James Lee
|
5ddfffc94f
|
only accept one connection for bind_perl shells. fixes 669
git-svn-id: file:///home/svn/framework3/trunk@7790 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 23:49:50 +00:00 |
Mario Ceballos
|
c1c06d6ea1
|
adds ranking.. more aux. modules need this to be listed.
git-svn-id: file:///home/svn/framework3/trunk@7789 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 23:29:53 +00:00 |
Joshua Drake
|
215879334a
|
minor tweaks to targets
git-svn-id: file:///home/svn/framework3/trunk@7788 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 23:19:19 +00:00 |
|
James Lee
|
8d25dc00bc
|
bail if MinimumRank is invalid
git-svn-id: file:///home/svn/framework3/trunk@7787 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 23:07:58 +00:00 |
|
James Lee
|
084a10ded5
|
remove a debug print and deal with minrank being absent
git-svn-id: file:///home/svn/framework3/trunk@7786 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 22:42:06 +00:00 |
|
Joshua Drake
|
318750c68c
|
oops, forgot to update fmtstr_count_printed
git-svn-id: file:///home/svn/framework3/trunk@7785 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 22:37:34 +00:00 |
|
Joshua Drake
|
d56daab7d8
|
little comment heh
git-svn-id: file:///home/svn/framework3/trunk@7784 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 22:27:11 +00:00 |
|
James Lee
|
6665669b47
|
use range_walker to allow nmap notation in -I and -E arguments
git-svn-id: file:///home/svn/framework3/trunk@7783 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 21:52:03 +00:00 |
|
Joshua Drake
|
164dd4201a
|
updated badchars, rh6.2 target, added %8x detection check
git-svn-id: file:///home/svn/framework3/trunk@7782 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 21:51:46 +00:00 |
|
Joshua Drake
|
4a363329cb
|
fixed generating fmts from buffers with small value delta (eg \x02\x01\x03\x01)
git-svn-id: file:///home/svn/framework3/trunk@7781 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 21:50:17 +00:00 |
|
James Lee
|
683edd1462
|
add test to make sure num_ips == length
git-svn-id: file:///home/svn/framework3/trunk@7780 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 21:31:29 +00:00 |
|
James Lee
|
e0bd6dd6ed
|
don't bother checking for an address if our range is empty
git-svn-id: file:///home/svn/framework3/trunk@7779 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 21:28:44 +00:00 |
|
James Lee
|
48c8b35b5a
|
single ip addresses in the new rangewalker are separated by spaces, not commas. fixes 666
git-svn-id: file:///home/svn/framework3/trunk@7778 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 19:17:42 +00:00 |
Mike Smith
|
529b31e502
|
We don't want an id column in vulns_refs
git-svn-id: file:///home/svn/framework3/trunk@7777 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 18:58:00 +00:00 |
HD Moore
|
4fcdceccb7
|
No ruby access on the common target
git-svn-id: file:///home/svn/framework3/trunk@7776 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 15:13:35 +00:00 |
|
HD Moore
|
3c08bc0c80
|
Rename and reference update from the microsoft patch
git-svn-id: file:///home/svn/framework3/trunk@7775 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 15:06:26 +00:00 |
|
HD Moore
|
8a784339c4
|
Remove a debug print
git-svn-id: file:///home/svn/framework3/trunk@7774 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 14:00:21 +00:00 |
|
HD Moore
|
898c8655ff
|
Default rank to manual for the search command
git-svn-id: file:///home/svn/framework3/trunk@7773 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 13:57:46 +00:00 |
|
HD Moore
|
ba1b032207
|
Adds coverage for the QTSS metachar injection bug
git-svn-id: file:///home/svn/framework3/trunk@7772 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 13:23:59 +00:00 |
|
Joshua Drake
|
88de26e46c
|
re-enable pdf obfuscation
git-svn-id: file:///home/svn/framework3/trunk@7771 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 06:19:32 +00:00 |
|
James Lee
|
961e70fc34
|
add -f flag to exploit command to force running despite a conflicting MinimumRank value. fixes 628
git-svn-id: file:///home/svn/framework3/trunk@7770 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 02:49:27 +00:00 |
|
Joshua Drake
|
e2f70c8928
|
detect fmt str specifier capabilities, rework stack dumping
git-svn-id: file:///home/svn/framework3/trunk@7769 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 02:19:07 +00:00 |
|
Joshua Drake
|
061b4a36cf
|
add stack reading and detection for dpa/fpu fmt specifiers
git-svn-id: file:///home/svn/framework3/trunk@7768 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 02:18:12 +00:00 |
|
James Lee
|
6989949720
|
adds a global option, MinimumRank, which db_autopwn now checks to prevent running exploits below a certain rank. fixes #625, see #628
git-svn-id: file:///home/svn/framework3/trunk@7767 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 01:54:20 +00:00 |
|
HD Moore
|
4657436e1d
|
See #609. Force the EXITFUNC to process for persistence.rb's handler
git-svn-id: file:///home/svn/framework3/trunk@7766 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-09 00:18:43 +00:00 |
|
Joshua Drake
|
1fec10cb44
|
finish and test target for redhat 6.2
git-svn-id: file:///home/svn/framework3/trunk@7765 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 23:52:11 +00:00 |
|
Joshua Drake
|
f383949540
|
fix 1.9.1 compatability
git-svn-id: file:///home/svn/framework3/trunk@7764 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 23:50:29 +00:00 |
|
Joshua Drake
|
9abe0c0b03
|
added support for direct parameter access
git-svn-id: file:///home/svn/framework3/trunk@7763 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 23:50:02 +00:00 |
|
Joshua Drake
|
4bcc8a93a3
|
attempt to improve reliability of u3d pdf exploits
git-svn-id: file:///home/svn/framework3/trunk@7762 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 22:08:32 +00:00 |
|
HD Moore
|
ff19b649f3
|
See #662. This should fix most of the meterpreter-side issues with sockets, there is still a second piece of this which is unflushed data on the local forwards from the ruby code.
git-svn-id: file:///home/svn/framework3/trunk@7761 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 22:08:06 +00:00 |
|
Joshua Drake
|
87c85b5176
|
removed executable generation routines from Rex::Text (use Msf::Util::EXE), Fixes #660
git-svn-id: file:///home/svn/framework3/trunk@7760 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 21:24:45 +00:00 |
|
Joshua Drake
|
9b4f521df5
|
two more similar exploit modules, cleaned up naming
git-svn-id: file:///home/svn/framework3/trunk@7759 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 20:20:30 +00:00 |
|
Joshua Drake
|
9da59988a6
|
updated disclosure date
git-svn-id: file:///home/svn/framework3/trunk@7758 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 20:10:17 +00:00 |
|
Joshua Drake
|
5995ddca97
|
reduce ranking due to egghunter instability
git-svn-id: file:///home/svn/framework3/trunk@7757 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 19:53:11 +00:00 |
|
Joshua Drake
|
cb5d02af20
|
remove debug code
git-svn-id: file:///home/svn/framework3/trunk@7756 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 19:52:15 +00:00 |
|
Joshua Drake
|
6ae2293a79
|
add exploit module for cve-2009-0133
git-svn-id: file:///home/svn/framework3/trunk@7755 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 19:50:21 +00:00 |
|
Joshua Drake
|
bfa405cb2b
|
add exploit module for cve-2009-0133
git-svn-id: file:///home/svn/framework3/trunk@7754 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 19:50:00 +00:00 |
|
HD Moore
|
54c10c0c3d
|
Fixes #623 and fixes #622, implements a number of changes to the core channel dispatch code, sets timeouts on unmatched responses, and handles tcp relay writes with a threaded/timeout wrapper to avoid delays.
git-svn-id: file:///home/svn/framework3/trunk@7753 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 18:32:26 +00:00 |
|
Joshua Drake
|
d86bfedc3e
|
osvdb reference from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@7752 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 16:29:53 +00:00 |
|
HD Moore
|
353fa1dba5
|
Updated binaries (32/64) with the first round of socket fixes
git-svn-id: file:///home/svn/framework3/trunk@7751 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 15:01:44 +00:00 |
|
HD Moore
|
792724c3f3
|
Cleanups to the socket code, its still not perfect, but much more usable now
git-svn-id: file:///home/svn/framework3/trunk@7750 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 14:52:07 +00:00 |
|
Joshua Drake
|
0961ce3523
|
add exploit module for cve-2009-3693
git-svn-id: file:///home/svn/framework3/trunk@7749 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 03:08:46 +00:00 |
|
James Lee
|
7427640fb0
|
don't wait for a message body that will never come. fixes 659
git-svn-id: file:///home/svn/framework3/trunk@7748 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 02:26:37 +00:00 |
|
James Lee
|
47fdec6ab3
|
add ability to search by minimum rank, fixes 627
git-svn-id: file:///home/svn/framework3/trunk@7747 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 23:15:13 +00:00 |
|
Joshua Drake
|
ed70daf9b1
|
update references
git-svn-id: file:///home/svn/framework3/trunk@7746 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 21:30:11 +00:00 |
|
Joshua Drake
|
2dfcd26370
|
oops, dupe of auxiliary/admin/symantec/cba_exec.rb
git-svn-id: file:///home/svn/framework3/trunk@7745 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 21:28:53 +00:00 |
|
Joshua Drake
|
cb6fbe8894
|
add exploit module for cve-2009-1429
git-svn-id: file:///home/svn/framework3/trunk@7744 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 20:39:00 +00:00 |
|
Joshua Drake
|
e04a491905
|
updated references
git-svn-id: file:///home/svn/framework3/trunk@7743 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 20:26:43 +00:00 |
|
Joshua Drake
|
ce42156e38
|
minor tweaks
git-svn-id: file:///home/svn/framework3/trunk@7742 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 20:24:30 +00:00 |
|
Joshua Drake
|
f6d491a996
|
add exploit module from dookie
git-svn-id: file:///home/svn/framework3/trunk@7741 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 20:24:12 +00:00 |