b3e36e5692
Reduce the size of the generated executables (works better with sqlmap and other tools that need small exes). Payloads are now capped at 2048 and the amount of random data appended to the exe has been reduced.
...
git-svn-id: file:///home/svn/framework3/trunk@6849 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-20 13:55:29 +00:00
3f5ee3d34b
Don't raise "Invalid codepage 1252, only 1252 supported" in Rex::Text.to_unicode
...
for uhwtfms-half. It always failed if passed something other than an empty str
git-svn-id: file:///home/svn/framework3/trunk@6793 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 00:01:04 +00:00
2283e0ffe4
Update executable template and API
...
git-svn-id: file:///home/svn/framework3/trunk@6682 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 17:42:17 +00:00
d9792d4beb
More ruby-1.9.1 compatibility fixes
...
git-svn-id: file:///home/svn/framework3/trunk@6679 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 14:26:22 +00:00
147a292825
Minor fixes for ruby 1.9.1 compatibility, still quite a bit more to go
...
git-svn-id: file:///home/svn/framework3/trunk@6612 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-02 23:36:58 +00:00
3bc44cc395
Consolidate exe generation into a single to_executable() function. Will reduce code in exploit modules dropping later today...
...
git-svn-id: file:///home/svn/framework3/trunk@6586 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-27 13:37:41 +00:00
3ede3a1d41
Patch from int_80
...
git-svn-id: file:///home/svn/framework3/trunk@6496 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-23 17:49:04 +00:00
0b14dac349
Added rand_text_highascii method.
...
git-svn-id: file:///home/svn/framework3/trunk@6487 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-16 03:02:41 +00:00
6d9a70c6ad
fix codepage_map_cache for unit tests
...
git-svn-id: file:///home/svn/framework3/trunk@6324 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-09 05:18:33 +00:00
96c8f6127c
Replace += with << for Strings in a bunch of places.
...
git-svn-id: file:///home/svn/framework3/trunk@6318 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-08 07:55:47 +00:00
90f906d8c5
Add assignment to to_ruby and to_perl output, and allow changing of variable
...
name in to_java output
git-svn-id: file:///home/svn/framework3/trunk@6032 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 07:40:27 +00:00
5822ab75a7
Adds an exploit module (universal) for the new internet explorer xml bug. This module shows off the .NET memory techniques discovered by Alexander Sotirov and Mark Dowd. This code should bypass DEP, ASLR, and NX :-)
...
git-svn-id: file:///home/svn/framework3/trunk@6012 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-12 01:45:00 +00:00
b4a5cb455b
Short variable names to fit more into memory
...
git-svn-id: file:///home/svn/framework3/trunk@5896 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 23:51:36 +00:00
a70e982369
Adds utlities for creating VBA scripts from an EXE (or payload)
...
git-svn-id: file:///home/svn/framework3/trunk@5893 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 19:15:24 +00:00
b53695f7db
The psexec module now uses a service-compatible exe, shellcode is spawned in a subprocess and the service cleans up properly
...
git-svn-id: file:///home/svn/framework3/trunk@5829 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 23:06:37 +00:00
1df0612f61
Adds a case-sensitivity permutation routine
...
git-svn-id: file:///home/svn/framework3/trunk@5780 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 22:43:13 +00:00
f124597a56
Code cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:03:39 +00:00
af9a8eba9a
Swap back to 8192 until the exploits which use it are updated.
...
git-svn-id: file:///home/svn/framework3/trunk@5694 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-27 17:13:11 +00:00
14e8e75cb6
Another, smaller, win32 wrapper
...
git-svn-id: file:///home/svn/framework3/trunk@5693 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-27 05:02:36 +00:00
16d2825b83
Wrap the shellcode in SEH
...
git-svn-id: file:///home/svn/framework3/trunk@5692 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 23:35:47 +00:00
b94d10f53c
Switch the exe back to windows mode (vs console)
...
git-svn-id: file:///home/svn/framework3/trunk@5691 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 23:01:58 +00:00
4d47f49c1c
Randomize the timedatestamp
...
git-svn-id: file:///home/svn/framework3/trunk@5690 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 22:37:41 +00:00
6d5ac7eead
Switches the executable template to something a little nicer and adds exe output to msfencode
...
git-svn-id: file:///home/svn/framework3/trunk@5689 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 22:34:51 +00:00
9903e0bb1d
Add the ror/rol ror13hash code to msf3
...
git-svn-id: file:///home/svn/framework3/trunk@5627 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-13 01:44:37 +00:00
2db9dd6ab2
Reversing over greedy commit. =(
...
git-svn-id: file:///home/svn/framework3/trunk@5506 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 06:17:41 +00:00
93199c5610
"set foo" prints the value of foo if it exists
...
git-svn-id: file:///home/svn/framework3/trunk@5505 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 05:29:32 +00:00
af4ac919fe
add whitespace randomization to Rex::Text. Will update modules to use this instead of copy-paste
...
git-svn-id: file:///home/svn/framework3/trunk@5494 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-23 06:54:00 +00:00
84d921633b
Fun with saved passwords
...
git-svn-id: file:///home/svn/framework3/trunk@5490 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-22 18:48:21 +00:00
967a4c0fc6
Add x86 macho output support
...
git-svn-id: file:///home/svn/framework3/trunk@5205 4d416f70-5f16-0410-b530-b9f4589650da
2007-11-26 22:23:51 +00:00
ec94968d82
Add support for context-map files to msfpescan ( http://sourceforge.net/projects/smem-map/ )
...
git-svn-id: file:///home/svn/framework3/trunk@5154 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-18 16:55:23 +00:00
ffc5c0a57d
Use a class variable instead of a global to cache unicode code pages.
...
git-svn-id: file:///home/svn/framework3/trunk@5126 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-29 06:47:16 +00:00
1527d92154
Correct offset typos in the new iphone modules. Add EXE output support for OS X PPC, Linux x86, and make the OS X ARM smaller.
...
git-svn-id: file:///home/svn/framework3/trunk@5119 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-25 01:50:05 +00:00
cbec13de60
Add "X" mode for iPhone payloads
...
git-svn-id: file:///home/svn/framework3/trunk@5117 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 17:54:51 +00:00
7cc30f0fa8
Support pattern_create() lengths larger than the maximum set size
...
git-svn-id: file:///home/svn/framework3/trunk@5104 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-13 16:11:33 +00:00
00beaa7049
Fixes #136 . Detects a nil str parameter
...
git-svn-id: file:///home/svn/framework3/trunk@5088 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-09 22:10:38 +00:00
448714ab7b
Adds rand_text_numeric
...
git-svn-id: file:///home/svn/framework3/trunk@5085 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-05 13:39:45 +00:00
3f903a4e24
fix from spoonm
...
git-svn-id: file:///home/svn/framework3/trunk@5077 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-11 07:09:13 +00:00
5e23a54296
* uhwtfms_half - half-width encoding ( http://www.kb.cert.org/vuls/id/739224 )
...
git-svn-id: file:///home/svn/framework3/trunk@4910 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-14 20:49:35 +00:00
793048c879
This patch adds support for java byte array output (useful for sticking shellcode into java applets).
...
git-svn-id: file:///home/svn/framework3/trunk@4880 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-07 04:42:11 +00:00
2ec5cea6df
Adds to_hex_dump
...
git-svn-id: file:///home/svn/framework3/trunk@4662 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-11 22:23:32 +00:00
d31b36a4ca
Add windows suppor to pe_memdump. Fix a stupid typo in pattern_create
...
git-svn-id: file:///home/svn/framework3/trunk@4629 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-03 02:42:30 +00:00
9333609211
Adds a second argument to encode_base64
...
git-svn-id: file:///home/svn/framework3/trunk@4618 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-02 06:23:14 +00:00
547ec3c6c6
This patch adds header folding, fixed hex-random and u-random encoding, fake uri end, fake uri parameters. This fixes #16 , the remaining two options (chunked and pipelining), will be added in a future version.
...
git-svn-id: file:///home/svn/framework3/trunk@4513 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-10 05:58:14 +00:00
e6f221ad80
Major updates to the HTTP api, re-addition of HTTP evasion, see #16
...
git-svn-id: file:///home/svn/framework3/trunk@4506 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-08 14:08:41 +00:00
51d61c161d
Sessions can be detached and killed from the console
...
git-svn-id: file:///home/svn/framework3/trunk@4437 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 22:35:07 +00:00
9cda28221f
more gracefully handle iconv being missing
...
git-svn-id: file:///home/svn/framework3/trunk@4400 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-16 18:49:07 +00:00
020ec49767
Updates to the msfgui interface
...
git-svn-id: file:///home/svn/framework3/trunk@4355 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 09:22:06 +00:00
7d949bf802
Remove whitespace from base64
...
git-svn-id: file:///home/svn/framework3/trunk@4238 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:56:57 +00:00
bb79a9a6be
Use pack/unpack vs the Base64 library (seems to be broken on OS X)
...
git-svn-id: file:///home/svn/framework3/trunk@4237 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:55:35 +00:00
58f75149e0
Explicitly specify the ::Base64 class
...
git-svn-id: file:///home/svn/framework3/trunk@4236 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:52:33 +00:00
HD Moore
kris
Patrick Webster
James Lee
Ramon de C Valle
Matt Miller