2b85ceb4c1
added exploit modules base_qry_common.rb and mambo_cache_lite.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7210 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 15:01:10 +00:00
bac233108f
added exploit modules ms_visual_studio_msmask.rb and ms_visual_basic_vbp.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7208 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 12:58:03 +00:00
03b753fd12
Fixes #360 . Report each path individually
...
git-svn-id: file:///home/svn/framework3/trunk@7207 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 10:55:11 +00:00
a73df955a3
Move the email collector into the gather directory
...
git-svn-id: file:///home/svn/framework3/trunk@7206 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 04:59:55 +00:00
9004887009
Three new modules from Carlos Perez
...
git-svn-id: file:///home/svn/framework3/trunk@7205 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 04:58:50 +00:00
5524e9aae2
Fixed #370 . Test if uploaded file exists
...
git-svn-id: file:///home/svn/framework3/trunk@7203 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 00:02:54 +00:00
6ce7011cba
Fixed #369 . Added RHOST info and second round to determine error page
...
git-svn-id: file:///home/svn/framework3/trunk@7202 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 23:26:58 +00:00
df414a4904
Add the 'sa' with blank password CVE and vulnerability references, since the default configuratino of the MSSQL mixin exploits just that.
...
git-svn-id: file:///home/svn/framework3/trunk@7201 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 22:05:19 +00:00
45280f85a5
Fix a looping issue with the new lyris module
...
git-svn-id: file:///home/svn/framework3/trunk@7199 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 21:51:45 +00:00
36fee594ba
Adds coverage for the old Lyris ListManager predictable sa password flaw
...
git-svn-id: file:///home/svn/framework3/trunk@7198 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 21:46:29 +00:00
9ce45face4
add advanced option for setting ipid sample size
...
git-svn-id: file:///home/svn/framework3/trunk@7197 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 21:22:55 +00:00
f90a222fa0
better vnc protocol parsing, fixes #374
...
git-svn-id: file:///home/svn/framework3/trunk@7196 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:59:35 +00:00
4ac27c9803
Consolidate common APIs into the mixin
...
git-svn-id: file:///home/svn/framework3/trunk@7195 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:58:01 +00:00
6a818c0c64
Fixed #371 . Included target information
...
git-svn-id: file:///home/svn/framework3/trunk@7194 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:51:47 +00:00
6cfd1675c4
Fixed #375 . Removed the module as frontpage_login provides same information
...
git-svn-id: file:///home/svn/framework3/trunk@7193 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:45:30 +00:00
c501187ca4
Fixed typo #368 .
...
git-svn-id: file:///home/svn/framework3/trunk@7192 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:39:40 +00:00
bfd359f0d8
Fixed #367 . Adder error code detection and signatures
...
git-svn-id: file:///home/svn/framework3/trunk@7191 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:37:40 +00:00
f085e7cf59
Remove generic modules at this time, until proxy is created and then it can be proxy modules.
...
git-svn-id: file:///home/svn/framework3/trunk@7190 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:23:33 +00:00
249cc10cf5
Fixed #365 . Added signatures and error code detection
...
git-svn-id: file:///home/svn/framework3/trunk@7189 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:18:22 +00:00
814675f952
Changed variable name for consistency purposes
...
git-svn-id: file:///home/svn/framework3/trunk@7188 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:01:43 +00:00
dc415c76ca
Fixes #364 . Added error message detection and signatures
...
git-svn-id: file:///home/svn/framework3/trunk@7187 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 19:46:30 +00:00
f85c522a07
don't try to parse an empty banner, fixes #373
...
git-svn-id: file:///home/svn/framework3/trunk@7186 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 18:23:19 +00:00
4d4c0905ef
Slightly improved error handling for auxiliary and exploit modules. Improved brute forcing mode for mssql_login. Serious errors (broken code, etc) are bubbled up in auxiliary scanners now. Fixes #384 by reading wordlists one line at a time and not buffering
...
git-svn-id: file:///home/svn/framework3/trunk@7185 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 18:03:02 +00:00
e72b347794
Add a remote Vista kernel DoS against the srv2.sys driver. This issue was fixed with MS09-050 but does not appear to be referenced in the advisory so was either silently or inadvertently fixed.
...
git-svn-id: file:///home/svn/framework3/trunk@7184 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 15:41:51 +00:00
5ea99ac421
Remove from the db_autopwn set for now
...
git-svn-id: file:///home/svn/framework3/trunk@7183 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 09:31:17 +00:00
bee78d3b51
First round of fixes for wmap modules
...
git-svn-id: file:///home/svn/framework3/trunk@7181 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 07:10:32 +00:00
d3aa513773
Fixes #339 . Cleans up author names for the most part - there are still some stragglers, but this should fix up the frequent contributors
...
git-svn-id: file:///home/svn/framework3/trunk@7173 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-17 05:55:15 +00:00
378b7f29d5
added exploit modules talkative_response.rb, blazedvd_plf.rb, vuplayer_cue.rb and vuplayer_m3u.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7170 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-16 17:02:44 +00:00
37fa36ed12
fix a typo.
...
git-svn-id: file:///home/svn/framework3/trunk@7169 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-16 16:51:16 +00:00
7e1c769eef
added exploit modules poppeeper_uidl.rb and poppeeper_date.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7168 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 18:04:58 +00:00
62dc4c74d7
added activepdf_webgrabber.rb, etrust_pestscan.rb, ea_checkrequirements.rb and mcafee_hercules_deletesnapshot.rb exploit modules.
...
git-svn-id: file:///home/svn/framework3/trunk@7167 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 15:22:16 +00:00
90504e3ea7
Fix email formatting
...
git-svn-id: file:///home/svn/framework3/trunk@7165 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 12:29:07 +00:00
6e95d1f637
Detect when xp_cmdshell is disabled and re-enable it
...
git-svn-id: file:///home/svn/framework3/trunk@7164 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 12:14:28 +00:00
c4bfae59aa
Minor cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@7163 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 01:44:00 +00:00
59676df4db
Adds ReL1K's mssql_payload module
...
git-svn-id: file:///home/svn/framework3/trunk@7162 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 21:11:28 +00:00
cd2968a32a
Updated mssql_sql and backend mixin, can handle most column types and is somewhat usable as a mssql client
...
git-svn-id: file:///home/svn/framework3/trunk@7159 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 17:41:12 +00:00
aae4ac74c1
more adjusting of the cve entries.
...
git-svn-id: file:///home/svn/framework3/trunk@7157 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 12:56:13 +00:00
8e365c17fa
fixed the cve entrys.
...
git-svn-id: file:///home/svn/framework3/trunk@7156 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 11:45:14 +00:00
aee16a85ab
fixed the cve entry.
...
git-svn-id: file:///home/svn/framework3/trunk@7155 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 11:28:50 +00:00
a782a68c42
Complete overhaul of the MSSQL API, fixes 1.9 compat issues and makes the MSSQL testing easier
...
git-svn-id: file:///home/svn/framework3/trunk@7154 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-13 22:24:47 +00:00
63ad9ebf27
added exploit module aol_icq_downloadagent.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7153 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-13 17:04:05 +00:00
5d9f3323e8
Last two reference updates from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@7150 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-12 14:42:51 +00:00
26db223636
OSVDB reference update from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@7149 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-12 14:39:51 +00:00
a8ccd1fe98
updated references with bid/cve.
...
git-svn-id: file:///home/svn/framework3/trunk@7148 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-12 12:39:15 +00:00
5b6f16a0f9
added exploit modules athocgov_completeinstallation.rb and symantec_iao.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7147 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-12 12:31:52 +00:00
09ec91d9bf
Use name convention
...
git-svn-id: file:///home/svn/framework3/trunk@7146 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 23:07:34 +00:00
c14bd99aff
Base for an error based sql inj. scanner
...
git-svn-id: file:///home/svn/framework3/trunk@7145 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:52:54 +00:00
95bf9f84f7
Basic robots scanner for wmap
...
git-svn-id: file:///home/svn/framework3/trunk@7144 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:48:25 +00:00
97ae32a318
Minor display changes
...
git-svn-id: file:///home/svn/framework3/trunk@7143 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:40:57 +00:00
ec00f69e66
Subversion scanner
...
git-svn-id: file:///home/svn/framework3/trunk@7142 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 20:49:34 +00:00
1cadfa4ea7
added exploit module amaya_bdo.rb from dookie.
...
git-svn-id: file:///home/svn/framework3/trunk@7136 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-10 21:51:25 +00:00
3d68290b8c
Try both snmp1 and snmp2
...
git-svn-id: file:///home/svn/framework3/trunk@7132 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-06 23:20:36 +00:00
bd0b0b454e
deregister unused (not user-settable) options
...
git-svn-id: file:///home/svn/framework3/trunk@7130 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-06 05:37:36 +00:00
f21e3c8754
svn:keywords run
...
git-svn-id: file:///home/svn/framework3/trunk@7128 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-04 23:38:06 +00:00
65e57f209a
added exploit modules xlink_nfsd.rb, xlink_client.rb and xlink_server.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7123 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-03 23:05:44 +00:00
b42cc67e54
Fixes the ASN.1 parser to work with ruby 1.9.1
...
git-svn-id: file:///home/svn/framework3/trunk@7121 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-03 19:48:15 +00:00
e23925ed27
Updated the path check to use the Rex method designed for this. Eventually we need to switch this to use zip/filesystem (under lib/)
...
git-svn-id: file:///home/svn/framework3/trunk@7104 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-01 13:28:38 +00:00
6b8dcdced4
add a dependency check for the existence of the zip command. Thanks Donna Hawthorne for the bug report.
...
git-svn-id: file:///home/svn/framework3/trunk@7102 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-01 05:46:34 +00:00
3dd0e972e0
added exploit module emc_appextender_keyworks.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7101 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-01 02:13:16 +00:00
aecbf12b5b
Fix up the oracle module, remove syntax error, clean up output, only use one connection
...
git-svn-id: file:///home/svn/framework3/trunk@7099 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-30 21:44:54 +00:00
7abd2fe06f
Correct tab indents (from spaces), cosmetic fixes, remove useless rescue, spelling fix in description (thanks rmkml!)
...
git-svn-id: file:///home/svn/framework3/trunk@7098 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-30 21:04:54 +00:00
acf828461c
updated oraenum.rb with an additional wordlist.
...
git-svn-id: file:///home/svn/framework3/trunk@7093 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-29 21:58:01 +00:00
b4a291f430
added auxiliary module oraenum.rb from Carlos Perez.
...
git-svn-id: file:///home/svn/framework3/trunk@7088 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 23:13:06 +00:00
07efe98f6d
Whitespace and svn properties set
...
git-svn-id: file:///home/svn/framework3/trunk@7087 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 10:54:07 +00:00
360cdaab2e
rename the smb2 module to something more specific.
...
git-svn-id: file:///home/svn/framework3/trunk@7086 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 10:23:28 +00:00
50bd91688c
Add coverage for the SMBv2 vuln.
...
git-svn-id: file:///home/svn/framework3/trunk@7085 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 08:12:30 +00:00
53e3f166f8
make x86/nonupper raise the right exception type, prettify some formatting
...
git-svn-id: file:///home/svn/framework3/trunk@7083 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 05:23:23 +00:00
bbf2aca050
Something about the poly code in jmp_call_additive is busted. Go back to the old static decoder stub until we can figure it out.
...
git-svn-id: file:///home/svn/framework3/trunk@7082 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 04:56:21 +00:00
9509872b4f
fixed disclosure date and removed cmd residue.
...
git-svn-id: file:///home/svn/framework3/trunk@7079 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 00:24:18 +00:00
56d4345830
updated options module
...
git-svn-id: file:///home/svn/framework3/trunk@7078 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 22:42:24 +00:00
a478c11df0
See #339
...
git-svn-id: file:///home/svn/framework3/trunk@7077 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 21:33:07 +00:00
5972666f63
See #339 . Massive cleanup of author names, make them consistent across modules
...
git-svn-id: file:///home/svn/framework3/trunk@7075 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 21:30:45 +00:00
53b0709a64
commit MC's patch to remove the unused 'req' string.
...
git-svn-id: file:///home/svn/framework3/trunk@7074 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 19:07:43 +00:00
c9efd2428c
add MC's module for the Adobe RoboHelp server vuln.
...
git-svn-id: file:///home/svn/framework3/trunk@7072 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 18:38:48 +00:00
1a220d6dc5
add java payload jsp_shell_reverse_tcp.
...
git-svn-id: file:///home/svn/framework3/trunk@7071 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 18:35:07 +00:00
af1ed06c1c
Fixes #335 . Merges change that fixes adobe_pdf_embedded_exe when HOMEPATH != C:\
...
git-svn-id: file:///home/svn/framework3/trunk@7069 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 15:02:59 +00:00
e715789e7c
fix the option description.
...
git-svn-id: file:///home/svn/framework3/trunk@7065 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-26 12:01:51 +00:00
c4594f396f
added auxiliary module timbuktu_udp.rb and exploit module timbuktu_fileupload.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7062 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-26 00:04:00 +00:00
6a7a023844
I will not commit when sleep deprived. I will not commit when sleep deprived. I will not commit...
...
git-svn-id: file:///home/svn/framework3/trunk@7061 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 06:40:42 +00:00
bc2c38c332
shave an instruction from the new allports stager
...
git-svn-id: file:///home/svn/framework3/trunk@7060 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 06:13:13 +00:00
b47b46e7c0
Set keywords
...
git-svn-id: file:///home/svn/framework3/trunk@7059 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 05:45:03 +00:00
ee9a8f4f76
Adds support for the reverse_tcp_allports stager for Windows. This payload tries to connect back on all ports, one at a time, from LPORT to 65535. This is incredibly slow (depends on the default socket timeout) and requires the user to forward all TCP ports of LHOST to a single listening port in the handler. Inspired by a few user requests and this blog post: http://clinicallyawesome.com/post/196352889/blind-connect-back-through-restrictive-firewall
...
git-svn-id: file:///home/svn/framework3/trunk@7058 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 05:44:50 +00:00
b9138f80df
Allow the user to set the interface name for scanning, this needs to get merged into the capture mixin, but this solves it for now.
...
git-svn-id: file:///home/svn/framework3/trunk@7055 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-24 03:34:04 +00:00
7d122ceb02
Fixes #269 . Specifically wrap EOFError
...
git-svn-id: file:///home/svn/framework3/trunk@7045 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-20 19:49:03 +00:00
532d80b7df
Fix modules - unpack('s') breaks on big-endian, lots of formatting issues
...
git-svn-id: file:///home/svn/framework3/trunk@7042 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-19 17:24:29 +00:00
5f650c0751
Added HP Web JetAdmin aux command exec module.
...
git-svn-id: file:///home/svn/framework3/trunk@7041 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-19 00:33:44 +00:00
b0c9e8b8e5
Added BigAnt 2.5 exploit module from Dr_IDE.
...
git-svn-id: file:///home/svn/framework3/trunk@7039 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-17 17:04:47 +00:00
e0e9ad670f
added auxiliary module osb_execqr2.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7038 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-16 12:07:07 +00:00
110e89fd19
Fix a raise() call that was printing a warning with Ruby 1.8.6
...
git-svn-id: file:///home/svn/framework3/trunk@7036 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-14 18:46:41 +00:00
e30e850ba7
shave a few bytes off of the windows stagers
...
git-svn-id: file:///home/svn/framework3/trunk@7035 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-14 08:45:01 +00:00
41aa5baa6d
Fix the check for verbose flag
...
git-svn-id: file:///home/svn/framework3/trunk@7033 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 15:43:08 +00:00
0885a7262e
Merge the DECT code from DK, clean some things up
...
git-svn-id: file:///home/svn/framework3/trunk@7032 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 15:40:33 +00:00
b0d1c2681f
Added sendmail_prescan aux dos module.
...
git-svn-id: file:///home/svn/framework3/trunk@7031 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 10:56:36 +00:00
9ace8f33eb
OSVDB references from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@7030 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 04:22:58 +00:00
782f830abf
make cd work by special-casing it to call chdir()
...
git-svn-id: file:///home/svn/framework3/trunk@7027 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 06:19:10 +00:00
0f957f236e
make cd work by special-casing it to call chdir()
...
git-svn-id: file:///home/svn/framework3/trunk@7026 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 06:11:47 +00:00
85a4f1b9db
add a simple check for the generic php exploits
...
git-svn-id: file:///home/svn/framework3/trunk@7025 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 05:24:03 +00:00
185b93bf29
Enforce max password length of 14 to avoid a default policy warning about back compat
...
git-svn-id: file:///home/svn/framework3/trunk@7024 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 03:29:51 +00:00
13f5e1c2e5
added exploit module symantec_altirisdeployment_downloadandinstall.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7023 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 22:30:01 +00:00
71d644e72e
Fix the Payload->Space to match the new max size limit for the EXE generator. Thanks for catching it MC
...
git-svn-id: file:///home/svn/framework3/trunk@7022 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 21:23:11 +00:00
7505a4568f
This commit adds a SMB 2.0 scanner - it also reports uptime and dialect version
...
git-svn-id: file:///home/svn/framework3/trunk@7021 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 15:51:06 +00:00
086d5daaba
Try again :)
...
git-svn-id: file:///home/svn/framework3/trunk@7020 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 15:20:10 +00:00
d1268286f0
Renamed to correct spelling based on the SAP service.
...
git-svn-id: file:///home/svn/framework3/trunk@7019 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 15:01:25 +00:00
63702412b0
Added exploit module sap_2005_licence from Jacopo Cervini.
...
git-svn-id: file:///home/svn/framework3/trunk@7018 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 14:59:34 +00:00
858d57acdd
Updated referencse and description
...
git-svn-id: file:///home/svn/framework3/trunk@7017 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 13:41:14 +00:00
a7afd1a6c8
Updated referencse and description
...
git-svn-id: file:///home/svn/framework3/trunk@7016 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 13:34:13 +00:00
eeefc4dd27
Fix a typo
...
git-svn-id: file:///home/svn/framework3/trunk@7015 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 02:06:46 +00:00
56b2ab3f63
Fix the Space and mistyped StackAdjustment in the metaphish merge
...
git-svn-id: file:///home/svn/framework3/trunk@7014 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 00:55:13 +00:00
232ca24b46
Updated to make it clear that 2003 is not affected (thanks for the feedback for those who tested)
...
git-svn-id: file:///home/svn/framework3/trunk@7012 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-08 20:27:41 +00:00
7006acc1a8
Cosmetic cleanup
...
git-svn-id: file:///home/svn/framework3/trunk@7011 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-08 17:48:12 +00:00
989989077a
Adds a first pass at the new SMB flaw - set the OFFSET variable to test different function table indices. This module contains some offsets/notes from my early attempts at code execution.
...
git-svn-id: file:///home/svn/framework3/trunk@7010 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-08 17:41:40 +00:00
c1aa1b5f22
updated targets list
...
git-svn-id: file:///home/svn/framework3/trunk@7006 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-05 14:54:22 +00:00
40ca641a96
Initial commit of the windows x64 meterpreter payloads!
...
git-svn-id: file:///home/svn/framework3/trunk@6997 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-03 17:47:21 +00:00
cf0f690e4d
added exploit module safenet_ike_11.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6996 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-02 22:04:35 +00:00
1184f01742
Added Aki Immonen's target for Windows 2000 SP3, thanks Aki!
...
git-svn-id: file:///home/svn/framework3/trunk@6995 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-02 21:24:34 +00:00
41ab69c600
Updated return address from Stephen Fewer, should work for a wider range now
...
git-svn-id: file:///home/svn/framework3/trunk@6994 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-01 17:34:47 +00:00
251810685f
Fix the target patch
...
git-svn-id: file:///home/svn/framework3/trunk@6993 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-01 17:22:43 +00:00
ca22f6fa98
Updated patch and return address for better compatibility with more targets
...
git-svn-id: file:///home/svn/framework3/trunk@6992 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-01 16:38:52 +00:00
660ae9444b
Adds coverage for Kingcope's new IIS FTP exploit, this is a direct port with minimal changes
...
git-svn-id: file:///home/svn/framework3/trunk@6991 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-01 15:01:57 +00:00
ff317936db
Added alcatel_omnipcx_mastercgi command execution module.
...
git-svn-id: file:///home/svn/framework3/trunk@6990 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-01 03:43:16 +00:00
161406e0a9
Added exploit fileformat module Altap Salamander PDB.
...
git-svn-id: file:///home/svn/framework3/trunk@6988 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-30 02:18:33 +00:00
e0e72f39b2
Fix up dcerpc auditor module to connect/disconnect each uuid (works much better)
...
git-svn-id: file:///home/svn/framework3/trunk@6986 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-28 18:58:47 +00:00
cbf64d76bb
Audit a TCP service to determine what DCERPC UUIDs are bound
...
git-svn-id: file:///home/svn/framework3/trunk@6985 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-28 18:51:42 +00:00
18ebd8f308
added exploit module ca_cab.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6983 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-27 23:26:31 +00:00
ab6f955873
Remove the extra \ from the c:\ path to the cmd interpreter
...
git-svn-id: file:///home/svn/framework3/trunk@6981 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-27 19:51:36 +00:00
97725a489c
Round 3 of x64 support from Stephen Fewer - new payloads!
...
git-svn-id: file:///home/svn/framework3/trunk@6980 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-27 19:29:54 +00:00
882ae5b9dd
Adds His0k4's ProFTP 2.9 FTP Client server banner overflow module
...
git-svn-id: file:///home/svn/framework3/trunk@6975 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-25 16:18:53 +00:00
56f1dc0e43
Fixes #282 . Remove extra \n
...
git-svn-id: file:///home/svn/framework3/trunk@6973 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-25 02:59:50 +00:00
cf10a62dcc
Merge in the beginnings of x64 support from Stephen Fewer
...
git-svn-id: file:///home/svn/framework3/trunk@6972 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-23 23:47:33 +00:00
b39742446a
patch added for the payload selection. thanks rmkml.
...
git-svn-id: file:///home/svn/framework3/trunk@6971 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-23 12:40:23 +00:00
fd0f4ef65b
Exploit from Kevin F. for CVE-2009-0695, a remote cmd execution flaw in the Wyse thin client platform.
...
git-svn-id: file:///home/svn/framework3/trunk@6968 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-19 18:06:03 +00:00
474ba8860f
Merges in Colin's PDF infection code from Black Hat / Defcon
...
git-svn-id: file:///home/svn/framework3/trunk@6966 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-19 14:44:43 +00:00
2247b483d9
Updated pSnuffle sniffer code from _MAX_
...
git-svn-id: file:///home/svn/framework3/trunk@6965 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-19 14:07:33 +00:00
e16647db74
make sure we're running on opera so we don't 404 on a suspicous-looking url if it isn't
...
git-svn-id: file:///home/svn/framework3/trunk@6963 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-18 05:10:11 +00:00
bd2da7c12a
revert overzealous commit
...
git-svn-id: file:///home/svn/framework3/trunk@6961 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-18 04:53:35 +00:00
08d50e0a5b
fix a bug in colorization where %c gets replaced before %cya; wouldn't have been a problem until colorization gets put back in
...
git-svn-id: file:///home/svn/framework3/trunk@6960 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-18 04:49:16 +00:00
b14a4ddf0b
Lots of shiny new NTLM goodness from Ryan Linn
...
git-svn-id: file:///home/svn/framework3/trunk@6958 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-17 20:00:05 +00:00
7d866442f0
Skip encoding when there are no badchars -- temporary solution until the encoders also look at the Compat -> RequiredCmds field.
...
git-svn-id: file:///home/svn/framework3/trunk@6957 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-17 17:42:39 +00:00
20102275ce
Updated references
...
git-svn-id: file:///home/svn/framework3/trunk@6956 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-13 22:35:42 +00:00
0a29ce88c0
Added MSB reference
...
git-svn-id: file:///home/svn/framework3/trunk@6955 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-13 19:25:02 +00:00
5a84e7b47f
Racket fix bailiwicked modules
...
git-svn-id: file:///home/svn/framework3/trunk@6950 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-11 02:49:23 +00:00
d0289671f6
Basic generic wmap modules
...
git-svn-id: file:///home/svn/framework3/trunk@6948 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-10 00:04:01 +00:00
87d59b4512
More webdav modules to grab information
...
git-svn-id: file:///home/svn/framework3/trunk@6947 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-10 00:01:38 +00:00
a92fa0b424
Add test case
...
git-svn-id: file:///home/svn/framework3/trunk@6946 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-09 23:59:44 +00:00
4070c5653b
add defanged detection mode. hurray for demoing stuff i haven't committed yet
...
git-svn-id: file:///home/svn/framework3/trunk@6940 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-06 05:56:24 +00:00
6743c5f510
added a auxiliary module that may help id potential targets for db2rcmd.rb.
...
git-svn-id: file:///home/svn/framework3/trunk@6938 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-05 21:21:45 +00:00
7fb18d6e11
Add coverage for the new nagios3 cmd execution bug
...
git-svn-id: file:///home/svn/framework3/trunk@6936 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-04 19:27:50 +00:00
f84cadd9ea
Correct the class/require name
...
git-svn-id: file:///home/svn/framework3/trunk@6929 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-01 04:02:47 +00:00
b70dad9186
Merge the new stubs for meterpreter on other platforms
...
git-svn-id: file:///home/svn/framework3/trunk@6928 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-01 03:50:40 +00:00
296703de77
Add the new metsvc singles
...
git-svn-id: file:///home/svn/framework3/trunk@6927 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-01 03:48:45 +00:00
b47226797d
Updating the whitespace to match the rest of the modules
...
git-svn-id: file:///home/svn/framework3/trunk@6925 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-31 18:02:14 +00:00
49b7dcb30c
Overhaul of the metasploit payloads from Stephen Fewer - smaller/cleaner/new hashing/support for WinNT 4.0 -> Win7 with size reductions for the stagers and minimal size increases for the singles
...
git-svn-id: file:///home/svn/framework3/trunk@6922 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-31 17:50:10 +00:00
91faadd782
Added juniper_sslvpn_ive_setupdll ActiveX exploit module.
...
git-svn-id: file:///home/svn/framework3/trunk@6921 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-30 15:47:23 +00:00
df18371123
win32exec and win32upload modules for oracle post exploitation
...
git-svn-id: file:///home/svn/framework3/trunk@6920 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-29 04:18:08 +00:00
24e1af3f74
fix a pastographical error
...
git-svn-id: file:///home/svn/framework3/trunk@6919 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 15:23:52 +00:00
7c41522004
missed one.
...
git-svn-id: file:///home/svn/framework3/trunk@6918 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 13:44:50 +00:00
6bb37bbca5
converted the current fileformat modules to use the new mixin. also added a few new ones.
...
git-svn-id: file:///home/svn/framework3/trunk@6917 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 13:43:37 +00:00
13e54d2924
print a useful error message and bail when no exploits are found
...
git-svn-id: file:///home/svn/framework3/trunk@6916 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 11:29:14 +00:00
c29af0197a
make opera_historysearch work in an iframe and speed it up so it is less likely to tip off a user
...
git-svn-id: file:///home/svn/framework3/trunk@6915 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 11:08:50 +00:00
9080dd1f0d
Added references and MSB to unicode bypass modules.
...
git-svn-id: file:///home/svn/framework3/trunk@6914 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 07:39:34 +00:00
0b9412536c
untested autopwn support for safari_metadata_archive just to have a safari vuln in the mix
...
git-svn-id: file:///home/svn/framework3/trunk@6913 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 06:38:01 +00:00
0d8ea98cdf
Added AIX SNMP Scanner Auxiliary Module.
...
git-svn-id: file:///home/svn/framework3/trunk@6912 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 04:48:36 +00:00
b5769ead52
Small corrections.
...
git-svn-id: file:///home/svn/framework3/trunk@6911 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 04:46:57 +00:00
876a80f601
Updated osvdb references from Steve Tornio, updated capture/eth_spoof modules
...
git-svn-id: file:///home/svn/framework3/trunk@6907 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-27 14:05:23 +00:00
9c9669f5d9
add php/download_exec and remove an erroneous comment from windows/download_exec
...
git-svn-id: file:///home/svn/framework3/trunk@6905 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-26 23:08:31 +00:00
021e4c7fe1
Dont spoof the apple status page, better off exploiting the browser popup
...
git-svn-id: file:///home/svn/framework3/trunk@6902 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-26 05:31:29 +00:00
9377a10094
updated description of module
...
git-svn-id: file:///home/svn/framework3/trunk@6900 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-25 18:49:26 +00:00
861f35979e
Allow for basic authentication and access control in the FTP server module
...
git-svn-id: file:///home/svn/framework3/trunk@6896 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-25 04:18:37 +00:00
466e8fe555
include dos mixin
...
git-svn-id: file:///home/svn/framework3/trunk@6890 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-24 21:01:38 +00:00
ad68502ef6
Add credit to the milw0rm exploit author
...
git-svn-id: file:///home/svn/framework3/trunk@6886 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 11:51:24 +00:00
b1c40fb3ac
Apply a patch to arp_sweep to record the mac of the hosts
...
git-svn-id: file:///home/svn/framework3/trunk@6885 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 11:47:10 +00:00
ed024f82aa
Remove the extraneous \r\n (thanks Shuyao!)
...
git-svn-id: file:///home/svn/framework3/trunk@6884 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 11:45:32 +00:00
b386afb4da
get rid of debug printing
...
git-svn-id: file:///home/svn/framework3/trunk@6883 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 09:58:13 +00:00
e805bbc3aa
remove stupid debug alert
...
git-svn-id: file:///home/svn/framework3/trunk@6882 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 08:58:51 +00:00
a467fdded7
allow autopwn sploits to specify compatible os as an array; minor refactor
...
git-svn-id: file:///home/svn/framework3/trunk@6881 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 08:43:54 +00:00
7262621d35
switch 'Version' Rev to Revision since msf doesn't handle it correctly
...
git-svn-id: file:///home/svn/framework3/trunk@6877 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 03:06:01 +00:00
d3e65b3363
svn:keywords run
...
git-svn-id: file:///home/svn/framework3/trunk@6876 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 02:55:51 +00:00
739207bf4a
merge browser_autopwn back into trunk. This changes the database schema slightly, so make sure to db_destroy and db_create before using the database features.
...
git-svn-id: file:///home/svn/framework3/trunk@6873 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 20:14:35 +00:00
750a432fd0
fix calls to new to_win32pe with correct number of arguments
...
git-svn-id: file:///home/svn/framework3/trunk@6872 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 19:23:21 +00:00
ad3e559ff9
Adds a working FTP server module
...
git-svn-id: file:///home/svn/framework3/trunk@6871 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 19:10:45 +00:00
4c4a8a764c
Let the XP SP0/SP1 and 2000 targets automatically run
...
git-svn-id: file:///home/svn/framework3/trunk@6865 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 12:59:08 +00:00
54fc8e70e2
Fixed spurious next
...
git-svn-id: file:///home/svn/framework3/trunk@6861 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 02:56:40 +00:00
ff9efe45bc
Fixed spurious next
...
git-svn-id: file:///home/svn/framework3/trunk@6860 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 02:48:00 +00:00
e70ac6cc19
Added a new set of match flags for cmd injection exploits (RequiredCmds). This reduces the number of 'bad' payloads listed for explot modules. A good example is disabling the netcat -e payloads for old Solaris exploits
...
git-svn-id: file:///home/svn/framework3/trunk@6854 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 15:20:35 +00:00
47ebd62092
Adds coverage for the DD-WRT web interface command execution flaw, adds two netcat -e payloads to work with it
...
git-svn-id: file:///home/svn/framework3/trunk@6852 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 12:56:42 +00:00
8ad948c127
Demonstrate how to send raw ethernet frames
...
git-svn-id: file:///home/svn/framework3/trunk@6851 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 10:54:24 +00:00
4691f2b0e5
added exploit module netidentity_xtierrpcpipe.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6850 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-21 01:04:48 +00:00
17d6de4247
Adds a reverse_tcp for metsvc
...
git-svn-id: file:///home/svn/framework3/trunk@6848 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 20:51:58 +00:00
529ded22ae
reverting last commit; somebody didn't cross their fingers
...
git-svn-id: file:///home/svn/framework3/trunk@6847 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 20:48:47 +00:00
c3dc1ecb55
reintegrate browser_autopwn into trunk; cross your fingers and hope this works
...
git-svn-id: file:///home/svn/framework3/trunk@6846 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 17:27:36 +00:00
e7eb7235a7
Fixes #298 . Thanks Shiyee!
...
git-svn-id: file:///home/svn/framework3/trunk@6845 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 16:07:59 +00:00
309acbaa22
Remove extraneous comma
...
git-svn-id: file:///home/svn/framework3/trunk@6833 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-18 00:27:15 +00:00
282bcb4fae
Updated with osvdb and bid references.
...
git-svn-id: file:///home/svn/framework3/trunk@6832 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-18 00:15:48 +00:00
2d319e9b5b
Updated to work better on OS X and avoid 'script is taking too long' errors on all platforms
...
git-svn-id: file:///home/svn/framework3/trunk@6830 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 23:57:59 +00:00
99bc63b11d
Adds support for Mac OS X intel (use the vforkshell payloads)
...
git-svn-id: file:///home/svn/framework3/trunk@6828 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 21:28:59 +00:00
7dcc3e5e47
Overhaul of all modules to use racket instead of scruby/packetfu
...
git-svn-id: file:///home/svn/framework3/trunk@6823 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:36:40 +00:00
3d3ea9788c
added auxiliary module login_brute.rb and oracle_default_passwords.csv.
...
git-svn-id: file:///home/svn/framework3/trunk@6819 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 14:20:22 +00:00
f8c2a203fd
OSVDB references updates from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@6812 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 16:02:24 +00:00
4f88b5a5c1
added auxiliary module sid_brute.rb and sid.txt wordlist.
...
git-svn-id: file:///home/svn/framework3/trunk@6807 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-16 00:03:50 +00:00
f151ecc0ca
Added mirc_privmsg_server exploit module.
...
git-svn-id: file:///home/svn/framework3/trunk@6806 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 11:44:55 +00:00
6005ac7c3f
added exploit module tns_service_name.rb. updated ora_ntlm_stealer.rb to use the new mixin.
...
git-svn-id: file:///home/svn/framework3/trunk@6804 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-15 03:50:45 +00:00
6624dbd5ff
Adds coverage for SBerry's Firefox 3.5 exploit (win32 only atm).
...
git-svn-id: file:///home/svn/framework3/trunk@6803 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 21:59:35 +00:00
d5a15718b5
Fix up AutoRunScript support (reflective had not been updated before being switched as default)
...
git-svn-id: file:///home/svn/framework3/trunk@6802 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 21:36:23 +00:00
55356c88e1
added auxiliary module tnscmd.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6800 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 16:48:56 +00:00
b018df89da
Some minor tweaks, looks like this module doesnt play nice with the new JS encrypter
...
git-svn-id: file:///home/svn/framework3/trunk@6799 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 11:59:33 +00:00
f897d1d3d5
Patch from jabra for enable mssql brute forcing
...
git-svn-id: file:///home/svn/framework3/trunk@6798 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 11:30:41 +00:00
212dc2f2b0
addition of oracle mixin and sql client.
...
git-svn-id: file:///home/svn/framework3/trunk@6796 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 03:55:32 +00:00
b2a0f8adf5
Comment out references for now
...
git-svn-id: file:///home/svn/framework3/trunk@6795 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 02:42:52 +00:00
298ba64734
Fix the references section
...
git-svn-id: file:///home/svn/framework3/trunk@6794 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 00:25:26 +00:00
306841cc69
Adds coverage for the new OWC ActiveX control exploit
...
git-svn-id: file:///home/svn/framework3/trunk@6792 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 23:39:42 +00:00
d84c87fa36
updated version info and disclosure date for opera_historysearch
...
git-svn-id: file:///home/svn/framework3/trunk@6788 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 23:12:25 +00:00
5fb316b383
Integrates L4teral's JS encoder/encrypter
...
git-svn-id: file:///home/svn/framework3/trunk@6784 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 22:17:11 +00:00
3e072dd66e
add Opera historysearch module; works on linux, windows will come later
...
git-svn-id: file:///home/svn/framework3/trunk@6777 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 07:48:12 +00:00
055c58b82e
rename module to make room for new one.
...
git-svn-id: file:///home/svn/framework3/trunk@6775 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-13 03:50:18 +00:00
6e85581e2f
Updates from jabra for the phishing modules
...
git-svn-id: file:///home/svn/framework3/trunk@6767 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-12 03:57:25 +00:00
58671fd684
disconnect() tcp socket instead of just close()ing it
...
git-svn-id: file:///home/svn/framework3/trunk@6758 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-09 07:08:25 +00:00
c846f02c79
Final commit of working CLSIDs
...
git-svn-id: file:///home/svn/framework3/trunk@6755 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-08 22:15:59 +00:00
7a7b2df5a5
Updated list of working ClassIDs
...
git-svn-id: file:///home/svn/framework3/trunk@6754 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-08 21:34:13 +00:00
b9e7e0b902
Removed some CLSIDs that didn't work
...
git-svn-id: file:///home/svn/framework3/trunk@6753 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-08 21:25:23 +00:00
02f7d6b586
Exploit now uses a random ClassID from the list provided by the Microsoft Advisory rather than a static one (also configurable via an advanced option).
...
git-svn-id: file:///home/svn/framework3/trunk@6751 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-08 19:47:44 +00:00
a54b9a06ef
Exploit module for the new MS Video ActiveX flaw from Trancer. See more at http://www.rec-sec.com/2009/07/06/ms-directshow-msvidctl-exploit/
...
git-svn-id: file:///home/svn/framework3/trunk@6750 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-07 11:11:46 +00:00
94b2eb1cef
updated to make things more reliable.
...
git-svn-id: file:///home/svn/framework3/trunk@6749 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-07 07:00:45 +00:00
50fc339988
Correct spelling re: RFC. Thanks to Shuyao Yu.
...
git-svn-id: file:///home/svn/framework3/trunk@6748 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-06 10:07:46 +00:00
ee09d81d49
Added Cisco VPN Concentrator FTP bug aux module.
...
git-svn-id: file:///home/svn/framework3/trunk@6747 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-06 10:05:21 +00:00
957d894336
Add support for the apple network status check
...
git-svn-id: file:///home/svn/framework3/trunk@6746 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-06 01:12:55 +00:00
48e1e5f351
Merge Stephen Fewer's patches to enable support for Windows 7 (fixes support for NT and 2000 as well)
...
git-svn-id: file:///home/svn/framework3/trunk@6744 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-05 20:24:37 +00:00
8a9675f27e
Switch the reflective loaders to the new default, fixes an issue in the old loader with large DLLs within some processes
...
git-svn-id: file:///home/svn/framework3/trunk@6743 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-05 06:23:46 +00:00
4ffd60a089
Move the old DLL injection payloads to a new naming convention
...
git-svn-id: file:///home/svn/framework3/trunk@6742 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-05 06:21:58 +00:00
01953f7c16
improved unix cmd encoder
...
git-svn-id: file:///home/svn/framework3/trunk@6738 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-03 06:35:13 +00:00
a4e0c88a1b
Added MDaemon WorldClient Form2Raw.cgi exploit module.
...
git-svn-id: file:///home/svn/framework3/trunk@6736 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-03 01:26:21 +00:00
69725e75a2
Added MS02-063 PPTP DoS aux.
...
git-svn-id: file:///home/svn/framework3/trunk@6735 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-03 01:24:55 +00:00
28440435f3
Added 3com_superstack_switch DoS aux module.
...
git-svn-id: file:///home/svn/framework3/trunk@6734 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-01 03:57:04 +00:00
9174bcd0a8
Added iomega_storcentrepro_sessionid aux module.
...
git-svn-id: file:///home/svn/framework3/trunk@6733 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-01 03:55:56 +00:00
c1a5ed32b6
Added more information to note entered into database abstraction layer
...
git-svn-id: file:///home/svn/framework3/trunk@6731 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-30 17:42:20 +00:00
1df854bee7
Removed unused options, added success message.
...
git-svn-id: file:///home/svn/framework3/trunk@6730 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-30 14:09:19 +00:00
69cc96a1ae
Adds database support for logging wardialer scan results using report_note
...
git-svn-id: file:///home/svn/framework3/trunk@6729 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-30 04:54:00 +00:00
22c8af48eb
Added some output for fax and carrier detection
...
git-svn-id: file:///home/svn/framework3/trunk@6728 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-30 02:55:37 +00:00
e03428dd8f
Disabled debugging output
...
git-svn-id: file:///home/svn/framework3/trunk@6727 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-30 01:52:48 +00:00
bb0408e570
Exploit for /bin/login over dialup
...
git-svn-id: file:///home/svn/framework3/trunk@6725 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-29 14:13:41 +00:00
f90d4123ab
added exploit module bopup_comm.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6721 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-27 14:31:29 +00:00
fefaaa1884
Convert ; comments to // for debug mode
...
git-svn-id: file:///home/svn/framework3/trunk@6713 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-25 19:48:37 +00:00
d981332b89
Better search behavior for console and msfweb
...
git-svn-id: file:///home/svn/framework3/trunk@6706 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-24 01:31:16 +00:00
9b94ee52ef
Added dell_openmanage_post aux module.
...
git-svn-id: file:///home/svn/framework3/trunk@6699 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-23 13:23:50 +00:00
c2362ec409
All your POWER are belong to us.
...
git-svn-id: file:///home/svn/framework3/trunk@6698 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-23 03:49:25 +00:00
d0fe4e8610
Remove overzealous change for 1.9.1 compat
...
git-svn-id: file:///home/svn/framework3/trunk@6697 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-22 13:22:50 +00:00
66a6bfe9c0
Make the PDF modules 1.9.1 compatible
...
git-svn-id: file:///home/svn/framework3/trunk@6696 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-22 13:21:08 +00:00
4a421dbb33
Fix some busted code in the frontpage_login module, thanks to bill.e.ghote
...
git-svn-id: file:///home/svn/framework3/trunk@6691 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-21 06:30:55 +00:00
2ec7693d94
Fix up the modules to pass in the framework object into the new API call
...
git-svn-id: file:///home/svn/framework3/trunk@6687 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 18:18:04 +00:00
2283e0ffe4
Update executable template and API
...
git-svn-id: file:///home/svn/framework3/trunk@6682 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 17:42:17 +00:00
bc037bbbac
make php findsock work again for php_eval and php_include
...
git-svn-id: file:///home/svn/framework3/trunk@6678 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 05:50:52 +00:00
1fba3f678b
Adds Windows 7 support for the primary stagers: http://www.harmonysecurity.com/blog/2009/06/retrieving-kernel32s-base-address.html
...
git-svn-id: file:///home/svn/framework3/trunk@6677 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 04:35:44 +00:00
2061f2e048
Try 445 then 139 - faster in most cases
...
git-svn-id: file:///home/svn/framework3/trunk@6675 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 02:43:56 +00:00
3a9e42ceb8
Green dam exploit from Trancer
...
git-svn-id: file:///home/svn/framework3/trunk@6671 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-18 01:54:15 +00:00
1484405c79
Updates to work with the newer aux api
...
git-svn-id: file:///home/svn/framework3/trunk@6670 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-17 21:39:17 +00:00
67b307557d
fix eol-style settings
...
git-svn-id: file:///home/svn/framework3/trunk@6668 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-17 20:54:52 +00:00
c72263e9c3
Adds antoine's tftp brute forcer
...
git-svn-id: file:///home/svn/framework3/trunk@6667 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-17 20:52:47 +00:00
5fb2b95190
Patch to simplify the fileformat options from antoine
...
git-svn-id: file:///home/svn/framework3/trunk@6666 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-17 20:34:28 +00:00
b8efb1bbf9
Add Stephen Fewer's shiny exploit for the Java deserialization flaw
...
git-svn-id: file:///home/svn/framework3/trunk@6664 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-16 17:19:44 +00:00
f78482d3f5
Indicate lack of support for ruby 1.9.0, indicate experimental support for ruby 1.9.1
...
git-svn-id: file:///home/svn/framework3/trunk@6661 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-14 21:30:56 +00:00
a113343d00
Fix a broken next
...
git-svn-id: file:///home/svn/framework3/trunk@6649 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-14 15:02:32 +00:00
697f0946e1
Reference correction
...
git-svn-id: file:///home/svn/framework3/trunk@6637 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-11 23:23:58 +00:00
314d1a27a2
Adds a new module from nebulous for checking SSL expiry
...
git-svn-id: file:///home/svn/framework3/trunk@6636 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-09 21:12:48 +00:00
a5f567e76e
Massive OSVDB reference update from Steve Tornio.
...
git-svn-id: file:///home/svn/framework3/trunk@6629 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-07 20:20:42 +00:00
b7cac075e0
Adds the itunes overflow from Will Drewry: http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html
...
git-svn-id: file:///home/svn/framework3/trunk@6627 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-05 02:30:24 +00:00
fdff151442
More threading
...
git-svn-id: file:///home/svn/framework3/trunk@6626 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-04 03:52:22 +00:00
65c3f5981d
just rename it
...
git-svn-id: file:///home/svn/framework3/trunk@6625 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-04 03:27:23 +00:00
07bd36232f
minor fixes
...
git-svn-id: file:///home/svn/framework3/trunk@6624 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-04 03:21:22 +00:00
509233262c
Advanced options to remove detail messages and handle multithreads
...
git-svn-id: file:///home/svn/framework3/trunk@6622 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-03 05:49:38 +00:00
16806be1a7
Adds threading
...
git-svn-id: file:///home/svn/framework3/trunk@6621 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-03 05:19:42 +00:00
36a21436ff
Fix DAV header match. Applied patch by grutz
...
git-svn-id: file:///home/svn/framework3/trunk@6610 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-02 04:43:57 +00:00
fe463072d6
added exploit module ibmegath_getxmlvalue.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6609 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-01 11:19:06 +00:00
ee70866e08
Small fix on authenticated dir check. Thanks Rhys Kidd
...
git-svn-id: file:///home/svn/framework3/trunk@6603 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-31 01:34:04 +00:00
166e1ebf2c
Added simplified version of webdav unicode bypass scanner
...
git-svn-id: file:///home/svn/framework3/trunk@6589 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-28 03:30:52 +00:00
e1c5c72c82
Added check for authenticated directories
...
git-svn-id: file:///home/svn/framework3/trunk@6588 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-28 03:27:25 +00:00
b6ab8ffd21
Fix up the unicoding
...
git-svn-id: file:///home/svn/framework3/trunk@6580 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-25 20:21:20 +00:00
f17ee863bc
Three new unpatched exploits from trancer: http://www.rec-sec.com
...
git-svn-id: file:///home/svn/framework3/trunk@6578 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-24 15:06:12 +00:00
823fcc30d1
Added WebDAV scanner
...
git-svn-id: file:///home/svn/framework3/trunk@6576 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-23 01:55:34 +00:00
d434be3ae8
Patch from Erik Fichtner to enable unicode overlong encoding
...
git-svn-id: file:///home/svn/framework3/trunk@6575 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-22 21:33:20 +00:00
d9da2d1c0f
use the user-provided credentials
...
git-svn-id: file:///home/svn/framework3/trunk@6572 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-21 23:33:20 +00:00
defbb2fe9c
use the user-provided credentials
...
git-svn-id: file:///home/svn/framework3/trunk@6571 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-21 23:32:15 +00:00
92d242cc2f
osvdb references from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@6568 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-19 13:20:32 +00:00
f8cac0cedf
Fix proxy issue. Added datastore PROXIES to the parameters. Thanks spinbad
...
git-svn-id: file:///home/svn/framework3/trunk@6564 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-19 01:40:58 +00:00
8f5dc1305e
Fix bad variable, reported by bill.e.ghote
...
git-svn-id: file:///home/svn/framework3/trunk@6563 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-18 18:02:21 +00:00
79c7abba8e
Added wmap_dir_webdav_unicode_bypass.rb to detect vulnerable IIS6 WebDAV Unicode bypass folders.
...
git-svn-id: file:///home/svn/framework3/trunk@6562 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-18 03:57:13 +00:00
6c8a93035f
make the new random header stuff work with magic_quotes
...
git-svn-id: file:///home/svn/framework3/trunk@6559 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-17 00:35:56 +00:00
685535c61d
add php compatibility to multi/handler
...
git-svn-id: file:///home/svn/framework3/trunk@6558 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-17 00:26:17 +00:00
1eddbbf332
More references from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@6551 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-14 19:56:07 +00:00
9d8581a17e
More osvdb references from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@6550 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-13 17:39:42 +00:00
6e84b4ea7f
missed a , which borked stuff.
...
git-svn-id: file:///home/svn/framework3/trunk@6549 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-12 21:42:33 +00:00
0981295879
More osvdb references from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@6547 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-12 19:56:54 +00:00
0ab728c6a5
Added OSVDB references from Steve Tornio
...
git-svn-id: file:///home/svn/framework3/trunk@6546 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-12 19:03:25 +00:00
d70d2c5d1e
Added ssh_version.rb from Daniel van Eeden.
...
git-svn-id: file:///home/svn/framework3/trunk@6541 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-11 02:46:59 +00:00
888a54e4bb
added auxiliary module lt_rollbackworkspace.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6537 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-09 13:19:36 +00:00
a2125d7ff8
added auxiliary module cba_exec.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6528 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-06 23:41:17 +00:00
e1d17d6922
Add stdapi by default and support AutoRunScript
...
git-svn-id: file:///home/svn/framework3/trunk@6527 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-06 03:27:39 +00:00
7f9e020438
This adds a stub payload for interacting with sotirov's metsvc.exe
...
git-svn-id: file:///home/svn/framework3/trunk@6526 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-06 03:24:23 +00:00
4bafe57fe3
Added cain_abel_4918_rdp.rb from Trancek.
...
git-svn-id: file:///home/svn/framework3/trunk@6521 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-03 13:29:42 +00:00
de43887fdd
Added destinymediaplayer16.rb from Trancek.
...
git-svn-id: file:///home/svn/framework3/trunk@6520 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-03 12:12:08 +00:00
d78b615190
Added racer_503beta5.rb from Trancek.
...
git-svn-id: file:///home/svn/framework3/trunk@6519 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-03 11:10:37 +00:00
059856db54
oops, forgot this one.
...
git-svn-id: file:///home/svn/framework3/trunk@6518 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-01 22:02:55 +00:00
7d71c5ed19
in with the new, out with the old. added some more enum aux modules.
...
git-svn-id: file:///home/svn/framework3/trunk@6517 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-01 22:01:21 +00:00
b2a3968b74
in with the new, out with the old
...
git-svn-id: file:///home/svn/framework3/trunk@6513 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-30 15:51:06 +00:00
533cae760d
fix author field
...
git-svn-id: file:///home/svn/framework3/trunk@6512 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-30 06:12:27 +00:00
c08bc4f10b
fix a potential problem with the base64 encoder
...
git-svn-id: file:///home/svn/framework3/trunk@6511 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-30 06:11:56 +00:00
9144e8378d
fix author field
...
git-svn-id: file:///home/svn/framework3/trunk@6510 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-30 06:10:12 +00:00
a99354abce
Added zinfaudioplayer221_pls from Trancek. Added SEH, universal target and references.
...
git-svn-id: file:///home/svn/framework3/trunk@6507 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-29 03:45:37 +00:00
4426bc2df0
Added SOAP brute forcer module. YMMV.
...
git-svn-id: file:///home/svn/framework3/trunk@6495 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-23 03:16:29 +00:00
5ea6a1027a
report os detection in smb version scanner
...
git-svn-id: file:///home/svn/framework3/trunk@6494 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-21 05:59:46 +00:00
b31abbc6f9
move the payload into a random X- header so it doesn't show up in access logs
...
git-svn-id: file:///home/svn/framework3/trunk@6493 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-19 15:47:14 +00:00
ba3627aa9b
fix some potential problems with the base64 encoder
...
git-svn-id: file:///home/svn/framework3/trunk@6492 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-19 02:31:34 +00:00
cf5caf3d31
remove 'persistent' from the description in bind_php
...
git-svn-id: file:///home/svn/framework3/trunk@6491 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-18 23:51:20 +00:00
71e114796b
Added emailer sleep patch from Jabra. Thanks
...
git-svn-id: file:///home/svn/framework3/trunk@6490 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-17 00:21:19 +00:00
3cb9ae8e93
Fixed new line in email by snow
...
git-svn-id: file:///home/svn/framework3/trunk@6489 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-16 23:49:04 +00:00
e9776552ad
Added domino_http_accept_language from riaf.
...
git-svn-id: file:///home/svn/framework3/trunk@6488 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-16 06:08:40 +00:00
89d0cb3954
added exploit module mswhale_checkforupdates.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6486 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-15 21:38:50 +00:00
0ea4bec847
updated for db usage
...
git-svn-id: file:///home/svn/framework3/trunk@6485 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-15 04:15:25 +00:00
cf1d255a55
SMTP Banner Grabber Aux module
...
git-svn-id: file:///home/svn/framework3/trunk@6483 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-15 03:26:22 +00:00
eb92aa7412
add db reporting
...
git-svn-id: file:///home/svn/framework3/trunk@6482 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-14 16:09:24 +00:00
37c2e301ed
replacing defunct framework URL in header comments in most modules and pcap_log
...
git-svn-id: file:///home/svn/framework3/trunk@6479 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-13 14:33:26 +00:00
0c859dc35e
Minor fixes regarding target_host handling
...
git-svn-id: file:///home/svn/framework3/trunk@6477 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-12 02:00:50 +00:00
b9c9df1ef2
better exception handling
...
git-svn-id: file:///home/svn/framework3/trunk@6472 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-10 01:44:06 +00:00
cc78d9a59c
turn off svn:executable in modules
...
git-svn-id: file:///home/svn/framework3/trunk@6470 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-08 20:04:25 +00:00
d1bf7ce2dc
Add XMas port scanner aux module
...
git-svn-id: file:///home/svn/framework3/trunk@6469 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-08 15:32:07 +00:00
446c4edf71
adding a MySQL version enumeration aux scanner module
...
git-svn-id: file:///home/svn/framework3/trunk@6465 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-07 22:13:25 +00:00
c8d0197a86
added auxiliary module ora_ntlm_stealer.rb from Sh2kerr
...
git-svn-id: file:///home/svn/framework3/trunk@6464 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-07 21:53:08 +00:00
6591669585
add dos aux module for XM Easy Personal Ftp Server 5.7.0
...
git-svn-id: file:///home/svn/framework3/trunk@6463 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-07 18:26:19 +00:00
1eb8c8dfc0
meh, what can I say? I like my name
...
git-svn-id: file:///home/svn/framework3/trunk@6459 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-03 15:05:35 +00:00
8d184d81bf
Add IPID sequence classifier scanner aux module. It uses the same techniques
...
Nmap uses for classifying IPIDs in its Idle Scan (-sI) and OS Detection (-O).
git-svn-id: file:///home/svn/framework3/trunk@6456 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-03 00:59:25 +00:00
3c54e15590
added exploit module sapgui_saveviewtosessionfile.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6455 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-02 20:43:06 +00:00
0fb71d56bd
sip user enumerator module using the REGISTER and OPTIONS methods
...
git-svn-id: file:///home/svn/framework3/trunk@6453 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-02 04:31:48 +00:00
edbaada754
Reliable write address location; bringing in line with windows/browser version
...
git-svn-id: file:///home/svn/framework3/trunk@6452 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-31 16:46:50 +00:00
8d7c6d6367
Browser version of jbig2decode
...
git-svn-id: file:///home/svn/framework3/trunk@6451 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-31 14:58:37 +00:00
cf424edd73
fixed error case for ssl module
...
git-svn-id: file:///home/svn/framework3/trunk@6449 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-31 00:43:41 +00:00
ae21a15dc4
Make these a little future-compatible with ruby 1.9
...
git-svn-id: file:///home/svn/framework3/trunk@6443 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-30 02:55:48 +00:00
9482b4080e
set a few more modules' Versions to Revision, only did aux by accident last time
...
git-svn-id: file:///home/svn/framework3/trunk@6439 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-30 01:09:09 +00:00
7576f006b3
set 3 remaining modules' Versions to Revision (instead of 1)
...
git-svn-id: file:///home/svn/framework3/trunk@6438 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-30 01:01:30 +00:00
d674495499
regex fix, thanks to Taras Ivashchenko
...
git-svn-id: file:///home/svn/framework3/trunk@6437 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 20:18:14 +00:00
ff40e76492
added auxiliary module authbypass (foxit reader)
...
git-svn-id: file:///home/svn/framework3/trunk@6436 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 19:07:28 +00:00
93bcddf469
Force the socket to close between each pass -- thanks quine!
...
git-svn-id: file:///home/svn/framework3/trunk@6435 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 17:58:15 +00:00
0361811966
increase idx so recvfrom isn't called every iteration
...
git-svn-id: file:///home/svn/framework3/trunk@6432 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 13:44:38 +00:00
2b6c0f97f8
Adds a quick scanner for SIP devices and servers
...
git-svn-id: file:///home/svn/framework3/trunk@6427 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 05:51:08 +00:00
715c001aff
Replaced by auxiliary/scanner/snmp/community
...
git-svn-id: file:///home/svn/framework3/trunk@6426 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:42:04 +00:00
67cfbc2e4b
Report other data to the DB as well
...
git-svn-id: file:///home/svn/framework3/trunk@6424 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:39:51 +00:00
12e3114873
Remove the ::ffff prefix from returned IPv4 addresses
...
git-svn-id: file:///home/svn/framework3/trunk@6423 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:24:59 +00:00
2552633f9b
Fix up batch mode aux scanners that dont use the tcp mixin. Minor changes to snmp_scan
...
git-svn-id: file:///home/svn/framework3/trunk@6422 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:11:56 +00:00
e1a6d31c58
Add a SNMP brute force scanner
...
git-svn-id: file:///home/svn/framework3/trunk@6421 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:09:04 +00:00
3d6a0bab52
Fix up the version/options modules, make wmap_base_url display the vhost and use the host/port separator correctly
...
git-svn-id: file:///home/svn/framework3/trunk@6414 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 17:57:12 +00:00
89ad4df087
Fix WMAP modules to use the new scanner api; add wmap_base_url as a shorthand (extend in the future to do VHOST as well), general cosmetic cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@6413 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 17:45:14 +00:00
6203b02ffc
fix tab.
...
git-svn-id: file:///home/svn/framework3/trunk@6412 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 16:27:01 +00:00
64b12fdb61
added exploit module adobe_collectemailfinfo.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6411 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 16:14:32 +00:00
9d2382f5f5
Adds the PDF geticon modules from jduck
...
git-svn-id: file:///home/svn/framework3/trunk@6409 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 07:40:29 +00:00
4d00350085
Rename to be consistent
...
git-svn-id: file:///home/svn/framework3/trunk@6408 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 06:05:38 +00:00
eccfcdfced
Sets svn keywords on modules missing it, tweaks the emailer module
...
git-svn-id: file:///home/svn/framework3/trunk@6407 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 06:03:35 +00:00
86bc12940a
Fix tabstops for weblogic module
...
git-svn-id: file:///home/svn/framework3/trunk@6405 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 06:00:23 +00:00
a5125c6c87
Update the module description
...
git-svn-id: file:///home/svn/framework3/trunk@6404 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 05:52:40 +00:00
f755cc00c0
Adds support for Yahoo! IMAP cookies (thanks Mario De Tore!) fixes a cpu eating loop in the HTTP service.
...
git-svn-id: file:///home/svn/framework3/trunk@6402 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 05:51:18 +00:00
26b9903b0d
Changes Auxiliary::Scanner to use a new module instance for each thread, updates associated mixins and modules to support this change.
...
git-svn-id: file:///home/svn/framework3/trunk@6401 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 05:49:33 +00:00
3b704ecf46
Add support for Reader 8.1.2, increase heapspray reliability
...
git-svn-id: file:///home/svn/framework3/trunk@6400 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 02:40:27 +00:00
41960b0300
Add jsessionid exploit
...
git-svn-id: file:///home/svn/framework3/trunk@6399 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-27 19:03:39 +00:00
bee2e44254
Remove debug messages, fix nops.
...
git-svn-id: file:///home/svn/framework3/trunk@6398 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-27 02:34:40 +00:00
989a0bf88f
Backed off the heapspray, will hopefully work on low and high RAM systems now.
...
git-svn-id: file:///home/svn/framework3/trunk@6397 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-27 02:32:13 +00:00
3b6f94ebb3
add ACK port scanner aux module (maps out firewall rulesets)
...
git-svn-id: file:///home/svn/framework3/trunk@6396 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-27 00:49:55 +00:00
8784ee930f
Adobe JBIG2Decode Exploit (CVE-2009-0658)
...
git-svn-id: file:///home/svn/framework3/trunk@6395 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-27 00:08:19 +00:00
95d651c62a
Add SYN port scanner aux module
...
git-svn-id: file:///home/svn/framework3/trunk@6394 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-26 14:55:53 +00:00
07b3f614ce
New plain HTTP XPath 1.0 blind injection module
...
git-svn-id: file:///home/svn/framework3/trunk@6355 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-20 03:53:02 +00:00
13706d1bde
Tons of new Mac OS X code from Dino Dai Zovi and Charlie Miller, more to follow
...
git-svn-id: file:///home/svn/framework3/trunk@6353 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-18 23:28:24 +00:00
a036178737
added exploit module orbit_connecting.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6348 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-17 01:24:16 +00:00
6bd083c441
patch from Jason Wood, adds check for extended capabilities command
...
git-svn-id: file:///home/svn/framework3/trunk@6346 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-16 08:48:08 +00:00
804ff61df6
big svn:keywords run
...
git-svn-id: file:///home/svn/framework3/trunk@6345 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-15 18:12:33 +00:00
1d42efd73d
New module from spinbad
...
git-svn-id: file:///home/svn/framework3/trunk@6341 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-15 02:32:34 +00:00
799d70b59a
Let the target know their email did not go very far
...
git-svn-id: file:///home/svn/framework3/trunk@6339 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-14 03:15:28 +00:00
27f4e90aff
add a SYN flooder aux module
...
git-svn-id: file:///home/svn/framework3/trunk@6337 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-14 00:14:36 +00:00
f7dafe0156
added exploit module belkin_bulldog.rb.
...
git-svn-id: file:///home/svn/framework3/trunk@6334 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-11 22:33:51 +00:00
7209271870
Added exploit module apache_mod_rewrite_ldap.
...
git-svn-id: file:///home/svn/framework3/trunk@6327 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-10 06:42:11 +00:00
760d837423
Set svn:keywords
...
git-svn-id: file:///home/svn/framework3/trunk@6320 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-08 16:00:30 +00:00
d53da510a3
Adds coverage for http://marc.info/?l=bugtraq&m=122150111708026&w=2
...
git-svn-id: file:///home/svn/framework3/trunk@6319 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-08 08:09:40 +00:00
46351557bc
Added dogfood_spell_exec exploit module from LSO.
...
git-svn-id: file:///home/svn/framework3/trunk@6282 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-03 03:32:36 +00:00
2df5dc3204
Added exploit module ebook_flipviewer_fviewerloading from LSO.
...
git-svn-id: file:///home/svn/framework3/trunk@6281 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-02 23:14:54 +00:00
a71b3e8c22
Added exploit module efs_easychatserver_username from LSO.
...
git-svn-id: file:///home/svn/framework3/trunk@6280 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-02 06:57:00 +00:00
b6731747c4
added ie_unsafe_scripting exploit module
...
git-svn-id: file:///home/svn/framework3/trunk@6260 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-27 22:35:50 +00:00
d5c625b803
Added exploit module dlink_long_filename from LSO.
...
git-svn-id: file:///home/svn/framework3/trunk@6256 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-26 08:19:01 +00:00
c902c035aa
Typo in vendor name. Steamcast.
...
git-svn-id: file:///home/svn/framework3/trunk@6255 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-25 11:50:24 +00:00
415b4c2593
Added exploit module streamcast_useragent.rb from LSO.
...
git-svn-id: file:///home/svn/framework3/trunk@6254 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-25 11:35:36 +00:00
92c45abf2d
Added contentkeeperweb_mimencode exploit module.
...
git-svn-id: file:///home/svn/framework3/trunk@6250 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-25 03:41:25 +00:00
7118ef0a2c
added aux module osb_execqr.rb and exploit module osb_ndmp_auth.rb.
...
git-svn-id: file:///home/svn/framework3/trunk@6248 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-23 16:26:00 +00:00
8fe4bf88b9
MS09-002 coverage by dean
...
git-svn-id: file:///home/svn/framework3/trunk@6238 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-20 17:46:52 +00:00
4d97256c70
svn keywords
...
git-svn-id: file:///home/svn/framework3/trunk@6237 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-19 16:38:39 +00:00
0effa1123f
added auxiliary sqli modules lt_mergeworkspace.rb,
...
lt_compressworkspacetree.rb and lt_removeworkspace.rb from Sh2kerr.
git-svn-id: file:///home/svn/framework3/trunk@6234 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-19 00:19:41 +00:00
fd7399210d
updated info for payload/php/shell_findsock
...
git-svn-id: file:///home/svn/framework3/trunk@6231 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-17 06:04:02 +00:00
705a34dfda
added oracle sqli module droptable_trigger.rb from Sh2kerr.
...
git-svn-id: file:///home/svn/framework3/trunk@6209 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-06 19:16:50 +00:00
092db8229c
added exploit module fdm_auth_header.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6205 4d416f70-5f16-0410-b530-b9f4589650da
2009-02-02 18:27:36 +00:00
f927320eda
Wrap the telephony require properly
...
git-svn-id: file:///home/svn/framework3/trunk@6201 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-30 04:28:40 +00:00
bd8293360a
Minor tweaks to the wardialer module
...
git-svn-id: file:///home/svn/framework3/trunk@6200 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-30 01:45:15 +00:00
a46fa68bac
Replaced manual path string joins with File.join
...
git-svn-id: file:///home/svn/framework3/trunk@6199 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 23:14:31 +00:00
6756962b26
Moved path setup back out of initialize, that caused problems
...
git-svn-id: file:///home/svn/framework3/trunk@6198 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 22:48:51 +00:00
aa94ff7be6
Fixed typo in logs path, moved path stuff to initialize
...
git-svn-id: file:///home/svn/framework3/trunk@6197 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 22:46:20 +00:00
0c84e9c41e
Removed chdir, now access dat and log file by full path, which now live in config_root+/log/wardial
...
git-svn-id: file:///home/svn/framework3/trunk@6196 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 22:41:29 +00:00
089c2122cd
Moved some options to advanced_options
...
git-svn-id: file:///home/svn/framework3/trunk@6195 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 20:16:18 +00:00
c4d3d2e379
Renamed all hotkey responses to HK_* strings
...
git-svn-id: file:///home/svn/framework3/trunk@6194 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 19:58:34 +00:00
7965a7de05
Wardialer
...
git-svn-id: file:///home/svn/framework3/trunk@6193 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-28 06:13:47 +00:00
Mario Ceballos
HD Moore
et
James Lee
Stephen Fewer
Patrick Webster
Ramon de C Valle