05f7a90e19
fix disclosure date
...
git-svn-id: file:///home/svn/framework3/trunk@11228 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-05 17:46:31 +00:00
5dad5e2ee5
consistency
...
git-svn-id: file:///home/svn/framework3/trunk@11227 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-05 15:08:22 +00:00
f687a3460c
move all test modules (aux/exploits) into test/modules directory, use loadpath to load them
...
git-svn-id: file:///home/svn/framework3/trunk@11218 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-04 01:59:24 +00:00
45813f9d9f
reset status after first connect, improve success message when a password works
...
git-svn-id: file:///home/svn/framework3/trunk@11217 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-03 21:36:11 +00:00
c7dc070f5c
skip users with too long names (as reported by the server)
...
git-svn-id: file:///home/svn/framework3/trunk@11216 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-03 21:22:39 +00:00
e93c196363
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@11214 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-03 12:34:38 +00:00
50d6c9659a
added coverage for the proftpd backdoor.
...
git-svn-id: file:///home/svn/framework3/trunk@11210 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-02 22:33:37 +00:00
59974635b1
fix cve reference
...
git-svn-id: file:///home/svn/framework3/trunk@11208 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-02 21:10:03 +00:00
b3325fc133
unforgivable typo
...
git-svn-id: file:///home/svn/framework3/trunk@11207 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-02 18:08:39 +00:00
382f902c24
add retry on connection refused
...
git-svn-id: file:///home/svn/framework3/trunk@11206 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-02 18:06:51 +00:00
0204cedca6
Makes the print_status displays more consistent between smb_login and psexec by moving some of the domain display functions up into exploit/smb proper.
...
git-svn-id: file:///home/svn/framework3/trunk@11204 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-02 17:29:26 +00:00
3fdfb3e945
syntax errors
...
git-svn-id: file:///home/svn/framework3/trunk@11195 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-01 19:26:57 +00:00
9156509c58
clarify authors list
...
git-svn-id: file:///home/svn/framework3/trunk@11192 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-01 16:23:04 +00:00
e6f640bc17
add cve and osvdb refs
...
git-svn-id: file:///home/svn/framework3/trunk@11189 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-01 03:18:05 +00:00
14ea7a85bb
svn keywords
...
git-svn-id: file:///home/svn/framework3/trunk@11188 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-01 02:03:25 +00:00
5ed387aa38
added exploit module enjoysapgui_comp_download.rb
...
git-svn-id: file:///home/svn/framework3/trunk@11187 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-01 02:01:46 +00:00
62a425f6b6
add rjb signing back in to java_signed_applet
...
git-svn-id: file:///home/svn/framework3/trunk@11186 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-01 01:29:08 +00:00
40ace0a218
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@11183 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 23:07:00 +00:00
c6cf03021d
add xion audio player exploit from m_101
...
git-svn-id: file:///home/svn/framework3/trunk@11182 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 22:03:55 +00:00
26a9fe6fc7
add some missing CVE references
...
git-svn-id: file:///home/svn/framework3/trunk@11180 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 20:19:18 +00:00
d5835fe7b0
remove commented out REST portion
...
git-svn-id: file:///home/svn/framework3/trunk@11179 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 19:11:42 +00:00
98e8ec4cc9
add REST version of axis2 deployer
...
git-svn-id: file:///home/svn/framework3/trunk@11178 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 18:17:33 +00:00
191c4e8eb7
make java_signed_applet work with generic java payloads, but keep the default target as Windows/x86 since it is by far the most common victim.
...
git-svn-id: file:///home/svn/framework3/trunk@11172 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 03:50:40 +00:00
225bf0738e
improve handling of return from connect_from_privileged_port, rework rlogin fromuser merging
...
git-svn-id: file:///home/svn/framework3/trunk@11171 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 02:00:58 +00:00
1eda716b70
fix another ruby-ism problem checking modulus return
...
git-svn-id: file:///home/svn/framework3/trunk@11166 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-30 00:16:53 +00:00
c45314bf4e
use usernames from the USERPASS_FILE
...
git-svn-id: file:///home/svn/framework3/trunk@11149 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 07:52:20 +00:00
4c26dfbfd8
lol? skip on error?!
...
git-svn-id: file:///home/svn/framework3/trunk@11147 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 07:38:12 +00:00
5b6a08e35c
somewhat fix handling of USERPASS_FILE
...
git-svn-id: file:///home/svn/framework3/trunk@11146 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 07:32:00 +00:00
7fe5261674
switch to IANA short names
...
git-svn-id: file:///home/svn/framework3/trunk@11145 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 07:14:40 +00:00
c50fd9466f
ignore usernames, we dont use them
...
git-svn-id: file:///home/svn/framework3/trunk@11144 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 06:09:57 +00:00
14432f7087
better error for failures w/fromuser only
...
git-svn-id: file:///home/svn/framework3/trunk@11143 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 06:08:02 +00:00
2e8728a637
add custom passwords+fromusers combined bruting, some fixes
...
git-svn-id: file:///home/svn/framework3/trunk@11140 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 06:01:43 +00:00
dfe3aff6bd
add custom bruting using FROMUSER/FROMUSER_FILE, report errors better
...
git-svn-id: file:///home/svn/framework3/trunk@11139 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 06:00:50 +00:00
f9ecc83245
remove rservices mixing, its not used
...
git-svn-id: file:///home/svn/framework3/trunk@11138 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 05:59:48 +00:00
4535c1c260
tweaks from sherl0ck_
...
git-svn-id: file:///home/svn/framework3/trunk@11136 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 04:12:46 +00:00
07703eca66
try harder, report errors better
...
git-svn-id: file:///home/svn/framework3/trunk@11135 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-25 01:28:52 +00:00
484b18c472
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@11133 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-24 22:42:18 +00:00
1a771d5192
retry up to 5 times with exponential back off
...
git-svn-id: file:///home/svn/framework3/trunk@11132 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-24 20:58:42 +00:00
10892a3fc3
fix array commas
...
git-svn-id: file:///home/svn/framework3/trunk@11130 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-24 20:31:45 +00:00
4275ee528d
add DoS module for ms10-065, thanks!
...
git-svn-id: file:///home/svn/framework3/trunk@11129 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-24 20:10:01 +00:00
8f55c83ed0
clean up some oracle titles
...
git-svn-id: file:///home/svn/framework3/trunk@11128 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-24 19:43:49 +00:00
e9faf75503
fix some more titles with periods
...
git-svn-id: file:///home/svn/framework3/trunk@11127 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-24 19:35:38 +00:00
f68fc02f9c
include capture mixin for modules that use it
...
git-svn-id: file:///home/svn/framework3/trunk@11126 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-24 19:25:18 +00:00
8c46a6be51
renamed.
...
git-svn-id: file:///home/svn/framework3/trunk@11125 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-24 13:44:46 +00:00
0d5c85b67a
Improve Oracle module Name fields
...
git-svn-id: file:///home/svn/framework3/trunk@11122 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-24 06:10:13 +00:00
1d8e1e332c
add better error reporting
...
git-svn-id: file:///home/svn/framework3/trunk@11120 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-24 01:11:49 +00:00
c152900db6
this module doesn use the java mixin, remove it
...
git-svn-id: file:///home/svn/framework3/trunk@11119 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-24 01:11:36 +00:00
cf25de6658
fix argument error due to bad override
...
git-svn-id: file:///home/svn/framework3/trunk@11114 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-23 18:12:08 +00:00
b55633af60
update enum_delicious, fixes #3230
...
git-svn-id: file:///home/svn/framework3/trunk@11107 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-23 01:26:59 +00:00
9c668b8daf
Super-duper rservices commit -
...
1. Added rsh, rlogin, and rexec auth brute scanners
2. Login negotation moved into new Msf::Auxiliary::Login mixin
3. Centralized session registration for auth brute scanners
4. Telnet and SSH auth brute scanners updated to use new mixins
5. Previously committed rservices mixin (r11093)
git-svn-id: file:///home/svn/framework3/trunk@11106 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-23 01:23:24 +00:00
e295408327
typo!
...
git-svn-id: file:///home/svn/framework3/trunk@11103 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-22 22:43:34 +00:00
52389d28f4
make windows the default target
...
git-svn-id: file:///home/svn/framework3/trunk@11102 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-22 20:54:25 +00:00
7a3770f87b
don't use java_basicservice_impl in browser autopwn because it doesn't work in an iframe against IE and causes popups in other browsers
...
git-svn-id: file:///home/svn/framework3/trunk@11101 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-22 20:44:16 +00:00
669ef3b86e
clarify targets
...
git-svn-id: file:///home/svn/framework3/trunk@11099 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-22 17:53:49 +00:00
75873aedb4
add exploit for foxit reader title stack bof
...
git-svn-id: file:///home/svn/framework3/trunk@11096 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-22 17:43:42 +00:00
53f6416dad
Makes SMB login console output more readable for default "." domain brute forcing -- masks the domain-part for the username, drops it from the machine name unless it's something more interesting.
...
git-svn-id: file:///home/svn/framework3/trunk@11095 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-22 16:16:40 +00:00
80853f0e10
Make the MySQL aux scanner a little more helpful in the event of a missing target.
...
git-svn-id: file:///home/svn/framework3/trunk@11094 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-22 14:12:35 +00:00
3bd3ea5724
carlos, plz use the ./tools/msftidy.rb script, see #3198
...
git-svn-id: file:///home/svn/framework3/trunk@11091 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-22 09:11:25 +00:00
d608db778c
we're not sending an applet, just a jar, clarify the output
...
git-svn-id: file:///home/svn/framework3/trunk@11084 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-21 19:58:04 +00:00
6f7af42667
add an exploit for cve-2010-3563, thanks Matthias Kaiser
...
git-svn-id: file:///home/svn/framework3/trunk@11078 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-19 23:02:35 +00:00
eab8c24b8b
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@11074 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-19 20:43:56 +00:00
dbcb6d0dc4
use max instead of .sort.last
...
git-svn-id: file:///home/svn/framework3/trunk@11073 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-19 18:34:10 +00:00
3b6edefe44
fix up auto targeting to not assign to "target"
...
git-svn-id: file:///home/svn/framework3/trunk@11072 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-19 18:33:34 +00:00
b42a04a7aa
add cakephp exploit from tdz
...
git-svn-id: file:///home/svn/framework3/trunk@11070 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-19 18:30:07 +00:00
8f3b64e15c
add cve and osvdb refs
...
git-svn-id: file:///home/svn/framework3/trunk@11068 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-19 14:17:35 +00:00
df9a0cfea8
added exploit module realwin_10.rb
...
git-svn-id: file:///home/svn/framework3/trunk@11067 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-18 23:45:40 +00:00
1729f8f075
removed extra stuff.
...
git-svn-id: file:///home/svn/framework3/trunk@11063 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-18 12:31:55 +00:00
a4e77c13cc
Applied patch by Manuel Schilt
...
git-svn-id: file:///home/svn/framework3/trunk@11059 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-18 01:58:46 +00:00
2fe78ec685
double grammar fail
...
git-svn-id: file:///home/svn/framework3/trunk@11053 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-16 20:23:11 +00:00
f4d2af3e73
fix typo
...
git-svn-id: file:///home/svn/framework3/trunk@11052 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-16 20:17:25 +00:00
25611afb6c
add sap businessobject modules from jabra, woot!
...
git-svn-id: file:///home/svn/framework3/trunk@11046 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-15 05:12:48 +00:00
bd7f6eec10
Typo.
...
git-svn-id: file:///home/svn/framework3/trunk@11045 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-14 23:39:29 +00:00
32c26f18f3
style compliance fixes, set test exploits to manual rank, fix s/ranking/rank/ in some exploits
...
git-svn-id: file:///home/svn/framework3/trunk@11039 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-14 19:03:24 +00:00
d0d4e0b8a4
remove unecessary instruction, thx StalkR!
...
git-svn-id: file:///home/svn/framework3/trunk@11034 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-14 03:41:12 +00:00
77bc5cf6cd
Big VNC update:
...
* Created Rex::Proto::RFB
* Updated vnc_none_auth scanner to use Rex::Proto::RFB::Client
* Added vnc_login (refactored from carstein)
* Created an initial vnc_passwords.txt file
* Removed cipher/des.rb - incompatible license
* Updated getvncpw script to use new Rex::Proto::RFB::Cipher.decrypt
git-svn-id: file:///home/svn/framework3/trunk@11033 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-14 03:37:45 +00:00
dc5116f9df
Move the crawler mixin to an auxiliary
...
git-svn-id: file:///home/svn/framework3/trunk@11026 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-13 06:55:19 +00:00
f457ccb8f7
Add the crawler mixin and a sample form extractor crawler
...
git-svn-id: file:///home/svn/framework3/trunk@11025 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-13 06:40:56 +00:00
4b1a83ce48
Update the date based on ZDI information
...
git-svn-id: file:///home/svn/framework3/trunk@11021 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-13 05:13:42 +00:00
013be5e920
Tagging as Good ranking for now
...
git-svn-id: file:///home/svn/framework3/trunk@11020 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-13 05:12:54 +00:00
2a917b1c8b
Add standard header
...
git-svn-id: file:///home/svn/framework3/trunk@11019 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-13 05:11:37 +00:00
062d0506aa
Merge in an exploit for the Novell NetWare SunRPC CALLIT overflow. Thanks!
...
git-svn-id: file:///home/svn/framework3/trunk@11018 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-13 04:53:51 +00:00
4a5bee45c5
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@11015 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-12 23:14:46 +00:00
2aca76ef66
added exploit module freenas_exec_raw.rb. php/meterpreter ftw.
...
git-svn-id: file:///home/svn/framework3/trunk@11014 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-12 23:02:28 +00:00
cf6da2c594
add http form fuzzer from corelanc0d3r
...
git-svn-id: file:///home/svn/framework3/trunk@11013 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-12 20:59:36 +00:00
a12d9f8dbf
This patch adds detailed thread tracking across the metasploit framework, along with a new console command (threads) to manage these. This level of tracking is required to accurately monitor background tasks, assist with debugging, and kill orphaned threads.
...
git-svn-id: file:///home/svn/framework3/trunk@11003 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-12 06:19:49 +00:00
a6bade8795
convert to use metasm, also fixes silly off-by-one bug
...
git-svn-id: file:///home/svn/framework3/trunk@11000 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 23:07:50 +00:00
326dc42bca
add EncodedPayload#encoded_exe, encoded_jar, and encoded_war. simplifies exploits that need java and native payloads. see #406 and #3009
...
git-svn-id: file:///home/svn/framework3/trunk@10999 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 23:01:35 +00:00
3992eb7ef8
Mass RE-update: fix all framework URL references
...
git-svn-id: file:///home/svn/framework3/trunk@10998 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 22:43:22 +00:00
9fc6f2f3a3
Mass update: fix all framework URL references
...
git-svn-id: file:///home/svn/framework3/trunk@10996 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 22:25:13 +00:00
9fb0e1a0bb
fix comments
...
git-svn-id: file:///home/svn/framework3/trunk@10995 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 22:19:34 +00:00
2f118dfc50
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@10990 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 20:09:15 +00:00
a758dfe37d
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10988 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 18:20:52 +00:00
8042bf202f
added exploit module bacnet_csv.rb
...
git-svn-id: file:///home/svn/framework3/trunk@10985 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 16:35:01 +00:00
a34096c845
For smb_login, preserve_domains is now default to true. I think it's less surprising that way.
...
git-svn-id: file:///home/svn/framework3/trunk@10982 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 14:03:02 +00:00
9aa7db5bad
More domain love for smb_login.
...
git-svn-id: file:///home/svn/framework3/trunk@10979 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 04:12:17 +00:00
eab0a40caa
switch up IE6 target to work on older version
...
git-svn-id: file:///home/svn/framework3/trunk@10978 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 02:54:56 +00:00
996cc49408
Be more accomodating for SMB domains when bruteforcing SMB hosts.
...
git-svn-id: file:///home/svn/framework3/trunk@10977 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 02:07:31 +00:00
61e5d00722
switch title, comment out IE8 target for now
...
git-svn-id: file:///home/svn/framework3/trunk@10963 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-09 23:12:48 +00:00
9e8a567dd3
See #3146 . Don't try string ops on $1 and $2 -- drop these into a more clearly labeled temp variable first, and handle them safely.
...
Also, I don't think the match newline regex directive helps much. Also, print a more meaningful status message in the event of a lack of a Server: line fignerprint.
Thanks for the bug report!
git-svn-id: file:///home/svn/framework3/trunk@10962 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-09 18:48:07 +00:00
7a2e25fd28
Fixes #3146 by unbreaking this code
...
git-svn-id: file:///home/svn/framework3/trunk@10961 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-09 17:48:41 +00:00
13b15c9a2c
An incremental advance for this mighty UPnP probe module.
...
git-svn-id: file:///home/svn/framework3/trunk@10959 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-09 15:19:28 +00:00
fa962647f9
Adds an auxiliary module to probe the local gateway via UPnP. Kinda neat.
...
git-svn-id: file:///home/svn/framework3/trunk@10957 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-09 06:24:32 +00:00
5073e28854
Added citect_scada_odbc exploit module.
...
git-svn-id: file:///home/svn/framework3/trunk@10956 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-09 05:07:18 +00:00
470fed6609
add cookie bruting with ubuntu 10.04 target
...
git-svn-id: file:///home/svn/framework3/trunk@10951 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-08 17:16:32 +00:00
22e56467a1
convert to brute force
...
git-svn-id: file:///home/svn/framework3/trunk@10950 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-08 17:02:29 +00:00
0d664c3a71
add a Spawn advanced option to java stagers, see #3009
...
git-svn-id: file:///home/svn/framework3/trunk@10946 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-08 06:08:09 +00:00
be7d349d60
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@10940 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-07 14:58:55 +00:00
416f6966e3
merge changes from peter
...
git-svn-id: file:///home/svn/framework3/trunk@10937 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-06 23:53:19 +00:00
f7717e5f51
added exploit module moxa_mdmtool.rb
...
git-svn-id: file:///home/svn/framework3/trunk@10935 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-06 22:25:36 +00:00
58f62bedda
fix load errors
...
git-svn-id: file:///home/svn/framework3/trunk@10933 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-06 19:19:35 +00:00
2a69811344
raise RuntimeError instead of return
...
git-svn-id: file:///home/svn/framework3/trunk@10932 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-06 18:09:28 +00:00
b3713f9d46
handle 302's, print error codes since its important
...
git-svn-id: file:///home/svn/framework3/trunk@10928 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-06 14:45:22 +00:00
0b565d8619
add linux version (Debian unstable), update freebsd version
...
git-svn-id: file:///home/svn/framework3/trunk@10922 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-05 21:41:37 +00:00
aabe2c1260
oops, missed this one, see #3109
...
git-svn-id: file:///home/svn/framework3/trunk@10920 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-05 16:26:58 +00:00
f638b3d386
fix a load error
...
git-svn-id: file:///home/svn/framework3/trunk@10918 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-05 13:37:36 +00:00
410cd17935
first try on modular crawling
...
git-svn-id: file:///home/svn/framework3/trunk@10915 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-05 04:00:49 +00:00
338d6e3693
add osvdb refs
...
git-svn-id: file:///home/svn/framework3/trunk@10914 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-05 02:58:01 +00:00
b0f64ebba1
add a debug target
...
git-svn-id: file:///home/svn/framework3/trunk@10912 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-05 00:08:55 +00:00
76123e79c1
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10909 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-04 23:59:56 +00:00
b7f2d57709
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10908 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-04 23:50:35 +00:00
979ddcd8e5
add exploit for cve-2010-3962
...
git-svn-id: file:///home/svn/framework3/trunk@10907 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-04 23:44:23 +00:00
f517b88d9c
added exploit modules lgserver_multi.rb and moxa_mediadbplayback.rb
...
git-svn-id: file:///home/svn/framework3/trunk@10904 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-04 22:19:26 +00:00
cabfd0c2f2
add exploit for cve-2010-3867
...
git-svn-id: file:///home/svn/framework3/trunk@10900 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-04 18:12:11 +00:00
fc708df5c6
Added exploit module pgp_keyserver7.
...
git-svn-id: file:///home/svn/framework3/trunk@10897 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-04 15:44:21 +00:00
dee671318e
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10895 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-04 02:54:16 +00:00
5421be199a
adobe xml inject aux module
...
git-svn-id: file:///home/svn/framework3/trunk@10894 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-04 02:11:31 +00:00
99eadeff89
added exploit module lgserver_rxssetdatagrowthscheduleandfilter.rb
...
git-svn-id: file:///home/svn/framework3/trunk@10893 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-04 01:51:54 +00:00
e276697af9
heh, put not puts.
...
git-svn-id: file:///home/svn/framework3/trunk@10892 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-03 22:09:44 +00:00
b97cbff5af
Added webster_http exploit module.
...
git-svn-id: file:///home/svn/framework3/trunk@10887 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-03 12:19:19 +00:00
d79bbd8440
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@10886 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-03 11:17:25 +00:00
45fd14417c
removed. worked fine under IIS 6.0
...
git-svn-id: file:///home/svn/framework3/trunk@10874 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-02 23:51:17 +00:00
b12d03b7c4
add exploit module coldfusion_fckeditor.rb
...
git-svn-id: file:///home/svn/framework3/trunk@10865 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-02 20:13:36 +00:00
b572414eac
add exploit for cve-2010-3654
...
git-svn-id: file:///home/svn/framework3/trunk@10857 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-01 22:34:13 +00:00
21f16f63a1
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10855 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-01 21:45:49 +00:00
9c6f771252
Suppress the error when your @result is nil in smtp_enum.rb
...
git-svn-id: file:///home/svn/framework3/trunk@10853 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-01 13:56:42 +00:00
730ec09464
Allow for blank FTP usernames. Just not nil ones.
...
git-svn-id: file:///home/svn/framework3/trunk@10834 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-27 20:12:51 +00:00
1f235a8c9b
remove 64-bit targets since we dont have an x86_64 linux exe generator
...
git-svn-id: file:///home/svn/framework3/trunk@10833 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-27 17:21:54 +00:00
9f5fca12f7
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@10828 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-26 15:28:04 +00:00
e78aa83021
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10821 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-25 20:58:49 +00:00
f909b360ba
note tested on 6u11
...
git-svn-id: file:///home/svn/framework3/trunk@10820 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-25 20:22:08 +00:00
3fffd15549
add exploit for cve-2010-3552 (w/dep bypass)
...
git-svn-id: file:///home/svn/framework3/trunk@10819 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-25 20:21:41 +00:00
672fc87055
fixed typo, thx rmkml
...
git-svn-id: file:///home/svn/framework3/trunk@10803 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-23 23:35:44 +00:00
cf500fb294
Subtract the stupid
...
git-svn-id: file:///home/svn/framework3/trunk@10792 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-23 07:09:59 +00:00
be841a4810
check for failed serverinfo result
...
git-svn-id: file:///home/svn/framework3/trunk@10788 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 21:32:12 +00:00
3b2c43fac4
get rid of the redundant second java target
...
git-svn-id: file:///home/svn/framework3/trunk@10785 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 20:07:18 +00:00
0251c446f1
add cve, osvdb refs
...
git-svn-id: file:///home/svn/framework3/trunk@10784 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 12:21:30 +00:00
ddf8294beb
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@10783 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 12:09:10 +00:00
56839ccf36
stupid debug prints
...
git-svn-id: file:///home/svn/framework3/trunk@10782 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 10:24:28 +00:00
f33d7cc670
revamp java payloads and make shells work with tomcat_mgr_deploy. tested java_trusted_chain and java_tester to verify that this doesn't break other java payload usage. see #3009 and #2973 , meterpreter doesn't work yet, so not marking resolved.
...
git-svn-id: file:///home/svn/framework3/trunk@10781 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 10:19:51 +00:00
7a9fe2c4d7
add exploit module for cve-2010-3585
...
git-svn-id: file:///home/svn/framework3/trunk@10780 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 06:16:31 +00:00
6bd75bb2d5
add shockwave exploit from abysssec/rel1k
...
git-svn-id: file:///home/svn/framework3/trunk@10779 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 03:15:22 +00:00
27d2761ec0
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@10775 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-21 11:41:18 +00:00
6f56086df9
See #2888 . Editing the title and description to reflect the multitude of Barracuda products affected by this module. Only three are actually listed specifically, but users can always refer to the OSVDB listing to get the complete list.
...
git-svn-id: file:///home/svn/framework3/trunk@10772 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-21 01:18:38 +00:00
1f1cd6af9f
commit a couple fixes from peter
...
git-svn-id: file:///home/svn/framework3/trunk@10766 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-20 15:15:50 +00:00
d384863a83
exploit module fatplayer_wav.rb from dookie.
...
git-svn-id: file:///home/svn/framework3/trunk@10764 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-20 11:53:12 +00:00
04858c69fc
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10758 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-19 22:54:19 +00:00
c6f1fa716d
add a java target, fixes #2973
...
git-svn-id: file:///home/svn/framework3/trunk@10755 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-19 22:36:59 +00:00
771ea5862c
fix typo
...
git-svn-id: file:///home/svn/framework3/trunk@10754 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-19 22:24:33 +00:00
1935f2007f
fix exe generation for auto-targetting
...
git-svn-id: file:///home/svn/framework3/trunk@10753 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-19 22:21:19 +00:00
7c1d8c7d05
fix false negatives, slightly reworked, fixes #2888
...
git-svn-id: file:///home/svn/framework3/trunk@10751 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-19 21:55:19 +00:00
20e2742596
fix indent
...
git-svn-id: file:///home/svn/framework3/trunk@10750 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-19 15:52:33 +00:00
042e71c357
add ports/refs for ZDI-10-214
...
git-svn-id: file:///home/svn/framework3/trunk@10747 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-19 14:28:52 +00:00
933eb3f6e6
switch to cr/lf vs just lf, fixes #2428
...
git-svn-id: file:///home/svn/framework3/trunk@10741 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-19 00:47:06 +00:00
0411111dfd
couple of modules from Luigi Auriemma's DATAC RealWin advisory
...
git-svn-id: file:///home/svn/framework3/trunk@10734 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-18 21:20:02 +00:00
2d6b995623
rename/clarify PrintfUtil encoder, fixes #2308
...
git-svn-id: file:///home/svn/framework3/trunk@10729 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-18 15:41:13 +00:00
8a17803279
add exploit for ZDI-10-190
...
git-svn-id: file:///home/svn/framework3/trunk@10726 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-18 07:05:22 +00:00
f3f7b1dc83
fix typo
...
git-svn-id: file:///home/svn/framework3/trunk@10725 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-18 07:04:57 +00:00
f88033f0cc
Merge in R3L1K's Powershell enhancements and powerdump code (hashdump through powershell)
...
git-svn-id: file:///home/svn/framework3/trunk@10721 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-17 17:39:43 +00:00
79c8e18e6b
Add a wfs_delay for reverse_https. This fixes #2508 and fixes #1764 . This should prevent the race condition that was the root cause of both issues.
...
git-svn-id: file:///home/svn/framework3/trunk@10716 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-17 02:33:47 +00:00
9902dcb9cc
Fixes #2661 by removing exitfunc as a parameter, since it needs to be ExitProcess
...
git-svn-id: file:///home/svn/framework3/trunk@10714 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-16 22:01:01 +00:00
5e1d181da5
Fixes #2132 by removing patchup version of vnc inject
...
git-svn-id: file:///home/svn/framework3/trunk@10708 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-16 18:10:10 +00:00
21bd23b9e6
Fixes #2786
...
git-svn-id: file:///home/svn/framework3/trunk@10707 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-16 17:53:27 +00:00
62622d51c2
add osvdb refs
...
git-svn-id: file:///home/svn/framework3/trunk@10703 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-16 12:17:51 +00:00
97ebcd30a9
Fixes #788 by (finally!) committing Daniele's IPv6 link-local IPv6 scanner. Note that the timing can be a little touchy for this module (as well as for the IPv4 ARP scanner) but seems to be reliable enough on normal networks when scanning a /24.
...
Sorry for the delay!
git-svn-id: file:///home/svn/framework3/trunk@10700 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-15 22:48:18 +00:00
48bcc580b8
Fixes #2623 . This solves the original problem with the SNMP community scanner not respecting the ShowProgress toggle. The other fixes proposed in this bug really kind of seem to be quibbles over what's useful for verbosity and what's not. Please open another ticket for that with a unified diff of the proposed changes.
...
Thanks for the report!
git-svn-id: file:///home/svn/framework3/trunk@10697 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-15 20:11:51 +00:00
865b711b5c
Fixes #2974 . Adds an "Unknown" level to Exploit::CheckCode, fixes the URI check for exploit/unix/webapp/php_include (which was relying on Unknown).
...
git-svn-id: file:///home/svn/framework3/trunk@10694 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-15 12:24:17 +00:00
1f8bca0f3f
added auxiliary module for cve-2010-2415
...
git-svn-id: file:///home/svn/framework3/trunk@10691 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-15 00:20:04 +00:00
b49e81300a
fix auto-target exe generation
...
git-svn-id: file:///home/svn/framework3/trunk@10688 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-14 21:26:05 +00:00
1384ba6620
fix a typo. see #2578
...
git-svn-id: file:///home/svn/framework3/trunk@10680 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-14 18:24:56 +00:00
4ca2007d67
add ranking
...
git-svn-id: file:///home/svn/framework3/trunk@10665 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-13 03:03:24 +00:00
b11fbb67eb
oops, messed up whitespace
...
git-svn-id: file:///home/svn/framework3/trunk@10661 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-12 18:40:13 +00:00
e0e4aebcc1
fix a few stack bof vulnerability descriptions
...
git-svn-id: file:///home/svn/framework3/trunk@10660 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-12 18:39:21 +00:00
ad4064ed20
add ftp client fuzzer and exploits from corelanc0d3r!
...
git-svn-id: file:///home/svn/framework3/trunk@10658 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-12 17:31:18 +00:00
7e4f4b3791
silly whitespace tweak
...
git-svn-id: file:///home/svn/framework3/trunk@10642 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-11 19:30:57 +00:00
3e26e9ffd5
fix type in print
...
git-svn-id: file:///home/svn/framework3/trunk@10639 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-11 05:16:17 +00:00
9e6e29428a
add disclosure date
...
git-svn-id: file:///home/svn/framework3/trunk@10638 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-11 04:00:57 +00:00
8230bb6edf
update disclosure date
...
git-svn-id: file:///home/svn/framework3/trunk@10637 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-11 03:59:19 +00:00
06291bb78e
Clean up the barracuda module a bit (grammar and removal of the report_auth_info until its refactored)
...
git-svn-id: file:///home/svn/framework3/trunk@10631 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-10 17:45:30 +00:00
54133b79fd
add barracuda module from Tiago
...
git-svn-id: file:///home/svn/framework3/trunk@10627 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-10 01:42:26 +00:00
a3ad8f5061
Add a quick module for exploiting basic web cmd injection
...
git-svn-id: file:///home/svn/framework3/trunk@10624 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-09 21:32:19 +00:00
87d7368166
Next time, try a couple more test cases. :(
...
git-svn-id: file:///home/svn/framework3/trunk@10623 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-09 19:54:03 +00:00
fc755f7a7a
Fixes a bug where the return was getting ignored by each_user_pass for FTP. As a result, all usernames would get tried, instead of retiring a username once a good password was found.
...
git-svn-id: file:///home/svn/framework3/trunk@10622 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-09 19:03:49 +00:00
ae04e34cf7
fix some non-full-namespace includes
...
git-svn-id: file:///home/svn/framework3/trunk@10617 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-09 06:55:52 +00:00
ba2f6f5efa
add osvdb ref, add advisory link
...
git-svn-id: file:///home/svn/framework3/trunk@10613 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 22:59:19 +00:00
c6d2f8b550
huh?
...
git-svn-id: file:///home/svn/framework3/trunk@10612 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 22:39:58 +00:00
996dfe86db
fix egghunter reference
...
git-svn-id: file:///home/svn/framework3/trunk@10611 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 21:58:06 +00:00
dd380c0716
add nuance pdf stack bof exploit from corelan
...
git-svn-id: file:///home/svn/framework3/trunk@10610 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 21:52:43 +00:00
ede859f60e
use Msf::WindowsError, see #2214
...
git-svn-id: file:///home/svn/framework3/trunk@10607 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 19:51:50 +00:00
c2938323cc
Pretty much the same deal as r10592, but for SSH, which sometimes has similiar RST problems.
...
git-svn-id: file:///home/svn/framework3/trunk@10593 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 02:11:06 +00:00
df48b11093
Makes telnet_login a more resistant to intermittant RSTs. If a machine gives us a reset, try again with a backoff. Only after 3 retries should we give up entirely. You'd be amazed how many devices this is required for.
...
git-svn-id: file:///home/svn/framework3/trunk@10592 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 01:54:56 +00:00
Joshua Drake
Mario Ceballos
Steve Tornio
Tod Beardsley
James Lee
Jonathan Cran
Carlos Perez
HD Moore
Patrick Webster
cg