HD Moore
|
c31f70cfb6
|
Switch to METERPRETER_UA as intended
|
2012-07-02 00:02:47 -05:00 |
HD Moore
|
27bdf78a5a
|
Add support for user-agent control
|
2012-06-30 23:00:08 -05:00 |
HD Moore
|
75f1484d63
|
Respin of binaries to remove debug output
|
2012-06-24 13:40:27 -05:00 |
HD Moore
|
6e61878393
|
Respin of meterpreter bins (add Win 8 to sysinfo, fix a few bugs)
|
2012-06-24 13:27:10 -05:00 |
James Lee
|
709f860e8d
|
Undo mode change from previous commit
|
2012-05-16 16:09:10 -06:00 |
James Lee
|
62f6ed97a7
|
Windows binaries for new loadlib API
|
2012-05-16 16:07:55 -06:00 |
HD Moore
|
96766edfd0
|
Permission changes (to sync)
|
2011-11-10 19:48:32 -06:00 |
HD Moore
|
25100584eb
|
Related to r13582 (binaries)
git-svn-id: file:///home/svn/framework3/trunk@13583 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-19 05:10:13 +00:00 |
HD Moore
|
0b331ac7b7
|
Commit new bins
git-svn-id: file:///home/svn/framework3/trunk@13347 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-26 20:54:51 +00:00 |
HD Moore
|
ec6ef32002
|
Merge in the binaries
git-svn-id: file:///home/svn/framework3/trunk@13090 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-02 04:04:22 +00:00 |
HD Moore
|
b7a0ac7989
|
Posix style (bins)
git-svn-id: file:///home/svn/framework3/trunk@13062 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-29 06:31:14 +00:00 |
HD Moore
|
92bb531af5
|
New bins, new functions, more info soon
git-svn-id: file:///home/svn/framework3/trunk@13059 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-29 06:12:03 +00:00 |
HD Moore
|
9220506ba2
|
Merge in recent meterpreter work. These are not the commits you are looking for (more info on what all this is later this week).
git-svn-id: file:///home/svn/framework3/trunk@13053 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-28 21:26:43 +00:00 |
HD Moore
|
db413592e9
|
This commit adds support for the -r (remote machine name) parameter to the reg command and extends the api to support a remote machine name. Closes #1894
git-svn-id: file:///home/svn/framework3/trunk@12924 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-12 00:01:29 +00:00 |
HD Moore
|
6dd65e56f2
|
All changes look good, merging
git-svn-id: file:///home/svn/framework3/trunk@12921 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-11 23:17:42 +00:00 |
HD Moore
|
36d4de74f8
|
Fresh meterpreter binaries, including a 64-bit version of the sniffer extension
git-svn-id: file:///home/svn/framework3/trunk@12915 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-11 22:41:08 +00:00 |
HD Moore
|
2e9138ebbc
|
This commit overhauls much of the meterpreter timeouts and staging processes. This fixes a bug with concurrent session handling, reduces CPU load by caching a single SSL certificate for all sessions, increases all of the critical timeouts, and generally makes mass ownage work better. We still need to limit the maximum number of concurrent on_session() threads to something sane to prevent sesssion spikes from dragging out the process even longer. The C-side meterpreter change is minimal and will only help with future compatibility if we move to non-blocking fd's for the SSL socket.
git-svn-id: file:///home/svn/framework3/trunk@10595 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-08 04:11:47 +00:00 |
HD Moore
|
30d3440b5d
|
New bins, implements the server side of multi-call railgun
git-svn-id: file:///home/svn/framework3/trunk@9806 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-13 19:19:21 +00:00 |
HD Moore
|
d3a6418e53
|
Revert changes to elevate, still not getting around restrictions on primary token creation, needs a deeper look
git-svn-id: file:///home/svn/framework3/trunk@9759 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 21:59:31 +00:00 |
HD Moore
|
ec9156827e
|
Switch the elevator methods to DuplicateHandleEx to get a primary token
git-svn-id: file:///home/svn/framework3/trunk@9755 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 21:23:05 +00:00 |
HD Moore
|
29f9f6671e
|
This *should* fix all cases where execute -t would fail to use an impersonated token
git-svn-id: file:///home/svn/framework3/trunk@9754 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 19:32:51 +00:00 |
HD Moore
|
972e7bc282
|
Clean up some of the token impersonation code around process execution
git-svn-id: file:///home/svn/framework3/trunk@9751 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 18:54:20 +00:00 |
HD Moore
|
38d15c016d
|
Rebuilds of meterpreter, including x64
git-svn-id: file:///home/svn/framework3/trunk@9716 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 16:47:35 +00:00 |
HD Moore
|
e34bbc281a
|
Merge railgun binary and new builds
git-svn-id: file:///home/svn/framework3/trunk@9710 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 16:29:37 +00:00 |
HD Moore
|
c6c956ab46
|
Small patch to enable a new stager
git-svn-id: file:///home/svn/framework3/trunk@8984 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-04-03 05:21:15 +00:00 |
Stephen Fewer
|
195d1ab4b8
|
Commit snojobs jpeg patch for espia with an x64 build and some minor changes on the ruby side (The 'screenshot' command is now 'screengrab' to avoid a future conflict with changes happening in stdapi).
git-svn-id: file:///home/svn/framework3/trunk@8726 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-05 15:50:24 +00:00 |
Stephen Fewer
|
4ed9e71b76
|
Commit the meterpreter C side (and bins) for transparent zlib (zlib.c copied from the posix meterpreter source) compression of TLV's and channels. To use transparent compression with channels, create them with CHANNEL_FLAG_COMPRESS. To use transparent compression with any TLV value, bitwise or the TLV type with TLV_META_TYPE_COMPRESSED (Don't create the TLV type with TLV_META_TYPE_COMPRESSED as the compressed flag is removed on the remote end after compression). For consistency with the ruby side we could at a later stage add a boolean compress parameter to all the packet_add_tlv_* functions so you don't have to manually specify TLV_META_TYPE_COMPRESSED flag.
git-svn-id: file:///home/svn/framework3/trunk@8515 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-02-16 14:56:24 +00:00 |
HD Moore
|
42b331b47f
|
Fix #790. Initialize the client state to be alive, tweak a few things on the meterpreter side
git-svn-id: file:///home/svn/framework3/trunk@8327 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-29 18:52:44 +00:00 |
HD Moore
|
284af1260a
|
Disable debug tracing
git-svn-id: file:///home/svn/framework3/trunk@8312 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 23:10:58 +00:00 |
HD Moore
|
f3408fd327
|
Fixes #744. The core issue was the migrate code waiting on SetEvent, but the migrate stub was blocked on a WSASocket due to a pending packet_receive in the main server thread. Simply settin the thread termination signal did not work, as the SSL_read was already in progress. This change forcible terminates the main server thread before waiting on the event in order to bypass this deadlock. The downside is a failed migrate has no way to recover if it makes it this far.
git-svn-id: file:///home/svn/framework3/trunk@8309 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 22:55:41 +00:00 |
HD Moore
|
42b3a5774d
|
Adds the process username to the ps output (when possible).
git-svn-id: file:///home/svn/framework3/trunk@8056 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-02 03:41:21 +00:00 |
HD Moore
|
4d7aec7c2d
|
Fixes #745. This commit changes how token manipulation works, adds the steal_token, drop_token, and getprivs commands. Tested on NT 4.0, 2000 SP4, XP SP3, 2003 SP2, Vista, and Windows 7
git-svn-id: file:///home/svn/framework3/trunk@8055 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-02 00:35:10 +00:00 |
HD Moore
|
68aafc8e13
|
Fixes #658 by adding a 250ms sleep to the dispatch of the close call.
git-svn-id: file:///home/svn/framework3/trunk@7934 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-21 19:53:10 +00:00 |
HD Moore
|
cf6732d570
|
Fresh bins (including sniffer). See #672
git-svn-id: file:///home/svn/framework3/trunk@7807 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 18:36:01 +00:00 |
Stephen Fewer
|
be588716c5
|
Bug fix for meterpreter on NT4 (Tested on NT4.0 SP6). Add a function thread_open() in thread.c to wrap the use kernel32!OpenThread and ntdll!NtOpenThread for backwards compatibility.
git-svn-id: file:///home/svn/framework3/trunk@7806 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 18:12:51 +00:00 |
HD Moore
|
6da0fda5ed
|
Updated meterpreter binaries with a slight change to the thread schedule (solves a looping problem when the socket is dead).
git-svn-id: file:///home/svn/framework3/trunk@7793 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 05:42:47 +00:00 |
HD Moore
|
ff19b649f3
|
See #662. This should fix most of the meterpreter-side issues with sockets, there is still a second piece of this which is unflushed data on the local forwards from the ruby code.
git-svn-id: file:///home/svn/framework3/trunk@7761 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 22:08:06 +00:00 |
HD Moore
|
353fa1dba5
|
Updated binaries (32/64) with the first round of socket fixes
git-svn-id: file:///home/svn/framework3/trunk@7751 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 15:01:44 +00:00 |
HD Moore
|
e99e2a8d95
|
Rebuild with Stephen's mutex changes (rebuild of sniffer, but checking in the others as well to match).
git-svn-id: file:///home/svn/framework3/trunk@7734 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 14:44:35 +00:00 |
Stephen Fewer
|
56a64a0e2d
|
Commit the latest windows x86/x64 build of the multi-threaded meterpreter (An x64 build of espia has been added too).
git-svn-id: file:///home/svn/framework3/trunk@7733 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 13:07:26 +00:00 |
HD Moore
|
dfa0d155fc
|
See #607. Switch sniffer code to use mutexes
git-svn-id: file:///home/svn/framework3/trunk@7728 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 05:19:46 +00:00 |
HD Moore
|
8a186921e7
|
Rebuilt Stephen's changes locally, including the sniffer extension
git-svn-id: file:///home/svn/framework3/trunk@7700 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-04 17:54:01 +00:00 |
Stephen Fewer
|
10d9105708
|
Initial commit of the multi-threaded meterpreter binaries. Only x86 today (minus the sniffer extension), x64 will follow next Monday.
git-svn-id: file:///home/svn/framework3/trunk@7699 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-04 17:39:32 +00:00 |
HD Moore
|
e5e89906d0
|
Switch the meterpreter to SSLv3 and try to generate a slightly more realistic CN for the certificate. The goal is to work through a wider range of inline proxies.
git-svn-id: file:///home/svn/framework3/trunk@7311 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-31 20:44:23 +00:00 |
HD Moore
|
5234fe8ff8
|
Fixes 416. Adds the rm/del commands to meterpreter, fixes build problems triggered by the POSIX code merge
git-svn-id: file:///home/svn/framework3/trunk@7291 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-27 02:31:07 +00:00 |
HD Moore
|
bf5068f6b1
|
Fixes #288 and #320. This should fix the BSoD issue with the sniffer module (other than the mac filter change, this matches the vendor's example) and confirmed that the keyscan_dump fix works
git-svn-id: file:///home/svn/framework3/trunk@7066 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-26 16:26:05 +00:00 |
et
|
3993aaf79c
|
espia dll
git-svn-id: file:///home/svn/framework3/trunk@7064 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-26 04:25:37 +00:00 |
HD Moore
|
da32f1bdea
|
Updated meterpreter code/binaries to scrub memory after use, works around Peter's memoryze signatures from BH/DC 2009
git-svn-id: file:///home/svn/framework3/trunk@6942 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-08 14:22:32 +00:00 |
HD Moore
|
2a7467dd7f
|
Update the meterp binaries with clean builds from svn
git-svn-id: file:///home/svn/framework3/trunk@6888 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-24 04:01:26 +00:00 |
HD Moore
|
0d931953cf
|
The sniffer module is now compiled against the dnet headers for packet decodes
git-svn-id: file:///home/svn/framework3/trunk@6831 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-18 00:10:10 +00:00 |