e9e9d27363
Merge support for the SMB share mixin
2015-03-11 23:49:27 -05:00
68d69177ad
Add smb module for MS15-020
2015-03-11 23:46:50 -05:00
24440b8c38
Lands #4913 , adds OSVDB reference to nvidia module
2015-03-11 23:32:22 -05:00
aa79b71e35
Fixes #4897 by corrected kernel32!Interlocked function definitions
2015-03-11 23:26:32 -05:00
a9fa2d25aa
Add SMB module for MS10-046
2015-03-11 23:23:56 -05:00
cdef992d6b
Lands #4912 , http handlers will use the client's Host header by default.
2015-03-11 23:23:37 -05:00
dfbc50ff47
Make Host header override optional
2015-03-11 23:15:45 -05:00
345b5cc8e1
Add stageless meterpreter support
...
This commit adds plumbing which allows for the creation of stageless
meterpreter payloads that include extensions. The included transprots at
this point are bind_tcp, reverse_tcp and reverse_https, all x86.
More coming for x64. Will also validate http soon.
2015-03-12 13:22:04 +10:00
b604599c8e
Fix comments
2015-03-11 21:32:35 -05:00
c3f2536ef6
Make the stager clear in the payload descriptions
2015-03-11 21:30:02 -05:00
b105a88b95
Fix https convention
2015-03-11 21:26:31 -05:00
8bae58d631
Updated cache sizes
2015-03-11 21:25:12 -05:00
479a9cc1a9
Fix missing stack variables & remove old comment
2015-03-11 21:23:27 -05:00
631e1606bf
Fix WinHttpSetOption & stack parameters
2015-03-11 21:05:18 -05:00
99494328d2
Update Nvidia module with an OSVDB ref
...
The paper is really good, but could use a more traditional reference.
[See #4884 ]
2015-03-11 19:51:22 -05:00
401d553f84
Use host header in reverse_http(s)
2015-03-11 19:40:52 -05:00
0e4e264325
Redo description
2015-03-11 18:19:28 -05:00
aaabd23707
merge cleanup
2015-03-11 18:13:56 -05:00
4e6aca0209
refactor create_exploit_file
2015-03-11 18:13:09 -05:00
5662e5c5a6
Add module for MS15-020
2015-03-11 17:29:02 -05:00
66a45ac7fd
Add spec for reverse_winhttps
2015-03-11 16:29:22 -05:00
1135e5e073
First take on WinHTTP stagers, untested
2015-03-11 16:27:14 -05:00
7e3b4017f0
Rename and resynced with master, ready for refactoring
2015-03-11 14:36:27 -05:00
ea1bc69e2e
Merge branch 'master' into feature/add-reverse_winhttp-stagers
2015-03-11 14:29:34 -05:00
215c209f88
Land #4901 , CVE-2014-0311, Flash ByteArray Uncompress UAF
2015-03-11 14:04:17 -05:00
43b90610b1
Temp
2015-03-11 13:53:34 -05:00
239b0c5d09
Add the most recent alias joe uses
2015-03-11 12:28:51 -05:00
c227c56cd9
Update .mailmap for @joevennix
2015-03-11 12:24:04 -05:00
ceeee4446f
Land #4904 , @hmoore-r7 reworks reverse_http/s stagers
...
They are now assembled dynamically and support more flexible options,
such as long URLs.
2015-03-11 10:41:59 -05:00
2a9d6e64e2
Starting point for CVE-2015-0318
2015-03-11 09:58:41 -05:00
02c7461d32
Lands #4906 and fixes #4905 by updating Conventions for HTTP incompatible payloads
2015-03-11 00:49:27 -05:00
ad39adf9c2
Missing comma
2015-03-11 00:49:07 -05:00
cb1a1ef692
Remove bad stager+stage combinations from the payload set
2015-03-11 00:46:24 -05:00
a89926b663
Exclude vncinject from http stagers (depends on sockedi)
2015-03-11 00:46:04 -05:00
8a452a7cba
Do somce cleanup
2015-03-10 17:10:44 -05:00
9ade107325
disable reverse_http methods from upexec and shell payloads
...
These don't work over http and don't appear to have ever, as far back as
I could test. They appear to be an accident perhaps.
2015-03-10 17:08:58 -05:00
4a84693fb0
Support windows
2015-03-10 16:58:33 -05:00
c26bea3429
Fix credits
2015-03-10 16:27:07 -05:00
980c83cb70
Fix metadata
2015-03-10 16:25:02 -05:00
9e17874389
Exploit CVE-2015-1427
2015-03-10 16:17:51 -05:00
1d17e9ab5b
Remove the 256 byte limit for URLs
2015-03-10 15:27:04 -05:00
7be665d74e
Land #4900 , credential version for postgres hash
2015-03-10 15:17:55 -05:00
5f382e539a
Updated required_space to count all 256 bytes of the URL
2015-03-10 15:17:09 -05:00
dedf3726ea
Simplify the uri_req_len logic, thanks @bcook-r7
2015-03-10 15:12:02 -05:00
261159aa66
update lockfile
2015-03-10 14:38:01 -05:00
736f0b34be
Land #4902 , @nstarke's db_connect warning message
2015-03-10 14:12:47 -05:00
db351317a5
Merge with PR branch
2015-03-10 14:08:35 -05:00
0f763c2cb3
First step to reworking the winhttp stagers
2015-03-10 14:07:25 -05:00
9a974af7dd
Merge pull request #3 from wvu-r7/pr/4902
...
Change print_status to print_error
2015-03-10 14:05:34 -05:00
3c7b061e05
Use single quotes
...
But I like double quotes. :(
2015-03-10 14:03:13 -05:00
jvazquez-r7
HD Moore
scriptjunkie
OJ
Tod Beardsley
sinn3r
Brent Cook
Samuel Huckins
David Maloney
William Vu
Nicholas Starke