HD Moore
|
d3a6418e53
|
Revert changes to elevate, still not getting around restrictions on primary token creation, needs a deeper look
git-svn-id: file:///home/svn/framework3/trunk@9759 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 21:59:31 +00:00 |
Tod Beardsley
|
d1726ddadf
|
I fell down a rathole trying to debug something today, but at least now I can always find my way back with this. It parses metasploit modules to see if you're using all the datastore elements you declared and if you declared all your datastore elements. Don't try to get too fancy with it -- my metaprogramming is all driven by regex, so it'll be easy to trick me if you want to with funny-looking code with weird linebreaks.
git-svn-id: file:///home/svn/framework3/trunk@9758 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 21:44:52 +00:00 |
HD Moore
|
3d01172af5
|
Binaries for the previous commit
git-svn-id: file:///home/svn/framework3/trunk@9757 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 21:41:06 +00:00 |
HD Moore
|
d5932fc2fd
|
Switch the namedpipe code to convert the thread token to a primary token first
git-svn-id: file:///home/svn/framework3/trunk@9756 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 21:40:44 +00:00 |
HD Moore
|
ec9156827e
|
Switch the elevator methods to DuplicateHandleEx to get a primary token
git-svn-id: file:///home/svn/framework3/trunk@9755 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 21:23:05 +00:00 |
HD Moore
|
29f9f6671e
|
This *should* fix all cases where execute -t would fail to use an impersonated token
git-svn-id: file:///home/svn/framework3/trunk@9754 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 19:32:51 +00:00 |
James Lee
|
7fd71dcbcb
|
note the updated version of ruby
git-svn-id: file:///home/svn/framework3/trunk@9753 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 19:29:34 +00:00 |
HD Moore
|
16134447d9
|
Cleanup / cosmetic for dcerpc, make EBADF pretend to be EOFError in terms of what exception is raised
git-svn-id: file:///home/svn/framework3/trunk@9752 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 19:05:16 +00:00 |
HD Moore
|
972e7bc282
|
Clean up some of the token impersonation code around process execution
git-svn-id: file:///home/svn/framework3/trunk@9751 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 18:54:20 +00:00 |
HD Moore
|
42f8dc10c0
|
Change the timeout from 0
git-svn-id: file:///home/svn/framework3/trunk@9750 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 18:03:48 +00:00 |
HD Moore
|
adf33feb0e
|
Catch an odd corner case with zero timeouts - this broke dcerpc over tcp
git-svn-id: file:///home/svn/framework3/trunk@9749 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 17:58:59 +00:00 |
Joshua Drake
|
0c2c35cc47
|
fix disclosure date
git-svn-id: file:///home/svn/framework3/trunk@9748 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 16:54:25 +00:00 |
HD Moore
|
2d65cb602b
|
Fix boolean handling
git-svn-id: file:///home/svn/framework3/trunk@9747 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 16:34:18 +00:00 |
Joshua Drake
|
3b7842eb0e
|
add dtp spoofer module from Spencer McIntyre
git-svn-id: file:///home/svn/framework3/trunk@9746 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 16:23:53 +00:00 |
Joshua Drake
|
5d4d225abe
|
add blurb about += vs <<
git-svn-id: file:///home/svn/framework3/trunk@9745 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-09 16:19:22 +00:00 |
Joshua Drake
|
c1f74794eb
|
style compliance fixes
git-svn-id: file:///home/svn/framework3/trunk@9744 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 23:34:50 +00:00 |
Joshua Drake
|
ad9f0d91b9
|
add tftp server auxiliary
git-svn-id: file:///home/svn/framework3/trunk@9743 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 23:34:33 +00:00 |
Joshua Drake
|
573fc216dd
|
add write support, tftproot, output dir for tftp server
git-svn-id: file:///home/svn/framework3/trunk@9742 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 23:34:29 +00:00 |
Joshua Drake
|
d83ca6c901
|
add a few more strings
git-svn-id: file:///home/svn/framework3/trunk@9741 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 21:05:36 +00:00 |
Carlos Perez
|
16541abdde
|
sent array instead of string to mixin call
git-svn-id: file:///home/svn/framework3/trunk@9740 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 20:31:26 +00:00 |
Carlos Perez
|
e0d9c41b5f
|
did not write info when file did not exists, problem fixed
git-svn-id: file:///home/svn/framework3/trunk@9739 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 20:28:56 +00:00 |
Carlos Perez
|
29c78e5c5c
|
forgot to check for no arguments
git-svn-id: file:///home/svn/framework3/trunk@9738 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 20:09:39 +00:00 |
Jonathan Cran
|
978c0f30e3
|
updated get_vmx to handle the structure passed by the control shells. For instance: @lab['metasploitable'] = {"vmx" => "msf_lab/user/Metasploitable/Metasploitable.vmx", "user" => "user", "pass" => "user", "os" => "linux" }
git-svn-id: file:///home/svn/framework3/trunk@9737 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 19:13:20 +00:00 |
HD Moore
|
a4c6280ae0
|
Minor cleanups for railgun, fix 1.8/1.9 differences, remove use of string encoding routines for 1.8 back-compat
git-svn-id: file:///home/svn/framework3/trunk@9736 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 18:53:49 +00:00 |
Tod Beardsley
|
64fb3624d6
|
Clean up UDP probe module a little, add an nbname_probe module that's nearly identical to nbname, but allows for pivot scans.
git-svn-id: file:///home/svn/framework3/trunk@9735 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 17:31:48 +00:00 |
Carlos Perez
|
c9e50d70a7
|
added check for UAC and account lockout using railgun for when capturing winlogon creds - Thanks for the API Call Mubix
git-svn-id: file:///home/svn/framework3/trunk@9734 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 17:27:01 +00:00 |
Carlos Perez
|
4d649045aa
|
ARP Scanner Meterpreter Script using the railgun Extension, based on example provided in railgun manual.
git-svn-id: file:///home/svn/framework3/trunk@9733 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 14:24:24 +00:00 |
Carlos Perez
|
690a655275
|
Removed comma causing error in options
git-svn-id: file:///home/svn/framework3/trunk@9732 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-08 14:02:58 +00:00 |
James Lee
|
4b1286522d
|
version bump for beta release
git-svn-id: file:///home/svn/framework3/trunk@9731 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 23:15:03 +00:00 |
Jonathan Cran
|
2d0e49ca6f
|
adding in tod's patch (http://www.0x0e.org/x/msf/vmware_lab_diff.tod.20100707) - adds neat functionality like being able to create a lab on the fly or from a set of files on disk.
git-svn-id: file:///home/svn/framework3/trunk@9730 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 22:56:26 +00:00 |
Joshua Drake
|
ace74d991e
|
add ftp fuzzer module from Peter Van Eeckhoutte
git-svn-id: file:///home/svn/framework3/trunk@9729 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 21:59:02 +00:00 |
Joshua Drake
|
3049d527ef
|
there is no comm variable here, fixes #2200
git-svn-id: file:///home/svn/framework3/trunk@9728 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 20:49:49 +00:00 |
James Lee
|
114ca4e535
|
replace / and \ with the current system's directory separator so it doesn't matter what the user types
git-svn-id: file:///home/svn/framework3/trunk@9727 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 20:40:19 +00:00 |
Joshua Drake
|
4705998f6c
|
do not access res.code if res is nil, fixes #2184
git-svn-id: file:///home/svn/framework3/trunk@9726 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 19:52:05 +00:00 |
Joshua Drake
|
2de94b910b
|
more specificity
git-svn-id: file:///home/svn/framework3/trunk@9725 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 18:25:04 +00:00 |
Joshua Drake
|
08a75a0c8e
|
make shell_read_until_token more agressive
git-svn-id: file:///home/svn/framework3/trunk@9724 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 18:18:55 +00:00 |
Joshua Drake
|
5f2aa8bb0b
|
consolidate aborted error messages
git-svn-id: file:///home/svn/framework3/trunk@9723 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 18:18:38 +00:00 |
HD Moore
|
c0aca105de
|
closes #2205. This is actually part of the bigger datastore bug
git-svn-id: file:///home/svn/framework3/trunk@9722 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 18:14:51 +00:00 |
Joshua Drake
|
1e0e92e5aa
|
show commands that fail
git-svn-id: file:///home/svn/framework3/trunk@9721 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 18:04:22 +00:00 |
James Lee
|
49955d2ca0
|
check for fileness instead of just existence, fixes #2204
git-svn-id: file:///home/svn/framework3/trunk@9720 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 17:42:18 +00:00 |
Joshua Drake
|
663b863b6d
|
http fingerprint checking update
git-svn-id: file:///home/svn/framework3/trunk@9719 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 17:38:59 +00:00 |
Joshua Drake
|
ba76698b5a
|
remove extraneous parenthesis
git-svn-id: file:///home/svn/framework3/trunk@9718 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 17:38:26 +00:00 |
Joshua Drake
|
3aa3a642ac
|
move fingerprint verification to mixin
git-svn-id: file:///home/svn/framework3/trunk@9717 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 17:36:33 +00:00 |
HD Moore
|
38d15c016d
|
Rebuilds of meterpreter, including x64
git-svn-id: file:///home/svn/framework3/trunk@9716 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 16:47:35 +00:00 |
HD Moore
|
ccfea56ed5
|
Minor tweak to build without the include path for common
git-svn-id: file:///home/svn/framework3/trunk@9715 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 16:46:58 +00:00 |
James Lee
|
2c5336dabb
|
attach job_id to the exploit, not just the driver; regenerate the uuid when replicating a module; generate the payload after copying the exploit module for a new job; fixes #2203, see #2098 and #2096
git-svn-id: file:///home/svn/framework3/trunk@9714 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 16:37:23 +00:00 |
Joshua Drake
|
ea12f49bc7
|
fix type, thx xanda, fixes #2198
git-svn-id: file:///home/svn/framework3/trunk@9713 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 16:36:21 +00:00 |
HD Moore
|
9915be8935
|
Add the railgun client extensions
git-svn-id: file:///home/svn/framework3/trunk@9712 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 16:31:24 +00:00 |
HD Moore
|
ce1116e622
|
Add railgun binary
git-svn-id: file:///home/svn/framework3/trunk@9711 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 16:29:55 +00:00 |
HD Moore
|
e34bbc281a
|
Merge railgun binary and new builds
git-svn-id: file:///home/svn/framework3/trunk@9710 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 16:29:37 +00:00 |