James Lee
|
7d348c3593
|
honor the SSL option in HttpServer, fixes #1001
git-svn-id: file:///home/svn/framework3/trunk@8699 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-03 18:47:04 +00:00 |
HD Moore
|
a753666073
|
Switch sysread back to get_once(). This reverts a previous change, but the sysread breaks SSL support
git-svn-id: file:///home/svn/framework3/trunk@8124 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-14 21:40:30 +00:00 |
HD Moore
|
4c6fd97b0e
|
Handles some broken TCP stack implementations better (but not perfectly)
git-svn-id: file:///home/svn/framework3/trunk@7991 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-27 07:02:55 +00:00 |
HD Moore
|
a16feb01bc
|
Minor tweaks to http processing
git-svn-id: file:///home/svn/framework3/trunk@7805 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 18:12:38 +00:00 |
HD Moore
|
5ef9a1c040
|
Wipe the headers before reparsing
git-svn-id: file:///home/svn/framework3/trunk@7801 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 17:04:52 +00:00 |
HD Moore
|
006d5d51fc
|
Fixes #674 by adding 100-continue support
git-svn-id: file:///home/svn/framework3/trunk@7799 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 16:54:27 +00:00 |
James Lee
|
7427640fb0
|
don't wait for a message body that will never come. fixes 659
git-svn-id: file:///home/svn/framework3/trunk@7748 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 02:26:37 +00:00 |
James Lee
|
5182d1c927
|
allow the Connection header to specify keep-alive in a less strict manner. this is more rfc2616 compliant and fixes #601
git-svn-id: file:///home/svn/framework3/trunk@7677 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-03 07:40:37 +00:00 |
HD Moore
|
fc983ef7e3
|
Many bug fixes to db_autopwn, cross-referencing of OS-level vulnerabilities, small bug fixes to HTTP client API
git-svn-id: file:///home/svn/framework3/trunk@7676 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-03 01:36:17 +00:00 |
HD Moore
|
ed7b7ac6f0
|
Fixes #491 and fixes #543 by updating the HTTP stack and validating configuration options
git-svn-id: file:///home/svn/framework3/trunk@7652 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-30 21:15:06 +00:00 |
HD Moore
|
8cadfe66cf
|
Mostly cosmetic
git-svn-id: file:///home/svn/framework3/trunk@7530 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-16 15:16:08 +00:00 |
James Lee
|
78c88c888f
|
don't backtrace just because the client cancelled
git-svn-id: file:///home/svn/framework3/trunk@7453 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-10 19:38:18 +00:00 |
HD Moore
|
83fece42fe
|
Handle HTTP failures more gracefully
git-svn-id: file:///home/svn/framework3/trunk@7335 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-03 18:10:09 +00:00 |
HD Moore
|
075b8c5fa4
|
Fixes #434. Always use Timeout.timeout() -- on Ruby 1.9 this results in the Timeout::TimeoutError exception vs RuntimeError
git-svn-id: file:///home/svn/framework3/trunk@7323 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-02 18:14:57 +00:00 |
HD Moore
|
5e137e92fd
|
Fixes #381. To scan for TLSv1 only services, set SSLVersion TLS1
git-svn-id: file:///home/svn/framework3/trunk@7282 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-26 19:48:15 +00:00 |
kris
|
b75ef037c3
|
more tabs vs spaces, and fix a few mismatched indentation levels (def/end, etc)
git-svn-id: file:///home/svn/framework3/trunk@7211 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-20 17:24:33 +00:00 |
HD Moore
|
a74d3a3f38
|
Switches meterpreter to SSL by default, using the PolarSSL library. To build this, just place polarssl.lib into an workspace/common/Release/
git-svn-id: file:///home/svn/framework3/trunk@6718 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-26 23:18:53 +00:00 |
HD Moore
|
45afe789af
|
Test case update
git-svn-id: file:///home/svn/framework3/trunk@6717 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-26 03:01:11 +00:00 |
natron
|
6f8d309949
|
Passivex fixed. Reverting r6318 for rex/proto/http/packet. Works on IE8, tests on IE6/7 welcome.
git-svn-id: file:///home/svn/framework3/trunk@6514 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-04-30 20:38:57 +00:00 |
et
|
a8b64c56b5
|
Handle encoding of special chars
git-svn-id: file:///home/svn/framework3/trunk@6508 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-04-29 04:04:40 +00:00 |
James Lee
|
96c8f6127c
|
Replace += with << for Strings in a bunch of places.
git-svn-id: file:///home/svn/framework3/trunk@6318 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-03-08 07:55:47 +00:00 |
James Lee
|
1d499a9756
|
fix empty body when Content-Length is not set
git-svn-id: file:///home/svn/framework3/trunk@6176 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-01-23 21:10:58 +00:00 |
James Lee
|
49cd8d7223
|
typo fix
git-svn-id: file:///home/svn/framework3/trunk@6114 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-01-11 04:48:06 +00:00 |
kris
|
248f1e9fc3
|
Remove "#{xxx.to_s}" redundancies ('s/\(#{[^}]*\)\.to_s}/\1}/g')
git-svn-id: file:///home/svn/framework3/trunk@6022 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-12-19 07:11:08 +00:00 |
HD Moore
|
5d0ebc18cf
|
See #250. Adds a wait() wrapper to the HTTP service as well
git-svn-id: file:///home/svn/framework3/trunk@5927 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-11-16 21:00:44 +00:00 |
Ramon de C Valle
|
f124597a56
|
Code cleanups
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-10-19 21:03:39 +00:00 |
James Lee
|
36a06e7576
|
initial commit of php findsock. This patch makes all http connections global and removes the "close if (!pipelining)" checks, so beware of bugs.
git-svn-id: file:///home/svn/framework3/trunk@5678 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-09-24 04:41:51 +00:00 |
HD Moore
|
757b610a59
|
Fixes #163. Multiple headers with the same value are now squashed into a single long line in the response object.
git-svn-id: file:///home/svn/framework3/trunk@5273 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-01-06 20:11:02 +00:00 |
HD Moore
|
dbb22495a6
|
Unit test for #173 fix
git-svn-id: file:///home/svn/framework3/trunk@5272 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-01-06 20:07:28 +00:00 |
HD Moore
|
af9407e7b0
|
Fixes #173. Handle mixed-case header lookups better
git-svn-id: file:///home/svn/framework3/trunk@5271 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-01-06 20:06:39 +00:00 |
Matt Miller
|
3b74c476a1
|
patch from Kris K
git-svn-id: file:///home/svn/framework3/trunk@5210 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-11-29 06:57:14 +00:00 |
HD Moore
|
7498562eb5
|
Add proxy support to HTTP mixin using modules. Fix socks proxy support.
git-svn-id: file:///home/svn/framework3/trunk@5113 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-09-24 04:44:44 +00:00 |
HD Moore
|
6f23487daa
|
Fixes #117. No longer treat connection: close as a stop-processing case
git-svn-id: file:///home/svn/framework3/trunk@5090 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-09-09 22:27:27 +00:00 |
HD Moore
|
ebb84d5b32
|
Check for typos next time =P
git-svn-id: file:///home/svn/framework3/trunk@4879 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-05-06 22:33:21 +00:00 |
bmc
|
21e37f1b0c
|
* older IIS allowed you to encode multiple times. Expose the ability to encode as many times as you wish. 1 is default
git-svn-id: file:///home/svn/framework3/trunk@4867 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-05-04 15:17:25 +00:00 |
HD Moore
|
65cfd287e5
|
Improvements to the SSL socket support in Rex, fixes #102, and a HTTP client response parsing bug
git-svn-id: file:///home/svn/framework3/trunk@4851 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-05-03 20:01:29 +00:00 |
bmc
|
c79649ebc3
|
add chunked encoding evasion back into the client API (not in the mixin yet)
git-svn-id: file:///home/svn/framework3/trunk@4790 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-04-26 21:08:22 +00:00 |
HD Moore
|
affc5fb958
|
fixes #85 (basic auth to http)
git-svn-id: file:///home/svn/framework3/trunk@4744 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-04-23 22:48:22 +00:00 |
Matt Miller
|
1e1cc94831
|
req_string rather than req
git-svn-id: file:///home/svn/framework3/trunk@4732 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-04-22 07:50:07 +00:00 |
HD Moore
|
d14221898d
|
Merge in the new generic PHP exploit with new targets
Added type definitions to HTTP::Client
git-svn-id: file:///home/svn/framework3/trunk@4537 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-03-17 20:10:57 +00:00 |
HD Moore
|
4d87a3f9fb
|
Adding the missing raw_headers function required for the recent php bug
git-svn-id: file:///home/svn/framework3/trunk@4518 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-03-11 16:28:13 +00:00 |
HD Moore
|
547ec3c6c6
|
This patch adds header folding, fixed hex-random and u-random encoding, fake uri end, fake uri parameters. This fixes #16, the remaining two options (chunked and pipelining), will be added in a future version.
git-svn-id: file:///home/svn/framework3/trunk@4513 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-03-10 05:58:14 +00:00 |
Matt Miller
|
c61e0e8931
|
change the behavior of nil non-required options, fixes #49
git-svn-id: file:///home/svn/framework3/trunk@4509 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-03-09 06:12:28 +00:00 |
HD Moore
|
e6f221ad80
|
Major updates to the HTTP api, re-addition of HTTP evasion, see #16
git-svn-id: file:///home/svn/framework3/trunk@4506 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-03-08 14:08:41 +00:00 |
HD Moore
|
2db1945637
|
Fix a bone-headed error when adding http evasion, this fixes #31
git-svn-id: file:///home/svn/framework3/trunk@4459 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-02-22 07:33:00 +00:00 |
HD Moore
|
51d61c161d
|
Sessions can be detached and killed from the console
git-svn-id: file:///home/svn/framework3/trunk@4437 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-02-18 22:35:07 +00:00 |
Matt Miller
|
279c0e3e52
|
defanged mode
git-svn-id: file:///home/svn/framework3/trunk@4303 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-01-30 04:48:35 +00:00 |
HD Moore
|
d09046a5b9
|
Accessing res['header'] is now case insensitive for HTTP responses
Added the Google Appliance exploit
git-svn-id: file:///home/svn/framework3/trunk@4259 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-01-05 05:22:39 +00:00 |
HD Moore
|
2bc1d4be18
|
Updates to the client API
git-svn-id: file:///home/svn/framework3/trunk@4242 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-12-28 23:42:54 +00:00 |
HD Moore
|
804df25240
|
Initial overhaul of the HTTP client api. This removes nearly all of the client evasion methods, but leaves the code in a great state to reimplement them with less issues.
git-svn-id: file:///home/svn/framework3/trunk@4222 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-12-19 07:11:55 +00:00 |