7dbb56b38b
No longer default a target for XP systems; some obscure builds of XP Embedded SP1 have a different offset and not good way to differentiate
...
git-svn-id: file:///home/svn/framework3/trunk@13214 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 01:40:26 +00:00
3c261c346f
add support for java/meterpreter/reverse_http. assuming i didn't miss any files, fixes #4946 , thanks mihi!
...
git-svn-id: file:///home/svn/framework3/trunk@13213 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 23:15:06 +00:00
3ca9b51984
oops, a little mistake in the description
...
git-svn-id: file:///home/svn/framework3/trunk@13212 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 20:46:08 +00:00
821e9dd68b
Updated metadata, merged code with #4923 . Thx Joff.
...
git-svn-id: file:///home/svn/framework3/trunk@13211 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 20:39:27 +00:00
9b72b12050
filtering on command line strings should be a bit heavier
...
git-svn-id: file:///home/svn/framework3/trunk@13210 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 20:26:26 +00:00
8f82a29638
allow a '!' in the filter
...
git-svn-id: file:///home/svn/framework3/trunk@13209 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 20:17:28 +00:00
764bb36f44
Wait a little longer for a session (5 seconds)
...
git-svn-id: file:///home/svn/framework3/trunk@13208 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 16:05:51 +00:00
f683a2d26f
Note that IE doesnt support inline base64 (thanks resetter)
...
git-svn-id: file:///home/svn/framework3/trunk@13207 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 15:38:47 +00:00
8887fe86b8
Either the offset or the env page moves around for this exploit on some non-english systems, do not default the target for 2003 SP0
...
git-svn-id: file:///home/svn/framework3/trunk@13206 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 14:59:55 +00:00
2ea46552ad
Apply a fix that was already in reverse_https
...
git-svn-id: file:///home/svn/framework3/trunk@13205 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 14:17:19 +00:00
d13654740a
Update some jboss modules' metadata associated with CVE-2010-0738
...
git-svn-id: file:///home/svn/framework3/trunk@13204 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 05:18:25 +00:00
efd7a94bd0
comment out class puts (assuming it was for debugging only)
...
git-svn-id: file:///home/svn/framework3/trunk@13203 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 03:26:12 +00:00
16840ebfa5
Add profiles table
...
git-svn-id: file:///home/svn/framework3/trunk@13202 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 21:39:21 +00:00
d23a5f6092
"The GetFileSecurityA and GetFileSecurityW functions have a "RequestedInformation" that is defined as a PBLOB and should be a DWORD." - Keith Faber. Thank you Keith! see #4364
...
git-svn-id: file:///home/svn/framework3/trunk@13201 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 17:48:09 +00:00
cccbdf9fab
This patch allows meterpreter to work with file paths and user names that are not of the US-ASCII character set.
...
git-svn-id: file:///home/svn/framework3/trunk@13200 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 17:32:52 +00:00
1e1d7c534d
"This is the first update to the Railgun Advapi32.dll Definitions. It adds some of the Windows CryptoAPI function calls." - David Maloney. see #4746
...
git-svn-id: file:///home/svn/framework3/trunk@13199 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 17:17:48 +00:00
572a5a5b8b
Added method "functions" to DLLWrapper that grabs the DLL's "functions" so that people can continue to test for function existence via .functions['blah'], evne though I hate this, I want to be backwards compatible. This will be deprecated eventually
...
git-svn-id: file:///home/svn/framework3/trunk@13198 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 15:15:26 +00:00
2eeffc39fc
Add Iconics GENESIS32 GenBroker exploit by lincoln and corelanc0d3r
...
git-svn-id: file:///home/svn/framework3/trunk@13197 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 15:01:46 +00:00
f3b404b971
Misspelled variable
...
git-svn-id: file:///home/svn/framework3/trunk@13196 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 14:30:06 +00:00
1bb9470e59
Adds the ability to set the cookies, authentication, and arbitrary headers
...
git-svn-id: file:///home/svn/framework3/trunk@13195 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-16 13:29:28 +00:00
681563adc9
Fix that extra tab in the description
...
git-svn-id: file:///home/svn/framework3/trunk@13194 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-16 05:21:20 +00:00
2e93ba06ba
Add HP NNM ToolBar.exe exploit aganist the OvOSLocale cookie parameter
...
git-svn-id: file:///home/svn/framework3/trunk@13193 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-16 05:14:33 +00:00
86b40e894b
Make room for another exploit against ToolBar.exe
...
git-svn-id: file:///home/svn/framework3/trunk@13192 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-16 04:45:21 +00:00
642cddf620
fix startup-time plugin loading when there is a space in the path.
...
git-svn-id: file:///home/svn/framework3/trunk@13189 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 23:46:37 +00:00
bd07523c35
send the fuzz case instead of a constant value. fixes #4939 , thanks Silent Dream for the patch
...
git-svn-id: file:///home/svn/framework3/trunk@13188 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 23:09:33 +00:00
0d585ffb4c
add the source files for RMILoader and RMIPayload. fixes #4738 , which has nothing to do with #4378 that i dyslexified in r13185
...
git-svn-id: file:///home/svn/framework3/trunk@13187 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 22:28:40 +00:00
857cfc88b0
keywords
...
git-svn-id: file:///home/svn/framework3/trunk@13186 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 20:44:08 +00:00
1d25a6d7d1
add an exploit for java's rmid and rmiregistry code-execution-by-design and supporting source. fixes #4378 , thanks mihi!
...
git-svn-id: file:///home/svn/framework3/trunk@13185 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 20:42:31 +00:00
1162aafa1e
p function causes problems with rpc.
...
git-svn-id: file:///home/svn/framework3/trunk@13184 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 18:45:05 +00:00
c412a836ed
add VERBOSE option to all modules and vprint_* methods to use it
...
git-svn-id: file:///home/svn/framework3/trunk@13183 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 15:33:35 +00:00
483abeab72
Change this to query the class name of the input
...
git-svn-id: file:///home/svn/framework3/trunk@13182 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 04:22:32 +00:00
59015b2cbf
Closes Redmine issue 3073 (Railgun DLL cache/definition loader needs a rewrite). Major overhaul of how railgun handles DLLs and requests to them. def_*.rb files are now formed differently, this may break your code if you made changes to railgun/def/def_* or railgun.rb, see http://blog.minorcrash.com/2011/07/new-way-to-add-dlls-to-railgun.html
...
git-svn-id: file:///home/svn/framework3/trunk@13181 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 00:18:01 +00:00
b1afbfeb96
Fix rpc error with console detect code.
...
Un-breaks rpc/msfgui/armitage.
Reference r13160 r13161 r13179
git-svn-id: file:///home/svn/framework3/trunk@13180 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 22:45:20 +00:00
bc77523a01
revert r13161, hopefully unbreaking msfgui and armitage
...
git-svn-id: file:///home/svn/framework3/trunk@13179 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 22:01:28 +00:00
c64efb676b
don't raise RequestErrors that kill a whole module when we can't open a file
...
git-svn-id: file:///home/svn/framework3/trunk@13178 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 21:59:35 +00:00
f8a307f873
use append mode for stderr when creating processes with proc_open in windows, see http://us2.php.net/manual/en/function.proc-open.php#97012 . also, if windows doesn't give us a valid path to cmd.exe from the COMSPEC env var, just use cmd.exe and hope it's in the path
...
git-svn-id: file:///home/svn/framework3/trunk@13176 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 20:34:05 +00:00
6c8bde17b0
works for meterpreter, too (tested with java)
...
git-svn-id: file:///home/svn/framework3/trunk@13175 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 20:29:19 +00:00
39c20b2935
cosmetic
...
git-svn-id: file:///home/svn/framework3/trunk@13174 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 20:27:25 +00:00
a1299f90c8
don't break if /proc/scsi/scsi doesn't exist or is unreadable
...
git-svn-id: file:///home/svn/framework3/trunk@13173 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 19:43:09 +00:00
c32ac59580
explicitly return the resultant session
...
git-svn-id: file:///home/svn/framework3/trunk@13172 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 19:42:03 +00:00
ccf891c788
remove superfluous junk in print_* calls
...
git-svn-id: file:///home/svn/framework3/trunk@13171 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 19:24:07 +00:00
9b2e03e18b
Handle newlines (or lack of them) cleaner
...
git-svn-id: file:///home/svn/framework3/trunk@13170 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 15:11:17 +00:00
8f79fd1e5f
Add "crack passwords" option.
...
git-svn-id: file:///home/svn/framework3/trunk@13169 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 03:06:07 +00:00
fdf6660a55
Properly filter error messages which have changed,
...
escape options passed through command line,
run database reload in separate thread,
and make connecting to the database even more automagical.
git-svn-id: file:///home/svn/framework3/trunk@13168 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 02:39:16 +00:00
338a13baac
Fix minor error.
...
git-svn-id: file:///home/svn/framework3/trunk@13167 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 02:36:42 +00:00
7122ccbbd1
wscript necessary in certain contexts.
...
Also can avoid warnings in certain cases.
git-svn-id: file:///home/svn/framework3/trunk@13166 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 02:35:33 +00:00
d1cfa7560f
Update DHCP server for correctness, reliability, simplicity.
...
Actually keep track of which clients get which IP, only give PXE options to PXE clients, and provide more control over serving to PXE and/or normal clients.
git-svn-id: file:///home/svn/framework3/trunk@13165 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 02:34:25 +00:00
0318379ca8
These are not necessary options; the DHCP server has reasonably intelligent defaults. Mark them as such.
...
git-svn-id: file:///home/svn/framework3/trunk@13164 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 02:32:28 +00:00
bcfbcfec30
Because Program Files (x86) has spaces in it.
...
git-svn-id: file:///home/svn/framework3/trunk@13163 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-13 21:54:22 +00:00
b9c5835b5e
Touching up the ssh key login module to be smarter about duplicate user names, not be so chatty in its messaging to the console, deal with whitespace, and avoid storing duplicate keys when we don't need to.
...
git-svn-id: file:///home/svn/framework3/trunk@13162 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-13 20:51:18 +00:00
HD Moore
James Lee
Wei Chen
Jonathan Cran
Joshua Drake
Chao Mu
Carlos Perez
Matt Weeks
Tod Beardsley