HD Moore
|
5957dd5393
|
Add tasks
git-svn-id: file:///home/svn/framework3/trunk@8791 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 18:42:21 +00:00 |
James Lee
|
0e537a17bb
|
fix some pastographical errors
git-svn-id: file:///home/svn/framework3/trunk@8790 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 17:48:59 +00:00 |
Stephen Fewer
|
edf030df53
|
...and finally the bins!
git-svn-id: file:///home/svn/framework3/trunk@8789 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 17:12:31 +00:00 |
Stephen Fewer
|
be93341cff
|
Commit the ruby side for the new screenshot/session stuff.
git-svn-id: file:///home/svn/framework3/trunk@8788 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 17:11:27 +00:00 |
Stephen Fewer
|
c09ca4eba5
|
Commit all the code for the new 'screenshot' command in the stdapi extension. Screenshot will now work on NT4 - 7 on both x86 and x64 and on newer versions of Windows we can break out of session isolation (e.g. session 0 isolation for services) to screenshot the active desktop (or logon screen) without the need to migrate meterpreter. The majority of the migration code-injection stuff has been refactored out into base_inject.c so it can be shared with the new ps_inject() functionality to inject dlls. The 'ps' command now reports what session each process belongs to (if this is too verbose we can remove it or add a -v verbose switch to the ps command). The 'execute' command can now take a -s switch in order to create a process in a users session under the users privs (assuming you have the privs to do this).
git-svn-id: file:///home/svn/framework3/trunk@8787 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 17:09:55 +00:00 |
Stephen Fewer
|
c55e9af9ae
|
Commit the updated APC injection stubs. fixes a nasty issue in some edge cases whereby when using APC injection for a process in another session then the current host process the injected APC can cause an access violation in kernel32 during a call the kernel32!CreateThread caused by the APC's host thread not having an initialized Activation Context inside its TEB. We now test for this and create a dummy ActivationContext entry to appease the kernel. This will both improve DLL injection reliability as well as meterpreter migration reliability.
git-svn-id: file:///home/svn/framework3/trunk@8786 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 17:00:19 +00:00 |
James Lee
|
09c1fdd13d
|
store full name (which includes module type) instead of just the refname
git-svn-id: file:///home/svn/framework3/trunk@8785 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 14:33:48 +00:00 |
HD Moore
|
ac0e6515ab
|
Remove the PID from session.info, it doesn't add much value:
git-svn-id: file:///home/svn/framework3/trunk@8784 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 14:21:46 +00:00 |
HD Moore
|
89c62bc838
|
Fixes #1079. Handle a closed SSL socket gracefully
git-svn-id: file:///home/svn/framework3/trunk@8783 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 14:13:53 +00:00 |
HD Moore
|
4c22afed31
|
Fix other occurrences of on_session_close not taking a second parameter. See #1075
git-svn-id: file:///home/svn/framework3/trunk@8782 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 13:54:10 +00:00 |
HD Moore
|
f53a56f147
|
Fixes #1075. Handle the 'reason' parameter to on_session_close
git-svn-id: file:///home/svn/framework3/trunk@8781 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 13:52:56 +00:00 |
HD Moore
|
13410d4daa
|
Rename aurora module to the MSB naming convention
git-svn-id: file:///home/svn/framework3/trunk@8780 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 05:49:45 +00:00 |
HD Moore
|
a23344b5d0
|
Consistency in how IE/Internet Explorer is named
git-svn-id: file:///home/svn/framework3/trunk@8779 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 05:49:14 +00:00 |
HD Moore
|
3d601c0be9
|
Add a new table
git-svn-id: file:///home/svn/framework3/trunk@8778 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 03:02:13 +00:00 |
James Lee
|
dea0ec37f0
|
add events accessor to workspace
git-svn-id: file:///home/svn/framework3/trunk@8777 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 00:57:23 +00:00 |
HD Moore
|
dcfdb95e5f
|
*Backwards Compatibility Broken* - The session XMLRPC object now requires data for read/write to be encoded using Base64, this solves a number of issues with the builtin XMLRPC library with regards to binary data encoding. The response from read() now contains an 'encoding' element with the value 'base64', in order to differentiate from older versions.
git-svn-id: file:///home/svn/framework3/trunk@8776 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 00:55:21 +00:00 |
Mario Ceballos
|
b01f9ff233
|
adds a patch from Thomas Ring.
git-svn-id: file:///home/svn/framework3/trunk@8775 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 22:42:49 +00:00 |
Steve Tornio
|
d3da883aa2
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@8774 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 22:07:04 +00:00 |
HD Moore
|
286bb09a56
|
Add a timeout wrapper, remove debug statement
git-svn-id: file:///home/svn/framework3/trunk@8773 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 22:06:52 +00:00 |
HD Moore
|
bfab49b9e9
|
Change the sessions -l output to show info and type vs description, automatically grab the user/hostname on startup (disabled with set AutoSystemInfo false)
git-svn-id: file:///home/svn/framework3/trunk@8772 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 22:02:27 +00:00 |
HD Moore
|
baf64ed999
|
Remove trailing
git-svn-id: file:///home/svn/framework3/trunk@8771 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 22:01:43 +00:00 |
Joshua Drake
|
3c57fe6e81
|
add exploit module for cve-2010-0806
git-svn-id: file:///home/svn/framework3/trunk@8770 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 22:01:32 +00:00 |
Tod Beardsley
|
efbdaba298
|
Making telnet timeouts much less disasterous, since they can happen pretty commonly.
git-svn-id: file:///home/svn/framework3/trunk@8769 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 21:54:20 +00:00 |
HD Moore
|
91404f9c8f
|
Report critical/seen properly
git-svn-id: file:///home/svn/framework3/trunk@8768 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 18:00:19 +00:00 |
Tod Beardsley
|
542a9a0617
|
Report MySQL application-level protocol errors (such as host not allowed messages).
git-svn-id: file:///home/svn/framework3/trunk@8767 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 17:56:03 +00:00 |
HD Moore
|
bd3d6b55f6
|
Add alert fields
git-svn-id: file:///home/svn/framework3/trunk@8766 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 17:31:47 +00:00 |
HD Moore
|
aaea62bb92
|
Report the correct local/peer names for the session information. Fix a return value check
git-svn-id: file:///home/svn/framework3/trunk@8765 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 07:13:18 +00:00 |
HD Moore
|
6bd2a954cf
|
Lots of small changes, the big one is moving from sysread -> readpartial in the stream base class
git-svn-id: file:///home/svn/framework3/trunk@8764 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 06:43:46 +00:00 |
HD Moore
|
e05921b297
|
Report the workspace object not the name
git-svn-id: file:///home/svn/framework3/trunk@8763 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 06:16:57 +00:00 |
Joshua Drake
|
b419a40c45
|
finished periodic missing CVE reference check (hint vulns w/o CVEs here!)
also some minor cleanups here and there
git-svn-id: file:///home/svn/framework3/trunk@8762 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 05:58:01 +00:00 |
Joshua Drake
|
3b9524697f
|
add verbose option
git-svn-id: file:///home/svn/framework3/trunk@8761 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 05:55:47 +00:00 |
HD Moore
|
33c60067c0
|
Sanity check reported host addresses
git-svn-id: file:///home/svn/framework3/trunk@8760 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-10 05:45:40 +00:00 |
Tod Beardsley
|
4415e3fbbf
|
Fixing up ssh_login reporting.
git-svn-id: file:///home/svn/framework3/trunk@8759 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-09 22:07:04 +00:00 |
Joshua Drake
|
df395f3ff0
|
added Brett Gervasoni to authors
git-svn-id: file:///home/svn/framework3/trunk@8758 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-09 09:12:57 +00:00 |
Joshua Drake
|
52647260b3
|
add offset for alternative file open methods
git-svn-id: file:///home/svn/framework3/trunk@8757 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-09 05:57:22 +00:00 |
HD Moore
|
a239963a7d
|
Handle wrapped TCP services better
git-svn-id: file:///home/svn/framework3/trunk@8756 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-09 05:38:28 +00:00 |
HD Moore
|
dc90b43bcd
|
Emulate a much more common client version
git-svn-id: file:///home/svn/framework3/trunk@8755 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-09 04:37:59 +00:00 |
Joshua Drake
|
fbc157df56
|
add exploit module for cve-2010-0688
git-svn-id: file:///home/svn/framework3/trunk@8754 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-09 01:04:44 +00:00 |
HD Moore
|
b87f0ac796
|
Fix the reaper
git-svn-id: file:///home/svn/framework3/trunk@8753 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 23:32:57 +00:00 |
Joshua Drake
|
5543e4551f
|
add auxiliary dos module for apache mod_isapi bug
git-svn-id: file:///home/svn/framework3/trunk@8752 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 23:21:17 +00:00 |
HD Moore
|
54755d856c
|
Handle cases where the peer has no : (distcc exploit)
git-svn-id: file:///home/svn/framework3/trunk@8751 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 23:03:49 +00:00 |
HD Moore
|
69f50eea7c
|
Kill off any session with eof on the socket
git-svn-id: file:///home/svn/framework3/trunk@8750 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 22:58:43 +00:00 |
HD Moore
|
b1973c6630
|
Adds detection and exploitation coverage for the Energizer Duo trojan
git-svn-id: file:///home/svn/framework3/trunk@8749 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 19:06:50 +00:00 |
Stephen Fewer
|
cf48de7846
|
Update the README for the modified VNC code.
git-svn-id: file:///home/svn/framework3/trunk@8748 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 15:16:20 +00:00 |
Stephen Fewer
|
31b7b637a4
|
The new VNC DLL bins.
git-svn-id: file:///home/svn/framework3/trunk@8747 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 14:53:37 +00:00 |
Stephen Fewer
|
46cc8e538f
|
The new x64 VNC inject payload stage.
git-svn-id: file:///home/svn/framework3/trunk@8746 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 14:51:43 +00:00 |
Stephen Fewer
|
08d1850bcc
|
Commit the new VNC x86/x64 DLL source code...
git-svn-id: file:///home/svn/framework3/trunk@8745 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 14:49:45 +00:00 |
Stephen Fewer
|
d0f2b589b6
|
Delete the old VNC source code.
git-svn-id: file:///home/svn/framework3/trunk@8744 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 14:39:20 +00:00 |
HD Moore
|
1c1fe9c20f
|
Add a method for syncing the database (waiting on all pending writes)
git-svn-id: file:///home/svn/framework3/trunk@8743 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 14:17:34 +00:00 |
HD Moore
|
a35817f0cc
|
Store more information
git-svn-id: file:///home/svn/framework3/trunk@8742 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-08 13:52:39 +00:00 |