Joshua Drake
|
ad4064ed20
|
add ftp client fuzzer and exploits from corelanc0d3r!
git-svn-id: file:///home/svn/framework3/trunk@10658 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-12 17:31:18 +00:00 |
|
Joshua Drake
|
3e26e9ffd5
|
fix type in print
git-svn-id: file:///home/svn/framework3/trunk@10639 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-11 05:16:17 +00:00 |
|
Joshua Drake
|
9e6e29428a
|
add disclosure date
git-svn-id: file:///home/svn/framework3/trunk@10638 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-11 04:00:57 +00:00 |
HD Moore
|
06291bb78e
|
Clean up the barracuda module a bit (grammar and removal of the report_auth_info until its refactored)
git-svn-id: file:///home/svn/framework3/trunk@10631 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-10 17:45:30 +00:00 |
|
Joshua Drake
|
54133b79fd
|
add barracuda module from Tiago
git-svn-id: file:///home/svn/framework3/trunk@10627 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-10 01:42:26 +00:00 |
Tod Beardsley
|
87d7368166
|
Next time, try a couple more test cases. :(
git-svn-id: file:///home/svn/framework3/trunk@10623 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-09 19:54:03 +00:00 |
|
Tod Beardsley
|
fc755f7a7a
|
Fixes a bug where the return was getting ignored by each_user_pass for FTP. As a result, all usernames would get tried, instead of retiring a username once a good password was found.
git-svn-id: file:///home/svn/framework3/trunk@10622 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-09 19:03:49 +00:00 |
|
Joshua Drake
|
ae04e34cf7
|
fix some non-full-namespace includes
git-svn-id: file:///home/svn/framework3/trunk@10617 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-09 06:55:52 +00:00 |
|
Tod Beardsley
|
c2938323cc
|
Pretty much the same deal as r10592, but for SSH, which sometimes has similiar RST problems.
git-svn-id: file:///home/svn/framework3/trunk@10593 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-08 02:11:06 +00:00 |
|
Tod Beardsley
|
df48b11093
|
Makes telnet_login a more resistant to intermittant RSTs. If a machine gives us a reset, try again with a backoff. Only after 3 retries should we give up entirely. You'd be amazed how many devices this is required for.
git-svn-id: file:///home/svn/framework3/trunk@10592 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-08 01:54:56 +00:00 |
|
Tod Beardsley
|
b5fe64aca2
|
This works around a blocking problem encountered with recv_telnet(). Don't hang around trying to recv when we've already got a password prompt or a success/fail response.
git-svn-id: file:///home/svn/framework3/trunk@10590 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-08 00:48:24 +00:00 |
|
Joshua Drake
|
840824e3e8
|
remove unexplained binary characters
git-svn-id: file:///home/svn/framework3/trunk@10588 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-07 16:22:16 +00:00 |
James Lee
|
3d26c54bd7
|
preserve some more datastore bits
git-svn-id: file:///home/svn/framework3/trunk@10518 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-01 14:06:59 +00:00 |
|
Tod Beardsley
|
ea128c6404
|
Mention the port when bruteforcing SMB services. Handy for noticing when you're being direct or indirect.
git-svn-id: file:///home/svn/framework3/trunk@10498 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-27 17:11:40 +00:00 |
|
Joshua Drake
|
7c1dc98456
|
switch logic around, add some debug/verbose prints
git-svn-id: file:///home/svn/framework3/trunk@10478 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-25 18:14:54 +00:00 |
|
HD Moore
|
46db59c5af
|
Treat access denied the same as logon failure
git-svn-id: file:///home/svn/framework3/trunk@10474 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-25 03:30:22 +00:00 |
|
James Lee
|
a9c3628a2d
|
make it more obvious that the connection failed, not the login. see #2682
git-svn-id: file:///home/svn/framework3/trunk@10467 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-24 21:45:36 +00:00 |
|
Tod Beardsley
|
09cab24dbf
|
Report_note no longer tries to re-report a service name; it just re-reports port numbers and protocols. This is to avoid unidentifying identified services.
git-svn-id: file:///home/svn/framework3/trunk@10458 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-24 17:52:25 +00:00 |
|
James Lee
|
0001550e6d
|
String#to_a was removed in 1.9.2, replace with [ str ] for compat
git-svn-id: file:///home/svn/framework3/trunk@10448 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-23 21:17:41 +00:00 |
Patrick Webster
|
e6969ba30e
|
Fixed spelling mistake.
git-svn-id: file:///home/svn/framework3/trunk@10445 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-23 05:48:07 +00:00 |
|
Joshua Drake
|
d9d0f8cc03
|
modify to use EXE mixin, remove unused SUBJECT option
git-svn-id: file:///home/svn/framework3/trunk@10436 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-22 20:55:57 +00:00 |
|
James Lee
|
aa1d8e403f
|
make sure the list of handler jobs is initialized in case we hit cleanup before exploits have started
git-svn-id: file:///home/svn/framework3/trunk@10430 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-21 22:43:50 +00:00 |
|
HD Moore
|
3204b3ad83
|
Patch for the SMB timestamp parser which allows it to function in GMT+ zones
git-svn-id: file:///home/svn/framework3/trunk@10425 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-21 14:21:38 +00:00 |
|
HD Moore
|
8d45915f8c
|
Remove the buggy report_host
git-svn-id: file:///home/svn/framework3/trunk@10414 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-21 03:14:08 +00:00 |
|
HD Moore
|
76b14e5db7
|
Invert logic for consistency
git-svn-id: file:///home/svn/framework3/trunk@10403 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-21 00:06:18 +00:00 |
|
HD Moore
|
74e5c38fe8
|
Make the challenge configurable via patch from troulouliou
git-svn-id: file:///home/svn/framework3/trunk@10402 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-21 00:05:08 +00:00 |
|
Joshua Drake
|
4590844871
|
tons of indentation fixes, some other style tweaks
git-svn-id: file:///home/svn/framework3/trunk@10394 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-20 08:06:27 +00:00 |
|
Joshua Drake
|
78188beb6b
|
change from capture to service
git-svn-id: file:///home/svn/framework3/trunk@10393 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-20 08:05:50 +00:00 |
|
HD Moore
|
e59ec467af
|
Quick SMB upload module for when you need to upload a file via PTH
git-svn-id: file:///home/svn/framework3/trunk@10387 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-20 04:03:26 +00:00 |
|
James Lee
|
5f0cc946b1
|
document report_note a little better, and modify several modules to use it correctly. fixes #2568
git-svn-id: file:///home/svn/framework3/trunk@10377 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-19 22:25:56 +00:00 |
Mario Ceballos
|
9975827d22
|
updated module from Thomas Ring.
git-svn-id: file:///home/svn/framework3/trunk@10371 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-18 23:59:28 +00:00 |
|
HD Moore
|
e939379b1b
|
Fix missing end, use explicit Timeout class
git-svn-id: file:///home/svn/framework3/trunk@10366 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-18 04:15:32 +00:00 |
|
Tod Beardsley
|
b023d89469
|
Wrap SSH and Telnet version checkers in a timeout, or else they sometimes hang forever.
git-svn-id: file:///home/svn/framework3/trunk@10365 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-18 03:00:19 +00:00 |
Stephen Fewer
|
5e2295a9a8
|
Add in an aux module to create a socks4 proxy server. If you add in a route via a meterpreter session to the framework routing table the proxy server will use that route where appropriate. (Also modified the servers opts hash to optionally take a 'Comm' param if you want to programmatically create a socks4 server which will always use a specific meterpreter session for all socket creation - by default this does not happen and it uses the rex socket switchboard as per normal rex socket creation).
git-svn-id: file:///home/svn/framework3/trunk@10337 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-16 18:23:03 +00:00 |
|
Tod Beardsley
|
8cf8fe9436
|
Making postgres_version more subdued in its successful fingerprint reporting with print_status instead of print_good, since other fingerprinting modules use print_status for the most part.
git-svn-id: file:///home/svn/framework3/trunk@10313 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-14 14:43:56 +00:00 |
|
Joshua Drake
|
5de3146533
|
style compliance fixes
git-svn-id: file:///home/svn/framework3/trunk@10273 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-09 15:47:35 +00:00 |
|
James Lee
|
8814752e67
|
fix broken ENUM_TLD in auxiliary/gather/dns_enum
git-svn-id: file:///home/svn/framework3/trunk@10253 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-07 15:44:38 +00:00 |
|
HD Moore
|
9b5d613563
|
Additional D-Link target from John Sawyer
git-svn-id: file:///home/svn/framework3/trunk@10219 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-02 14:34:18 +00:00 |
|
HD Moore
|
800812a1d0
|
This commit adds functional exploits for retrieving the Apple Airport Extreme password through the VxWorks debugger service and for setting the auto-answer flag to true for the D-Link i2Eye video conferencing system.
git-svn-id: file:///home/svn/framework3/trunk@10218 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-02 14:32:39 +00:00 |
cg
|
8cf89d7e05
|
fix a typo
git-svn-id: file:///home/svn/framework3/trunk@10211 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-01 01:57:22 +00:00 |
|
cg
|
6b1eb27ab5
|
put scanner modules in the scanner directory
git-svn-id: file:///home/svn/framework3/trunk@10210 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-01 01:49:06 +00:00 |
|
cg
|
36bbd6e8b6
|
coldfusion directory traversal module
git-svn-id: file:///home/svn/framework3/trunk@10209 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-01 01:43:48 +00:00 |
|
Tod Beardsley
|
21540e22ed
|
Checking in missing reporting stuff for bruteforce. Namely, report_exploit, also changes ftp's pw type to just "password" and re-opens newly verified sessions.
git-svn-id: file:///home/svn/framework3/trunk@10205 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-31 20:33:16 +00:00 |
|
James Lee
|
94aac0c517
|
dunno why i never thought of this before. clean up spawned exploits when stopping browser_autopwn
git-svn-id: file:///home/svn/framework3/trunk@10197 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-30 22:17:26 +00:00 |
|
James Lee
|
080f662595
|
make the LPORT_JAVA option actually visible
git-svn-id: file:///home/svn/framework3/trunk@10195 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-30 21:36:38 +00:00 |
|
Joshua Drake
|
eae0261893
|
style compliance fixes
git-svn-id: file:///home/svn/framework3/trunk@10191 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-30 20:41:22 +00:00 |
Carlos Perez
|
8dfa3f15a1
|
missed an end
git-svn-id: file:///home/svn/framework3/trunk@10185 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-30 01:33:37 +00:00 |
|
Carlos Perez
|
b5bfe1983d
|
Fixed typo on 2 xmmp SRV record typos, wildcard management of CNAME records and removed multithreading while I figure out how to update to the latest version of the net-dns lib.
git-svn-id: file:///home/svn/framework3/trunk@10184 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-30 01:30:57 +00:00 |
|
Joshua Drake
|
6e48076249
|
fixes #2435, add BROADCAST option to DHCP server, use in cases where sending to 255.255.255.255 fails
git-svn-id: file:///home/svn/framework3/trunk@10159 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-26 19:34:53 +00:00 |
|
Joshua Drake
|
aac956db50
|
style compliance fixes
git-svn-id: file:///home/svn/framework3/trunk@10128 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-24 18:22:48 +00:00 |