715e2c4c2e
Add a link to the vendor response
...
git-svn-id: file:///home/svn/framework3/trunk@8389 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-06 21:54:57 +00:00
c48fe399f7
references have to be strings. fixes 815
...
git-svn-id: file:///home/svn/framework3/trunk@8387 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-06 21:41:06 +00:00
4c8dc37435
Add the OSVDB reference
...
git-svn-id: file:///home/svn/framework3/trunk@8382 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-06 14:51:56 +00:00
2c6b9c2800
Use the full \\host\share syntax to work with all versions of Samba. Thanks Eren!
...
git-svn-id: file:///home/svn/framework3/trunk@8381 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-06 14:45:43 +00:00
9b59f0e3c2
give the reported service a name
...
git-svn-id: file:///home/svn/framework3/trunk@8377 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-06 00:37:16 +00:00
509b2aab3a
use new api
...
git-svn-id: file:///home/svn/framework3/trunk@8376 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-05 23:00:51 +00:00
0e1af9ed6a
add reporting, see #385
...
git-svn-id: file:///home/svn/framework3/trunk@8375 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-05 21:13:07 +00:00
43bbfefa8f
Adding a Windows signature for Postgres.
...
git-svn-id: file:///home/svn/framework3/trunk@8374 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-05 18:02:13 +00:00
c8cdf9c938
Fixes #811 by implementing an enumerator for PostgreSQL.
...
git-svn-id: file:///home/svn/framework3/trunk@8371 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-05 15:20:59 +00:00
aeba7e0429
Store RPC information
...
git-svn-id: file:///home/svn/framework3/trunk@8370 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-05 14:53:09 +00:00
b3a588b8cc
Adds a module for kcope's samba filesystem traversal
...
git-svn-id: file:///home/svn/framework3/trunk@8369 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-05 06:38:24 +00:00
4f9490f63f
add default username/passwords for IBM Cognos Express Tomcat Manager
...
git-svn-id: file:///home/svn/framework3/trunk@8368 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-04 20:34:55 +00:00
6e8e6ef16a
Fixes #769 by implementing a brute force module for Postgres. A couple notes: If you guess wrong at the database name, you still can try to login with a username and password -- you'll get a successful auth, but then get disconnected. So, that's pretty neat.
...
Also, since Postgres-PR uses the stock TCPSocket object, connection timeouts and other errors take forever. This is avoided in the brute forcer by pre-validating the connection with Rex::Socket, but this is a hack -- it would be better to convert Postgres-PR to a Rex::Socket flavor, so you also get nicer error messages and what all. I did fork it off the main distribute it already anyway, so may as well will open a feature bug on this, but it's pretty low priority.
git-svn-id: file:///home/svn/framework3/trunk@8366 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-03 21:45:13 +00:00
376e2ee62c
Gah!
...
git-svn-id: file:///home/svn/framework3/trunk@8363 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-03 13:53:47 +00:00
b785d5af00
Keywords.
...
git-svn-id: file:///home/svn/framework3/trunk@8362 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-03 13:53:12 +00:00
1ee79780e9
fix the http option scanner
...
git-svn-id: file:///home/svn/framework3/trunk@8355 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-02 23:11:18 +00:00
2ffe4abb5d
Fixes #730 by fixing up the Postgres query module and nicifying the output.
...
git-svn-id: file:///home/svn/framework3/trunk@8352 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-02 21:02:12 +00:00
44fbe35871
Fixing revision keyword
...
git-svn-id: file:///home/svn/framework3/trunk@8351 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-02 17:37:34 +00:00
4fcc9856d0
Adding a Juniper JunOS DoS exploit (no CVE, BID: 37670)
...
git-svn-id: file:///home/svn/framework3/trunk@8349 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-02 17:19:14 +00:00
01adf60550
See #730 . First pass at a Postgres Query module. Doesn't handle errors very well yet (still need to work all that out and create some test cases).
...
git-svn-id: file:///home/svn/framework3/trunk@8344 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-02 01:40:48 +00:00
edc64f824e
Added trace.axd scanner by C4an
...
git-svn-id: file:///home/svn/framework3/trunk@8337 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-01 02:49:18 +00:00
7964d0f38a
Renaming wmap modules
...
git-svn-id: file:///home/svn/framework3/trunk@8335 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-01 02:12:30 +00:00
7e5793af2a
New enumeration modules by Mubix
...
git-svn-id: file:///home/svn/framework3/trunk@8331 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-31 00:52:51 +00:00
a76480d42c
See #726 . Cleaning up my gross whitespace.
...
git-svn-id: file:///home/svn/framework3/trunk@8311 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 23:08:39 +00:00
214d624ddc
Fix the report_host() code (broken by previous commit), add an advanced option to store db hosts from monlist
...
git-svn-id: file:///home/svn/framework3/trunk@8283 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 23:25:17 +00:00
bedbc2c341
See #782 . Deregistering filter and pcapfile (not needed for these), moving GATEWAY to advanced options.
...
git-svn-id: file:///home/svn/framework3/trunk@8277 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 20:58:45 +00:00
e224d621aa
See #782 . Updating bailiwicked to use capture_sendo.
...
git-svn-id: file:///home/svn/framework3/trunk@8275 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 20:36:49 +00:00
8d64f8a10c
See #782 . Updating to use capture_sendto.
...
git-svn-id: file:///home/svn/framework3/trunk@8273 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 20:17:45 +00:00
246fe53ff4
See #782 . Updating the ntpd dos attack to use capture_sendto.
...
git-svn-id: file:///home/svn/framework3/trunk@8272 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 20:13:44 +00:00
170b9f7705
See #782 . Converted synflood.rb to use capture_sendto.
...
Note, this makes the SYN flooding significantly more sucky, since if it's a remote address, capture_sendto will always try to arp. Need to deal with this. I have a couple strategies in mind.
git-svn-id: file:///home/svn/framework3/trunk@8271 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 20:04:14 +00:00
e05e3d7248
Adding Id tag.
...
git-svn-id: file:///home/svn/framework3/trunk@8269 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 19:55:31 +00:00
3baeb9c199
See #782 . Updating chunked.rb to use capture_sendto. Also adjusted TTL's for ldap and chunked.
...
git-svn-id: file:///home/svn/framework3/trunk@8268 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 19:54:33 +00:00
2f76affadb
See #782 . Updating ldap exploit to use capture_sendto. Also updating capture.rb to include RHOST.
...
git-svn-id: file:///home/svn/framework3/trunk@8266 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 19:37:22 +00:00
0f37a27fe4
See #782 . Updating ip_spoof to use capture_sendto
...
git-svn-id: file:///home/svn/framework3/trunk@8265 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 19:00:21 +00:00
71c44dadd8
See #782 . Updating rogue_send form capture_sendto
...
git-svn-id: file:///home/svn/framework3/trunk@8264 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:46:48 +00:00
4374b8ccc4
See #782 . Updating ipidseq to use capture_sendto.
...
git-svn-id: file:///home/svn/framework3/trunk@8263 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:40:38 +00:00
99f9cf76a8
See #782 . Updating syn to use capture_sendto.
...
git-svn-id: file:///home/svn/framework3/trunk@8262 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:34:35 +00:00
280e7f8bdd
See #782 . Revising ack to use the new capture_sendto.
...
git-svn-id: file:///home/svn/framework3/trunk@8261 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:31:36 +00:00
709c634bfa
Renaming sendto to capture_sendto to give the user a hint as to where it came from.
...
git-svn-id: file:///home/svn/framework3/trunk@8260 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:21:33 +00:00
3053bd702a
See #782 . Updated xmas.rb (again), now uses the nicer frontend function sendto. Diff against r8026 to get an idea of what's changed for module writers.
...
git-svn-id: file:///home/svn/framework3/trunk@8259 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:12:02 +00:00
393cf5becb
Add the NTP monlist scanner
...
git-svn-id: file:///home/svn/framework3/trunk@8255 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 06:53:24 +00:00
fb09655c42
See #782 . Fixing the packet send, but that's it (the module is still busted for other reasons).
...
git-svn-id: file:///home/svn/framework3/trunk@8251 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 03:03:51 +00:00
bf24295d1d
See #782 . Updating ipidseq.
...
git-svn-id: file:///home/svn/framework3/trunk@8248 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 22:36:27 +00:00
23f06ca8a6
See #782 . Updating syn scanner. Also, before I forget: should optimize the arp cache to keep negatives so we don't rearp all the time for nonexistant hosts.
...
git-svn-id: file:///home/svn/framework3/trunk@8247 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 22:16:03 +00:00
658e07a0de
See #782 . Updating ack scanner.
...
git-svn-id: file:///home/svn/framework3/trunk@8246 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 21:59:30 +00:00
4bb6e650da
See #782 . Implemented a more sensible arp cache so as not to spam with UDP probes and arps. Also refactored xmas to use the new methods.
...
git-svn-id: file:///home/svn/framework3/trunk@8245 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 21:37:40 +00:00
31949c4343
svn keywords fixups
...
fixed a bunch of $Id$ and $Revision$ typos
added keywords property to files missing it
git-svn-id: file:///home/svn/framework3/trunk@8242 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 20:12:13 +00:00
c003a663d1
See #782 . Extended the injection ARP query methods to handle local addresses more satisfactorially, fixed a couple errors, and added a bunch of inline documentation to explain how it all works together.
...
git-svn-id: file:///home/svn/framework3/trunk@8238 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 16:00:16 +00:00
cac3d6d56b
See #782 . This introduces some inject methods to the Capture mixin, and edits the ip_spoof module to take advantage of them.
...
git-svn-id: file:///home/svn/framework3/trunk@8237 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 06:38:41 +00:00
37c1441c6c
Formatting on db2 output.
...
git-svn-id: file:///home/svn/framework3/trunk@8225 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 16:37:56 +00:00
7cc01b07f3
See #726 . Post-commit fixes. Rename probe to version, clean up includes, fix verbosity on the probe and convert to single-line output.
...
git-svn-id: file:///home/svn/framework3/trunk@8224 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 16:25:29 +00:00
359e1ad53a
See #726 . Adds a DB2 scanner and brute forcer.
...
git-svn-id: file:///home/svn/framework3/trunk@8223 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 15:58:24 +00:00
cc41516a79
don't wait for the client reporting
...
git-svn-id: file:///home/svn/framework3/trunk@8210 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-23 00:17:59 +00:00
4bb3adc397
move new tomcat_mgr_login scanner into scanner/http
...
git-svn-id: file:///home/svn/framework3/trunk@8202 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-22 20:33:11 +00:00
40be42676b
new tomcat_mgr_login aux module
...
- uses auth_brute mixin
- has old and new default users/passes/pairs
- replaces older modules/auxiliary/admin/http/tomcat_manager.rb
git-svn-id: file:///home/svn/framework3/trunk@8201 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-22 20:31:51 +00:00
5ebb0c4b38
add CVE, two default users & passwords, see #711
...
git-svn-id: file:///home/svn/framework3/trunk@8194 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-22 16:22:12 +00:00
865a50594b
add a telnet login scanner
...
git-svn-id: file:///home/svn/framework3/trunk@8179 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-20 03:25:34 +00:00
4a54388119
use print_error for failed login
...
git-svn-id: file:///home/svn/framework3/trunk@8178 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-20 02:33:15 +00:00
e19f66ec1f
use the new authbrute mixin
...
git-svn-id: file:///home/svn/framework3/trunk@8176 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-20 01:43:01 +00:00
310be42bfa
try not to repeatedly load static files - see #694
...
git-svn-id: file:///home/svn/framework3/trunk@8166 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 19:12:42 +00:00
ca7f85c054
more consistent printing of found credentials
...
git-svn-id: file:///home/svn/framework3/trunk@8164 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 19:06:03 +00:00
d85c801b11
name consistency with arp_sweep
...
git-svn-id: file:///home/svn/framework3/trunk@8162 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 17:49:00 +00:00
08eb80f4a9
use the authbrute mixin
...
git-svn-id: file:///home/svn/framework3/trunk@8150 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-18 22:22:22 +00:00
cb9cf943b4
Remove the database lookups so we don't trigger lockout policies unnecessarily. We'll probably have to revisit this at some point
...
git-svn-id: file:///home/svn/framework3/trunk@8145 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-18 21:19:28 +00:00
d4c42806f6
can't really be a scanner since a sid is needed for each host
...
git-svn-id: file:///home/svn/framework3/trunk@8141 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-17 17:56:05 +00:00
6c572466fa
make the oracle login a scanner for consistency. see 757
...
git-svn-id: file:///home/svn/framework3/trunk@8139 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-16 00:59:06 +00:00
2ba892aa69
Report host mac, name, and whether its a VM
...
git-svn-id: file:///home/svn/framework3/trunk@8133 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 15:49:13 +00:00
7390b1d42d
Add and improve database reporting to existing scanner modules
...
git-svn-id: file:///home/svn/framework3/trunk@8131 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 03:25:34 +00:00
90221c1191
Consistency change
...
git-svn-id: file:///home/svn/framework3/trunk@8130 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 02:58:59 +00:00
0b7df74615
Rename modules to be consistent with the new convention
...
git-svn-id: file:///home/svn/framework3/trunk@8129 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 02:55:08 +00:00
df1cb6b36e
move smb/login. see 757
...
git-svn-id: file:///home/svn/framework3/trunk@8121 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-14 18:51:04 +00:00
54095a585e
update the auth bruteforcer, and use it in smb/login
...
git-svn-id: file:///home/svn/framework3/trunk@8116 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-14 16:58:43 +00:00
396e894cdb
Finger user enumerator
...
git-svn-id: file:///home/svn/framework3/trunk@8109 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 23:37:14 +00:00
9bb14e1c4e
Add a telnet banner grabber
...
git-svn-id: file:///home/svn/framework3/trunk@8108 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 21:46:48 +00:00
dded66d71a
Fixed up to work against Windows 2000 -> Windows 7
...
git-svn-id: file:///home/svn/framework3/trunk@8106 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 14:37:15 +00:00
de2a293c26
Lookup users via SAMR
...
git-svn-id: file:///home/svn/framework3/trunk@8103 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 00:27:11 +00:00
a2b883ff3d
Adds a SID lookup module
...
git-svn-id: file:///home/svn/framework3/trunk@8101 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-12 07:39:53 +00:00
f9f4f31fdd
Changed to checking the size and not the line count on queries
...
git-svn-id: file:///home/svn/framework3/trunk@8083 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-07 17:52:40 +00:00
6a10d6b6ca
Cleanup for tcp mixin, report smb version better, downcase service names
...
git-svn-id: file:///home/svn/framework3/trunk@8074 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-05 18:47:04 +00:00
2283e029db
crossing fingers, big cr removal batch
...
git-svn-id: file:///home/svn/framework3/trunk@8038 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 22:24:22 +00:00
53d9a9167d
save the discovered version
...
git-svn-id: file:///home/svn/framework3/trunk@8036 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 18:23:03 +00:00
37d84a5ccc
save the discovered version
...
git-svn-id: file:///home/svn/framework3/trunk@8035 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 18:21:07 +00:00
37bec306a7
ruby 1.9 / unpack fix
...
git-svn-id: file:///home/svn/framework3/trunk@8032 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 09:02:55 +00:00
02eb7ab80d
massive changes to the database api. Auxiliary::Report is now just a bunch of stubs into the main DBManager, most aux modules should just work, but they haven't all been tested. introduces a get_auth_info method for pulling credentials out of the db. other db api methods should be more standardized now. cross your fingers
...
git-svn-id: file:///home/svn/framework3/trunk@8028 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 23:48:45 +00:00
68eb240639
Updates to match the new Racket namespace
...
git-svn-id: file:///home/svn/framework3/trunk@8026 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 23:32:50 +00:00
922cef26fa
Store the domain name in the SMB client object, along with other fields provided by NTLMSSP responses. Show the domain name and netbios name in the version scanner. Update MS06-070 to remove the default target, use the domain name from the server response, and use a more reliable return address for 2000 SP4.
...
git-svn-id: file:///home/svn/framework3/trunk@8022 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 14:00:49 +00:00
58f2c933d5
Update nbname to log to the database
...
git-svn-id: file:///home/svn/framework3/trunk@8020 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 04:26:46 +00:00
c9c8eb3f12
Updated modules from tebo
...
git-svn-id: file:///home/svn/framework3/trunk@8001 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 05:07:50 +00:00
131462fa8b
Fix service name reporting
...
git-svn-id: file:///home/svn/framework3/trunk@7999 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 00:37:56 +00:00
5757216f9a
This overhauls the database reporting code - all report_* functions now add their write operation to a queue that is processed sequentially in the background. This prevents concurrency issues around database writes, but prevents modules from immediately using the results of their report_* calls in the database. Still todo is a method for waiting on the write to have occurred
...
git-svn-id: file:///home/svn/framework3/trunk@7997 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 00:21:21 +00:00
33bb229207
Keywords
...
git-svn-id: file:///home/svn/framework3/trunk@7995 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-27 14:10:54 +00:00
83296f8b23
MySQL simple enumeration module using the new MySQL mixin
...
git-svn-id: file:///home/svn/framework3/trunk@7994 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-27 14:03:39 +00:00
166489ad5f
Update a few scanner modules to write to the database properly
...
git-svn-id: file:///home/svn/framework3/trunk@7992 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-27 07:30:50 +00:00
308bdcccb2
Fixes #733 (using open vs ::Up, may need a revert and a change to the importers instead). Update the sweep_udp module to store host, mac, name info
...
git-svn-id: file:///home/svn/framework3/trunk@7990 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 22:08:49 +00:00
095bc2167d
Patch from antoine to use the netbios parsing code from nbname
...
git-svn-id: file:///home/svn/framework3/trunk@7984 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 18:10:13 +00:00
634294cb1f
Handle oddball servers that return no names
...
git-svn-id: file:///home/svn/framework3/trunk@7983 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 12:13:18 +00:00
1a818ebf77
Adds a NetBIOS name scanner - can obtain hostname, mac address, logged in user (when Messenger is running), and alternate interface IPs
...
git-svn-id: file:///home/svn/framework3/trunk@7981 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 08:51:03 +00:00
1cc9fa7dad
Print the site name for the 404 message
...
git-svn-id: file:///home/svn/framework3/trunk@7980 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 05:53:29 +00:00
3d421cfefd
SQLMap update and consitency fix for Bernardo's name
...
git-svn-id: file:///home/svn/framework3/trunk@7979 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 05:24:37 +00:00
9ec132d86f
Fixes #720 . Adds inquis's mysql brute forcer using the new mixin
...
git-svn-id: file:///home/svn/framework3/trunk@7978 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 05:22:34 +00:00
d0969746a4
Mostly cosmetic changes from local tree
...
git-svn-id: file:///home/svn/framework3/trunk@7970 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 03:31:20 +00:00
06cea605c7
spaces -> tab
...
git-svn-id: file:///home/svn/framework3/trunk@7966 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-24 21:27:24 +00:00
b13e185943
Giant update from tebo, fixing up SunRPC and the nsfmount module
...
git-svn-id: file:///home/svn/framework3/trunk@7961 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-23 13:44:53 +00:00
8c12722f9b
add database reporting to endpoint_mapper. fixes #695
...
git-svn-id: file:///home/svn/framework3/trunk@7913 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-18 01:51:31 +00:00
2bb2729064
fix an undefined constant bug reported to the mailing list by Razeor
...
git-svn-id: file:///home/svn/framework3/trunk@7908 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 16:14:27 +00:00
a81d8d23bd
revamp version tests and the way exploits are run. fixes 673
...
git-svn-id: file:///home/svn/framework3/trunk@7891 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-16 00:13:57 +00:00
20222a44ea
Fix. Thats next step
...
git-svn-id: file:///home/svn/framework3/trunk@7847 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 05:58:57 +00:00
d6ee7c58ce
New wmap moule for generic checks
...
git-svn-id: file:///home/svn/framework3/trunk@7846 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 05:49:44 +00:00
c287573213
A few more wmap cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@7839 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 06:56:01 +00:00
1029ecd7f8
Cleanup wmap, add the missing database tables back, rename to have a wmap_prefix
...
git-svn-id: file:///home/svn/framework3/trunk@7837 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 05:24:48 +00:00
fb7a522bb3
Fixes #682 by correcting the BID (thanks Kurt!)
...
git-svn-id: file:///home/svn/framework3/trunk@7836 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 04:02:23 +00:00
3b52cd2e0d
Adds a DoS module for the recent NTP (server to server) issue from Tod Beardsley
...
git-svn-id: file:///home/svn/framework3/trunk@7835 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 02:56:20 +00:00
3a2f75e318
Improved performance for SRV record enumeration, added Additional SRV records and fix problem with Wildcard enumeration
...
git-svn-id: file:///home/svn/framework3/trunk@7825 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-11 20:24:55 +00:00
c1c06d6ea1
adds ranking.. more aux. modules need this to be listed.
...
git-svn-id: file:///home/svn/framework3/trunk@7789 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-09 23:29:53 +00:00
ed70daf9b1
update references
...
git-svn-id: file:///home/svn/framework3/trunk@7746 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 21:30:11 +00:00
b3df3730c0
report_note() expects :type, not :ntype
...
git-svn-id: file:///home/svn/framework3/trunk@7738 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 17:03:24 +00:00
b35928ba19
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@7718 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 23:35:26 +00:00
f55d2202c3
renamed and cleaned up.
...
git-svn-id: file:///home/svn/framework3/trunk@7717 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 14:40:42 +00:00
ad4ab0d5ad
renamed and fixed description.
...
git-svn-id: file:///home/svn/framework3/trunk@7716 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 14:30:22 +00:00
9afd42de81
renamed and fixed description.
...
git-svn-id: file:///home/svn/framework3/trunk@7715 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 14:24:36 +00:00
8ada83595d
cleaned up a bit.
...
git-svn-id: file:///home/svn/framework3/trunk@7714 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 14:18:24 +00:00
b731291878
cleaned up name and description.
...
git-svn-id: file:///home/svn/framework3/trunk@7713 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-05 14:14:23 +00:00
3358b9113f
removed writing to a file. only print if get a hit.
...
git-svn-id: file:///home/svn/framework3/trunk@7710 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-04 23:54:14 +00:00
93d02320cf
updated oracle mixin and adjusted affected modules. now compatible with ruby 1.8 and 1.9
...
git-svn-id: file:///home/svn/framework3/trunk@7688 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-03 23:57:02 +00:00
10d636c894
applied patch provided by Erwin Paternotte
...
git-svn-id: file:///home/svn/framework3/trunk@7670 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-02 17:38:13 +00:00
25106b555f
log to the appropiated place.
...
git-svn-id: file:///home/svn/framework3/trunk@7664 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-01 23:00:42 +00:00
16ae0112d1
Typo fix from antoine
...
git-svn-id: file:///home/svn/framework3/trunk@7645 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-30 14:17:17 +00:00
bcd7343803
Fixes #563 . Make fakedns act like a normal passive aux module
...
git-svn-id: file:///home/svn/framework3/trunk@7640 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-29 15:27:37 +00:00
75ca12439e
Added new testing options
...
git-svn-id: file:///home/svn/framework3/trunk@7638 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-29 04:00:26 +00:00
6e975b57ee
Include Auxiliary Report
...
git-svn-id: file:///home/svn/framework3/trunk@7629 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-26 20:39:15 +00:00
7324108c14
Support non-default interfaces for idle scan host detection
...
git-svn-id: file:///home/svn/framework3/trunk@7623 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-26 04:14:16 +00:00
5fb4ef2005
make OUTFILE actually do something other than stack dump. fixes #538
...
git-svn-id: file:///home/svn/framework3/trunk@7613 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-25 18:32:28 +00:00
5b81d85447
Replaced reporting to use notes
...
git-svn-id: file:///home/svn/framework3/trunk@7605 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-25 06:08:28 +00:00
07543fd526
fix potential hang when server doesn't respond
...
git-svn-id: file:///home/svn/framework3/trunk@7602 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-25 02:01:27 +00:00
825cbfca66
remove the deprecated Thread.critical. fixes #544
...
git-svn-id: file:///home/svn/framework3/trunk@7601 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-25 01:48:11 +00:00
d5e09a90e2
add minver and maxver options and prepare for universal module ranking
...
git-svn-id: file:///home/svn/framework3/trunk@7598 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-24 21:40:02 +00:00
6a2bc85729
oops, hasty commit -- removed comment
...
git-svn-id: file:///home/svn/framework3/trunk@7596 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-24 17:47:22 +00:00
6e7de5b6d3
changed module from exploit to auxiliary
...
git-svn-id: file:///home/svn/framework3/trunk@7595 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-24 17:45:21 +00:00
e354c8dbcc
Multiple headers handling bug fixes
...
git-svn-id: file:///home/svn/framework3/trunk@7588 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-24 05:27:11 +00:00
0d44958233
not needed. getting things ready for ruby 1.9.1 compat.
...
git-svn-id: file:///home/svn/framework3/trunk@7586 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-23 23:53:01 +00:00
f70cf1e74f
Make EXT optional so other dictionaries with files containing extensions can be used
...
git-svn-id: file:///home/svn/framework3/trunk@7583 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-23 03:01:46 +00:00
fc9648f332
little fix submission for foxit auth bypass exploit
...
git-svn-id: file:///home/svn/framework3/trunk@7581 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-22 18:50:24 +00:00
fcd7effcc6
baah.
...
git-svn-id: file:///home/svn/framework3/trunk@7575 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-21 00:35:27 +00:00
02301c88e4
oops, read in the scv.
...
git-svn-id: file:///home/svn/framework3/trunk@7574 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-21 00:16:19 +00:00
b19ecf9c74
ruby 1.9.1 compatible for the csv issue.
...
git-svn-id: file:///home/svn/framework3/trunk@7573 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-21 00:12:57 +00:00
52792c2de7
Added two Citrix Aux modules.
...
git-svn-id: file:///home/svn/framework3/trunk@7571 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-19 14:45:10 +00:00
61e233df91
Keywords on all modules, plugins, and scripts
...
git-svn-id: file:///home/svn/framework3/trunk@7550 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-17 00:05:19 +00:00
777317d0ad
make sure everybody is using the same SRVHOST. fixes #511
...
git-svn-id: file:///home/svn/framework3/trunk@7545 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-16 22:06:32 +00:00
4549ca2eb3
Adds an OSVDB reference from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@7519 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-14 23:08:27 +00:00
4c0ba49a65
fix syntax error
...
git-svn-id: file:///home/svn/framework3/trunk@7500 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-13 23:22:19 +00:00
cd11c784e0
added CVE references
...
git-svn-id: file:///home/svn/framework3/trunk@7499 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-13 22:54:10 +00:00
8a2a16c921
fixes a syntax error. console yells when loaded.
...
git-svn-id: file:///home/svn/framework3/trunk@7496 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-13 22:37:45 +00:00
fbdccdc9e2
Adds a module for eDirectory cookie prediction - trivial bug found while working on others.
...
git-svn-id: file:///home/svn/framework3/trunk@7493 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-13 21:31:39 +00:00
d892264ad7
Adds a DoS proof of concept for MS09-065 (EOT)
...
git-svn-id: file:///home/svn/framework3/trunk@7470 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 23:48:53 +00:00
68959ece65
use the new DisablePayloadHandler option to reduce the number of open ports required; lports per OS can be modified via advanced options
...
git-svn-id: file:///home/svn/framework3/trunk@7469 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 21:38:30 +00:00
a305bc82c2
Add a status message, fix syntax error in references
...
git-svn-id: file:///home/svn/framework3/trunk@7468 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 20:17:20 +00:00
3980a7f18e
Add a metasploit module implement laurent's latest bug
...
git-svn-id: file:///home/svn/framework3/trunk@7467 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 16:59:55 +00:00
10cf618c19
Fix AXFR error handling
...
git-svn-id: file:///home/svn/framework3/trunk@7466 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 14:14:55 +00:00
b91d198e09
Fix AXFR false positive bug
...
git-svn-id: file:///home/svn/framework3/trunk@7441 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-10 04:14:25 +00:00
2620ad3a3c
Fix AXFR Bug, Added SRV checks for MS OCS Services, Option to Exit on Wildcard detection for ENUM_BRT and modified ENUM_TLD to properly test for IANA TLD list
...
git-svn-id: file:///home/svn/framework3/trunk@7439 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-10 03:08:16 +00:00
10b1e4e703
Fixes #469 . Check address[0]
...
git-svn-id: file:///home/svn/framework3/trunk@7403 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-08 00:16:00 +00:00
7b832b9d3e
Wmap checking for vulnerabilities and launching exploits
...
git-svn-id: file:///home/svn/framework3/trunk@7399 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-07 21:55:33 +00:00
2075377fc8
Fix to correct the IP TTL of all raw modules - these were defaulting to 0. Reported by Job Kibler
...
git-svn-id: file:///home/svn/framework3/trunk@7397 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-07 03:17:19 +00:00
ac14e84eb6
See #434 . Fixes up the last of the modules using the wrong Timeout exception class
...
git-svn-id: file:///home/svn/framework3/trunk@7326 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 18:22:50 +00:00
e067823372
See #434 . A few modules that used the wrong Timeout syntax as well
...
git-svn-id: file:///home/svn/framework3/trunk@7324 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 18:16:51 +00:00
f38b43f236
Specify the language as none
...
git-svn-id: file:///home/svn/framework3/trunk@7321 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 17:10:06 +00:00
fdce355f3b
Option NoDetailMessages added
...
git-svn-id: file:///home/svn/framework3/trunk@7313 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 01:09:53 +00:00
fbbbde55f2
Fix #443 . This module should not be use as a directory scanner as there are more suitable modules for such task. This specific module is only made to test a specific vulnerability and will be mode to a per directory check instead of trying to identify directories requiring authentication to be bypassed
...
git-svn-id: file:///home/svn/framework3/trunk@7312 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 00:59:41 +00:00
02c3bc232b
Typo
...
git-svn-id: file:///home/svn/framework3/trunk@7310 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 17:05:18 +00:00
1ca1e1cc84
Use the payload as the ICMP tag check
...
git-svn-id: file:///home/svn/framework3/trunk@7309 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 17:04:21 +00:00
f89085fd20
Check the icmp echo ID
...
git-svn-id: file:///home/svn/framework3/trunk@7308 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 16:50:45 +00:00
670ee7c238
Fix an invalid next
...
git-svn-id: file:///home/svn/framework3/trunk@7307 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 16:46:52 +00:00
3d6687902a
Adds two modules that re-implement the rogue network tools project as metasploit auxiliary modules.
...
git-svn-id: file:///home/svn/framework3/trunk@7306 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 07:36:00 +00:00
f347e561db
Two very basic HTTP request fuzzers, based on module code from nullthreat, ported to the new API
...
git-svn-id: file:///home/svn/framework3/trunk@7305 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-29 21:45:50 +00:00
3faf72dd97
Perform a test RPC call on each discovered interface
...
git-svn-id: file:///home/svn/framework3/trunk@7304 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-29 19:00:34 +00:00
31276e1626
Fixes #427 . Finally found a solution that works for 1.8 and 1.9, this allows lorcon modules to run in the background or foreground and handle interrupts from the console gracefully. Its still a hack
...
git-svn-id: file:///home/svn/framework3/trunk@7293 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 00:19:17 +00:00
5e137e92fd
Fixes #381 . To scan for TLSv1 only services, set SSLVersion TLS1
...
git-svn-id: file:///home/svn/framework3/trunk@7282 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 19:48:15 +00:00
e3f68f2639
Another large number of warnings fixed by Yoann Guillot
...
git-svn-id: file:///home/svn/framework3/trunk@7248 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 17:18:23 +00:00
b38a74c961
Another mega-patch from Yoann Guillot: fixes warnings generated by method calls with a space betwee the method and the parans, corrects a problem with the alpha encoders that causes them to overwrite the allowed charset, hardcodes the metasm output size of some modules in order to reduce load time, more to come
...
git-svn-id: file:///home/svn/framework3/trunk@7246 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 16:40:19 +00:00
1af9353ecb
Remove the duplicate module
...
git-svn-id: file:///home/svn/framework3/trunk@7245 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 05:08:23 +00:00
c138724b06
Various SMB fuzzers to demonstrate the new fuzzing api
...
git-svn-id: file:///home/svn/framework3/trunk@7244 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 05:05:54 +00:00
c4e8c52585
Import some basic ssh fuzzers and a smb fuzzer that can trigger the smb2 negotiate bug
...
git-svn-id: file:///home/svn/framework3/trunk@7243 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 03:25:15 +00:00
b03ecfcaff
Demonstrate the fuzz_string_corrupt_byte_reverse() method
...
git-svn-id: file:///home/svn/framework3/trunk@7242 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 01:51:15 +00:00
cae0d61491
Adds a basic fuzzing mixin, as well as a TDS username fuzzer to demonstrate usage
...
git-svn-id: file:///home/svn/framework3/trunk@7241 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 01:40:27 +00:00
acf1b2eda7
Relocate the wifi fuzzer modules to a new directory
...
git-svn-id: file:///home/svn/framework3/trunk@7240 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 00:22:34 +00:00
7433d180da
Renaming wireless to wifi as appropriate. See #413
...
git-svn-id: file:///home/svn/framework3/trunk@7238 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 00:21:09 +00:00
a0fbc2914f
Remove the milw0rm references, as the links are no longer valid.
...
git-svn-id: file:///home/svn/framework3/trunk@7237 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-24 18:13:07 +00:00
255379c2d0
Fixes #378 . Still need to reorganize the modules and fix the lorcon2 mixin for 1.9.1
...
git-svn-id: file:///home/svn/framework3/trunk@7235 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 15:59:13 +00:00
b87fa8f63f
Updated Module info
...
git-svn-id: file:///home/svn/framework3/trunk@7226 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-22 03:01:34 +00:00
e4109d8670
Added support for MS SQL 2000
...
git-svn-id: file:///home/svn/framework3/trunk@7225 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-22 02:56:43 +00:00
2f09fc0c5d
update login_brue description
...
git-svn-id: file:///home/svn/framework3/trunk@7224 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-21 23:41:36 +00:00
03b753fd12
Fixes #360 . Report each path individually
...
git-svn-id: file:///home/svn/framework3/trunk@7207 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 10:55:11 +00:00
a73df955a3
Move the email collector into the gather directory
...
git-svn-id: file:///home/svn/framework3/trunk@7206 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 04:59:55 +00:00
9004887009
Three new modules from Carlos Perez
...
git-svn-id: file:///home/svn/framework3/trunk@7205 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 04:58:50 +00:00
5524e9aae2
Fixed #370 . Test if uploaded file exists
...
git-svn-id: file:///home/svn/framework3/trunk@7203 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 00:02:54 +00:00
6ce7011cba
Fixed #369 . Added RHOST info and second round to determine error page
...
git-svn-id: file:///home/svn/framework3/trunk@7202 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 23:26:58 +00:00
9ce45face4
add advanced option for setting ipid sample size
...
git-svn-id: file:///home/svn/framework3/trunk@7197 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 21:22:55 +00:00
f90a222fa0
better vnc protocol parsing, fixes #374
...
git-svn-id: file:///home/svn/framework3/trunk@7196 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:59:35 +00:00
4ac27c9803
Consolidate common APIs into the mixin
...
git-svn-id: file:///home/svn/framework3/trunk@7195 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:58:01 +00:00
6a818c0c64
Fixed #371 . Included target information
...
git-svn-id: file:///home/svn/framework3/trunk@7194 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:51:47 +00:00
6cfd1675c4
Fixed #375 . Removed the module as frontpage_login provides same information
...
git-svn-id: file:///home/svn/framework3/trunk@7193 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:45:30 +00:00
c501187ca4
Fixed typo #368 .
...
git-svn-id: file:///home/svn/framework3/trunk@7192 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:39:40 +00:00
bfd359f0d8
Fixed #367 . Adder error code detection and signatures
...
git-svn-id: file:///home/svn/framework3/trunk@7191 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:37:40 +00:00
f085e7cf59
Remove generic modules at this time, until proxy is created and then it can be proxy modules.
...
git-svn-id: file:///home/svn/framework3/trunk@7190 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:23:33 +00:00
249cc10cf5
Fixed #365 . Added signatures and error code detection
...
git-svn-id: file:///home/svn/framework3/trunk@7189 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:18:22 +00:00
814675f952
Changed variable name for consistency purposes
...
git-svn-id: file:///home/svn/framework3/trunk@7188 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:01:43 +00:00
dc415c76ca
Fixes #364 . Added error message detection and signatures
...
git-svn-id: file:///home/svn/framework3/trunk@7187 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 19:46:30 +00:00
f85c522a07
don't try to parse an empty banner, fixes #373
...
git-svn-id: file:///home/svn/framework3/trunk@7186 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 18:23:19 +00:00
4d4c0905ef
Slightly improved error handling for auxiliary and exploit modules. Improved brute forcing mode for mssql_login. Serious errors (broken code, etc) are bubbled up in auxiliary scanners now. Fixes #384 by reading wordlists one line at a time and not buffering
...
git-svn-id: file:///home/svn/framework3/trunk@7185 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 18:03:02 +00:00
e72b347794
Add a remote Vista kernel DoS against the srv2.sys driver. This issue was fixed with MS09-050 but does not appear to be referenced in the advisory so was either silently or inadvertently fixed.
...
git-svn-id: file:///home/svn/framework3/trunk@7184 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 15:41:51 +00:00
bee78d3b51
First round of fixes for wmap modules
...
git-svn-id: file:///home/svn/framework3/trunk@7181 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 07:10:32 +00:00
90504e3ea7
Fix email formatting
...
git-svn-id: file:///home/svn/framework3/trunk@7165 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 12:29:07 +00:00
6e95d1f637
Detect when xp_cmdshell is disabled and re-enable it
...
git-svn-id: file:///home/svn/framework3/trunk@7164 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 12:14:28 +00:00
cd2968a32a
Updated mssql_sql and backend mixin, can handle most column types and is somewhat usable as a mssql client
...
git-svn-id: file:///home/svn/framework3/trunk@7159 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 17:41:12 +00:00
8e365c17fa
fixed the cve entrys.
...
git-svn-id: file:///home/svn/framework3/trunk@7156 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 11:45:14 +00:00
a782a68c42
Complete overhaul of the MSSQL API, fixes 1.9 compat issues and makes the MSSQL testing easier
...
git-svn-id: file:///home/svn/framework3/trunk@7154 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-13 22:24:47 +00:00
09ec91d9bf
Use name convention
...
git-svn-id: file:///home/svn/framework3/trunk@7146 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 23:07:34 +00:00
c14bd99aff
Base for an error based sql inj. scanner
...
git-svn-id: file:///home/svn/framework3/trunk@7145 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:52:54 +00:00
95bf9f84f7
Basic robots scanner for wmap
...
git-svn-id: file:///home/svn/framework3/trunk@7144 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:48:25 +00:00
97ae32a318
Minor display changes
...
git-svn-id: file:///home/svn/framework3/trunk@7143 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:40:57 +00:00
ec00f69e66
Subversion scanner
...
git-svn-id: file:///home/svn/framework3/trunk@7142 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 20:49:34 +00:00
3d68290b8c
Try both snmp1 and snmp2
...
git-svn-id: file:///home/svn/framework3/trunk@7132 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-06 23:20:36 +00:00
bd0b0b454e
deregister unused (not user-settable) options
...
git-svn-id: file:///home/svn/framework3/trunk@7130 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-06 05:37:36 +00:00
f21e3c8754
svn:keywords run
...
git-svn-id: file:///home/svn/framework3/trunk@7128 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-04 23:38:06 +00:00
b42cc67e54
Fixes the ASN.1 parser to work with ruby 1.9.1
...
git-svn-id: file:///home/svn/framework3/trunk@7121 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-03 19:48:15 +00:00
aecbf12b5b
Fix up the oracle module, remove syntax error, clean up output, only use one connection
...
git-svn-id: file:///home/svn/framework3/trunk@7099 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-30 21:44:54 +00:00
7abd2fe06f
Correct tab indents (from spaces), cosmetic fixes, remove useless rescue, spelling fix in description (thanks rmkml!)
...
git-svn-id: file:///home/svn/framework3/trunk@7098 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-30 21:04:54 +00:00
acf828461c
updated oraenum.rb with an additional wordlist.
...
git-svn-id: file:///home/svn/framework3/trunk@7093 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-29 21:58:01 +00:00
b4a291f430
added auxiliary module oraenum.rb from Carlos Perez.
...
git-svn-id: file:///home/svn/framework3/trunk@7088 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 23:13:06 +00:00
56d4345830
updated options module
...
git-svn-id: file:///home/svn/framework3/trunk@7078 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 22:42:24 +00:00
5972666f63
See #339 . Massive cleanup of author names, make them consistent across modules
...
git-svn-id: file:///home/svn/framework3/trunk@7075 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 21:30:45 +00:00
c4594f396f
added auxiliary module timbuktu_udp.rb and exploit module timbuktu_fileupload.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7062 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-26 00:04:00 +00:00
b9138f80df
Allow the user to set the interface name for scanning, this needs to get merged into the capture mixin, but this solves it for now.
...
git-svn-id: file:///home/svn/framework3/trunk@7055 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-24 03:34:04 +00:00
7d122ceb02
Fixes #269 . Specifically wrap EOFError
...
git-svn-id: file:///home/svn/framework3/trunk@7045 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-20 19:49:03 +00:00
532d80b7df
Fix modules - unpack('s') breaks on big-endian, lots of formatting issues
...
git-svn-id: file:///home/svn/framework3/trunk@7042 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-19 17:24:29 +00:00
5f650c0751
Added HP Web JetAdmin aux command exec module.
...
git-svn-id: file:///home/svn/framework3/trunk@7041 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-19 00:33:44 +00:00
e0e9ad670f
added auxiliary module osb_execqr2.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7038 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-16 12:07:07 +00:00
110e89fd19
Fix a raise() call that was printing a warning with Ruby 1.8.6
...
git-svn-id: file:///home/svn/framework3/trunk@7036 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-14 18:46:41 +00:00
41aa5baa6d
Fix the check for verbose flag
...
git-svn-id: file:///home/svn/framework3/trunk@7033 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 15:43:08 +00:00
0885a7262e
Merge the DECT code from DK, clean some things up
...
git-svn-id: file:///home/svn/framework3/trunk@7032 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 15:40:33 +00:00
b0d1c2681f
Added sendmail_prescan aux dos module.
...
git-svn-id: file:///home/svn/framework3/trunk@7031 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 10:56:36 +00:00
7505a4568f
This commit adds a SMB 2.0 scanner - it also reports uptime and dialect version
...
git-svn-id: file:///home/svn/framework3/trunk@7021 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 15:51:06 +00:00
858d57acdd
Updated referencse and description
...
git-svn-id: file:///home/svn/framework3/trunk@7017 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 13:41:14 +00:00
a7afd1a6c8
Updated referencse and description
...
git-svn-id: file:///home/svn/framework3/trunk@7016 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 13:34:13 +00:00
232ca24b46
Updated to make it clear that 2003 is not affected (thanks for the feedback for those who tested)
...
git-svn-id: file:///home/svn/framework3/trunk@7012 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-08 20:27:41 +00:00
7006acc1a8
Cosmetic cleanup
...
git-svn-id: file:///home/svn/framework3/trunk@7011 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-08 17:48:12 +00:00
989989077a
Adds a first pass at the new SMB flaw - set the OFFSET variable to test different function table indices. This module contains some offsets/notes from my early attempts at code execution.
...
git-svn-id: file:///home/svn/framework3/trunk@7010 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-08 17:41:40 +00:00
e0e72f39b2
Fix up dcerpc auditor module to connect/disconnect each uuid (works much better)
...
git-svn-id: file:///home/svn/framework3/trunk@6986 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-28 18:58:47 +00:00
cbf64d76bb
Audit a TCP service to determine what DCERPC UUIDs are bound
...
git-svn-id: file:///home/svn/framework3/trunk@6985 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-28 18:51:42 +00:00
56f1dc0e43
Fixes #282 . Remove extra \n
...
git-svn-id: file:///home/svn/framework3/trunk@6973 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-25 02:59:50 +00:00
2247b483d9
Updated pSnuffle sniffer code from _MAX_
...
git-svn-id: file:///home/svn/framework3/trunk@6965 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-19 14:07:33 +00:00
b14a4ddf0b
Lots of shiny new NTLM goodness from Ryan Linn
...
git-svn-id: file:///home/svn/framework3/trunk@6958 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-17 20:00:05 +00:00
5a84e7b47f
Racket fix bailiwicked modules
...
git-svn-id: file:///home/svn/framework3/trunk@6950 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-11 02:49:23 +00:00
d0289671f6
Basic generic wmap modules
...
git-svn-id: file:///home/svn/framework3/trunk@6948 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-10 00:04:01 +00:00
87d59b4512
More webdav modules to grab information
...
git-svn-id: file:///home/svn/framework3/trunk@6947 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-10 00:01:38 +00:00
a92fa0b424
Add test case
...
git-svn-id: file:///home/svn/framework3/trunk@6946 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-09 23:59:44 +00:00
4070c5653b
add defanged detection mode. hurray for demoing stuff i haven't committed yet
...
git-svn-id: file:///home/svn/framework3/trunk@6940 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-06 05:56:24 +00:00
6743c5f510
added a auxiliary module that may help id potential targets for db2rcmd.rb.
...
git-svn-id: file:///home/svn/framework3/trunk@6938 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-05 21:21:45 +00:00
df18371123
win32exec and win32upload modules for oracle post exploitation
...
git-svn-id: file:///home/svn/framework3/trunk@6920 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-29 04:18:08 +00:00
7c41522004
missed one.
...
git-svn-id: file:///home/svn/framework3/trunk@6918 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 13:44:50 +00:00
6bb37bbca5
converted the current fileformat modules to use the new mixin. also added a few new ones.
...
git-svn-id: file:///home/svn/framework3/trunk@6917 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 13:43:37 +00:00
13e54d2924
print a useful error message and bail when no exploits are found
...
git-svn-id: file:///home/svn/framework3/trunk@6916 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 11:29:14 +00:00
9080dd1f0d
Added references and MSB to unicode bypass modules.
...
git-svn-id: file:///home/svn/framework3/trunk@6914 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 07:39:34 +00:00
0d8ea98cdf
Added AIX SNMP Scanner Auxiliary Module.
...
git-svn-id: file:///home/svn/framework3/trunk@6912 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 04:48:36 +00:00
876a80f601
Updated osvdb references from Steve Tornio, updated capture/eth_spoof modules
...
git-svn-id: file:///home/svn/framework3/trunk@6907 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-27 14:05:23 +00:00
021e4c7fe1
Dont spoof the apple status page, better off exploiting the browser popup
...
git-svn-id: file:///home/svn/framework3/trunk@6902 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-26 05:31:29 +00:00
9377a10094
updated description of module
...
git-svn-id: file:///home/svn/framework3/trunk@6900 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-25 18:49:26 +00:00
861f35979e
Allow for basic authentication and access control in the FTP server module
...
git-svn-id: file:///home/svn/framework3/trunk@6896 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-25 04:18:37 +00:00
466e8fe555
include dos mixin
...
git-svn-id: file:///home/svn/framework3/trunk@6890 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-24 21:01:38 +00:00
b1c40fb3ac
Apply a patch to arp_sweep to record the mac of the hosts
...
git-svn-id: file:///home/svn/framework3/trunk@6885 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 11:47:10 +00:00
b386afb4da
get rid of debug printing
...
git-svn-id: file:///home/svn/framework3/trunk@6883 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 09:58:13 +00:00
a467fdded7
allow autopwn sploits to specify compatible os as an array; minor refactor
...
git-svn-id: file:///home/svn/framework3/trunk@6881 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 08:43:54 +00:00
d3e65b3363
svn:keywords run
...
git-svn-id: file:///home/svn/framework3/trunk@6876 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 02:55:51 +00:00
739207bf4a
merge browser_autopwn back into trunk. This changes the database schema slightly, so make sure to db_destroy and db_create before using the database features.
...
git-svn-id: file:///home/svn/framework3/trunk@6873 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 20:14:35 +00:00
ad3e559ff9
Adds a working FTP server module
...
git-svn-id: file:///home/svn/framework3/trunk@6871 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 19:10:45 +00:00
54fc8e70e2
Fixed spurious next
...
git-svn-id: file:///home/svn/framework3/trunk@6861 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 02:56:40 +00:00
ff9efe45bc
Fixed spurious next
...
git-svn-id: file:///home/svn/framework3/trunk@6860 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 02:48:00 +00:00
8ad948c127
Demonstrate how to send raw ethernet frames
...
git-svn-id: file:///home/svn/framework3/trunk@6851 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 10:54:24 +00:00
529ded22ae
reverting last commit; somebody didn't cross their fingers
...
git-svn-id: file:///home/svn/framework3/trunk@6847 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 20:48:47 +00:00
c3dc1ecb55
reintegrate browser_autopwn into trunk; cross your fingers and hope this works
...
git-svn-id: file:///home/svn/framework3/trunk@6846 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 17:27:36 +00:00
7dcc3e5e47
Overhaul of all modules to use racket instead of scruby/packetfu
...
git-svn-id: file:///home/svn/framework3/trunk@6823 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:36:40 +00:00
3d3ea9788c
added auxiliary module login_brute.rb and oracle_default_passwords.csv.
...
git-svn-id: file:///home/svn/framework3/trunk@6819 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 14:20:22 +00:00
4f88b5a5c1
added auxiliary module sid_brute.rb and sid.txt wordlist.
...
git-svn-id: file:///home/svn/framework3/trunk@6807 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 00:03:50 +00:00
6005ac7c3f
added exploit module tns_service_name.rb. updated ora_ntlm_stealer.rb to use the new mixin.
...
git-svn-id: file:///home/svn/framework3/trunk@6804 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 03:50:45 +00:00
55356c88e1
added auxiliary module tnscmd.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6800 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 16:48:56 +00:00
f897d1d3d5
Patch from jabra for enable mssql brute forcing
...
git-svn-id: file:///home/svn/framework3/trunk@6798 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 11:30:41 +00:00
212dc2f2b0
addition of oracle mixin and sql client.
...
git-svn-id: file:///home/svn/framework3/trunk@6796 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 03:55:32 +00:00
6e85581e2f
Updates from jabra for the phishing modules
...
git-svn-id: file:///home/svn/framework3/trunk@6767 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-12 03:57:25 +00:00
58671fd684
disconnect() tcp socket instead of just close()ing it
...
git-svn-id: file:///home/svn/framework3/trunk@6758 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-09 07:08:25 +00:00
94b2eb1cef
updated to make things more reliable.
...
git-svn-id: file:///home/svn/framework3/trunk@6749 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-07 07:00:45 +00:00
50fc339988
Correct spelling re: RFC. Thanks to Shuyao Yu.
...
git-svn-id: file:///home/svn/framework3/trunk@6748 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-06 10:07:46 +00:00
ee09d81d49
Added Cisco VPN Concentrator FTP bug aux module.
...
git-svn-id: file:///home/svn/framework3/trunk@6747 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-06 10:05:21 +00:00
957d894336
Add support for the apple network status check
...
git-svn-id: file:///home/svn/framework3/trunk@6746 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-06 01:12:55 +00:00
69725e75a2
Added MS02-063 PPTP DoS aux.
...
git-svn-id: file:///home/svn/framework3/trunk@6735 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-03 01:24:55 +00:00
28440435f3
Added 3com_superstack_switch DoS aux module.
...
git-svn-id: file:///home/svn/framework3/trunk@6734 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-01 03:57:04 +00:00
9174bcd0a8
Added iomega_storcentrepro_sessionid aux module.
...
git-svn-id: file:///home/svn/framework3/trunk@6733 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-01 03:55:56 +00:00
c1a5ed32b6
Added more information to note entered into database abstraction layer
...
git-svn-id: file:///home/svn/framework3/trunk@6731 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-30 17:42:20 +00:00
69cc96a1ae
Adds database support for logging wardialer scan results using report_note
...
git-svn-id: file:///home/svn/framework3/trunk@6729 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-30 04:54:00 +00:00
22c8af48eb
Added some output for fax and carrier detection
...
git-svn-id: file:///home/svn/framework3/trunk@6728 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-30 02:55:37 +00:00
9b94ee52ef
Added dell_openmanage_post aux module.
...
git-svn-id: file:///home/svn/framework3/trunk@6699 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-23 13:23:50 +00:00
HD Moore
James Lee
Tod Beardsley
Joshua Drake
et
Carlos Perez
Mario Ceballos
Mike Smith
Patrick Webster
Stephen Fewer
Ramon de C Valle