Matt Miller
9a634f0df9
fix to import options in exploit simple
...
git-svn-id: file:///home/svn/incoming/trunk@3525 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-11 16:01:23 +00:00
bmc
b091a21f2b
* to_unicode now supports more than just utf-16le, which is still the default.
...
* add tests for all of the unicode variations.
git-svn-id: file:///home/svn/incoming/trunk@3524 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 17:30:41 +00:00
bmc
a0af1e9598
* a more complete selection of various unicode types supported by most browsers
...
git-svn-id: file:///home/svn/incoming/trunk@3523 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 17:29:37 +00:00
bmc
1c51681efe
* add <object> base64 encoded objects, with 1 byte pad, 2 byte pad, and random space injection. Works fine on ie 4, firefox, and safari.
...
git-svn-id: file:///home/svn/incoming/trunk@3522 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 15:45:37 +00:00
bmc
524c0a3f74
* add 'none' encoding
...
git-svn-id: file:///home/svn/incoming/trunk@3521 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 15:44:15 +00:00
Matt Miller
9c537c42fd
missed option
...
git-svn-id: file:///home/svn/incoming/trunk@3520 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-08 01:12:26 +00:00
Matt Miller
6a52aae59a
switch to use a service specific user/pass datastore option to avoid payload conflicts
...
git-svn-id: file:///home/svn/incoming/trunk@3519 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-08 01:07:47 +00:00
bmc
b99a9e5075
* a few updates to make it a bit more like reality, still doesn't work though
...
git-svn-id: file:///home/svn/incoming/trunk@3518 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-07 15:23:54 +00:00
bmc
1351ceed1c
* add support to hex/%u encode a URI
...
git-svn-id: file:///home/svn/incoming/trunk@3517 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:57 +00:00
bmc
ca315abe1b
* add uri-encoding as an evasion method (though, exploits could hard code it if they need to...)
...
git-svn-id: file:///home/svn/incoming/trunk@3516 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:10 +00:00
bmc
16156c8aea
* the XML isn't required, random shit works just fine
...
* only normalizing of the stuff that SHOULD be normalizes works for shit with this exploit
git-svn-id: file:///home/svn/incoming/trunk@3515 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:47:06 +00:00
bmc
1c35f492a8
* turn into an HTTP client request
...
git-svn-id: file:///home/svn/incoming/trunk@3514 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 21:12:37 +00:00
bmc
c2c01a2d9e
* use full path to the const, since in odd situations, the const isn't in scope. (WTF?)
...
git-svn-id: file:///home/svn/incoming/trunk@3513 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:24:45 +00:00
bmc
0f6055c73c
support both POST and SEARCH as basic post request types.
...
git-svn-id: file:///home/svn/incoming/trunk@3512 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:23:52 +00:00
bmc
32dfdc114c
* allow a request to pass a timeout (and by allowing passing a timeout, the ability to not parse the response)
...
git-svn-id: file:///home/svn/incoming/trunk@3511 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:22:47 +00:00
bmc
d14646e084
* remove redundant stringification
...
git-svn-id: file:///home/svn/incoming/trunk@3510 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 15:15:41 +00:00
vlad902
b158ccb973
Initial commit
...
git-svn-id: file:///home/svn/incoming/trunk@3509 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 22:05:01 +00:00
HD Moore
0ea7fc3ec4
Minor tweaks
...
git-svn-id: file:///home/svn/incoming/trunk@3508 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 20:18:45 +00:00
HD Moore
dc42740402
Added a new JObs tab
...
git-svn-id: file:///home/svn/incoming/trunk@3507 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 19:43:05 +00:00
HD Moore
2a2e4d253f
Added Wx GUI design docs
...
git-svn-id: file:///home/svn/incoming/trunk@3506 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 19:42:52 +00:00
HD Moore
5b497d5e4d
Added Irix platform
...
Tweaked reverse.rb to use a subshell and background it
Added Irix lpdexec
git-svn-id: file:///home/svn/incoming/trunk@3505 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 18:10:08 +00:00
vlad902
3acdd81b9e
metasploit -> mozilla
...
git-svn-id: file:///home/svn/incoming/trunk@3504 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 01:56:34 +00:00
HD Moore
b6d64822ba
proper fix
...
git-svn-id: file:///home/svn/incoming/trunk@3503 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 23:59:17 +00:00
HD Moore
f84c04839f
Inits the UI for check
...
git-svn-id: file:///home/svn/incoming/trunk@3502 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 22:13:00 +00:00
HD Moore
868d7bf561
Working findtag + samba
...
Removed call to evasions that didnt have corresponding definition
git-svn-id: file:///home/svn/incoming/trunk@3501 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 21:04:50 +00:00
HD Moore
2290b14c7d
PPC fixes
...
git-svn-id: file:///home/svn/incoming/trunk@3500 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 20:40:25 +00:00
bmc
d7e2e99cef
* display something when the exploit is sent so the user has some indication of status
...
git-svn-id: file:///home/svn/incoming/trunk@3499 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:57:28 +00:00
bmc
40961655d6
* enable evasions on the socket as they come in
...
git-svn-id: file:///home/svn/incoming/trunk@3498 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:56:50 +00:00
bmc
3adb2211b8
* add tcp segment size evasion
...
* add tcp write delay evasion
git-svn-id: file:///home/svn/incoming/trunk@3497 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:55:56 +00:00
bmc
f5affd4b41
ugh, nasty bug where if an exception is raised during on_client_data in which the client was shut down, the select loop will still state that the client has data to be processed, which causes an exception to be raised, starting to loop over again
...
git-svn-id: file:///home/svn/incoming/trunk@3496 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:54:08 +00:00
bmc
fe608d1676
general cleanups
...
add space evasions to the playlist
git-svn-id: file:///home/svn/incoming/trunk@3495 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 18:28:13 +00:00
HD Moore
792b3a8ad4
Ported, tested, and stuff.
...
git-svn-id: file:///home/svn/incoming/trunk@3494 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 03:31:41 +00:00
HD Moore
83be4703d6
modules/
...
git-svn-id: file:///home/svn/incoming/trunk@3493 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-02 20:43:55 +00:00
HD Moore
3a69fe2fae
More features
...
git-svn-id: file:///home/svn/incoming/trunk@3492 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-02 05:54:06 +00:00
bmc
7bb13e2706
port from vlad, with a few cleanups
...
git-svn-id: file:///home/svn/incoming/trunk@3491 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:35:36 +00:00
bmc
620dfad4a9
gee, these were not cut and paste targets...
...
git-svn-id: file:///home/svn/incoming/trunk@3490 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:33:49 +00:00
bmc
2f2790386f
providing the XDR alias is important...
...
git-svn-id: file:///home/svn/incoming/trunk@3489 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:31:28 +00:00
bmc
f3ae631d59
tabify
...
git-svn-id: file:///home/svn/incoming/trunk@3488 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 18:42:14 +00:00
vlad902
27e12952d0
Replace get_once with get()
...
git-svn-id: file:///home/svn/incoming/trunk@3487 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 00:01:57 +00:00
bmc
9096ecf8e7
* EVASION!
...
git-svn-id: file:///home/svn/incoming/trunk@3486 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-31 22:41:10 +00:00
bmc
6c8f513e47
* add "good" char list as well, since well... otherwise its painful.
...
git-svn-id: file:///home/svn/incoming/trunk@3485 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-31 22:25:55 +00:00
bmc
7f270f55b0
its really an html exploit...
...
git-svn-id: file:///home/svn/incoming/trunk@3484 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 22:12:17 +00:00
bmc
8d2582dffa
use a slightly different port than other tests
...
git-svn-id: file:///home/svn/incoming/trunk@3483 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 22:11:36 +00:00
bmc
750e119a76
* use a slightly different port than other tests
...
git-svn-id: file:///home/svn/incoming/trunk@3482 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 22:11:09 +00:00
bmc
d668b87f68
* remove some comments
...
git-svn-id: file:///home/svn/incoming/trunk@3481 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 22:09:58 +00:00
HD Moore
f4c07e8a54
Catch an exception thrown if no default route exists
...
git-svn-id: file:///home/svn/incoming/trunk@3480 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 21:57:24 +00:00
HD Moore
7ee4d05bec
Woo, neat krad winamp exploit :)
...
git-svn-id: file:///home/svn/incoming/trunk@3479 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 19:28:19 +00:00
bmc
cd06c10aba
* fixup include path
...
git-svn-id: file:///home/svn/incoming/trunk@3478 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 18:58:16 +00:00
bmc
93ad7045ba
* rex exception names are used, therefor rex/exceptions is required
...
git-svn-id: file:///home/svn/incoming/trunk@3477 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 18:50:43 +00:00
bmc
f76becf428
* make the connection failure use 1 instead of 0, since many OSs bitch differentlly about port 0 than other ports
...
git-svn-id: file:///home/svn/incoming/trunk@3476 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 18:49:08 +00:00