Chao Mu
d23a5f6092
"The GetFileSecurityA and GetFileSecurityW functions have a "RequestedInformation" that is defined as a PBLOB and should be a DWORD." - Keith Faber. Thank you Keith! see #4364
...
git-svn-id: file:///home/svn/framework3/trunk@13201 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 17:48:09 +00:00
HD Moore
cccbdf9fab
This patch allows meterpreter to work with file paths and user names that are not of the US-ASCII character set.
...
git-svn-id: file:///home/svn/framework3/trunk@13200 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 17:32:52 +00:00
Chao Mu
1e1d7c534d
"This is the first update to the Railgun Advapi32.dll Definitions. It adds some of the Windows CryptoAPI function calls." - David Maloney. see #4746
...
git-svn-id: file:///home/svn/framework3/trunk@13199 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 17:17:48 +00:00
Chao Mu
572a5a5b8b
Added method "functions" to DLLWrapper that grabs the DLL's "functions" so that people can continue to test for function existence via .functions['blah'], evne though I hate this, I want to be backwards compatible. This will be deprecated eventually
...
git-svn-id: file:///home/svn/framework3/trunk@13198 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 15:15:26 +00:00
Chao Mu
59015b2cbf
Closes Redmine issue 3073 (Railgun DLL cache/definition loader needs a rewrite). Major overhaul of how railgun handles DLLs and requests to them. def_*.rb files are now formed differently, this may break your code if you made changes to railgun/def/def_* or railgun.rb, see http://blog.minorcrash.com/2011/07/new-way-to-add-dlls-to-railgun.html
...
git-svn-id: file:///home/svn/framework3/trunk@13181 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 00:18:01 +00:00
Matt Weeks
d1cfa7560f
Update DHCP server for correctness, reliability, simplicity.
...
Actually keep track of which clients get which IP, only give PXE options to PXE clients, and provide more control over serving to PXE and/or normal clients.
git-svn-id: file:///home/svn/framework3/trunk@13165 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 02:34:25 +00:00
HD Moore
65702f64b6
Check to make sure we are running under Console2; all sorts of gremlins and threading bugs appear when running under a bare cmd.exe console, this should save us a few bug reports.
...
git-svn-id: file:///home/svn/framework3/trunk@13160 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-13 05:01:37 +00:00
Wei Chen
687aaf5c71
Apply egghunter patch (by corelanc0d3r) for DEP bypass size calculation improvement.
...
Please see #4909
git-svn-id: file:///home/svn/framework3/trunk@13153 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-12 01:06:15 +00:00
James Lee
7f743a5c1b
make meterpreter's File.basename() honor both kinds of directory seperators, use the remote basename as the dest when dest is implicit
...
git-svn-id: file:///home/svn/framework3/trunk@13124 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-08 00:08:42 +00:00
James Lee
9c8605813e
don't wait for the session to send back a response after telling it to die
...
git-svn-id: file:///home/svn/framework3/trunk@13083 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-01 23:29:00 +00:00
James Lee
56de119a0f
add a few opera fingerprints gathered from http://www.giac.org/paper/gwapt/1353/client-fingerprinting-analysis-browser-scripting-environment/115300
...
git-svn-id: file:///home/svn/framework3/trunk@13082 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-01 23:20:31 +00:00
Tod Beardsley
0818a856b6
Some fixups for some new AuthBrute hotness.
...
git-svn-id: file:///home/svn/framework3/trunk@13075 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-30 06:52:52 +00:00
HD Moore
7d9f36d4b9
Adds support for the new regloadkey/regunloadkey operations.
...
git-svn-id: file:///home/svn/framework3/trunk@13072 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-30 05:35:18 +00:00
James Lee
5f5c024193
supress a useless exception (trying to close a closed stream)
...
git-svn-id: file:///home/svn/framework3/trunk@13071 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-30 05:12:07 +00:00
HD Moore
92bb531af5
New bins, new functions, more info soon
...
git-svn-id: file:///home/svn/framework3/trunk@13059 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-29 06:12:03 +00:00
HD Moore
a98602ed8d
Shut down properly through session.kill
...
git-svn-id: file:///home/svn/framework3/trunk@13055 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-28 21:38:24 +00:00
HD Moore
9220506ba2
Merge in recent meterpreter work. These are not the commits you are looking for (more info on what all this is later this week).
...
git-svn-id: file:///home/svn/framework3/trunk@13053 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-28 21:26:43 +00:00
HD Moore
5bbf27bf5b
Woops, this may not have a prompt accessor, find another way
...
git-svn-id: file:///home/svn/framework3/trunk@13029 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-25 20:33:15 +00:00
HD Moore
da7cc53c38
Add the spool command for redirecting output to both the console and a file
...
git-svn-id: file:///home/svn/framework3/trunk@13028 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-25 18:51:07 +00:00
HD Moore
40b9b2467b
Remove the downgrade until we figure out the cause, getting different results for the same OS/SP/configuration
...
git-svn-id: file:///home/svn/framework3/trunk@12991 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 01:12:17 +00:00
HD Moore
c42ea1f896
Re-enable the workaround for now, see #4785
...
git-svn-id: file:///home/svn/framework3/trunk@12989 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 23:38:30 +00:00
HD Moore
ab615c1225
Reference the ticket in this comment: See #4785
...
git-svn-id: file:///home/svn/framework3/trunk@12987 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 23:32:29 +00:00
HD Moore
346018c321
Disable NTLMv2 Session for Windows 2000 servers
...
git-svn-id: file:///home/svn/framework3/trunk@12984 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 22:54:13 +00:00
HD Moore
092817d449
Finally merging Cachedump into the SVN tree. Thanks to everyone who helped and again for their patience
...
git-svn-id: file:///home/svn/framework3/trunk@12946 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-15 01:06:22 +00:00
Joshua Drake
cb98e40725
Add support for ignoring non-executable Mach-O binary segments
...
git-svn-id: file:///home/svn/framework3/trunk@12940 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-14 15:23:32 +00:00
HD Moore
db413592e9
This commit adds support for the -r (remote machine name) parameter to the reg command and extends the api to support a remote machine name. Closes #1894
...
git-svn-id: file:///home/svn/framework3/trunk@12924 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-12 00:01:29 +00:00
HD Moore
6dd65e56f2
All changes look good, merging
...
git-svn-id: file:///home/svn/framework3/trunk@12921 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-11 23:17:42 +00:00
HD Moore
c3307c80be
Fixes #1733 by merging in Danilo Nascimento's patch. Thanks!
...
git-svn-id: file:///home/svn/framework3/trunk@12919 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-11 23:01:11 +00:00
Joshua Drake
a8d177ec35
Revert r12910, conflict-o oops-o
...
git-svn-id: file:///home/svn/framework3/trunk@12911 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-11 18:53:39 +00:00
Joshua Drake
3ac9854e88
Fixes #4703 : Change an assignment in the loop to append instead
...
git-svn-id: file:///home/svn/framework3/trunk@12910 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-11 18:50:33 +00:00
David Rude
54f9ea7c0d
code clean ups, fixes a bug in gadget collection, adds gadget grouping
...
git-svn-id: file:///home/svn/framework3/trunk@12909 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-11 18:38:02 +00:00
David Rude
8eaf46eca0
Add support to disable color
...
git-svn-id: file:///home/svn/framework3/trunk@12906 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 18:13:34 +00:00
David Rude
a0c2321efc
Add msfrop, a tool for collecting and ROP gadgets, features include export and import in CSV format, powerful regex searching
...
git-svn-id: file:///home/svn/framework3/trunk@12904 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 12:54:01 +00:00
James Lee
9d99b9de22
fix a logic error that results in sockets closing instead of resending data, really fixes #4642 ; also fixes a nil error when read() failed, makes logs actually useful
...
git-svn-id: file:///home/svn/framework3/trunk@12885 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-08 21:36:34 +00:00
James Lee
96b568d65b
add a tool for list all modules by rank, fixes #4333 , fixes #4334 , thanks David Maloney!
...
git-svn-id: file:///home/svn/framework3/trunk@12876 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-06 22:47:55 +00:00
David Rude
62826d3ff8
fix a bug in msfpescan and msfbinscan when handling disassembly
...
git-svn-id: file:///home/svn/framework3/trunk@12863 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-05 21:50:29 +00:00
Tod Beardsley
7b4c7d44db
Adds a Burp Session XML parser and importer. Also includes fix to Rex's HTTP header parser to ensure that it uses only unencoded regexes.
...
git-svn-id: file:///home/svn/framework3/trunk@12846 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-03 21:17:57 +00:00
James Lee
89a12add6f
always break strings into at least two pieces when splitting. Add better docs.
...
git-svn-id: file:///home/svn/framework3/trunk@12843 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-03 17:52:34 +00:00
James Lee
bee19278d7
add a new javascript obfuscation engine using rkelly for parsing. use it in browser_autopwn and ms10_018_ie_behaviors. see #1003
...
git-svn-id: file:///home/svn/framework3/trunk@12839 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-03 00:36:26 +00:00
Tod Beardsley
110f4df649
Adding a webapp vulnscanner parser for Appscan
...
git-svn-id: file:///home/svn/framework3/trunk@12826 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-02 22:16:08 +00:00
Tod Beardsley
f03ffaf13d
Fixing a stack trace when the imported site cannot be resolved.
...
git-svn-id: file:///home/svn/framework3/trunk@12825 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-02 22:12:50 +00:00
Tod Beardsley
0a7f6b8528
Adds support for importing Acunetix webvuln XML reports.
...
git-svn-id: file:///home/svn/framework3/trunk@12813 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-02 06:17:38 +00:00
David Rude
1a466da015
Handle PE dissassemly the proper way, fixes a bug when handling regex searches
...
git-svn-id: file:///home/svn/framework3/trunk@12802 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 19:53:08 +00:00
Tod Beardsley
d3f19d8777
Moving the character and cdata readers to the nokogiri mixin. They've all been the same so far.
...
git-svn-id: file:///home/svn/framework3/trunk@12800 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 17:37:54 +00:00
Tod Beardsley
8600bc5bef
Foundstone registers a fingerprint instead of directly setting os_name. Also updates the Windows version regex for mbsa. Also adds a fall-through fingerprint parser (which foundstone uses).
...
git-svn-id: file:///home/svn/framework3/trunk@12798 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 16:31:27 +00:00
Tod Beardsley
43b78a6b8f
Adds an import note for MBSA and Foundstone.
...
git-svn-id: file:///home/svn/framework3/trunk@12792 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 02:21:10 +00:00
Mario Ceballos
2e0d399262
fixes some warnings.
...
git-svn-id: file:///home/svn/framework3/trunk@12791 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 01:14:47 +00:00
Tod Beardsley
23e3d4274d
Adds a parser for MBSA XML files.
...
git-svn-id: file:///home/svn/framework3/trunk@12790 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 00:01:46 +00:00
Tod Beardsley
c94577448e
Cleans up service name normalization.
...
git-svn-id: file:///home/svn/framework3/trunk@12787 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-31 19:27:22 +00:00
Tod Beardsley
90bbacd75e
Fixes #4620 , attribute hashes are passed through a sanitizer now.
...
git-svn-id: file:///home/svn/framework3/trunk@12786 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-31 19:01:54 +00:00