Commit Graph

81 Commits (88ed614b7ee86271fb146811b718e2baba05a765)

Author SHA1 Message Date
HD Moore dd2e9d87fb This adds SMTPDeliver exploit mixin, the SMTP version of the ANI exploit, accessor to Ole::Storage
git-svn-id: file:///home/svn/framework3/trunk@4608 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-02 05:27:19 +00:00
Matt Miller f9d8c4e820 modifications to support using an explicit target to regen payloads
git-svn-id: file:///home/svn/framework3/trunk@4602 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-01 21:21:10 +00:00
Matt Miller f0fcedf728 raw encoder type wasn't being enforced
git-svn-id: file:///home/svn/framework3/trunk@4599 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-01 21:00:51 +00:00
HD Moore 30a93c33cb The rand_text_* methods now take an optional badchar list and default it to the payload_badchars data
git-svn-id: file:///home/svn/framework3/trunk@4503 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-06 21:02:38 +00:00
Matt Miller cfd9cbb1f1 added code to disable random nops/text generation if DEBUG is set, fixes #43, but still need to update some exploits
git-svn-id: file:///home/svn/framework3/trunk@4497 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-01 08:09:22 +00:00
HD Moore 52b0f8c2aa More code from alex
git-svn-id: file:///home/svn/framework3/trunk@4392 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-15 21:14:11 +00:00
Matt Miller df10ee412d typos
git-svn-id: file:///home/svn/framework3/trunk@4349 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 03:16:08 +00:00
HD Moore 0012389ba0 Adds support for bind payloads in passive exploits
git-svn-id: file:///home/svn/framework3/trunk@4281 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-18 03:51:15 +00:00
HD Moore 43df6869b2 Compatible encoder list from Diaul
git-svn-id: file:///home/svn/framework3/trunk@4235 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 15:47:00 +00:00
HD Moore f4d6983a74 Add pattern_create to exploit mixins
git-svn-id: file:///home/svn/framework3/trunk@4147 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-16 06:09:28 +00:00
HD Moore 777e70b088 Addition of the new Pcap interface
Force user to install the pcapx and lorcon libs



git-svn-id: file:///home/svn/framework3/trunk@4114 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-06 05:29:56 +00:00
HD Moore 652cc08711 Only set the abortive_close flag if the socket type supports it
git-svn-id: file:///home/svn/framework3/trunk@4089 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-31 02:11:18 +00:00
HD Moore d366f3a90c Working lorcon interface
git-svn-id: file:///home/svn/framework3/trunk@4053 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-25 19:16:55 +00:00
Matt Miller e6b9e4f24b a few tweaks to make things more reliable, added wfs_delay
git-svn-id: file:///home/svn/framework3/trunk@4045 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-17 00:16:04 +00:00
Matt Miller 465ea3c677 initial integration of basic kernel-mode payload support
git-svn-id: file:///home/svn/framework3/trunk@4044 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 23:59:14 +00:00
Matt Miller 7b0c80b922 mixins method
git-svn-id: file:///home/svn/framework3/trunk@4040 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 08:06:52 +00:00
Matt Miller b354c82258 ypops overflow ported
git-svn-id: file:///home/svn/framework3/trunk@4021 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-12 03:24:31 +00:00
Matt Miller abf2e057c8 apache chunked encoding win32 port
git-svn-id: file:///home/svn/framework3/trunk@4017 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 08:31:54 +00:00
HD Moore 7fc40e4734 More work towards automation
git-svn-id: file:///home/svn/framework3/trunk@3902 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 00:39:23 +00:00
Matt Miller d11604cca9 filter out privileged payloads used with non-privileged exploits
git-svn-id: file:///home/svn/framework3/trunk@3869 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-12 05:58:07 +00:00
HD Moore 904449b923 Post-Beta2 bugfix for 'show payloads' and the new generic payload system.
git-svn-id: file:///home/svn/framework3/trunk@3847 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-28 05:45:36 +00:00
Matt Miller ea06abe5bb support for generic payloads
git-svn-id: file:///home/svn/framework3/trunk@3843 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-26 02:13:25 +00:00
HD Moore 817c4c189f Timeouts added for handlers
git-svn-id: file:///home/svn/framework3/trunk@3773 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-29 22:37:39 +00:00
vlad902 0d2fab2f27 Support for SunRPC
git-svn-id: file:///home/svn/incoming/trunk@3422 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 02:45:07 +00:00
HD Moore e02eb0d2eb Fixed to NOP vs Nop, Encoder vs ENCODER, setting the preferred NOP
Fixed multiple CPU spinning bugs in the alpha2 encoders
Fixed SiteReference to expose site type and value


git-svn-id: file:///home/svn/incoming/trunk@3401 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:09:40 +00:00
Matt Miller ba0b13292b support for preferred nop
git-svn-id: file:///home/svn/incoming/trunk@3399 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 01:11:26 +00:00
Matt Miller c81e6a799d properly pass encoder selection on to payload encoder
git-svn-id: file:///home/svn/incoming/trunk@3367 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-11 18:16:33 +00:00
Matt Miller 237af88317 update to encoder and exploit classes to support target/exploit specific encoder type/encoder options
git-svn-id: file:///home/svn/incoming/trunk@3315 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 02:25:47 +00:00
Matt Miller a590caaf77 fix for merging compat options and for mirroring Payload->Compat with Compat->Payload
git-svn-id: file:///home/svn/incoming/trunk@3304 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-03 04:43:40 +00:00
Matt Miller 00d15f8f1d reinitializing counters
git-svn-id: file:///home/svn/incoming/trunk@3289 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:26:34 +00:00
Matt Miller a4b622d425 fix for nop ui thing maybe
git-svn-id: file:///home/svn/incoming/trunk@3267 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 02:38:18 +00:00
Matt Miller 410770bae6 fixes for some socket association stuff
git-svn-id: file:///home/svn/incoming/trunk@3233 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-15 04:46:52 +00:00
HD Moore 6d087fe0f3 exploit.target now returns the default target_idx, even if its 0
git-svn-id: file:///home/svn/incoming/trunk@3232 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-15 04:34:26 +00:00
HD Moore 2ecec3db87 More
git-svn-id: file:///home/svn/incoming/trunk@3223 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 03:14:51 +00:00
HD Moore e79c9f8658 Something is still breaking, use w3who, show payloads, exploit, breaks
git-svn-id: file:///home/svn/incoming/trunk@3218 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:21:23 +00:00
HD Moore 6c2da4d313 Imap exploits
Addition of MC as a common author
Added the IMAP mixin
Fixed bug in base64


git-svn-id: file:///home/svn/incoming/trunk@3172 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-05 05:00:27 +00:00
Matt Miller ebf9cf5c48 add none to default
git-svn-id: file:///home/svn/incoming/trunk@3158 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-29 02:43:20 +00:00
HD Moore 9340ecdeab IIS exploits ported
Added on_new_session callback and session_created? flag to exploit
Fixed socket fd leak in Comm::Local


git-svn-id: file:///home/svn/incoming/trunk@3135 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-27 18:42:44 +00:00
HD Moore 7624b4d78a Bug fixes for alphanum vs alphanumeric
Added some target print code to the brightstor explotis
Added the backupexec epxloits


git-svn-id: file:///home/svn/incoming/trunk@3132 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-27 01:51:50 +00:00
HD Moore 40aa62968f Arkeia exploits added
git-svn-id: file:///home/svn/incoming/trunk@3129 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 19:56:03 +00:00
HD Moore 7403e8bf23 Mssql code!
git-svn-id: file:///home/svn/incoming/trunk@3122 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 11:16:36 +00:00
HD Moore fb8b56f55f Changed up the way mixins are handled, all exploits just require 'msf/core' and
all current mixins will be loaded. Egghunter was moved to a mixin and generates
based on target arch and platform.


git-svn-id: file:///home/svn/incoming/trunk@3111 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 00:04:26 +00:00
Matt Miller 96d75dcbb4 support for aborting sockets once a remote, non-find exploit succeeds
git-svn-id: file:///home/svn/incoming/trunk@3082 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 18:50:33 +00:00
Matt Miller 5676117bff last of normalized docs from last night
git-svn-id: file:///home/svn/incoming/trunk@3030 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 15:11:43 +00:00
Matt Miller eeda1d06d7 woop
git-svn-id: file:///home/svn/incoming/trunk@3023 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:49:02 +00:00
Matt Miller 05a84cc7da bug fixes in x86 asm, jmp call additive, payload generation, and new exploit
git-svn-id: file:///home/svn/incoming/trunk@3021 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:22:03 +00:00
Matt Miller 6a5870ddcd updated comments to be more uniformed in class definition
git-svn-id: file:///home/svn/incoming/trunk@3004 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 16:49:45 +00:00
Matt Miller 1c3fc58349 updated logging levels and defined guidelines
git-svn-id: file:///home/svn/incoming/trunk@3002 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 00:27:59 +00:00
Matt Miller a6d6cedd1d automatic module subscription to events
git-svn-id: file:///home/svn/incoming/trunk@2980 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-30 22:20:29 +00:00
Matt Miller 81c8cf3104 documentation fixes, code cleanup
git-svn-id: file:///home/svn/incoming/trunk@2973 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-19 03:20:20 +00:00