Commit Graph

1172 Commits (4c22afed31b74139016ebfc75d27970d681fec59)

Author SHA1 Message Date
kris a0aa29bb18 typos
git-svn-id: file:///home/svn/framework3/trunk@6054 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-29 07:47:37 +00:00
kris 2d1ae98917 Convert 'Retries' and 'Timeout' values to integers if given
git-svn-id: file:///home/svn/framework3/trunk@6053 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-29 05:04:49 +00:00
kris b012696f1f just use boolean @@support_ipv6 instead of "yes"/"no"
git-svn-id: file:///home/svn/framework3/trunk@6047 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-26 07:11:49 +00:00
kris b03360f5e0 use pack_word in push_word and pack_dword in push_dword
git-svn-id: file:///home/svn/framework3/trunk@6046 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-25 02:00:46 +00:00
kris cc233af814 add pack_word() method
git-svn-id: file:///home/svn/framework3/trunk@6045 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-25 01:55:05 +00:00
kris 0e8ce1cc46 Move my portspec parsing code from scanner/portscan/tcp to Rex as
Socket.portspec_crack and use it to also replace the incomplete
parsing code used for db_autopwn


git-svn-id: file:///home/svn/framework3/trunk@6033 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 20:34:05 +00:00
kris 90f906d8c5 Add assignment to to_ruby and to_perl output, and allow changing of variable
name in to_java output


git-svn-id: file:///home/svn/framework3/trunk@6032 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 07:40:27 +00:00
kris cdcf5cf1fd add a few key descriptions
git-svn-id: file:///home/svn/framework3/trunk@6024 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 09:33:16 +00:00
kris 84b6d9daf4 remove extra (server-only) setsockopt(SO_REUSEADDR)
git-svn-id: file:///home/svn/framework3/trunk@6023 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 08:02:53 +00:00
kris 248f1e9fc3 Remove "#{xxx.to_s}" redundancies ('s/\(#{[^}]*\)\.to_s}/\1}/g')
git-svn-id: file:///home/svn/framework3/trunk@6022 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 07:11:08 +00:00
kris bfc23d2886 use self.peerhost (which could use 'PeerAddr') instead of 'PeerHost'
git-svn-id: file:///home/svn/framework3/trunk@6021 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 06:54:22 +00:00
kris 560f2df2dd fix PeerAddr
git-svn-id: file:///home/svn/framework3/trunk@6020 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 06:50:04 +00:00
HD Moore 5822ab75a7 Adds an exploit module (universal) for the new internet explorer xml bug. This module shows off the .NET memory techniques discovered by Alexander Sotirov and Mark Dowd. This code should bypass DEP, ASLR, and NX :-)
git-svn-id: file:///home/svn/framework3/trunk@6012 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-12 01:45:00 +00:00
HD Moore cb8230f817 Fixes #263. Correct the max read() size for DCERPC over SMB
git-svn-id: file:///home/svn/framework3/trunk@6007 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:50:30 +00:00
HD Moore 71c5175a85 This patch introduces a really basic RPC service. It is still a long way from its final version
git-svn-id: file:///home/svn/framework3/trunk@5991 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-02 22:09:34 +00:00
James Lee 63e3e3a0e9 remove some verbosity and dead code from js osdetect
git-svn-id: file:///home/svn/framework3/trunk@5973 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-21 05:37:28 +00:00
HD Moore 7d2f0c1bc0 Log a backtrack on meterpreter command errors, make debugging easier
git-svn-id: file:///home/svn/framework3/trunk@5968 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-20 05:54:55 +00:00
HD Moore 77bc8d90a3 Apply patch to not exit the console on ^C
git-svn-id: file:///home/svn/framework3/trunk@5947 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 19:41:13 +00:00
HD Moore 652100cb54 Use a temporary file for the glade.xml
git-svn-id: file:///home/svn/framework3/trunk@5936 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-17 05:02:13 +00:00
kris a35a9b7bdb add x86 push_word method
git-svn-id: file:///home/svn/framework3/trunk@5932 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 22:54:03 +00:00
James Lee b3ecce5cf4 look for files in absolute paths. fixes #252
git-svn-id: file:///home/svn/framework3/trunk@5928 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 21:10:35 +00:00
HD Moore 5d0ebc18cf See #250. Adds a wait() wrapper to the HTTP service as well
git-svn-id: file:///home/svn/framework3/trunk@5927 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 21:00:44 +00:00
HD Moore a7595fce6c Fixes #250. Solves an old bug with background jobs not working right, fixes the 'background modules dont work' bug as well.
git-svn-id: file:///home/svn/framework3/trunk@5926 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 20:54:41 +00:00
kris 81be31d751 sort Meterpreter ps output by pid
git-svn-id: file:///home/svn/framework3/trunk@5921 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-15 06:20:34 +00:00
HD Moore cf3475644e Remove debugging code
git-svn-id: file:///home/svn/framework3/trunk@5917 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 18:28:15 +00:00
kris 19fa03649a Add lpwd/getlwd Meterpreter commands
git-svn-id: file:///home/svn/framework3/trunk@5916 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 17:30:24 +00:00
kris 360bd6d222 Fix Meterpreter lcd command
git-svn-id: file:///home/svn/framework3/trunk@5915 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 17:22:28 +00:00
Ramon de C Valle 73b02f1899 Updated lib/rex/constants.rb
git-svn-id: file:///home/svn/framework3/trunk@5898 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:55:25 +00:00
HD Moore b4a5cb455b Short variable names to fit more into memory
git-svn-id: file:///home/svn/framework3/trunk@5896 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 23:51:36 +00:00
HD Moore 616491a552 Play nice with ruby implementations without readline and openssl
git-svn-id: file:///home/svn/framework3/trunk@5895 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 22:47:21 +00:00
HD Moore f5374fe2d2 Syntax fixups
git-svn-id: file:///home/svn/framework3/trunk@5894 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 19:31:11 +00:00
HD Moore a70e982369 Adds utlities for creating VBA scripts from an EXE (or payload)
git-svn-id: file:///home/svn/framework3/trunk@5893 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 19:15:24 +00:00
HD Moore 71448fd876 Typo for hashes
git-svn-id: file:///home/svn/framework3/trunk@5891 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 22:57:18 +00:00
HD Moore 10266c8e51 Better short read detection from antoine.
git-svn-id: file:///home/svn/framework3/trunk@5889 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 17:53:13 +00:00
HD Moore 250848ac5c Handle windows error on broadcast addresses
git-svn-id: file:///home/svn/framework3/trunk@5886 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 07:41:07 +00:00
HD Moore 81347ba308 Fix ENONET for BSD
git-svn-id: file:///home/svn/framework3/trunk@5885 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:19:44 +00:00
HD Moore cca9c39eab Typo fix from Rhyss
git-svn-id: file:///home/svn/framework3/trunk@5881 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 05:39:23 +00:00
HD Moore e9b3919ace Normalize exceptions across socket libraries
git-svn-id: file:///home/svn/framework3/trunk@5879 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 05:11:40 +00:00
kris aba3f95026 an empty string is better than a nil type-error (found by playing around, not
from a faulty module or whathaveyou)


git-svn-id: file:///home/svn/framework3/trunk@5878 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 04:01:21 +00:00
HD Moore bbb53dd9ea Default max_read to 1M, solves intermittent issues
git-svn-id: file:///home/svn/framework3/trunk@5876 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 23:03:16 +00:00
HD Moore b11939759e Fix an ugly error when the response was too small
git-svn-id: file:///home/svn/framework3/trunk@5875 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 22:56:25 +00:00
HD Moore 8628a9d2c1 Fixes #193. Add a unicode-capable workaround for windows, patch code to go through the compat lib
git-svn-id: file:///home/svn/framework3/trunk@5873 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 21:44:58 +00:00
HD Moore 6dd840e4b3 Fixes #201. Better error processing of client sockets
git-svn-id: file:///home/svn/framework3/trunk@5872 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 21:30:35 +00:00
HD Moore e2a70dd615 Fixes #111. Merge in patch to fix memdump support, still not perfect, but usable
git-svn-id: file:///home/svn/framework3/trunk@5871 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 21:18:12 +00:00
kris 23274e6efc Fix Meterpreter route error message
git-svn-id: file:///home/svn/framework3/trunk@5868 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 04:17:31 +00:00
kris cce1166199 Fix Meterpreter's portfwd default "list" behavior
git-svn-id: file:///home/svn/framework3/trunk@5867 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 03:56:23 +00:00
kris 21c1eecfa7 Update Meterpreter upload and download commands so that passing one non-option
argument sets both the source and destination file/dir (and make it so that
these commands only expect at least one argument instead of two)



git-svn-id: file:///home/svn/framework3/trunk@5866 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 02:07:41 +00:00
HD Moore 4250d1e132 Handle socket errors more gracefully
git-svn-id: file:///home/svn/framework3/trunk@5864 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 23:02:18 +00:00
HD Moore 2d498ed3c5 Fixes #149. This doesnt address quite the bug, but solves a case where the DNS server does not reply and the Windows version of ruby acts stupid. The bug mentioned in this ticket is addressed by a newer ruby version.
git-svn-id: file:///home/svn/framework3/trunk@5863 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 22:59:21 +00:00
HD Moore 7367c2cbd4 Fixes #248. Catch empty returns from pgets
git-svn-id: file:///home/svn/framework3/trunk@5860 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 21:40:03 +00:00
HD Moore ecc853d453 Fixes #246. Revert to older readline behavior, the priority change should prevent the readline idle loop from consuming process time.
git-svn-id: file:///home/svn/framework3/trunk@5859 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 08:44:36 +00:00
kris 97fee9e16f Return "0 secs" instead of "" in Rex::ExtTime.sec_to_s()
git-svn-id: file:///home/svn/framework3/trunk@5855 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-08 22:35:37 +00:00
James Lee 75feaa6fab allow passing args to meterpreter scripts through AutoRunScript
git-svn-id: file:///home/svn/framework3/trunk@5853 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-08 19:39:06 +00:00
James Lee 0193cd5219 fix session vs client variable problems with meterpreter AutoRunScript and make usage actually reflect what the code does
git-svn-id: file:///home/svn/framework3/trunk@5834 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 06:40:12 +00:00
HD Moore b53695f7db The psexec module now uses a service-compatible exe, shellcode is spawned in a subprocess and the service cleans up properly
git-svn-id: file:///home/svn/framework3/trunk@5829 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 23:06:37 +00:00
HD Moore f1789fc1b2 Adds the check() method and scanner module to ms08-067, massively upgrades the smb/version scanner, with better SP detection and remote language pack detection.
git-svn-id: file:///home/svn/framework3/trunk@5823 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 09:17:08 +00:00
HD Moore a4d53893ac Improvements to opty2 from vlad902:
1) Fixed a minor bug, sometimes Opty2 would generate C1 /6 instructions which most processors will execute but which are not technically valid (they would exist for SAL but SAL is an alias for SHL so it is defined as C1 /4).
 2) I changed the 0x90 nop instruction so that it is no longer considered that 0x90 changes the eax register.
3) Removed o16/0x66 prepend byte from 0x0f, this is currently unused anyways but might prevent some poor person from debugging it in the future.
 4) Previously short jumps would only make positive jumps, I added the capability for them to make a "-1" jump which would basically just start executing at the offset byte. For example it could generate something like EB FF XX YY ... where EB FF jumps to FF XX YY ...
 5) I added support for the instructions mov reg, segreg (8C), mov reg, imm8/imm32 (C6/C7), and lea reg, mem (8D). I implemented LEA so that it only allows memory references to be in ModR/M form and not be in SIB form (I don't think it's possible to allow SIB in the way Opty2 works at the moment).
 



git-svn-id: file:///home/svn/framework3/trunk@5804 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 07:30:52 +00:00
HD Moore 1df0612f61 Adds a case-sensitivity permutation routine
git-svn-id: file:///home/svn/framework3/trunk@5780 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 22:43:13 +00:00
HD Moore 65419ad206 Adds routines/tools for cracking the NTLM hash from the plaintext case-insensive LANMAN password
git-svn-id: file:///home/svn/framework3/trunk@5779 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 22:42:52 +00:00
Ramon de C Valle f124597a56 Code cleanups
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:03:39 +00:00
HD Moore e016ff2d76 cleanup patch from antoine
git-svn-id: file:///home/svn/framework3/trunk@5748 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 14:22:38 +00:00
HD Moore a87cbe1c5e Add disassembly mode to msfpescan for -a
git-svn-id: file:///home/svn/framework3/trunk@5717 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-05 02:40:55 +00:00
HD Moore 0f03e872f1 Fixes ^C and ^Z session handling
git-svn-id: file:///home/svn/framework3/trunk@5706 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-01 17:32:55 +00:00
James Lee 43886f3697 typo fix, thanks Kris Katterjohn
git-svn-id: file:///home/svn/framework3/trunk@5702 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-30 23:24:52 +00:00
HD Moore af9a8eba9a Swap back to 8192 until the exploits which use it are updated.
git-svn-id: file:///home/svn/framework3/trunk@5694 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-27 17:13:11 +00:00
HD Moore 14e8e75cb6 Another, smaller, win32 wrapper
git-svn-id: file:///home/svn/framework3/trunk@5693 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-27 05:02:36 +00:00
HD Moore 16d2825b83 Wrap the shellcode in SEH
git-svn-id: file:///home/svn/framework3/trunk@5692 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 23:35:47 +00:00
HD Moore b94d10f53c Switch the exe back to windows mode (vs console)
git-svn-id: file:///home/svn/framework3/trunk@5691 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 23:01:58 +00:00
HD Moore 4d47f49c1c Randomize the timedatestamp
git-svn-id: file:///home/svn/framework3/trunk@5690 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 22:37:41 +00:00
HD Moore 6d5ac7eead Switches the executable template to something a little nicer and adds exe output to msfencode
git-svn-id: file:///home/svn/framework3/trunk@5689 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 22:34:51 +00:00
HD Moore e341e46f6b Remove debugging comment
git-svn-id: file:///home/svn/framework3/trunk@5688 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 13:33:09 +00:00
HD Moore 37d9c3db1d Corrects an issue where a scope ID is passed to IPv4 addresses, cleans up the parsing.
git-svn-id: file:///home/svn/framework3/trunk@5687 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 05:39:06 +00:00
HD Moore 1310e0e94c Imported msfmachscan from Darren Kemp
git-svn-id: file:///home/svn/framework3/trunk@5682 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 22:14:33 +00:00
HD Moore b3c3b29ed1 Wrong fix, right bug.
git-svn-id: file:///home/svn/framework3/trunk@5681 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 20:47:01 +00:00
HD Moore 8491ef3ff9 Correct File namespace (thanks MJM)
git-svn-id: file:///home/svn/framework3/trunk@5680 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 20:39:28 +00:00
James Lee 36a06e7576 initial commit of php findsock. This patch makes all http connections global and removes the "close if (!pipelining)" checks, so beware of bugs.
git-svn-id: file:///home/svn/framework3/trunk@5678 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 04:41:51 +00:00
HD Moore b0225127cf Patch for Ruby 1.9 compat (not there yet)
git-svn-id: file:///home/svn/framework3/trunk@5674 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-22 15:52:18 +00:00
Ramon de C Valle bd753e8ece Fixed identation
git-svn-id: file:///home/svn/framework3/trunk@5664 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-17 02:01:15 +00:00
Ramon de C Valle 58cef5775e Added ARCH_POWER constant and fixed AIX payload modules
git-svn-id: file:///home/svn/framework3/trunk@5663 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-17 01:42:51 +00:00
HD Moore 6772685f3e Merge patch from Julien TINNES for MIPS support (LE/BE)
git-svn-id: file:///home/svn/framework3/trunk@5658 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-15 18:50:34 +00:00
HD Moore 1fa95d6050 This patch adds support for IPv6 scope_ids to AddressRange parameters. Ranges consisting of a single address are not expanded
git-svn-id: file:///home/svn/framework3/trunk@5640 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-23 07:05:38 +00:00
HD Moore 947dad1f45 Expose the sslctx to the caller
git-svn-id: file:///home/svn/framework3/trunk@5639 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-23 05:12:43 +00:00
James Lee 1e3d89b467 fix a bug where firefox detection breaks with obfuscation of the js_osdetect code
git-svn-id: file:///home/svn/framework3/trunk@5632 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-15 20:11:42 +00:00
James Lee 36ce7136aa add a couple of javascript os detections
git-svn-id: file:///home/svn/framework3/trunk@5629 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-13 16:31:38 +00:00
HD Moore 9903e0bb1d Add the ror/rol ror13hash code to msf3
git-svn-id: file:///home/svn/framework3/trunk@5627 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-13 01:44:37 +00:00
HD Moore bd7e616fe3 Need another red bull...
git-svn-id: file:///home/svn/framework3/trunk@5604 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-26 18:23:54 +00:00
HD Moore 09c1b1d0fc This fixes raw socket support for FreeBSD, NetBSD, BSDi, and Mac OS X. Thanks LibNET!
git-svn-id: file:///home/svn/framework3/trunk@5603 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-26 18:15:35 +00:00
HD Moore c6930f79f1 consistency fixes
git-svn-id: file:///home/svn/framework3/trunk@5596 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-25 06:04:51 +00:00
HD Moore bb1db8253a Raw socket mode that should work for 'everyone'
git-svn-id: file:///home/svn/framework3/trunk@5595 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-25 05:05:32 +00:00
HD Moore cef76df19c Raw socket support for BSD systems
git-svn-id: file:///home/svn/framework3/trunk@5594 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-25 04:59:11 +00:00
HD Moore a4af2d9d93 Fix socket, change requires in dns
git-svn-id: file:///home/svn/framework3/trunk@5575 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 17:39:02 +00:00
James Lee 0144e9ea6a add detection for IE6 on XPSP0
git-svn-id: file:///home/svn/framework3/trunk@5572 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 06:40:27 +00:00
HD Moore a52530f647 Raw IP socket support for Rex. Guess what this is for :-)
git-svn-id: file:///home/svn/framework3/trunk@5565 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 19:03:59 +00:00
James Lee 2d344e64df browser_autopwn now works with mozilla_compareto, mozilla_navigatorjava, and firefox_queryinterface; increased reliability of OS and browser detection
git-svn-id: file:///home/svn/framework3/trunk@5563 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 07:28:05 +00:00
HD Moore 4415d0370f Stop leaking file descriptors when source_address() is called
git-svn-id: file:///home/svn/framework3/trunk@5561 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-21 03:32:51 +00:00
James Lee a15e3c08e9 add string obfuscation
git-svn-id: file:///home/svn/framework3/trunk@5556 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-14 18:57:13 +00:00
James Lee 8800372e46 initial commit of browser_autopwn;
revamp php payloads;
socks5 for IPv6 (untested)



git-svn-id: file:///home/svn/framework3/trunk@5546 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-01 01:44:56 +00:00
HD Moore 380aba15b0 Implements the readline workaround, tested with regular and meterpreter sessions
git-svn-id: file:///home/svn/framework3/trunk@5544 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-27 20:51:36 +00:00
HD Moore f056b9437f Revert this again, breaks meterpreter console
git-svn-id: file:///home/svn/framework3/trunk@5543 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-27 20:07:53 +00:00
HD Moore 596a13ae30 Correctly handle the readline threading issue, tested with sessions.
git-svn-id: file:///home/svn/framework3/trunk@5541 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-27 19:57:28 +00:00
HD Moore eb0134d8b6 Fix an annoying error
git-svn-id: file:///home/svn/framework3/trunk@5539 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-24 20:55:42 +00:00
James Lee 8a009c5b48 initial support for SOCKS5
git-svn-id: file:///home/svn/framework3/trunk@5537 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-22 22:55:38 +00:00
HD Moore 67b418475d Temporarily revert to the old readline behavior
git-svn-id: file:///home/svn/framework3/trunk@5521 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-05 00:15:40 +00:00
HD Moore e55a9d29a4 Temporarily disable the new readline mode
git-svn-id: file:///home/svn/framework3/trunk@5520 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-05 00:13:33 +00:00
HD Moore b844a31fcc Re-enable readline history
git-svn-id: file:///home/svn/framework3/trunk@5519 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-05 00:01:38 +00:00
HD Moore 14d8bc67fc This patch solves a slowness problem introduced by the ruby thread scheduler and the readline extension. For every time slice that the readline thread receives, it does a 100ms select(stdin), which severely impacts the performance of all other running threads. This patch pushes readline into a forked subprocess. Not the most elegant, but it will do until we have a real client-server model.
git-svn-id: file:///home/svn/framework3/trunk@5518 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-04 22:56:25 +00:00
Matt Miller 2be17ce819 patch from Kris Katterjohn
git-svn-id: file:///home/svn/framework3/trunk@5512 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-26 08:42:17 +00:00
Matt Miller d94bfaf373 better support for nx with dllinject payloads/meterp
git-svn-id: file:///home/svn/framework3/trunk@5510 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-26 06:34:12 +00:00
James Lee 2db9dd6ab2 Reversing over greedy commit. =(
git-svn-id: file:///home/svn/framework3/trunk@5506 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 06:17:41 +00:00
James Lee 93199c5610 "set foo" prints the value of foo if it exists
git-svn-id: file:///home/svn/framework3/trunk@5505 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 05:29:32 +00:00
Patrick Webster 0adab629ba Added ntp module, linux egghunter
git-svn-id: file:///home/svn/framework3/trunk@5502 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-12 14:49:45 +00:00
Matt Miller e63a121341 merge incognito updates from Luke Jennings
git-svn-id: file:///home/svn/framework3/trunk@5499 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-28 16:57:49 +00:00
James Lee af4ac919fe add whitespace randomization to Rex::Text. Will update modules to use this instead of copy-paste
git-svn-id: file:///home/svn/framework3/trunk@5494 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-23 06:54:00 +00:00
HD Moore 84d921633b Fun with saved passwords
git-svn-id: file:///home/svn/framework3/trunk@5490 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-22 18:48:21 +00:00
HD Moore 57131f98c3 Adding I)ruids's yp exploit. Fixing a streamserver bug thats been causing problems for a while. Updating the HTTP capture module to do better fingerprinting
git-svn-id: file:///home/svn/framework3/trunk@5477 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-18 01:33:09 +00:00
HD Moore 0ad43aad70 Fix an exception that is encountered when not enough of the DCERPC packet has been read
git-svn-id: file:///home/svn/framework3/trunk@5468 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-04 22:12:59 +00:00
HD Moore 06e47726ba Handle DCERPC reads over SMB pipes in a more efficient fashion. Rename the sadmind exploit, since Solaris is redundant
git-svn-id: file:///home/svn/framework3/trunk@5467 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-04 21:15:55 +00:00
HD Moore 125d114526 Properly handle SMB::pipe_(read|write)_(min|max)
git-svn-id: file:///home/svn/framework3/trunk@5466 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-04 20:54:39 +00:00
HD Moore 74f7fb0cb9 Patch from I)ruid
git-svn-id: file:///home/svn/framework3/trunk@5464 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-02 19:03:42 +00:00
James Lee 6ede0b8827 Remove the dispatch ninja tease.
git-svn-id: file:///home/svn/framework3/trunk@5462 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-01 04:55:59 +00:00
HD Moore 9c7f5d7130 Simple fix for bad calls to negotiate, remove useless disconnect call in the relay daemon
git-svn-id: file:///home/svn/framework3/trunk@5460 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-26 22:36:42 +00:00
HD Moore 1ea29ba8f0 Fixes #218. Updates the http password capture module. Removes a bogus makefile from the tree
git-svn-id: file:///home/svn/framework3/trunk@5452 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-22 06:34:52 +00:00
James Lee 4acc181aa7 Reload extensions after migrate
git-svn-id: file:///home/svn/framework3/trunk@5436 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-10 16:14:11 +00:00
HD Moore 509fc09382 Lots of updates related to <secret project X>.
git-svn-id: file:///home/svn/framework3/trunk@5424 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-02 04:46:13 +00:00
HD Moore 7349c32ec9 Ignore exceptions during shutdown()
git-svn-id: file:///home/svn/framework3/trunk@5419 4d416f70-5f16-0410-b530-b9f4589650da
2008-02-14 21:11:57 +00:00
Ramon de C Valle e39c053f76 Updated ELF stuff
git-svn-id: file:///home/svn/framework3/trunk@5413 4d416f70-5f16-0410-b530-b9f4589650da
2008-02-13 02:43:56 +00:00
Ramon de C Valle a3ccb61b91 Pulled out image_source
git-svn-id: file:///home/svn/framework3/trunk@5401 4d416f70-5f16-0410-b530-b9f4589650da
2008-02-09 04:35:21 +00:00
Ramon de C Valle 42be6e56a2 Added more options
git-svn-id: file:///home/svn/framework3/trunk@5398 4d416f70-5f16-0410-b530-b9f4589650da
2008-02-06 17:31:57 +00:00
Ramon de C Valle 8601a4133d Forgot
git-svn-id: file:///home/svn/framework3/trunk@5389 4d416f70-5f16-0410-b530-b9f4589650da
2008-02-01 01:49:34 +00:00
Ramon de C Valle 177117cfb5 First version of msfelfscan
git-svn-id: file:///home/svn/framework3/trunk@5388 4d416f70-5f16-0410-b530-b9f4589650da
2008-02-01 01:44:25 +00:00
HD Moore 6677beb174 Merged revisions 5366-5377 via svnmerge from
svn+ssh://metasploit.com/home/svn/framework3/branches/framework-3.1

........
  r5366 | hdm | 2008-01-26 20:30:53 -0600 (Sat, 26 Jan 2008) | 2 lines
  
  Update version information
........
  r5367 | hdm | 2008-01-26 21:10:57 -0600 (Sat, 26 Jan 2008) | 3 lines
  
  Updated for version 3.1
........
  r5369 | hdm | 2008-01-26 21:13:31 -0600 (Sat, 26 Jan 2008) | 3 lines
  
  Wipe the private directories from the branch. 
........
  r5371 | hdm | 2008-01-27 17:24:24 -0600 (Sun, 27 Jan 2008) | 5 lines
  
  Timeout options added for dcerpc connect and read times. Addition of novell netware as a supported target platform. Inclusion of the serverprotect exploit (still works on the latest version). Addition of the first remote netware kernel exploit that leads to a shell, addition of netware stager and shell, and first draft of the release notes for 3.1
........
  r5372 | hdm | 2008-01-27 17:30:08 -0600 (Sun, 27 Jan 2008) | 3 lines
  
  Formatting, indentation, fixed the static IP embedded in the request
........
  r5373 | hdm | 2008-01-27 20:02:48 -0600 (Sun, 27 Jan 2008) | 3 lines
  
  Correctly trap exploit errors in a way that works with all of the UIs
........
  r5374 | hdm | 2008-01-27 20:23:25 -0600 (Sun, 27 Jan 2008) | 3 lines
  
  More last-minute bug fixes
........
  r5375 | hdm | 2008-01-27 20:37:43 -0600 (Sun, 27 Jan 2008) | 3 lines
  
  Force multi-bind off in netware, correct label display in gtk gui labels
........
  r5376 | hdm | 2008-01-27 20:50:03 -0600 (Sun, 27 Jan 2008) | 3 lines
  
  More exception handling fun
........


git-svn-id: file:///home/svn/framework3/trunk@5378 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-28 03:06:31 +00:00
HD Moore 31d121da82 Speedup to local relay
git-svn-id: file:///home/svn/framework3/trunk@5358 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-26 22:17:59 +00:00
HD Moore 25373d3ef5 Swap heaplib.js for a base64 encoded version. The antivirus tools were making svn update break when they deleted this file and the -svn-base.
git-svn-id: file:///home/svn/framework3/trunk@5346 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-25 03:15:26 +00:00
HD Moore f43d43376a Fix typo
git-svn-id: file:///home/svn/framework3/trunk@5334 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-24 04:04:01 +00:00
HD Moore 8b321341b9 use shellexecute() for urls on windows
git-svn-id: file:///home/svn/framework3/trunk@5333 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-24 04:03:10 +00:00
HD Moore 248eab9b41 Remove stderr print
git-svn-id: file:///home/svn/framework3/trunk@5323 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-22 06:19:35 +00:00
HD Moore 221b408c37 Closer
git-svn-id: file:///home/svn/framework3/trunk@5319 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-22 05:48:16 +00:00
HD Moore 8ad5e6ce1e Closer
git-svn-id: file:///home/svn/framework3/trunk@5318 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-22 05:30:45 +00:00
HD Moore be156ef668 Closer
git-svn-id: file:///home/svn/framework3/trunk@5317 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-22 05:27:23 +00:00
HD Moore cad23e7977 Closer
git-svn-id: file:///home/svn/framework3/trunk@5316 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-22 05:24:08 +00:00
HD Moore a18f2cb295 Closer
git-svn-id: file:///home/svn/framework3/trunk@5315 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-22 05:22:14 +00:00
HD Moore 24136de1d0 Another go
git-svn-id: file:///home/svn/framework3/trunk@5314 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-22 05:20:53 +00:00
HD Moore 65bfaa269d fixes to the search command in msfconsole. an attempt at solving the rubyw/gtk/stderr issue on windows
git-svn-id: file:///home/svn/framework3/trunk@5308 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-22 04:57:06 +00:00
HD Moore df67cb42f9 Dont use ipv6 sockets for unconnected udp on freebsd
git-svn-id: file:///home/svn/framework3/trunk@5278 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-06 21:51:07 +00:00
HD Moore 757b610a59 Fixes #163. Multiple headers with the same value are now squashed into a single long line in the response object.
git-svn-id: file:///home/svn/framework3/trunk@5273 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-06 20:11:02 +00:00
HD Moore dbb22495a6 Unit test for #173 fix
git-svn-id: file:///home/svn/framework3/trunk@5272 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-06 20:07:28 +00:00
HD Moore af9407e7b0 Fixes #173. Handle mixed-case header lookups better
git-svn-id: file:///home/svn/framework3/trunk@5271 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-06 20:06:39 +00:00
HD Moore d6e5b0a25d Fix use of Tempfile
git-svn-id: file:///home/svn/framework3/trunk@5246 4d416f70-5f16-0410-b530-b9f4589650da
2007-12-31 08:20:48 +00:00
HD Moore a396f655d5 Fixes to the sqlite3 database driver, the db_nmap command, and msfgui
git-svn-id: file:///home/svn/framework3/trunk@5242 4d416f70-5f16-0410-b530-b9f4589650da
2007-12-31 04:05:51 +00:00
HD Moore 084fa6a7df browser/email hooks
git-svn-id: file:///home/svn/framework3/trunk@5238 4d416f70-5f16-0410-b530-b9f4589650da
2007-12-31 01:19:49 +00:00
HD Moore ad43a641f8 Patch from grutz (see #169). Added constants for SMB2
git-svn-id: file:///home/svn/framework3/trunk@5226 4d416f70-5f16-0410-b530-b9f4589650da
2007-12-27 17:42:32 +00:00
HD Moore 6645a7256c Add the lcd command
git-svn-id: file:///home/svn/framework3/trunk@5212 4d416f70-5f16-0410-b530-b9f4589650da
2007-11-30 21:21:12 +00:00
Matt Miller 3b74c476a1 patch from Kris K
git-svn-id: file:///home/svn/framework3/trunk@5210 4d416f70-5f16-0410-b530-b9f4589650da
2007-11-29 06:57:14 +00:00
HD Moore 967a4c0fc6 Add x86 macho output support
git-svn-id: file:///home/svn/framework3/trunk@5205 4d416f70-5f16-0410-b530-b9f4589650da
2007-11-26 22:23:51 +00:00
HD Moore 293036bee8 fix the end of embedded mime messages (always end in \r\n)
git-svn-id: file:///home/svn/framework3/trunk@5201 4d416f70-5f16-0410-b530-b9f4589650da
2007-11-26 19:07:47 +00:00
HD Moore 077bccbbe2 Patch from dustin
git-svn-id: file:///home/svn/framework3/trunk@5161 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-19 14:26:56 +00:00
Matt Miller ddc3b15269 fix from bad commit
git-svn-id: file:///home/svn/framework3/trunk@5159 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-19 06:48:26 +00:00
HD Moore 598568e079 New update from dustin
git-svn-id: file:///home/svn/framework3/trunk@5157 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-18 20:42:00 +00:00
HD Moore 53f7b946ac Update to the context dumper from dustin
git-svn-id: file:///home/svn/framework3/trunk@5156 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-18 20:26:24 +00:00
HD Moore 16a81d8c63 Switch to big endian byte order for context-map files
git-svn-id: file:///home/svn/framework3/trunk@5155 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-18 16:55:55 +00:00
HD Moore ec94968d82 Add support for context-map files to msfpescan (http://sourceforge.net/projects/smem-map/)
git-svn-id: file:///home/svn/framework3/trunk@5154 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-18 16:55:23 +00:00
HD Moore 21d971139b New HTTP NTLM code from Kurt Grutzmacher <grutz@jingojango.net>
git-svn-id: file:///home/svn/framework3/trunk@5143 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-12 01:24:57 +00:00
HD Moore 6f79e14c91 Fixes #157. Patches from egypt@nmt.edu
git-svn-id: file:///home/svn/framework3/trunk@5137 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-05 19:23:45 +00:00
HD Moore ffc5c0a57d Use a class variable instead of a global to cache unicode code pages.
git-svn-id: file:///home/svn/framework3/trunk@5126 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-29 06:47:16 +00:00
HD Moore 1527d92154 Correct offset typos in the new iphone modules. Add EXE output support for OS X PPC, Linux x86, and make the OS X ARM smaller.
git-svn-id: file:///home/svn/framework3/trunk@5119 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-25 01:50:05 +00:00
HD Moore cbec13de60 Add "X" mode for iPhone payloads
git-svn-id: file:///home/svn/framework3/trunk@5117 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 17:54:51 +00:00
HD Moore 621849beaf One more bad exception to fix
git-svn-id: file:///home/svn/framework3/trunk@5114 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 04:58:26 +00:00
HD Moore 7498562eb5 Add proxy support to HTTP mixin using modules. Fix socks proxy support.
git-svn-id: file:///home/svn/framework3/trunk@5113 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 04:44:44 +00:00
HD Moore acc4fd966a Add ARMLE/ARMBE
git-svn-id: file:///home/svn/framework3/trunk@5112 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 03:16:50 +00:00
HD Moore 8c844f96b0 Fixes #60. Adds a new block_command() method to the console, which allows a UI to disable certain commands at runtime.
git-svn-id: file:///home/svn/framework3/trunk@5109 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-22 20:20:10 +00:00
HD Moore f832df480a Fixes #8. Resets the tab completion routine after session interaction.
git-svn-id: file:///home/svn/framework3/trunk@5108 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-22 19:53:39 +00:00
HD Moore 7cc30f0fa8 Support pattern_create() lengths larger than the maximum set size
git-svn-id: file:///home/svn/framework3/trunk@5104 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-13 16:11:33 +00:00
HD Moore 6f23487daa Fixes #117. No longer treat connection: close as a stop-processing case
git-svn-id: file:///home/svn/framework3/trunk@5090 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-09 22:27:27 +00:00
HD Moore 00beaa7049 Fixes #136. Detects a nil str parameter
git-svn-id: file:///home/svn/framework3/trunk@5088 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-09 22:10:38 +00:00
HD Moore 448714ab7b Adds rand_text_numeric
git-svn-id: file:///home/svn/framework3/trunk@5085 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-05 13:39:45 +00:00
Matt Miller 3f903a4e24 fix from spoonm
git-svn-id: file:///home/svn/framework3/trunk@5077 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-11 07:09:13 +00:00
Matt Miller 89d0e200f6 fix portfwd command not functioning properly
git-svn-id: file:///home/svn/framework3/trunk@5075 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-10 23:54:26 +00:00
Matt Miller b698d99209 catch IOError that may be raised when closing a socket that is already closed, fixes #61
git-svn-id: file:///home/svn/framework3/trunk@5074 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-10 23:09:00 +00:00
HD Moore bff51b5578 Typo fix
git-svn-id: file:///home/svn/framework3/trunk@5067 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-30 05:21:02 +00:00
HD Moore b4fab66d40 Fixes #128. Applying a one-line typo fix from antoine. Thanks!
git-svn-id: file:///home/svn/framework3/trunk@5052 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-16 13:43:52 +00:00
HD Moore 1f2791494b General cleanups, bug fixes, removal of debugging statements.
git-svn-id: file:///home/svn/framework3/trunk@5051 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-16 02:17:32 +00:00
HD Moore 2fd4bf1579 Adds support for array arguments to Rex::Arch.endian(). This solves a problem where some exploits choose the wrong unescape method.
git-svn-id: file:///home/svn/framework3/trunk@5050 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-16 01:23:17 +00:00
HD Moore 24aac8b5ae Fixes #127. Applying patch from Alex that solves ASN.1 encoding issues.
git-svn-id: file:///home/svn/framework3/trunk@5049 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-16 01:13:25 +00:00
HD Moore 240ad73d6a Added --rip mode to msfpescan :)
git-svn-id: file:///home/svn/framework3/trunk@5041 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-09 18:17:04 +00:00
HD Moore 37c0376d73 Add file names to the resource output
git-svn-id: file:///home/svn/framework3/trunk@5040 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-09 05:06:01 +00:00
HD Moore 9aa34702dd Fix a typo which prevented the set() method from working correctly.
git-svn-id: file:///home/svn/framework3/trunk@5036 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-07 03:12:42 +00:00
HD Moore 1f0cd480e5 This commit adds --info support to msfpescan
git-svn-id: file:///home/svn/framework3/trunk@5034 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-06 05:14:05 +00:00
HD Moore d0b15d3d72 Lots of SMB fun, all preparation for Black Hat talk :-) More to come...
git-svn-id: file:///home/svn/framework3/trunk@5015 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:20:50 +00:00
HD Moore ddfe651bc8 This adds support for smb_pipeio=trans
git-svn-id: file:///home/svn/framework3/trunk@4915 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-15 16:48:15 +00:00
HD Moore 58a804e510 Small bug fix to allow pipeio on Novell
git-svn-id: file:///home/svn/framework3/trunk@4914 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-15 15:44:39 +00:00
bmc 5e23a54296 * uhwtfms_half - half-width encoding ( http://www.kb.cert.org/vuls/id/739224 )
git-svn-id: file:///home/svn/framework3/trunk@4910 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-14 20:49:35 +00:00
HD Moore e8c5c53e4b This adds pass-the-hash support from grutz.
git-svn-id: file:///home/svn/framework3/trunk@4890 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-09 12:39:29 +00:00
HD Moore 793048c879 This patch adds support for java byte array output (useful for sticking shellcode into java applets).
git-svn-id: file:///home/svn/framework3/trunk@4880 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-07 04:42:11 +00:00
HD Moore ebb84d5b32 Check for typos next time =P
git-svn-id: file:///home/svn/framework3/trunk@4879 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-06 22:33:21 +00:00
bmc 21e37f1b0c * older IIS allowed you to encode multiple times. Expose the ability to encode as many times as you wish. 1 is default
git-svn-id: file:///home/svn/framework3/trunk@4867 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-04 15:17:25 +00:00
HD Moore 65cfd287e5 Improvements to the SSL socket support in Rex, fixes #102, and a HTTP client response parsing bug
git-svn-id: file:///home/svn/framework3/trunk@4851 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-03 20:01:29 +00:00
HD Moore 288d82c8f6 cidr_crack() now detects v6 addresses better
git-svn-id: file:///home/svn/framework3/trunk@4828 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-01 04:54:18 +00:00
HD Moore 664363d7bd One more fix for IPv6 support, this should fix things up for OS X
git-svn-id: file:///home/svn/framework3/trunk@4827 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-01 04:50:16 +00:00
HD Moore a36a740cf0 Minor fix for IPv6 support
git-svn-id: file:///home/svn/framework3/trunk@4826 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-01 04:47:53 +00:00
HD Moore bf56c136ee Catch even more generic errors
git-svn-id: file:///home/svn/framework3/trunk@4816 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-30 00:13:26 +00:00
HD Moore abb0ac92d9 This adds a secondary check to see if the OS actually supports IPv6 sockets
git-svn-id: file:///home/svn/framework3/trunk@4815 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-30 00:11:49 +00:00
HD Moore 83a8ece022 This patch adds IPv6 support to most feartures of the framework. The major missing component is IPv6-enabled payloads.
git-svn-id: file:///home/svn/framework3/trunk@4814 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-29 23:43:39 +00:00
bmc c79649ebc3 add chunked encoding evasion back into the client API (not in the mixin yet)
git-svn-id: file:///home/svn/framework3/trunk@4790 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-26 21:08:22 +00:00
HD Moore 4d1c274387 Merging all of the auxilliary/scanner related features
git-svn-id: file:///home/svn/framework3/trunk@4749 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-24 06:27:39 +00:00
HD Moore affc5fb958 fixes #85 (basic auth to http)
git-svn-id: file:///home/svn/framework3/trunk@4744 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-23 22:48:22 +00:00
Matt Miller 1e1cc94831 req_string rather than req
git-svn-id: file:///home/svn/framework3/trunk@4732 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-22 07:50:07 +00:00
Matt Miller 130b303bfa shikata changes from vlad902, improvements to poly code
git-svn-id: file:///home/svn/framework3/trunk@4722 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-21 02:10:43 +00:00
Matt Miller ae4a4c378a fixes #77
git-svn-id: file:///home/svn/framework3/trunk@4664 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-12 17:23:18 +00:00
HD Moore 2ec5cea6df Adds to_hex_dump
git-svn-id: file:///home/svn/framework3/trunk@4662 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-11 22:23:32 +00:00
Matt Miller 71a7355e20 added the ability to track jobs, and made rexploit stop the existing job
git-svn-id: file:///home/svn/framework3/trunk@4644 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-04 02:49:08 +00:00
Matt Miller 67e39c15a1 display output on a different line from the prompt
git-svn-id: file:///home/svn/framework3/trunk@4643 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-04 02:38:15 +00:00
Matt Miller 14cff709bc update comment
git-svn-id: file:///home/svn/framework3/trunk@4641 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-03 07:56:57 +00:00
Matt Miller 2dd452e2f5 comment
git-svn-id: file:///home/svn/framework3/trunk@4636 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-03 07:36:33 +00:00
Matt Miller b74311c71d initial integration of alex's heaplib, and a port of the keyframe exploit
git-svn-id: file:///home/svn/framework3/trunk@4635 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-03 07:35:54 +00:00
HD Moore d31b36a4ca Add windows suppor to pe_memdump. Fix a stupid typo in pattern_create
git-svn-id: file:///home/svn/framework3/trunk@4629 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-03 02:42:30 +00:00
HD Moore 2958988454 Remove the int3 from the copy_to_stack code
git-svn-id: file:///home/svn/framework3/trunk@4620 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-02 06:26:16 +00:00
HD Moore 9333609211 Adds a second argument to encode_base64
git-svn-id: file:///home/svn/framework3/trunk@4618 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-02 06:23:14 +00:00
Matt Miller 97b6cf3636 here we go
git-svn-id: file:///home/svn/framework3/trunk@4613 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-02 05:51:22 +00:00
HD Moore 964c5b8081 This adds simple MIME support to the Rex library
git-svn-id: file:///home/svn/framework3/trunk@4607 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-02 03:58:11 +00:00
HD Moore ab6f961ea4 Removed the buggy errors.txt loader, embedded the error messages into the files
git-svn-id: file:///home/svn/framework3/trunk@4584 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-27 02:44:05 +00:00
HD Moore 2ce350b1fd This should fix a bad-argument call for memdump based images
git-svn-id: file:///home/svn/framework3/trunk@4583 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-27 01:56:19 +00:00
HD Moore a1d3f0e4f7 Yet-another-Windows-fix
git-svn-id: file:///home/svn/framework3/trunk@4556 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-24 18:35:34 +00:00
HD Moore 3de67cf716 More fixes for cross-platform NASM shell support
git-svn-id: file:///home/svn/framework3/trunk@4555 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-24 18:31:44 +00:00
HD Moore 755278ca1a Compatibility fixes to the nasm shell
git-svn-id: file:///home/svn/framework3/trunk@4554 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-24 18:15:45 +00:00
HD Moore 1fd83b3fe6 Changes to the nasm wrapper to enable windows support
git-svn-id: file:///home/svn/framework3/trunk@4553 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-24 18:09:14 +00:00
HD Moore 8c631e7063 Switches the socket class to use pack_sockaddr_in(). Fixes #58
git-svn-id: file:///home/svn/framework3/trunk@4545 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-22 22:15:26 +00:00
HD Moore d14221898d Merge in the new generic PHP exploit with new targets
Added type definitions to HTTP::Client



git-svn-id: file:///home/svn/framework3/trunk@4537 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-17 20:10:57 +00:00
Matt Miller aaeb955fbd switch to using ruby mutex instead of rwlock to prevent oddness reported, fixes #52
git-svn-id: file:///home/svn/framework3/trunk@4526 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-12 00:50:50 +00:00
HD Moore 4d87a3f9fb Adding the missing raw_headers function required for the recent php bug
git-svn-id: file:///home/svn/framework3/trunk@4518 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-11 16:28:13 +00:00
HD Moore 547ec3c6c6 This patch adds header folding, fixed hex-random and u-random encoding, fake uri end, fake uri parameters. This fixes #16, the remaining two options (chunked and pipelining), will be added in a future version.
git-svn-id: file:///home/svn/framework3/trunk@4513 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-10 05:58:14 +00:00
Matt Miller c61e0e8931 change the behavior of nil non-required options, fixes #49
git-svn-id: file:///home/svn/framework3/trunk@4509 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-09 06:12:28 +00:00
HD Moore e6f221ad80 Major updates to the HTTP api, re-addition of HTTP evasion, see #16
git-svn-id: file:///home/svn/framework3/trunk@4506 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-08 14:08:41 +00:00
Matt Miller 2981d476ff rescue Timeout::Error, not TimeoutError
git-svn-id: file:///home/svn/framework3/trunk@4496 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-01 07:47:40 +00:00
Matt Miller e8d036cac8 fixed typo in simplified modules
git-svn-id: file:///home/svn/framework3/trunk@4465 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-24 21:42:13 +00:00
HD Moore 2db1945637 Fix a bone-headed error when adding http evasion, this fixes #31
git-svn-id: file:///home/svn/framework3/trunk@4459 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-22 07:33:00 +00:00
HD Moore 7007ec3349 Work around an off problem with the require() call not always returning true. If the require fails, an exception should be raised, so this should be a safe workaround.
git-svn-id: file:///home/svn/framework3/trunk@4454 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-21 14:42:21 +00:00
HD Moore fe540a3001 Cleanly handle EOFError's from DCERPC services. This fixes #27
git-svn-id: file:///home/svn/framework3/trunk@4453 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-21 03:58:44 +00:00
Matt Miller 7ca88cd747 fix to call interact with correct args
git-svn-id: file:///home/svn/framework3/trunk@4446 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-20 05:41:51 +00:00
HD Moore 51d61c161d Sessions can be detached and killed from the console
git-svn-id: file:///home/svn/framework3/trunk@4437 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 22:35:07 +00:00
HD Moore 075b3c1c82 Further progress towards mobile sessions
git-svn-id: file:///home/svn/framework3/trunk@4425 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 05:07:56 +00:00
HD Moore 80c4bcd5ab Session detach support, closer to clean hand-off between session -d / session -i. Make autovnc look for both vncviewer and vncviewer.exe
git-svn-id: file:///home/svn/framework3/trunk@4424 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 04:25:46 +00:00
HD Moore a4b06e1653 fixes a file descriptor leak in the SMB and DCERPC exception translation code
git-svn-id: file:///home/svn/framework3/trunk@4423 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 03:07:40 +00:00
Matt Miller 9cda28221f more gracefully handle iconv being missing
git-svn-id: file:///home/svn/framework3/trunk@4400 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-16 18:49:07 +00:00
HD Moore 0b42f16d1f Add a comment about why color support was disabled for now
git-svn-id: file:///home/svn/framework3/trunk@4397 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-16 05:22:36 +00:00
Matt Miller 93da259db2 additions to the user guide, fix data store to not import globally defined values, added ability to flush datastores
git-svn-id: file:///home/svn/framework3/trunk@4387 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-15 08:02:47 +00:00
Matt Miller 3416375c72 typo, case sensitive
git-svn-id: file:///home/svn/framework3/trunk@4385 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-15 07:28:52 +00:00
HD Moore a1c6dda462 Patches from solar to add symlink support to mod dirs and prevent caching of broken modules
git-svn-id: file:///home/svn/framework3/trunk@4384 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-15 05:32:48 +00:00
HD Moore 8a797e6bcc Support for killing sessions from the UI and killing all running jobs with jobs -a
git-svn-id: file:///home/svn/framework3/trunk@4361 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 23:24:25 +00:00
HD Moore 4d205cdcd8 Consistency fixes for the print_* routines
git-svn-id: file:///home/svn/framework3/trunk@4358 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 19:40:33 +00:00
HD Moore c46c1c2d04 Working meterpreter from inside msfweb
git-svn-id: file:///home/svn/framework3/trunk@4357 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 19:33:01 +00:00
HD Moore 020ec49767 Updates to the msfgui interface
git-svn-id: file:///home/svn/framework3/trunk@4355 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 09:22:06 +00:00
Matt Miller 4cd2679f2f get rid for prompt and use output for displaying the prompt
git-svn-id: file:///home/svn/framework3/trunk@4352 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 06:59:22 +00:00
HD Moore d1136c7286 Nevermind, the pipe_input.fd should be used instead of .fd
git-svn-id: file:///home/svn/framework3/trunk@4338 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-10 02:55:28 +00:00
HD Moore 934f2652b5 Changed input_fd to just fd
git-svn-id: file:///home/svn/framework3/trunk@4337 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-10 02:44:41 +00:00
HD Moore b39346079d This adds the input_fd() method, which returns a selectable() socket
git-svn-id: file:///home/svn/framework3/trunk@4334 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-10 02:04:52 +00:00
HD Moore 2980467f1b Formatting updates
git-svn-id: file:///home/svn/framework3/trunk@4315 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-04 01:54:10 +00:00
Matt Miller a68dfe89bf better errors if meterp file is missing
git-svn-id: file:///home/svn/framework3/trunk@4313 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-03 19:39:11 +00:00
Matt Miller 279c0e3e52 defanged mode
git-svn-id: file:///home/svn/framework3/trunk@4303 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-30 04:48:35 +00:00
HD Moore 6df557c8a7 Support for bidirectional pipe on windows uses a hacked up socket_pair()
git-svn-id: file:///home/svn/framework3/trunk@4291 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-21 20:21:58 +00:00
HD Moore 8d06aad5b4 Tab completion has been added to the web console
git-svn-id: file:///home/svn/framework3/trunk@4290 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-20 22:19:32 +00:00
HD Moore 4bd5580784 Updates for the web interface
git-svn-id: file:///home/svn/framework3/trunk@4287 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-19 08:46:06 +00:00
Matt Miller 97feb5b79d hex-normal is broken?
git-svn-id: file:///home/svn/framework3/trunk@4276 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-15 00:43:17 +00:00
HD Moore d09046a5b9 Accessing res['header'] is now case insensitive for HTTP responses
Added the Google Appliance exploit



git-svn-id: file:///home/svn/framework3/trunk@4259 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-05 05:22:39 +00:00
Matt Miller 7da10dd53e fix opcode compat with new http client interface
git-svn-id: file:///home/svn/framework3/trunk@4244 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-30 07:39:34 +00:00
HD Moore 2bc1d4be18 Updates to the client API
git-svn-id: file:///home/svn/framework3/trunk@4242 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 23:42:54 +00:00
HD Moore 7d949bf802 Remove whitespace from base64
git-svn-id: file:///home/svn/framework3/trunk@4238 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:56:57 +00:00
HD Moore bb79a9a6be Use pack/unpack vs the Base64 library (seems to be broken on OS X)
git-svn-id: file:///home/svn/framework3/trunk@4237 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:55:35 +00:00
HD Moore 58f75149e0 Explicitly specify the ::Base64 class
git-svn-id: file:///home/svn/framework3/trunk@4236 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:52:33 +00:00
Matt Miller e1565e2af4 fixed a few issues with the alpha2 implementation
git-svn-id: file:///home/svn/framework3/trunk@4230 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 05:19:31 +00:00
HD Moore 804df25240 Initial overhaul of the HTTP client api. This removes nearly all of the client evasion methods, but leaves the code in a great state to reimplement them with less issues.
git-svn-id: file:///home/svn/framework3/trunk@4222 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-19 07:11:55 +00:00
HD Moore 239fe1e8ae Removing the obsolete evasion levels API
git-svn-id: file:///home/svn/framework3/trunk@4221 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-19 04:32:07 +00:00
HD Moore ffc626675b Initial support for PHP payloads
git-svn-id: file:///home/svn/framework3/trunk@4215 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:57:51 +00:00
Matt Miller 23a61e0a49 woops
git-svn-id: file:///home/svn/framework3/trunk@4214 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:52:05 +00:00
Matt Miller ddd40907d5 fix for service management issue with tcp server/http server mixins
git-svn-id: file:///home/svn/framework3/trunk@4213 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:12:04 +00:00
HD Moore 8a922d0641 Always use IO.read vs IO.readlines.join
git-svn-id: file:///home/svn/framework3/trunk@4211 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:00:44 +00:00
HD Moore 789556f004 Woops, forgot to commit this, thanks MC!
git-svn-id: file:///home/svn/framework3/trunk@4160 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-02 23:56:52 +00:00
HD Moore 3edea24c3d This adds the backupexec registry access module and a supporting library for windows registry constants
git-svn-id: file:///home/svn/framework3/trunk@4159 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-02 19:48:10 +00:00
HD Moore 8746882bf4 Changed the defaut win32 process back to lsass.exe until we come up with a better solution -- spools just results in nothing happening in many cases.
git-svn-id: file:///home/svn/framework3/trunk@4145 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-16 03:49:56 +00:00
HD Moore f925120ddd Wifi updates
git-svn-id: file:///home/svn/framework3/trunk@4129 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 21:45:28 +00:00
Matt Miller b306da967d exit thread instead of exit proc
git-svn-id: file:///home/svn/framework3/trunk@4127 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 19:18:04 +00:00
Matt Miller 2627f5b7f9 hurray for the next stager
git-svn-id: file:///home/svn/framework3/trunk@4126 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 19:17:00 +00:00
Matt Miller 702d6a6544 added recovery stub for kiidleloop
git-svn-id: file:///home/svn/framework3/trunk@4122 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 04:38:45 +00:00
HD Moore dddc4a7640 New stager from johnycsh
git-svn-id: file:///home/svn/framework3/trunk@4121 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 04:14:57 +00:00
HD Moore 00b2cafec8 md5 was replaced with digest/md5 in 1.9 and 1.8.5
git-svn-id: file:///home/svn/framework3/trunk@4119 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-09 19:54:40 +00:00
HD Moore fa91b4b5dd Bug fixes to rescue statements (was catching relative exception class, not the main exception class)
git-svn-id: file:///home/svn/framework3/trunk@4086 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-29 17:41:19 +00:00
HD Moore 38b01597e8 Fix base64
git-svn-id: file:///home/svn/framework3/trunk@4057 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-26 02:42:04 +00:00
Matt Miller 465ea3c677 initial integration of basic kernel-mode payload support
git-svn-id: file:///home/svn/framework3/trunk@4044 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 23:59:14 +00:00
Matt Miller fa14510b78 starting integration of kernel-mode payloads
git-svn-id: file:///home/svn/framework3/trunk@4043 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 21:40:38 +00:00
Matt Miller f1fb05690f misc bugfixes in the http subsystem
git-svn-id: file:///home/svn/framework3/trunk@4019 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 09:27:39 +00:00
Matt Miller abf2e057c8 apache chunked encoding win32 port
git-svn-id: file:///home/svn/framework3/trunk@4017 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 08:31:54 +00:00
Matt Miller 934230a005 fix for variable ref
git-svn-id: file:///home/svn/framework3/trunk@3917 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-19 20:24:55 +00:00
Matt Miller 00ffcc3835 support for meterpreter scripts
git-svn-id: file:///home/svn/framework3/trunk@3916 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-19 03:15:25 +00:00
Matt Miller 9018329f1a added cleanup to meterp
git-svn-id: file:///home/svn/framework3/trunk@3908 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 23:12:46 +00:00
HD Moore 4c5b257a94 Fix a bug that prevents jobs from being cleaned up
git-svn-id: file:///home/svn/framework3/trunk@3900 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 20:07:25 +00:00
Matt Miller 902136a85e fixing up a few things
git-svn-id: file:///home/svn/framework3/trunk@3898 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 07:21:41 +00:00
HD Moore 475df9c08b Added the stderr log sink
git-svn-id: file:///home/svn/framework3/trunk@3895 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 05:50:10 +00:00
HD Moore 0b71dc5d04 A few updates to add NT Trans2 secondary requests, fix an authentication issue, and support a new denial of service module
git-svn-id: file:///home/svn/framework3/trunk@3885 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-14 05:41:54 +00:00
Matt Miller 3e69f46a3a added support for manual ranking
git-svn-id: file:///home/svn/framework3/trunk@3866 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-12 05:34:58 +00:00
HD Moore 47039ff3fa First round of bugfixes for encoders. Alphanumeric encoders no longer default the BufferRegister option, since this can lead to non-compatible exploits falling through to these encoders, selecting them, and then crashing. The new method uses a dynamic (not quite poly) geteip generator, that while not yet alphanumeric compatible, it handles most of the known use cases. Remaining items:
1) Figure out how to handle unicode geteip (unicode encoded, alphanum probably)
2) Add keys to the unicode payloads to force a corresponding keyu on the exploit side to enable 




git-svn-id: file:///home/svn/framework3/trunk@3863 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 05:10:48 +00:00
Matt Miller 7a051c8ee1 bidirectional pipe
git-svn-id: file:///home/svn/framework3/trunk@3862 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 02:21:23 +00:00
Matt Miller a3f620b224 buffered input
git-svn-id: file:///home/svn/framework3/trunk@3861 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 02:21:12 +00:00
Matt Miller b0ba01973c fix for calling stat remotely instead of locally
git-svn-id: file:///home/svn/framework3/trunk@3854 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-05 18:34:52 +00:00
HD Moore fb6f80dd5b Bugfix
git-svn-id: file:///home/svn/framework3/trunk@3853 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-02 06:49:06 +00:00
HD Moore be356d7505 Updated to reflect the new license of Rex
git-svn-id: file:///home/svn/framework3/trunk@3850 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-01 15:50:10 +00:00
Matt Miller 860c016887 fix for relative issue
git-svn-id: file:///home/svn/framework3/trunk@3849 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-01 00:57:31 +00:00
Matt Miller 1583f4e276 fix to not attempt to output text if there is no output handle
git-svn-id: file:///home/svn/framework3/trunk@3848 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-29 00:48:33 +00:00
HD Moore 7a0c8d2c8d Cleanup
git-svn-id: file:///home/svn/framework3/trunk@3846 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-28 00:24:34 +00:00
Spoon M 190922400e fixed up some exception issues in standalone meterp. Should eventually stop catching ::Exception since its too vague
git-svn-id: file:///home/svn/framework3/trunk@3842 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-24 22:54:06 +00:00
Spoon M 34ec11dfed I have been careless with my sword.
git-svn-id: file:///home/svn/framework3/trunk@3839 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 23:08:36 +00:00
Spoon M d42381f3e1 I have been careless with my sword.
git-svn-id: file:///home/svn/framework3/trunk@3838 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 23:03:58 +00:00
Spoon M d89ac6478c more meterp decoupling
git-svn-id: file:///home/svn/framework3/trunk@3836 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 22:50:27 +00:00
Spoon M 06e9f91b28 Make it so you can require meterpreter without having to require rex.rb, steps towards a standalone meterp
git-svn-id: file:///home/svn/framework3/trunk@3835 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-21 21:35:03 +00:00
Matt Miller cc6900d2ec fix to bind_tcp handler where it wouldn't use the proper comm
git-svn-id: file:///home/svn/framework3/trunk@3834 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-17 01:57:52 +00:00
Matt Miller d8b2f95178 auto load stdapi before interact, implement type? interface
git-svn-id: file:///home/svn/framework3/trunk@3833 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-15 04:07:25 +00:00
Matt Miller a724d42aa0 added mcafee mcsubmgr exploit, added functional avoid utf8 encoder
git-svn-id: file:///home/svn/framework3/trunk@3830 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-14 08:55:37 +00:00
HD Moore d3b9cf1b20 Added rerun command to auxiliary
Fixed range_walker to allow multiple ranges
Version scanner now mostly works



git-svn-id: file:///home/svn/framework3/trunk@3824 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-13 00:08:40 +00:00
HD Moore 651a1a7965 Bug fix to support NT 4.0
git-svn-id: file:///home/svn/framework3/trunk@3822 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-12 23:07:25 +00:00
HD Moore c5542fd347 Major reworking of the recon stuff, there is a new mixin called Auxiliary::Scanner that
supports per-range, per-host, and per-batch requests. The reporting stuff has been moved
into a new mixin for it. The old recon stuff was pulled out and sample modules for the
scanner mixin were added. Almost time to re-import skape's old recon foo using Scanner :-)




git-svn-id: file:///home/svn/framework3/trunk@3820 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-12 08:31:38 +00:00
Matt Miller 7bd26e4925 fixed bug in service manager hardcore alias, new passivex dll/proj files
git-svn-id: file:///home/svn/framework3/trunk@3807 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-08 03:29:26 +00:00
Matt Miller 2c2af2b1bd fix typo
git-svn-id: file:///home/svn/framework3/trunk@3804 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-03 05:02:28 +00:00
HD Moore 25c08bb206 Bug fixes, list of known bugs, final prep for beta-1
git-svn-id: file:///home/svn/framework3/trunk@3803 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-02 06:30:36 +00:00
HD Moore cac9561b61 Bug fix for previous workaround
git-svn-id: file:///home/svn/framework3/trunk@3799 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-01 01:50:26 +00:00
HD Moore 4ef104e869 Readline fix
git-svn-id: file:///home/svn/framework3/trunk@3798 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 20:00:20 +00:00
bmc f8897ac164 stdio doesn't support readline
git-svn-id: file:///home/svn/framework3/trunk@3797 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 19:59:29 +00:00
HD Moore 8006479e6b Fix for OS X socket bugs
git-svn-id: file:///home/svn/framework3/trunk@3796 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 19:22:21 +00:00
Matt Miller 023b63bff8 potential fix for msfpescan issue
git-svn-id: file:///home/svn/framework3/trunk@3793 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 13:44:58 +00:00
HD Moore 377e606929 Added javascript and win32 pe output formats
git-svn-id: file:///home/svn/framework3/trunk@3787 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 04:05:20 +00:00
HD Moore e55cff59e1 Fixed Rex::Arch.endian()
Added Rex::Text.to_unescape()
Added two mozilla exploits
Fixed firefox exploit to use new api




git-svn-id: file:///home/svn/framework3/trunk@3784 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 02:50:41 +00:00
HD Moore d0bc17f17a Minor updates
git-svn-id: file:///home/svn/framework3/trunk@3778 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 21:31:02 +00:00
Matt Miller 21f4a10d32 the File.open's were correct, they needed to use the local File class and not Rex::Post::File
git-svn-id: file:///home/svn/framework3/trunk@3775 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 17:13:06 +00:00
HD Moore a2592959c3 Readline mode disabledby defualt for interactive sessios
Fixed an issue with exploit.rb directly running a session command after the session command had been renamed



git-svn-id: file:///home/svn/framework3/trunk@3774 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-29 23:01:38 +00:00
HD Moore c081d7b2b1 Fixed continuaion across trap error, minor tweaks under readline
git-svn-id: file:///home/svn/framework3/trunk@3772 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-29 20:03:05 +00:00
HD Moore 6677b4ba71 Minor bug fixes to remove extra 'p' calls
Rewrite of stdio/readline to support Windows




git-svn-id: file:///home/svn/framework3/trunk@3766 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 22:28:19 +00:00
HD Moore eb4b7ad1ad No longer used
git-svn-id: file:///home/svn/framework3/trunk@3764 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 20:56:23 +00:00
HD Moore b4a0f34021 Using readline5 solves all hangs
git-svn-id: file:///home/svn/framework3/trunk@3763 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 05:35:29 +00:00
HD Moore eeb894b70c Change from stdin to readconsoleinput
git-svn-id: file:///home/svn/framework3/trunk@3762 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 05:03:56 +00:00
HD Moore cb933d9b03 Test
git-svn-id: file:///home/svn/framework3/trunk@3761 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 04:31:36 +00:00
HD Moore edb1f1a7ba IT WORKS!!!!
git-svn-id: file:///home/svn/framework3/trunk@3759 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 04:16:39 +00:00
HD Moore a021982e03 Enabled patched readline hackery
git-svn-id: file:///home/svn/framework3/trunk@3757 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 03:39:27 +00:00
HD Moore db8c76f679 Various hacks for win32 mode
git-svn-id: file:///home/svn/framework3/trunk@3756 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 00:59:00 +00:00
bmc 5b319613ab * add html encoding
git-svn-id: file:///home/svn/framework3/trunk@3755 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-24 19:25:59 +00:00
HD Moore 1a7ba78dc8 Removed a dumb debugging line that was accidentally comitted
git-svn-id: file:///home/svn/framework3/trunk@3752 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-20 04:43:52 +00:00
Spoon M f95d4174de BLARGGGG. Actually remove the null terminating byte (instead of returning the same string, bug). Another bug treating all registry keys that are a string as a dword...
git-svn-id: file:///home/svn/framework3/trunk@3749 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 20:37:38 +00:00
Spoon M 41890a86f2 use loop do instead of while 1 (ruby warning, literal in condition)
git-svn-id: file:///home/svn/framework3/trunk@3748 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:34:15 +00:00
Spoon M df32aedf44 added parens to fix precedence/void context bug
git-svn-id: file:///home/svn/framework3/trunk@3747 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:32:09 +00:00
Spoon M 1af7c1dd23 Change to an assignment, ruby warnings about a void context (which is true)
git-svn-id: file:///home/svn/framework3/trunk@3746 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:30:43 +00:00
HD Moore 775183661d Split trans into two routines, one of which sets maxparm/maxdata to zero, which is required to trigger the mailslot bug. Thanks Nico!
git-svn-id: file:///home/svn/framework3/trunk@3741 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-13 03:04:53 +00:00
HD Moore 35568b570a Demo code added for MS06-035, mailslot write added to client.rb
git-svn-id: file:///home/svn/framework3/trunk@3740 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-11 20:02:45 +00:00
bmc 6e6b1bb2a7 * NDR has been moved, so remove the tests for now, removing the code later
git-svn-id: file:///home/svn/framework3/trunk@3734 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-28 13:35:19 +00:00
HD Moore 2b603db2bb Merge from side branch to fix a bug
git-svn-id: file:///home/svn/framework3/trunk@3732 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-27 23:00:49 +00:00