Commit Graph

436 Commits (7136d6bbd4a4d11238bc9a0c0b100c98b0af241f)

Author SHA1 Message Date
HD Moore 5b497d5e4d Added Irix platform
Tweaked reverse.rb to use a subshell and background it
Added Irix lpdexec


git-svn-id: file:///home/svn/incoming/trunk@3505 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 18:10:08 +00:00
vlad902 3acdd81b9e metasploit -> mozilla
git-svn-id: file:///home/svn/incoming/trunk@3504 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 01:56:34 +00:00
HD Moore 868d7bf561 Working findtag + samba
Removed call to evasions that didnt have corresponding definition


git-svn-id: file:///home/svn/incoming/trunk@3501 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 21:04:50 +00:00
bmc 40961655d6 * enable evasions on the socket as they come in
git-svn-id: file:///home/svn/incoming/trunk@3498 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:56:50 +00:00
bmc 3adb2211b8 * add tcp segment size evasion
* add tcp write delay evasion


git-svn-id: file:///home/svn/incoming/trunk@3497 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:55:56 +00:00
bmc 620dfad4a9 gee, these were not cut and paste targets...
git-svn-id: file:///home/svn/incoming/trunk@3490 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:33:49 +00:00
bmc 2f2790386f providing the XDR alias is important...
git-svn-id: file:///home/svn/incoming/trunk@3489 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:31:28 +00:00
bmc d4d73114c1 * add the following evasions for attacks against HTTP servers:
HTTP::chunked
    HTTP::header_folding
    HTTP::junk_headers
    HTTP::junk_slashes
    HTTP::junk_directories
    HTTP::junk_params
    HTTP::junk_self_referring_directories
    HTTP::junk_pipeline

* add the following evasions for attacks against HTTP clients:
    HTTP::junk_headers
    HTTP::compression (was gzip)

* added an exploit mixin for HTML based attacks with HTML based evasions.  eg: aim_goaway.rb
    HTML::unicode
    HTML::javascript::base64
    HTML::javascript::escape


git-svn-id: file:///home/svn/incoming/trunk@3458 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 22:02:35 +00:00
HD Moore b4ad4a5d75 Tabs vs Spaces
git-svn-id: file:///home/svn/incoming/trunk@3453 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 05:33:08 +00:00
bmc 7f9baa9744 * update OptEnum so that desc displays the valid options, less duplication of data
* add OptEnum to the test suite


git-svn-id: file:///home/svn/incoming/trunk@3442 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-25 19:15:09 +00:00
HD Moore bdfd2c5152 Recon modules and the recon event subsystem have been temporarily removed.
The 'auxiliary' system is designed to replace it and recon features will
slowly be moved back into the framework


git-svn-id: file:///home/svn/incoming/trunk@3438 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-24 03:59:44 +00:00
HD Moore 9dc316e932 Updated license
git-svn-id: file:///home/svn/incoming/trunk@3429 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-22 19:28:05 +00:00
HD Moore f485585e7c License information displayed by info
git-svn-id: file:///home/svn/incoming/trunk@3428 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-22 19:25:55 +00:00
HD Moore 1bffccf605 New licensing terms, revision bump to v3
git-svn-id: file:///home/svn/incoming/trunk@3425 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 22:10:20 +00:00
vlad902 0d2fab2f27 Support for SunRPC
git-svn-id: file:///home/svn/incoming/trunk@3422 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 02:45:07 +00:00
vlad902 126c71d25a Basic sunrpc interface
git-svn-id: file:///home/svn/incoming/trunk@3421 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 02:44:54 +00:00
HD Moore 737a1cb711 Pass socket context to child sockets from server, pass context from http mixin to socket
git-svn-id: file:///home/svn/incoming/trunk@3402 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:35:44 +00:00
HD Moore e02eb0d2eb Fixed to NOP vs Nop, Encoder vs ENCODER, setting the preferred NOP
Fixed multiple CPU spinning bugs in the alpha2 encoders
Fixed SiteReference to expose site type and value


git-svn-id: file:///home/svn/incoming/trunk@3401 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:09:40 +00:00
Matt Miller ba0b13292b support for preferred nop
git-svn-id: file:///home/svn/incoming/trunk@3399 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 01:11:26 +00:00
HD Moore de9452dc34 Enum fix
git-svn-id: file:///home/svn/incoming/trunk@3396 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 23:32:51 +00:00
HD Moore 374f7f0c11 Added Enum
git-svn-id: file:///home/svn/incoming/trunk@3395 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 23:30:59 +00:00
Matt Miller ef8e171e2a fix clearing user defined options to work correctly
git-svn-id: file:///home/svn/incoming/trunk@3389 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 16:11:32 +00:00
HD Moore 64f86f88aa alpha-2
git-svn-id: file:///home/svn/incoming/trunk@3388 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 04:32:30 +00:00
Matt Miller f1596d0d26 fix for obscure ruby thing
git-svn-id: file:///home/svn/incoming/trunk@3380 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 03:56:08 +00:00
HD Moore 08027a53c7 Added HPUX, defined licensing in COPYING
git-svn-id: file:///home/svn/incoming/trunk@3378 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 03:36:43 +00:00
Matt Miller 2e19a86843 added license to all modules
git-svn-id: file:///home/svn/incoming/trunk@3377 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 02:59:47 +00:00
HD Moore 884fffa28c Ported the unix revers command payloads and handler
git-svn-id: file:///home/svn/incoming/trunk@3372 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-14 20:12:53 +00:00
Matt Miller c81e6a799d properly pass encoder selection on to payload encoder
git-svn-id: file:///home/svn/incoming/trunk@3367 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-11 18:16:33 +00:00
Matt Miller 79e055c7fd fix termination of bind handler thread
git-svn-id: file:///home/svn/incoming/trunk@3349 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-08 19:49:14 +00:00
Matt Miller 60abf5cff5 fix for compat matching with one side set and one side not
git-svn-id: file:///home/svn/incoming/trunk@3343 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-08 03:19:11 +00:00
Matt Miller 8e72f20095 better support for random uri base in px
git-svn-id: file:///home/svn/incoming/trunk@3331 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 20:11:21 +00:00
Matt Miller b6395069ee fixed a few bugs for px
git-svn-id: file:///home/svn/incoming/trunk@3323 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 18:59:04 +00:00
Matt Miller ae5c816e85 various enhancements to support passivex, seems to be functional, somewhat
git-svn-id: file:///home/svn/incoming/trunk@3322 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 10:04:30 +00:00
Matt Miller 7a24c3556c to_native
git-svn-id: file:///home/svn/incoming/trunk@3320 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 15:35:06 +00:00
Matt Miller 237af88317 update to encoder and exploit classes to support target/exploit specific encoder type/encoder options
git-svn-id: file:///home/svn/incoming/trunk@3315 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 02:25:47 +00:00
Matt Miller f9d058887b initial import of alpha2 from pusscat
git-svn-id: file:///home/svn/incoming/trunk@3313 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 00:57:14 +00:00
HD Moore 8049b32cbc Patches from <anon>
git-svn-id: file:///home/svn/incoming/trunk@3310 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-05 22:20:28 +00:00
HD Moore d0c8775f56 Adds a new 'evasion' option type
git-svn-id: file:///home/svn/incoming/trunk@3309 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-05 03:57:12 +00:00
Matt Miller a590caaf77 fix for merging compat options and for mirroring Payload->Compat with Compat->Payload
git-svn-id: file:///home/svn/incoming/trunk@3304 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-03 04:43:40 +00:00
Matt Miller e63ba080a8 added support for use_gzip
git-svn-id: file:///home/svn/incoming/trunk@3303 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-03 04:24:03 +00:00
HD Moore 96d4591b87 Updates to httpserver mixin, gzip encoding added to text, bugfix to wordstar, added metafile exploit, will rename and make it nice later
git-svn-id: file:///home/svn/incoming/trunk@3299 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-02 07:49:52 +00:00
HD Moore 9fc93bbe56 Miscellaneous fixes, changes to CMD payloads
git-svn-id: file:///home/svn/incoming/trunk@3296 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-02 01:12:36 +00:00
Matt Miller 09d21fbced remove puts
git-svn-id: file:///home/svn/incoming/trunk@3295 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-01 22:26:18 +00:00
Matt Miller 6bbc5f7e17 remove all non-user defined datastore params when switching payloads
git-svn-id: file:///home/svn/incoming/trunk@3293 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 20:26:17 +00:00
HD Moore 8de634c25f timing fixes
git-svn-id: file:///home/svn/incoming/trunk@3292 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 19:49:12 +00:00
Matt Miller f2002f32d2 restore original buffer when init_state is called since encoders might modify it
git-svn-id: file:///home/svn/incoming/trunk@3290 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:47:53 +00:00
Matt Miller 00d15f8f1d reinitializing counters
git-svn-id: file:///home/svn/incoming/trunk@3289 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:26:34 +00:00
Matt Miller e9318c64d7 catch all exceptions
git-svn-id: file:///home/svn/incoming/trunk@3288 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:23:30 +00:00
HD Moore f468b10cff Tweaks
git-svn-id: file:///home/svn/incoming/trunk@3286 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:03:02 +00:00
HD Moore 2029e8a335 Revert stupid hack, done right now
git-svn-id: file:///home/svn/incoming/trunk@3277 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 06:49:25 +00:00
HD Moore 1d673f144c Claim the socket when a shell is found, regardless of the return value of create_session()..
git-svn-id: file:///home/svn/incoming/trunk@3276 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 06:40:41 +00:00
HD Moore f7e0579a3c Updates to sparc/ppc encoders, added find_key_verify()
git-svn-id: file:///home/svn/incoming/trunk@3274 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 06:05:23 +00:00
Matt Miller a4b622d425 fix for nop ui thing maybe
git-svn-id: file:///home/svn/incoming/trunk@3267 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 02:38:18 +00:00
Matt Miller e537fadb05 shikata ga nai
git-svn-id: file:///home/svn/incoming/trunk@3266 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 01:14:56 +00:00
HD Moore c8d273cec0 Wee, works
git-svn-id: file:///home/svn/incoming/trunk@3258 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-27 04:16:23 +00:00
Matt Miller 03ab9e8340 fix for nil deref and allow multi word compares in compat
git-svn-id: file:///home/svn/incoming/trunk@3256 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-27 02:42:46 +00:00
HD Moore 97129d0303 New modules, module renames
git-svn-id: file:///home/svn/incoming/trunk@3254 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-26 14:34:22 +00:00
HD Moore 412629e5c3 Stuff.. more changes to come
git-svn-id: file:///home/svn/incoming/trunk@3253 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-25 22:47:38 +00:00
Matt Miller 2baa7687fe only user-defined options are saved now
git-svn-id: file:///home/svn/incoming/trunk@3249 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-21 02:51:23 +00:00
HD Moore 7a26ec55bf Proxy chaining patch from bmc
git-svn-id: file:///home/svn/incoming/trunk@3244 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-18 02:19:21 +00:00
HD Moore 082a62afd7 NetDDE + smb code frmo pusscat
git-svn-id: file:///home/svn/incoming/trunk@3243 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-18 02:07:33 +00:00
HD Moore 88658064df /usr/bin/ruby vs /usr/bin/env ruby
git-svn-id: file:///home/svn/incoming/trunk@3242 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-17 06:46:23 +00:00
Matt Miller e434262050 fix for next
git-svn-id: file:///home/svn/incoming/trunk@3241 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-16 01:04:08 +00:00
Matt Miller 410770bae6 fixes for some socket association stuff
git-svn-id: file:///home/svn/incoming/trunk@3233 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-15 04:46:52 +00:00
HD Moore 6d087fe0f3 exploit.target now returns the default target_idx, even if its 0
git-svn-id: file:///home/svn/incoming/trunk@3232 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-15 04:34:26 +00:00
HD Moore 3d2bfd521c Fixed options() problem in the mixin, minor tweak in remote_agent
git-svn-id: file:///home/svn/incoming/trunk@3229 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-15 04:16:30 +00:00
HD Moore f2582ac38e /me feels slapped around
git-svn-id: file:///home/svn/incoming/trunk@3226 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 05:15:06 +00:00
HD Moore 2ecec3db87 More
git-svn-id: file:///home/svn/incoming/trunk@3223 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 03:14:51 +00:00
Matt Miller f37776f830 fix for mod platform
git-svn-id: file:///home/svn/incoming/trunk@3222 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:43:18 +00:00
Matt Miller 8d7e729261 fix for platform problem
git-svn-id: file:///home/svn/incoming/trunk@3221 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:37:19 +00:00
HD Moore e79c9f8658 Something is still breaking, use w3who, show payloads, exploit, breaks
git-svn-id: file:///home/svn/incoming/trunk@3218 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:21:23 +00:00
HD Moore 557153e01c Code from Brian Caswell
git-svn-id: file:///home/svn/incoming/trunk@3210 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-13 06:08:40 +00:00
Matt Miller 22278ce458 vncinject payload
git-svn-id: file:///home/svn/incoming/trunk@3201 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-12 07:07:19 +00:00
HD Moore b9638a7aa2 Removed debugging line
git-svn-id: file:///home/svn/incoming/trunk@3199 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-09 05:23:53 +00:00
Matt Miller be449c54a5 stagers stat works
git-svn-id: file:///home/svn/incoming/trunk@3183 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-06 19:37:59 +00:00
HD Moore 6c2da4d313 Imap exploits
Addition of MC as a common author
Added the IMAP mixin
Fixed bug in base64


git-svn-id: file:///home/svn/incoming/trunk@3172 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-05 05:00:27 +00:00
HD Moore 9b977bee1b Fixed some authors
git-svn-id: file:///home/svn/incoming/trunk@3163 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-02 01:18:51 +00:00
HD Moore 4d43e8f482 mnor
git-svn-id: file:///home/svn/incoming/trunk@3159 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-29 02:57:04 +00:00
Matt Miller ebf9cf5c48 add none to default
git-svn-id: file:///home/svn/incoming/trunk@3158 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-29 02:43:20 +00:00
Matt Miller a2df616bd4 devguide samples
git-svn-id: file:///home/svn/incoming/trunk@3154 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 23:49:48 +00:00
Matt Miller 5a42b1d86b msfd fixes
git-svn-id: file:///home/svn/incoming/trunk@3150 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 20:41:11 +00:00
Matt Miller 5bb104c993 msfd
git-svn-id: file:///home/svn/incoming/trunk@3146 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 16:36:06 +00:00
Matt Miller d99f972357 changes to comments
git-svn-id: file:///home/svn/incoming/trunk@3144 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 12:40:13 +00:00
HD Moore 9340ecdeab IIS exploits ported
Added on_new_session callback and session_created? flag to exploit
Fixed socket fd leak in Comm::Local


git-svn-id: file:///home/svn/incoming/trunk@3135 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-27 18:42:44 +00:00
HD Moore 7624b4d78a Bug fixes for alphanum vs alphanumeric
Added some target print code to the brightstor explotis
Added the backupexec epxloits


git-svn-id: file:///home/svn/incoming/trunk@3132 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-27 01:51:50 +00:00
HD Moore 40aa62968f Arkeia exploits added
git-svn-id: file:///home/svn/incoming/trunk@3129 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 19:56:03 +00:00
HD Moore f4d6a11fd7 Mixins
git-svn-id: file:///home/svn/incoming/trunk@3123 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 11:16:50 +00:00
HD Moore 7403e8bf23 Mssql code!
git-svn-id: file:///home/svn/incoming/trunk@3122 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 11:16:36 +00:00
HD Moore 9bf0d901cf Added the egghunter mixin
Consolidated all unicode routines to go through Rex::Text.to_unicode()
Added a new function for sending evil blobs through smb


git-svn-id: file:///home/svn/incoming/trunk@3114 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 02:34:39 +00:00
HD Moore fb8b56f55f Changed up the way mixins are handled, all exploits just require 'msf/core' and
all current mixins will be loaded. Egghunter was moved to a mixin and generates
based on target arch and platform.


git-svn-id: file:///home/svn/incoming/trunk@3111 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 00:04:26 +00:00
HD Moore fb47661a8f Serv-U exploit working, depends on searcher() in x86, many fixes to FTP mixin
git-svn-id: file:///home/svn/incoming/trunk@3103 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-25 20:02:21 +00:00
Matt Miller 6c4703add7 fix generation stuff
git-svn-id: file:///home/svn/incoming/trunk@3093 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-25 02:07:35 +00:00
Matt Miller 04a27c3475 msfweb payload generation functional
git-svn-id: file:///home/svn/incoming/trunk@3092 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-25 01:59:54 +00:00
Matt Miller 32c471498a more msfweb action
git-svn-id: file:///home/svn/incoming/trunk@3089 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 20:41:56 +00:00
Matt Miller 88c4916967 catch IOErrors in disconnect
git-svn-id: file:///home/svn/incoming/trunk@3084 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 19:15:24 +00:00
Matt Miller 96d75dcbb4 support for aborting sockets once a remote, non-find exploit succeeds
git-svn-id: file:///home/svn/incoming/trunk@3082 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 18:50:33 +00:00
HD Moore 81a1de755b SEH frame stuff integrated into ftp modules, added generate_seh_payload
git-svn-id: file:///home/svn/incoming/trunk@3081 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 18:30:56 +00:00
HD Moore bbe464e358 Added note to TODO, reordered some functios in FTP, will change these again
once we get the socket abort stuff going


git-svn-id: file:///home/svn/incoming/trunk@3080 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 17:45:00 +00:00
Matt Miller 68e661065d more msfweb foo
git-svn-id: file:///home/svn/incoming/trunk@3077 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 05:13:40 +00:00
Matt Miller a19e98757d more hackery on msfweb
git-svn-id: file:///home/svn/incoming/trunk@3076 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 04:23:43 +00:00
Matt Miller adc09f4aa1 hacking on msfweb
git-svn-id: file:///home/svn/incoming/trunk@3069 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 03:31:23 +00:00
Matt Miller 2f05b6959f updated sample to support console command dispatcher registration
git-svn-id: file:///home/svn/incoming/trunk@3059 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-23 14:34:11 +00:00
Matt Miller 36f6c79986 fixed up plugins to be loadable with local input/output handles
git-svn-id: file:///home/svn/incoming/trunk@3058 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-23 14:02:30 +00:00
Matt Miller 09a41d4d5c framework plugins
git-svn-id: file:///home/svn/incoming/trunk@3053 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-19 16:25:26 +00:00
Matt Miller 0e9c5bab5b logging fix, meterpreter multi-load fixed, advanced option display, meterpreter optino to autoload stdapi
git-svn-id: file:///home/svn/incoming/trunk@3052 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-19 15:09:41 +00:00
Matt Miller cbbce06ee0 fix for multiple exploit
git-svn-id: file:///home/svn/incoming/trunk@3046 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-18 00:26:19 +00:00
Matt Miller 07328a0841 partial fix
git-svn-id: file:///home/svn/incoming/trunk@3045 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-17 23:03:53 +00:00
HD Moore 4edf57d731 ms04_011 works perfectly
updated smb, evasion can be set via SMBEvasion datastore (temporary)
added the first osx exploit, cant test for a week or so


git-svn-id: file:///home/svn/incoming/trunk@3044 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-17 19:41:54 +00:00
HD Moore ee3745ef8c More tweaks
git-svn-id: file:///home/svn/incoming/trunk@3043 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-17 04:25:30 +00:00
HD Moore 16c5e232f5 Addition of get_once() in io::stream, rewritten recv code for smb/dcerpc, error handling in exploit mixins
git-svn-id: file:///home/svn/incoming/trunk@3042 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-16 17:56:07 +00:00
HD Moore 3150bd2f3a SMB mixin is mostly working now
git-svn-id: file:///home/svn/incoming/trunk@3037 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 23:02:17 +00:00
Matt Miller 510669e7ef option normalization
git-svn-id: file:///home/svn/incoming/trunk@3035 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 21:50:10 +00:00
Matt Miller fc42fef941 exploits now pass context when creating sockets
git-svn-id: file:///home/svn/incoming/trunk@3034 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 21:25:23 +00:00
Matt Miller 5676117bff last of normalized docs from last night
git-svn-id: file:///home/svn/incoming/trunk@3030 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 15:11:43 +00:00
Matt Miller b89a92f28f payloads now display multiple stages
git-svn-id: file:///home/svn/incoming/trunk@3025 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-12 05:11:56 +00:00
Matt Miller eeda1d06d7 woop
git-svn-id: file:///home/svn/incoming/trunk@3023 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:49:02 +00:00
Matt Miller 2f52fc9e02 bugfix
git-svn-id: file:///home/svn/incoming/trunk@3022 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:27:57 +00:00
Matt Miller 05a84cc7da bug fixes in x86 asm, jmp call additive, payload generation, and new exploit
git-svn-id: file:///home/svn/incoming/trunk@3021 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:22:03 +00:00
Matt Miller 61456015da persistent storage work
git-svn-id: file:///home/svn/incoming/trunk@3019 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-09 03:28:21 +00:00
Matt Miller d0a66d9ec1 route integration into the ui
git-svn-id: file:///home/svn/incoming/trunk@3017 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-08 18:00:17 +00:00
Matt Miller ac9b0edf94 bug fix
git-svn-id: file:///home/svn/incoming/trunk@3012 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-03 00:18:12 +00:00
Matt Miller efc687de84 fix up handlers
git-svn-id: file:///home/svn/incoming/trunk@3007 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 17:32:34 +00:00
Matt Miller 39c9af8069 updated comments to be more uniformed in class definition
git-svn-id: file:///home/svn/incoming/trunk@3005 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 16:56:39 +00:00
Matt Miller 6a5870ddcd updated comments to be more uniformed in class definition
git-svn-id: file:///home/svn/incoming/trunk@3004 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 16:49:45 +00:00
Matt Miller 15ce3c424b added is_usable check
git-svn-id: file:///home/svn/incoming/trunk@3003 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 14:18:50 +00:00
Matt Miller 1c3fc58349 updated logging levels and defined guidelines
git-svn-id: file:///home/svn/incoming/trunk@3002 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 00:27:59 +00:00
Matt Miller a9c7ecc42b bind and reverse handler unit tests
git-svn-id: file:///home/svn/incoming/trunk@2999 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 02:41:29 +00:00
Matt Miller 1605e575cd implemented some unit tests for modules
git-svn-id: file:///home/svn/incoming/trunk@2998 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 00:48:40 +00:00
Matt Miller efa51ca309 unit tests for encoders
git-svn-id: file:///home/svn/incoming/trunk@2997 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 00:30:20 +00:00
Matt Miller db6a30693b foo
git-svn-id: file:///home/svn/incoming/trunk@2996 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 00:02:51 +00:00
Matt Miller 27b8f880ff basic workings of auto-recon
git-svn-id: file:///home/svn/incoming/trunk@2987 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-31 15:56:59 +00:00
Matt Miller 204a215bc7 corrected some stuff
git-svn-id: file:///home/svn/incoming/trunk@2982 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-30 22:45:29 +00:00
Matt Miller 2e7a7dbe8d fixed up contextual recon event notifications
git-svn-id: file:///home/svn/incoming/trunk@2981 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-30 22:35:32 +00:00
Matt Miller a6d6cedd1d automatic module subscription to events
git-svn-id: file:///home/svn/incoming/trunk@2980 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-30 22:20:29 +00:00
Matt Miller 1fc49df4d2 more recon work, starting to become functional
git-svn-id: file:///home/svn/incoming/trunk@2979 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-29 13:47:07 +00:00
Matt Miller cc7add451d more work on recon module stuff
git-svn-id: file:///home/svn/incoming/trunk@2976 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-27 03:23:38 +00:00
Matt Miller c7eb56cab2 laying the groundwork for recon
git-svn-id: file:///home/svn/incoming/trunk@2975 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-27 02:54:39 +00:00
Matt Miller 712f7ef776 more docs
git-svn-id: file:///home/svn/incoming/trunk@2974 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-19 03:37:22 +00:00
Matt Miller 81c8cf3104 documentation fixes, code cleanup
git-svn-id: file:///home/svn/incoming/trunk@2973 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-19 03:20:20 +00:00
Matt Miller b06a2ca030 initial support for compat filtering, may be buggy
git-svn-id: file:///home/svn/incoming/trunk@2971 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-19 01:48:10 +00:00
Matt Miller 7cdf02d8da support for module reloading
git-svn-id: file:///home/svn/incoming/trunk@2956 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-10 00:30:14 +00:00
HD Moore a5cde85299 More SMB
git-svn-id: file:///home/svn/incoming/trunk@2954 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-03 13:51:05 +00:00
Matt Miller be79a295b7 opty2 ported
git-svn-id: file:///home/svn/incoming/trunk@2952 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 19:32:52 +00:00
Matt Miller ad6273ce35 cleanup payload and exploit after failure
git-svn-id: file:///home/svn/incoming/trunk@2950 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 18:39:51 +00:00
Matt Miller 17071db65c msfcli action
git-svn-id: file:///home/svn/incoming/trunk@2944 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 05:48:05 +00:00
Matt Miller b955e21a8b no .log
git-svn-id: file:///home/svn/incoming/trunk@2941 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 04:06:31 +00:00
Matt Miller 1a8bb86843 improved session logging
git-svn-id: file:///home/svn/incoming/trunk@2939 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 03:57:46 +00:00
Matt Miller db40a55547 session logging support
git-svn-id: file:///home/svn/incoming/trunk@2938 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 03:21:26 +00:00
Matt Miller fd38a7e39f variable validation, fixed tab complete
git-svn-id: file:///home/svn/incoming/trunk@2937 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-01 21:51:45 +00:00
Matt Miller a220e67128 msfencode and msfpayload updates
git-svn-id: file:///home/svn/incoming/trunk@2934 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-01 21:26:17 +00:00
Matt Miller 17a596186e added the concept of payload convention
git-svn-id: file:///home/svn/incoming/trunk@2925 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-01 06:09:46 +00:00
Matt Miller dd20214f32 added target specific stuff, generic stack adjustment, etc
git-svn-id: file:///home/svn/incoming/trunk@2924 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-01 05:55:15 +00:00
Matt Miller ccd1e8f10a payload info can now be target specific
git-svn-id: file:///home/svn/incoming/trunk@2923 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-30 07:12:32 +00:00
Matt Miller 6f6924e001 meterpreter comm session implemented, untested
git-svn-id: file:///home/svn/incoming/trunk@2920 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-30 05:59:44 +00:00
Matt Miller 6ec3700b16 pivoting with portfwd command
git-svn-id: file:///home/svn/incoming/trunk@2916 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-29 20:18:24 +00:00
Matt Miller fdf9553991 fix for argument error
git-svn-id: file:///home/svn/incoming/trunk@2914 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-27 00:35:51 +00:00
Matt Miller 89f184335d defaults
git-svn-id: file:///home/svn/incoming/trunk@2901 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-25 23:55:32 +00:00
Matt Miller 109aa7f63b smaller
git-svn-id: file:///home/svn/incoming/trunk@2898 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-25 19:47:48 +00:00
Matt Miller 6f33b93f37 comment
git-svn-id: file:///home/svn/incoming/trunk@2893 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 19:47:56 +00:00
Matt Miller 8090968279 add regenerate_payload
git-svn-id: file:///home/svn/incoming/trunk@2891 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 19:37:27 +00:00
Matt Miller 501d7da9f9 aim goaway exploit ported, fixed a few bugs in sled gen
git-svn-id: file:///home/svn/incoming/trunk@2888 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 19:17:07 +00:00
Matt Miller c05ea5839b update testing suites
git-svn-id: file:///home/svn/incoming/trunk@2886 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 18:42:29 +00:00
Matt Miller d07b602089 TODO update
git-svn-id: file:///home/svn/incoming/trunk@2882 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 18:02:24 +00:00
Matt Miller 4400f659ec seh mixin
git-svn-id: file:///home/svn/incoming/trunk@2881 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 18:02:03 +00:00
Matt Miller bde47f6ce2 exploit error catching
git-svn-id: file:///home/svn/incoming/trunk@2877 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 00:19:27 +00:00
Matt Miller 6f8f862e2a support for multiple con-current sessions
git-svn-id: file:///home/svn/incoming/trunk@2869 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-23 06:08:04 +00:00
Matt Miller 3116a654d4 enhanced logging a bit, added a few badchars to ie obj type, improving job support
git-svn-id: file:///home/svn/incoming/trunk@2868 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-23 05:51:09 +00:00
Matt Miller b522132350 moved some stuff around, working on adding the concept of jobs
git-svn-id: file:///home/svn/incoming/trunk@2864 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-22 04:53:46 +00:00
Matt Miller fe0a151d7e ported ie object type, more work on http stuff
git-svn-id: file:///home/svn/incoming/trunk@2861 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-22 03:24:32 +00:00
Matt Miller 811789fa01 back from the dead, ignore service manager stuff for now, it sux
git-svn-id: file:///home/svn/incoming/trunk@2860 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-21 04:48:37 +00:00
HD Moore 8c1fc64517 Removed comments from the __DATA__
git-svn-id: file:///home/svn/incoming/trunk@2853 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-16 03:30:13 +00:00
HD Moore 5e5f7eed24 DCERPC foo
git-svn-id: file:///home/svn/incoming/trunk@2852 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-16 03:29:27 +00:00
HD Moore 66ae46394a Typo fix
git-svn-id: file:///home/svn/incoming/trunk@2848 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-15 07:16:03 +00:00
Matt Miller d99e5b4f89 fix module dependency problem, made it so the server sock in meterp isn't inherited
git-svn-id: file:///home/svn/incoming/trunk@2842 4d416f70-5f16-0410-b530-b9f4589650da
2005-08-22 01:42:13 +00:00
HD Moore 897e69a972 Changed to match the new API
git-svn-id: file:///home/svn/incoming/trunk@2831 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-25 09:47:49 +00:00
Matt Miller 8f0d107c1a some improvements to stuff and or things
git-svn-id: file:///home/svn/incoming/trunk@2800 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-22 00:30:13 +00:00
Matt Miller c494a71957 find port/tag stagers
git-svn-id: file:///home/svn/incoming/trunk@2799 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-19 14:33:25 +00:00
Matt Miller 632a97823f moved some code around for interactive channels, still not functional yet, boohoo
git-svn-id: file:///home/svn/incoming/trunk@2797 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-19 04:21:15 +00:00
Matt Miller 203f185ad7 rockin 32 windows payloads, fixed some bugs, other cool shit, OptInt, what what what
git-svn-id: file:///home/svn/incoming/trunk@2796 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 23:32:34 +00:00
Matt Miller 9a420ac750 meterp fs wrapper action rockin the house
git-svn-id: file:///home/svn/incoming/trunk@2793 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 07:46:54 +00:00
Matt Miller 4679586c49 more meterp action
git-svn-id: file:///home/svn/incoming/trunk@2791 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 05:13:21 +00:00
Matt Miller 7f8db62b9c workin on integrating meterp client
git-svn-id: file:///home/svn/incoming/trunk@2790 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 04:07:56 +00:00
Matt Miller 577a5c3095 dll injection working, had to fix nop stack alignment crap
git-svn-id: file:///home/svn/incoming/trunk@2788 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 02:01:36 +00:00
Matt Miller 120e6b5a2b fix for missing min
git-svn-id: file:///home/svn/incoming/trunk@2784 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 00:03:29 +00:00
HD Moore 48b59caeff Minor tweaks
git-svn-id: file:///home/svn/incoming/trunk@2782 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-17 10:30:11 +00:00
HD Moore e6aa776371 Tweaky tweak
git-svn-id: file:///home/svn/incoming/trunk@2779 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-17 08:24:30 +00:00
Matt Miller 97ec0cf7d8 fixed port regex
git-svn-id: file:///home/svn/incoming/trunk@2777 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-17 08:03:54 +00:00
Matt Miller cc32a21386 bind tcp stager/inline for linux
git-svn-id: file:///home/svn/incoming/trunk@2776 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-17 07:43:24 +00:00
Matt Miller 46c2cd2ac1 added ui subscriber stuff
git-svn-id: file:///home/svn/incoming/trunk@2775 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-17 07:06:05 +00:00
Matt Miller 11724ac797 fixed stager merging, made things a bit more pimply
git-svn-id: file:///home/svn/incoming/trunk@2774 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-17 06:01:11 +00:00
Matt Miller 3d976dc22c minor improvements to session interaction, dumping sessions, interacting with sessions that are backgrounded
git-svn-id: file:///home/svn/incoming/trunk@2772 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-17 02:04:39 +00:00
Matt Miller 5ee93e6be6 added threadsafe wrapper foo
git-svn-id: file:///home/svn/incoming/trunk@2771 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-17 00:52:47 +00:00
Matt Miller 9dc387049f fixed booboo
git-svn-id: file:///home/svn/incoming/trunk@2770 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-16 16:06:44 +00:00
Matt Miller 24c4a2513a some more madness
git-svn-id: file:///home/svn/incoming/trunk@2765 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-16 08:12:58 +00:00
Matt Miller 2f2363d141 it lives, major changes, fixed bugs, exploiting works with the test exploit
git-svn-id: file:///home/svn/incoming/trunk@2763 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-16 07:32:11 +00:00
Matt Miller be2414a8b2 exploitation progress
git-svn-id: file:///home/svn/incoming/trunk@2762 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-15 23:46:05 +00:00
Matt Miller 645725a3b5 config file parsing, datastore persistence, shared data stores, save in the ui
git-svn-id: file:///home/svn/incoming/trunk@2761 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-15 22:30:04 +00:00
Matt Miller aa778d7a99 added ambiguous module name detection
git-svn-id: file:///home/svn/incoming/trunk@2754 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-14 20:05:41 +00:00
Matt Miller fd02a5de71 some work on compatible payload stuff
git-svn-id: file:///home/svn/incoming/trunk@2753 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-14 14:46:18 +00:00
Matt Miller 55516ba790 more pimpage, added an internal test exploit
git-svn-id: file:///home/svn/incoming/trunk@2752 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-14 07:32:11 +00:00