86c3ad5e0c
Add CVE-2011-4449
2012-05-10 11:57:40 -05:00
48d6157d6e
New NetOp Guest msf module http://www.netop.com/
2012-04-02 16:53:51 -07:00
9cf896ffa1
Pre-release fixups on titles and grammar
...
Fixing squid_pivot_scanning and enum_xchat
2012-04-02 11:24:49 -05:00
7b0ee58d9f
Fixing bug spotted by troulouliou in ipv6_neighbor
...
Just check for nilness, not the :symbol.
2012-04-02 10:02:59 -05:00
ab269ac4ec
Permissions fix for exploit jar file
2012-04-02 09:27:35 -05:00
bd5f43c918
Add another good reference by @mihi42
2012-04-01 01:30:50 -05:00
afe3168a36
Enable additional migration-path parameters, use a temporary directory to bring the database online
...
Conflicts:
lib/msf/core/db_manager.rb
2012-03-31 12:05:54 -05:00
bab4cddd83
Add Jeroen Frijters for finding/reporting the bug
2012-03-31 03:01:09 -05:00
1853f8b0c2
Merge pull request #291 from wchen-r7/enum_xchat
...
Add post module enum_xchat.rb
2012-03-31 00:42:15 -07:00
543f5ebfe2
Only display the retry message when necessary
2012-03-31 02:40:24 -05:00
4215030eb3
Set a limit to how many times we can retry
2012-03-31 02:38:46 -05:00
6e4ccaae6b
Add post module to collect xchat's configs and chat logs
2012-03-31 00:15:21 -05:00
62a54e0ad6
Account for stagers that use Assembly
...
Since staged payloads end up with an array of architectures, this was
failing to find a cpu and causing uncaught exceptions that crashed
msfconsole at startup. This only occurred when a stager contained an
Assembly directive. None of the default paylaods do this, so users
should generally not have been affected.
2012-03-30 17:57:56 -06:00
025d905c01
Compiled jar with -target 1.2 so it works on older JVMs
2012-03-30 17:05:20 -06:00
6b996ed9de
Add checks for data being null, too, just in case
2012-03-30 16:46:49 -06:00
11a1ae3a8d
Typo in a comment
2012-03-30 16:30:13 -06:00
b424475774
Add a makefile
...
Compiles with an old -target so it will work on older JVMs
2012-03-30 16:25:47 -06:00
cc54a260f5
Merge remote branch 'upstream/master'
2012-03-30 14:31:12 -06:00
0547369966
Add bap support for flash mp4 and new java bug
...
Also fixes a silly issue where adobe_flash_mp4_cprt was adding the
/test.mp4 resource after every request instead of just once at startup.
2012-03-30 12:59:07 -06:00
e723704a32
Merge pull request #289 from wchen-r7/enum_colloquy
...
Add post module enum_colloquy.rb to collect chatlogs and the plist
2012-03-30 09:24:32 -07:00
18a13a4bfb
Correct description
2012-03-30 11:22:55 -05:00
392125f201
Merge pull request #290 from swtornio/master
...
add osvdb ref
2012-03-30 09:17:39 -07:00
ae21c05e69
add osvdb ref
2012-03-30 07:26:07 -05:00
e018c6604f
Modify CVE-2012-0507
2012-03-30 02:06:56 -05:00
8d2a58dfd8
Add post module enum_colloquy.rb to collect chatlogs and the preferences list
2012-03-29 16:24:43 -05:00
bec8d40a6c
File permissions fix
2012-03-29 16:24:31 -05:00
b5fc8e4a77
Merge branch 'upstream-master'
2012-03-29 13:18:01 -06:00
f069a32223
Merge pull request #288 from wchen-r7/cve_2012_0507
...
Adding sinn3r and juan's exploit for CVE-2012-0507. Blog post coming soon.
2012-03-29 08:46:49 -07:00
791ebdb679
Add CVE-2012-0507 (Java)
2012-03-29 10:31:14 -05:00
bd4819e8f2
Merge pull request #238 from mak/linux-x64-find-port
...
linux/x64/shell_find_port payload
2012-03-29 05:54:54 -07:00
220ad7875f
Merge pull request #285 from wvandevanter-r7/squid_pivot_scanning
...
Squid pivot scanning
2012-03-29 05:02:05 -07:00
434e487800
Merge pull request #287 from rsmudge/armitage
...
startup bug fix for armitage
2012-03-29 05:00:03 -07:00
28483711e7
initialize a console before connecting to db (forces msf to setup the database for user)
2012-03-29 01:00:03 -04:00
f5e05461f6
changed the false positive check IP to a user set variable
2012-03-28 22:18:56 -04:00
73b53ea225
Merge pull request #286 from jlee-r7/bug/6567
...
Make sure session.target_host gets resolved
2012-03-28 14:33:26 -07:00
e48c47e958
Armitage 03.28.12. Mostly performance improvements.
2012-03-28 14:33:25 -06:00
56404f5edd
Fixing EDB reference
2012-03-28 14:33:25 -06:00
9968b94951
Update for compatibility
2012-03-28 14:33:25 -06:00
e9a9bc4794
Rename enum_user_dirs
2012-03-28 14:33:25 -06:00
64f8665df0
Remove loads
2012-03-28 14:33:24 -06:00
0e472deede
Add a simple test for unix shells
2012-03-28 14:33:24 -06:00
bd13720c45
Fixing checksum uri generator again.
...
This time, it's ensured that generate_uri_checksum(sum) will succeed,
provided the sum is an even number between 80 and 100 (tested)
It's still not great for arbitrary checksum targets, but that's because
there are lots of strings that cannot satisfy the requirement. I kind of
think this is the fault of Rex.
2012-03-28 14:33:24 -06:00
d01bf496f0
Remove the extra 'require'
2012-03-28 14:33:24 -06:00
844654b1e1
Add OSX Gather Airport post module
2012-03-28 14:33:24 -06:00
f4f8187eee
Correct an issue where launched exploits only used saved configurations
2012-03-28 14:33:24 -06:00
f797bb5d1b
Convert railgun tests to ModuleTest API
2012-03-28 14:33:24 -06:00
8f376e5605
Allow empty values for OptRegexp options
2012-03-28 14:33:24 -06:00
3abb45672d
Convert registry tests to ModuleTest API
2012-03-28 14:33:24 -06:00
5821a70b16
Add exception logging for test failures
2012-03-28 14:33:24 -06:00
eda4da870d
Return a proper value instead of a silly print
2012-03-28 14:33:24 -06:00
sinn3r
chap0
Tod Beardsley
HD Moore
sinn3r
James Lee
Steve Tornio
Tod Beardsley
Raphael Mudge
Willis Vandevanter