infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
6,125 Commits
7 Branches
556 Tags
421 MiB
Commit Graph

6125 Commits (9277f060a70561721e5be72176b1274c9ad38e87)

Author SHA1 Message Date
Stephen Fewer c09ca4eba5 Commit all the code for the new 'screenshot' command in the stdapi extension. Screenshot will now work on NT4 - 7 on both x86 and x64 and on newer versions of Windows we can break out of session isolation (e.g. session 0 isolation for services) to screenshot the active desktop (or logon screen) without the need to migrate meterpreter. The majority of the migration code-injection stuff has been refactored out into base_inject.c so it can be shared with the new ps_inject() functionality to inject dlls. The 'ps' command now reports what session each process belongs to (if this is too verbose we can remove it or add a -v verbose switch to the ps command). The 'execute' command can now take a -s switch in order to create a process in a users session under the users privs (assuming you have the privs to do this). 
git-svn-id: file:///home/svn/framework3/trunk@8787 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 17:09:55 +00:00
Stephen Fewer c55e9af9ae Commit the updated APC injection stubs. fixes a nasty issue in some edge cases whereby when using APC injection for a process in another session then the current host process the injected APC can cause an access violation in kernel32 during a call the kernel32!CreateThread caused by the APC's host thread not having an initialized Activation Context inside its TEB. We now test for this and create a dummy ActivationContext entry to appease the kernel. This will both improve DLL injection reliability as well as meterpreter migration reliability. 
git-svn-id: file:///home/svn/framework3/trunk@8786 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 17:00:19 +00:00
James Lee 09c1fdd13d store full name (which includes module type) instead of just the refname 
git-svn-id: file:///home/svn/framework3/trunk@8785 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 14:33:48 +00:00
HD Moore ac0e6515ab Remove the PID from session.info, it doesn't add much value: 
git-svn-id: file:///home/svn/framework3/trunk@8784 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 14:21:46 +00:00
HD Moore 89c62bc838 Fixes #1079. Handle a closed SSL socket gracefully 
git-svn-id: file:///home/svn/framework3/trunk@8783 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 14:13:53 +00:00
HD Moore 4c22afed31 Fix other occurrences of on_session_close not taking a second parameter. See #1075 
git-svn-id: file:///home/svn/framework3/trunk@8782 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 13:54:10 +00:00
HD Moore f53a56f147 Fixes #1075. Handle the 'reason' parameter to on_session_close 
git-svn-id: file:///home/svn/framework3/trunk@8781 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 13:52:56 +00:00
HD Moore 13410d4daa Rename aurora module to the MSB naming convention 
git-svn-id: file:///home/svn/framework3/trunk@8780 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 05:49:45 +00:00
HD Moore a23344b5d0 Consistency in how IE/Internet Explorer is named 
git-svn-id: file:///home/svn/framework3/trunk@8779 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 05:49:14 +00:00
HD Moore 3d601c0be9 Add a new table 
git-svn-id: file:///home/svn/framework3/trunk@8778 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 03:02:13 +00:00
James Lee dea0ec37f0 add events accessor to workspace 
git-svn-id: file:///home/svn/framework3/trunk@8777 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 00:57:23 +00:00
HD Moore dcfdb95e5f *Backwards Compatibility Broken* - The session XMLRPC object now requires data for read/write to be encoded using Base64, this solves a number of issues with the builtin XMLRPC library with regards to binary data encoding. The response from read() now contains an 'encoding' element with the value 'base64', in order to differentiate from older versions. 
git-svn-id: file:///home/svn/framework3/trunk@8776 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 00:55:21 +00:00
Mario Ceballos b01f9ff233 adds a patch from Thomas Ring. 
git-svn-id: file:///home/svn/framework3/trunk@8775 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 22:42:49 +00:00
Steve Tornio d3da883aa2 add osvdb ref 
git-svn-id: file:///home/svn/framework3/trunk@8774 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 22:07:04 +00:00
HD Moore 286bb09a56 Add a timeout wrapper, remove debug statement 
git-svn-id: file:///home/svn/framework3/trunk@8773 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 22:06:52 +00:00
HD Moore bfab49b9e9 Change the sessions -l output to show info and type vs description, automatically grab the user/hostname on startup (disabled with set AutoSystemInfo false) 
git-svn-id: file:///home/svn/framework3/trunk@8772 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 22:02:27 +00:00
HD Moore baf64ed999 Remove trailing 
git-svn-id: file:///home/svn/framework3/trunk@8771 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 22:01:43 +00:00
Joshua Drake 3c57fe6e81 add exploit module for cve-2010-0806 
git-svn-id: file:///home/svn/framework3/trunk@8770 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 22:01:32 +00:00
Tod Beardsley efbdaba298 Making telnet timeouts much less disasterous, since they can happen pretty commonly. 
git-svn-id: file:///home/svn/framework3/trunk@8769 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 21:54:20 +00:00
HD Moore 91404f9c8f Report critical/seen properly 
git-svn-id: file:///home/svn/framework3/trunk@8768 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 18:00:19 +00:00
Tod Beardsley 542a9a0617 Report MySQL application-level protocol errors (such as host not allowed messages). 
git-svn-id: file:///home/svn/framework3/trunk@8767 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 17:56:03 +00:00
HD Moore bd3d6b55f6 Add alert fields 
git-svn-id: file:///home/svn/framework3/trunk@8766 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 17:31:47 +00:00
HD Moore aaea62bb92 Report the correct local/peer names for the session information. Fix a return value check 
git-svn-id: file:///home/svn/framework3/trunk@8765 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 07:13:18 +00:00
HD Moore 6bd2a954cf Lots of small changes, the big one is moving from sysread -> readpartial in the stream base class 
git-svn-id: file:///home/svn/framework3/trunk@8764 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 06:43:46 +00:00
HD Moore e05921b297 Report the workspace object not the name 
git-svn-id: file:///home/svn/framework3/trunk@8763 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 06:16:57 +00:00
Joshua Drake b419a40c45 finished periodic missing CVE reference check (hint vulns w/o CVEs here!) 
also some minor cleanups here and there

git-svn-id: file:///home/svn/framework3/trunk@8762 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 05:58:01 +00:00
Joshua Drake 3b9524697f add verbose option 
git-svn-id: file:///home/svn/framework3/trunk@8761 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 05:55:47 +00:00
HD Moore 33c60067c0 Sanity check reported host addresses 
git-svn-id: file:///home/svn/framework3/trunk@8760 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-10 05:45:40 +00:00
Tod Beardsley 4415e3fbbf Fixing up ssh_login reporting. 
git-svn-id: file:///home/svn/framework3/trunk@8759 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-09 22:07:04 +00:00
Joshua Drake df395f3ff0 added Brett Gervasoni to authors 
git-svn-id: file:///home/svn/framework3/trunk@8758 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-09 09:12:57 +00:00
Joshua Drake 52647260b3 add offset for alternative file open methods 
git-svn-id: file:///home/svn/framework3/trunk@8757 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-09 05:57:22 +00:00
HD Moore a239963a7d Handle wrapped TCP services better 
git-svn-id: file:///home/svn/framework3/trunk@8756 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-09 05:38:28 +00:00
HD Moore dc90b43bcd Emulate a much more common client version 
git-svn-id: file:///home/svn/framework3/trunk@8755 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-09 04:37:59 +00:00
Joshua Drake fbc157df56 add exploit module for cve-2010-0688 
git-svn-id: file:///home/svn/framework3/trunk@8754 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-09 01:04:44 +00:00
HD Moore b87f0ac796 Fix the reaper 
git-svn-id: file:///home/svn/framework3/trunk@8753 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 23:32:57 +00:00
Joshua Drake 5543e4551f add auxiliary dos module for apache mod_isapi bug 
git-svn-id: file:///home/svn/framework3/trunk@8752 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 23:21:17 +00:00
HD Moore 54755d856c Handle cases where the peer has no : (distcc exploit) 
git-svn-id: file:///home/svn/framework3/trunk@8751 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 23:03:49 +00:00
HD Moore 69f50eea7c Kill off any session with eof on the socket 
git-svn-id: file:///home/svn/framework3/trunk@8750 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 22:58:43 +00:00
HD Moore b1973c6630 Adds detection and exploitation coverage for the Energizer Duo trojan 
git-svn-id: file:///home/svn/framework3/trunk@8749 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 19:06:50 +00:00
Stephen Fewer cf48de7846 Update the README for the modified VNC code. 
git-svn-id: file:///home/svn/framework3/trunk@8748 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 15:16:20 +00:00
Stephen Fewer 31b7b637a4 The new VNC DLL bins. 
git-svn-id: file:///home/svn/framework3/trunk@8747 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 14:53:37 +00:00
Stephen Fewer 46cc8e538f The new x64 VNC inject payload stage. 
git-svn-id: file:///home/svn/framework3/trunk@8746 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 14:51:43 +00:00
Stephen Fewer 08d1850bcc Commit the new VNC x86/x64 DLL source code... 
git-svn-id: file:///home/svn/framework3/trunk@8745 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 14:49:45 +00:00
Stephen Fewer d0f2b589b6 Delete the old VNC source code. 
git-svn-id: file:///home/svn/framework3/trunk@8744 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 14:39:20 +00:00
HD Moore 1c1fe9c20f Add a method for syncing the database (waiting on all pending writes) 
git-svn-id: file:///home/svn/framework3/trunk@8743 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 14:17:34 +00:00
HD Moore a35817f0cc Store more information 
git-svn-id: file:///home/svn/framework3/trunk@8742 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 13:52:39 +00:00
HD Moore d8c900aabb Report the workspace based on the session 
git-svn-id: file:///home/svn/framework3/trunk@8741 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 05:31:21 +00:00
HD Moore d5b85db27f Fixes a false positive when the server always replies with 200 OK 
git-svn-id: file:///home/svn/framework3/trunk@8740 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 05:26:33 +00:00
HD Moore 4bfd1a1f1e Allow run_simple to inherit input/output from itself when opts are nil 
git-svn-id: file:///home/svn/framework3/trunk@8739 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 04:47:40 +00:00
HD Moore a5d05fc2fb Fix up a typo 
git-svn-id: file:///home/svn/framework3/trunk@8738 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 04:39:06 +00:00