Commit Graph

7189 Commits (6243d8fe2a5dba8edfeb3e4b7bd89366495a31fc)

Author SHA1 Message Date
HD Moore d3a6418e53 Revert changes to elevate, still not getting around restrictions on primary token creation, needs a deeper look
git-svn-id: file:///home/svn/framework3/trunk@9759 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:59:31 +00:00
Tod Beardsley d1726ddadf I fell down a rathole trying to debug something today, but at least now I can always find my way back with this. It parses metasploit modules to see if you're using all the datastore elements you declared and if you declared all your datastore elements. Don't try to get too fancy with it -- my metaprogramming is all driven by regex, so it'll be easy to trick me if you want to with funny-looking code with weird linebreaks.
git-svn-id: file:///home/svn/framework3/trunk@9758 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:44:52 +00:00
HD Moore 3d01172af5 Binaries for the previous commit
git-svn-id: file:///home/svn/framework3/trunk@9757 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:41:06 +00:00
HD Moore d5932fc2fd Switch the namedpipe code to convert the thread token to a primary token first
git-svn-id: file:///home/svn/framework3/trunk@9756 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:40:44 +00:00
HD Moore ec9156827e Switch the elevator methods to DuplicateHandleEx to get a primary token
git-svn-id: file:///home/svn/framework3/trunk@9755 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:23:05 +00:00
HD Moore 29f9f6671e This *should* fix all cases where execute -t would fail to use an impersonated token
git-svn-id: file:///home/svn/framework3/trunk@9754 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 19:32:51 +00:00
James Lee 7fd71dcbcb note the updated version of ruby
git-svn-id: file:///home/svn/framework3/trunk@9753 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 19:29:34 +00:00
HD Moore 16134447d9 Cleanup / cosmetic for dcerpc, make EBADF pretend to be EOFError in terms of what exception is raised
git-svn-id: file:///home/svn/framework3/trunk@9752 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 19:05:16 +00:00
HD Moore 972e7bc282 Clean up some of the token impersonation code around process execution
git-svn-id: file:///home/svn/framework3/trunk@9751 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 18:54:20 +00:00
HD Moore 42f8dc10c0 Change the timeout from 0
git-svn-id: file:///home/svn/framework3/trunk@9750 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 18:03:48 +00:00
HD Moore adf33feb0e Catch an odd corner case with zero timeouts - this broke dcerpc over tcp
git-svn-id: file:///home/svn/framework3/trunk@9749 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 17:58:59 +00:00
Joshua Drake 0c2c35cc47 fix disclosure date
git-svn-id: file:///home/svn/framework3/trunk@9748 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 16:54:25 +00:00
HD Moore 2d65cb602b Fix boolean handling
git-svn-id: file:///home/svn/framework3/trunk@9747 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 16:34:18 +00:00
Joshua Drake 3b7842eb0e add dtp spoofer module from Spencer McIntyre
git-svn-id: file:///home/svn/framework3/trunk@9746 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 16:23:53 +00:00
Joshua Drake 5d4d225abe add blurb about += vs <<
git-svn-id: file:///home/svn/framework3/trunk@9745 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 16:19:22 +00:00
Joshua Drake c1f74794eb style compliance fixes
git-svn-id: file:///home/svn/framework3/trunk@9744 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 23:34:50 +00:00
Joshua Drake ad9f0d91b9 add tftp server auxiliary
git-svn-id: file:///home/svn/framework3/trunk@9743 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 23:34:33 +00:00
Joshua Drake 573fc216dd add write support, tftproot, output dir for tftp server
git-svn-id: file:///home/svn/framework3/trunk@9742 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 23:34:29 +00:00
Joshua Drake d83ca6c901 add a few more strings
git-svn-id: file:///home/svn/framework3/trunk@9741 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 21:05:36 +00:00
Carlos Perez 16541abdde sent array instead of string to mixin call
git-svn-id: file:///home/svn/framework3/trunk@9740 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 20:31:26 +00:00
Carlos Perez e0d9c41b5f did not write info when file did not exists, problem fixed
git-svn-id: file:///home/svn/framework3/trunk@9739 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 20:28:56 +00:00
Carlos Perez 29c78e5c5c forgot to check for no arguments
git-svn-id: file:///home/svn/framework3/trunk@9738 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 20:09:39 +00:00
Jonathan Cran 978c0f30e3 updated get_vmx to handle the structure passed by the control shells. For instance: @lab['metasploitable'] = {"vmx" => "msf_lab/user/Metasploitable/Metasploitable.vmx", "user" => "user", "pass" => "user", "os" => "linux" }
git-svn-id: file:///home/svn/framework3/trunk@9737 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 19:13:20 +00:00
HD Moore a4c6280ae0 Minor cleanups for railgun, fix 1.8/1.9 differences, remove use of string encoding routines for 1.8 back-compat
git-svn-id: file:///home/svn/framework3/trunk@9736 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 18:53:49 +00:00
Tod Beardsley 64fb3624d6 Clean up UDP probe module a little, add an nbname_probe module that's nearly identical to nbname, but allows for pivot scans.
git-svn-id: file:///home/svn/framework3/trunk@9735 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 17:31:48 +00:00
Carlos Perez c9e50d70a7 added check for UAC and account lockout using railgun for when capturing winlogon creds - Thanks for the API Call Mubix
git-svn-id: file:///home/svn/framework3/trunk@9734 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 17:27:01 +00:00
Carlos Perez 4d649045aa ARP Scanner Meterpreter Script using the railgun Extension, based on example provided in railgun manual.
git-svn-id: file:///home/svn/framework3/trunk@9733 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 14:24:24 +00:00
Carlos Perez 690a655275 Removed comma causing error in options
git-svn-id: file:///home/svn/framework3/trunk@9732 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 14:02:58 +00:00
James Lee 4b1286522d version bump for beta release
git-svn-id: file:///home/svn/framework3/trunk@9731 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 23:15:03 +00:00
Jonathan Cran 2d0e49ca6f adding in tod's patch (http://www.0x0e.org/x/msf/vmware_lab_diff.tod.20100707) - adds neat functionality like being able to create a lab on the fly or from a set of files on disk.
git-svn-id: file:///home/svn/framework3/trunk@9730 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 22:56:26 +00:00
Joshua Drake ace74d991e add ftp fuzzer module from Peter Van Eeckhoutte
git-svn-id: file:///home/svn/framework3/trunk@9729 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 21:59:02 +00:00
Joshua Drake 3049d527ef there is no comm variable here, fixes #2200
git-svn-id: file:///home/svn/framework3/trunk@9728 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 20:49:49 +00:00
James Lee 114ca4e535 replace / and \ with the current system's directory separator so it doesn't matter what the user types
git-svn-id: file:///home/svn/framework3/trunk@9727 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 20:40:19 +00:00
Joshua Drake 4705998f6c do not access res.code if res is nil, fixes #2184
git-svn-id: file:///home/svn/framework3/trunk@9726 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 19:52:05 +00:00
Joshua Drake 2de94b910b more specificity
git-svn-id: file:///home/svn/framework3/trunk@9725 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 18:25:04 +00:00
Joshua Drake 08a75a0c8e make shell_read_until_token more agressive
git-svn-id: file:///home/svn/framework3/trunk@9724 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 18:18:55 +00:00
Joshua Drake 5f2aa8bb0b consolidate aborted error messages
git-svn-id: file:///home/svn/framework3/trunk@9723 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 18:18:38 +00:00
HD Moore c0aca105de closes #2205. This is actually part of the bigger datastore bug
git-svn-id: file:///home/svn/framework3/trunk@9722 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 18:14:51 +00:00
Joshua Drake 1e0e92e5aa show commands that fail
git-svn-id: file:///home/svn/framework3/trunk@9721 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 18:04:22 +00:00
James Lee 49955d2ca0 check for fileness instead of just existence, fixes #2204
git-svn-id: file:///home/svn/framework3/trunk@9720 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 17:42:18 +00:00
Joshua Drake 663b863b6d http fingerprint checking update
git-svn-id: file:///home/svn/framework3/trunk@9719 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 17:38:59 +00:00
Joshua Drake ba76698b5a remove extraneous parenthesis
git-svn-id: file:///home/svn/framework3/trunk@9718 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 17:38:26 +00:00
Joshua Drake 3aa3a642ac move fingerprint verification to mixin
git-svn-id: file:///home/svn/framework3/trunk@9717 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 17:36:33 +00:00
HD Moore 38d15c016d Rebuilds of meterpreter, including x64
git-svn-id: file:///home/svn/framework3/trunk@9716 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:47:35 +00:00
HD Moore ccfea56ed5 Minor tweak to build without the include path for common
git-svn-id: file:///home/svn/framework3/trunk@9715 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:46:58 +00:00
James Lee 2c5336dabb attach job_id to the exploit, not just the driver; regenerate the uuid when replicating a module; generate the payload after copying the exploit module for a new job; fixes #2203, see #2098 and #2096
git-svn-id: file:///home/svn/framework3/trunk@9714 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:37:23 +00:00
Joshua Drake ea12f49bc7 fix type, thx xanda, fixes #2198
git-svn-id: file:///home/svn/framework3/trunk@9713 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:36:21 +00:00
HD Moore 9915be8935 Add the railgun client extensions
git-svn-id: file:///home/svn/framework3/trunk@9712 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:31:24 +00:00
HD Moore ce1116e622 Add railgun binary
git-svn-id: file:///home/svn/framework3/trunk@9711 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:29:55 +00:00
HD Moore e34bbc281a Merge railgun binary and new builds
git-svn-id: file:///home/svn/framework3/trunk@9710 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:29:37 +00:00