Commit Graph

1298 Commits (5bfe1048e0b2253484f3461ae0d65e3a2075c963)

Author SHA1 Message Date
Matt Miller 9a634f0df9 fix to import options in exploit simple
git-svn-id: file:///home/svn/incoming/trunk@3525 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-11 16:01:23 +00:00
bmc b091a21f2b * to_unicode now supports more than just utf-16le, which is still the default.
* add tests for all of the unicode variations.


git-svn-id: file:///home/svn/incoming/trunk@3524 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 17:30:41 +00:00
bmc a0af1e9598 * a more complete selection of various unicode types supported by most browsers
git-svn-id: file:///home/svn/incoming/trunk@3523 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 17:29:37 +00:00
bmc 1c51681efe * add <object> base64 encoded objects, with 1 byte pad, 2 byte pad, and random space injection. Works fine on ie 4, firefox, and safari.
git-svn-id: file:///home/svn/incoming/trunk@3522 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 15:45:37 +00:00
bmc 524c0a3f74 * add 'none' encoding
git-svn-id: file:///home/svn/incoming/trunk@3521 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 15:44:15 +00:00
Matt Miller 9c537c42fd missed option
git-svn-id: file:///home/svn/incoming/trunk@3520 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-08 01:12:26 +00:00
Matt Miller 6a52aae59a switch to use a service specific user/pass datastore option to avoid payload conflicts
git-svn-id: file:///home/svn/incoming/trunk@3519 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-08 01:07:47 +00:00
bmc b99a9e5075 * a few updates to make it a bit more like reality, still doesn't work though
git-svn-id: file:///home/svn/incoming/trunk@3518 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-07 15:23:54 +00:00
bmc 1351ceed1c * add support to hex/%u encode a URI
git-svn-id: file:///home/svn/incoming/trunk@3517 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:57 +00:00
bmc ca315abe1b * add uri-encoding as an evasion method (though, exploits could hard code it if they need to...)
git-svn-id: file:///home/svn/incoming/trunk@3516 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:10 +00:00
bmc 16156c8aea * the XML isn't required, random shit works just fine
* only normalizing of the stuff that SHOULD be normalizes works for shit with this exploit


git-svn-id: file:///home/svn/incoming/trunk@3515 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:47:06 +00:00
bmc 1c35f492a8 * turn into an HTTP client request
git-svn-id: file:///home/svn/incoming/trunk@3514 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 21:12:37 +00:00
bmc c2c01a2d9e * use full path to the const, since in odd situations, the const isn't in scope. (WTF?)
git-svn-id: file:///home/svn/incoming/trunk@3513 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:24:45 +00:00
bmc 0f6055c73c support both POST and SEARCH as basic post request types.
git-svn-id: file:///home/svn/incoming/trunk@3512 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:23:52 +00:00
bmc 32dfdc114c * allow a request to pass a timeout (and by allowing passing a timeout, the ability to not parse the response)
git-svn-id: file:///home/svn/incoming/trunk@3511 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:22:47 +00:00
bmc d14646e084 * remove redundant stringification
git-svn-id: file:///home/svn/incoming/trunk@3510 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 15:15:41 +00:00
vlad902 b158ccb973 Initial commit
git-svn-id: file:///home/svn/incoming/trunk@3509 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 22:05:01 +00:00
HD Moore 0ea7fc3ec4 Minor tweaks
git-svn-id: file:///home/svn/incoming/trunk@3508 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 20:18:45 +00:00
HD Moore dc42740402 Added a new JObs tab
git-svn-id: file:///home/svn/incoming/trunk@3507 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 19:43:05 +00:00
HD Moore 2a2e4d253f Added Wx GUI design docs
git-svn-id: file:///home/svn/incoming/trunk@3506 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 19:42:52 +00:00
HD Moore 5b497d5e4d Added Irix platform
Tweaked reverse.rb to use a subshell and background it
Added Irix lpdexec


git-svn-id: file:///home/svn/incoming/trunk@3505 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 18:10:08 +00:00
vlad902 3acdd81b9e metasploit -> mozilla
git-svn-id: file:///home/svn/incoming/trunk@3504 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 01:56:34 +00:00
HD Moore b6d64822ba proper fix
git-svn-id: file:///home/svn/incoming/trunk@3503 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 23:59:17 +00:00
HD Moore f84c04839f Inits the UI for check
git-svn-id: file:///home/svn/incoming/trunk@3502 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 22:13:00 +00:00
HD Moore 868d7bf561 Working findtag + samba
Removed call to evasions that didnt have corresponding definition


git-svn-id: file:///home/svn/incoming/trunk@3501 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 21:04:50 +00:00
HD Moore 2290b14c7d PPC fixes
git-svn-id: file:///home/svn/incoming/trunk@3500 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 20:40:25 +00:00
bmc d7e2e99cef * display something when the exploit is sent so the user has some indication of status
git-svn-id: file:///home/svn/incoming/trunk@3499 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:57:28 +00:00
bmc 40961655d6 * enable evasions on the socket as they come in
git-svn-id: file:///home/svn/incoming/trunk@3498 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:56:50 +00:00
bmc 3adb2211b8 * add tcp segment size evasion
* add tcp write delay evasion


git-svn-id: file:///home/svn/incoming/trunk@3497 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:55:56 +00:00
bmc f5affd4b41 ugh, nasty bug where if an exception is raised during on_client_data in which the client was shut down, the select loop will still state that the client has data to be processed, which causes an exception to be raised, starting to loop over again
git-svn-id: file:///home/svn/incoming/trunk@3496 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:54:08 +00:00
bmc fe608d1676 general cleanups
add space evasions to the playlist


git-svn-id: file:///home/svn/incoming/trunk@3495 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 18:28:13 +00:00
HD Moore 792b3a8ad4 Ported, tested, and stuff.
git-svn-id: file:///home/svn/incoming/trunk@3494 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 03:31:41 +00:00
HD Moore 83be4703d6 modules/
git-svn-id: file:///home/svn/incoming/trunk@3493 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-02 20:43:55 +00:00
HD Moore 3a69fe2fae More features
git-svn-id: file:///home/svn/incoming/trunk@3492 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-02 05:54:06 +00:00
bmc 7bb13e2706 port from vlad, with a few cleanups
git-svn-id: file:///home/svn/incoming/trunk@3491 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:35:36 +00:00
bmc 620dfad4a9 gee, these were not cut and paste targets...
git-svn-id: file:///home/svn/incoming/trunk@3490 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:33:49 +00:00
bmc 2f2790386f providing the XDR alias is important...
git-svn-id: file:///home/svn/incoming/trunk@3489 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:31:28 +00:00
bmc f3ae631d59 tabify
git-svn-id: file:///home/svn/incoming/trunk@3488 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 18:42:14 +00:00
vlad902 27e12952d0 Replace get_once with get()
git-svn-id: file:///home/svn/incoming/trunk@3487 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 00:01:57 +00:00
bmc 9096ecf8e7 * EVASION!
git-svn-id: file:///home/svn/incoming/trunk@3486 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-31 22:41:10 +00:00
bmc 6c8f513e47 * add "good" char list as well, since well... otherwise its painful.
git-svn-id: file:///home/svn/incoming/trunk@3485 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-31 22:25:55 +00:00
bmc 7f270f55b0 its really an html exploit...
git-svn-id: file:///home/svn/incoming/trunk@3484 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 22:12:17 +00:00
bmc 8d2582dffa use a slightly different port than other tests
git-svn-id: file:///home/svn/incoming/trunk@3483 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 22:11:36 +00:00
bmc 750e119a76 * use a slightly different port than other tests
git-svn-id: file:///home/svn/incoming/trunk@3482 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 22:11:09 +00:00
bmc d668b87f68 * remove some comments
git-svn-id: file:///home/svn/incoming/trunk@3481 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 22:09:58 +00:00
HD Moore f4c07e8a54 Catch an exception thrown if no default route exists
git-svn-id: file:///home/svn/incoming/trunk@3480 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 21:57:24 +00:00
HD Moore 7ee4d05bec Woo, neat krad winamp exploit :)
git-svn-id: file:///home/svn/incoming/trunk@3479 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 19:28:19 +00:00
bmc cd06c10aba * fixup include path
git-svn-id: file:///home/svn/incoming/trunk@3478 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 18:58:16 +00:00
bmc 93ad7045ba * rex exception names are used, therefor rex/exceptions is required
git-svn-id: file:///home/svn/incoming/trunk@3477 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 18:50:43 +00:00
bmc f76becf428 * make the connection failure use 1 instead of 0, since many OSs bitch differentlly about port 0 than other ports
git-svn-id: file:///home/svn/incoming/trunk@3476 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 18:49:08 +00:00