HD Moore
79c8e18e6b
Add a wfs_delay for reverse_https. This fixes #2508 and fixes #1764 . This should prevent the race condition that was the root cause of both issues.
...
git-svn-id: file:///home/svn/framework3/trunk@10716 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-17 02:33:47 +00:00
HD Moore
9902dcb9cc
Fixes #2661 by removing exitfunc as a parameter, since it needs to be ExitProcess
...
git-svn-id: file:///home/svn/framework3/trunk@10714 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-16 22:01:01 +00:00
HD Moore
5e1d181da5
Fixes #2132 by removing patchup version of vnc inject
...
git-svn-id: file:///home/svn/framework3/trunk@10708 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-16 18:10:10 +00:00
Stephen Fewer
df8b9f8e95
Merge in the IPv6 Teredo patch.
...
git-svn-id: file:///home/svn/framework3/trunk@10543 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-04 11:02:46 +00:00
Joshua Drake
0f65deaf72
add messagebox payload from corelanc0d3r
...
git-svn-id: file:///home/svn/framework3/trunk@10495 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-27 13:31:48 +00:00
pks
14cabd2611
Allow debugging to be enabled.
...
This will make it easier to hopefully track down bugs.
exploitme-posix.c - make complete stack executable. On some kernel versions, execstack doesn't do the trick.
git-svn-id: file:///home/svn/framework3/trunk@10485 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-26 05:58:59 +00:00
pks
1392ef78d7
Use exit() instead of exit_group()
...
git-svn-id: file:///home/svn/framework3/trunk@10483 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-26 05:58:41 +00:00
pks
740e2c1ab2
Change base from 0x90040000 to 0x20040000.
...
This is more portable across kernel versions / patches it seems. This
will be better for SEGMEXEC compatibility as well.
git-svn-id: file:///home/svn/framework3/trunk@10455 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-24 04:06:28 +00:00
Joshua Drake
4590844871
tons of indentation fixes, some other style tweaks
...
git-svn-id: file:///home/svn/framework3/trunk@10394 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-20 08:06:27 +00:00
Joshua Drake
d8fb8e5c49
merge in another posix meterpreter update from philip, see #2418
...
git-svn-id: file:///home/svn/framework3/trunk@10307 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-13 14:44:00 +00:00
Joshua Drake
5de3146533
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10273 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-09 15:47:35 +00:00
Joshua Drake
3b67eefe4e
sync up with Philip's code, see #2418
...
git-svn-id: file:///home/svn/framework3/trunk@10202 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-31 15:10:41 +00:00
Joshua Drake
4651a0ad33
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10160 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-26 20:21:41 +00:00
Joshua Drake
2d14c0054f
add two contributed linux armle payloads, thx guys!
...
git-svn-id: file:///home/svn/framework3/trunk@10152 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 21:44:33 +00:00
Joshua Drake
d7e9a25bc7
add two windows cmd payloads from scriptjunkie, fixes #1876
...
git-svn-id: file:///home/svn/framework3/trunk@10122 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-23 22:50:24 +00:00
Joshua Drake
2572bb6919
add svn:keywords property
...
git-svn-id: file:///home/svn/framework3/trunk@10121 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-23 22:49:43 +00:00
James Lee
eda50fc89e
spawn out into another process so killing the browser won't drop our shell
...
git-svn-id: file:///home/svn/framework3/trunk@10091 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-21 06:28:29 +00:00
James Lee
871a6185b8
refactor
...
git-svn-id: file:///home/svn/framework3/trunk@10077 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 07:15:23 +00:00
James Lee
5d95f48848
add preliminary support for the new java payloads. Working meterpreter and shell stages with tcp bind and reverse stagers, see #406
...
git-svn-id: file:///home/svn/framework3/trunk@10073 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 07:01:23 +00:00
Joshua Drake
2482a83526
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9927 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-25 19:14:00 +00:00
James Lee
2a2f6fde56
not a command shell, it's a stager
...
git-svn-id: file:///home/svn/framework3/trunk@9912 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-22 16:29:01 +00:00
James Lee
929163834a
change the name to not lie
...
git-svn-id: file:///home/svn/framework3/trunk@9889 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 20:21:54 +00:00
HD Moore
a066ebc85b
Remove rescue
...
git-svn-id: file:///home/svn/framework3/trunk@9886 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 14:16:12 +00:00
HD Moore
2ce616fa1a
Hide this exception until loader.jar is checked in
...
git-svn-id: file:///home/svn/framework3/trunk@9880 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 03:10:15 +00:00
James Lee
08d705c1db
add java meterpreter and update java_calendar_deserialize to be able to use it, see #406
...
git-svn-id: file:///home/svn/framework3/trunk@9874 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 00:53:24 +00:00
Joshua Drake
dec6bfee0a
add missing includes
...
git-svn-id: file:///home/svn/framework3/trunk@9856 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 04:28:09 +00:00
James Lee
2a8a058519
add a bind stager for php
...
git-svn-id: file:///home/svn/framework3/trunk@9855 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-17 22:42:12 +00:00
Joshua Drake
2f5970e30b
set keywords property
...
git-svn-id: file:///home/svn/framework3/trunk@9655 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-01 23:46:05 +00:00
Joshua Drake
0882838491
ensure binary mode when opening files, whitespace fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9653 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-01 23:33:07 +00:00
James Lee
42f540258a
really, actually commit the meterpreter stage
...
git-svn-id: file:///home/svn/framework3/trunk@9638 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-30 23:51:29 +00:00
James Lee
920710a5fd
actually commit the stager, see #2128
...
git-svn-id: file:///home/svn/framework3/trunk@9595 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-23 22:24:50 +00:00
James Lee
c3d183c98d
split stadpi out into an extension, add a reverse_tcp stager, make the main meterpreter stage-aware so it will work as a standalone or eval'd by a stager that sets $msgsock and $msgsock_type; see #2128
...
git-svn-id: file:///home/svn/framework3/trunk@9594 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-23 20:00:27 +00:00
Joshua Drake
171543624a
fix typos
...
git-svn-id: file:///home/svn/framework3/trunk@9581 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-22 16:11:02 +00:00
James Lee
ef5c0f77eb
move copy-paste into a mixin
...
git-svn-id: file:///home/svn/framework3/trunk@9576 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-22 00:46:52 +00:00
James Lee
d1d2f8af0a
explain to the user that we couldn't find a vncviewer
...
git-svn-id: file:///home/svn/framework3/trunk@9575 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-22 00:14:08 +00:00
James Lee
6fb4a5630a
explain to the user that we couldn't find a vncviewer
...
git-svn-id: file:///home/svn/framework3/trunk@9574 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-22 00:13:43 +00:00
James Lee
c5203f72a0
missed deleting this when moving it to meterpreter_reverse_tcp
...
git-svn-id: file:///home/svn/framework3/trunk@9557 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-18 21:33:21 +00:00
James Lee
b03047094d
make the payload name match the standard
...
git-svn-id: file:///home/svn/framework3/trunk@9534 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-16 16:55:05 +00:00
Joshua Drake
e32abab8dc
a HTTP -> an HTTP ( http://www.english-zone.com/grammar/a-anlessn.html )
...
git-svn-id: file:///home/svn/framework3/trunk@9488 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-11 16:12:05 +00:00
HD Moore
faefb09b8c
Only gsub datastore variables if they aren't nil
...
git-svn-id: file:///home/svn/framework3/trunk@9403 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-03 01:23:02 +00:00
James Lee
9dc298f56d
make it work for more than localhost...
...
git-svn-id: file:///home/svn/framework3/trunk@9401 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-03 00:21:24 +00:00
James Lee
f974f59c32
make sure we have reverse_tcp
...
git-svn-id: file:///home/svn/framework3/trunk@9400 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-02 23:20:45 +00:00
James Lee
2470470405
stupid debug print
...
git-svn-id: file:///home/svn/framework3/trunk@9394 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-02 08:31:44 +00:00
James Lee
fe43e91bad
initial commit of php meterpreter, see #391 . upload, download, cd, pwd, ls, cat, sysinfo, getpid, and ps all work fine.
...
* execute works with channel read/write but no interact yet
* getuid is weird, since php's get_current_user() and getmyuid() return the owner of the file instead of the running uid (wtf?)
git-svn-id: file:///home/svn/framework3/trunk@9393 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-02 08:28:39 +00:00
HD Moore
a1ee346d59
Try a little harder to read the full image
...
git-svn-id: file:///home/svn/framework3/trunk@9379 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-29 02:20:23 +00:00
Ramon de C Valle
34f12a38ec
Change the base value used for calculating the system call numbers and
...
arguments to avoid null bytes in newer versions of AIX.
git-svn-id: file:///home/svn/framework3/trunk@9347 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-23 19:47:48 +00:00
Joshua Drake
0e72894e58
more cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@9212 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-03 17:13:09 +00:00
Joshua Drake
0ea6eca4bc
big module whitespace/formatting cleanup pass
...
git-svn-id: file:///home/svn/framework3/trunk@9179 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-30 08:40:19 +00:00
Joshua Drake
321404e2fe
add payload/generic/tight_loop - x86 debug payload
...
git-svn-id: file:///home/svn/framework3/trunk@9070 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 07:40:04 +00:00
HD Moore
11c10518b3
Bug fixes for better windows OS compatibility
...
git-svn-id: file:///home/svn/framework3/trunk@9002 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 14:57:51 +00:00
HD Moore
cd2760f2c2
Bug fixes and size improvements for the reverse_https stager
...
git-svn-id: file:///home/svn/framework3/trunk@9001 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 13:53:35 +00:00
HD Moore
e968c3894e
More size tweaks
...
git-svn-id: file:///home/svn/framework3/trunk@8999 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 08:03:28 +00:00
HD Moore
c8defe9716
Size tweaks to bring the ssl stager + encoder + target_id to exactly 400 bytes
...
git-svn-id: file:///home/svn/framework3/trunk@8998 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 07:48:53 +00:00
HD Moore
d2f44f4a22
Keywords
...
git-svn-id: file:///home/svn/framework3/trunk@8986 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 05:22:20 +00:00
HD Moore
b50d9049f0
Add the actual stager
...
git-svn-id: file:///home/svn/framework3/trunk@8985 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 05:21:42 +00:00
HD Moore
c6c956ab46
Small patch to enable a new stager
...
git-svn-id: file:///home/svn/framework3/trunk@8984 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 05:21:15 +00:00
HD Moore
5d0fb434b7
Adds a reverse_tcp_dns stager
...
git-svn-id: file:///home/svn/framework3/trunk@8983 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 03:38:57 +00:00
Stephen Fewer
75661291fa
and the bins, tiny modification to the ruby side and update the README.
...
git-svn-id: file:///home/svn/framework3/trunk@8891 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-24 00:03:32 +00:00
Stephen Fewer
46cc8e538f
The new x64 VNC inject payload stage.
...
git-svn-id: file:///home/svn/framework3/trunk@8746 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-08 14:51:43 +00:00
Joshua Drake
a0d5ce473b
add (staged) to the descriptions of staged payloads, fixes #955
...
git-svn-id: file:///home/svn/framework3/trunk@8733 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-06 05:27:13 +00:00
Joshua Drake
138d45d095
more missing constant errors fixed, fixes #975
...
git-svn-id: file:///home/svn/framework3/trunk@8642 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-25 21:11:12 +00:00
Joshua Drake
75533423dd
add requires for 2 stages missing them
...
git-svn-id: file:///home/svn/framework3/trunk@8634 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-25 06:05:02 +00:00
Joshua Drake
7d99a33b20
remove double-on_session call from generic payloads
...
git-svn-id: file:///home/svn/framework3/trunk@8621 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-24 20:57:09 +00:00
Joshua Drake
b391abd32d
adds scripting for command shell sessions
...
1. InitialAutoRunScript and AutoRunScript vars work
2. scripts/shells was created to hold them
3. *_shell methods were renamed shell_*
4. added "shell_command" method to command shell sessions
5. converted all uses of *_shell to shell_*
6. all payloads that produce command shell sessions include Msf::Sessions::CommandShellOptions
git-svn-id: file:///home/svn/framework3/trunk@8615 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-24 01:19:59 +00:00
Joshua Drake
f8ca490b98
move meterpreter on_session functionality into a mixin
...
git-svn-id: file:///home/svn/framework3/trunk@8586 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-22 21:05:08 +00:00
Joshua Drake
17bd4b8b7d
fixed aix payloads to REALLY do variable substitution
...
git-svn-id: file:///home/svn/framework3/trunk@8418 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-08 22:41:36 +00:00
Joshua Drake
d68efa61d2
initial commit of aix cmsd exploit (not fully working yet)
...
git-svn-id: file:///home/svn/framework3/trunk@8397 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-08 00:44:37 +00:00
Joshua Drake
31949c4343
svn keywords fixups
...
fixed a bunch of $Id$ and $Revision$ typos
added keywords property to files missing it
git-svn-id: file:///home/svn/framework3/trunk@8242 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 20:12:13 +00:00
HD Moore
831833667a
Minor tweak (run inside of sh -c '')
...
git-svn-id: file:///home/svn/framework3/trunk@8107 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 20:19:51 +00:00
Joshua Drake
2283e029db
crossing fingers, big cr removal batch
...
git-svn-id: file:///home/svn/framework3/trunk@8038 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 22:24:22 +00:00
HD Moore
bcdb44b835
See #667 . This adds InitialAutoRunScript support, to be defaulted by browser modules (and others)
...
git-svn-id: file:///home/svn/framework3/trunk@7904 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 06:00:14 +00:00
Joshua Drake
b1c9b7e927
a few more svn:keywords fixes
...
git-svn-id: file:///home/svn/framework3/trunk@7870 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-15 02:11:42 +00:00
James Lee
5ddfffc94f
only accept one connection for bind_perl shells. fixes 669
...
git-svn-id: file:///home/svn/framework3/trunk@7790 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 23:49:50 +00:00
HD Moore
61e233df91
Keywords on all modules, plugins, and scripts
...
git-svn-id: file:///home/svn/framework3/trunk@7550 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-17 00:05:19 +00:00
HD Moore
dc0dc98771
Fixes #517 . Disables meterpreter stages for passivex stagers
...
git-svn-id: file:///home/svn/framework3/trunk@7546 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-16 22:45:33 +00:00
Stephen Fewer
6142f5d509
re-enable the passivex stager. we still need to force the meterpreter stage to be incompatible with this stager as their is a known issue between the two.
...
git-svn-id: file:///home/svn/framework3/trunk@7544 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-16 19:34:14 +00:00
Stephen Fewer
159ca526b4
Fixed a null pointer dereference bug (occurring in stages loaded by the PassiveX stager) that was being caused when an invalid exit funk was being patched into the stage by the PassiveX stager. This happened because the PassiveX stager uses the old type exit funks while the stages use the new type. This fix ensures the PassiveX stager gets the expected old exit funk value while the chosen stage gets the new exit funk value. This patch does not fix Bug #291 (PassiveX broken). Also I have left the PassiveX stager disabled until we can resolve the rest of the problems.
...
git-svn-id: file:///home/svn/framework3/trunk@7448 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-10 16:07:01 +00:00
James Lee
d9b5d62a3e
disable passivex for the rc1 until we can figure out why it doesn't work. see #291
...
git-svn-id: file:///home/svn/framework3/trunk@7419 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-09 04:32:22 +00:00
HD Moore
b38a74c961
Another mega-patch from Yoann Guillot: fixes warnings generated by method calls with a space betwee the method and the parans, corrects a problem with the alpha encoders that causes them to overwrite the allowed charset, hardcodes the metasm output size of some modules in order to reduce load time, more to come
...
git-svn-id: file:///home/svn/framework3/trunk@7246 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 16:40:19 +00:00
Stephen Fewer
995745d642
Commit a jsp bind shell payload (and add a missing require to the jsp reverse shell).
...
git-svn-id: file:///home/svn/framework3/trunk@7220 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 23:11:28 +00:00
HD Moore
00b2915554
Fixes #342 . Set ReverseConnectRetries to a value between 1 and 255 (default is 5). On failure it will ExitProcess (still better than a cpu spin)
...
git-svn-id: file:///home/svn/framework3/trunk@7217 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 20:31:14 +00:00
HD Moore
5972666f63
See #339 . Massive cleanup of author names, make them consistent across modules
...
git-svn-id: file:///home/svn/framework3/trunk@7075 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 21:30:45 +00:00
Stephen Fewer
1a220d6dc5
add java payload jsp_shell_reverse_tcp.
...
git-svn-id: file:///home/svn/framework3/trunk@7071 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 18:35:07 +00:00
James Lee
6a7a023844
I will not commit when sleep deprived. I will not commit when sleep deprived. I will not commit...
...
git-svn-id: file:///home/svn/framework3/trunk@7061 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 06:40:42 +00:00
James Lee
bc2c38c332
shave an instruction from the new allports stager
...
git-svn-id: file:///home/svn/framework3/trunk@7060 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 06:13:13 +00:00
HD Moore
b47b46e7c0
Set keywords
...
git-svn-id: file:///home/svn/framework3/trunk@7059 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 05:45:03 +00:00
HD Moore
ee9a8f4f76
Adds support for the reverse_tcp_allports stager for Windows. This payload tries to connect back on all ports, one at a time, from LPORT to 65535. This is incredibly slow (depends on the default socket timeout) and requires the user to forward all TCP ports of LHOST to a single listening port in the handler. Inspired by a few user requests and this blog post: http://clinicallyawesome.com/post/196352889/blind-connect-back-through-restrictive-firewall
...
git-svn-id: file:///home/svn/framework3/trunk@7058 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 05:44:50 +00:00
James Lee
e30e850ba7
shave a few bytes off of the windows stagers
...
git-svn-id: file:///home/svn/framework3/trunk@7035 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-14 08:45:01 +00:00
James Lee
782f830abf
make cd work by special-casing it to call chdir()
...
git-svn-id: file:///home/svn/framework3/trunk@7027 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 06:19:10 +00:00
James Lee
0f957f236e
make cd work by special-casing it to call chdir()
...
git-svn-id: file:///home/svn/framework3/trunk@7026 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 06:11:47 +00:00
HD Moore
185b93bf29
Enforce max password length of 14 to avoid a default policy warning about back compat
...
git-svn-id: file:///home/svn/framework3/trunk@7024 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 03:29:51 +00:00
Stephen Fewer
40ca641a96
Initial commit of the windows x64 meterpreter payloads!
...
git-svn-id: file:///home/svn/framework3/trunk@6997 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-03 17:47:21 +00:00
HD Moore
97725a489c
Round 3 of x64 support from Stephen Fewer - new payloads!
...
git-svn-id: file:///home/svn/framework3/trunk@6980 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-27 19:29:54 +00:00
HD Moore
cf10a62dcc
Merge in the beginnings of x64 support from Stephen Fewer
...
git-svn-id: file:///home/svn/framework3/trunk@6972 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-23 23:47:33 +00:00
HD Moore
f84cadd9ea
Correct the class/require name
...
git-svn-id: file:///home/svn/framework3/trunk@6929 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-01 04:02:47 +00:00
HD Moore
b70dad9186
Merge the new stubs for meterpreter on other platforms
...
git-svn-id: file:///home/svn/framework3/trunk@6928 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-01 03:50:40 +00:00
HD Moore
296703de77
Add the new metsvc singles
...
git-svn-id: file:///home/svn/framework3/trunk@6927 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-01 03:48:45 +00:00
HD Moore
b47226797d
Updating the whitespace to match the rest of the modules
...
git-svn-id: file:///home/svn/framework3/trunk@6925 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-31 18:02:14 +00:00
HD Moore
49b7dcb30c
Overhaul of the metasploit payloads from Stephen Fewer - smaller/cleaner/new hashing/support for WinNT 4.0 -> Win7 with size reductions for the stagers and minimal size increases for the singles
...
git-svn-id: file:///home/svn/framework3/trunk@6922 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-31 17:50:10 +00:00
James Lee
24e1af3f74
fix a pastographical error
...
git-svn-id: file:///home/svn/framework3/trunk@6919 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 15:23:52 +00:00
Ramon de C Valle
b5769ead52
Small corrections.
...
git-svn-id: file:///home/svn/framework3/trunk@6911 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 04:46:57 +00:00
James Lee
9c9669f5d9
add php/download_exec and remove an erroneous comment from windows/download_exec
...
git-svn-id: file:///home/svn/framework3/trunk@6905 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-26 23:08:31 +00:00
HD Moore
e70ac6cc19
Added a new set of match flags for cmd injection exploits (RequiredCmds). This reduces the number of 'bad' payloads listed for explot modules. A good example is disabling the netcat -e payloads for old Solaris exploits
...
git-svn-id: file:///home/svn/framework3/trunk@6854 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 15:20:35 +00:00
HD Moore
47ebd62092
Adds coverage for the DD-WRT web interface command execution flaw, adds two netcat -e payloads to work with it
...
git-svn-id: file:///home/svn/framework3/trunk@6852 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 12:56:42 +00:00
HD Moore
17d6de4247
Adds a reverse_tcp for metsvc
...
git-svn-id: file:///home/svn/framework3/trunk@6848 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 20:51:58 +00:00
HD Moore
d5a15718b5
Fix up AutoRunScript support (reflective had not been updated before being switched as default)
...
git-svn-id: file:///home/svn/framework3/trunk@6802 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 21:36:23 +00:00
HD Moore
48e1e5f351
Merge Stephen Fewer's patches to enable support for Windows 7 (fixes support for NT and 2000 as well)
...
git-svn-id: file:///home/svn/framework3/trunk@6744 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-05 20:24:37 +00:00
HD Moore
8a9675f27e
Switch the reflective loaders to the new default, fixes an issue in the old loader with large DLLs within some processes
...
git-svn-id: file:///home/svn/framework3/trunk@6743 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-05 06:23:46 +00:00
HD Moore
4ffd60a089
Move the old DLL injection payloads to a new naming convention
...
git-svn-id: file:///home/svn/framework3/trunk@6742 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-05 06:21:58 +00:00
HD Moore
fefaaa1884
Convert ; comments to // for debug mode
...
git-svn-id: file:///home/svn/framework3/trunk@6713 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-25 19:48:37 +00:00
HD Moore
d981332b89
Better search behavior for console and msfweb
...
git-svn-id: file:///home/svn/framework3/trunk@6706 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-24 01:31:16 +00:00
Ramon de C Valle
c2362ec409
All your POWER are belong to us.
...
git-svn-id: file:///home/svn/framework3/trunk@6698 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-23 03:49:25 +00:00
HD Moore
1fba3f678b
Adds Windows 7 support for the primary stagers: http://www.harmonysecurity.com/blog/2009/06/retrieving-kernel32s-base-address.html
...
git-svn-id: file:///home/svn/framework3/trunk@6677 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 04:35:44 +00:00
HD Moore
e1d17d6922
Add stdapi by default and support AutoRunScript
...
git-svn-id: file:///home/svn/framework3/trunk@6527 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-06 03:27:39 +00:00
HD Moore
7f9e020438
This adds a stub payload for interacting with sotirov's metsvc.exe
...
git-svn-id: file:///home/svn/framework3/trunk@6526 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-06 03:24:23 +00:00
James Lee
533cae760d
fix author field
...
git-svn-id: file:///home/svn/framework3/trunk@6512 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-30 06:12:27 +00:00
James Lee
9144e8378d
fix author field
...
git-svn-id: file:///home/svn/framework3/trunk@6510 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-30 06:10:12 +00:00
James Lee
cf5caf3d31
remove 'persistent' from the description in bind_php
...
git-svn-id: file:///home/svn/framework3/trunk@6491 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-18 23:51:20 +00:00
kris
37c2e301ed
replacing defunct framework URL in header comments in most modules and pcap_log
...
git-svn-id: file:///home/svn/framework3/trunk@6479 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-13 14:33:26 +00:00
kris
1eb8c8dfc0
meh, what can I say? I like my name
...
git-svn-id: file:///home/svn/framework3/trunk@6459 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-03 15:05:35 +00:00
kris
9482b4080e
set a few more modules' Versions to Revision, only did aux by accident last time
...
git-svn-id: file:///home/svn/framework3/trunk@6439 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-30 01:09:09 +00:00
HD Moore
eccfcdfced
Sets svn keywords on modules missing it, tweaks the emailer module
...
git-svn-id: file:///home/svn/framework3/trunk@6407 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 06:03:35 +00:00
HD Moore
13706d1bde
Tons of new Mac OS X code from Dino Dai Zovi and Charlie Miller, more to follow
...
git-svn-id: file:///home/svn/framework3/trunk@6353 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-18 23:28:24 +00:00
James Lee
fd7399210d
updated info for payload/php/shell_findsock
...
git-svn-id: file:///home/svn/framework3/trunk@6231 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-17 06:04:02 +00:00
James Lee
3cfee47b00
remove dll option from reflectivevncinject
...
git-svn-id: file:///home/svn/framework3/trunk@6180 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-24 03:44:59 +00:00
James Lee
55daaf64bd
remove dll option from reflectivemeterpreter, too
...
git-svn-id: file:///home/svn/framework3/trunk@6179 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-24 03:29:07 +00:00
James Lee
3a8935b2c6
remove the ability to set the dll path for meterp and vncinject
...
git-svn-id: file:///home/svn/framework3/trunk@6178 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-23 23:06:10 +00:00
HD Moore
70feb8152c
Switch to the new TTY session type
...
git-svn-id: file:///home/svn/framework3/trunk@6141 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 07:02:22 +00:00
HD Moore
4fdca1f6d7
Update info to reflect TTY class
...
git-svn-id: file:///home/svn/framework3/trunk@6138 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 06:47:53 +00:00
HD Moore
5b75b5d5a6
Move interact_tty to the TTY arch
...
git-svn-id: file:///home/svn/framework3/trunk@6137 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 06:47:04 +00:00
druid
0d1ca42ed6
Adds support for exploitation over dialup via the new Telephony library.
...
git-svn-id: file:///home/svn/framework3/trunk@6120 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 06:09:02 +00:00
James Lee
114067e7bb
standardize names
...
git-svn-id: file:///home/svn/framework3/trunk@6059 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-02 21:21:10 +00:00
James Lee
200cedeb25
clean up name and description
...
git-svn-id: file:///home/svn/framework3/trunk@6058 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-02 21:18:51 +00:00
kris
232145819b
Adding Linux/x86 inline IPv6 bind shell payload
...
git-svn-id: file:///home/svn/framework3/trunk@6036 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-21 07:10:27 +00:00
kris
4ae6d81616
Add bind_ruby and reverse_ruby cmd payloads for unix and windows
...
git-svn-id: file:///home/svn/framework3/trunk@5967 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-20 03:42:55 +00:00
kris
d7ad8fa452
Adding Linux/x86 IPv6 bind and reverse-connect stagers
...
git-svn-id: file:///home/svn/framework3/trunk@5951 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 21:01:26 +00:00
Ramon de C Valle
26692d3437
Added AIX Power payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5900 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:58:36 +00:00
Ramon de C Valle
dfbf6b34a5
Added Linux Power/Cell Broadband Engine Architecture payload modules and advanced payload options
...
git-svn-id: file:///home/svn/framework3/trunk@5899 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:57:53 +00:00
Ramon de C Valle
ec4fffaa61
Removing old AIX Power payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5897 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:52:57 +00:00
James Lee
75feaa6fab
allow passing args to meterpreter scripts through AutoRunScript
...
git-svn-id: file:///home/svn/framework3/trunk@5853 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-08 19:39:06 +00:00
HD Moore
be3bfb36a9
Correct the DLL path
...
git-svn-id: file:///home/svn/framework3/trunk@5844 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-05 06:13:26 +00:00
HD Moore
187f79eddf
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
...
git-svn-id: file:///home/svn/framework3/trunk@5837 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 20:08:24 +00:00
James Lee
0193cd5219
fix session vs client variable problems with meterpreter AutoRunScript and make usage actually reflect what the code does
...
git-svn-id: file:///home/svn/framework3/trunk@5834 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 06:40:12 +00:00
HD Moore
56a413d803
Reflective DLL injection payloads from Stephen Fewer
...
git-svn-id: file:///home/svn/framework3/trunk@5806 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 22:17:32 +00:00
Ramon de C Valle
8d19ba7bbf
Changed AIX_VERSION to AIXLEVEL
...
git-svn-id: file:///home/svn/framework3/trunk@5786 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 13:22:12 +00:00
Ramon de C Valle
c66d6c4e46
Set property 'svn:keywords'
...
git-svn-id: file:///home/svn/framework3/trunk@5783 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:43:21 +00:00
Ramon de C Valle
eb0c6d1a65
Added missing Linux x86 payload modules from unixasm
...
git-svn-id: file:///home/svn/framework3/trunk@5782 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:19:50 +00:00
Ramon de C Valle
693202fd4b
Updated AIX POWER/PowerPC payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5781 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:04:18 +00:00
Ramon de C Valle
e6127313c9
Updated AIX POWER/PowerPC payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5774 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:41:12 +00:00
Ramon de C Valle
f124597a56
Code cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:03:39 +00:00
James Lee
76dc2920d5
implemented in lib/msf/core/payload/php.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5745 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 05:49:11 +00:00
James Lee
38b565399e
actually randomize myexec function name
...
git-svn-id: file:///home/svn/framework3/trunk@5744 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 05:31:36 +00:00
HD Moore
fd256ec4a1
This massive commit changes the metasploit 3 module format. The new syntax allows for greater scalability and future improvements to the metasploit module loader. This change also makes it easier for users to add new modules, since the class name no longer needs to match the directory structure.
...
git-svn-id: file:///home/svn/framework3/trunk@5709 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-02 05:23:59 +00:00
HD Moore
422e58c51f
Close the listening socket, allows the same shellcode to beused on the same port repeatedly, thanks antoine!
...
git-svn-id: file:///home/svn/framework3/trunk@5705 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-01 16:16:34 +00:00
James Lee
647118f333
remove debug statements, add disabled_functions evasion in php findsock stuff
...
git-svn-id: file:///home/svn/framework3/trunk@5700 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-30 19:56:16 +00:00
James Lee
36a06e7576
initial commit of php findsock. This patch makes all http connections global and removes the "close if (!pipelining)" checks, so beware of bugs.
...
git-svn-id: file:///home/svn/framework3/trunk@5678 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 04:41:51 +00:00
Ramon de C Valle
309618a3f8
Fixed indentation
...
git-svn-id: file:///home/svn/framework3/trunk@5673 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-21 21:59:15 +00:00
Ramon de C Valle
40b8f1896e
Moving it in again. Thanks antoine for the fix!
...
git-svn-id: file:///home/svn/framework3/trunk@5672 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-21 19:35:27 +00:00
Ramon de C Valle
89ba4c289c
Moving out temporarily
...
git-svn-id: file:///home/svn/framework3/trunk@5671 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-20 18:18:29 +00:00
Ramon de C Valle
590ac24121
Moving out temporarily
...
git-svn-id: file:///home/svn/framework3/trunk@5670 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-20 18:17:05 +00:00
Ramon de C Valle
58cef5775e
Added ARCH_POWER constant and fixed AIX payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5663 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-17 01:42:51 +00:00
HD Moore
07c838e4e0
Merge patch and module from Robert, adds a x86 int3 payload for debugging, patches for the testsrv
...
git-svn-id: file:///home/svn/framework3/trunk@5660 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-15 19:38:50 +00:00
HD Moore
6772685f3e
Merge patch from Julien TINNES for MIPS support (LE/BE)
...
git-svn-id: file:///home/svn/framework3/trunk@5658 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-15 18:50:34 +00:00
Ramon de C Valle
4dd9b23f37
Added AIX POWER/PowerPC payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5655 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-10 20:15:38 +00:00
James Lee
f0976fad87
avoid logging socket errors
...
git-svn-id: file:///home/svn/framework3/trunk@5651 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-04 03:52:02 +00:00
James Lee
98632ac069
add simple command execution payload for php
...
git-svn-id: file:///home/svn/framework3/trunk@5646 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-01 04:41:18 +00:00
HD Moore
d53dd66701
Adds initial support for IPv6, including two stager. Tested Meterpreter over IPv6 stages on XP and Vista. Using this is still tricky, I will add a wiki page tomorrow to explain the ScopeID stuff for link-local testing. This commit also includes the raw (oversized) assembler for the stagers as well as the entire old metasploit assembly set (useful for development).
...
git-svn-id: file:///home/svn/framework3/trunk@5635 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-22 06:34:57 +00:00
HD Moore
cb2efe6356
Swap the new NX-enabled stagers for the old ones, keep the old ones since they are still much smaller.
...
git-svn-id: file:///home/svn/framework3/trunk@5628 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-13 01:49:07 +00:00
HD Moore
fae008d1b0
Adds the bind_nx_tcp stager (NX support)
...
git-svn-id: file:///home/svn/framework3/trunk@5625 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-11 22:51:28 +00:00
HD Moore
eaa91fd8f4
Adds a reverse_tcp stager that downloads the stage into a RWX page created with VirtualAlloc. Results in NX support
...
git-svn-id: file:///home/svn/framework3/trunk@5624 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-11 22:41:35 +00:00
James Lee
9b3c8e2d72
tebodell's patch to autorun meterpeter scripts on session creation
...
git-svn-id: file:///home/svn/framework3/trunk@5557 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-19 04:52:12 +00:00
James Lee
8800372e46
initial commit of browser_autopwn;
...
revamp php payloads;
socks5 for IPv6 (untested)
git-svn-id: file:///home/svn/framework3/trunk@5546 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-01 01:44:56 +00:00
James Lee
2db9dd6ab2
Reversing over greedy commit. =(
...
git-svn-id: file:///home/svn/framework3/trunk@5506 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 06:17:41 +00:00
James Lee
93199c5610
"set foo" prints the value of foo if it exists
...
git-svn-id: file:///home/svn/framework3/trunk@5505 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 05:29:32 +00:00
James Lee
297e4f4b4d
Fork doesn't work on windows
...
git-svn-id: file:///home/svn/framework3/trunk@5495 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-25 04:37:53 +00:00
Patrick Webster
6cb21b2dc7
Windows port of the Perl based cmd payloads
...
git-svn-id: file:///home/svn/framework3/trunk@5465 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-03 09:36:01 +00:00
James Lee
9019b077bd
fix timeout issues in reverse php shell
...
git-svn-id: file:///home/svn/framework3/trunk@5461 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-01 02:08:19 +00:00
HD Moore
7f5d7c5a29
Update payloads from toto
...
git-svn-id: file:///home/svn/framework3/trunk@5449 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-18 15:57:38 +00:00
HD Moore
cfaa70cf30
New chmod payload from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5439 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-10 21:21:51 +00:00
James Lee
c546d6ec9c
Really fix the empty LHOST bug
...
git-svn-id: file:///home/svn/framework3/trunk@5431 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-04 21:40:04 +00:00
James Lee
7b10ffbae6
Fix empty LHOST problem and space generation
...
git-svn-id: file:///home/svn/framework3/trunk@5430 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-04 20:50:39 +00:00
James Lee
dfa0f6c0c4
More reliable reverse shell
...
git-svn-id: file:///home/svn/framework3/trunk@5429 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-04 07:34:26 +00:00
James Lee
77f431fea3
autoload meterpreter's priv extension if the exploit gave us admin
...
git-svn-id: file:///home/svn/framework3/trunk@5427 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-02 23:07:33 +00:00
HD Moore
685241ab31
I suck.
...
git-svn-id: file:///home/svn/framework3/trunk@5414 4d416f70-5f16-0410-b530-b9f4589650da
2008-02-13 16:02:39 +00:00
HD Moore
d8d9db3299
Fixes #188 . This adds an exec stage to the OSX payloads
...
git-svn-id: file:///home/svn/framework3/trunk@5405 4d416f70-5f16-0410-b530-b9f4589650da
2008-02-09 07:58:38 +00:00
HD Moore
6677beb174
Merged revisions 5366-5377 via svnmerge from
...
svn+ssh://metasploit.com/home/svn/framework3/branches/framework-3.1
........
r5366 | hdm | 2008-01-26 20:30:53 -0600 (Sat, 26 Jan 2008) | 2 lines
Update version information
........
r5367 | hdm | 2008-01-26 21:10:57 -0600 (Sat, 26 Jan 2008) | 3 lines
Updated for version 3.1
........
r5369 | hdm | 2008-01-26 21:13:31 -0600 (Sat, 26 Jan 2008) | 3 lines
Wipe the private directories from the branch.
........
r5371 | hdm | 2008-01-27 17:24:24 -0600 (Sun, 27 Jan 2008) | 5 lines
Timeout options added for dcerpc connect and read times. Addition of novell netware as a supported target platform. Inclusion of the serverprotect exploit (still works on the latest version). Addition of the first remote netware kernel exploit that leads to a shell, addition of netware stager and shell, and first draft of the release notes for 3.1
........
r5372 | hdm | 2008-01-27 17:30:08 -0600 (Sun, 27 Jan 2008) | 3 lines
Formatting, indentation, fixed the static IP embedded in the request
........
r5373 | hdm | 2008-01-27 20:02:48 -0600 (Sun, 27 Jan 2008) | 3 lines
Correctly trap exploit errors in a way that works with all of the UIs
........
r5374 | hdm | 2008-01-27 20:23:25 -0600 (Sun, 27 Jan 2008) | 3 lines
More last-minute bug fixes
........
r5375 | hdm | 2008-01-27 20:37:43 -0600 (Sun, 27 Jan 2008) | 3 lines
Force multi-bind off in netware, correct label display in gtk gui labels
........
r5376 | hdm | 2008-01-27 20:50:03 -0600 (Sun, 27 Jan 2008) | 3 lines
More exception handling fun
........
git-svn-id: file:///home/svn/framework3/trunk@5378 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-28 03:06:31 +00:00
HD Moore
31d121da82
Speedup to local relay
...
git-svn-id: file:///home/svn/framework3/trunk@5358 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-26 22:17:59 +00:00
HD Moore
5ebeacda65
Automaticalyl use the ipwn file path
...
git-svn-id: file:///home/svn/framework3/trunk@5204 4d416f70-5f16-0410-b530-b9f4589650da
2007-11-26 22:22:18 +00:00
HD Moore
053165eb72
git-svn-id: file:///home/svn/framework3/trunk@5164 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-20 17:32:46 +00:00
HD Moore
3a5a25c133
A new iphone/itouch stages which remounts the drive rwx, writes an exe, and executes it with stdio mapped to the socket
...
git-svn-id: file:///home/svn/framework3/trunk@5163 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-20 03:51:15 +00:00
HD Moore
a927464cd8
8Mb > 32k :-)
...
git-svn-id: file:///home/svn/framework3/trunk@5162 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-20 02:08:42 +00:00
HD Moore
ad050b492d
Adding the staged versions of the OS X payloads. One step closer to download + execute
...
git-svn-id: file:///home/svn/framework3/trunk@5160 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-19 07:53:23 +00:00
HD Moore
83fdda022e
Correct the euid to 0
...
git-svn-id: file:///home/svn/framework3/trunk@5158 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-19 06:39:10 +00:00
Matt Miller
46d14f16b3
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@5138 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-05 21:10:37 +00:00
HD Moore
6f79e14c91
Fixes #157 . Patches from egypt@nmt.edu
...
git-svn-id: file:///home/svn/framework3/trunk@5137 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-05 19:23:45 +00:00
HD Moore
b113940b03
Buzzer payload! http://securityevaluators.com/iphone/bh07.pdf
...
git-svn-id: file:///home/svn/framework3/trunk@5121 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-25 04:21:48 +00:00
HD Moore
1527d92154
Correct offset typos in the new iphone modules. Add EXE output support for OS X PPC, Linux x86, and make the OS X ARM smaller.
...
git-svn-id: file:///home/svn/framework3/trunk@5119 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-25 01:50:05 +00:00
HD Moore
aa51f559e8
Keywords for SVN
...
git-svn-id: file:///home/svn/framework3/trunk@5111 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 03:13:50 +00:00
HD Moore
b6e1dc00f7
nops and payloads for arm-darwin (aka iphone) :-)
...
git-svn-id: file:///home/svn/framework3/trunk@5110 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 03:13:08 +00:00
HD Moore
04c6dbc748
Updated svn:keywords
...
git-svn-id: file:///home/svn/framework3/trunk@5100 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-10 01:01:20 +00:00
Matt Miller
7b65a56d65
initial support for metasm integration, ported sample payload to use it
...
git-svn-id: file:///home/svn/framework3/trunk@5076 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-11 00:37:50 +00:00
Ramon de C Valle
6462ede937
Fixes #106 . Added new single shell_bind_tcp payload module for Linux x86. See #106 .
...
git-svn-id: file:///home/svn/framework3/trunk@5068 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-31 02:10:49 +00:00
Ramon de C Valle
f60810d00c
Added more advanced payload options and advanced payload options support for Solaris.
...
git-svn-id: file:///home/svn/framework3/trunk@5060 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-25 03:24:51 +00:00
Ramon de C Valle
f3dd74cfc9
Added advanced payload options for *BSD, improved solaris targets of lsa_transnames_heap.rb, some code cleanups.
...
git-svn-id: file:///home/svn/framework3/trunk@5044 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-11 03:19:28 +00:00
Ramon de C Valle
d186725ac6
Added new Samba lsa_io_trans_names heap overflow exploit module for Solaris x86 and SPARC.
...
git-svn-id: file:///home/svn/framework3/trunk@5039 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-08 04:11:53 +00:00
Ramon de C Valle
99f806b0e9
Added OSX payloads advanced options and improved Samba exploit module.
...
git-svn-id: file:///home/svn/framework3/trunk@5033 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-06 01:22:54 +00:00
Ramon de C Valle
735c0b5d4e
Added svn:keywords and adjusted code indentation.
...
git-svn-id: file:///home/svn/framework3/trunk@5031 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-05 02:02:39 +00:00
Ramon de C Valle
7a5c4c29cc
Added new Samba lsa_io_trans_names heap overflow exploit module for Mac OS X x86 and PowerPC
...
git-svn-id: file:///home/svn/framework3/trunk@5030 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-05 01:41:39 +00:00
HD Moore
fe56bc418f
Sample payload rewrite that uses METASM
...
git-svn-id: file:///home/svn/framework3/trunk@5017 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:22:32 +00:00
Matt Miller
d33675d870
framework now properly handles using singles without handlers as both stages and singles, fixes #115
...
git-svn-id: file:///home/svn/framework3/trunk@4994 4d416f70-5f16-0410-b530-b9f4589650da
2007-06-16 05:04:03 +00:00
HD Moore
40511cffb7
This adds a Linux-payload specific mixin which allows for new advanced options, such as setuid/chroot prepends.
...
git-svn-id: file:///home/svn/framework3/trunk@4984 4d416f70-5f16-0410-b530-b9f4589650da
2007-06-09 02:25:31 +00:00
HD Moore
fe4f3119c1
More payloads from Ramon ( fixes #98 , #99 , #100 , #101 )
...
git-svn-id: file:///home/svn/framework3/trunk@4840 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-03 03:11:49 +00:00
HD Moore
2af13aa4ef
Fixes #88 #89 #90 #91 #92 . Replaces bind/reverse for BSD x86, replaces bind for OS X x86, adds reverse/find for OS X x86.
...
git-svn-id: file:///home/svn/framework3/trunk@4803 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-28 19:00:34 +00:00
HD Moore
6df72d9f41
Patch from GML to fix call calculation
...
git-svn-id: file:///home/svn/framework3/trunk@4438 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 22:38:54 +00:00
HD Moore
7136d6bbd4
PassiveX only works with IE 6 (5.x and 7.x fail)
...
git-svn-id: file:///home/svn/framework3/trunk@4428 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 06:19:42 +00:00
HD Moore
52ebcde5a0
mention IE 6 dependency in the description
...
git-svn-id: file:///home/svn/framework3/trunk@4426 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 06:16:38 +00:00
HD Moore
abbeb2e87e
Adding an Id tag and a standard header to all modules
...
git-svn-id: file:///home/svn/framework3/trunk@4419 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 00:10:39 +00:00
HD Moore
854607771c
fixes #4 . This is just a test of the post-commit hook
...
git-svn-id: file:///home/svn/framework3/trunk@4408 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-17 23:44:05 +00:00
HD Moore
ce01a25e0c
This patch fixes #4 . Pick a random file descriptor and make sure its closed before we use it
...
git-svn-id: file:///home/svn/framework3/trunk@4407 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-17 23:41:22 +00:00
HD Moore
bf2f1a7472
Updates from diaul
...
git-svn-id: file:///home/svn/framework3/trunk@4314 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-04 01:53:43 +00:00
HD Moore
4a484d8c68
Fancy new metasploit.com address for lin0xx
...
git-svn-id: file:///home/svn/framework3/trunk@4309 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-03 05:03:55 +00:00
HD Moore
d1033c5832
Importing lin0xx's XPFW killing bind payload
...
git-svn-id: file:///home/svn/framework3/trunk@4308 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-03 04:59:12 +00:00
HD Moore
68274d6870
PHP tags are now added by the php_include handler and no longer a part of the payloads themselves
...
git-svn-id: file:///home/svn/framework3/trunk@4254 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-05 03:31:18 +00:00
HD Moore
2bd17e31a8
new payloads from diaul
...
git-svn-id: file:///home/svn/framework3/trunk@4220 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-18 22:06:19 +00:00
HD Moore
ffc626675b
Initial support for PHP payloads
...
git-svn-id: file:///home/svn/framework3/trunk@4215 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:57:51 +00:00
HD Moore
8a922d0641
Always use IO.read vs IO.readlines.join
...
git-svn-id: file:///home/svn/framework3/trunk@4211 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:00:44 +00:00
Matt Miller
b477547a3d
partial fix for mod cache issue? committed vlad's new stagers
...
git-svn-id: file:///home/svn/framework3/trunk@4013 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-10 06:44:15 +00:00
HD Moore
c0f55ed478
Corrected the authors line
...
git-svn-id: file:///home/svn/framework3/trunk@3999 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-01 16:52:55 +00:00
HD Moore
7376f9a421
Imported the download-exec payload from msf 2.x
...
git-svn-id: file:///home/svn/framework3/trunk@3998 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-01 16:50:13 +00:00
Matt Miller
ea06abe5bb
support for generic payloads
...
git-svn-id: file:///home/svn/framework3/trunk@3843 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-26 02:13:25 +00:00
Matt Miller
66b99d69ae
more fixes for the meterpreter pivoting issues
...
git-svn-id: file:///home/svn/framework3/trunk@3840 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-22 07:19:59 +00:00
Matt Miller
d8b2f95178
auto load stdapi before interact, implement type? interface
...
git-svn-id: file:///home/svn/framework3/trunk@3833 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-15 04:07:25 +00:00
HD Moore
25c08bb206
Bug fixes, list of known bugs, final prep for beta-1
...
git-svn-id: file:///home/svn/framework3/trunk@3803 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-02 06:30:36 +00:00
HD Moore
c572f4cb8c
Typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@3765 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-27 21:03:24 +00:00
HD Moore
d086a1bedf
BSD license the default for non-msfdev created modules.
...
git-svn-id: file:///home/svn/incoming/trunk@3636 4d416f70-5f16-0410-b530-b9f4589650da
2006-05-06 16:34:39 +00:00
Matt Miller
3a37749de6
support for demand-loading of modules to improve load speed, expect problems
...
git-svn-id: file:///home/svn/incoming/trunk@3534 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-21 03:10:58 +00:00
bmc
d14646e084
* remove redundant stringification
...
git-svn-id: file:///home/svn/incoming/trunk@3510 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 15:15:41 +00:00
HD Moore
5b497d5e4d
Added Irix platform
...
Tweaked reverse.rb to use a subshell and background it
Added Irix lpdexec
git-svn-id: file:///home/svn/incoming/trunk@3505 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 18:10:08 +00:00
HD Moore
868d7bf561
Working findtag + samba
...
Removed call to evasions that didnt have corresponding definition
git-svn-id: file:///home/svn/incoming/trunk@3501 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 21:04:50 +00:00
HD Moore
2290b14c7d
PPC fixes
...
git-svn-id: file:///home/svn/incoming/trunk@3500 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 20:40:25 +00:00
HD Moore
04341837f7
Bug fix to msfencode when invalid -e is specified
...
Small tweaks to type77, mostly for print_status and -find
Fixed busted payload port in shell_reverse_tcp
git-svn-id: file:///home/svn/incoming/trunk@3469 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-29 21:47:51 +00:00
bmc
4d432875d0
via perl...
...
git-svn-id: file:///home/svn/incoming/trunk@3454 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 15:11:16 +00:00
HD Moore
e249d9ebe5
Massive update to tab indentation (used ./dev/tabify.rb)
...
git-svn-id: file:///home/svn/incoming/trunk@3450 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 05:00:35 +00:00
bmc
7cedfcc828
* connectback perl payload
...
git-svn-id: file:///home/svn/incoming/trunk@3435 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-23 17:14:33 +00:00
HD Moore
ec46bc70fd
Typo
...
git-svn-id: file:///home/svn/incoming/trunk@3431 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-22 20:01:38 +00:00
HD Moore
1bffccf605
New licensing terms, revision bump to v3
...
git-svn-id: file:///home/svn/incoming/trunk@3425 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 22:10:20 +00:00
bmc
49016b9d99
* perl bind shell
...
git-svn-id: file:///home/svn/incoming/trunk@3417 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-20 22:31:58 +00:00
Matt Miller
d07e5fd330
patch from bmc
...
git-svn-id: file:///home/svn/incoming/trunk@3410 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-19 17:03:55 +00:00
Matt Miller
68a8a5262b
change unknown license to GPL
...
git-svn-id: file:///home/svn/incoming/trunk@3379 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 03:48:36 +00:00
Matt Miller
2e19a86843
added license to all modules
...
git-svn-id: file:///home/svn/incoming/trunk@3377 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 02:59:47 +00:00