby-cvs
lib/rex/arch/x86.rb - removed illegal 'break' statements

lib/rex/peparsey* - imported from spn/, renamed classes to Rex
msfpescan - first version from spoonm


git-svn-id: file:///home/svn/incoming/trunk@3598 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-15 20:26:41 +00:00
Matt Miller be710b65a2 fix poly generation bug
git-svn-id: file:///home/svn/incoming/trunk@3596 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-14 04:09:53 +00:00
Spoon M 4b9033be00 pack bug found during bh eu
git-svn-id: file:///home/svn/incoming/trunk@3594 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-10 00:21:43 +00:00
HD Moore f4736c3eae Minor improvements
git-svn-id: file:///home/svn/incoming/trunk@3593 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-08 06:35:35 +00:00
Matt Miller 243127447b some meterp bugfixes found while creating a blog post :)
git-svn-id: file:///home/svn/incoming/trunk@3592 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-07 03:02:37 +00:00
HD Moore 457f476b4c Changed to use spoon's meethod
git-svn-id: file:///home/svn/incoming/trunk@3590 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-03 04:50:26 +00:00
HD Moore 7b4fb0d6aa Tons of fixes for aux/recon/db
git-svn-id: file:///home/svn/incoming/trunk@3589 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-03 04:33:30 +00:00
HD Moore bd6ee5ecf8 Background auxiliary modules
git-svn-id: file:///home/svn/incoming/trunk@3588 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-03 00:33:06 +00:00
HD Moore ccb5aeac2f No need, since exploit mixins are now compat
git-svn-id: file:///home/svn/incoming/trunk@3587 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-02 23:32:17 +00:00
HD Moore 2299abf723 More recon hackery
git-svn-id: file:///home/svn/incoming/trunk@3586 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-02 23:26:33 +00:00
HD Moore b4189e521d More recon hackery
git-svn-id: file:///home/svn/incoming/trunk@3585 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-02 22:33:34 +00:00
HD Moore 3aa45638df Added -c, -r, -v options to msfconsole
git-svn-id: file:///home/svn/incoming/trunk@3584 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-02 16:28:02 +00:00
bmc 676a582814 oops, forgot to add these
git-svn-id: file:///home/svn/incoming/trunk@3582 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-30 15:13:14 +00:00
HD Moore 46709d6222 cosmetic
git-svn-id: file:///home/svn/incoming/trunk@3581 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-30 15:06:41 +00:00
bmc dbf0fcf0f2 * add object_id and random object_id call evasion
git-svn-id: file:///home/svn/incoming/trunk@3579 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-29 20:46:29 +00:00
bmc 839ad37dc4 * update testset
git-svn-id: file:///home/svn/incoming/trunk@3578 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-29 19:34:46 +00:00
bmc c96065fc3b * update testset, thanks to changes HD made
git-svn-id: file:///home/svn/incoming/trunk@3577 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-29 19:34:25 +00:00
bmc ca5da765c5 * fix oddball bug with newlines thanks to using Regexp to split chars
git-svn-id: file:///home/svn/incoming/trunk@3576 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-29 18:40:15 +00:00
bmc d631902fc1 text.rb
git-svn-id: file:///home/svn/incoming/trunk@3575 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-29 18:39:42 +00:00
HD Moore 096a7e6c71 Fixed event dispatching for db objects
git-svn-id: file:///home/svn/incoming/trunk@3574 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-21 05:29:26 +00:00
HD Moore bab8745ba8 Backend code
git-svn-id: file:///home/svn/incoming/trunk@3573 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-21 04:37:48 +00:00
HD Moore e7a6f2b4b3 The 'set' command now allows the value to contain spaces
git-svn-id: file:///home/svn/incoming/trunk@3572 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-19 18:39:43 +00:00
Matt Miller a6726c8df7 fix for option import issue when options had spaces
git-svn-id: file:///home/svn/incoming/trunk@3571 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-16 16:33:32 +00:00
bmc 9a0b748a4b * add header test suite
git-svn-id: file:///home/svn/incoming/trunk@3567 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-09 19:52:34 +00:00
bmc 5b675262be properlly support responses when we get a request like this:
(echo "GET / HTTP/1.0"; echo ) |nc IP PORT


git-svn-id: file:///home/svn/incoming/trunk@3566 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-09 19:51:37 +00:00
HD Moore 05bda2529a More aux, first hack on multi-target firefox exploit
git-svn-id: file:///home/svn/incoming/trunk@3565 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-09 17:32:53 +00:00
HD Moore 5411701d3f Aux mode updates
git-svn-id: file:///home/svn/incoming/trunk@3564 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-09 17:28:37 +00:00
bmc 1f9b1d3806 * add request fragmentation as an IDS evasion
git-svn-id: file:///home/svn/incoming/trunk@3563 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-08 19:14:10 +00:00
bmc 223d22c2e6 * object cleanups
* add tcp request fragmentation support


git-svn-id: file:///home/svn/incoming/trunk@3562 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-08 19:13:27 +00:00
bmc 42e0af735a * add XDR encoder test
git-svn-id: file:///home/svn/incoming/trunk@3561 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-08 17:26:35 +00:00
bmc f5ec95bf80 * blah, rex exceptions
git-svn-id: file:///home/svn/incoming/trunk@3560 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-08 17:25:59 +00:00
bmc 9d54b40c63 * blah. rex exceptions
git-svn-id: file:///home/svn/incoming/trunk@3559 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-08 17:25:40 +00:00
bmc dde940e876 * moving XDR to Rex::Encoder, since its really an encoder. BTW, one of the tests fails... this I know, I didn't write the code that implements it, just the test that fails :P
git-svn-id: file:///home/svn/incoming/trunk@3558 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 22:44:49 +00:00
bmc 93870878fe * no self wrapper to unicode
* update tests to make more sense when they fail


git-svn-id: file:///home/svn/incoming/trunk@3557 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 20:19:30 +00:00
bmc 57d50528f2 * add
git-svn-id: file:///home/svn/incoming/trunk@3556 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 16:41:48 +00:00
Matt Miller e22b38ee8c one other change
git-svn-id: file:///home/svn/incoming/trunk@3555 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 07:07:00 +00:00
Matt Miller 8b4ddab401 fix for module caching issues with rexploit
git-svn-id: file:///home/svn/incoming/trunk@3554 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 07:05:41 +00:00
HD Moore feca661373 Fixed typos in the license
Fixed exception issues


git-svn-id: file:///home/svn/incoming/trunk@3552 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-07 06:50:25 +00:00
HD Moore c0a8b6cf22 Fixed auxiliarytarget issue, updated frame.rb to handle on-demand module loading
git-svn-id: file:///home/svn/incoming/trunk@3551 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-04 16:46:15 +00:00
HD Moore 0b1d97f653 Committed
git-svn-id: file:///home/svn/incoming/trunk@3550 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-01 16:16:08 +00:00
HD Moore 7e26814b6c actions
git-svn-id: file:///home/svn/incoming/trunk@3549 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-28 06:09:00 +00:00
bmc 29b182eea8 * expose junk uri end
* expose junk param start


git-svn-id: file:///home/svn/incoming/trunk@3547 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:59:41 +00:00
bmc 279abda264 * uri encoding is now part of Rex::Text
* add junk param start
* add junk URI end


git-svn-id: file:///home/svn/incoming/trunk@3546 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:55:22 +00:00
bmc 53dfa3c83d * forgot the 'none' encoding in the test
git-svn-id: file:///home/svn/incoming/trunk@3545 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:53:36 +00:00
bmc 64c7a2063f * add uri encoding as a text modifier
* add multibyte hex encoding.  useful for %u


git-svn-id: file:///home/svn/incoming/trunk@3544 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:51:17 +00:00
Matt Miller abd3c7a77f fix for module reloading with rexploit
git-svn-id: file:///home/svn/incoming/trunk@3542 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-24 15:47:10 +00:00
bmc 59f16d0a1b * add MS's widechar encoding support, named uhwtfms :P (note, to use in something like a URI, it needs to be cleaned up... since you have to send %uXXXX instead of just 2 bytes raw encoded)
git-svn-id: file:///home/svn/incoming/trunk@3541 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-22 23:29:34 +00:00
Matt Miller 7cc1d53247 more improvements to demand module loading, fixes some incorrect assumptions
git-svn-id: file:///home/svn/incoming/trunk@3539 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 17:58:21 +00:00
Matt Miller f796330f60 fix for warnings and file does not exist errors in demand loading
git-svn-id: file:///home/svn/incoming/trunk@3538 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 17:17:25 +00:00
Matt Miller 20550431d6 fix for error when exploit is removed
git-svn-id: file:///home/svn/incoming/trunk@3537 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 16:36:58 +00:00
Matt Miller 3a37749de6 support for demand-loading of modules to improve load speed, expect problems
git-svn-id: file:///home/svn/incoming/trunk@3534 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 03:10:58 +00:00
bmc 553144418a * two tiny optimizations:
* Platform is far more frequently the reason for skipping, so make that first.
  * compact!, the builtin for deleting nil entries in an array


git-svn-id: file:///home/svn/incoming/trunk@3532 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-19 04:09:18 +00:00
bmc a73f024ce1 * less duplication, since the common case is just fine for all but a few instances
git-svn-id: file:///home/svn/incoming/trunk@3531 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-19 03:58:18 +00:00
vlad902 f2ab112647 Add verbosity flag (except for errors.)
git-svn-id: file:///home/svn/incoming/trunk@3530 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-18 17:12:25 +00:00
bmc 8422da47dd * verify we get all of the random entries we expect on a few of iterations
git-svn-id: file:///home/svn/incoming/trunk@3529 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-14 01:04:29 +00:00
bmc b56432346e * all non-printable characters are utf-8 by default
git-svn-id: file:///home/svn/incoming/trunk@3528 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-14 01:04:06 +00:00
bmc 882e8601d3 * use utf-7 'mode' instead of utf-7
git-svn-id: file:///home/svn/incoming/trunk@3527 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-13 22:52:55 +00:00
bmc bce161e622 * add utf-8 support, with overlong and invalid overlong encodings
* update utf-7 support to a mode to specify "all"


git-svn-id: file:///home/svn/incoming/trunk@3526 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-13 22:52:01 +00:00
Matt Miller 9a634f0df9 fix to import options in exploit simple
git-svn-id: file:///home/svn/incoming/trunk@3525 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-11 16:01:23 +00:00
bmc b091a21f2b * to_unicode now supports more than just utf-16le, which is still the default.
* add tests for all of the unicode variations.


git-svn-id: file:///home/svn/incoming/trunk@3524 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 17:30:41 +00:00
bmc a0af1e9598 * a more complete selection of various unicode types supported by most browsers
git-svn-id: file:///home/svn/incoming/trunk@3523 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 17:29:37 +00:00
bmc 1c51681efe * add <object> base64 encoded objects, with 1 byte pad, 2 byte pad, and random space injection. Works fine on ie 4, firefox, and safari.
git-svn-id: file:///home/svn/incoming/trunk@3522 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 15:45:37 +00:00
bmc 524c0a3f74 * add 'none' encoding
git-svn-id: file:///home/svn/incoming/trunk@3521 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 15:44:15 +00:00
Matt Miller 9c537c42fd missed option
git-svn-id: file:///home/svn/incoming/trunk@3520 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-08 01:12:26 +00:00
Matt Miller 6a52aae59a switch to use a service specific user/pass datastore option to avoid payload conflicts
git-svn-id: file:///home/svn/incoming/trunk@3519 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-08 01:07:47 +00:00
bmc 1351ceed1c * add support to hex/%u encode a URI
git-svn-id: file:///home/svn/incoming/trunk@3517 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:57 +00:00
bmc ca315abe1b * add uri-encoding as an evasion method (though, exploits could hard code it if they need to...)
git-svn-id: file:///home/svn/incoming/trunk@3516 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:10 +00:00
bmc c2c01a2d9e * use full path to the const, since in odd situations, the const isn't in scope. (WTF?)
git-svn-id: file:///home/svn/incoming/trunk@3513 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:24:45 +00:00
bmc 0f6055c73c support both POST and SEARCH as basic post request types.
git-svn-id: file:///home/svn/incoming/trunk@3512 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:23:52 +00:00
bmc 32dfdc114c * allow a request to pass a timeout (and by allowing passing a timeout, the ability to not parse the response)
git-svn-id: file:///home/svn/incoming/trunk@3511 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:22:47 +00:00
HD Moore 0ea7fc3ec4 Minor tweaks
git-svn-id: file:///home/svn/incoming/trunk@3508 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 20:18:45 +00:00
HD Moore dc42740402 Added a new JObs tab
git-svn-id: file:///home/svn/incoming/trunk@3507 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 19:43:05 +00:00
HD Moore 5b497d5e4d Added Irix platform
Tweaked reverse.rb to use a subshell and background it
Added Irix lpdexec


git-svn-id: file:///home/svn/incoming/trunk@3505 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 18:10:08 +00:00
vlad902 3acdd81b9e metasploit -> mozilla
git-svn-id: file:///home/svn/incoming/trunk@3504 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 01:56:34 +00:00
HD Moore 868d7bf561 Working findtag + samba
Removed call to evasions that didnt have corresponding definition


git-svn-id: file:///home/svn/incoming/trunk@3501 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 21:04:50 +00:00
bmc 40961655d6 * enable evasions on the socket as they come in
git-svn-id: file:///home/svn/incoming/trunk@3498 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:56:50 +00:00
bmc 3adb2211b8 * add tcp segment size evasion
* add tcp write delay evasion


git-svn-id: file:///home/svn/incoming/trunk@3497 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:55:56 +00:00