ae09877067
nfs mount scanner
...
git-svn-id: file:///home/svn/framework3/trunk@6135 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 02:21:35 +00:00
e7aecca838
more awesomeness from tebo
...
git-svn-id: file:///home/svn/framework3/trunk@6133 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-12 05:18:05 +00:00
12fc714f48
add NUM, SSID and BSSID fakeap options
...
git-svn-id: file:///home/svn/framework3/trunk@6128 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 17:14:34 +00:00
2325f5ce49
Added aux module filezilla_admin_user.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6127 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 14:38:10 +00:00
0d1ca42ed6
Adds support for exploitation over dialup via the new Telephony library.
...
git-svn-id: file:///home/svn/framework3/trunk@6120 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 06:09:02 +00:00
288075f7a0
add report_auth_info to some modules that authenticate. thanks, tebo
...
git-svn-id: file:///home/svn/framework3/trunk@6118 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:52:07 +00:00
348ffe7894
add snmp_scan module from tebo
...
git-svn-id: file:///home/svn/framework3/trunk@6116 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:26:44 +00:00
7874476b58
add smb_login scanner module from tebo
...
git-svn-id: file:///home/svn/framework3/trunk@6115 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:25:54 +00:00
3ee6eaede8
added exploit module nis2004_antispam.rb that makes use of egypts newly added heap spray stuff.
...
git-svn-id: file:///home/svn/framework3/trunk@6109 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-10 14:00:49 +00:00
39ac677f6e
removed scanner functionality & code fix
...
git-svn-id: file:///home/svn/framework3/trunk@6106 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-10 03:26:50 +00:00
f2e6a86cb2
oracle sid enumeration auxiliary module
...
git-svn-id: file:///home/svn/framework3/trunk@6099 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 13:02:30 +00:00
cf04190a8a
Moved tftp to Windows DoS targets. Hmm svn client bug?
...
git-svn-id: file:///home/svn/framework3/trunk@6096 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 05:39:57 +00:00
0b9e8cd2b9
Added aux filezilla_server_port.rb. Moved dos aux to OS-based folder.
...
git-svn-id: file:///home/svn/framework3/trunk@6095 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 05:33:26 +00:00
2de1dc9947
No need for string cast. thanks kris/raif.
...
git-svn-id: file:///home/svn/framework3/trunk@6094 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 03:22:04 +00:00
ddafdad942
added support for 2k3.
...
git-svn-id: file:///home/svn/framework3/trunk@6092 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-09 00:39:08 +00:00
9b210702a3
add scanner functionality to oracle_version.rb and removed some comments from options.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6088 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-08 01:57:28 +00:00
4ac15b3a83
oracle version auxiliary module using tns mixin
...
git-svn-id: file:///home/svn/framework3/trunk@6087 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 23:34:03 +00:00
a41e16ded3
Added ursoft_w32dasm.rb file format module.
...
git-svn-id: file:///home/svn/framework3/trunk@6083 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 11:18:44 +00:00
ee86b19834
added tns mixin to support oracle8i listener overflow and other tns
...
related stuff.
git-svn-id: file:///home/svn/framework3/trunk@6082 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 03:07:01 +00:00
204ebd411f
Updated with changes from raif.
...
git-svn-id: file:///home/svn/framework3/trunk@6080 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 00:15:55 +00:00
fa950d64ef
updated with the authors email address.
...
git-svn-id: file:///home/svn/framework3/trunk@6076 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-05 13:09:18 +00:00
a2da72c0eb
Added tmlisten_traversal aux module from Anshul Pandey.
...
git-svn-id: file:///home/svn/framework3/trunk@6075 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-05 05:18:42 +00:00
e132179b2d
added exploit modules djvu_imageurl.rb, msworks_wkspictureinterface.rb and
...
sascam_get.rb from dean.
git-svn-id: file:///home/svn/framework3/trunk@6074 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-05 00:55:29 +00:00
33940517c5
added exploit modules ca_brightstor_addcolumn.rb and verypdf_pdfview.rb from dean.
...
git-svn-id: file:///home/svn/framework3/trunk@6073 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-04 21:51:04 +00:00
e7dda0000b
Wmap SSL module renamed and updated to check for MD5 signature algorithm.
...
git-svn-id: file:///home/svn/framework3/trunk@6062 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-03 05:20:20 +00:00
114067e7bb
standardize names
...
git-svn-id: file:///home/svn/framework3/trunk@6059 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-02 21:21:10 +00:00
200cedeb25
clean up name and description
...
git-svn-id: file:///home/svn/framework3/trunk@6058 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-02 21:18:51 +00:00
232145819b
Adding Linux/x86 inline IPv6 bind shell payload
...
git-svn-id: file:///home/svn/framework3/trunk@6036 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-21 07:10:27 +00:00
704a92d43a
add name to author list and switch some modules to use it
...
git-svn-id: file:///home/svn/framework3/trunk@6034 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 21:53:17 +00:00
0e8ce1cc46
Move my portspec parsing code from scanner/portscan/tcp to Rex as
...
Socket.portspec_crack and use it to also replace the incomplete
parsing code used for db_autopwn
git-svn-id: file:///home/svn/framework3/trunk@6033 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 20:34:05 +00:00
f1093ee6a9
added exploit module realtek_playlist.rb.
...
git-svn-id: file:///home/svn/framework3/trunk@6029 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 01:49:40 +00:00
6d1a0993e2
Adding Avahi < 0.6.24 DoS module (source port 0)
...
git-svn-id: file:///home/svn/framework3/trunk@6026 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 21:13:58 +00:00
248f1e9fc3
Remove "#{xxx.to_s}" redundancies ('s/\(#{[^}]*\)\.to_s}/\1}/g')
...
git-svn-id: file:///home/svn/framework3/trunk@6022 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 07:11:08 +00:00
45c08a9011
Fallback to heap spray if the .NET DLL does not load
...
git-svn-id: file:///home/svn/framework3/trunk@6015 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-17 04:19:54 +00:00
aa53df6535
add exploit module adobe_utilprintf.rb, browser based.
...
git-svn-id: file:///home/svn/framework3/trunk@6014 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-15 15:44:02 +00:00
5822ab75a7
Adds an exploit module (universal) for the new internet explorer xml bug. This module shows off the .NET memory techniques discovered by Alexander Sotirov and Mark Dowd. This code should bypass DEP, ASLR, and NX :-)
...
git-svn-id: file:///home/svn/framework3/trunk@6012 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-12 01:45:00 +00:00
42da7926ba
See #263 . Testing post-commit hook
...
git-svn-id: file:///home/svn/framework3/trunk@6010 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:56:52 +00:00
c838c7ef2f
See #263 . Testing post-commit hook
...
git-svn-id: file:///home/svn/framework3/trunk@6009 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:55:12 +00:00
d64cf0f22f
See #263 . Testing post-commit hook
...
git-svn-id: file:///home/svn/framework3/trunk@6008 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:53:52 +00:00
cb8230f817
Fixes #263 . Correct the max read() size for DCERPC over SMB
...
git-svn-id: file:///home/svn/framework3/trunk@6007 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-11 03:50:30 +00:00
1485e0564e
updated with some awesome stuff from Didier Stevens.
...
git-svn-id: file:///home/svn/framework3/trunk@6006 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-08 13:16:54 +00:00
daf317c25b
Added wmap generic email extractor as an example of direct access to the database.
...
git-svn-id: file:///home/svn/framework3/trunk@6003 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-08 00:51:16 +00:00
6df3ed8b25
git-svn-id: file:///home/svn/framework3/trunk@6001 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-07 15:02:20 +00:00
29c94ece40
removed hardcoded length for xrefPosition. thanks Didier Stevens.
...
git-svn-id: file:///home/svn/framework3/trunk@5999 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-05 13:13:57 +00:00
103e507635
newer version breaks..
...
git-svn-id: file:///home/svn/framework3/trunk@5998 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-04 21:57:54 +00:00
d47511baf2
updated target.
...
git-svn-id: file:///home/svn/framework3/trunk@5996 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-03 20:20:39 +00:00
381f6da682
added exploit module adobe_utilprintf.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5995 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-03 16:19:25 +00:00
e1e1f5d6a4
added fileformat mixin, fileformat exploit videolan_tivo.rb, and network based exploit videolan_tivo.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5993 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-03 01:23:27 +00:00
3e19245054
Fixed handling of root website directory. Minor presentation fixes in test modules
...
git-svn-id: file:///home/svn/framework3/trunk@5987 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-30 22:41:09 +00:00
815a4fdea7
Fixed namespace problems in auxiliary modules
...
git-svn-id: file:///home/svn/framework3/trunk@5984 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-28 21:04:28 +00:00
d185cce177
make it easier to comment out specific exploits
...
git-svn-id: file:///home/svn/framework3/trunk@5981 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-25 08:51:17 +00:00
0c0b171be4
use OptInt for numeric options
...
git-svn-id: file:///home/svn/framework3/trunk@5979 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-24 18:42:59 +00:00
17764d77ae
NUM is actually required
...
git-svn-id: file:///home/svn/framework3/trunk@5978 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-24 18:17:10 +00:00
110e7be0e9
Added wmap OPTIONS module by Chris Gates
...
git-svn-id: file:///home/svn/framework3/trunk@5977 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-23 19:42:42 +00:00
9144789a9b
Added module authentication verb bypass
...
git-svn-id: file:///home/svn/framework3/trunk@5976 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-22 04:34:59 +00:00
c92a64e687
Added module to test for file copies
...
git-svn-id: file:///home/svn/framework3/trunk@5975 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-22 04:34:00 +00:00
4ae6d81616
Add bind_ruby and reverse_ruby cmd payloads for unix and windows
...
git-svn-id: file:///home/svn/framework3/trunk@5967 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-20 03:42:55 +00:00
f54d91c53d
Add PWFILE for Cain&Abel compatibility (thanks grutz!)
...
git-svn-id: file:///home/svn/framework3/trunk@5966 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 20:42:17 +00:00
a585fca827
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@5958 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 06:58:01 +00:00
1935ad3ef7
don't advertise to the victim that we're trying to exploit them.
...
git-svn-id: file:///home/svn/framework3/trunk@5955 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 06:01:25 +00:00
4810fef77c
Report host and port to db in scanner/portscan/tcp
...
git-svn-id: file:///home/svn/framework3/trunk@5953 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 04:05:35 +00:00
d7ad8fa452
Adding Linux/x86 IPv6 bind and reverse-connect stagers
...
git-svn-id: file:///home/svn/framework3/trunk@5951 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 21:01:26 +00:00
3266bd9ecd
Add a better autofilter() / check()
...
git-svn-id: file:///home/svn/framework3/trunk@5950 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 20:15:20 +00:00
9a2d5aa9c4
Tag up all the DoS modules properly with the DoS mixin last
...
git-svn-id: file:///home/svn/framework3/trunk@5949 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 20:00:31 +00:00
6c240e14b1
Disbale DoS modules from automation
...
git-svn-id: file:///home/svn/framework3/trunk@5948 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-18 19:56:03 +00:00
e02574e1fc
add new object detection technique to browser_autopwn
...
git-svn-id: file:///home/svn/framework3/trunk@5941 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-17 07:53:44 +00:00
85a9db3bad
add DoS aux module for Pi3Web <=2.0.13 on Windows
...
git-svn-id: file:///home/svn/framework3/trunk@5924 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 04:35:47 +00:00
85926eb4ff
fix svn keywords
...
git-svn-id: file:///home/svn/framework3/trunk@5923 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 03:09:22 +00:00
d2c5c02556
fix svn keyword
...
git-svn-id: file:///home/svn/framework3/trunk@5922 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 03:03:19 +00:00
e14bf65099
Added domino_sametime_stmux module.
...
git-svn-id: file:///home/svn/framework3/trunk@5919 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-14 11:04:33 +00:00
086e9fb89a
Added veritas_netbackup_cmdexec module.
...
git-svn-id: file:///home/svn/framework3/trunk@5914 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 09:45:47 +00:00
97ffd10f89
Updated to support Windows targets.
...
git-svn-id: file:///home/svn/framework3/trunk@5912 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 09:01:24 +00:00
547f01f84a
Added new target.
...
git-svn-id: file:///home/svn/framework3/trunk@5911 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 08:31:04 +00:00
27667fc534
Fix wireless aux modules sending one more frame than specified
...
git-svn-id: file:///home/svn/framework3/trunk@5910 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 06:27:31 +00:00
cef75433ec
Fix non-404 errors
...
git-svn-id: file:///home/svn/framework3/trunk@5909 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:59:52 +00:00
af686334c9
Fix ecode processing
...
git-svn-id: file:///home/svn/framework3/trunk@5908 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:51:21 +00:00
e90c534500
Changes to the directory scanner
...
git-svn-id: file:///home/svn/framework3/trunk@5907 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:10:03 +00:00
4cbe6f975a
Added new modules for file detection based on the name of the path directory
...
git-svn-id: file:///home/svn/framework3/trunk@5905 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 02:26:09 +00:00
2a1536d8d6
Fixed reporting variable wmap dir listing module
...
git-svn-id: file:///home/svn/framework3/trunk@5901 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:59:51 +00:00
26692d3437
Added AIX Power payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5900 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:58:36 +00:00
dfbf6b34a5
Added Linux Power/Cell Broadband Engine Architecture payload modules and advanced payload options
...
git-svn-id: file:///home/svn/framework3/trunk@5899 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:57:53 +00:00
ec4fffaa61
Removing old AIX Power payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5897 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:52:57 +00:00
f5374fe2d2
Syntax fixups
...
git-svn-id: file:///home/svn/framework3/trunk@5894 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 19:31:11 +00:00
435ea807a4
Update the description and references to reflect (hah) MS08-068
...
git-svn-id: file:///home/svn/framework3/trunk@5890 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 20:46:21 +00:00
b665212b35
Make 2003 target universal
...
git-svn-id: file:///home/svn/framework3/trunk@5888 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 15:22:24 +00:00
54cd265f82
Purging the ms08-067 check. The check method results in memory corruption and there are still concerns about the source of the technique. We can reimplement this later when there is some free time and less angry people involved ;-)
...
git-svn-id: file:///home/svn/framework3/trunk@5887 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 15:01:45 +00:00
57172955ad
Clear the self.simple between ports
...
git-svn-id: file:///home/svn/framework3/trunk@5884 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:10:45 +00:00
5d0d88e5d2
Fix up the smb version module
...
git-svn-id: file:///home/svn/framework3/trunk@5883 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:08:04 +00:00
7b002d4288
remove unused exception variables
...
git-svn-id: file:///home/svn/framework3/trunk@5882 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:00:54 +00:00
07f087b969
Switch to the new exception format
...
git-svn-id: file:///home/svn/framework3/trunk@5880 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 05:12:52 +00:00
2380efac65
added auxiliary module db2rcmd.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5877 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 02:44:28 +00:00
b4cbe4ff8d
Multiple bug fixes. Fixed query modules now resolved to correct function. Corrected in proxy and wmap code handling of RHOSTS as hostnames are not in use. Fixed reporting as target port was not handled properly and modules modified to reflect new wmap_target methods.
...
git-svn-id: file:///home/svn/framework3/trunk@5869 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 04:38:05 +00:00
75feaa6fab
allow passing args to meterpreter scripts through AutoRunScript
...
git-svn-id: file:///home/svn/framework3/trunk@5853 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-08 19:39:06 +00:00
bc7b19f554
Adds keywords to some missing modules, adds an old/lame DoS module that was fixed in Vista SP1
...
git-svn-id: file:///home/svn/framework3/trunk@5849 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-07 22:11:58 +00:00
95d5624a96
Correct scratch/scratch typo
...
git-svn-id: file:///home/svn/framework3/trunk@5847 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-06 14:56:06 +00:00
308a90a01d
Complete international support for XP SP2 / XP SP3
...
git-svn-id: file:///home/svn/framework3/trunk@5846 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-06 06:08:45 +00:00
9ee7eb2e87
little typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@5845 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-05 19:31:55 +00:00
be3bfb36a9
Correct the DLL path
...
git-svn-id: file:///home/svn/framework3/trunk@5844 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-05 06:13:26 +00:00
0881649f14
The psexec and smb_relay module now automatically cleanup. The ms08-06 module now supports all languages of XP SP3.
...
git-svn-id: file:///home/svn/framework3/trunk@5841 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 22:27:59 +00:00
187f79eddf
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
...
git-svn-id: file:///home/svn/framework3/trunk@5837 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 20:08:24 +00:00
0193cd5219
fix session vs client variable problems with meterpreter AutoRunScript and make usage actually reflect what the code does
...
git-svn-id: file:///home/svn/framework3/trunk@5834 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 06:40:12 +00:00
8bb6ffe64a
Update ruby-lorcon path in wifun description
...
git-svn-id: file:///home/svn/framework3/trunk@5833 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 05:55:14 +00:00
1026957da1
Remove eton() definitions from aux modules since it's in the Lorcon mixin
...
git-svn-id: file:///home/svn/framework3/trunk@5831 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 03:03:22 +00:00
55bb15d695
Adding file2air aux wireless module which lets you write frames from binary
...
files to the air after optionally changing the addresses.
This module looks at ToDS and FromDS when replacing the addresses, which isn't
done in the original.
git-svn-id: file:///home/svn/framework3/trunk@5830 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 02:34:57 +00:00
b53695f7db
The psexec module now uses a service-compatible exe, shellcode is spawned in a subprocess and the service cleans up properly
...
git-svn-id: file:///home/svn/framework3/trunk@5829 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 23:06:37 +00:00
e02f740277
Handle multiple sessions by default
...
git-svn-id: file:///home/svn/framework3/trunk@5828 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 21:08:46 +00:00
133d7ce658
Adds an automatic default target to ms08-067, autodetects OS, SP, and language now.
...
git-svn-id: file:///home/svn/framework3/trunk@5827 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 20:37:51 +00:00
be30436058
Better SP2/SP3 check method from Rhys Kidd, Danish fingerprint from MaXe <security[at]intern0t.net>
...
git-svn-id: file:///home/svn/framework3/trunk@5826 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 17:24:49 +00:00
4b30f3ef1a
Update the check() comments to reflect new information >:(
...
git-svn-id: file:///home/svn/framework3/trunk@5825 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 15:29:51 +00:00
97b2adcc46
added the connect()/smb_login()
...
git-svn-id: file:///home/svn/framework3/trunk@5824 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 13:14:06 +00:00
f1789fc1b2
Adds the check() method and scanner module to ms08-067, massively upgrades the smb/version scanner, with better SP detection and remote language pack detection.
...
git-svn-id: file:///home/svn/framework3/trunk@5823 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 09:17:08 +00:00
d9ffc23128
Adds 0x40 to the badchars list, fixes a weird issue, found by Ramon
...
git-svn-id: file:///home/svn/framework3/trunk@5822 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-02 02:35:57 +00:00
4f45818a0f
The prefix change makes ms08-067 more reliable vs windows 2000
...
git-svn-id: file:///home/svn/framework3/trunk@5820 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 21:10:45 +00:00
de6c726e0a
New french targets from Antoine
...
git-svn-id: file:///home/svn/framework3/trunk@5818 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 15:34:17 +00:00
c5ad82fb68
Add SP2 German
...
git-svn-id: file:///home/svn/framework3/trunk@5817 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 14:15:16 +00:00
d366e8342a
Spanish target is SP3 not SP2
...
git-svn-id: file:///home/svn/framework3/trunk@5816 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 14:07:58 +00:00
7427d913c0
Added targets for Portuguese (Brazil) (NX) SP2/SP3 to ms08_067_netapi.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5815 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 11:45:52 +00:00
571d577bbd
Adds Windows XP SP0/SP1 targets for English
...
git-svn-id: file:///home/svn/framework3/trunk@5814 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 06:12:49 +00:00
e784bcd515
Adds Windows 2003 SP1 (NO NX and NX(is this needed)).
...
git-svn-id: file:///home/svn/framework3/trunk@5813 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 05:55:57 +00:00
7fcf5b3dc2
Lots of new targets merged in for MS08-067 including Brett Moore's 2003 SP2 DEP bypass
...
git-svn-id: file:///home/svn/framework3/trunk@5812 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 05:16:02 +00:00
56a413d803
Reflective DLL injection payloads from Stephen Fewer
...
git-svn-id: file:///home/svn/framework3/trunk@5806 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 22:17:32 +00:00
dfbc35da3c
Patch for ms08-067 from antoine, fixes braindead bug on my part, should increase reliability
...
git-svn-id: file:///home/svn/framework3/trunk@5805 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 17:21:07 +00:00
e9d133e9aa
Remove the while(true) which snuck into this module
...
git-svn-id: file:///home/svn/framework3/trunk@5803 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 07:21:53 +00:00
330bd2ef5b
Update some of my aux modules that require a successful login to not continue
...
running without it
git-svn-id: file:///home/svn/framework3/trunk@5802 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 00:52:38 +00:00
4740e6e452
Adding DoS aux module for the Victory FTP Server v5.0
...
git-svn-id: file:///home/svn/framework3/trunk@5801 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-29 21:57:31 +00:00
3c4aec43d5
Adding DoS aux module for the PacketTrap TFTP server
...
git-svn-id: file:///home/svn/framework3/trunk@5800 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-29 17:28:34 +00:00
f9f6c8d3e6
Adds an initial exploit for MS08-067, support for XP SP2/SP3 DEP, 2003 SP0/SP2 no-DEP.
...
git-svn-id: file:///home/svn/framework3/trunk@5798 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-28 07:35:17 +00:00
aec269616a
Ignore EACCES from connect in TCP portscanner aux module. This can be caused
...
by (at least) ICMPv6 Administratively Prohibited messages, on at least Linux.
I got these by scanning ports 21-23 on ipv6.google.com, for example.
git-svn-id: file:///home/svn/framework3/trunk@5797 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-28 02:55:10 +00:00
71885912b8
Allow more flexible (Nmap-esque) port specifications in TCP portscan aux module,
...
so things like "21-25,80,443", "1024-" and "-" behave like you expect. This
replaces the PORTSTART and PORTSTOP options with a single PORTS option.
git-svn-id: file:///home/svn/framework3/trunk@5796 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 23:33:34 +00:00
9d565f9a51
Fix CERT ref numbers in bailiwicked DNS aux modules
...
git-svn-id: file:///home/svn/framework3/trunk@5794 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 22:26:48 +00:00
e700980288
update the return. thanks jacop.
...
git-svn-id: file:///home/svn/framework3/trunk@5793 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 20:50:44 +00:00
c0ffd16629
Patch from antoine, corrected description and pre-calculated hashes
...
git-svn-id: file:///home/svn/framework3/trunk@5791 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 17:58:56 +00:00
75be2e33ad
Added module reporting and wmap_reports command
...
git-svn-id: file:///home/svn/framework3/trunk@5789 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 02:22:30 +00:00
ce58c15d6e
Switch to cain&abel / halflm tables compatible challenge
...
git-svn-id: file:///home/svn/framework3/trunk@5788 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-26 21:53:36 +00:00
ebc5294574
Added new wmap sqlmap module
...
git-svn-id: file:///home/svn/framework3/trunk@5787 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-25 03:26:50 +00:00
8d19ba7bbf
Changed AIX_VERSION to AIXLEVEL
...
git-svn-id: file:///home/svn/framework3/trunk@5786 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 13:22:12 +00:00
29e983567e
removed reports_exist check
...
git-svn-id: file:///home/svn/framework3/trunk@5785 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 04:23:54 +00:00
c4dc77c15b
fixed ip handling and CN parsing
...
git-svn-id: file:///home/svn/framework3/trunk@5784 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 03:19:24 +00:00
c66d6c4e46
Set property 'svn:keywords'
...
git-svn-id: file:///home/svn/framework3/trunk@5783 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:43:21 +00:00
eb0c6d1a65
Added missing Linux x86 payload modules from unixasm
...
git-svn-id: file:///home/svn/framework3/trunk@5782 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:19:50 +00:00
693202fd4b
Updated AIX POWER/PowerPC payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5781 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:04:18 +00:00
16612cacba
Rename
...
git-svn-id: file:///home/svn/framework3/trunk@5778 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 17:51:12 +00:00
822234771f
Initial import of the bea oracle weblogic apache plugin
...
git-svn-id: file:///home/svn/framework3/trunk@5777 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 17:44:57 +00:00
13ab6ed2d8
added ssl host name detection module
...
git-svn-id: file:///home/svn/framework3/trunk@5776 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 05:31:55 +00:00
f98c87ff22
added directory scanner
...
git-svn-id: file:///home/svn/framework3/trunk@5775 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 02:31:52 +00:00
e6127313c9
Updated AIX POWER/PowerPC payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5774 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:41:12 +00:00
f124597a56
Code cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:03:39 +00:00
7e73ed8c15
first attempt of reporting implementation.
...
git-svn-id: file:///home/svn/framework3/trunk@5771 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 20:32:14 +00:00
3de5bab19b
added exploit module zenturiprogramchecker_unsafe.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5769 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 13:15:53 +00:00
fbed757aa5
Added webrick_regex.rb module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5764 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-17 15:40:20 +00:00
fa1680b262
added exploit module ms08_059_his2006.rb.
...
git-svn-id: file:///home/svn/framework3/trunk@5760 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 22:41:01 +00:00
b1349daf8f
updated with new module format.
...
git-svn-id: file:///home/svn/framework3/trunk@5759 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 22:25:35 +00:00
1503250a5b
added aux module open_x11.rb provided by tebo.
...
git-svn-id: file:///home/svn/framework3/trunk@5758 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 15:15:29 +00:00
f59a3f04b2
Commit the simple tcp port scanner
...
git-svn-id: file:///home/svn/framework3/trunk@5757 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 14:00:56 +00:00
727f893ad8
added exploit module quick_tftp_pro_mode.rb from Patrik Wellsly.
...
git-svn-id: file:///home/svn/framework3/trunk@5756 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 11:21:06 +00:00
6cfdb104c4
Added titan626_site.rb module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5755 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 04:23:05 +00:00
fd95f81cd6
added exploit module systemrequirementslab_unsafe.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5754 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-14 19:19:39 +00:00
86148b4802
Added patch and module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5752 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-14 14:25:41 +00:00
8d760ebc1e
Added patch and module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5751 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-14 14:22:34 +00:00
b508358132
added exploit modules lpviewer_url.rb and softartisans_getdrivename.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5750 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-14 13:41:52 +00:00
c178428bc6
added aux module xmeasy560_nlst.rb from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5749 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 23:52:08 +00:00
e016ff2d76
cleanup patch from antoine
...
git-svn-id: file:///home/svn/framework3/trunk@5748 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 14:22:38 +00:00
4c091edac1
fixes #198 ; generic php eval exploit
...
git-svn-id: file:///home/svn/framework3/trunk@5746 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 05:55:10 +00:00
76dc2920d5
implemented in lib/msf/core/payload/php.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5745 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 05:49:11 +00:00
38b565399e
actually randomize myexec function name
...
git-svn-id: file:///home/svn/framework3/trunk@5744 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-13 05:31:36 +00:00
a7a7da9e28
Newer mercury module, more reliable using 0x0c0c0c0c return
...
git-svn-id: file:///home/svn/framework3/trunk@5742 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-12 17:11:14 +00:00
478c8b0824
Added wmap simple directoty listing module
...
git-svn-id: file:///home/svn/framework3/trunk@5741 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-12 04:59:39 +00:00
b1f3c83f7b
add support for finding .swp files
...
git-svn-id: file:///home/svn/framework3/trunk@5739 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-11 06:38:28 +00:00
de780fb2da
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@5738 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-11 05:49:27 +00:00
d7e706f6af
added aux module alphastor_librarymanager_exec.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5737 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-11 00:56:47 +00:00
2977f0741c
added aux module alphastor_librarymanager.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5735 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-10 15:28:01 +00:00
7e5c759dd0
Fixed and reference to browser autopwn.
...
git-svn-id: file:///home/svn/framework3/trunk@5733 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-10 04:25:18 +00:00
929ba19cc7
Switch packet dcoding from scruby to packetfu
...
git-svn-id: file:///home/svn/framework3/trunk@5728 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-10 02:26:05 +00:00
386eac82fa
fixer.
...
git-svn-id: file:///home/svn/framework3/trunk@5725 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-10 00:17:44 +00:00
48667711e6
added aux module alphastor_devicemanager.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5724 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-09 23:53:54 +00:00
7d85b1d198
Added Medal of Honor module from Jacopo Cervini.
...
git-svn-id: file:///home/svn/framework3/trunk@5721 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-07 12:03:12 +00:00
35240108de
Added patch and module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5720 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-06 13:16:08 +00:00
183830fab5
Make the MSSQL scanner a little better for automation
...
git-svn-id: file:///home/svn/framework3/trunk@5716 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-04 21:55:26 +00:00
02780a1d88
Improvements to the FTP mixin and scanner, still needs multiline read support
...
git-svn-id: file:///home/svn/framework3/trunk@5715 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-04 21:42:37 +00:00
2965f3b238
updated with better coverage.
...
git-svn-id: file:///home/svn/framework3/trunk@5712 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-04 12:00:43 +00:00
c1aa7babb7
Add the telnet capture module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5711 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-02 22:43:20 +00:00
6ad1a82101
fixed tabbing.
...
git-svn-id: file:///home/svn/framework3/trunk@5710 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-02 15:48:25 +00:00
fd256ec4a1
This massive commit changes the metasploit 3 module format. The new syntax allows for greater scalability and future improvements to the metasploit module loader. This change also makes it easier for users to add new modules, since the class name no longer needs to match the directory structure.
...
git-svn-id: file:///home/svn/framework3/trunk@5709 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-02 05:23:59 +00:00
67a25b6ce8
added exploit modules ms08_053_mediaencoder.rb, macrovision_unsafe.rb and
...
ms08_041_snapshotviewer.rb
git-svn-id: file:///home/svn/framework3/trunk@5707 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-01 22:40:57 +00:00
422e58c51f
Close the listening socket, allows the same shellcode to beused on the same port repeatedly, thanks antoine!
...
git-svn-id: file:///home/svn/framework3/trunk@5705 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-01 16:16:34 +00:00
fa3ce57fed
Implemented Auxiliary::WMAPScanUniqueQuery.
...
git-svn-id: file:///home/svn/framework3/trunk@5704 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-01 03:57:57 +00:00
cef8153df2
add aux module from Kris Katterjohn.
...
git-svn-id: file:///home/svn/framework3/trunk@5703 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-30 23:28:24 +00:00
647118f333
remove debug statements, add disabled_functions evasion in php findsock stuff
...
git-svn-id: file:///home/svn/framework3/trunk@5700 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-30 19:56:16 +00:00
12af69ed03
added exploit module realwin.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5699 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-30 13:32:29 +00:00
a4ee57c476
Applied patch from Kris Katterjohn to to correct the status message printed for logins.
...
git-svn-id: file:///home/svn/framework3/trunk@5697 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-30 01:50:08 +00:00
36a06e7576
initial commit of php findsock. This patch makes all http connections global and removes the "close if (!pipelining)" checks, so beware of bugs.
...
git-svn-id: file:///home/svn/framework3/trunk@5678 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 04:41:51 +00:00
b001e4684d
Import first version of WMAP from ET LoWNOISE
...
git-svn-id: file:///home/svn/framework3/trunk@5675 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-22 22:32:20 +00:00
b0225127cf
Patch for Ruby 1.9 compat (not there yet)
...
git-svn-id: file:///home/svn/framework3/trunk@5674 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-22 15:52:18 +00:00
309618a3f8
Fixed indentation
...
git-svn-id: file:///home/svn/framework3/trunk@5673 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-21 21:59:15 +00:00
40b8f1896e
Moving it in again. Thanks antoine for the fix!
...
git-svn-id: file:///home/svn/framework3/trunk@5672 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-21 19:35:27 +00:00
89ba4c289c
Moving out temporarily
...
git-svn-id: file:///home/svn/framework3/trunk@5671 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-20 18:18:29 +00:00
590ac24121
Moving out temporarily
...
git-svn-id: file:///home/svn/framework3/trunk@5670 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-20 18:17:05 +00:00
58cef5775e
Added ARCH_POWER constant and fixed AIX payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5663 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-17 01:42:51 +00:00
07c838e4e0
Merge patch and module from Robert, adds a x86 int3 payload for debugging, patches for the testsrv
...
git-svn-id: file:///home/svn/framework3/trunk@5660 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-15 19:38:50 +00:00
87c9cd9547
New module from Julien TINNES for Linksys Apply.CGI overflow
...
git-svn-id: file:///home/svn/framework3/trunk@5659 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-15 18:51:45 +00:00
6772685f3e
Merge patch from Julien TINNES for MIPS support (LE/BE)
...
git-svn-id: file:///home/svn/framework3/trunk@5658 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-15 18:50:34 +00:00
8e97503333
fix bug where random URIPATHs sent 404 instead of exploits
...
git-svn-id: file:///home/svn/framework3/trunk@5657 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-13 04:07:28 +00:00
4dd9b23f37
Added AIX POWER/PowerPC payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5655 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-10 20:15:38 +00:00
f0976fad87
avoid logging socket errors
...
git-svn-id: file:///home/svn/framework3/trunk@5651 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-04 03:52:02 +00:00
1ef66ec2ff
added auxiliary/exploits modules for emc alphastor.
...
git-svn-id: file:///home/svn/framework3/trunk@5649 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-01 11:28:55 +00:00
49e0daf140
bug fix for firefox 1.0; minor code cleanup, better naming
...
git-svn-id: file:///home/svn/framework3/trunk@5648 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-01 05:19:28 +00:00
98632ac069
add simple command execution payload for php
...
git-svn-id: file:///home/svn/framework3/trunk@5646 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-01 04:41:18 +00:00
d53dd66701
Adds initial support for IPv6, including two stager. Tested Meterpreter over IPv6 stages on XP and Vista. Using this is still tricky, I will add a wiki page tomorrow to explain the ScopeID stuff for link-local testing. This commit also includes the raw (oversized) assembler for the stagers as well as the entire old metasploit assembly set (useful for development).
...
git-svn-id: file:///home/svn/framework3/trunk@5635 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-22 06:34:57 +00:00
e203311af7
updated references for ms06_066
...
git-svn-id: file:///home/svn/framework3/trunk@5630 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-15 15:46:47 +00:00
cb2efe6356
Swap the new NX-enabled stagers for the old ones, keep the old ones since they are still much smaller.
...
git-svn-id: file:///home/svn/framework3/trunk@5628 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-13 01:49:07 +00:00
33afd40526
added exploit module nowsms.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5626 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-11 23:48:45 +00:00
fae008d1b0
Adds the bind_nx_tcp stager (NX support)
...
git-svn-id: file:///home/svn/framework3/trunk@5625 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-11 22:51:28 +00:00
eaa91fd8f4
Adds a reverse_tcp stager that downloads the stage into a RWX page created with VirtualAlloc. Results in NX support
...
git-svn-id: file:///home/svn/framework3/trunk@5624 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-11 22:41:35 +00:00
9159623ec2
Added ms00_094_pbserver.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5622 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-10 10:12:45 +00:00
eae5315ab7
Apply patch for disabling console logging of DNS requests
...
git-svn-id: file:///home/svn/framework3/trunk@5621 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-08 21:20:25 +00:00
83248c3d60
Better parsing in proxy mode, ignore checkbox values
...
git-svn-id: file:///home/svn/framework3/trunk@5620 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-08 06:38:59 +00:00
cc8ae206b6
First batch of karmetasploit updates
...
git-svn-id: file:///home/svn/framework3/trunk@5618 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-08 06:00:30 +00:00
bfa20906fb
Fix a bug in fakedns when TARGETHOST is not an IP address
...
git-svn-id: file:///home/svn/framework3/trunk@5616 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-08 03:46:07 +00:00
3cf81f257e
Ensure that the Content-Type is set to text/html by default.
...
git-svn-id: file:///home/svn/framework3/trunk@5615 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-08 02:37:54 +00:00
8fb167d7ff
added exploit module lgserver_rxsuselicenseini.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5614 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-02 15:03:13 +00:00
a212bfba99
fix PrepenEncoder typo, replace it with 'StackAdjustment' => -3500
...
git-svn-id: file:///home/svn/framework3/trunk@5613 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-01 20:04:42 +00:00
a97dbb0106
fix missing semicolon in js
...
git-svn-id: file:///home/svn/framework3/trunk@5612 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-01 02:48:32 +00:00
c3c53cae67
Adds a simplistic DNS diffing module. Useful for looking for poisoned cache servers and geo-location enabled DNS.
...
git-svn-id: file:///home/svn/framework3/trunk@5610 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-29 22:09:49 +00:00
ed3ab97100
Better randomization of the hostname element
...
git-svn-id: file:///home/svn/framework3/trunk@5609 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-28 18:51:24 +00:00
5371549968
Remove the static (and quite obvious) TTL from the requests
...
git-svn-id: file:///home/svn/framework3/trunk@5608 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-28 18:49:39 +00:00
f589f5cdb8
Fix an exception when the cached entry is a non-A, better descriptions for the timing detection
...
git-svn-id: file:///home/svn/framework3/trunk@5607 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-28 05:05:04 +00:00
ee0f6ed5cc
module update from Elazar Broad.
...
git-svn-id: file:///home/svn/framework3/trunk@5606 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-27 11:23:42 +00:00
a531785372
Better check method
...
git-svn-id: file:///home/svn/framework3/trunk@5605 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-26 21:09:36 +00:00
b4fc255a41
Adds an option to randomize the source address of the queries as well as some cosmetic changes. The tuning code should be forwarding queries properly now.
...
git-svn-id: file:///home/svn/framework3/trunk@5602 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-26 04:35:28 +00:00
9b56053974
Add timestamps, researching something
...
git-svn-id: file:///home/svn/framework3/trunk@5601 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-26 03:16:25 +00:00
afa0623e6e
Better logging
...
git-svn-id: file:///home/svn/framework3/trunk@5600 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-26 02:59:56 +00:00
067d19051e
Do not reply to non TXT records for now
...
git-svn-id: file:///home/svn/framework3/trunk@5599 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-26 02:53:49 +00:00
6c0356e9e0
This patch changes how we determine the number of spoofed replies to send to each query. When XIDS is set to zero (now the default), the code will now determine the length of time it takes for the target server to query the real nameserver for the target domain. This leads to much more accurate testing and is recalculated every 1000 attempts to handle servers which change under load.
...
git-svn-id: file:///home/svn/framework3/trunk@5597 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-25 22:01:12 +00:00
07f2ece645
Fix authoritativeness check
...
git-svn-id: file:///home/svn/framework3/trunk@5593 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-24 22:26:02 +00:00
1e0e99259b
Test commit to verify my new account.
...
git-svn-id: file:///home/svn/framework3/trunk@5592 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-24 20:21:47 +00:00
204072159a
Credit Cedric for his help in implementing the NS injection/domain module. Thanks again!
...
git-svn-id: file:///home/svn/framework3/trunk@5591 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-24 04:29:14 +00:00
360f13d11e
Tweak the XIDs again (this seems better), correct the module descriptions
...
git-svn-id: file:///home/svn/framework3/trunk@5590 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-24 03:53:35 +00:00
e2f8704aac
Be nice to Dan's server :P
...
git-svn-id: file:///home/svn/framework3/trunk@5589 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-24 03:15:59 +00:00
04420662df
Be more accomodating of longer domains
...
git-svn-id: file:///home/svn/framework3/trunk@5588 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-24 02:44:16 +00:00
1c6b3581de
Adds the domain version of this exploit, which replaces the cached nameservers with the one we specify.
...
git-svn-id: file:///home/svn/framework3/trunk@5587 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-24 02:40:48 +00:00
b2f2e4cab6
Correct the TTL variable usage (was getting squished and then setting way too low TTLs)
...
git-svn-id: file:///home/svn/framework3/trunk@5586 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-24 01:15:12 +00:00
e0bdbacb5d
Better XID mixing
...
git-svn-id: file:///home/svn/framework3/trunk@5585 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 23:09:21 +00:00
255998f3b3
set HOSTNAME pwned.doxpara.com
...
git-svn-id: file:///home/svn/framework3/trunk@5584 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 22:47:36 +00:00
8948ac5f2a
Proper spelling for the win.
...
git-svn-id: file:///home/svn/framework3/trunk@5583 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 22:23:43 +00:00
4f67ae9186
Log the name correctly and fix the whitespace issues
...
git-svn-id: file:///home/svn/framework3/trunk@5582 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 21:59:57 +00:00
b9fc41cf9c
Indentation
...
git-svn-id: file:///home/svn/framework3/trunk@5581 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 21:40:58 +00:00
b9b0f05add
Correct the advisory URL
...
git-svn-id: file:///home/svn/framework3/trunk@5580 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 21:21:41 +00:00
c7ba912c94
ZOMG. What is this? >:-)
...
git-svn-id: file:///home/svn/framework3/trunk@5579 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 21:15:50 +00:00
e0f773d14d
Lower the ttl
...
git-svn-id: file:///home/svn/framework3/trunk@5576 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 17:46:07 +00:00
5cfdffc395
add ie_createobject to browser_autpwn
...
git-svn-id: file:///home/svn/framework3/trunk@5573 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 08:26:42 +00:00
10f57cedcd
fix stupid missing quote bug, thanks MC
...
git-svn-id: file:///home/svn/framework3/trunk@5571 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 06:06:41 +00:00
894606aab4
bug fix in javascript
...
git-svn-id: file:///home/svn/framework3/trunk@5570 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 00:55:21 +00:00
627999574a
added aux module for the ldap bug in wireshark.
...
git-svn-id: file:///home/svn/framework3/trunk@5569 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 23:49:05 +00:00
43f9501c52
Adds a new module that demonstrates IP spoofing.
...
git-svn-id: file:///home/svn/framework3/trunk@5567 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 19:37:05 +00:00
e5018eeec8
Adds a helper service for finding a DNS server's source port
...
git-svn-id: file:///home/svn/framework3/trunk@5564 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 15:51:01 +00:00
2d344e64df
browser_autopwn now works with mozilla_compareto, mozilla_navigatorjava, and firefox_queryinterface; increased reliability of OS and browser detection
...
git-svn-id: file:///home/svn/framework3/trunk@5563 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 07:28:05 +00:00
6e212a5981
I'm on crack. mozilla_navigatorjava is the one that works on 1.5.0.5; reverting from 5559
...
git-svn-id: file:///home/svn/framework3/trunk@5562 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 06:02:03 +00:00
3effb133cc
Added spamassassin_exec module.
...
git-svn-id: file:///home/svn/framework3/trunk@5560 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-19 15:40:30 +00:00
324703669b
typo fix -- really works on <1.5.0.5, not <1.0.5
...
git-svn-id: file:///home/svn/framework3/trunk@5559 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-19 05:04:33 +00:00
a0a203fba7
don't hang the browser building the exploit buffer if we can't exploit it
...
git-svn-id: file:///home/svn/framework3/trunk@5558 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-19 05:03:01 +00:00
9b3c8e2d72
tebodell's patch to autorun meterpeter scripts on session creation
...
git-svn-id: file:///home/svn/framework3/trunk@5557 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-19 04:52:12 +00:00
45f8b5502f
Try 445 before 139 these days
...
git-svn-id: file:///home/svn/framework3/trunk@5554 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-14 05:37:07 +00:00
798ea895b8
Lots of little tweaks the fake HTTP service
...
git-svn-id: file:///home/svn/framework3/trunk@5553 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-14 05:36:21 +00:00
d9331e8754
Make browser exploits identify themselves for use with browser_autopwn
...
git-svn-id: file:///home/svn/framework3/trunk@5551 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-13 01:36:27 +00:00
301b1514f3
Added pop2 mixin, aux module, typos.
...
git-svn-id: file:///home/svn/framework3/trunk@5550 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-08 14:21:48 +00:00
4459fdd71d
Added imap_uw_lsub.rb module.
...
git-svn-id: file:///home/svn/framework3/trunk@5549 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-06 08:27:41 +00:00
2401799e72
added 2.0 target.
...
git-svn-id: file:///home/svn/framework3/trunk@5548 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-04 11:47:38 +00:00
255ee89873
added exploit module groupwisemessenger_client.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5547 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-03 18:59:29 +00:00
8800372e46
initial commit of browser_autopwn;
...
revamp php payloads;
socks5 for IPv6 (untested)
git-svn-id: file:///home/svn/framework3/trunk@5546 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-01 01:44:56 +00:00
5221b25aba
Check for an empty HTTP request before trying to process it
...
git-svn-id: file:///home/svn/framework3/trunk@5542 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-27 19:57:53 +00:00
d700c51e1a
Updated to not log DNS queries by default
...
git-svn-id: file:///home/svn/framework3/trunk@5540 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-25 23:04:19 +00:00
13859c23d9
added exploit module novelliprint_getdriversettings.rb.
...
git-svn-id: file:///home/svn/framework3/trunk@5533 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-19 00:06:18 +00:00
8e7ac6c9ac
added exploit module creative_software_cachefolder.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5531 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-17 15:11:17 +00:00
8414b5bc6a
Added asus module from Jacopo Cervini.
...
git-svn-id: file:///home/svn/framework3/trunk@5529 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-09 05:13:44 +00:00
1c6a33cb01
Added gld_postfix.rb module
...
git-svn-id: file:///home/svn/framework3/trunk@5528 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-07 02:16:34 +00:00
dd643436ee
Module typo correction
...
git-svn-id: file:///home/svn/framework3/trunk@5527 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-06 04:41:05 +00:00
06c6ad6acd
Add riot's DoubleTake exploit. Set the svn:keywords properties where it was missing
...
git-svn-id: file:///home/svn/framework3/trunk@5526 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-06 04:39:44 +00:00
3f519b6d9b
Brightstor module from toto
...
git-svn-id: file:///home/svn/framework3/trunk@5525 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-06 04:30:56 +00:00
ed43da5b07
Modules from Matteo Cantoni
...
git-svn-id: file:///home/svn/framework3/trunk@5524 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-06 04:29:41 +00:00
d437a0edda
Added NTP probe from Matteo Cantoni
...
git-svn-id: file:///home/svn/framework3/trunk@5523 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-06 04:29:19 +00:00
405637297f
Added guestbook_ssi_exec.rb module.
...
git-svn-id: file:///home/svn/framework3/trunk@5517 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-04 12:19:43 +00:00
777095f572
added winvnc_http_get.rb module.
...
git-svn-id: file:///home/svn/framework3/trunk@5516 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-03 14:56:10 +00:00
4aad680752
added exploit module borland_starteam.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5515 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-01 11:42:31 +00:00
d94bfaf373
better support for nx with dllinject payloads/meterp
...
git-svn-id: file:///home/svn/framework3/trunk@5510 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-26 06:34:12 +00:00
2327063569
Added a fix
...
git-svn-id: file:///home/svn/framework3/trunk@5509 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-20 20:55:01 +00:00
2db9dd6ab2
Reversing over greedy commit. =(
...
git-svn-id: file:///home/svn/framework3/trunk@5506 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 06:17:41 +00:00
93199c5610
"set foo" prints the value of foo if it exists
...
git-svn-id: file:///home/svn/framework3/trunk@5505 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 05:29:32 +00:00
9871f14f32
added exploit module bigant_server.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5503 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-15 00:58:44 +00:00
0adab629ba
Added ntp module, linux egghunter
...
git-svn-id: file:///home/svn/framework3/trunk@5502 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-12 14:49:45 +00:00
477933a0a7
added exploit module lgserver_rxrlogin.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5501 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-05 23:27:33 +00:00
88a04a0ba0
New FrontPage modules from Matteo Cantoni
...
git-svn-id: file:///home/svn/framework3/trunk@5500 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-01 18:53:28 +00:00
899973b7ea
Send 404 when we can't exploit a mozilla browser so client doesn't hang.
...
git-svn-id: file:///home/svn/framework3/trunk@5497 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-26 18:10:41 +00:00
faa5f7c967
randomize_space
...
git-svn-id: file:///home/svn/framework3/trunk@5496 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-25 05:29:29 +00:00
297e4f4b4d
Fork doesn't work on windows
...
git-svn-id: file:///home/svn/framework3/trunk@5495 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-25 04:37:53 +00:00
16170bd716
Let the GUI handle -r, change default window size to fit smaller screens, updated HTTP capture code, added keywords to payload
...
git-svn-id: file:///home/svn/framework3/trunk@5491 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-22 23:20:35 +00:00
84d921633b
Fun with saved passwords
...
git-svn-id: file:///home/svn/framework3/trunk@5490 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-22 18:48:21 +00:00
70fde3052d
Place the UNC url last
...
git-svn-id: file:///home/svn/framework3/trunk@5487 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-21 22:02:39 +00:00
2084024822
Small bugfixes to HTTP capture
...
git-svn-id: file:///home/svn/framework3/trunk@5486 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-21 21:49:10 +00:00
1b96107f3a
Bugfix
...
git-svn-id: file:///home/svn/framework3/trunk@5485 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-21 21:37:40 +00:00
929888a714
Configurable HTTP capture service
...
git-svn-id: file:///home/svn/framework3/trunk@5484 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-21 21:04:11 +00:00
cg
James Lee
Patrick Webster
Mario Ceballos
HD Moore
Ramon de C Valle
Matt Miller