8cf8fe9436
Making postgres_version more subdued in its successful fingerprint reporting with print_status instead of print_good, since other fingerprinting modules use print_status for the most part.
...
git-svn-id: file:///home/svn/framework3/trunk@10313 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-14 14:43:56 +00:00
5de3146533
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10273 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-09 15:47:35 +00:00
8cf89d7e05
fix a typo
...
git-svn-id: file:///home/svn/framework3/trunk@10211 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-01 01:57:22 +00:00
6b1eb27ab5
put scanner modules in the scanner directory
...
git-svn-id: file:///home/svn/framework3/trunk@10210 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-01 01:49:06 +00:00
21540e22ed
Checking in missing reporting stuff for bruteforce. Namely, report_exploit, also changes ftp's pw type to just "password" and re-opens newly verified sessions.
...
git-svn-id: file:///home/svn/framework3/trunk@10205 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-31 20:33:16 +00:00
6d6a547b34
Fixes #2412 . Adds a creds table, modifies the db_report_auth API, adds the db_creds and db_add_cred commands.
...
git-svn-id: file:///home/svn/framework3/trunk@10034 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-18 00:58:20 +00:00
acb82fa857
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10010 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-13 23:11:14 +00:00
040a292181
Create a new mixin that changes SMBUser/SMBPass to normal options, include this mixin within SMB modules that more often than not require authentication
...
git-svn-id: file:///home/svn/framework3/trunk@9981 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-12 15:00:58 +00:00
929d7bd158
Patch from Robin Wood
...
git-svn-id: file:///home/svn/framework3/trunk@9980 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-12 14:45:24 +00:00
7a612cd6af
fix up vuln version info, fixes #2353
...
git-svn-id: file:///home/svn/framework3/trunk@9974 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-09 17:34:59 +00:00
e26d4ded08
Import the scanner and utility modules for the VxWorks WDB Agent service
...
git-svn-id: file:///home/svn/framework3/trunk@9945 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-02 05:56:26 +00:00
8daeccafa6
Changing logic for the VRFY test.
...
git-svn-id: file:///home/svn/framework3/trunk@9940 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-27 22:12:18 +00:00
f6033b9bd6
change some print_status to print_error, rename a few msft modules using msb convention
...
git-svn-id: file:///home/svn/framework3/trunk@9929 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-25 21:37:54 +00:00
2482a83526
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9927 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-25 19:14:00 +00:00
19aab08526
Adding SMTP enumerator, provided by Heyder Andrade. Thanks!
...
git-svn-id: file:///home/svn/framework3/trunk@9905 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-21 15:23:16 +00:00
8bbd1c3c7b
adds updated cert scanner from Thomas Ring, fixes #1752
...
git-svn-id: file:///home/svn/framework3/trunk@9837 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-15 19:23:05 +00:00
b4634a98d7
whitspace
...
git-svn-id: file:///home/svn/framework3/trunk@9833 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-14 20:27:42 +00:00
b44ba8e8bf
Treat no-reply and general errors as indication to try the next port
...
git-svn-id: file:///home/svn/framework3/trunk@9827 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-14 17:08:08 +00:00
f2bbb368ea
datastore values are always set to default during initialize(), do stuff like this in setup() instead
...
git-svn-id: file:///home/svn/framework3/trunk@9805 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-13 19:05:34 +00:00
e67e231659
Adds Rex::Text.to_hex_ascii(), replaces the gsub on the banner checks to use it.
...
git-svn-id: file:///home/svn/framework3/trunk@9804 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-13 18:52:27 +00:00
06e49b9287
Use a form of the socket create call that actually pivots
...
git-svn-id: file:///home/svn/framework3/trunk@9789 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-12 03:30:08 +00:00
55763051aa
Enable threading of the tcp connect scan (per host)
...
git-svn-id: file:///home/svn/framework3/trunk@9760 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 22:21:34 +00:00
c1f74794eb
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9744 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 23:34:50 +00:00
64fb3624d6
Clean up UDP probe module a little, add an nbname_probe module that's nearly identical to nbname, but allows for pivot scans.
...
git-svn-id: file:///home/svn/framework3/trunk@9735 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-08 17:31:48 +00:00
4705998f6c
do not access res.code if res is nil, fixes #2184
...
git-svn-id: file:///home/svn/framework3/trunk@9726 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 19:52:05 +00:00
ea12f49bc7
fix type, thx xanda, fixes #2198
...
git-svn-id: file:///home/svn/framework3/trunk@9713 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:36:21 +00:00
6c0c3c25ee
Fixes #2191 . Reports closed ports, and also alters the print_status messages to be consistent with other scan modules.
...
git-svn-id: file:///home/svn/framework3/trunk@9677 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-06 15:53:05 +00:00
1ab0237591
Adds a pivot friendly version of the sweeper
...
git-svn-id: file:///home/svn/framework3/trunk@9675 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-06 14:56:36 +00:00
9984b662e0
switch some URL references to US-CERT-VU type
...
git-svn-id: file:///home/svn/framework3/trunk@9666 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-03 01:09:32 +00:00
684f604448
small fix
...
git-svn-id: file:///home/svn/framework3/trunk@9657 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-01 23:50:47 +00:00
0882838491
ensure binary mode when opening files, whitespace fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9653 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-01 23:33:07 +00:00
bcf61758d1
add scanner module from xanda, fixes #2164
...
git-svn-id: file:///home/svn/framework3/trunk@9645 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-01 20:09:08 +00:00
93b09648c7
add additional CVE reference, cleanup references
...
git-svn-id: file:///home/svn/framework3/trunk@9642 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-01 19:42:11 +00:00
2ddab423ce
commit updates from Tyler Krpata
...
git-svn-id: file:///home/svn/framework3/trunk@9630 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-27 07:15:17 +00:00
61bee576c2
updated version module
...
git-svn-id: file:///home/svn/framework3/trunk@9629 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-26 14:39:51 +00:00
12fbdcd878
add http_fingerprint calls to modules that use various headers
...
git-svn-id: file:///home/svn/framework3/trunk@9627 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-25 20:53:12 +00:00
2ab5983e2a
more whitespace fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9626 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-25 19:49:23 +00:00
5f9680d902
Fixes #2133 . This seems to handle many keyfiles pretty well, even if they're concatenated together. Calling it closed.
...
git-svn-id: file:///home/svn/framework3/trunk@9602 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-24 01:00:08 +00:00
d0e7736b2e
See #2133 Ack dropping ugly timestamp
...
git-svn-id: file:///home/svn/framework3/trunk@9600 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-23 23:01:03 +00:00
dbdab1f282
See #2133 . Needs more testing, but solves the immediate problem of dying in the face of MaxAuthTries.
...
git-svn-id: file:///home/svn/framework3/trunk@9599 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-23 22:58:56 +00:00
2cf9944681
See #2134 . Fixes all aux modules that uses sleep().
...
git-svn-id: file:///home/svn/framework3/trunk@9582 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-22 18:58:38 +00:00
f14b3221ca
move http version reporting into the HttpClient mixin
...
git-svn-id: file:///home/svn/framework3/trunk@9579 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-22 01:39:43 +00:00
1874ce3ac3
Fixes typo and a to_s problem in AXIS LFI module.
...
git-svn-id: file:///home/svn/framework3/trunk@9572 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-21 20:42:41 +00:00
752905a777
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9571 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-21 16:53:52 +00:00
71fd2152aa
add jboss vuln scanner from Tyler Krpata
...
git-svn-id: file:///home/svn/framework3/trunk@9570 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-21 16:49:44 +00:00
3bca9baa25
Login failures are verbose errors, not just verbose statuses, for DB2.
...
git-svn-id: file:///home/svn/framework3/trunk@9567 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-21 15:10:58 +00:00
613f288226
Fix up ssh_login_pubkey's session management for more effective session reuse.
...
git-svn-id: file:///home/svn/framework3/trunk@9563 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-19 15:03:27 +00:00
15bf5ff773
Handle RSTs specifically, manage the probe timeout better.
...
git-svn-id: file:///home/svn/framework3/trunk@9551 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-17 15:16:39 +00:00
be6e0b3393
Fixes #1493 , applying patch provided by Vitor Moreira. Thanks a ton for the audit work!
...
git-svn-id: file:///home/svn/framework3/trunk@9550 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-17 14:03:53 +00:00
98b0de2c3f
add osvd ref
...
git-svn-id: file:///home/svn/framework3/trunk@9549 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-17 11:00:04 +00:00
19596276ab
Adding nginx source disclosure aux module (CVE-2010-2263), contributed by Tiago Ferreira. Thanks!
...
git-svn-id: file:///home/svn/framework3/trunk@9548 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-17 01:56:09 +00:00
14706a17e8
Actually report the DAS port as an open service, not just a note.
...
git-svn-id: file:///home/svn/framework3/trunk@9533 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-16 16:20:30 +00:00
cb69b0c134
Fixes #2101 . Introduces a proper :skip_user, and adds better comment docs to auth_brute to describe the intended use of each return code.
...
git-svn-id: file:///home/svn/framework3/trunk@9529 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-15 19:10:15 +00:00
0e8bdca1e2
Allows mssql_login to bail on a host if it's unresponsive.
...
git-svn-id: file:///home/svn/framework3/trunk@9528 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-15 18:43:25 +00:00
35630e3c17
Fix CVE references and invalid author entries
...
git-svn-id: file:///home/svn/framework3/trunk@9511 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-13 16:01:01 +00:00
53acdcc98b
Prevent constant replies from hanging the scan
...
git-svn-id: file:///home/svn/framework3/trunk@9509 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-13 12:16:30 +00:00
698da3bdea
add CVE for cognos express
...
git-svn-id: file:///home/svn/framework3/trunk@9502 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-12 09:37:21 +00:00
5194476191
fix problem reported by Vitor Moreira, see #1493
...
git-svn-id: file:///home/svn/framework3/trunk@9501 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-12 09:15:50 +00:00
d9ffa9753e
Skip users that are explicitly disallowed from loggin in over telnet.
...
git-svn-id: file:///home/svn/framework3/trunk@9498 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-11 22:28:59 +00:00
33212ae5ba
small typo fixed. Thanks to Craig Hand.
...
git-svn-id: file:///home/svn/framework3/trunk@9494 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-11 19:01:17 +00:00
e32abab8dc
a HTTP -> an HTTP ( http://www.english-zone.com/grammar/a-anlessn.html )
...
git-svn-id: file:///home/svn/framework3/trunk@9488 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-11 16:12:05 +00:00
c62b62d35d
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9486 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-11 15:17:23 +00:00
d26ebfa365
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9476 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-10 20:31:21 +00:00
bccd9a4b94
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@9472 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-10 14:14:02 +00:00
744dcf9616
Adding attribution tage to axis LFI.
...
git-svn-id: file:///home/svn/framework3/trunk@9471 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-10 13:36:03 +00:00
468aa07f48
Adding Axis LFI module, submitted by Tiago Ferreira. Thanks!
...
Also normalizing auth info for DB reporting.
git-svn-id: file:///home/svn/framework3/trunk@9470 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-10 13:32:27 +00:00
6e98191bdd
Adding authentication brute forcer for Apache Axis2, submitted by Leandro Oliveira. Thanks!
...
git-svn-id: file:///home/svn/framework3/trunk@9467 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-10 01:53:54 +00:00
3b8319a545
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@9465 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-09 21:25:04 +00:00
0e442ff74c
Adding Tomcat user enumeration module for CVE-2009-0580, submitted by Heyder Andrade. Thanks!
...
git-svn-id: file:///home/svn/framework3/trunk@9464 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-09 21:15:49 +00:00
922d362fdc
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@9463 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-09 21:10:08 +00:00
9d1ace25ce
Adding BID and CVE to wordpress_login_enum
...
git-svn-id: file:///home/svn/framework3/trunk@9462 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-09 20:43:47 +00:00
336a9bdb37
Adding Wordpress login brute forcer and account enumeration module, submitted by Tiago Ferreira. Thanks!
...
git-svn-id: file:///home/svn/framework3/trunk@9461 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-09 20:37:56 +00:00
d8609b85e3
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9460 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-09 18:41:58 +00:00
7677bbedea
Dealing with a hung quit state. oof.
...
git-svn-id: file:///home/svn/framework3/trunk@9458 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-09 17:27:32 +00:00
1500858d2d
Fixes #2043 . Thanks Heyder!
...
git-svn-id: file:///home/svn/framework3/trunk@9453 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-08 21:14:19 +00:00
dd71e4ac58
Fixes #2034 . Adds the SINGLE_SESSION option, adds an ftp_quit method to handle sending QUIT and disconnecting.
...
git-svn-id: file:///home/svn/framework3/trunk@9451 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-08 16:30:03 +00:00
a0e252ad75
See #2034 . This adds a pretty decent reconnection handler -- keep trying until you're dropped, so this is handy for sites that greylist the banner display.
...
Also ensures that anonymous:somebrowserID is always checked.
git-svn-id: file:///home/svn/framework3/trunk@9447 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-07 21:37:29 +00:00
d655521c93
Clarify description for USER_FILE and PASS_FILE
...
git-svn-id: file:///home/svn/framework3/trunk@9433 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 23:30:33 +00:00
36041419f9
Clarify description for USER_FILE and PASS_FILE
...
git-svn-id: file:///home/svn/framework3/trunk@9432 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 23:26:41 +00:00
4d0a64fcd8
add additional references
...
git-svn-id: file:///home/svn/framework3/trunk@9429 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 16:34:13 +00:00
7824ab661a
style compliance fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9412 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-03 18:25:29 +00:00
55f82f0b09
add open proxy detection aux from Matteo Cantoni
...
git-svn-id: file:///home/svn/framework3/trunk@9411 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-03 18:18:00 +00:00
d41e94050e
See #2034 . This adds a basic FTP bruteforce module. It also makes some minor changes to auth_brute (allows for both SMB and FTP credentials to get mapped to the basic 'USERNAME' and 'PASSWORD' datastores), and touches up the other FTP modules slightly.
...
git-svn-id: file:///home/svn/framework3/trunk@9388 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-01 18:17:26 +00:00
ed79d649da
didn't know the default accounts where added. add the cognoss port.
...
git-svn-id: file:///home/svn/framework3/trunk@9382 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-31 17:16:50 +00:00
6dc55df402
Add TCP versions of the udp enumerators
...
git-svn-id: file:///home/svn/framework3/trunk@9378 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-27 21:19:53 +00:00
3a5d4792ee
print_good for summary line too
...
git-svn-id: file:///home/svn/framework3/trunk@9365 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-25 18:14:27 +00:00
bf4cf3cc85
Gives the finger user enumeration module an overhaul -- more descriptive status messages, more friendly connect/disconnect, and if the target supports multiple usernames per request, do that.
...
git-svn-id: file:///home/svn/framework3/trunk@9364 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-25 18:04:06 +00:00
1be5df045f
whitespace fixes
...
git-svn-id: file:///home/svn/framework3/trunk@9362 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-25 01:52:59 +00:00
f37d61922b
Adding a case for Linux and friends for finger enumeration.
...
git-svn-id: file:///home/svn/framework3/trunk@9354 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-24 21:44:17 +00:00
14a6a1b95f
another error message update, see #1994
...
git-svn-id: file:///home/svn/framework3/trunk@9351 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-24 14:56:23 +00:00
1a2be34a63
Fixes #2002 . Needed to work with some pipelining to get this all to work right, but it seems to function now pretty well -- if the target takes Basic, do basic, if the target takes NTLM, do NTLM. Should implement Digest too, but I don't think hardly anyone uses that.
...
git-svn-id: file:///home/svn/framework3/trunk@9346 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-22 17:58:01 +00:00
e02fd71de9
See #2002 . Skip authentication schemes that we don't know how to do.
...
git-svn-id: file:///home/svn/framework3/trunk@9343 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-21 17:32:54 +00:00
793e6ddd52
tweak error message, see #1994
...
git-svn-id: file:///home/svn/framework3/trunk@9342 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-21 15:38:07 +00:00
688c76f7a0
catch ConnectionError exception before it gets passed higher up, fixes #1994
...
git-svn-id: file:///home/svn/framework3/trunk@9335 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-21 00:33:12 +00:00
ce12be8533
Dont let the session socket get cleaned up
...
git-svn-id: file:///home/svn/framework3/trunk@9315 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-17 20:34:20 +00:00
f440317225
store the name of the file we got the key from
...
git-svn-id: file:///home/svn/framework3/trunk@9300 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-14 06:00:06 +00:00
0c7f1a7449
Moving MySQL version requirements even farther back.
...
git-svn-id: file:///home/svn/framework3/trunk@9295 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-12 20:19:09 +00:00
ca3df5dd5e
Give an error message, don't just quietly fail.
...
git-svn-id: file:///home/svn/framework3/trunk@9293 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-12 18:23:30 +00:00
f9aa3a0c70
Bumping acceptable MySQL scan target back to version 4.1.11
...
git-svn-id: file:///home/svn/framework3/trunk@9288 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-12 14:52:00 +00:00
aedf63c063
Add Lotus Domino password hash dumper from Tiago Ferreira
...
git-svn-id: file:///home/svn/framework3/trunk@9253 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-09 00:44:23 +00:00
ffd6dbfaab
include the reporting mixin
...
git-svn-id: file:///home/svn/framework3/trunk@9234 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-05 23:39:12 +00:00
d13adef38e
Fix typo
...
git-svn-id: file:///home/svn/framework3/trunk@9233 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-05 23:21:47 +00:00
5b7cdc2350
Lotus Domino bruteforce module by Tiago Ferreira
...
git-svn-id: file:///home/svn/framework3/trunk@9232 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-05 23:07:00 +00:00
62fbc0ad5b
use empty strings instead of nil. fixes #1717
...
git-svn-id: file:///home/svn/framework3/trunk@9228 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-05 20:03:47 +00:00
0c63df8db5
reference updates
...
git-svn-id: file:///home/svn/framework3/trunk@9225 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-05 18:18:51 +00:00
c71ca00efb
Remove debugging line
...
git-svn-id: file:///home/svn/framework3/trunk@9224 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-05 16:17:36 +00:00
48a03e1dd3
Handle OS X better
...
git-svn-id: file:///home/svn/framework3/trunk@9223 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-05 16:08:59 +00:00
dc65be2cbe
lotus domino version module
...
git-svn-id: file:///home/svn/framework3/trunk@9221 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-05 03:08:30 +00:00
4bc86e603e
fix a couple more silly regex mishaps
...
git-svn-id: file:///home/svn/framework3/trunk@9220 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-04 23:09:32 +00:00
d1c3b71fd4
Fix a typo
...
git-svn-id: file:///home/svn/framework3/trunk@9215 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-03 19:35:59 +00:00
71a4ec6204
Pluralization.
...
git-svn-id: file:///home/svn/framework3/trunk@9214 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-03 18:43:44 +00:00
0e72894e58
more cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@9212 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-03 17:13:09 +00:00
42da9e899a
Improvements to the cleanup process, close sockets properly for exploits and auxiliary
...
git-svn-id: file:///home/svn/framework3/trunk@9187 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-01 16:26:24 +00:00
0ea6eca4bc
big module whitespace/formatting cleanup pass
...
git-svn-id: file:///home/svn/framework3/trunk@9179 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-30 08:40:19 +00:00
0685a75216
switch raw_send_recv for send_cmd, fixes #606
...
git-svn-id: file:///home/svn/framework3/trunk@9169 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-29 04:47:47 +00:00
7464361d0a
Handle ENOBUFS errors
...
git-svn-id: file:///home/svn/framework3/trunk@9154 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-27 14:38:17 +00:00
08117ca000
Forcing :critical => true for report_auth_info
...
git-svn-id: file:///home/svn/framework3/trunk@9150 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-26 22:23:37 +00:00
a953c47cfb
remove carriage returns
...
git-svn-id: file:///home/svn/framework3/trunk@9140 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-26 18:29:24 +00:00
1c6891a3f8
For smb_login, quit trying a username if we learn that the password is expired or if the account is locked out or disabled.
...
git-svn-id: file:///home/svn/framework3/trunk@9117 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-22 22:12:13 +00:00
bd94145d8d
Allows reporting auth credentials to be optional with exploit/windows/smb/psexec. Sometimes you don't want this, especially if you already have an auth credential via smb_login.
...
For auxiliary/scanner/smb/smb_login, if a password hash is used instead of a password, record it as a :hash instead of a :pass when reporting to the DB.
git-svn-id: file:///home/svn/framework3/trunk@9116 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-22 17:23:29 +00:00
888e80f92c
Fixes up various usability bugs with AuthBrute, many of which revolved around smb_login tests.
...
git-svn-id: file:///home/svn/framework3/trunk@9086 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-15 17:29:47 +00:00
5aea21fcb8
speel more godoer
...
git-svn-id: file:///home/svn/framework3/trunk@9080 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-15 02:09:08 +00:00
56d50d6794
match enumusers output more closely
...
git-svn-id: file:///home/svn/framework3/trunk@9069 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 04:39:51 +00:00
29755d7445
updated with the db2remotecmd pipe.
...
git-svn-id: file:///home/svn/framework3/trunk@9067 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 00:59:32 +00:00
a97e4c78bd
Commit the key as :ssh_key, not :pass.
...
git-svn-id: file:///home/svn/framework3/trunk@9065 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-13 21:26:21 +00:00
2a3b8ea57a
Adds a module for scanning hosts for valid login credentials using unencrypted SSH private keys. Also completes the commit for r9059 to record auth_info hashes on successes.
...
git-svn-id: file:///home/svn/framework3/trunk@9062 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-13 19:21:48 +00:00
a3e92b2e75
updated to use report_auth_info() since the sid is need to authenticate.
...
git-svn-id: file:///home/svn/framework3/trunk@9047 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-11 12:36:00 +00:00
498c225555
If its required, it better have a valid default. Fixing
...
git-svn-id: file:///home/svn/framework3/trunk@9028 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-06 16:36:28 +00:00
1de8e13378
Remove the stack traces from these scanners
...
git-svn-id: file:///home/svn/framework3/trunk@9024 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-06 03:57:22 +00:00
61b4500ffd
remove svn:executable from various files
...
git-svn-id: file:///home/svn/framework3/trunk@8974 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-01 16:20:34 +00:00
c9ad11fbe1
Fix typo in title. Thanks ragecyr!
...
git-svn-id: file:///home/svn/framework3/trunk@8961 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-30 17:57:22 +00:00
ba12ddd280
Allow authbrute modules to use a single username/password in a sane way
...
git-svn-id: file:///home/svn/framework3/trunk@8945 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-27 23:52:43 +00:00
9cc4cab9ec
Duplicate the datastore and manually set user/pass in the telnet/ssh modules
...
git-svn-id: file:///home/svn/framework3/trunk@8943 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-27 22:57:29 +00:00
b0425f10cd
Cleanup some of the output
...
git-svn-id: file:///home/svn/framework3/trunk@8942 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-27 22:13:50 +00:00
cd71cfbad1
Handle buggy HTTP servers better
...
git-svn-id: file:///home/svn/framework3/trunk@8921 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-25 21:35:37 +00:00
25ec5fa444
Do a little better password management for services that don't ask for usernames -- fingerprint them ahead of time, and resort the credentials list in a usernameless way. Also, this allows telnet RST's to be treated just as busy services, since sometimes telnet servers get persnickety about a lot of login attempts, but they do come back shortly.
...
git-svn-id: file:///home/svn/framework3/trunk@8920 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-25 21:32:32 +00:00
6d606a7587
Fixes #1304 . Removes the this_cred bit since that got swapped out for the new auth_brute scheme.
...
git-svn-id: file:///home/svn/framework3/trunk@8915 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-25 13:27:29 +00:00
a27c941714
targ_host -> target_host
...
git-svn-id: file:///home/svn/framework3/trunk@8909 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-25 01:09:04 +00:00
dd26a227ef
targ_host -> target_host
...
git-svn-id: file:///home/svn/framework3/trunk@8908 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-25 01:05:23 +00:00
fd97c89959
targ_host --> target_host for consistency with other modules
...
git-svn-id: file:///home/svn/framework3/trunk@8907 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-25 00:41:58 +00:00
282c2fb2b2
targ_host --> target_host for consistency with other modules
...
git-svn-id: file:///home/svn/framework3/trunk@8906 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-25 00:40:50 +00:00
f16b1b5b7a
Add CVE reference for open NFS shares
...
git-svn-id: file:///home/svn/framework3/trunk@8905 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-24 22:40:06 +00:00
af3ab0a260
Handle situations where any user/pass is allowed
...
git-svn-id: file:///home/svn/framework3/trunk@8904 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-24 21:11:00 +00:00
3a88909c06
Rename for consistency
...
git-svn-id: file:///home/svn/framework3/trunk@8903 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-24 20:33:21 +00:00
aa1c65f4e6
Add a quick and dirty HTTP scanner
...
git-svn-id: file:///home/svn/framework3/trunk@8901 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-24 20:28:09 +00:00
3dbfd0b8e3
A little too verbose
...
git-svn-id: file:///home/svn/framework3/trunk@8884 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-22 22:44:58 +00:00
1458fbad54
Adds some fingerprinting to the tomcat manager login auxiliary module.
...
git-svn-id: file:///home/svn/framework3/trunk@8883 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-22 22:19:46 +00:00
83d96d713c
Refactoring Auxiliary::AuthBrute. Now that several modules actually use it, the real use cases have become obvious. So, refactored for simplicity and readability. Also touched up all the authentication modules to behave consistently.
...
git-svn-id: file:///home/svn/framework3/trunk@8879 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-22 20:07:26 +00:00
4c913a576d
Remove OS reporting, this is handled better elsewhere
...
git-svn-id: file:///home/svn/framework3/trunk@8871 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-22 00:20:09 +00:00
9632f8251a
Move OS-level fingerprints out, report note-level fingerprints instead
...
git-svn-id: file:///home/svn/framework3/trunk@8869 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-22 00:09:04 +00:00
480380003c
Make verbose status printing standardized across login modules
...
git-svn-id: file:///home/svn/framework3/trunk@8866 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-21 18:42:47 +00:00
9311253e32
<pre>revert stty -echo execution -- it breaks telnets to some devices</pre>
...
git-svn-id: file:///home/svn/framework3/trunk@8848 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-18 15:40:15 +00:00
3f69bb8053
Fixes the handling for telnet services when the server is "busy" -- this is common wit HP JetDirect servers, where the server will respond with a busy message up to several seconds after the last connection logged off. While this does mean that credential tests will be skipped, they will at least not be scored incorrectly as false postives.
...
Also, this removes the disconnect() method in favor of self.sock.close(). Disconnect seems to have a tendency to leave sessions half-closed, which will cause a busy state to never clear. self.sock.close doesn't appear to have this effect if you use a slower bruteforce_speed option (3 seems to work all right).
git-svn-id: file:///home/svn/framework3/trunk@8835 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-16 18:45:50 +00:00
0f7a6cd1f2
Store the name and domain in the service info
...
git-svn-id: file:///home/svn/framework3/trunk@8826 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-15 21:35:21 +00:00
1b54c0e493
Closes #1129 . Merges in Thomas's xdb_sid_brute patch
...
git-svn-id: file:///home/svn/framework3/trunk@8825 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-15 20:31:53 +00:00
b1af1feb3f
Use double not single quotes
...
git-svn-id: file:///home/svn/framework3/trunk@8815 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-14 04:13:00 +00:00
821a0bcf37
SMB share enumeration
...
git-svn-id: file:///home/svn/framework3/trunk@8813 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-14 03:44:50 +00:00
84b7f4bb85
Store the nfs service and export information into the db
...
git-svn-id: file:///home/svn/framework3/trunk@8812 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-14 00:34:46 +00:00
a6377cc63b
turn off echo for telnet sessions
...
git-svn-id: file:///home/svn/framework3/trunk@8801 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-11 23:03:44 +00:00
5b6442aa58
added a patch and added a new module from Thomas Ring.
...
git-svn-id: file:///home/svn/framework3/trunk@8800 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-11 22:55:37 +00:00
b01f9ff233
adds a patch from Thomas Ring.
...
git-svn-id: file:///home/svn/framework3/trunk@8775 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-10 22:42:49 +00:00
efbdaba298
Making telnet timeouts much less disasterous, since they can happen pretty commonly.
...
git-svn-id: file:///home/svn/framework3/trunk@8769 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-10 21:54:20 +00:00
542a9a0617
Report MySQL application-level protocol errors (such as host not allowed messages).
...
git-svn-id: file:///home/svn/framework3/trunk@8767 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-10 17:56:03 +00:00
4415e3fbbf
Fixing up ssh_login reporting.
...
git-svn-id: file:///home/svn/framework3/trunk@8759 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-09 22:07:04 +00:00
a239963a7d
Handle wrapped TCP services better
...
git-svn-id: file:///home/svn/framework3/trunk@8756 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-09 05:38:28 +00:00
b1973c6630
Adds detection and exploitation coverage for the Energizer Duo trojan
...
git-svn-id: file:///home/svn/framework3/trunk@8749 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-08 19:06:50 +00:00
a35817f0cc
Store more information
...
git-svn-id: file:///home/svn/framework3/trunk@8742 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-08 13:52:39 +00:00
d5b85db27f
Fixes a false positive when the server always replies with 200 OK
...
git-svn-id: file:///home/svn/framework3/trunk@8740 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-08 05:26:33 +00:00
a5d05fc2fb
Fix up a typo
...
git-svn-id: file:///home/svn/framework3/trunk@8738 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-08 04:39:06 +00:00
5cc63cf983
Report the epm service as well
...
git-svn-id: file:///home/svn/framework3/trunk@8737 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-08 04:35:14 +00:00
5ce7b4d186
Pass this_cred for tomcat_mgr_login
...
git-svn-id: file:///home/svn/framework3/trunk@8730 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-05 20:05:01 +00:00
3d1f773f18
Reimplementing DB2's auth checker to use the same methods as the other auth_brute modules.
...
git-svn-id: file:///home/svn/framework3/trunk@8722 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-05 00:44:39 +00:00
a5e187bd69
Add the ability to slow down brute force sessions.
...
git-svn-id: file:///home/svn/framework3/trunk@8719 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-04 23:29:26 +00:00
0ed5fc1af1
change VERBOSE option from OptString to OptBool
...
git-svn-id: file:///home/svn/framework3/trunk@8715 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-04 20:59:49 +00:00
c07b47b30b
explicitly rescue timeouts since they inherit from ::Interrupt on ruby 1.8
...
git-svn-id: file:///home/svn/framework3/trunk@8694 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-02 23:08:05 +00:00
7d3ac25586
Adds Citrix-ICA to the UDP sweep discovery module.
...
git-svn-id: file:///home/svn/framework3/trunk@8693 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-02 18:48:28 +00:00
7a37934a01
process autorun scripts for telnet_login and ssh_login
...
1. create session.process_autoruns in Msf::Sessions::CommandShell
2. call process_autoruns from within the handler on_session code
4. set user_input and user_output in sessions base set_from_exploit method
5. remove on_session from Msf::Sessions::CommandShellOptions
6. include CommandShellOptions into telnet_login and ssh_login
7. call sess.process_autoruns from telnet_login and ssh_login
8. celebrate (while crossing fingers of course)!
git-svn-id: file:///home/svn/framework3/trunk@8692 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-02 18:07:50 +00:00
09a669875c
Bumping the minimum version of MySQL to try back to 4.1.20, no problems seen
...
on that build.
git-svn-id: file:///home/svn/framework3/trunk@8691 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-02 16:52:22 +00:00
453451a26d
Check the version number of the remote MySQL server before attempting
...
to log in. Sadly, the library we're using right now doesn't know
how to correctly negotiate 4.x and 3.x versions of MySQL. Until that
gets resolved (by writing a new library for these old versions),
this will at least prevent false positives/negatives from getting
reported.
git-svn-id: file:///home/svn/framework3/trunk@8681 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-01 22:56:00 +00:00
e2af2f9ab9
Again.
...
git-svn-id: file:///home/svn/framework3/trunk@8680 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-01 20:20:37 +00:00
e1a02d602d
Fixing up the tomcat login scanner.
...
git-svn-id: file:///home/svn/framework3/trunk@8679 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-01 20:20:20 +00:00
304a238d3e
Add pop3/imap4 scanners
...
git-svn-id: file:///home/svn/framework3/trunk@8664 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-26 19:06:26 +00:00
0d87003497
Rename for consistency
...
git-svn-id: file:///home/svn/framework3/trunk@8662 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-26 18:48:09 +00:00
2cbf64b85a
Fix up the stored banner for SMTP
...
git-svn-id: file:///home/svn/framework3/trunk@8661 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-26 18:47:48 +00:00
e1c5334d56
add register_autofilter_ports
...
git-svn-id: file:///home/svn/framework3/trunk@8652 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-26 01:53:02 +00:00
d5e07a3ba9
Change info
...
git-svn-id: file:///home/svn/framework3/trunk@8650 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-26 01:09:09 +00:00
7b7f3de307
allow a single user/pass
...
git-svn-id: file:///home/svn/framework3/trunk@8646 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-25 22:45:33 +00:00
3961b9a3dd
allow a single user/pass
...
git-svn-id: file:///home/svn/framework3/trunk@8645 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-25 22:44:13 +00:00
bd35a70017
Wrapping up the whole timeout sequence in a timeout to avoid getting stuck.
...
git-svn-id: file:///home/svn/framework3/trunk@8643 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-25 21:35:55 +00:00
dfe9698cb3
stop bruting if the page isn't there
...
git-svn-id: file:///home/svn/framework3/trunk@8641 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-25 20:50:46 +00:00
e7a7f254e4
Fixes SSH scanning in to recover in the face of tarpits and tcpwrappers and the like.
...
git-svn-id: file:///home/svn/framework3/trunk@8639 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-25 17:42:51 +00:00
4e7f242230
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@8636 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-25 12:03:44 +00:00
ff703cdb73
fix whitespace and add keywords
...
git-svn-id: file:///home/svn/framework3/trunk@8633 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-25 00:13:56 +00:00
aa3836dbc2
vmware directory traversal module
...
git-svn-id: file:///home/svn/framework3/trunk@8632 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-24 23:58:51 +00:00
d148c95c84
The ssh login code can now create sessions
...
git-svn-id: file:///home/svn/framework3/trunk@8598 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-23 07:12:54 +00:00
80f1f48b2d
Merge in loot and user, fix up telnet to handle eof better
...
git-svn-id: file:///home/svn/framework3/trunk@8594 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-22 23:45:43 +00:00
479f2939fc
Track the target host/workspace through the entire tree, expose to RPC, and use this telnet_login
...
git-svn-id: file:///home/svn/framework3/trunk@8583 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-22 17:54:44 +00:00
c9973be2d7
make the smb_login module smarted about lockouts, disabled accounts, and samba
...
git-svn-id: file:///home/svn/framework3/trunk@8577 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-21 19:31:20 +00:00
a2383611c2
Fix single user/pass usage
...
git-svn-id: file:///home/svn/framework3/trunk@8576 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-21 19:08:36 +00:00
9fc58c1e1f
Collect command output and report it
...
git-svn-id: file:///home/svn/framework3/trunk@8569 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-20 16:06:01 +00:00
0ba3d18032
Updated the report format to match new syntax
...
git-svn-id: file:///home/svn/framework3/trunk@8566 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-20 05:50:05 +00:00
0a8696436e
Fix up the telnet login code to handle varied responses better
...
git-svn-id: file:///home/svn/framework3/trunk@8565 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-20 05:49:40 +00:00
007930c784
add svn keywords property
...
git-svn-id: file:///home/svn/framework3/trunk@8561 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-19 07:13:31 +00:00
ab3b173040
So, funny story with net-ssh. Turns out, there's insufficient housekeeping on closing out connections in the event of authentication failures, which means you can start sucking up connections pretty good when you fail authentication a whole bunch of times. Fixed in the library, so now, if you pass a block to Net::SSH.start, and the authentication fails, the connection will still close out correctly, just as it would when the authentication succeeds.
...
Protip: If you don't pass a block, it's *still on the caller* to deal with the connection somehow. You'll want to basically always assign the connection to someplace you control, like so: sock = Net::SSH.start(whatever); sock.close). Otherwise, if you just Net::SSH.start without a block /or/ without assignment, you'll be stuck with all these useless connections hanging around.
git-svn-id: file:///home/svn/framework3/trunk@8556 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-19 03:02:25 +00:00
78aa6f5ba4
Added DB2 remote administration scan to udp_sweep
...
git-svn-id: file:///home/svn/framework3/trunk@8554 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-18 21:21:17 +00:00
f58558f605
Updated all the brute force login modules to record successful logins and avoid duplicating credentials.
...
git-svn-id: file:///home/svn/framework3/trunk@8553 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-18 19:04:51 +00:00
38a3b8203e
Properly checking for credential duplication.
...
git-svn-id: file:///home/svn/framework3/trunk@8551 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-18 18:11:18 +00:00
534d56cdd8
adjust text wrap
...
git-svn-id: file:///home/svn/framework3/trunk@8550 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-18 18:04:11 +00:00
c24a708db6
See #859 . Adds keyboard-interactive as an acceptable method of authentication.
...
git-svn-id: file:///home/svn/framework3/trunk@8548 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-18 16:11:58 +00:00
27c3266c0a
Serializes telnet brute forcing so it's a little bit faster (as it happens) and
...
about a zillion times more reliable.
git-svn-id: file:///home/svn/framework3/trunk@8543 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-18 00:22:02 +00:00
4197f00701
Moves @credentials_tried and @credentials_good into auth_brute proper, though modules still
...
need to handle them themselves... which telnet and ssh both do now.
git-svn-id: file:///home/svn/framework3/trunk@8542 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-17 21:55:02 +00:00
443e82bc75
Reworked ssh_login to a) handle all SSH errors, b) cease trying users if we already guessed a password and c) cease trying the same user:pass combo more than once.
...
git-svn-id: file:///home/svn/framework3/trunk@8540 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-17 20:12:02 +00:00
1686931efe
More SSH versions
...
git-svn-id: file:///home/svn/framework3/trunk@8532 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-17 14:42:11 +00:00
5fce04ce22
See #843 , but this really just masks the problem. Investigate more thoroughly.
...
git-svn-id: file:///home/svn/framework3/trunk@8529 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-16 23:35:22 +00:00
25ec6e8021
Removing the require rescues for SSH, now that it's shipping in lib directly.
...
git-svn-id: file:///home/svn/framework3/trunk@8528 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-16 23:21:51 +00:00
206b70ace7
Indentation fixes (wrapping everything in a begin;rescue;end, didn't want
...
to obfuscate that with the last change).
git-svn-id: file:///home/svn/framework3/trunk@8522 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-16 18:09:51 +00:00
b45cfb8793
Fixes #808 . Removes the pre-connect test from login and version.
...
git-svn-id: file:///home/svn/framework3/trunk@8521 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-16 18:05:51 +00:00
5a5fb84e2c
strings, not constants
...
git-svn-id: file:///home/svn/framework3/trunk@8502 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-15 13:34:07 +00:00
43e89bf3a2
Consistency fix
...
git-svn-id: file:///home/svn/framework3/trunk@8496 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-14 19:38:47 +00:00
ca4b9bbd52
Ignore lang/service pack for non-Windows hosts in the OS information
...
git-svn-id: file:///home/svn/framework3/trunk@8490 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-14 17:25:05 +00:00
337e00d57e
Swap flavor/name
...
git-svn-id: file:///home/svn/framework3/trunk@8489 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-14 17:13:55 +00:00
352a367857
Handle OS X better
...
git-svn-id: file:///home/svn/framework3/trunk@8488 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-14 17:13:00 +00:00
9c227ea0e7
Improved auxiliary detection
...
git-svn-id: file:///home/svn/framework3/trunk@8481 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-13 23:26:07 +00:00
0e48287310
Adding a quickie ssh_login checker.
...
This will certainly change -- it's mostly just a placeholder now (though it does work).
git-svn-id: file:///home/svn/framework3/trunk@8472 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-12 23:00:36 +00:00
49b0e8a077
Argh should be mssql not tcp.
...
git-svn-id: file:///home/svn/framework3/trunk@8469 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-12 19:58:14 +00:00
fb30d8e8c9
Renaming services to mssql-m and mssql because nobody uses ms-sql-s to talk about port 1433 except /etc/services
...
git-svn-id: file:///home/svn/framework3/trunk@8468 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-12 19:53:18 +00:00
58913b6a71
Trivial fixup on print_status
...
git-svn-id: file:///home/svn/framework3/trunk@8467 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-12 19:16:05 +00:00
537007c9cb
Implementing database reporting for mssql_ping.
...
git-svn-id: file:///home/svn/framework3/trunk@8464 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-12 16:53:46 +00:00
993ba44fcf
SMB updates, better reporting of SSL status for HTTP
...
git-svn-id: file:///home/svn/framework3/trunk@8459 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-11 22:37:00 +00:00
c52b37ea17
Prettify the telnet banner display for db_services
...
git-svn-id: file:///home/svn/framework3/trunk@8458 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-11 20:14:38 +00:00
8a44f4b9d8
Using a proper variable instead of $1 token for ora version.
...
git-svn-id: file:///home/svn/framework3/trunk@8456 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-11 18:29:24 +00:00
53ce10ac12
Switching Oracle scanner to use db_service rather than db_note to record version numbers.
...
git-svn-id: file:///home/svn/framework3/trunk@8455 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-11 17:57:33 +00:00
e4494d3582
Added a verbosity line to telnet.
...
git-svn-id: file:///home/svn/framework3/trunk@8442 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-10 19:06:01 +00:00
65c5eae59e
Calling it postgres instead of postgresql for overall consistency.
...
git-svn-id: file:///home/svn/framework3/trunk@8435 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-09 20:44:23 +00:00
e2d70519d7
add the ability to check for a prompt before sending user/pass; now works with cisco, aix, solaris, linux, and windows telnetds
...
git-svn-id: file:///home/svn/framework3/trunk@8434 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-09 19:07:02 +00:00
a03b7c3feb
Commit the modified auxiliary modules to include a CHOST option so the relevant modules can avail of the new UDP pivoting.
...
git-svn-id: file:///home/svn/framework3/trunk@8432 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-09 16:47:38 +00:00
a92f5f207b
Handle null user lists
...
git-svn-id: file:///home/svn/framework3/trunk@8429 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-09 16:43:26 +00:00
11e8710a60
Catch OpenDomain failures
...
git-svn-id: file:///home/svn/framework3/trunk@8428 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-09 16:34:49 +00:00
36c61ff5ed
Fix typo
...
git-svn-id: file:///home/svn/framework3/trunk@8423 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-09 01:10:29 +00:00
2860d57e01
Cosmetic change to print_status messages to be consistent with Postgres
...
git-svn-id: file:///home/svn/framework3/trunk@8414 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-08 20:12:35 +00:00
d374c16662
Fixed up reporting for DB2 and tested; also added other default usernames for db2.
...
git-svn-id: file:///home/svn/framework3/trunk@8411 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-08 18:54:50 +00:00
0b6c44b2cb
Adding reporting to postgres_login. Logging version info more verbosely for authenticated login, since it's way useful.
...
git-svn-id: file:///home/svn/framework3/trunk@8408 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-08 17:35:58 +00:00
79c68e3784
Fix the description
...
git-svn-id: file:///home/svn/framework3/trunk@8406 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-08 13:53:50 +00:00
c6c1afe543
open sessions when a telnet login succeeds; needs testing on more telnetd's
...
git-svn-id: file:///home/svn/framework3/trunk@8393 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-07 01:24:41 +00:00
3b0b2731fd
fix telnet scanner
...
git-svn-id: file:///home/svn/framework3/trunk@8392 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-07 00:14:29 +00:00
b2518b7c68
Remove the starting host verbage; it gets noisy in scanning mode
...
git-svn-id: file:///home/svn/framework3/trunk@8390 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-06 22:07:44 +00:00
9b59f0e3c2
give the reported service a name
...
git-svn-id: file:///home/svn/framework3/trunk@8377 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-06 00:37:16 +00:00
509b2aab3a
use new api
...
git-svn-id: file:///home/svn/framework3/trunk@8376 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-05 23:00:51 +00:00
0e1af9ed6a
add reporting, see #385
...
git-svn-id: file:///home/svn/framework3/trunk@8375 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-05 21:13:07 +00:00
43bbfefa8f
Adding a Windows signature for Postgres.
...
git-svn-id: file:///home/svn/framework3/trunk@8374 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-05 18:02:13 +00:00
c8cdf9c938
Fixes #811 by implementing an enumerator for PostgreSQL.
...
git-svn-id: file:///home/svn/framework3/trunk@8371 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-05 15:20:59 +00:00
aeba7e0429
Store RPC information
...
git-svn-id: file:///home/svn/framework3/trunk@8370 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-05 14:53:09 +00:00
4f9490f63f
add default username/passwords for IBM Cognos Express Tomcat Manager
...
git-svn-id: file:///home/svn/framework3/trunk@8368 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-04 20:34:55 +00:00
6e8e6ef16a
Fixes #769 by implementing a brute force module for Postgres. A couple notes: If you guess wrong at the database name, you still can try to login with a username and password -- you'll get a successful auth, but then get disconnected. So, that's pretty neat.
...
Also, since Postgres-PR uses the stock TCPSocket object, connection timeouts and other errors take forever. This is avoided in the brute forcer by pre-validating the connection with Rex::Socket, but this is a hack -- it would be better to convert Postgres-PR to a Rex::Socket flavor, so you also get nicer error messages and what all. I did fork it off the main distribute it already anyway, so may as well will open a feature bug on this, but it's pretty low priority.
git-svn-id: file:///home/svn/framework3/trunk@8366 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-03 21:45:13 +00:00
1ee79780e9
fix the http option scanner
...
git-svn-id: file:///home/svn/framework3/trunk@8355 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-02 23:11:18 +00:00
edc64f824e
Added trace.axd scanner by C4an
...
git-svn-id: file:///home/svn/framework3/trunk@8337 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-01 02:49:18 +00:00
7964d0f38a
Renaming wmap modules
...
git-svn-id: file:///home/svn/framework3/trunk@8335 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-01 02:12:30 +00:00
7e5793af2a
New enumeration modules by Mubix
...
git-svn-id: file:///home/svn/framework3/trunk@8331 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-31 00:52:51 +00:00
a76480d42c
See #726 . Cleaning up my gross whitespace.
...
git-svn-id: file:///home/svn/framework3/trunk@8311 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 23:08:39 +00:00
214d624ddc
Fix the report_host() code (broken by previous commit), add an advanced option to store db hosts from monlist
...
git-svn-id: file:///home/svn/framework3/trunk@8283 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 23:25:17 +00:00
71c44dadd8
See #782 . Updating rogue_send form capture_sendto
...
git-svn-id: file:///home/svn/framework3/trunk@8264 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:46:48 +00:00
4374b8ccc4
See #782 . Updating ipidseq to use capture_sendto.
...
git-svn-id: file:///home/svn/framework3/trunk@8263 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:40:38 +00:00
99f9cf76a8
See #782 . Updating syn to use capture_sendto.
...
git-svn-id: file:///home/svn/framework3/trunk@8262 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:34:35 +00:00
280e7f8bdd
See #782 . Revising ack to use the new capture_sendto.
...
git-svn-id: file:///home/svn/framework3/trunk@8261 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:31:36 +00:00
709c634bfa
Renaming sendto to capture_sendto to give the user a hint as to where it came from.
...
git-svn-id: file:///home/svn/framework3/trunk@8260 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:21:33 +00:00
3053bd702a
See #782 . Updated xmas.rb (again), now uses the nicer frontend function sendto. Diff against r8026 to get an idea of what's changed for module writers.
...
git-svn-id: file:///home/svn/framework3/trunk@8259 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 18:12:02 +00:00
393cf5becb
Add the NTP monlist scanner
...
git-svn-id: file:///home/svn/framework3/trunk@8255 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 06:53:24 +00:00
fb09655c42
See #782 . Fixing the packet send, but that's it (the module is still busted for other reasons).
...
git-svn-id: file:///home/svn/framework3/trunk@8251 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 03:03:51 +00:00
bf24295d1d
See #782 . Updating ipidseq.
...
git-svn-id: file:///home/svn/framework3/trunk@8248 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 22:36:27 +00:00
23f06ca8a6
See #782 . Updating syn scanner. Also, before I forget: should optimize the arp cache to keep negatives so we don't rearp all the time for nonexistant hosts.
...
git-svn-id: file:///home/svn/framework3/trunk@8247 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 22:16:03 +00:00
658e07a0de
See #782 . Updating ack scanner.
...
git-svn-id: file:///home/svn/framework3/trunk@8246 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 21:59:30 +00:00
4bb6e650da
See #782 . Implemented a more sensible arp cache so as not to spam with UDP probes and arps. Also refactored xmas to use the new methods.
...
git-svn-id: file:///home/svn/framework3/trunk@8245 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 21:37:40 +00:00
31949c4343
svn keywords fixups
...
fixed a bunch of $Id$ and $Revision$ typos
added keywords property to files missing it
git-svn-id: file:///home/svn/framework3/trunk@8242 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 20:12:13 +00:00
37c1441c6c
Formatting on db2 output.
...
git-svn-id: file:///home/svn/framework3/trunk@8225 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 16:37:56 +00:00
7cc01b07f3
See #726 . Post-commit fixes. Rename probe to version, clean up includes, fix verbosity on the probe and convert to single-line output.
...
git-svn-id: file:///home/svn/framework3/trunk@8224 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 16:25:29 +00:00
359e1ad53a
See #726 . Adds a DB2 scanner and brute forcer.
...
git-svn-id: file:///home/svn/framework3/trunk@8223 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 15:58:24 +00:00
4bb3adc397
move new tomcat_mgr_login scanner into scanner/http
...
git-svn-id: file:///home/svn/framework3/trunk@8202 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-22 20:33:11 +00:00
40be42676b
new tomcat_mgr_login aux module
...
- uses auth_brute mixin
- has old and new default users/passes/pairs
- replaces older modules/auxiliary/admin/http/tomcat_manager.rb
git-svn-id: file:///home/svn/framework3/trunk@8201 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-22 20:31:51 +00:00
865a50594b
add a telnet login scanner
...
git-svn-id: file:///home/svn/framework3/trunk@8179 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-20 03:25:34 +00:00
4a54388119
use print_error for failed login
...
git-svn-id: file:///home/svn/framework3/trunk@8178 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-20 02:33:15 +00:00
e19f66ec1f
use the new authbrute mixin
...
git-svn-id: file:///home/svn/framework3/trunk@8176 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-20 01:43:01 +00:00
310be42bfa
try not to repeatedly load static files - see #694
...
git-svn-id: file:///home/svn/framework3/trunk@8166 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 19:12:42 +00:00
ca7f85c054
more consistent printing of found credentials
...
git-svn-id: file:///home/svn/framework3/trunk@8164 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 19:06:03 +00:00
d85c801b11
name consistency with arp_sweep
...
git-svn-id: file:///home/svn/framework3/trunk@8162 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 17:49:00 +00:00
08eb80f4a9
use the authbrute mixin
...
git-svn-id: file:///home/svn/framework3/trunk@8150 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-18 22:22:22 +00:00
cb9cf943b4
Remove the database lookups so we don't trigger lockout policies unnecessarily. We'll probably have to revisit this at some point
...
git-svn-id: file:///home/svn/framework3/trunk@8145 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-18 21:19:28 +00:00
d4c42806f6
can't really be a scanner since a sid is needed for each host
...
git-svn-id: file:///home/svn/framework3/trunk@8141 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-17 17:56:05 +00:00
6c572466fa
make the oracle login a scanner for consistency. see 757
...
git-svn-id: file:///home/svn/framework3/trunk@8139 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-16 00:59:06 +00:00
2ba892aa69
Report host mac, name, and whether its a VM
...
git-svn-id: file:///home/svn/framework3/trunk@8133 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 15:49:13 +00:00
7390b1d42d
Add and improve database reporting to existing scanner modules
...
git-svn-id: file:///home/svn/framework3/trunk@8131 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 03:25:34 +00:00
90221c1191
Consistency change
...
git-svn-id: file:///home/svn/framework3/trunk@8130 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 02:58:59 +00:00
0b7df74615
Rename modules to be consistent with the new convention
...
git-svn-id: file:///home/svn/framework3/trunk@8129 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-15 02:55:08 +00:00
df1cb6b36e
move smb/login. see 757
...
git-svn-id: file:///home/svn/framework3/trunk@8121 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-14 18:51:04 +00:00
54095a585e
update the auth bruteforcer, and use it in smb/login
...
git-svn-id: file:///home/svn/framework3/trunk@8116 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-14 16:58:43 +00:00
396e894cdb
Finger user enumerator
...
git-svn-id: file:///home/svn/framework3/trunk@8109 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 23:37:14 +00:00
9bb14e1c4e
Add a telnet banner grabber
...
git-svn-id: file:///home/svn/framework3/trunk@8108 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 21:46:48 +00:00
dded66d71a
Fixed up to work against Windows 2000 -> Windows 7
...
git-svn-id: file:///home/svn/framework3/trunk@8106 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 14:37:15 +00:00
de2a293c26
Lookup users via SAMR
...
git-svn-id: file:///home/svn/framework3/trunk@8103 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-13 00:27:11 +00:00
a2b883ff3d
Adds a SID lookup module
...
git-svn-id: file:///home/svn/framework3/trunk@8101 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-12 07:39:53 +00:00
6a10d6b6ca
Cleanup for tcp mixin, report smb version better, downcase service names
...
git-svn-id: file:///home/svn/framework3/trunk@8074 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-05 18:47:04 +00:00
2283e029db
crossing fingers, big cr removal batch
...
git-svn-id: file:///home/svn/framework3/trunk@8038 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 22:24:22 +00:00
53d9a9167d
save the discovered version
...
git-svn-id: file:///home/svn/framework3/trunk@8036 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 18:23:03 +00:00
37d84a5ccc
save the discovered version
...
git-svn-id: file:///home/svn/framework3/trunk@8035 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 18:21:07 +00:00
37bec306a7
ruby 1.9 / unpack fix
...
git-svn-id: file:///home/svn/framework3/trunk@8032 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 09:02:55 +00:00
02eb7ab80d
massive changes to the database api. Auxiliary::Report is now just a bunch of stubs into the main DBManager, most aux modules should just work, but they haven't all been tested. introduces a get_auth_info method for pulling credentials out of the db. other db api methods should be more standardized now. cross your fingers
...
git-svn-id: file:///home/svn/framework3/trunk@8028 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 23:48:45 +00:00
68eb240639
Updates to match the new Racket namespace
...
git-svn-id: file:///home/svn/framework3/trunk@8026 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 23:32:50 +00:00
922cef26fa
Store the domain name in the SMB client object, along with other fields provided by NTLMSSP responses. Show the domain name and netbios name in the version scanner. Update MS06-070 to remove the default target, use the domain name from the server response, and use a more reliable return address for 2000 SP4.
...
git-svn-id: file:///home/svn/framework3/trunk@8022 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 14:00:49 +00:00
58f2c933d5
Update nbname to log to the database
...
git-svn-id: file:///home/svn/framework3/trunk@8020 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-29 04:26:46 +00:00
c9c8eb3f12
Updated modules from tebo
...
git-svn-id: file:///home/svn/framework3/trunk@8001 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 05:07:50 +00:00
131462fa8b
Fix service name reporting
...
git-svn-id: file:///home/svn/framework3/trunk@7999 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 00:37:56 +00:00
5757216f9a
This overhauls the database reporting code - all report_* functions now add their write operation to a queue that is processed sequentially in the background. This prevents concurrency issues around database writes, but prevents modules from immediately using the results of their report_* calls in the database. Still todo is a method for waiting on the write to have occurred
...
git-svn-id: file:///home/svn/framework3/trunk@7997 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-28 00:21:21 +00:00
166489ad5f
Update a few scanner modules to write to the database properly
...
git-svn-id: file:///home/svn/framework3/trunk@7992 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-27 07:30:50 +00:00
308bdcccb2
Fixes #733 (using open vs ::Up, may need a revert and a change to the importers instead). Update the sweep_udp module to store host, mac, name info
...
git-svn-id: file:///home/svn/framework3/trunk@7990 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 22:08:49 +00:00
095bc2167d
Patch from antoine to use the netbios parsing code from nbname
...
git-svn-id: file:///home/svn/framework3/trunk@7984 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 18:10:13 +00:00
634294cb1f
Handle oddball servers that return no names
...
git-svn-id: file:///home/svn/framework3/trunk@7983 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 12:13:18 +00:00
1a818ebf77
Adds a NetBIOS name scanner - can obtain hostname, mac address, logged in user (when Messenger is running), and alternate interface IPs
...
git-svn-id: file:///home/svn/framework3/trunk@7981 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 08:51:03 +00:00
1cc9fa7dad
Print the site name for the 404 message
...
git-svn-id: file:///home/svn/framework3/trunk@7980 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 05:53:29 +00:00
3d421cfefd
SQLMap update and consitency fix for Bernardo's name
...
git-svn-id: file:///home/svn/framework3/trunk@7979 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 05:24:37 +00:00
9ec132d86f
Fixes #720 . Adds inquis's mysql brute forcer using the new mixin
...
git-svn-id: file:///home/svn/framework3/trunk@7978 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 05:22:34 +00:00
06cea605c7
spaces -> tab
...
git-svn-id: file:///home/svn/framework3/trunk@7966 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-24 21:27:24 +00:00
b13e185943
Giant update from tebo, fixing up SunRPC and the nsfmount module
...
git-svn-id: file:///home/svn/framework3/trunk@7961 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-23 13:44:53 +00:00
8c12722f9b
add database reporting to endpoint_mapper. fixes #695
...
git-svn-id: file:///home/svn/framework3/trunk@7913 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-18 01:51:31 +00:00
2bb2729064
fix an undefined constant bug reported to the mailing list by Razeor
...
git-svn-id: file:///home/svn/framework3/trunk@7908 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 16:14:27 +00:00
20222a44ea
Fix. Thats next step
...
git-svn-id: file:///home/svn/framework3/trunk@7847 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 05:58:57 +00:00
d6ee7c58ce
New wmap moule for generic checks
...
git-svn-id: file:///home/svn/framework3/trunk@7846 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 05:49:44 +00:00
c287573213
A few more wmap cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@7839 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 06:56:01 +00:00
1029ecd7f8
Cleanup wmap, add the missing database tables back, rename to have a wmap_prefix
...
git-svn-id: file:///home/svn/framework3/trunk@7837 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 05:24:48 +00:00
b3df3730c0
report_note() expects :type, not :ntype
...
git-svn-id: file:///home/svn/framework3/trunk@7738 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 17:03:24 +00:00
75ca12439e
Added new testing options
...
git-svn-id: file:///home/svn/framework3/trunk@7638 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-29 04:00:26 +00:00
6e975b57ee
Include Auxiliary Report
...
git-svn-id: file:///home/svn/framework3/trunk@7629 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-26 20:39:15 +00:00
7324108c14
Support non-default interfaces for idle scan host detection
...
git-svn-id: file:///home/svn/framework3/trunk@7623 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-26 04:14:16 +00:00
5b81d85447
Replaced reporting to use notes
...
git-svn-id: file:///home/svn/framework3/trunk@7605 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-25 06:08:28 +00:00
e354c8dbcc
Multiple headers handling bug fixes
...
git-svn-id: file:///home/svn/framework3/trunk@7588 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-24 05:27:11 +00:00
f70cf1e74f
Make EXT optional so other dictionaries with files containing extensions can be used
...
git-svn-id: file:///home/svn/framework3/trunk@7583 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-23 03:01:46 +00:00
61e233df91
Keywords on all modules, plugins, and scripts
...
git-svn-id: file:///home/svn/framework3/trunk@7550 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-17 00:05:19 +00:00
7b832b9d3e
Wmap checking for vulnerabilities and launching exploits
...
git-svn-id: file:///home/svn/framework3/trunk@7399 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-07 21:55:33 +00:00
2075377fc8
Fix to correct the IP TTL of all raw modules - these were defaulting to 0. Reported by Job Kibler
...
git-svn-id: file:///home/svn/framework3/trunk@7397 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-07 03:17:19 +00:00
ac14e84eb6
See #434 . Fixes up the last of the modules using the wrong Timeout exception class
...
git-svn-id: file:///home/svn/framework3/trunk@7326 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 18:22:50 +00:00
e067823372
See #434 . A few modules that used the wrong Timeout syntax as well
...
git-svn-id: file:///home/svn/framework3/trunk@7324 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 18:16:51 +00:00
f38b43f236
Specify the language as none
...
git-svn-id: file:///home/svn/framework3/trunk@7321 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 17:10:06 +00:00
fdce355f3b
Option NoDetailMessages added
...
git-svn-id: file:///home/svn/framework3/trunk@7313 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 01:09:53 +00:00
fbbbde55f2
Fix #443 . This module should not be use as a directory scanner as there are more suitable modules for such task. This specific module is only made to test a specific vulnerability and will be mode to a per directory check instead of trying to identify directories requiring authentication to be bypassed
...
git-svn-id: file:///home/svn/framework3/trunk@7312 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 00:59:41 +00:00
02c3bc232b
Typo
...
git-svn-id: file:///home/svn/framework3/trunk@7310 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 17:05:18 +00:00
1ca1e1cc84
Use the payload as the ICMP tag check
...
git-svn-id: file:///home/svn/framework3/trunk@7309 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 17:04:21 +00:00
f89085fd20
Check the icmp echo ID
...
git-svn-id: file:///home/svn/framework3/trunk@7308 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 16:50:45 +00:00
670ee7c238
Fix an invalid next
...
git-svn-id: file:///home/svn/framework3/trunk@7307 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 16:46:52 +00:00
3d6687902a
Adds two modules that re-implement the rogue network tools project as metasploit auxiliary modules.
...
git-svn-id: file:///home/svn/framework3/trunk@7306 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 07:36:00 +00:00
3faf72dd97
Perform a test RPC call on each discovered interface
...
git-svn-id: file:///home/svn/framework3/trunk@7304 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-29 19:00:34 +00:00
5e137e92fd
Fixes #381 . To scan for TLSv1 only services, set SSLVersion TLS1
...
git-svn-id: file:///home/svn/framework3/trunk@7282 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 19:48:15 +00:00
e3f68f2639
Another large number of warnings fixed by Yoann Guillot
...
git-svn-id: file:///home/svn/framework3/trunk@7248 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 17:18:23 +00:00
b38a74c961
Another mega-patch from Yoann Guillot: fixes warnings generated by method calls with a space betwee the method and the parans, corrects a problem with the alpha encoders that causes them to overwrite the allowed charset, hardcodes the metasm output size of some modules in order to reduce load time, more to come
...
git-svn-id: file:///home/svn/framework3/trunk@7246 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 16:40:19 +00:00
03b753fd12
Fixes #360 . Report each path individually
...
git-svn-id: file:///home/svn/framework3/trunk@7207 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 10:55:11 +00:00
5524e9aae2
Fixed #370 . Test if uploaded file exists
...
git-svn-id: file:///home/svn/framework3/trunk@7203 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 00:02:54 +00:00
6ce7011cba
Fixed #369 . Added RHOST info and second round to determine error page
...
git-svn-id: file:///home/svn/framework3/trunk@7202 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 23:26:58 +00:00
9ce45face4
add advanced option for setting ipid sample size
...
git-svn-id: file:///home/svn/framework3/trunk@7197 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 21:22:55 +00:00
f90a222fa0
better vnc protocol parsing, fixes #374
...
git-svn-id: file:///home/svn/framework3/trunk@7196 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:59:35 +00:00
6a818c0c64
Fixed #371 . Included target information
...
git-svn-id: file:///home/svn/framework3/trunk@7194 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:51:47 +00:00
6cfd1675c4
Fixed #375 . Removed the module as frontpage_login provides same information
...
git-svn-id: file:///home/svn/framework3/trunk@7193 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:45:30 +00:00
c501187ca4
Fixed typo #368 .
...
git-svn-id: file:///home/svn/framework3/trunk@7192 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:39:40 +00:00
bfd359f0d8
Fixed #367 . Adder error code detection and signatures
...
git-svn-id: file:///home/svn/framework3/trunk@7191 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:37:40 +00:00
f085e7cf59
Remove generic modules at this time, until proxy is created and then it can be proxy modules.
...
git-svn-id: file:///home/svn/framework3/trunk@7190 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:23:33 +00:00
249cc10cf5
Fixed #365 . Added signatures and error code detection
...
git-svn-id: file:///home/svn/framework3/trunk@7189 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:18:22 +00:00
814675f952
Changed variable name for consistency purposes
...
git-svn-id: file:///home/svn/framework3/trunk@7188 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:01:43 +00:00
dc415c76ca
Fixes #364 . Added error message detection and signatures
...
git-svn-id: file:///home/svn/framework3/trunk@7187 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 19:46:30 +00:00
f85c522a07
don't try to parse an empty banner, fixes #373
...
git-svn-id: file:///home/svn/framework3/trunk@7186 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 18:23:19 +00:00
4d4c0905ef
Slightly improved error handling for auxiliary and exploit modules. Improved brute forcing mode for mssql_login. Serious errors (broken code, etc) are bubbled up in auxiliary scanners now. Fixes #384 by reading wordlists one line at a time and not buffering
...
git-svn-id: file:///home/svn/framework3/trunk@7185 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 18:03:02 +00:00
bee78d3b51
First round of fixes for wmap modules
...
git-svn-id: file:///home/svn/framework3/trunk@7181 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 07:10:32 +00:00
a782a68c42
Complete overhaul of the MSSQL API, fixes 1.9 compat issues and makes the MSSQL testing easier
...
git-svn-id: file:///home/svn/framework3/trunk@7154 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-13 22:24:47 +00:00
09ec91d9bf
Use name convention
...
git-svn-id: file:///home/svn/framework3/trunk@7146 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 23:07:34 +00:00
c14bd99aff
Base for an error based sql inj. scanner
...
git-svn-id: file:///home/svn/framework3/trunk@7145 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:52:54 +00:00
95bf9f84f7
Basic robots scanner for wmap
...
git-svn-id: file:///home/svn/framework3/trunk@7144 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:48:25 +00:00
97ae32a318
Minor display changes
...
git-svn-id: file:///home/svn/framework3/trunk@7143 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:40:57 +00:00
ec00f69e66
Subversion scanner
...
git-svn-id: file:///home/svn/framework3/trunk@7142 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 20:49:34 +00:00
3d68290b8c
Try both snmp1 and snmp2
...
git-svn-id: file:///home/svn/framework3/trunk@7132 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-06 23:20:36 +00:00
bd0b0b454e
deregister unused (not user-settable) options
...
git-svn-id: file:///home/svn/framework3/trunk@7130 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-06 05:37:36 +00:00
f21e3c8754
svn:keywords run
...
git-svn-id: file:///home/svn/framework3/trunk@7128 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-04 23:38:06 +00:00
b42cc67e54
Fixes the ASN.1 parser to work with ruby 1.9.1
...
git-svn-id: file:///home/svn/framework3/trunk@7121 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-03 19:48:15 +00:00
56d4345830
updated options module
...
git-svn-id: file:///home/svn/framework3/trunk@7078 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 22:42:24 +00:00
5972666f63
See #339 . Massive cleanup of author names, make them consistent across modules
...
git-svn-id: file:///home/svn/framework3/trunk@7075 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 21:30:45 +00:00
c4594f396f
added auxiliary module timbuktu_udp.rb and exploit module timbuktu_fileupload.rb
...
git-svn-id: file:///home/svn/framework3/trunk@7062 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-26 00:04:00 +00:00
b9138f80df
Allow the user to set the interface name for scanning, this needs to get merged into the capture mixin, but this solves it for now.
...
git-svn-id: file:///home/svn/framework3/trunk@7055 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-24 03:34:04 +00:00
532d80b7df
Fix modules - unpack('s') breaks on big-endian, lots of formatting issues
...
git-svn-id: file:///home/svn/framework3/trunk@7042 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-19 17:24:29 +00:00
41aa5baa6d
Fix the check for verbose flag
...
git-svn-id: file:///home/svn/framework3/trunk@7033 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 15:43:08 +00:00
0885a7262e
Merge the DECT code from DK, clean some things up
...
git-svn-id: file:///home/svn/framework3/trunk@7032 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 15:40:33 +00:00
7505a4568f
This commit adds a SMB 2.0 scanner - it also reports uptime and dialect version
...
git-svn-id: file:///home/svn/framework3/trunk@7021 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 15:51:06 +00:00
e0e72f39b2
Fix up dcerpc auditor module to connect/disconnect each uuid (works much better)
...
git-svn-id: file:///home/svn/framework3/trunk@6986 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-28 18:58:47 +00:00
cbf64d76bb
Audit a TCP service to determine what DCERPC UUIDs are bound
...
git-svn-id: file:///home/svn/framework3/trunk@6985 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-28 18:51:42 +00:00
d0289671f6
Basic generic wmap modules
...
git-svn-id: file:///home/svn/framework3/trunk@6948 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-10 00:04:01 +00:00
87d59b4512
More webdav modules to grab information
...
git-svn-id: file:///home/svn/framework3/trunk@6947 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-10 00:01:38 +00:00
a92fa0b424
Add test case
...
git-svn-id: file:///home/svn/framework3/trunk@6946 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-09 23:59:44 +00:00
6743c5f510
added a auxiliary module that may help id potential targets for db2rcmd.rb.
...
git-svn-id: file:///home/svn/framework3/trunk@6938 4d416f70-5f16-0410-b530-b9f4589650da
2009-08-05 21:21:45 +00:00
9080dd1f0d
Added references and MSB to unicode bypass modules.
...
git-svn-id: file:///home/svn/framework3/trunk@6914 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 07:39:34 +00:00
0d8ea98cdf
Added AIX SNMP Scanner Auxiliary Module.
...
git-svn-id: file:///home/svn/framework3/trunk@6912 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-28 04:48:36 +00:00
9377a10094
updated description of module
...
git-svn-id: file:///home/svn/framework3/trunk@6900 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-25 18:49:26 +00:00
b1c40fb3ac
Apply a patch to arp_sweep to record the mac of the hosts
...
git-svn-id: file:///home/svn/framework3/trunk@6885 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 11:47:10 +00:00
d3e65b3363
svn:keywords run
...
git-svn-id: file:///home/svn/framework3/trunk@6876 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-23 02:55:51 +00:00
54fc8e70e2
Fixed spurious next
...
git-svn-id: file:///home/svn/framework3/trunk@6861 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 02:56:40 +00:00
ff9efe45bc
Fixed spurious next
...
git-svn-id: file:///home/svn/framework3/trunk@6860 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-22 02:48:00 +00:00
529ded22ae
reverting last commit; somebody didn't cross their fingers
...
git-svn-id: file:///home/svn/framework3/trunk@6847 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 20:48:47 +00:00
c3dc1ecb55
reintegrate browser_autopwn into trunk; cross your fingers and hope this works
...
git-svn-id: file:///home/svn/framework3/trunk@6846 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-19 17:27:36 +00:00
7dcc3e5e47
Overhaul of all modules to use racket instead of scruby/packetfu
...
git-svn-id: file:///home/svn/framework3/trunk@6823 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-17 20:36:40 +00:00
f897d1d3d5
Patch from jabra for enable mssql brute forcing
...
git-svn-id: file:///home/svn/framework3/trunk@6798 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-14 11:30:41 +00:00
58671fd684
disconnect() tcp socket instead of just close()ing it
...
git-svn-id: file:///home/svn/framework3/trunk@6758 4d416f70-5f16-0410-b530-b9f4589650da
2009-07-09 07:08:25 +00:00
c1a5ed32b6
Added more information to note entered into database abstraction layer
...
git-svn-id: file:///home/svn/framework3/trunk@6731 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-30 17:42:20 +00:00
69cc96a1ae
Adds database support for logging wardialer scan results using report_note
...
git-svn-id: file:///home/svn/framework3/trunk@6729 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-30 04:54:00 +00:00
22c8af48eb
Added some output for fax and carrier detection
...
git-svn-id: file:///home/svn/framework3/trunk@6728 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-30 02:55:37 +00:00
4a421dbb33
Fix some busted code in the frontpage_login module, thanks to bill.e.ghote
...
git-svn-id: file:///home/svn/framework3/trunk@6691 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-21 06:30:55 +00:00
2061f2e048
Try 445 then 139 - faster in most cases
...
git-svn-id: file:///home/svn/framework3/trunk@6675 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 02:43:56 +00:00
1484405c79
Updates to work with the newer aux api
...
git-svn-id: file:///home/svn/framework3/trunk@6670 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-17 21:39:17 +00:00
c72263e9c3
Adds antoine's tftp brute forcer
...
git-svn-id: file:///home/svn/framework3/trunk@6667 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-17 20:52:47 +00:00
a113343d00
Fix a broken next
...
git-svn-id: file:///home/svn/framework3/trunk@6649 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-14 15:02:32 +00:00
314d1a27a2
Adds a new module from nebulous for checking SSL expiry
...
git-svn-id: file:///home/svn/framework3/trunk@6636 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-09 21:12:48 +00:00
fdff151442
More threading
...
git-svn-id: file:///home/svn/framework3/trunk@6626 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-04 03:52:22 +00:00
65c3f5981d
just rename it
...
git-svn-id: file:///home/svn/framework3/trunk@6625 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-04 03:27:23 +00:00
07bd36232f
minor fixes
...
git-svn-id: file:///home/svn/framework3/trunk@6624 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-04 03:21:22 +00:00
509233262c
Advanced options to remove detail messages and handle multithreads
...
git-svn-id: file:///home/svn/framework3/trunk@6622 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-03 05:49:38 +00:00
16806be1a7
Adds threading
...
git-svn-id: file:///home/svn/framework3/trunk@6621 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-03 05:19:42 +00:00
36a21436ff
Fix DAV header match. Applied patch by grutz
...
git-svn-id: file:///home/svn/framework3/trunk@6610 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-02 04:43:57 +00:00
ee70866e08
Small fix on authenticated dir check. Thanks Rhys Kidd
...
git-svn-id: file:///home/svn/framework3/trunk@6603 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-31 01:34:04 +00:00
166e1ebf2c
Added simplified version of webdav unicode bypass scanner
...
git-svn-id: file:///home/svn/framework3/trunk@6589 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-28 03:30:52 +00:00
e1c5c72c82
Added check for authenticated directories
...
git-svn-id: file:///home/svn/framework3/trunk@6588 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-28 03:27:25 +00:00
b6ab8ffd21
Fix up the unicoding
...
git-svn-id: file:///home/svn/framework3/trunk@6580 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-25 20:21:20 +00:00
823fcc30d1
Added WebDAV scanner
...
git-svn-id: file:///home/svn/framework3/trunk@6576 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-23 01:55:34 +00:00
d434be3ae8
Patch from Erik Fichtner to enable unicode overlong encoding
...
git-svn-id: file:///home/svn/framework3/trunk@6575 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-22 21:33:20 +00:00
f8cac0cedf
Fix proxy issue. Added datastore PROXIES to the parameters. Thanks spinbad
...
git-svn-id: file:///home/svn/framework3/trunk@6564 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-19 01:40:58 +00:00
8f5dc1305e
Fix bad variable, reported by bill.e.ghote
...
git-svn-id: file:///home/svn/framework3/trunk@6563 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-18 18:02:21 +00:00
79c7abba8e
Added wmap_dir_webdav_unicode_bypass.rb to detect vulnerable IIS6 WebDAV Unicode bypass folders.
...
git-svn-id: file:///home/svn/framework3/trunk@6562 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-18 03:57:13 +00:00
d70d2c5d1e
Added ssh_version.rb from Daniel van Eeden.
...
git-svn-id: file:///home/svn/framework3/trunk@6541 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-11 02:46:59 +00:00
059856db54
oops, forgot this one.
...
git-svn-id: file:///home/svn/framework3/trunk@6518 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-01 22:02:55 +00:00
7d71c5ed19
in with the new, out with the old. added some more enum aux modules.
...
git-svn-id: file:///home/svn/framework3/trunk@6517 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-01 22:01:21 +00:00
b2a3968b74
in with the new, out with the old
...
git-svn-id: file:///home/svn/framework3/trunk@6513 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-30 15:51:06 +00:00
4426bc2df0
Added SOAP brute forcer module. YMMV.
...
git-svn-id: file:///home/svn/framework3/trunk@6495 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-23 03:16:29 +00:00
5ea6a1027a
report os detection in smb version scanner
...
git-svn-id: file:///home/svn/framework3/trunk@6494 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-21 05:59:46 +00:00
0ea4bec847
updated for db usage
...
git-svn-id: file:///home/svn/framework3/trunk@6485 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-15 04:15:25 +00:00
cf1d255a55
SMTP Banner Grabber Aux module
...
git-svn-id: file:///home/svn/framework3/trunk@6483 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-15 03:26:22 +00:00
eb92aa7412
add db reporting
...
git-svn-id: file:///home/svn/framework3/trunk@6482 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-14 16:09:24 +00:00
37c2e301ed
replacing defunct framework URL in header comments in most modules and pcap_log
...
git-svn-id: file:///home/svn/framework3/trunk@6479 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-13 14:33:26 +00:00
0c859dc35e
Minor fixes regarding target_host handling
...
git-svn-id: file:///home/svn/framework3/trunk@6477 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-12 02:00:50 +00:00
b9c9df1ef2
better exception handling
...
git-svn-id: file:///home/svn/framework3/trunk@6472 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-10 01:44:06 +00:00
cc78d9a59c
turn off svn:executable in modules
...
git-svn-id: file:///home/svn/framework3/trunk@6470 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-08 20:04:25 +00:00
d1bf7ce2dc
Add XMas port scanner aux module
...
git-svn-id: file:///home/svn/framework3/trunk@6469 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-08 15:32:07 +00:00
446c4edf71
adding a MySQL version enumeration aux scanner module
...
git-svn-id: file:///home/svn/framework3/trunk@6465 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-07 22:13:25 +00:00
1eb8c8dfc0
meh, what can I say? I like my name
...
git-svn-id: file:///home/svn/framework3/trunk@6459 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-03 15:05:35 +00:00
8d184d81bf
Add IPID sequence classifier scanner aux module. It uses the same techniques
...
Nmap uses for classifying IPIDs in its Idle Scan (-sI) and OS Detection (-O).
git-svn-id: file:///home/svn/framework3/trunk@6456 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-03 00:59:25 +00:00
0fb71d56bd
sip user enumerator module using the REGISTER and OPTIONS methods
...
git-svn-id: file:///home/svn/framework3/trunk@6453 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-02 04:31:48 +00:00
cf424edd73
fixed error case for ssl module
...
git-svn-id: file:///home/svn/framework3/trunk@6449 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-31 00:43:41 +00:00
ae21a15dc4
Make these a little future-compatible with ruby 1.9
...
git-svn-id: file:///home/svn/framework3/trunk@6443 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-30 02:55:48 +00:00
7576f006b3
set 3 remaining modules' Versions to Revision (instead of 1)
...
git-svn-id: file:///home/svn/framework3/trunk@6438 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-30 01:01:30 +00:00
93bcddf469
Force the socket to close between each pass -- thanks quine!
...
git-svn-id: file:///home/svn/framework3/trunk@6435 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 17:58:15 +00:00
0361811966
increase idx so recvfrom isn't called every iteration
...
git-svn-id: file:///home/svn/framework3/trunk@6432 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 13:44:38 +00:00
2b6c0f97f8
Adds a quick scanner for SIP devices and servers
...
git-svn-id: file:///home/svn/framework3/trunk@6427 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 05:51:08 +00:00
715c001aff
Replaced by auxiliary/scanner/snmp/community
...
git-svn-id: file:///home/svn/framework3/trunk@6426 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:42:04 +00:00
67cfbc2e4b
Report other data to the DB as well
...
git-svn-id: file:///home/svn/framework3/trunk@6424 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:39:51 +00:00
12e3114873
Remove the ::ffff prefix from returned IPv4 addresses
...
git-svn-id: file:///home/svn/framework3/trunk@6423 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:24:59 +00:00
2552633f9b
Fix up batch mode aux scanners that dont use the tcp mixin. Minor changes to snmp_scan
...
git-svn-id: file:///home/svn/framework3/trunk@6422 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:11:56 +00:00
e1a6d31c58
Add a SNMP brute force scanner
...
git-svn-id: file:///home/svn/framework3/trunk@6421 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-29 03:09:04 +00:00
3d6a0bab52
Fix up the version/options modules, make wmap_base_url display the vhost and use the host/port separator correctly
...
git-svn-id: file:///home/svn/framework3/trunk@6414 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 17:57:12 +00:00
89ad4df087
Fix WMAP modules to use the new scanner api; add wmap_base_url as a shorthand (extend in the future to do VHOST as well), general cosmetic cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@6413 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 17:45:14 +00:00
4d00350085
Rename to be consistent
...
git-svn-id: file:///home/svn/framework3/trunk@6408 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 06:05:38 +00:00
eccfcdfced
Sets svn keywords on modules missing it, tweaks the emailer module
...
git-svn-id: file:///home/svn/framework3/trunk@6407 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 06:03:35 +00:00
26b9903b0d
Changes Auxiliary::Scanner to use a new module instance for each thread, updates associated mixins and modules to support this change.
...
git-svn-id: file:///home/svn/framework3/trunk@6401 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-28 05:49:33 +00:00
3b6f94ebb3
add ACK port scanner aux module (maps out firewall rulesets)
...
git-svn-id: file:///home/svn/framework3/trunk@6396 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-27 00:49:55 +00:00
95d651c62a
Add SYN port scanner aux module
...
git-svn-id: file:///home/svn/framework3/trunk@6394 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-26 14:55:53 +00:00
07b3f614ce
New plain HTTP XPath 1.0 blind injection module
...
git-svn-id: file:///home/svn/framework3/trunk@6355 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-20 03:53:02 +00:00
804ff61df6
big svn:keywords run
...
git-svn-id: file:///home/svn/framework3/trunk@6345 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-15 18:12:33 +00:00
bd8293360a
Minor tweaks to the wardialer module
...
git-svn-id: file:///home/svn/framework3/trunk@6200 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-30 01:45:15 +00:00
a46fa68bac
Replaced manual path string joins with File.join
...
git-svn-id: file:///home/svn/framework3/trunk@6199 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 23:14:31 +00:00
6756962b26
Moved path setup back out of initialize, that caused problems
...
git-svn-id: file:///home/svn/framework3/trunk@6198 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 22:48:51 +00:00
aa94ff7be6
Fixed typo in logs path, moved path stuff to initialize
...
git-svn-id: file:///home/svn/framework3/trunk@6197 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 22:46:20 +00:00
0c84e9c41e
Removed chdir, now access dat and log file by full path, which now live in config_root+/log/wardial
...
git-svn-id: file:///home/svn/framework3/trunk@6196 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 22:41:29 +00:00
089c2122cd
Moved some options to advanced_options
...
git-svn-id: file:///home/svn/framework3/trunk@6195 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 20:16:18 +00:00
c4d3d2e379
Renamed all hotkey responses to HK_* strings
...
git-svn-id: file:///home/svn/framework3/trunk@6194 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-29 19:58:34 +00:00
7965a7de05
Wardialer
...
git-svn-id: file:///home/svn/framework3/trunk@6193 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-28 06:13:47 +00:00
78b3a12f89
adding an ftp bounce port scanner aux module (can still be useful today)
...
git-svn-id: file:///home/svn/framework3/trunk@6174 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-23 02:05:28 +00:00
5d8ca84113
use the user-supplied login info
...
git-svn-id: file:///home/svn/framework3/trunk@6152 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-14 17:51:46 +00:00
ae09877067
nfs mount scanner
...
git-svn-id: file:///home/svn/framework3/trunk@6135 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-13 02:21:35 +00:00
288075f7a0
add report_auth_info to some modules that authenticate. thanks, tebo
...
git-svn-id: file:///home/svn/framework3/trunk@6118 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:52:07 +00:00
348ffe7894
add snmp_scan module from tebo
...
git-svn-id: file:///home/svn/framework3/trunk@6116 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:26:44 +00:00
7874476b58
add smb_login scanner module from tebo
...
git-svn-id: file:///home/svn/framework3/trunk@6115 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 05:25:54 +00:00
9b210702a3
add scanner functionality to oracle_version.rb and removed some comments from options.rb
...
git-svn-id: file:///home/svn/framework3/trunk@6088 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-08 01:57:28 +00:00
4ac15b3a83
oracle version auxiliary module using tns mixin
...
git-svn-id: file:///home/svn/framework3/trunk@6087 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-07 23:34:03 +00:00
e7dda0000b
Wmap SSL module renamed and updated to check for MD5 signature algorithm.
...
git-svn-id: file:///home/svn/framework3/trunk@6062 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-03 05:20:20 +00:00
704a92d43a
add name to author list and switch some modules to use it
...
git-svn-id: file:///home/svn/framework3/trunk@6034 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 21:53:17 +00:00
0e8ce1cc46
Move my portspec parsing code from scanner/portscan/tcp to Rex as
...
Socket.portspec_crack and use it to also replace the incomplete
parsing code used for db_autopwn
git-svn-id: file:///home/svn/framework3/trunk@6033 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 20:34:05 +00:00
248f1e9fc3
Remove "#{xxx.to_s}" redundancies ('s/\(#{[^}]*\)\.to_s}/\1}/g')
...
git-svn-id: file:///home/svn/framework3/trunk@6022 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 07:11:08 +00:00
daf317c25b
Added wmap generic email extractor as an example of direct access to the database.
...
git-svn-id: file:///home/svn/framework3/trunk@6003 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-08 00:51:16 +00:00
3e19245054
Fixed handling of root website directory. Minor presentation fixes in test modules
...
git-svn-id: file:///home/svn/framework3/trunk@5987 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-30 22:41:09 +00:00
0c0b171be4
use OptInt for numeric options
...
git-svn-id: file:///home/svn/framework3/trunk@5979 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-24 18:42:59 +00:00
110e7be0e9
Added wmap OPTIONS module by Chris Gates
...
git-svn-id: file:///home/svn/framework3/trunk@5977 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-23 19:42:42 +00:00
9144789a9b
Added module authentication verb bypass
...
git-svn-id: file:///home/svn/framework3/trunk@5976 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-22 04:34:59 +00:00
c92a64e687
Added module to test for file copies
...
git-svn-id: file:///home/svn/framework3/trunk@5975 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-22 04:34:00 +00:00
4810fef77c
Report host and port to db in scanner/portscan/tcp
...
git-svn-id: file:///home/svn/framework3/trunk@5953 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-19 04:05:35 +00:00
d2c5c02556
fix svn keyword
...
git-svn-id: file:///home/svn/framework3/trunk@5922 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 03:03:19 +00:00
cef75433ec
Fix non-404 errors
...
git-svn-id: file:///home/svn/framework3/trunk@5909 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:59:52 +00:00
af686334c9
Fix ecode processing
...
git-svn-id: file:///home/svn/framework3/trunk@5908 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:51:21 +00:00
e90c534500
Changes to the directory scanner
...
git-svn-id: file:///home/svn/framework3/trunk@5907 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 03:10:03 +00:00
4cbe6f975a
Added new modules for file detection based on the name of the path directory
...
git-svn-id: file:///home/svn/framework3/trunk@5905 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 02:26:09 +00:00
2a1536d8d6
Fixed reporting variable wmap dir listing module
...
git-svn-id: file:///home/svn/framework3/trunk@5901 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-13 01:59:51 +00:00
54cd265f82
Purging the ms08-067 check. The check method results in memory corruption and there are still concerns about the source of the technique. We can reimplement this later when there is some free time and less angry people involved ;-)
...
git-svn-id: file:///home/svn/framework3/trunk@5887 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 15:01:45 +00:00
57172955ad
Clear the self.simple between ports
...
git-svn-id: file:///home/svn/framework3/trunk@5884 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:10:45 +00:00
5d0d88e5d2
Fix up the smb version module
...
git-svn-id: file:///home/svn/framework3/trunk@5883 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:08:04 +00:00
07f087b969
Switch to the new exception format
...
git-svn-id: file:///home/svn/framework3/trunk@5880 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 05:12:52 +00:00
b4cbe4ff8d
Multiple bug fixes. Fixed query modules now resolved to correct function. Corrected in proxy and wmap code handling of RHOSTS as hostnames are not in use. Fixed reporting as target port was not handled properly and modules modified to reflect new wmap_target methods.
...
git-svn-id: file:///home/svn/framework3/trunk@5869 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 04:38:05 +00:00
133d7ce658
Adds an automatic default target to ms08-067, autodetects OS, SP, and language now.
...
git-svn-id: file:///home/svn/framework3/trunk@5827 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 20:37:51 +00:00
be30436058
Better SP2/SP3 check method from Rhys Kidd, Danish fingerprint from MaXe <security[at]intern0t.net>
...
git-svn-id: file:///home/svn/framework3/trunk@5826 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 17:24:49 +00:00
4b30f3ef1a
Update the check() comments to reflect new information >:(
...
git-svn-id: file:///home/svn/framework3/trunk@5825 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 15:29:51 +00:00
f1789fc1b2
Adds the check() method and scanner module to ms08-067, massively upgrades the smb/version scanner, with better SP detection and remote language pack detection.
...
git-svn-id: file:///home/svn/framework3/trunk@5823 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 09:17:08 +00:00
aec269616a
Ignore EACCES from connect in TCP portscanner aux module. This can be caused
...
by (at least) ICMPv6 Administratively Prohibited messages, on at least Linux.
I got these by scanning ports 21-23 on ipv6.google.com, for example.
git-svn-id: file:///home/svn/framework3/trunk@5797 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-28 02:55:10 +00:00
71885912b8
Allow more flexible (Nmap-esque) port specifications in TCP portscan aux module,
...
so things like "21-25,80,443", "1024-" and "-" behave like you expect. This
replaces the PORTSTART and PORTSTOP options with a single PORTS option.
git-svn-id: file:///home/svn/framework3/trunk@5796 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 23:33:34 +00:00
75be2e33ad
Added module reporting and wmap_reports command
...
git-svn-id: file:///home/svn/framework3/trunk@5789 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 02:22:30 +00:00
ebc5294574
Added new wmap sqlmap module
...
git-svn-id: file:///home/svn/framework3/trunk@5787 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-25 03:26:50 +00:00
29e983567e
removed reports_exist check
...
git-svn-id: file:///home/svn/framework3/trunk@5785 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 04:23:54 +00:00
c4dc77c15b
fixed ip handling and CN parsing
...
git-svn-id: file:///home/svn/framework3/trunk@5784 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 03:19:24 +00:00
c66d6c4e46
Set property 'svn:keywords'
...
git-svn-id: file:///home/svn/framework3/trunk@5783 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:43:21 +00:00
13ab6ed2d8
added ssl host name detection module
...
git-svn-id: file:///home/svn/framework3/trunk@5776 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 05:31:55 +00:00
f98c87ff22
added directory scanner
...
git-svn-id: file:///home/svn/framework3/trunk@5775 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 02:31:52 +00:00
f124597a56
Code cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:03:39 +00:00
7e73ed8c15
first attempt of reporting implementation.
...
git-svn-id: file:///home/svn/framework3/trunk@5771 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 20:32:14 +00:00
b1349daf8f
updated with new module format.
...
git-svn-id: file:///home/svn/framework3/trunk@5759 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 22:25:35 +00:00
1503250a5b
added aux module open_x11.rb provided by tebo.
...
git-svn-id: file:///home/svn/framework3/trunk@5758 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 15:15:29 +00:00
f59a3f04b2
Commit the simple tcp port scanner
...
git-svn-id: file:///home/svn/framework3/trunk@5757 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-15 14:00:56 +00:00
478c8b0824
Added wmap simple directoty listing module
...
git-svn-id: file:///home/svn/framework3/trunk@5741 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-12 04:59:39 +00:00
b1f3c83f7b
add support for finding .swp files
...
git-svn-id: file:///home/svn/framework3/trunk@5739 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-11 06:38:28 +00:00
de780fb2da
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@5738 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-11 05:49:27 +00:00
2977f0741c
added aux module alphastor_librarymanager.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5735 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-10 15:28:01 +00:00
7e5c759dd0
Fixed and reference to browser autopwn.
...
git-svn-id: file:///home/svn/framework3/trunk@5733 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-10 04:25:18 +00:00
386eac82fa
fixer.
...
git-svn-id: file:///home/svn/framework3/trunk@5725 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-10 00:17:44 +00:00
48667711e6
added aux module alphastor_devicemanager.rb
...
git-svn-id: file:///home/svn/framework3/trunk@5724 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-09 23:53:54 +00:00
183830fab5
Make the MSSQL scanner a little better for automation
...
git-svn-id: file:///home/svn/framework3/trunk@5716 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-04 21:55:26 +00:00
02780a1d88
Improvements to the FTP mixin and scanner, still needs multiline read support
...
git-svn-id: file:///home/svn/framework3/trunk@5715 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-04 21:42:37 +00:00
fd256ec4a1
This massive commit changes the metasploit 3 module format. The new syntax allows for greater scalability and future improvements to the metasploit module loader. This change also makes it easier for users to add new modules, since the class name no longer needs to match the directory structure.
...
git-svn-id: file:///home/svn/framework3/trunk@5709 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-02 05:23:59 +00:00
fa3ce57fed
Implemented Auxiliary::WMAPScanUniqueQuery.
...
git-svn-id: file:///home/svn/framework3/trunk@5704 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-01 03:57:57 +00:00
b001e4684d
Import first version of WMAP from ET LoWNOISE
...
git-svn-id: file:///home/svn/framework3/trunk@5675 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-22 22:32:20 +00:00
06c6ad6acd
Add riot's DoubleTake exploit. Set the svn:keywords properties where it was missing
...
git-svn-id: file:///home/svn/framework3/trunk@5526 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-06 04:39:44 +00:00
ed43da5b07
Modules from Matteo Cantoni
...
git-svn-id: file:///home/svn/framework3/trunk@5524 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-06 04:29:41 +00:00
d437a0edda
Added NTP probe from Matteo Cantoni
...
git-svn-id: file:///home/svn/framework3/trunk@5523 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-06 04:29:19 +00:00
88a04a0ba0
New FrontPage modules from Matteo Cantoni
...
git-svn-id: file:///home/svn/framework3/trunk@5500 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-01 18:53:28 +00:00
f0f7c03f06
Handle weird socket errors better
...
git-svn-id: file:///home/svn/framework3/trunk@5347 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-25 04:47:56 +00:00
3af853fa56
Print the IP along with the result
...
git-svn-id: file:///home/svn/framework3/trunk@5340 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-24 05:45:18 +00:00
6e42e86e9d
Complete move of test modules to test subdirectory
...
git-svn-id: file:///home/svn/framework3/trunk@5330 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-23 02:28:12 +00:00
b5177e1dae
module reoi
...
git-svn-id: file:///home/svn/framework3/trunk@5329 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-23 02:26:52 +00:00
4f45051b18
Supress errors
...
git-svn-id: file:///home/svn/framework3/trunk@5324 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-22 06:21:03 +00:00
71c632c9c3
Typo
...
git-svn-id: file:///home/svn/framework3/trunk@5281 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-06 21:56:21 +00:00
45bfed7eaf
More handled error cases
...
git-svn-id: file:///home/svn/framework3/trunk@5280 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-06 21:55:40 +00:00
f6327e74ac
Log the class name of exceptions
...
git-svn-id: file:///home/svn/framework3/trunk@5279 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-06 21:52:59 +00:00
5d1bf914bf
Added InterBase/Firebird stuff.
...
git-svn-id: file:///home/svn/framework3/trunk@5136 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-04 03:03:13 +00:00
858e33a842
Update from Jean-Baptiste Marchand
...
git-svn-id: file:///home/svn/framework3/trunk@4962 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-23 14:51:20 +00:00
d95a0d8d90
Updated svn:keywords, merging minor changes
...
git-svn-id: file:///home/svn/framework3/trunk@4886 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-07 04:48:45 +00:00
daf5936870
Merging minor changes to HTTP, adding NX support to landesk from NP
...
git-svn-id: file:///home/svn/framework3/trunk@4786 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-25 02:51:49 +00:00
4d1c274387
Merging all of the auxilliary/scanner related features
...
git-svn-id: file:///home/svn/framework3/trunk@4749 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-24 06:27:39 +00:00
Tod Beardsley
Joshua Drake
cg
HD Moore
James Lee
Carlos Perez
Steve Tornio
Jonathan Cran
Mario Ceballos
Stephen Fewer
Mike Smith
Patrick Webster
Ramon de C Valle