Commit Graph

4158 Commits (56881d35d2e5da74207618756c5f0a9a60f26b9f)

Author SHA1 Message Date
Patrick Webster f151ecc0ca Added mirc_privmsg_server exploit module.
git-svn-id: file:///home/svn/framework3/trunk@6806 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 11:44:55 +00:00
kris ea272e87dd comment typo
git-svn-id: file:///home/svn/framework3/trunk@6805 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 06:40:23 +00:00
Mario Ceballos 6005ac7c3f added exploit module tns_service_name.rb. updated ora_ntlm_stealer.rb to use the new mixin.
git-svn-id: file:///home/svn/framework3/trunk@6804 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 03:50:45 +00:00
HD Moore 6624dbd5ff Adds coverage for SBerry's Firefox 3.5 exploit (win32 only atm).
git-svn-id: file:///home/svn/framework3/trunk@6803 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 21:59:35 +00:00
HD Moore d5a15718b5 Fix up AutoRunScript support (reflective had not been updated before being switched as default)
git-svn-id: file:///home/svn/framework3/trunk@6802 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 21:36:23 +00:00
HD Moore 1ffa74cbb3 Fix the Benchmark method issue by loading active_support which extends Benchmark
git-svn-id: file:///home/svn/framework3/trunk@6801 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 18:27:34 +00:00
Mario Ceballos 55356c88e1 added auxiliary module tnscmd.rb
git-svn-id: file:///home/svn/framework3/trunk@6800 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 16:48:56 +00:00
HD Moore b018df89da Some minor tweaks, looks like this module doesnt play nice with the new JS encrypter
git-svn-id: file:///home/svn/framework3/trunk@6799 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 11:59:33 +00:00
HD Moore f897d1d3d5 Patch from jabra for enable mssql brute forcing
git-svn-id: file:///home/svn/framework3/trunk@6798 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 11:30:41 +00:00
Mario Ceballos 212dc2f2b0 addition of oracle mixin and sql client.
git-svn-id: file:///home/svn/framework3/trunk@6796 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 03:55:32 +00:00
HD Moore b2a0f8adf5 Comment out references for now
git-svn-id: file:///home/svn/framework3/trunk@6795 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 02:42:52 +00:00
HD Moore 298ba64734 Fix the references section
git-svn-id: file:///home/svn/framework3/trunk@6794 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 00:25:26 +00:00
kris 3f5ee3d34b Don't raise "Invalid codepage 1252, only 1252 supported" in Rex::Text.to_unicode
for uhwtfms-half.  It always failed if passed something other than an empty str


git-svn-id: file:///home/svn/framework3/trunk@6793 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 00:01:04 +00:00
HD Moore 306841cc69 Adds coverage for the new OWC ActiveX control exploit
git-svn-id: file:///home/svn/framework3/trunk@6792 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 23:39:42 +00:00
kris df9283d1b2 strip Rex::ExtTime.sec_to_s return val to remove ever-present trailing space
git-svn-id: file:///home/svn/framework3/trunk@6790 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 23:32:35 +00:00
James Lee d84c87fa36 updated version info and disclosure date for opera_historysearch
git-svn-id: file:///home/svn/framework3/trunk@6788 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 23:12:25 +00:00
kris c7515f15d7 a few simple changes (e.g., pack('V') -> pack_dword() where applicable)
git-svn-id: file:///home/svn/framework3/trunk@6785 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 22:26:27 +00:00
HD Moore 5fb316b383 Integrates L4teral's JS encoder/encrypter
git-svn-id: file:///home/svn/framework3/trunk@6784 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 22:17:11 +00:00
HD Moore 303e4eab71 Enable broadcast support for all datagram sockets, remove the broadcast parameter entirely.
git-svn-id: file:///home/svn/framework3/trunk@6780 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 15:24:46 +00:00
HD Moore bab394fa8f Typo fix - thanks Robin Wood!
git-svn-id: file:///home/svn/framework3/trunk@6779 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 15:11:11 +00:00
HD Moore 9068b9a133 Adds the Broadcast parameter to the Rex::Socket class, allows udp/ip sockets to send to broadcast addresses
git-svn-id: file:///home/svn/framework3/trunk@6778 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 13:19:31 +00:00
James Lee 3e072dd66e add Opera historysearch module; works on linux, windows will come later
git-svn-id: file:///home/svn/framework3/trunk@6777 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 07:48:12 +00:00
Mario Ceballos 0b13cb8d6a remove methods already covered by other aux modules.
git-svn-id: file:///home/svn/framework3/trunk@6776 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 03:52:49 +00:00
Mario Ceballos 055c58b82e rename module to make room for new one.
git-svn-id: file:///home/svn/framework3/trunk@6775 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 03:50:18 +00:00
HD Moore 975093efca Updated VC++ project files to fix the directory paths/includes for OpenSSL
git-svn-id: file:///home/svn/framework3/trunk@6774 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 03:14:20 +00:00
HD Moore 148ca687f5 Updated libraries and source code now using OpenSSL
git-svn-id: file:///home/svn/framework3/trunk@6773 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 03:10:39 +00:00
HD Moore 6b0974f618 Goodbye PolarSSL (your license stinks).
git-svn-id: file:///home/svn/framework3/trunk@6772 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 03:03:53 +00:00
Carlos Perez cc69ce51cd Fixed problem when script was ran without options
git-svn-id: file:///home/svn/framework3/trunk@6771 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 02:13:54 +00:00
Carlos Perez 9f45c6b0fc Packetrecorder script for automating new sniffer module
git-svn-id: file:///home/svn/framework3/trunk@6770 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 01:36:08 +00:00
HD Moore d0232e388f Adds a new mixin for FTP server support
git-svn-id: file:///home/svn/framework3/trunk@6769 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-12 20:37:57 +00:00
HD Moore e8784d68fb Fixes up the sniffer to handle large packet captures better, fixes a regression in the sysinfo command.
git-svn-id: file:///home/svn/framework3/trunk@6768 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-12 13:17:37 +00:00
HD Moore 6e85581e2f Updates from jabra for the phishing modules
git-svn-id: file:///home/svn/framework3/trunk@6767 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-12 03:57:25 +00:00
HD Moore bb4b4dbcb0 Apply jabra's patch for smtp output
git-svn-id: file:///home/svn/framework3/trunk@6766 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-12 01:47:04 +00:00
HD Moore f76d73a823 Free packet memory when the capture is stopped
git-svn-id: file:///home/svn/framework3/trunk@6765 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-11 18:19:42 +00:00
HD Moore 4989f9bdbe Fixes a bug where if the sniffer SDK could not initialize, it would still be treated as initialized the next time it was checked.
git-svn-id: file:///home/svn/framework3/trunk@6764 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-11 17:52:40 +00:00
HD Moore 645ca020e9 Fixes a memory corruption issue with the SSL file descriptor (was using a stack reference instead of the Remote->fd reference), adds the source code sans the Packet SDK for the sniffer module
git-svn-id: file:///home/svn/framework3/trunk@6763 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-11 17:32:50 +00:00
HD Moore 82cf85680c Adds the sniffer extension for testing
git-svn-id: file:///home/svn/framework3/trunk@6762 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-11 13:39:43 +00:00
HD Moore 608ca7aae8 This patch removes some of the meterpreter compiler warnings and fixes migration over SSL
git-svn-id: file:///home/svn/framework3/trunk@6761 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-09 22:44:33 +00:00
kris c83e84f2d1 fix Rex::Socket::SubnetWalker num_ips; off by one
git-svn-id: file:///home/svn/framework3/trunk@6760 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-09 22:39:30 +00:00
kris 913181b16a factor out some code
git-svn-id: file:///home/svn/framework3/trunk@6759 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-09 21:45:52 +00:00
kris 58671fd684 disconnect() tcp socket instead of just close()ing it
git-svn-id: file:///home/svn/framework3/trunk@6758 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-09 07:08:25 +00:00
kris 09eb53be5b Use the {add|remove}_socket methods in the IP, TCP and UDP mixins instead doing
the same things individually in each



git-svn-id: file:///home/svn/framework3/trunk@6757 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-09 06:58:11 +00:00
HD Moore 7b516e06fe Transfer the migration payload over SSL, still working on a crash bug after migration completes
git-svn-id: file:///home/svn/framework3/trunk@6756 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-09 03:22:10 +00:00
druid c846f02c79 Final commit of working CLSIDs
git-svn-id: file:///home/svn/framework3/trunk@6755 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-08 22:15:59 +00:00
druid 7a7b2df5a5 Updated list of working ClassIDs
git-svn-id: file:///home/svn/framework3/trunk@6754 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-08 21:34:13 +00:00
druid b9e7e0b902 Removed some CLSIDs that didn't work
git-svn-id: file:///home/svn/framework3/trunk@6753 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-08 21:25:23 +00:00
druid 63f7875723 Parenthesized arguments
git-svn-id: file:///home/svn/framework3/trunk@6752 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-08 20:51:47 +00:00
druid 02f7d6b586 Exploit now uses a random ClassID from the list provided by the Microsoft Advisory rather than a static one (also configurable via an advanced option).
git-svn-id: file:///home/svn/framework3/trunk@6751 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-08 19:47:44 +00:00
HD Moore a54b9a06ef Exploit module for the new MS Video ActiveX flaw from Trancer. See more at http://www.rec-sec.com/2009/07/06/ms-directshow-msvidctl-exploit/
git-svn-id: file:///home/svn/framework3/trunk@6750 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-07 11:11:46 +00:00
Mario Ceballos 94b2eb1cef updated to make things more reliable.
git-svn-id: file:///home/svn/framework3/trunk@6749 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-07 07:00:45 +00:00