ebb84d5b32
Check for typos next time =P
...
git-svn-id: file:///home/svn/framework3/trunk@4879 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-06 22:33:21 +00:00
21e37f1b0c
* older IIS allowed you to encode multiple times. Expose the ability to encode as many times as you wish. 1 is default
...
git-svn-id: file:///home/svn/framework3/trunk@4867 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-04 15:17:25 +00:00
65cfd287e5
Improvements to the SSL socket support in Rex, fixes #102 , and a HTTP client response parsing bug
...
git-svn-id: file:///home/svn/framework3/trunk@4851 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-03 20:01:29 +00:00
c79649ebc3
add chunked encoding evasion back into the client API (not in the mixin yet)
...
git-svn-id: file:///home/svn/framework3/trunk@4790 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-26 21:08:22 +00:00
affc5fb958
fixes #85 (basic auth to http)
...
git-svn-id: file:///home/svn/framework3/trunk@4744 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-23 22:48:22 +00:00
1e1cc94831
req_string rather than req
...
git-svn-id: file:///home/svn/framework3/trunk@4732 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-22 07:50:07 +00:00
d14221898d
Merge in the new generic PHP exploit with new targets
...
Added type definitions to HTTP::Client
git-svn-id: file:///home/svn/framework3/trunk@4537 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-17 20:10:57 +00:00
4d87a3f9fb
Adding the missing raw_headers function required for the recent php bug
...
git-svn-id: file:///home/svn/framework3/trunk@4518 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-11 16:28:13 +00:00
547ec3c6c6
This patch adds header folding, fixed hex-random and u-random encoding, fake uri end, fake uri parameters. This fixes #16 , the remaining two options (chunked and pipelining), will be added in a future version.
...
git-svn-id: file:///home/svn/framework3/trunk@4513 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-10 05:58:14 +00:00
c61e0e8931
change the behavior of nil non-required options, fixes #49
...
git-svn-id: file:///home/svn/framework3/trunk@4509 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-09 06:12:28 +00:00
e6f221ad80
Major updates to the HTTP api, re-addition of HTTP evasion, see #16
...
git-svn-id: file:///home/svn/framework3/trunk@4506 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-08 14:08:41 +00:00
2db1945637
Fix a bone-headed error when adding http evasion, this fixes #31
...
git-svn-id: file:///home/svn/framework3/trunk@4459 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-22 07:33:00 +00:00
51d61c161d
Sessions can be detached and killed from the console
...
git-svn-id: file:///home/svn/framework3/trunk@4437 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 22:35:07 +00:00
279c0e3e52
defanged mode
...
git-svn-id: file:///home/svn/framework3/trunk@4303 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-30 04:48:35 +00:00
d09046a5b9
Accessing res['header'] is now case insensitive for HTTP responses
...
Added the Google Appliance exploit
git-svn-id: file:///home/svn/framework3/trunk@4259 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-05 05:22:39 +00:00
2bc1d4be18
Updates to the client API
...
git-svn-id: file:///home/svn/framework3/trunk@4242 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 23:42:54 +00:00
804df25240
Initial overhaul of the HTTP client api. This removes nearly all of the client evasion methods, but leaves the code in a great state to reimplement them with less issues.
...
git-svn-id: file:///home/svn/framework3/trunk@4222 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-19 07:11:55 +00:00
f1fb05690f
misc bugfixes in the http subsystem
...
git-svn-id: file:///home/svn/framework3/trunk@4019 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 09:27:39 +00:00
abf2e057c8
apache chunked encoding win32 port
...
git-svn-id: file:///home/svn/framework3/trunk@4017 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 08:31:54 +00:00
7bd26e4925
fixed bug in service manager hardcore alias, new passivex dll/proj files
...
git-svn-id: file:///home/svn/framework3/trunk@3807 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-08 03:29:26 +00:00
df32aedf44
added parens to fix precedence/void context bug
...
git-svn-id: file:///home/svn/framework3/trunk@3747 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:32:09 +00:00
1a61d3d2fb
changes to support native win32
...
git-svn-id: file:///home/svn/incoming/trunk@3654 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 20:53:15 +00:00
1a54cc810a
Fixed numerous issues involving smb/dcerpc interaction
...
Fixed 'bad' use of method definition (space after method name, will be depreciated soon)
git-svn-id: file:///home/svn/incoming/trunk@3626 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-30 19:49:27 +00:00
df49cfabb0
* add SSL TCP server support, using runtime generated/signed keys
...
* add HTTPS support
note, SSL service tests don't work. Right now, the tests just bail early. The
client spins forever trying to get data. When the client & server are in
seperate processes, this isn't a problem. A threaded test implementation is
closer, as data sent from the client gets to the server just fine.
git-svn-id: file:///home/svn/incoming/trunk@3616 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 18:49:00 +00:00
5b675262be
properlly support responses when we get a request like this:
...
(echo "GET / HTTP/1.0"; echo ) |nc IP PORT
git-svn-id: file:///home/svn/incoming/trunk@3566 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-09 19:51:37 +00:00
279abda264
* uri encoding is now part of Rex::Text
...
* add junk param start
* add junk URI end
git-svn-id: file:///home/svn/incoming/trunk@3546 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:55:22 +00:00
524c0a3f74
* add 'none' encoding
...
git-svn-id: file:///home/svn/incoming/trunk@3521 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 15:44:15 +00:00
1351ceed1c
* add support to hex/%u encode a URI
...
git-svn-id: file:///home/svn/incoming/trunk@3517 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:57 +00:00
0f6055c73c
support both POST and SEARCH as basic post request types.
...
git-svn-id: file:///home/svn/incoming/trunk@3512 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:23:52 +00:00
05b9aacbc1
'none' is an ok content-encoding, just does nothing... (passed in from the exploit mixin)
...
git-svn-id: file:///home/svn/incoming/trunk@3475 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 17:31:32 +00:00
20fec01d68
* add junk pipelined request support
...
* fix socket creation on pipelined requests
* when a server says that the connection should be closed (Connection: closed), then close the connection, since its going to regardless, and we don't want to loose our state
* support non-standard line termination in headers. ie \n instead of \r\n
* add junk headers (X-rand: rand)
* add header folding (for evasion)
* add parse_header_re (still leaving parse_header around, though its dead code ATM) that does the right thing on non-standard line endings
* move 'gzip' to a 'compression' option
* add 'deflate' compression option (really, just raw zlib, and only firefox does deflate right)
* fix a bunch of TE:chunked decoding bugs based based on the fact that Apache doesn't always close chunks appropriately
* modify parse_body to not return state, since it doesn't always do that, and the return isn't used... self.state is.
* add TE:chunked request support
* normalize URIs in requests before saving them
* Move params out of the URI, but when the uri is requested, and the method is GET, and there are params, return a URI that has the params that are approrpiately encoded (needed for junk_params, see below)
* move request.to_s support of params to use the request params array when a POST, allows use of junk params support (see below). NOTE: If the body is provided, use the body instead of params, in case you want to hardcode the params in a POST request, eg: php_xmlrpc_eval.rb
* Add junk params when building a param list, eg: a=b becomes asdfasdf=asdrt32a&asdfad=okhgasd&a=b&hjklasdf=hkasgd
* add URI junk slash support (eg: /////foo.html)
* param splitting now supports both '&', and ';', which CGI.pm and PHP both allow
* add URI junk directory support, eg: /asdf/../foo.html
* add param encoding support, eg: param A with value '=' is A=%3d
* add URI junk self referring directory support, eg: /././foo.html
git-svn-id: file:///home/svn/incoming/trunk@3457 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 21:57:44 +00:00
b4ad4a5d75
Tabs vs Spaces
...
git-svn-id: file:///home/svn/incoming/trunk@3453 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 05:33:08 +00:00
a1db0b6196
space to tab (happy skape?)
...
git-svn-id: file:///home/svn/incoming/trunk@3445 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-25 21:57:30 +00:00
55ba865f30
* few cleanups plus addition of self referring directories (eg: /././././)
...
git-svn-id: file:///home/svn/incoming/trunk@3437 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-23 23:57:50 +00:00
52fa0da439
* add support for inserting junk directories, slashes, and params
...
git-svn-id: file:///home/svn/incoming/trunk@3436 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-23 21:58:53 +00:00
9913f6d953
* add SSL support to the client (pass another arg to enable)
...
git-svn-id: file:///home/svn/incoming/trunk@3411 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-20 18:59:24 +00:00
737a1cb711
Pass socket context to child sockets from server, pass context from http mixin to socket
...
git-svn-id: file:///home/svn/incoming/trunk@3402 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:35:44 +00:00
0b27b07a5d
possible fix for header parsing issue
...
git-svn-id: file:///home/svn/incoming/trunk@3390 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 16:29:22 +00:00
679d192173
patch to allow non-default server name
...
git-svn-id: file:///home/svn/incoming/trunk@3369 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-11 22:16:20 +00:00
ae5c816e85
various enhancements to support passivex, seems to be functional, somewhat
...
git-svn-id: file:///home/svn/incoming/trunk@3322 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 10:04:30 +00:00
8049b32cbc
Patches from <anon>
...
git-svn-id: file:///home/svn/incoming/trunk@3310 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-05 22:20:28 +00:00
88658064df
/usr/bin/ruby vs /usr/bin/env ruby
...
git-svn-id: file:///home/svn/incoming/trunk@3242 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-17 06:46:23 +00:00
e79c9f8658
Something is still breaking, use w3who, show payloads, exploit, breaks
...
git-svn-id: file:///home/svn/incoming/trunk@3218 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:21:23 +00:00
947f53518a
some cleanup
...
git-svn-id: file:///home/svn/incoming/trunk@3191 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-08 05:55:44 +00:00
9e217054dc
fix for erb thing
...
git-svn-id: file:///home/svn/incoming/trunk@3173 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-05 15:22:17 +00:00
526b9f199d
Changes from Brian Caswell
...
git-svn-id: file:///home/svn/incoming/trunk@3165 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-02 02:35:30 +00:00
bd70905c03
escape
...
git-svn-id: file:///home/svn/incoming/trunk@3095 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-25 04:16:43 +00:00
8580264110
more exploits msfweb stuff
...
git-svn-id: file:///home/svn/incoming/trunk@3078 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 05:51:20 +00:00
68e661065d
more msfweb foo
...
git-svn-id: file:///home/svn/incoming/trunk@3077 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 05:13:40 +00:00
a19e98757d
more hackery on msfweb
...
git-svn-id: file:///home/svn/incoming/trunk@3076 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 04:23:43 +00:00
HD Moore
bmc
Matt Miller
Spoon M