73bd4f7de2
added exploit module symantec_consoleutilities_browseandsavefile.rb from Nikolas Sotiriu.
...
git-svn-id: file:///home/svn/framework3/trunk@7328 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 21:02:45 +00:00
7da02115c6
Fixes #453 - 'spoof' the real readline to prevent future requires from loading it
...
git-svn-id: file:///home/svn/framework3/trunk@7327 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 20:18:49 +00:00
ac14e84eb6
See #434 . Fixes up the last of the modules using the wrong Timeout exception class
...
git-svn-id: file:///home/svn/framework3/trunk@7326 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 18:22:50 +00:00
1b5cc24eab
See #434 . Some libraries used the wrong exception class
...
git-svn-id: file:///home/svn/framework3/trunk@7325 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 18:20:02 +00:00
e067823372
See #434 . A few modules that used the wrong Timeout syntax as well
...
git-svn-id: file:///home/svn/framework3/trunk@7324 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 18:16:51 +00:00
075b8c5fa4
Fixes #434 . Always use Timeout.timeout() -- on Ruby 1.9 this results in the Timeout::TimeoutError exception vs RuntimeError
...
git-svn-id: file:///home/svn/framework3/trunk@7323 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 18:14:57 +00:00
80a262f991
Fixes #423 . Using /s on a regex forces an encoding that cant match random binary gibberish
...
git-svn-id: file:///home/svn/framework3/trunk@7322 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 17:59:45 +00:00
f38b43f236
Specify the language as none
...
git-svn-id: file:///home/svn/framework3/trunk@7321 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 17:10:06 +00:00
176996fe61
Fixes #452 . Solves a number of crashes caused by Regexp.new() on 1.9 without an explicit language specified
...
git-svn-id: file:///home/svn/framework3/trunk@7320 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 17:09:13 +00:00
c0a0507fdf
Fixes #441 . Unpack the version in a way that works with 1.9
...
git-svn-id: file:///home/svn/framework3/trunk@7319 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 15:09:54 +00:00
c0758f7bc6
Do not randomize the PDF version (breaks Acrobat 9x)
...
git-svn-id: file:///home/svn/framework3/trunk@7318 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 14:41:59 +00:00
f13903f39b
Fixes #442 . Switch capture to work like lorcon2, works around a blocking issue with ruby 1.9
...
git-svn-id: file:///home/svn/framework3/trunk@7317 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 14:36:53 +00:00
54f952129a
A fresh build of the x64 meterpreter and extensions to sync up with the recent changes with SSL in #7311 and the addition of the rm/del command from #7291
...
git-svn-id: file:///home/svn/framework3/trunk@7316 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 16:49:01 +00:00
21e82d8b69
This patch implements a much more flexible executable creation scheme at the cost of exe size. This also adds the "-x" option to msfencode, allowing the user to specify their own executable template for generation.
...
git-svn-id: file:///home/svn/framework3/trunk@7315 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 04:11:43 +00:00
2c15be2100
Make a copy of the win32 exe template
...
git-svn-id: file:///home/svn/framework3/trunk@7314 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 03:19:20 +00:00
fdce355f3b
Option NoDetailMessages added
...
git-svn-id: file:///home/svn/framework3/trunk@7313 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 01:09:53 +00:00
fbbbde55f2
Fix #443 . This module should not be use as a directory scanner as there are more suitable modules for such task. This specific module is only made to test a specific vulnerability and will be mode to a per directory check instead of trying to identify directories requiring authentication to be bypassed
...
git-svn-id: file:///home/svn/framework3/trunk@7312 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 00:59:41 +00:00
e5e89906d0
Switch the meterpreter to SSLv3 and try to generate a slightly more realistic CN for the certificate. The goal is to work through a wider range of inline proxies.
...
git-svn-id: file:///home/svn/framework3/trunk@7311 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-31 20:44:23 +00:00
02c3bc232b
Typo
...
git-svn-id: file:///home/svn/framework3/trunk@7310 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 17:05:18 +00:00
1ca1e1cc84
Use the payload as the ICMP tag check
...
git-svn-id: file:///home/svn/framework3/trunk@7309 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 17:04:21 +00:00
f89085fd20
Check the icmp echo ID
...
git-svn-id: file:///home/svn/framework3/trunk@7308 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 16:50:45 +00:00
670ee7c238
Fix an invalid next
...
git-svn-id: file:///home/svn/framework3/trunk@7307 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 16:46:52 +00:00
3d6687902a
Adds two modules that re-implement the rogue network tools project as metasploit auxiliary modules.
...
git-svn-id: file:///home/svn/framework3/trunk@7306 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 07:36:00 +00:00
f347e561db
Two very basic HTTP request fuzzers, based on module code from nullthreat, ported to the new API
...
git-svn-id: file:///home/svn/framework3/trunk@7305 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-29 21:45:50 +00:00
3faf72dd97
Perform a test RPC call on each discovered interface
...
git-svn-id: file:///home/svn/framework3/trunk@7304 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-29 19:00:34 +00:00
4f3128c061
Stop randomizing the module version, it breaks Acrobat 9
...
git-svn-id: file:///home/svn/framework3/trunk@7303 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-29 04:09:07 +00:00
20be000d47
Wmap able to load exploits and check for vulnerabilities. Next step exploit if vulnerable
...
git-svn-id: file:///home/svn/framework3/trunk@7302 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-29 03:16:27 +00:00
ef302da508
Allow the interrupt exception to still propogate up
...
git-svn-id: file:///home/svn/framework3/trunk@7301 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 19:39:16 +00:00
b444fdfa33
Handles fatal exceptions and prevents the framework from exiting, fixes #424
...
git-svn-id: file:///home/svn/framework3/trunk@7300 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 19:37:43 +00:00
8377077297
Huide the error output from stty execs. Fixes #426
...
git-svn-id: file:///home/svn/framework3/trunk@7299 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 19:37:19 +00:00
3cf4329335
Updates the autopwn matching algorithm to use multiple ports and service names
...
git-svn-id: file:///home/svn/framework3/trunk@7298 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 18:04:50 +00:00
a41b1db7de
Autofilter based on existence of the softcart cgi
...
git-svn-id: file:///home/svn/framework3/trunk@7297 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 18:02:37 +00:00
aa09862813
Fixes #401 . Ends up Windows NT doesn't like DCERPC requests to be partially written by SMB writes, this patches the min write size to be at least as big as the DCERPC request. The DCERPC::max_frag_size parameter can still be used for more evasion.
...
[*] Started reverse handler
[*] Detected a Windows NT 4.0 target
[*] Adjusting the SMB/DCERPC parameters for Windows NT
[*] Binding to 4b324fc8-1670-01d3-1278-5a47bf6ee188:3.0@ncacn_np:192.168.0.128[\BROWSER] ...
[*] Bound to 4b324fc8-1670-01d3-1278-5a47bf6ee188:3.0@ncacn_np:192.168.0.128[\BROWSER] ...
[*] Building the stub data...
[*] Calling the vulnerable function...
[*] Sending stage (719360 bytes)
[*] Meterpreter session 1 opened (192.168.0.136:4444 -> 192.168.0.128:1485)
meterpreter > sysinfo
Computer: VMNT4
OS : Windows NT 4.0 (Build 1381, Service Pack 6).
Arch : x86
Language: en_US
git-svn-id: file:///home/svn/framework3/trunk@7296 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 16:37:18 +00:00
bffb98ba9f
Add XP SP3 target for WarFTPD.
...
git-svn-id: file:///home/svn/framework3/trunk@7295 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 10:29:41 +00:00
9141d4e967
Condense the lorcon2 each_packet method, the queue isnt necessary after testing
...
git-svn-id: file:///home/svn/framework3/trunk@7294 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 01:41:17 +00:00
31276e1626
Fixes #427 . Finally found a solution that works for 1.8 and 1.9, this allows lorcon modules to run in the background or foreground and handle interrupts from the console gracefully. Its still a hack
...
git-svn-id: file:///home/svn/framework3/trunk@7293 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 00:19:17 +00:00
7b22b2cc04
Mostly working codebase, still hanging on some instances, depends on latest svn of lorcon2. See #427
...
git-svn-id: file:///home/svn/framework3/trunk@7292 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-27 20:13:20 +00:00
5234fe8ff8
Fixes 416. Adds the rm/del commands to meterpreter, fixes build problems triggered by the POSIX code merge
...
git-svn-id: file:///home/svn/framework3/trunk@7291 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-27 02:31:07 +00:00
276a3f8052
Use _WIN32 instead of __WIN32__ to be consistent
...
git-svn-id: file:///home/svn/framework3/trunk@7290 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-27 01:13:35 +00:00
6dcffd0373
Catch attempts to migrate to a name vs a pid
...
git-svn-id: file:///home/svn/framework3/trunk@7289 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-27 00:56:56 +00:00
8d8bc45dfd
Adds a shortcut for getting a shell (execute -f cmd -c -i -H) is now just "shell"
...
git-svn-id: file:///home/svn/framework3/trunk@7288 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-27 00:47:00 +00:00
3b99a513ec
Fixes #352 and fixes #350 . Can no longer reproduce memory corruption or packet loss with this code
...
git-svn-id: file:///home/svn/framework3/trunk@7287 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 22:49:43 +00:00
b662d044a6
Fixes #412 . Still an issue with lorcon not yielding back when there is no traffic, but this is a different bug
...
git-svn-id: file:///home/svn/framework3/trunk@7286 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 22:36:24 +00:00
ddeb80e0da
See #412 . Fix compile warnings and errors on 1.9, still needs testing
...
git-svn-id: file:///home/svn/framework3/trunk@7285 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 21:09:40 +00:00
e1559b1ab4
Fixes #408 . Trims leads spaces, adds trailing space, prevents line wipe when tab completing is done
...
git-svn-id: file:///home/svn/framework3/trunk@7284 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 20:33:55 +00:00
5eed9deb2d
Adds the joomla TinyMCE file upload exploit from spinbad.
...
git-svn-id: file:///home/svn/framework3/trunk@7283 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 20:00:39 +00:00
5e137e92fd
Fixes #381 . To scan for TLSv1 only services, set SSLVersion TLS1
...
git-svn-id: file:///home/svn/framework3/trunk@7282 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 19:48:15 +00:00
478a7ce8ab
Fixes #410 . Calls the real _close function, not the best solution, but will do until we fix the IO::Stream override.
...
git-svn-id: file:///home/svn/framework3/trunk@7281 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 19:06:50 +00:00
91dd38550f
Fixes #398 . Allow globals to override local defaults, but fallthrough to local defaults if no global or local is set
...
git-svn-id: file:///home/svn/framework3/trunk@7280 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 18:48:06 +00:00
bbb85ceb2c
Updated userguide and latex file to match copyright and links
...
git-svn-id: file:///home/svn/framework3/trunk@7279 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 18:04:49 +00:00
Mario Ceballos
HD Moore
Stephen Fewer
et