Commit Graph

1409 Commits (7f2fd32a3c2ddd118503b15c814ecba2062ab199)

Author SHA1 Message Date
kris 8d184d81bf Add IPID sequence classifier scanner aux module. It uses the same techniques
Nmap uses for classifying IPIDs in its Idle Scan (-sI) and OS Detection (-O).


git-svn-id: file:///home/svn/framework3/trunk@6456 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-03 00:59:25 +00:00
Mario Ceballos 3c54e15590 added exploit module sapgui_saveviewtosessionfile.rb
git-svn-id: file:///home/svn/framework3/trunk@6455 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-02 20:43:06 +00:00
et 0fb71d56bd sip user enumerator module using the REGISTER and OPTIONS methods
git-svn-id: file:///home/svn/framework3/trunk@6453 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-02 04:31:48 +00:00
natron edbaada754 Reliable write address location; bringing in line with windows/browser version
git-svn-id: file:///home/svn/framework3/trunk@6452 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-31 16:46:50 +00:00
natron 8d7c6d6367 Browser version of jbig2decode
git-svn-id: file:///home/svn/framework3/trunk@6451 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-31 14:58:37 +00:00
et cf424edd73 fixed error case for ssl module
git-svn-id: file:///home/svn/framework3/trunk@6449 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-31 00:43:41 +00:00
HD Moore ae21a15dc4 Make these a little future-compatible with ruby 1.9
git-svn-id: file:///home/svn/framework3/trunk@6443 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-30 02:55:48 +00:00
kris 9482b4080e set a few more modules' Versions to Revision, only did aux by accident last time
git-svn-id: file:///home/svn/framework3/trunk@6439 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-30 01:09:09 +00:00
kris 7576f006b3 set 3 remaining modules' Versions to Revision (instead of 1)
git-svn-id: file:///home/svn/framework3/trunk@6438 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-30 01:01:30 +00:00
cg d674495499 regex fix, thanks to Taras Ivashchenko
git-svn-id: file:///home/svn/framework3/trunk@6437 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 20:18:14 +00:00
Mario Ceballos ff40e76492 added auxiliary module authbypass (foxit reader)
git-svn-id: file:///home/svn/framework3/trunk@6436 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 19:07:28 +00:00
HD Moore 93bcddf469 Force the socket to close between each pass -- thanks quine!
git-svn-id: file:///home/svn/framework3/trunk@6435 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 17:58:15 +00:00
kris 0361811966 increase idx so recvfrom isn't called every iteration
git-svn-id: file:///home/svn/framework3/trunk@6432 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 13:44:38 +00:00
HD Moore 2b6c0f97f8 Adds a quick scanner for SIP devices and servers
git-svn-id: file:///home/svn/framework3/trunk@6427 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 05:51:08 +00:00
HD Moore 715c001aff Replaced by auxiliary/scanner/snmp/community
git-svn-id: file:///home/svn/framework3/trunk@6426 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:42:04 +00:00
HD Moore 67cfbc2e4b Report other data to the DB as well
git-svn-id: file:///home/svn/framework3/trunk@6424 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:39:51 +00:00
HD Moore 12e3114873 Remove the ::ffff prefix from returned IPv4 addresses
git-svn-id: file:///home/svn/framework3/trunk@6423 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:24:59 +00:00
HD Moore 2552633f9b Fix up batch mode aux scanners that dont use the tcp mixin. Minor changes to snmp_scan
git-svn-id: file:///home/svn/framework3/trunk@6422 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:11:56 +00:00
HD Moore e1a6d31c58 Add a SNMP brute force scanner
git-svn-id: file:///home/svn/framework3/trunk@6421 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:09:04 +00:00
HD Moore 3d6a0bab52 Fix up the version/options modules, make wmap_base_url display the vhost and use the host/port separator correctly
git-svn-id: file:///home/svn/framework3/trunk@6414 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 17:57:12 +00:00
HD Moore 89ad4df087 Fix WMAP modules to use the new scanner api; add wmap_base_url as a shorthand (extend in the future to do VHOST as well), general cosmetic cleanups
git-svn-id: file:///home/svn/framework3/trunk@6413 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 17:45:14 +00:00
Mario Ceballos 6203b02ffc fix tab.
git-svn-id: file:///home/svn/framework3/trunk@6412 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 16:27:01 +00:00
Mario Ceballos 64b12fdb61 added exploit module adobe_collectemailfinfo.rb
git-svn-id: file:///home/svn/framework3/trunk@6411 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 16:14:32 +00:00
HD Moore 9d2382f5f5 Adds the PDF geticon modules from jduck
git-svn-id: file:///home/svn/framework3/trunk@6409 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 07:40:29 +00:00
HD Moore 4d00350085 Rename to be consistent
git-svn-id: file:///home/svn/framework3/trunk@6408 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 06:05:38 +00:00
HD Moore eccfcdfced Sets svn keywords on modules missing it, tweaks the emailer module
git-svn-id: file:///home/svn/framework3/trunk@6407 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 06:03:35 +00:00
HD Moore 86bc12940a Fix tabstops for weblogic module
git-svn-id: file:///home/svn/framework3/trunk@6405 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 06:00:23 +00:00
HD Moore a5125c6c87 Update the module description
git-svn-id: file:///home/svn/framework3/trunk@6404 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 05:52:40 +00:00
HD Moore f755cc00c0 Adds support for Yahoo! IMAP cookies (thanks Mario De Tore!) fixes a cpu eating loop in the HTTP service.
git-svn-id: file:///home/svn/framework3/trunk@6402 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 05:51:18 +00:00
HD Moore 26b9903b0d Changes Auxiliary::Scanner to use a new module instance for each thread, updates associated mixins and modules to support this change.
git-svn-id: file:///home/svn/framework3/trunk@6401 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 05:49:33 +00:00
natron 3b704ecf46 Add support for Reader 8.1.2, increase heapspray reliability
git-svn-id: file:///home/svn/framework3/trunk@6400 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 02:40:27 +00:00
pusscat 41960b0300 Add jsessionid exploit
git-svn-id: file:///home/svn/framework3/trunk@6399 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-27 19:03:39 +00:00
natron bee2e44254 Remove debug messages, fix nops.
git-svn-id: file:///home/svn/framework3/trunk@6398 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-27 02:34:40 +00:00
natron 989a0bf88f Backed off the heapspray, will hopefully work on low and high RAM systems now.
git-svn-id: file:///home/svn/framework3/trunk@6397 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-27 02:32:13 +00:00
kris 3b6f94ebb3 add ACK port scanner aux module (maps out firewall rulesets)
git-svn-id: file:///home/svn/framework3/trunk@6396 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-27 00:49:55 +00:00
natron 8784ee930f Adobe JBIG2Decode Exploit (CVE-2009-0658)
git-svn-id: file:///home/svn/framework3/trunk@6395 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-27 00:08:19 +00:00
kris 95d651c62a Add SYN port scanner aux module
git-svn-id: file:///home/svn/framework3/trunk@6394 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-26 14:55:53 +00:00
et 07b3f614ce New plain HTTP XPath 1.0 blind injection module
git-svn-id: file:///home/svn/framework3/trunk@6355 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-20 03:53:02 +00:00
HD Moore 13706d1bde Tons of new Mac OS X code from Dino Dai Zovi and Charlie Miller, more to follow
git-svn-id: file:///home/svn/framework3/trunk@6353 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-18 23:28:24 +00:00
Mario Ceballos a036178737 added exploit module orbit_connecting.rb
git-svn-id: file:///home/svn/framework3/trunk@6348 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-17 01:24:16 +00:00
James Lee 6bd083c441 patch from Jason Wood, adds check for extended capabilities command
git-svn-id: file:///home/svn/framework3/trunk@6346 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-16 08:48:08 +00:00
kris 804ff61df6 big svn:keywords run
git-svn-id: file:///home/svn/framework3/trunk@6345 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-15 18:12:33 +00:00
HD Moore 1d42efd73d New module from spinbad
git-svn-id: file:///home/svn/framework3/trunk@6341 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-15 02:32:34 +00:00
HD Moore 799d70b59a Let the target know their email did not go very far
git-svn-id: file:///home/svn/framework3/trunk@6339 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-14 03:15:28 +00:00
kris 27f4e90aff add a SYN flooder aux module
git-svn-id: file:///home/svn/framework3/trunk@6337 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-14 00:14:36 +00:00
Mario Ceballos f7dafe0156 added exploit module belkin_bulldog.rb.
git-svn-id: file:///home/svn/framework3/trunk@6334 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-11 22:33:51 +00:00
Patrick Webster 7209271870 Added exploit module apache_mod_rewrite_ldap.
git-svn-id: file:///home/svn/framework3/trunk@6327 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-10 06:42:11 +00:00
HD Moore 760d837423 Set svn:keywords
git-svn-id: file:///home/svn/framework3/trunk@6320 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-08 16:00:30 +00:00
HD Moore d53da510a3 Adds coverage for http://marc.info/?l=bugtraq&m=122150111708026&w=2
git-svn-id: file:///home/svn/framework3/trunk@6319 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-08 08:09:40 +00:00
Patrick Webster 46351557bc Added dogfood_spell_exec exploit module from LSO.
git-svn-id: file:///home/svn/framework3/trunk@6282 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-03 03:32:36 +00:00
Patrick Webster 2df5dc3204 Added exploit module ebook_flipviewer_fviewerloading from LSO.
git-svn-id: file:///home/svn/framework3/trunk@6281 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-02 23:14:54 +00:00
Patrick Webster a71b3e8c22 Added exploit module efs_easychatserver_username from LSO.
git-svn-id: file:///home/svn/framework3/trunk@6280 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-02 06:57:00 +00:00
natron b6731747c4 added ie_unsafe_scripting exploit module
git-svn-id: file:///home/svn/framework3/trunk@6260 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-27 22:35:50 +00:00
Patrick Webster d5c625b803 Added exploit module dlink_long_filename from LSO.
git-svn-id: file:///home/svn/framework3/trunk@6256 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-26 08:19:01 +00:00
Patrick Webster c902c035aa Typo in vendor name. Steamcast.
git-svn-id: file:///home/svn/framework3/trunk@6255 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-25 11:50:24 +00:00
Patrick Webster 415b4c2593 Added exploit module streamcast_useragent.rb from LSO.
git-svn-id: file:///home/svn/framework3/trunk@6254 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-25 11:35:36 +00:00
Patrick Webster 92c45abf2d Added contentkeeperweb_mimencode exploit module.
git-svn-id: file:///home/svn/framework3/trunk@6250 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-25 03:41:25 +00:00
Mario Ceballos 7118ef0a2c added aux module osb_execqr.rb and exploit module osb_ndmp_auth.rb.
git-svn-id: file:///home/svn/framework3/trunk@6248 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-23 16:26:00 +00:00
cg 8fe4bf88b9 MS09-002 coverage by dean
git-svn-id: file:///home/svn/framework3/trunk@6238 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-20 17:46:52 +00:00
kris 4d97256c70 svn keywords
git-svn-id: file:///home/svn/framework3/trunk@6237 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-19 16:38:39 +00:00
Mario Ceballos 0effa1123f added auxiliary sqli modules lt_mergeworkspace.rb,
lt_compressworkspacetree.rb and lt_removeworkspace.rb from Sh2kerr.


git-svn-id: file:///home/svn/framework3/trunk@6234 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-19 00:19:41 +00:00
James Lee fd7399210d updated info for payload/php/shell_findsock
git-svn-id: file:///home/svn/framework3/trunk@6231 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-17 06:04:02 +00:00
Mario Ceballos 705a34dfda added oracle sqli module droptable_trigger.rb from Sh2kerr.
git-svn-id: file:///home/svn/framework3/trunk@6209 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-06 19:16:50 +00:00
Mario Ceballos 092db8229c added exploit module fdm_auth_header.rb
git-svn-id: file:///home/svn/framework3/trunk@6205 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-02 18:27:36 +00:00
HD Moore f927320eda Wrap the telephony require properly
git-svn-id: file:///home/svn/framework3/trunk@6201 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-30 04:28:40 +00:00
HD Moore bd8293360a Minor tweaks to the wardialer module
git-svn-id: file:///home/svn/framework3/trunk@6200 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-30 01:45:15 +00:00
druid a46fa68bac Replaced manual path string joins with File.join
git-svn-id: file:///home/svn/framework3/trunk@6199 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 23:14:31 +00:00
druid 6756962b26 Moved path setup back out of initialize, that caused problems
git-svn-id: file:///home/svn/framework3/trunk@6198 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 22:48:51 +00:00
druid aa94ff7be6 Fixed typo in logs path, moved path stuff to initialize
git-svn-id: file:///home/svn/framework3/trunk@6197 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 22:46:20 +00:00
druid 0c84e9c41e Removed chdir, now access dat and log file by full path, which now live in config_root+/log/wardial
git-svn-id: file:///home/svn/framework3/trunk@6196 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 22:41:29 +00:00
druid 089c2122cd Moved some options to advanced_options
git-svn-id: file:///home/svn/framework3/trunk@6195 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 20:16:18 +00:00
druid c4d3d2e379 Renamed all hotkey responses to HK_* strings
git-svn-id: file:///home/svn/framework3/trunk@6194 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 19:58:34 +00:00
druid 7965a7de05 Wardialer
git-svn-id: file:///home/svn/framework3/trunk@6193 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-28 06:13:47 +00:00
Mario Ceballos 1e24242f3d ok.. i quit for the week.
git-svn-id: file:///home/svn/framework3/trunk@6192 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-27 14:29:15 +00:00
Mario Ceballos 507ddd5f1b ok.. coverage for both.
git-svn-id: file:///home/svn/framework3/trunk@6191 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-27 13:45:30 +00:00
Mario Ceballos 28dd301e36 fixed.
git-svn-id: file:///home/svn/framework3/trunk@6190 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-27 13:44:10 +00:00
Mario Ceballos d53a262bea confused, sorry!
git-svn-id: file:///home/svn/framework3/trunk@6189 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-27 13:26:15 +00:00
Mario Ceballos c579608926 be done with it!
git-svn-id: file:///home/svn/framework3/trunk@6188 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-27 02:30:39 +00:00
Mario Ceballos 652ef67763 doh! drop the function.
git-svn-id: file:///home/svn/framework3/trunk@6187 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-27 02:26:53 +00:00
Mario Ceballos 6ed11bd2f4 pretty the print =)
git-svn-id: file:///home/svn/framework3/trunk@6186 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-27 00:27:55 +00:00
Mario Ceballos 6dbaf91978 added auxiliary module dbms_cdc_publish.rb (fileformat). remotes comming
soon.


git-svn-id: file:///home/svn/framework3/trunk@6185 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-27 00:09:01 +00:00
Mario Ceballos b321790c04 added exploit module license_gcr.rb.
git-svn-id: file:///home/svn/framework3/trunk@6183 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-25 02:22:18 +00:00
James Lee 3cfee47b00 remove dll option from reflectivevncinject
git-svn-id: file:///home/svn/framework3/trunk@6180 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-24 03:44:59 +00:00
James Lee 55daaf64bd remove dll option from reflectivemeterpreter, too
git-svn-id: file:///home/svn/framework3/trunk@6179 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-24 03:29:07 +00:00
James Lee 3a8935b2c6 remove the ability to set the dll path for meterp and vncinject
git-svn-id: file:///home/svn/framework3/trunk@6178 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-23 23:06:10 +00:00
kris 78b3a12f89 adding an ftp bounce port scanner aux module (can still be useful today)
git-svn-id: file:///home/svn/framework3/trunk@6174 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-23 02:05:28 +00:00
HD Moore 1f523d78c9 Configure the architecture list to be ALL, not just a small set of archs
git-svn-id: file:///home/svn/framework3/trunk@6171 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-22 05:35:19 +00:00
Mario Ceballos ff8323e6d2 added modules from Matteo Cantoni.
git-svn-id: file:///home/svn/framework3/trunk@6170 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-21 12:51:30 +00:00
Mario Ceballos 9637e98cc4 added exploit module hp_nnm_toolbar.rb
git-svn-id: file:///home/svn/framework3/trunk@6167 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-19 23:07:28 +00:00
et 14f7a91efb Email module for social engineering based on Jabra script
git-svn-id: file:///home/svn/framework3/trunk@6163 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-19 01:18:00 +00:00
Mario Ceballos 7ef0ddeec5 added exploit module symantec_appstream_unsafe.rb
git-svn-id: file:///home/svn/framework3/trunk@6162 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-18 02:19:26 +00:00
Patrick Webster 33ba28346d Added exploit module awstats_migrate_exec.
git-svn-id: file:///home/svn/framework3/trunk@6155 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-15 07:09:56 +00:00
James Lee 5d8ca84113 use the user-supplied login info
git-svn-id: file:///home/svn/framework3/trunk@6152 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-14 17:51:46 +00:00
HD Moore cb327d40fc Fix up the dialup code
git-svn-id: file:///home/svn/framework3/trunk@6150 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-14 05:46:10 +00:00
Mario Ceballos 430d7cb424 fixed BID number.
git-svn-id: file:///home/svn/framework3/trunk@6145 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 14:41:14 +00:00
Mario Ceballos bc1f2da254 added exploit module winzip_fileview.rb from dean.
git-svn-id: file:///home/svn/framework3/trunk@6144 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 14:04:53 +00:00
HD Moore 70feb8152c Switch to the new TTY session type
git-svn-id: file:///home/svn/framework3/trunk@6141 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 07:02:22 +00:00
HD Moore 4fdca1f6d7 Update info to reflect TTY class
git-svn-id: file:///home/svn/framework3/trunk@6138 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 06:47:53 +00:00
HD Moore 5b75b5d5a6 Move interact_tty to the TTY arch
git-svn-id: file:///home/svn/framework3/trunk@6137 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 06:47:04 +00:00
HD Moore 331eaaa602 Add basic framework for the new TTY architecture
git-svn-id: file:///home/svn/framework3/trunk@6136 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 06:46:32 +00:00
cg ae09877067 nfs mount scanner
git-svn-id: file:///home/svn/framework3/trunk@6135 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 02:21:35 +00:00
James Lee e7aecca838 more awesomeness from tebo
git-svn-id: file:///home/svn/framework3/trunk@6133 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-12 05:18:05 +00:00
kris 12fc714f48 add NUM, SSID and BSSID fakeap options
git-svn-id: file:///home/svn/framework3/trunk@6128 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 17:14:34 +00:00
Patrick Webster 2325f5ce49 Added aux module filezilla_admin_user.rb
git-svn-id: file:///home/svn/framework3/trunk@6127 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 14:38:10 +00:00
druid 0d1ca42ed6 Adds support for exploitation over dialup via the new Telephony library.
git-svn-id: file:///home/svn/framework3/trunk@6120 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 06:09:02 +00:00
James Lee 288075f7a0 add report_auth_info to some modules that authenticate. thanks, tebo
git-svn-id: file:///home/svn/framework3/trunk@6118 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:52:07 +00:00
James Lee 348ffe7894 add snmp_scan module from tebo
git-svn-id: file:///home/svn/framework3/trunk@6116 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:26:44 +00:00
James Lee 7874476b58 add smb_login scanner module from tebo
git-svn-id: file:///home/svn/framework3/trunk@6115 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:25:54 +00:00
Mario Ceballos 3ee6eaede8 added exploit module nis2004_antispam.rb that makes use of egypts newly added heap spray stuff.
git-svn-id: file:///home/svn/framework3/trunk@6109 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-10 14:00:49 +00:00
cg 39ac677f6e removed scanner functionality & code fix
git-svn-id: file:///home/svn/framework3/trunk@6106 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-10 03:26:50 +00:00
cg f2e6a86cb2 oracle sid enumeration auxiliary module
git-svn-id: file:///home/svn/framework3/trunk@6099 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 13:02:30 +00:00
Patrick Webster cf04190a8a Moved tftp to Windows DoS targets. Hmm svn client bug?
git-svn-id: file:///home/svn/framework3/trunk@6096 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 05:39:57 +00:00
Patrick Webster 0b9e8cd2b9 Added aux filezilla_server_port.rb. Moved dos aux to OS-based folder.
git-svn-id: file:///home/svn/framework3/trunk@6095 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 05:33:26 +00:00
Patrick Webster 2de1dc9947 No need for string cast. thanks kris/raif.
git-svn-id: file:///home/svn/framework3/trunk@6094 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 03:22:04 +00:00
Mario Ceballos ddafdad942 added support for 2k3.
git-svn-id: file:///home/svn/framework3/trunk@6092 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 00:39:08 +00:00
cg 9b210702a3 add scanner functionality to oracle_version.rb and removed some comments from options.rb
git-svn-id: file:///home/svn/framework3/trunk@6088 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-08 01:57:28 +00:00
cg 4ac15b3a83 oracle version auxiliary module using tns mixin
git-svn-id: file:///home/svn/framework3/trunk@6087 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 23:34:03 +00:00
Patrick Webster a41e16ded3 Added ursoft_w32dasm.rb file format module.
git-svn-id: file:///home/svn/framework3/trunk@6083 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 11:18:44 +00:00
Mario Ceballos ee86b19834 added tns mixin to support oracle8i listener overflow and other tns
related stuff.


git-svn-id: file:///home/svn/framework3/trunk@6082 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 03:07:01 +00:00
Patrick Webster 204ebd411f Updated with changes from raif.
git-svn-id: file:///home/svn/framework3/trunk@6080 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 00:15:55 +00:00
Mario Ceballos fa950d64ef updated with the authors email address.
git-svn-id: file:///home/svn/framework3/trunk@6076 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-05 13:09:18 +00:00
Patrick Webster a2da72c0eb Added tmlisten_traversal aux module from Anshul Pandey.
git-svn-id: file:///home/svn/framework3/trunk@6075 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-05 05:18:42 +00:00
Mario Ceballos e132179b2d added exploit modules djvu_imageurl.rb, msworks_wkspictureinterface.rb and
sascam_get.rb from dean.


git-svn-id: file:///home/svn/framework3/trunk@6074 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-05 00:55:29 +00:00
Mario Ceballos 33940517c5 added exploit modules ca_brightstor_addcolumn.rb and verypdf_pdfview.rb from dean.
git-svn-id: file:///home/svn/framework3/trunk@6073 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-04 21:51:04 +00:00
et e7dda0000b Wmap SSL module renamed and updated to check for MD5 signature algorithm.
git-svn-id: file:///home/svn/framework3/trunk@6062 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-03 05:20:20 +00:00
James Lee 114067e7bb standardize names
git-svn-id: file:///home/svn/framework3/trunk@6059 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-02 21:21:10 +00:00
James Lee 200cedeb25 clean up name and description
git-svn-id: file:///home/svn/framework3/trunk@6058 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-02 21:18:51 +00:00
kris 232145819b Adding Linux/x86 inline IPv6 bind shell payload
git-svn-id: file:///home/svn/framework3/trunk@6036 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-21 07:10:27 +00:00
kris 704a92d43a add name to author list and switch some modules to use it
git-svn-id: file:///home/svn/framework3/trunk@6034 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 21:53:17 +00:00
kris 0e8ce1cc46 Move my portspec parsing code from scanner/portscan/tcp to Rex as
Socket.portspec_crack and use it to also replace the incomplete
parsing code used for db_autopwn


git-svn-id: file:///home/svn/framework3/trunk@6033 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 20:34:05 +00:00
Mario Ceballos f1093ee6a9 added exploit module realtek_playlist.rb.
git-svn-id: file:///home/svn/framework3/trunk@6029 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 01:49:40 +00:00
kris 6d1a0993e2 Adding Avahi < 0.6.24 DoS module (source port 0)
git-svn-id: file:///home/svn/framework3/trunk@6026 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 21:13:58 +00:00
kris 248f1e9fc3 Remove "#{xxx.to_s}" redundancies ('s/\(#{[^}]*\)\.to_s}/\1}/g')
git-svn-id: file:///home/svn/framework3/trunk@6022 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 07:11:08 +00:00
HD Moore 45c08a9011 Fallback to heap spray if the .NET DLL does not load
git-svn-id: file:///home/svn/framework3/trunk@6015 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-17 04:19:54 +00:00
Mario Ceballos aa53df6535 add exploit module adobe_utilprintf.rb, browser based.
git-svn-id: file:///home/svn/framework3/trunk@6014 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-15 15:44:02 +00:00
HD Moore 5822ab75a7 Adds an exploit module (universal) for the new internet explorer xml bug. This module shows off the .NET memory techniques discovered by Alexander Sotirov and Mark Dowd. This code should bypass DEP, ASLR, and NX :-)
git-svn-id: file:///home/svn/framework3/trunk@6012 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-12 01:45:00 +00:00
HD Moore 42da7926ba See #263. Testing post-commit hook
git-svn-id: file:///home/svn/framework3/trunk@6010 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:56:52 +00:00
HD Moore c838c7ef2f See #263. Testing post-commit hook
git-svn-id: file:///home/svn/framework3/trunk@6009 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:55:12 +00:00
HD Moore d64cf0f22f See #263. Testing post-commit hook
git-svn-id: file:///home/svn/framework3/trunk@6008 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:53:52 +00:00
HD Moore cb8230f817 Fixes #263. Correct the max read() size for DCERPC over SMB
git-svn-id: file:///home/svn/framework3/trunk@6007 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:50:30 +00:00
Mario Ceballos 1485e0564e updated with some awesome stuff from Didier Stevens.
git-svn-id: file:///home/svn/framework3/trunk@6006 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-08 13:16:54 +00:00
et daf317c25b Added wmap generic email extractor as an example of direct access to the database.
git-svn-id: file:///home/svn/framework3/trunk@6003 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-08 00:51:16 +00:00
Mario Ceballos 6df3ed8b25 git-svn-id: file:///home/svn/framework3/trunk@6001 4d416f70-5f16-0410-b530-b9f4589650da 2008-12-07 15:02:20 +00:00
Mario Ceballos 29c94ece40 removed hardcoded length for xrefPosition. thanks Didier Stevens.
git-svn-id: file:///home/svn/framework3/trunk@5999 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-05 13:13:57 +00:00
Mario Ceballos 103e507635 newer version breaks..
git-svn-id: file:///home/svn/framework3/trunk@5998 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-04 21:57:54 +00:00
Mario Ceballos d47511baf2 updated target.
git-svn-id: file:///home/svn/framework3/trunk@5996 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-03 20:20:39 +00:00
Mario Ceballos 381f6da682 added exploit module adobe_utilprintf.rb
git-svn-id: file:///home/svn/framework3/trunk@5995 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-03 16:19:25 +00:00
Mario Ceballos e1e1f5d6a4 added fileformat mixin, fileformat exploit videolan_tivo.rb, and network based exploit videolan_tivo.rb
git-svn-id: file:///home/svn/framework3/trunk@5993 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-03 01:23:27 +00:00
et 3e19245054 Fixed handling of root website directory. Minor presentation fixes in test modules
git-svn-id: file:///home/svn/framework3/trunk@5987 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-30 22:41:09 +00:00
Ramon de C Valle 815a4fdea7 Fixed namespace problems in auxiliary modules
git-svn-id: file:///home/svn/framework3/trunk@5984 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-28 21:04:28 +00:00
James Lee d185cce177 make it easier to comment out specific exploits
git-svn-id: file:///home/svn/framework3/trunk@5981 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-25 08:51:17 +00:00
kris 0c0b171be4 use OptInt for numeric options
git-svn-id: file:///home/svn/framework3/trunk@5979 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-24 18:42:59 +00:00
kris 17764d77ae NUM is actually required
git-svn-id: file:///home/svn/framework3/trunk@5978 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-24 18:17:10 +00:00
et 110e7be0e9 Added wmap OPTIONS module by Chris Gates
git-svn-id: file:///home/svn/framework3/trunk@5977 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-23 19:42:42 +00:00
et 9144789a9b Added module authentication verb bypass
git-svn-id: file:///home/svn/framework3/trunk@5976 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-22 04:34:59 +00:00
et c92a64e687 Added module to test for file copies
git-svn-id: file:///home/svn/framework3/trunk@5975 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-22 04:34:00 +00:00
kris 4ae6d81616 Add bind_ruby and reverse_ruby cmd payloads for unix and windows
git-svn-id: file:///home/svn/framework3/trunk@5967 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-20 03:42:55 +00:00
HD Moore f54d91c53d Add PWFILE for Cain&Abel compatibility (thanks grutz!)
git-svn-id: file:///home/svn/framework3/trunk@5966 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 20:42:17 +00:00
James Lee a585fca827 typo fix
git-svn-id: file:///home/svn/framework3/trunk@5958 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 06:58:01 +00:00
James Lee 1935ad3ef7 don't advertise to the victim that we're trying to exploit them.
git-svn-id: file:///home/svn/framework3/trunk@5955 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 06:01:25 +00:00
kris 4810fef77c Report host and port to db in scanner/portscan/tcp
git-svn-id: file:///home/svn/framework3/trunk@5953 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 04:05:35 +00:00
kris d7ad8fa452 Adding Linux/x86 IPv6 bind and reverse-connect stagers
git-svn-id: file:///home/svn/framework3/trunk@5951 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 21:01:26 +00:00
HD Moore 3266bd9ecd Add a better autofilter() / check()
git-svn-id: file:///home/svn/framework3/trunk@5950 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 20:15:20 +00:00
HD Moore 9a2d5aa9c4 Tag up all the DoS modules properly with the DoS mixin last
git-svn-id: file:///home/svn/framework3/trunk@5949 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 20:00:31 +00:00
HD Moore 6c240e14b1 Disbale DoS modules from automation
git-svn-id: file:///home/svn/framework3/trunk@5948 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 19:56:03 +00:00
James Lee e02574e1fc add new object detection technique to browser_autopwn
git-svn-id: file:///home/svn/framework3/trunk@5941 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-17 07:53:44 +00:00
kris 85a9db3bad add DoS aux module for Pi3Web <=2.0.13 on Windows
git-svn-id: file:///home/svn/framework3/trunk@5924 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 04:35:47 +00:00
kris 85926eb4ff fix svn keywords
git-svn-id: file:///home/svn/framework3/trunk@5923 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 03:09:22 +00:00
kris d2c5c02556 fix svn keyword
git-svn-id: file:///home/svn/framework3/trunk@5922 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 03:03:19 +00:00
Patrick Webster e14bf65099 Added domino_sametime_stmux module.
git-svn-id: file:///home/svn/framework3/trunk@5919 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-14 11:04:33 +00:00
Patrick Webster 086e9fb89a Added veritas_netbackup_cmdexec module.
git-svn-id: file:///home/svn/framework3/trunk@5914 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 09:45:47 +00:00
Patrick Webster 97ffd10f89 Updated to support Windows targets.
git-svn-id: file:///home/svn/framework3/trunk@5912 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 09:01:24 +00:00
Patrick Webster 547f01f84a Added new target.
git-svn-id: file:///home/svn/framework3/trunk@5911 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 08:31:04 +00:00
kris 27667fc534 Fix wireless aux modules sending one more frame than specified
git-svn-id: file:///home/svn/framework3/trunk@5910 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 06:27:31 +00:00
HD Moore cef75433ec Fix non-404 errors
git-svn-id: file:///home/svn/framework3/trunk@5909 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:59:52 +00:00
HD Moore af686334c9 Fix ecode processing
git-svn-id: file:///home/svn/framework3/trunk@5908 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:51:21 +00:00
HD Moore e90c534500 Changes to the directory scanner
git-svn-id: file:///home/svn/framework3/trunk@5907 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:10:03 +00:00
et 4cbe6f975a Added new modules for file detection based on the name of the path directory
git-svn-id: file:///home/svn/framework3/trunk@5905 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 02:26:09 +00:00
et 2a1536d8d6 Fixed reporting variable wmap dir listing module
git-svn-id: file:///home/svn/framework3/trunk@5901 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:59:51 +00:00
Ramon de C Valle 26692d3437 Added AIX Power payload modules
git-svn-id: file:///home/svn/framework3/trunk@5900 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:58:36 +00:00
Ramon de C Valle dfbf6b34a5 Added Linux Power/Cell Broadband Engine Architecture payload modules and advanced payload options
git-svn-id: file:///home/svn/framework3/trunk@5899 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:57:53 +00:00
Ramon de C Valle ec4fffaa61 Removing old AIX Power payload modules
git-svn-id: file:///home/svn/framework3/trunk@5897 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:52:57 +00:00
HD Moore f5374fe2d2 Syntax fixups
git-svn-id: file:///home/svn/framework3/trunk@5894 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 19:31:11 +00:00
HD Moore 435ea807a4 Update the description and references to reflect (hah) MS08-068
git-svn-id: file:///home/svn/framework3/trunk@5890 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 20:46:21 +00:00
HD Moore b665212b35 Make 2003 target universal
git-svn-id: file:///home/svn/framework3/trunk@5888 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 15:22:24 +00:00
HD Moore 54cd265f82 Purging the ms08-067 check. The check method results in memory corruption and there are still concerns about the source of the technique. We can reimplement this later when there is some free time and less angry people involved ;-)
git-svn-id: file:///home/svn/framework3/trunk@5887 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 15:01:45 +00:00
HD Moore 57172955ad Clear the self.simple between ports
git-svn-id: file:///home/svn/framework3/trunk@5884 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:10:45 +00:00
HD Moore 5d0d88e5d2 Fix up the smb version module
git-svn-id: file:///home/svn/framework3/trunk@5883 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:08:04 +00:00
kris 7b002d4288 remove unused exception variables
git-svn-id: file:///home/svn/framework3/trunk@5882 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:00:54 +00:00
HD Moore 07f087b969 Switch to the new exception format
git-svn-id: file:///home/svn/framework3/trunk@5880 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 05:12:52 +00:00
Mario Ceballos 2380efac65 added auxiliary module db2rcmd.rb
git-svn-id: file:///home/svn/framework3/trunk@5877 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 02:44:28 +00:00
et b4cbe4ff8d Multiple bug fixes. Fixed query modules now resolved to correct function. Corrected in proxy and wmap code handling of RHOSTS as hostnames are not in use. Fixed reporting as target port was not handled properly and modules modified to reflect new wmap_target methods.
git-svn-id: file:///home/svn/framework3/trunk@5869 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 04:38:05 +00:00
James Lee 75feaa6fab allow passing args to meterpreter scripts through AutoRunScript
git-svn-id: file:///home/svn/framework3/trunk@5853 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-08 19:39:06 +00:00
HD Moore bc7b19f554 Adds keywords to some missing modules, adds an old/lame DoS module that was fixed in Vista SP1
git-svn-id: file:///home/svn/framework3/trunk@5849 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-07 22:11:58 +00:00
HD Moore 95d5624a96 Correct scratch/scratch typo
git-svn-id: file:///home/svn/framework3/trunk@5847 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-06 14:56:06 +00:00
HD Moore 308a90a01d Complete international support for XP SP2 / XP SP3
git-svn-id: file:///home/svn/framework3/trunk@5846 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-06 06:08:45 +00:00
kris 9ee7eb2e87 little typo fix
git-svn-id: file:///home/svn/framework3/trunk@5845 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-05 19:31:55 +00:00
HD Moore be3bfb36a9 Correct the DLL path
git-svn-id: file:///home/svn/framework3/trunk@5844 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-05 06:13:26 +00:00
HD Moore 0881649f14 The psexec and smb_relay module now automatically cleanup. The ms08-06 module now supports all languages of XP SP3.
git-svn-id: file:///home/svn/framework3/trunk@5841 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 22:27:59 +00:00
HD Moore 187f79eddf Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
git-svn-id: file:///home/svn/framework3/trunk@5837 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 20:08:24 +00:00