jvazquez-r7
|
a9fa2d25aa
|
Add SMB module for MS10-046
|
2015-03-11 23:23:56 -05:00 |
HD Moore
|
cdef992d6b
|
Lands #4912, http handlers will use the client's Host header by default.
|
2015-03-11 23:23:37 -05:00 |
scriptjunkie
|
dfbc50ff47
|
Make Host header override optional
|
2015-03-11 23:15:45 -05:00 |
|
HD Moore
|
b604599c8e
|
Fix comments
|
2015-03-11 21:32:35 -05:00 |
|
HD Moore
|
c3f2536ef6
|
Make the stager clear in the payload descriptions
|
2015-03-11 21:30:02 -05:00 |
|
HD Moore
|
b105a88b95
|
Fix https convention
|
2015-03-11 21:26:31 -05:00 |
|
HD Moore
|
8bae58d631
|
Updated cache sizes
|
2015-03-11 21:25:12 -05:00 |
|
HD Moore
|
479a9cc1a9
|
Fix missing stack variables & remove old comment
|
2015-03-11 21:23:27 -05:00 |
|
HD Moore
|
631e1606bf
|
Fix WinHttpSetOption & stack parameters
|
2015-03-11 21:05:18 -05:00 |
Tod Beardsley
|
99494328d2
|
Update Nvidia module with an OSVDB ref
The paper is really good, but could use a more traditional reference.
[See #4884]
|
2015-03-11 19:51:22 -05:00 |
|
scriptjunkie
|
401d553f84
|
Use host header in reverse_http(s)
|
2015-03-11 19:40:52 -05:00 |
|
jvazquez-r7
|
0e4e264325
|
Redo description
|
2015-03-11 18:19:28 -05:00 |
|
jvazquez-r7
|
aaabd23707
|
merge cleanup
|
2015-03-11 18:13:56 -05:00 |
|
jvazquez-r7
|
4e6aca0209
|
refactor create_exploit_file
|
2015-03-11 18:13:09 -05:00 |
|
jvazquez-r7
|
5662e5c5a6
|
Add module for MS15-020
|
2015-03-11 17:29:02 -05:00 |
|
HD Moore
|
66a45ac7fd
|
Add spec for reverse_winhttps
|
2015-03-11 16:29:22 -05:00 |
|
HD Moore
|
1135e5e073
|
First take on WinHTTP stagers, untested
|
2015-03-11 16:27:14 -05:00 |
|
HD Moore
|
7e3b4017f0
|
Rename and resynced with master, ready for refactoring
|
2015-03-11 14:36:27 -05:00 |
|
HD Moore
|
ea1bc69e2e
|
Merge branch 'master' into feature/add-reverse_winhttp-stagers
|
2015-03-11 14:29:34 -05:00 |
sinn3r
|
215c209f88
|
Land #4901, CVE-2014-0311, Flash ByteArray Uncompress UAF
|
2015-03-11 14:04:17 -05:00 |
|
sinn3r
|
43b90610b1
|
Temp
|
2015-03-11 13:53:34 -05:00 |
Brent Cook
|
ceeee4446f
|
Land #4904, @hmoore-r7 reworks reverse_http/s stagers
They are now assembled dynamically and support more flexible options,
such as long URLs.
|
2015-03-11 10:41:59 -05:00 |
|
sinn3r
|
2a9d6e64e2
|
Starting point for CVE-2015-0318
|
2015-03-11 09:58:41 -05:00 |
|
HD Moore
|
02c7461d32
|
Lands #4906 and fixes #4905 by updating Conventions for HTTP incompatible payloads
|
2015-03-11 00:49:27 -05:00 |
|
HD Moore
|
ad39adf9c2
|
Missing comma
|
2015-03-11 00:49:07 -05:00 |
|
HD Moore
|
cb1a1ef692
|
Remove bad stager+stage combinations from the payload set
|
2015-03-11 00:46:24 -05:00 |
|
HD Moore
|
a89926b663
|
Exclude vncinject from http stagers (depends on sockedi)
|
2015-03-11 00:46:04 -05:00 |
|
jvazquez-r7
|
8a452a7cba
|
Do somce cleanup
|
2015-03-10 17:10:44 -05:00 |
|
Brent Cook
|
9ade107325
|
disable reverse_http methods from upexec and shell payloads
These don't work over http and don't appear to have ever, as far back as
I could test. They appear to be an accident perhaps.
|
2015-03-10 17:08:58 -05:00 |
|
jvazquez-r7
|
4a84693fb0
|
Support windows
|
2015-03-10 16:58:33 -05:00 |
|
jvazquez-r7
|
c26bea3429
|
Fix credits
|
2015-03-10 16:27:07 -05:00 |
|
jvazquez-r7
|
980c83cb70
|
Fix metadata
|
2015-03-10 16:25:02 -05:00 |
|
jvazquez-r7
|
9e17874389
|
Exploit CVE-2015-1427
|
2015-03-10 16:17:51 -05:00 |
|
HD Moore
|
1d17e9ab5b
|
Remove the 256 byte limit for URLs
|
2015-03-10 15:27:04 -05:00 |
Samuel Huckins
|
7be665d74e
|
Land #4900, credential version for postgres hash
|
2015-03-10 15:17:55 -05:00 |
|
HD Moore
|
5f382e539a
|
Updated required_space to count all 256 bytes of the URL
|
2015-03-10 15:17:09 -05:00 |
|
HD Moore
|
dedf3726ea
|
Simplify the uri_req_len logic, thanks @bcook-r7
|
2015-03-10 15:12:02 -05:00 |
David Maloney
|
261159aa66
|
update lockfile
|
2015-03-10 14:38:01 -05:00 |
William Vu
|
736f0b34be
|
Land #4902, @nstarke's db_connect warning message
|
2015-03-10 14:12:47 -05:00 |
|
HD Moore
|
db351317a5
|
Merge with PR branch
|
2015-03-10 14:08:35 -05:00 |
|
HD Moore
|
0f763c2cb3
|
First step to reworking the winhttp stagers
|
2015-03-10 14:07:25 -05:00 |
Nicholas Starke
|
9a974af7dd
|
Merge pull request #3 from wvu-r7/pr/4902
Change print_status to print_error
|
2015-03-10 14:05:34 -05:00 |
|
William Vu
|
3c7b061e05
|
Use single quotes
But I like double quotes. :(
|
2015-03-10 14:03:13 -05:00 |
Borja Merino
|
991e72a4fa
|
HTTP stager based on WinHttp
|
2015-03-10 13:40:16 -05:00 |
|
William Vu
|
72e7691300
|
Change print_status to print_error
And drop db_disconnect note to another line.
|
2015-03-10 13:31:35 -05:00 |
|
Nicholas Starke
|
4d12690ca6
|
Merge pull request #2 from wvu-r7/pr/4902
Refactor db_{status,connect} a bit
|
2015-03-10 13:02:20 -05:00 |
|
HD Moore
|
966848127a
|
Refactor x86 Windows reverse_http and reverse_https stagers
|
2015-03-10 12:48:30 -05:00 |
|
William Vu
|
e81f2e366c
|
Refactor db_{status,connect} a bit
Also allow for db_connect help.
|
2015-03-10 12:35:58 -05:00 |
|
jvazquez-r7
|
f8f178b1db
|
Fix script_mvel_rce check
|
2015-03-10 09:39:02 -05:00 |
|
jvazquez-r7
|
9dc99e4207
|
Update check
|
2015-03-10 09:26:22 -05:00 |