Commit Graph

164 Commits (81b677820c7077545199d751ee6927f0306e0ddf)

Author SHA1 Message Date
HD Moore ab2654f3a0 Defaults for airpcap
git-svn-id: file:///home/svn/framework3/trunk@5229 4d416f70-5f16-0410-b530-b9f4589650da
2007-12-29 23:15:30 +00:00
Matt Miller dc23f5b8dc default to first architecture in architecture array for egghunter, fixes #148
git-svn-id: file:///home/svn/framework3/trunk@5131 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-02 03:24:21 +00:00
HD Moore ceb69bb541 Overhaul of the ruby-lorcon module to match pylorcon.
git-svn-id: file:///home/svn/framework3/trunk@5124 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-28 06:51:32 +00:00
HD Moore 7498562eb5 Add proxy support to HTTP mixin using modules. Fix socks proxy support.
git-svn-id: file:///home/svn/framework3/trunk@5113 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 04:44:44 +00:00
HD Moore 1f2791494b General cleanups, bug fixes, removal of debugging statements.
git-svn-id: file:///home/svn/framework3/trunk@5051 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-16 02:17:32 +00:00
HD Moore e4e674003d Correct the super() call in http's regenerate_payload()
git-svn-id: file:///home/svn/framework3/trunk@5025 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 13:40:45 +00:00
HD Moore 0c6d0e5941 This code IS in a mixin now, remove the old comment :)
git-svn-id: file:///home/svn/framework3/trunk@5024 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:39:58 +00:00
HD Moore 30bf0667d8 cosmetic
git-svn-id: file:///home/svn/framework3/trunk@5023 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:39:18 +00:00
HD Moore ddadf74a85 Fix a typo that could break regenerate_payload
git-svn-id: file:///home/svn/framework3/trunk@5022 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:38:56 +00:00
HD Moore a21ec0a73c Updating the php_include_url function to figure out the server address a little bit better.
git-svn-id: file:///home/svn/framework3/trunk@5019 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:26:28 +00:00
HD Moore d0b15d3d72 Lots of SMB fun, all preparation for Black Hat talk :-) More to come...
git-svn-id: file:///home/svn/framework3/trunk@5015 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:20:50 +00:00
HD Moore c45e9b957a This adds suppor for the LSA open policy call for dcerpc exploits
git-svn-id: file:///home/svn/framework3/trunk@4985 4d416f70-5f16-0410-b530-b9f4589650da
2007-06-09 02:26:35 +00:00
HD Moore 88d3193020 Removed the old pcap mixin, replaced with Capture, updated the test_pcap module
git-svn-id: file:///home/svn/framework3/trunk@4860 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-04 02:56:35 +00:00
HD Moore 6ac3d5a5cc Prints the banner during connect() now
git-svn-id: file:///home/svn/framework3/trunk@4837 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-02 03:40:46 +00:00
HD Moore 4d1c274387 Merging all of the auxilliary/scanner related features
git-svn-id: file:///home/svn/framework3/trunk@4749 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-24 06:27:39 +00:00
Matt Miller 0801d3989f fix for handler issue in udp exploits
git-svn-id: file:///home/svn/framework3/trunk@4700 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-16 16:20:59 +00:00
HD Moore 1bb398de59 Adding the Microsoft DNS service exploit, targetting Windows 2000
git-svn-id: file:///home/svn/framework3/trunk@4677 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-14 07:16:33 +00:00
HD Moore fdd9f96145 Adds endpoint mapper and management interface support to the DCERPC exploit mixin
git-svn-id: file:///home/svn/framework3/trunk@4676 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-14 05:22:22 +00:00
Matt Miller a319b8e582 got rid of duplicated code in browser exploits, fixes #71
git-svn-id: file:///home/svn/framework3/trunk@4642 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-04 02:04:37 +00:00
Matt Miller b74311c71d initial integration of alex's heaplib, and a port of the keyframe exploit
git-svn-id: file:///home/svn/framework3/trunk@4635 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-03 07:35:54 +00:00
HD Moore dd2e9d87fb This adds SMTPDeliver exploit mixin, the SMTP version of the ANI exploit, accessor to Ole::Storage
git-svn-id: file:///home/svn/framework3/trunk@4608 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-02 05:27:19 +00:00
Matt Miller f9d8c4e820 modifications to support using an explicit target to regen payloads
git-svn-id: file:///home/svn/framework3/trunk@4602 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-01 21:21:10 +00:00
HD Moore 9c3bfaeee4 Imported the OLE modules from ruby-msg (GPLv2)
git-svn-id: file:///home/svn/framework3/trunk@4541 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-20 16:49:34 +00:00
Matt Miller 449ca3c826 check to ensure that the step is valid as it will be normalized
git-svn-id: file:///home/svn/framework3/trunk@4525 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-12 00:35:02 +00:00
HD Moore b5e0a70528 Cleanup debugging statement
git-svn-id: file:///home/svn/framework3/trunk@4517 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-11 02:04:35 +00:00
HD Moore d3ff922169 Disable BruteStep for now, its still broken
git-svn-id: file:///home/svn/framework3/trunk@4516 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-11 01:43:51 +00:00
HD Moore 547ec3c6c6 This patch adds header folding, fixed hex-random and u-random encoding, fake uri end, fake uri parameters. This fixes #16, the remaining two options (chunked and pipelining), will be added in a future version.
git-svn-id: file:///home/svn/framework3/trunk@4513 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-10 05:58:14 +00:00
HD Moore 41809d5f0a Rescue Timeout and Runtime errors from the HTTP client. This fixes #42.
git-svn-id: file:///home/svn/framework3/trunk@4512 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-10 03:51:58 +00:00
Matt Miller c61e0e8931 change the behavior of nil non-required options, fixes #49
git-svn-id: file:///home/svn/framework3/trunk@4509 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-09 06:12:28 +00:00
HD Moore e6f221ad80 Major updates to the HTTP api, re-addition of HTTP evasion, see #16
git-svn-id: file:///home/svn/framework3/trunk@4506 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-08 14:08:41 +00:00
HD Moore 88cc653478 The HTTP api now catches SIGPIPEs and just returns a nil response
git-svn-id: file:///home/svn/framework3/trunk@4483 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-27 09:31:23 +00:00
HD Moore 7087457f9e A few more updates to the HTTP exploit mixin, still needs some work before it is completed
git-svn-id: file:///home/svn/framework3/trunk@4481 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-27 09:15:53 +00:00
HD Moore 6d4c234187 Fix a problem where a dcerpc exploit will only work once before the framework must be reloaded
git-svn-id: file:///home/svn/framework3/trunk@4476 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-26 17:38:01 +00:00
Matt Miller d4a739f85a fixes #1
git-svn-id: file:///home/svn/framework3/trunk@4435 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 12:08:11 +00:00
HD Moore 24f0608974 Update the smb/dcerpc mixins to use the newly named options
git-svn-id: file:///home/svn/framework3/trunk@4430 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 07:06:30 +00:00
HD Moore 1d1f55f9e9 Added CHOST/CPORT as advanced options. Split out uncommon SMB options as advanced
git-svn-id: file:///home/svn/framework3/trunk@4429 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 07:02:47 +00:00
HD Moore 9826b57b11 Added capture mixin (going to replace pcap)
git-svn-id: file:///home/svn/framework3/trunk@4393 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-15 21:14:36 +00:00
HD Moore 52b0f8c2aa More code from alex
git-svn-id: file:///home/svn/framework3/trunk@4392 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-15 21:14:11 +00:00
HD Moore 0012389ba0 Adds support for bind payloads in passive exploits
git-svn-id: file:///home/svn/framework3/trunk@4281 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-18 03:51:15 +00:00
Matt Miller d63d365af2 svnserve
git-svn-id: file:///home/svn/framework3/trunk@4265 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-05 06:38:24 +00:00
HD Moore 68274d6870 PHP tags are now added by the php_include handler and no longer a part of the payloads themselves
git-svn-id: file:///home/svn/framework3/trunk@4254 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-05 03:31:18 +00:00
Matt Miller 851f2ccb29 fix for connect_login
git-svn-id: file:///home/svn/framework3/trunk@4243 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-29 11:33:16 +00:00
HD Moore 2bc1d4be18 Updates to the client API
git-svn-id: file:///home/svn/framework3/trunk@4242 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 23:42:54 +00:00
HD Moore 804df25240 Initial overhaul of the HTTP client api. This removes nearly all of the client evasion methods, but leaves the code in a great state to reimplement them with less issues.
git-svn-id: file:///home/svn/framework3/trunk@4222 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-19 07:11:55 +00:00
HD Moore 239fe1e8ae Removing the obsolete evasion levels API
git-svn-id: file:///home/svn/framework3/trunk@4221 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-19 04:32:07 +00:00
HD Moore ffc626675b Initial support for PHP payloads
git-svn-id: file:///home/svn/framework3/trunk@4215 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:57:51 +00:00
Matt Miller ddd40907d5 fix for service management issue with tcp server/http server mixins
git-svn-id: file:///home/svn/framework3/trunk@4213 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:12:04 +00:00
Matt Miller d16a368ea2 fix for tcp server/http server compat
git-svn-id: file:///home/svn/framework3/trunk@4210 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 06:49:04 +00:00
HD Moore 6fef5abeda Resolve a crash bug in the send_response_html() method
Add the MS06_013 CreateTextRange() exploit



git-svn-id: file:///home/svn/framework3/trunk@4208 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 02:34:27 +00:00
Matt Miller fb161fc3dd ported putty exploit, untested
git-svn-id: file:///home/svn/framework3/trunk@4198 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-14 02:20:21 +00:00