Stephen Fewer
|
23901c83ea
|
...and the bins.
git-svn-id: file:///home/svn/framework3/trunk@8433 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-02-09 16:48:13 +00:00 |
Stephen Fewer
|
b12ac46d9e
|
...and the stdapi bins.
git-svn-id: file:///home/svn/framework3/trunk@8385 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-02-06 18:00:09 +00:00 |
HD Moore
|
42b331b47f
|
Fix #790. Initialize the client state to be alive, tweak a few things on the meterpreter side
git-svn-id: file:///home/svn/framework3/trunk@8327 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-29 18:52:44 +00:00 |
Stephen Fewer
|
0099fedeb3
|
...and the bins for the ps command fix.
git-svn-id: file:///home/svn/framework3/trunk@8323 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-29 12:01:26 +00:00 |
Stephen Fewer
|
fc6eca57ec
|
...and finally the bins.
git-svn-id: file:///home/svn/framework3/trunk@8320 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-29 01:14:23 +00:00 |
HD Moore
|
284af1260a
|
Disable debug tracing
git-svn-id: file:///home/svn/framework3/trunk@8312 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 23:10:58 +00:00 |
HD Moore
|
f3408fd327
|
Fixes #744. The core issue was the migrate code waiting on SetEvent, but the migrate stub was blocked on a WSASocket due to a pending packet_receive in the main server thread. Simply settin the thread termination signal did not work, as the SSL_read was already in progress. This change forcible terminates the main server thread before waiting on the event in order to bypass this deadlock. The downside is a failed migrate has no way to recover if it makes it this far.
git-svn-id: file:///home/svn/framework3/trunk@8309 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 22:55:41 +00:00 |
Stephen Fewer
|
6772efb79c
|
...and finally the bins.
git-svn-id: file:///home/svn/framework3/trunk@8297 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 13:59:00 +00:00 |
Stephen Fewer
|
de691597b6
|
...and finally the bins :)
git-svn-id: file:///home/svn/framework3/trunk@8200 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-22 19:48:21 +00:00 |
Stephen Fewer
|
c92d7b68bf
|
...and the bins!
git-svn-id: file:///home/svn/framework3/trunk@8159 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-19 11:10:55 +00:00 |
HD Moore
|
42b3a5774d
|
Adds the process username to the ps output (when possible).
git-svn-id: file:///home/svn/framework3/trunk@8056 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-02 03:41:21 +00:00 |
HD Moore
|
4d7aec7c2d
|
Fixes #745. This commit changes how token manipulation works, adds the steal_token, drop_token, and getprivs commands. Tested on NT 4.0, 2000 SP4, XP SP3, 2003 SP2, Vista, and Windows 7
git-svn-id: file:///home/svn/framework3/trunk@8055 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-02 00:35:10 +00:00 |
HD Moore
|
9bf88af0cc
|
Add 64-bit
git-svn-id: file:///home/svn/framework3/trunk@8047 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-31 15:56:09 +00:00 |
HD Moore
|
98f83bbab1
|
Adds reg queryclass
git-svn-id: file:///home/svn/framework3/trunk@8046 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-31 15:52:30 +00:00 |
HD Moore
|
68aafc8e13
|
Fixes #658 by adding a 250ms sleep to the dispatch of the close call.
git-svn-id: file:///home/svn/framework3/trunk@7934 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-21 19:53:10 +00:00 |
HD Moore
|
cf6732d570
|
Fresh bins (including sniffer). See #672
git-svn-id: file:///home/svn/framework3/trunk@7807 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 18:36:01 +00:00 |
Stephen Fewer
|
be588716c5
|
Bug fix for meterpreter on NT4 (Tested on NT4.0 SP6). Add a function thread_open() in thread.c to wrap the use kernel32!OpenThread and ntdll!NtOpenThread for backwards compatibility.
git-svn-id: file:///home/svn/framework3/trunk@7806 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 18:12:51 +00:00 |
HD Moore
|
6da0fda5ed
|
Updated meterpreter binaries with a slight change to the thread schedule (solves a looping problem when the socket is dead).
git-svn-id: file:///home/svn/framework3/trunk@7793 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 05:42:47 +00:00 |
HD Moore
|
ff19b649f3
|
See #662. This should fix most of the meterpreter-side issues with sockets, there is still a second piece of this which is unflushed data on the local forwards from the ruby code.
git-svn-id: file:///home/svn/framework3/trunk@7761 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 22:08:06 +00:00 |
HD Moore
|
353fa1dba5
|
Updated binaries (32/64) with the first round of socket fixes
git-svn-id: file:///home/svn/framework3/trunk@7751 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 15:01:44 +00:00 |
HD Moore
|
e99e2a8d95
|
Rebuild with Stephen's mutex changes (rebuild of sniffer, but checking in the others as well to match).
git-svn-id: file:///home/svn/framework3/trunk@7734 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 14:44:35 +00:00 |
Stephen Fewer
|
56a64a0e2d
|
Commit the latest windows x86/x64 build of the multi-threaded meterpreter (An x64 build of espia has been added too).
git-svn-id: file:///home/svn/framework3/trunk@7733 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 13:07:26 +00:00 |
HD Moore
|
dfa0d155fc
|
See #607. Switch sniffer code to use mutexes
git-svn-id: file:///home/svn/framework3/trunk@7728 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 05:19:46 +00:00 |
HD Moore
|
8a186921e7
|
Rebuilt Stephen's changes locally, including the sniffer extension
git-svn-id: file:///home/svn/framework3/trunk@7700 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-04 17:54:01 +00:00 |
Stephen Fewer
|
10d9105708
|
Initial commit of the multi-threaded meterpreter binaries. Only x86 today (minus the sniffer extension), x64 will follow next Monday.
git-svn-id: file:///home/svn/framework3/trunk@7699 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-04 17:39:32 +00:00 |
Stephen Fewer
|
54f952129a
|
A fresh build of the x64 meterpreter and extensions to sync up with the recent changes with SSL in #7311 and the addition of the rm/del command from #7291
git-svn-id: file:///home/svn/framework3/trunk@7316 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-01 16:49:01 +00:00 |
HD Moore
|
e5e89906d0
|
Switch the meterpreter to SSLv3 and try to generate a slightly more realistic CN for the certificate. The goal is to work through a wider range of inline proxies.
git-svn-id: file:///home/svn/framework3/trunk@7311 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-31 20:44:23 +00:00 |
HD Moore
|
5234fe8ff8
|
Fixes 416. Adds the rm/del commands to meterpreter, fixes build problems triggered by the POSIX code merge
git-svn-id: file:///home/svn/framework3/trunk@7291 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-27 02:31:07 +00:00 |
HD Moore
|
8325b46694
|
Add Alexander Sotirov's metsvc binaries to the metepreter data directory
git-svn-id: file:///home/svn/framework3/trunk@7214 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-20 18:43:27 +00:00 |
HD Moore
|
bf5068f6b1
|
Fixes #288 and #320. This should fix the BSoD issue with the sniffer module (other than the mac filter change, this matches the vendor's example) and confirmed that the keyscan_dump fix works
git-svn-id: file:///home/svn/framework3/trunk@7066 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-26 16:26:05 +00:00 |
et
|
3993aaf79c
|
espia dll
git-svn-id: file:///home/svn/framework3/trunk@7064 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-26 04:25:37 +00:00 |
Stephen Fewer
|
1937839e79
|
Patch meterpreter's sysinfo command to resolve the system language and architecture.
git-svn-id: file:///home/svn/framework3/trunk@7028 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-10 13:09:48 +00:00 |
Stephen Fewer
|
36d60d5d12
|
Commit the x64 build of the meterpreter incognito extension.
git-svn-id: file:///home/svn/framework3/trunk@7009 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-07 09:25:25 +00:00 |
Stephen Fewer
|
ff9efacffa
|
Commit the x64 build of the meterpreter priv extension.
git-svn-id: file:///home/svn/framework3/trunk@7008 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-07 09:17:29 +00:00 |
Stephen Fewer
|
d584b4d314
|
Fixed migrate for x64 meterpreter (Tested on Win 7 and 2003).
git-svn-id: file:///home/svn/framework3/trunk@6999 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-04 01:40:48 +00:00 |
Stephen Fewer
|
8bb0efb97e
|
the first binaries for the windows x64 meterpreter. only metsrv and stdapi for now. source code to follow later.
git-svn-id: file:///home/svn/framework3/trunk@6998 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-03 17:50:41 +00:00 |
HD Moore
|
da32f1bdea
|
Updated meterpreter code/binaries to scrub memory after use, works around Peter's memoryze signatures from BH/DC 2009
git-svn-id: file:///home/svn/framework3/trunk@6942 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-08 14:22:32 +00:00 |
HD Moore
|
ed02a67367
|
Updated to match the new hashing alg from Stephen Fewer
git-svn-id: file:///home/svn/framework3/trunk@6924 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-31 17:58:11 +00:00 |
HD Moore
|
2a7467dd7f
|
Update the meterp binaries with clean builds from svn
git-svn-id: file:///home/svn/framework3/trunk@6888 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-24 04:01:26 +00:00 |
HD Moore
|
0d931953cf
|
The sniffer module is now compiled against the dnet headers for packet decodes
git-svn-id: file:///home/svn/framework3/trunk@6831 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-18 00:10:10 +00:00 |
HD Moore
|
f8c2a203fd
|
OSVDB references updates from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@6812 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-16 16:02:24 +00:00 |
HD Moore
|
148ca687f5
|
Updated libraries and source code now using OpenSSL
git-svn-id: file:///home/svn/framework3/trunk@6773 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 03:10:39 +00:00 |
HD Moore
|
e8784d68fb
|
Fixes up the sniffer to handle large packet captures better, fixes a regression in the sysinfo command.
git-svn-id: file:///home/svn/framework3/trunk@6768 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-12 13:17:37 +00:00 |
HD Moore
|
f76d73a823
|
Free packet memory when the capture is stopped
git-svn-id: file:///home/svn/framework3/trunk@6765 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-11 18:19:42 +00:00 |
HD Moore
|
4989f9bdbe
|
Fixes a bug where if the sniffer SDK could not initialize, it would still be treated as initialized the next time it was checked.
git-svn-id: file:///home/svn/framework3/trunk@6764 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-11 17:52:40 +00:00 |
HD Moore
|
645ca020e9
|
Fixes a memory corruption issue with the SSL file descriptor (was using a stack reference instead of the Remote->fd reference), adds the source code sans the Packet SDK for the sniffer module
git-svn-id: file:///home/svn/framework3/trunk@6763 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-11 17:32:50 +00:00 |
HD Moore
|
82cf85680c
|
Adds the sniffer extension for testing
git-svn-id: file:///home/svn/framework3/trunk@6762 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-11 13:39:43 +00:00 |
HD Moore
|
608ca7aae8
|
This patch removes some of the meterpreter compiler warnings and fixes migration over SSL
git-svn-id: file:///home/svn/framework3/trunk@6761 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-09 22:44:33 +00:00 |
HD Moore
|
7b516e06fe
|
Transfer the migration payload over SSL, still working on a crash bug after migration completes
git-svn-id: file:///home/svn/framework3/trunk@6756 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-09 03:22:10 +00:00 |
HD Moore
|
485d3fcb17
|
Merge in the meterpreter binaries with the new kernel32 loader code
git-svn-id: file:///home/svn/framework3/trunk@6745 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-05 20:27:33 +00:00 |
HD Moore
|
0c4c05fb24
|
Commit the SSL-updated meterpreter binaries
git-svn-id: file:///home/svn/framework3/trunk@6741 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-05 05:22:06 +00:00 |
HD Moore
|
43372de9f0
|
Fix a bug in the new SSL code that broke large transfers
git-svn-id: file:///home/svn/framework3/trunk@6720 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-27 01:52:36 +00:00 |
HD Moore
|
a74d3a3f38
|
Switches meterpreter to SSL by default, using the PolarSSL library. To build this, just place polarssl.lib into an workspace/common/Release/
git-svn-id: file:///home/svn/framework3/trunk@6718 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-26 23:18:53 +00:00 |
et
|
746a3c533a
|
ext. sample dll. not ready for production enviroments
git-svn-id: file:///home/svn/framework3/trunk@6506 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-04-29 03:38:42 +00:00 |
HD Moore
|
b360e42171
|
Updated sysinfo and setdesktop code
git-svn-id: file:///home/svn/framework3/trunk@6462 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-04-07 15:46:45 +00:00 |
HD Moore
|
89ecdd9ac8
|
Mostly working setdesktop code, removed grabdesktop
git-svn-id: file:///home/svn/framework3/trunk@6393 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-03-25 23:14:14 +00:00 |
HD Moore
|
8b27f5faef
|
Updated binaries, adds enumdesktops, setdesktop is still broken
git-svn-id: file:///home/svn/framework3/trunk@6383 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-03-23 21:05:13 +00:00 |
HD Moore
|
ebcc19c54b
|
Recompiled, adds the grabdesktop, keyscan_start, keyscan_stop, and keyscan_dump commands to UI
git-svn-id: file:///home/svn/framework3/trunk@6367 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-03-22 23:58:58 +00:00 |
natron
|
5069038ecd
|
Fixes meterpreter's migrate function to work on DEP-enabled boxes (ticket 275). Patch by Stephen Fewer (harmonysecurity.com).
git-svn-id: file:///home/svn/framework3/trunk@6347 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-03-16 21:10:58 +00:00 |
HD Moore
|
95f48966ed
|
Add the msfcli exe
git-svn-id: file:///home/svn/framework3/trunk@5838 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-11-04 20:09:16 +00:00 |
HD Moore
|
187f79eddf
|
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
git-svn-id: file:///home/svn/framework3/trunk@5837 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-11-04 20:08:24 +00:00 |
Matt Miller
|
d94bfaf373
|
better support for nx with dllinject payloads/meterp
git-svn-id: file:///home/svn/framework3/trunk@5510 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-05-26 06:34:12 +00:00 |
Matt Miller
|
e63a121341
|
merge incognito updates from Luke Jennings
git-svn-id: file:///home/svn/framework3/trunk@5499 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-04-28 16:57:49 +00:00 |
Matt Miller
|
c9b652fb50
|
correct memset in libloader
git-svn-id: file:///home/svn/framework3/trunk@4725 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-04-21 20:21:52 +00:00 |
Matt Miller
|
80460af77e
|
fix DEP issue with meterp, fixes #48
git-svn-id: file:///home/svn/framework3/trunk@4704 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-04-19 03:14:58 +00:00 |
Matt Miller
|
3b1a8f31c6
|
updated meterp stdapi to properly detect windows vista
git-svn-id: file:///home/svn/framework3/trunk@4603 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-04-01 22:04:24 +00:00 |
Matt Miller
|
cc898298a9
|
new priv dll with proper page protections
git-svn-id: file:///home/svn/framework3/trunk@3879 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-09-14 03:47:56 +00:00 |
Matt Miller
|
243127447b
|
some meterp bugfixes found while creating a blog post :)
git-svn-id: file:///home/svn/incoming/trunk@3592 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-04-07 03:02:37 +00:00 |
Matt Miller
|
9612409872
|
timestomp integration
git-svn-id: file:///home/svn/incoming/trunk@3219 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-12-14 00:34:05 +00:00 |
Matt Miller
|
e645a3f467
|
initial import of the priv esc extension
git-svn-id: file:///home/svn/incoming/trunk@3209 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-12-13 05:59:59 +00:00 |
Matt Miller
|
d9ac34db33
|
support for locking images in memory to prevent swap out
git-svn-id: file:///home/svn/incoming/trunk@3208 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-12-13 04:09:12 +00:00 |
Matt Miller
|
954588ea9e
|
support for RevertToSelf
git-svn-id: file:///home/svn/incoming/trunk@3207 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-12-13 03:57:20 +00:00 |
Matt Miller
|
9becfdf944
|
added a command, cleaned up some code
git-svn-id: file:///home/svn/incoming/trunk@3179 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-12-06 03:56:29 +00:00 |
Matt Miller
|
d99e5b4f89
|
fix module dependency problem, made it so the server sock in meterp isn't inherited
git-svn-id: file:///home/svn/incoming/trunk@2842 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-08-22 01:42:13 +00:00 |
Matt Miller
|
9842cdc33b
|
migration now enables the debug privilege first so it can migrate to system services, added reboot/shutdown wrappers
git-svn-id: file:///home/svn/incoming/trunk@2834 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-26 04:52:59 +00:00 |
Matt Miller
|
7eb2c68d58
|
fix interactive channels
git-svn-id: file:///home/svn/incoming/trunk@2833 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-26 04:08:01 +00:00 |
Matt Miller
|
539af94716
|
made ls prettier/faster
git-svn-id: file:///home/svn/incoming/trunk@2821 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-23 17:52:29 +00:00 |
Matt Miller
|
71f0bf7a23
|
pay attention to flags too
git-svn-id: file:///home/svn/incoming/trunk@2818 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-22 04:28:37 +00:00 |
Matt Miller
|
7e1879d4d2
|
fixed in mem shit
git-svn-id: file:///home/svn/incoming/trunk@2817 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-22 04:25:57 +00:00 |
Matt Miller
|
60baa323ea
|
new stdapi with in mem fixes
git-svn-id: file:///home/svn/incoming/trunk@2816 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-22 04:12:22 +00:00 |
Matt Miller
|
ded1cec87a
|
new stdapi with in-mem support and sysinfo and getuid
git-svn-id: file:///home/svn/incoming/trunk@2810 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-22 03:40:39 +00:00 |
Spoon M
|
9f7f7f0e53
|
new version with the mad new skills
git-svn-id: file:///home/svn/incoming/trunk@2677 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-08 03:16:26 +00:00 |
Matt Miller
|
f699fd0a23
|
updated metsrv.dll
git-svn-id: file:///home/svn/incoming/trunk@2592 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-06-08 06:52:18 +00:00 |
Matt Miller
|
24f53393f3
|
maybe
git-svn-id: file:///home/svn/incoming/trunk@2518 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-05-24 22:19:51 +00:00 |
Matt Miller
|
ec177c9de2
|
stdapi
git-svn-id: file:///home/svn/incoming/trunk@2517 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-05-24 21:11:57 +00:00 |