HD Moore
|
fd0f4ef65b
|
Exploit from Kevin F. for CVE-2009-0695, a remote cmd execution flaw in the Wyse thin client platform.
git-svn-id: file:///home/svn/framework3/trunk@6968 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-19 18:06:03 +00:00 |
|
HD Moore
|
474ba8860f
|
Merges in Colin's PDF infection code from Black Hat / Defcon
git-svn-id: file:///home/svn/framework3/trunk@6966 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-19 14:44:43 +00:00 |
James Lee
|
e16647db74
|
make sure we're running on opera so we don't 404 on a suspicous-looking url if it isn't
git-svn-id: file:///home/svn/framework3/trunk@6963 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-18 05:10:11 +00:00 |
|
James Lee
|
bd2da7c12a
|
revert overzealous commit
git-svn-id: file:///home/svn/framework3/trunk@6961 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-18 04:53:35 +00:00 |
|
James Lee
|
08d50e0a5b
|
fix a bug in colorization where %c gets replaced before %cya; wouldn't have been a problem until colorization gets put back in
git-svn-id: file:///home/svn/framework3/trunk@6960 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-18 04:49:16 +00:00 |
|
HD Moore
|
7d866442f0
|
Skip encoding when there are no badchars -- temporary solution until the encoders also look at the Compat -> RequiredCmds field.
git-svn-id: file:///home/svn/framework3/trunk@6957 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-17 17:42:39 +00:00 |
druid
|
20102275ce
|
Updated references
git-svn-id: file:///home/svn/framework3/trunk@6956 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-13 22:35:42 +00:00 |
|
druid
|
0a29ce88c0
|
Added MSB reference
git-svn-id: file:///home/svn/framework3/trunk@6955 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-13 19:25:02 +00:00 |
|
HD Moore
|
7fb18d6e11
|
Add coverage for the new nagios3 cmd execution bug
git-svn-id: file:///home/svn/framework3/trunk@6936 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-04 19:27:50 +00:00 |
Patrick Webster
|
91faadd782
|
Added juniper_sslvpn_ive_setupdll ActiveX exploit module.
git-svn-id: file:///home/svn/framework3/trunk@6921 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-30 15:47:23 +00:00 |
|
James Lee
|
c29af0197a
|
make opera_historysearch work in an iframe and speed it up so it is less likely to tip off a user
git-svn-id: file:///home/svn/framework3/trunk@6915 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-28 11:08:50 +00:00 |
|
James Lee
|
0b9412536c
|
untested autopwn support for safari_metadata_archive just to have a safari vuln in the mix
git-svn-id: file:///home/svn/framework3/trunk@6913 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-28 06:38:01 +00:00 |
|
HD Moore
|
876a80f601
|
Updated osvdb references from Steve Tornio, updated capture/eth_spoof modules
git-svn-id: file:///home/svn/framework3/trunk@6907 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-27 14:05:23 +00:00 |
|
HD Moore
|
ad68502ef6
|
Add credit to the milw0rm exploit author
git-svn-id: file:///home/svn/framework3/trunk@6886 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-23 11:51:24 +00:00 |
|
HD Moore
|
ed024f82aa
|
Remove the extraneous \r\n (thanks Shuyao!)
git-svn-id: file:///home/svn/framework3/trunk@6884 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-23 11:45:32 +00:00 |
|
James Lee
|
e805bbc3aa
|
remove stupid debug alert
git-svn-id: file:///home/svn/framework3/trunk@6882 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-23 08:58:51 +00:00 |
|
kris
|
7262621d35
|
switch 'Version' Rev to Revision since msf doesn't handle it correctly
git-svn-id: file:///home/svn/framework3/trunk@6877 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-23 03:06:01 +00:00 |
|
kris
|
d3e65b3363
|
svn:keywords run
git-svn-id: file:///home/svn/framework3/trunk@6876 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-23 02:55:51 +00:00 |
|
James Lee
|
739207bf4a
|
merge browser_autopwn back into trunk. This changes the database schema slightly, so make sure to db_destroy and db_create before using the database features.
git-svn-id: file:///home/svn/framework3/trunk@6873 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-22 20:14:35 +00:00 |
|
James Lee
|
750a432fd0
|
fix calls to new to_win32pe with correct number of arguments
git-svn-id: file:///home/svn/framework3/trunk@6872 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-22 19:23:21 +00:00 |
|
HD Moore
|
4c4a8a764c
|
Let the XP SP0/SP1 and 2000 targets automatically run
git-svn-id: file:///home/svn/framework3/trunk@6865 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-22 12:59:08 +00:00 |
|
HD Moore
|
e70ac6cc19
|
Added a new set of match flags for cmd injection exploits (RequiredCmds). This reduces the number of 'bad' payloads listed for explot modules. A good example is disabling the netcat -e payloads for old Solaris exploits
git-svn-id: file:///home/svn/framework3/trunk@6854 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-21 15:20:35 +00:00 |
|
HD Moore
|
47ebd62092
|
Adds coverage for the DD-WRT web interface command execution flaw, adds two netcat -e payloads to work with it
git-svn-id: file:///home/svn/framework3/trunk@6852 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-21 12:56:42 +00:00 |
Mario Ceballos
|
4691f2b0e5
|
added exploit module netidentity_xtierrpcpipe.rb
git-svn-id: file:///home/svn/framework3/trunk@6850 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-21 01:04:48 +00:00 |
|
James Lee
|
529ded22ae
|
reverting last commit; somebody didn't cross their fingers
git-svn-id: file:///home/svn/framework3/trunk@6847 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-19 20:48:47 +00:00 |
|
James Lee
|
c3dc1ecb55
|
reintegrate browser_autopwn into trunk; cross your fingers and hope this works
git-svn-id: file:///home/svn/framework3/trunk@6846 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-19 17:27:36 +00:00 |
|
HD Moore
|
309acbaa22
|
Remove extraneous comma
git-svn-id: file:///home/svn/framework3/trunk@6833 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-18 00:27:15 +00:00 |
|
HD Moore
|
282bcb4fae
|
Updated with osvdb and bid references.
git-svn-id: file:///home/svn/framework3/trunk@6832 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-18 00:15:48 +00:00 |
|
HD Moore
|
2d319e9b5b
|
Updated to work better on OS X and avoid 'script is taking too long' errors on all platforms
git-svn-id: file:///home/svn/framework3/trunk@6830 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-17 23:57:59 +00:00 |
|
HD Moore
|
99bc63b11d
|
Adds support for Mac OS X intel (use the vforkshell payloads)
git-svn-id: file:///home/svn/framework3/trunk@6828 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-17 21:28:59 +00:00 |
|
HD Moore
|
f8c2a203fd
|
OSVDB references updates from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@6812 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-16 16:02:24 +00:00 |
|
Patrick Webster
|
f151ecc0ca
|
Added mirc_privmsg_server exploit module.
git-svn-id: file:///home/svn/framework3/trunk@6806 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-15 11:44:55 +00:00 |
|
Mario Ceballos
|
6005ac7c3f
|
added exploit module tns_service_name.rb. updated ora_ntlm_stealer.rb to use the new mixin.
git-svn-id: file:///home/svn/framework3/trunk@6804 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-15 03:50:45 +00:00 |
|
HD Moore
|
6624dbd5ff
|
Adds coverage for SBerry's Firefox 3.5 exploit (win32 only atm).
git-svn-id: file:///home/svn/framework3/trunk@6803 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 21:59:35 +00:00 |
|
HD Moore
|
b018df89da
|
Some minor tweaks, looks like this module doesnt play nice with the new JS encrypter
git-svn-id: file:///home/svn/framework3/trunk@6799 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 11:59:33 +00:00 |
|
HD Moore
|
b2a0f8adf5
|
Comment out references for now
git-svn-id: file:///home/svn/framework3/trunk@6795 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 02:42:52 +00:00 |
|
HD Moore
|
298ba64734
|
Fix the references section
git-svn-id: file:///home/svn/framework3/trunk@6794 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 00:25:26 +00:00 |
|
HD Moore
|
306841cc69
|
Adds coverage for the new OWC ActiveX control exploit
git-svn-id: file:///home/svn/framework3/trunk@6792 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 23:39:42 +00:00 |
|
James Lee
|
d84c87fa36
|
updated version info and disclosure date for opera_historysearch
git-svn-id: file:///home/svn/framework3/trunk@6788 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 23:12:25 +00:00 |
|
HD Moore
|
5fb316b383
|
Integrates L4teral's JS encoder/encrypter
git-svn-id: file:///home/svn/framework3/trunk@6784 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 22:17:11 +00:00 |
|
James Lee
|
3e072dd66e
|
add Opera historysearch module; works on linux, windows will come later
git-svn-id: file:///home/svn/framework3/trunk@6777 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 07:48:12 +00:00 |
|
Mario Ceballos
|
055c58b82e
|
rename module to make room for new one.
git-svn-id: file:///home/svn/framework3/trunk@6775 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 03:50:18 +00:00 |
|
druid
|
c846f02c79
|
Final commit of working CLSIDs
git-svn-id: file:///home/svn/framework3/trunk@6755 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-08 22:15:59 +00:00 |
|
druid
|
7a7b2df5a5
|
Updated list of working ClassIDs
git-svn-id: file:///home/svn/framework3/trunk@6754 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-08 21:34:13 +00:00 |
|
druid
|
b9e7e0b902
|
Removed some CLSIDs that didn't work
git-svn-id: file:///home/svn/framework3/trunk@6753 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-08 21:25:23 +00:00 |
|
druid
|
02f7d6b586
|
Exploit now uses a random ClassID from the list provided by the Microsoft Advisory rather than a static one (also configurable via an advanced option).
git-svn-id: file:///home/svn/framework3/trunk@6751 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-08 19:47:44 +00:00 |
|
HD Moore
|
a54b9a06ef
|
Exploit module for the new MS Video ActiveX flaw from Trancer. See more at http://www.rec-sec.com/2009/07/06/ms-directshow-msvidctl-exploit/
git-svn-id: file:///home/svn/framework3/trunk@6750 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-07 11:11:46 +00:00 |
|
Patrick Webster
|
a4e0c88a1b
|
Added MDaemon WorldClient Form2Raw.cgi exploit module.
git-svn-id: file:///home/svn/framework3/trunk@6736 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-03 01:26:21 +00:00 |
|
druid
|
1df854bee7
|
Removed unused options, added success message.
git-svn-id: file:///home/svn/framework3/trunk@6730 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-30 14:09:19 +00:00 |
|
druid
|
e03428dd8f
|
Disabled debugging output
git-svn-id: file:///home/svn/framework3/trunk@6727 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-30 01:52:48 +00:00 |