Ramon de C Valle
35240108de
Added patch and module from Kris Katterjohn
...
git-svn-id: file:///home/svn/framework3/trunk@5720 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-06 13:16:08 +00:00
HD Moore
02780a1d88
Improvements to the FTP mixin and scanner, still needs multiline read support
...
git-svn-id: file:///home/svn/framework3/trunk@5715 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-04 21:42:37 +00:00
HD Moore
fd256ec4a1
This massive commit changes the metasploit 3 module format. The new syntax allows for greater scalability and future improvements to the metasploit module loader. This change also makes it easier for users to add new modules, since the class name no longer needs to match the directory structure.
...
git-svn-id: file:///home/svn/framework3/trunk@5709 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-02 05:23:59 +00:00
et
fa3ce57fed
Implemented Auxiliary::WMAPScanUniqueQuery.
...
git-svn-id: file:///home/svn/framework3/trunk@5704 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-01 03:57:57 +00:00
HD Moore
37d9c3db1d
Corrects an issue where a scope ID is passed to IPv4 addresses, cleans up the parsing.
...
git-svn-id: file:///home/svn/framework3/trunk@5687 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 05:39:06 +00:00
HD Moore
e6254d42ce
Cleaning up all the wordy stuff
...
git-svn-id: file:///home/svn/framework3/trunk@5685 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 04:25:44 +00:00
HD Moore
a75978a218
Patch from Stephen Fewer from Harmony Security, makes the midstager uses VirtualAlloc with RWX, solves a number of issues, specifically stack space starvation for large payloads.
...
git-svn-id: file:///home/svn/framework3/trunk@5683 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 22:54:30 +00:00
James Lee
36a06e7576
initial commit of php findsock. This patch makes all http connections global and removes the "close if (!pipelining)" checks, so beware of bugs.
...
git-svn-id: file:///home/svn/framework3/trunk@5678 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 04:41:51 +00:00
HD Moore
ddc47955f2
Simplified module loader, update to the platform module to be more compat with ruby 1.9
...
git-svn-id: file:///home/svn/framework3/trunk@5677 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 04:15:10 +00:00
HD Moore
fba4fb2889
Fix deprecated while/case syntax
...
git-svn-id: file:///home/svn/framework3/trunk@5676 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-23 15:41:13 +00:00
HD Moore
b001e4684d
Import first version of WMAP from ET LoWNOISE
...
git-svn-id: file:///home/svn/framework3/trunk@5675 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-22 22:32:20 +00:00
Ramon de C Valle
58cef5775e
Added ARCH_POWER constant and fixed AIX payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5663 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-17 01:42:51 +00:00
Ramon de C Valle
117bae1e3e
Added AIX POWER/PowerPC payload modules
...
git-svn-id: file:///home/svn/framework3/trunk@5654 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-10 20:13:36 +00:00
HD Moore
0f25d98fb2
Fixes a typo with IPv4->IPv6 address translation
...
git-svn-id: file:///home/svn/framework3/trunk@5652 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-05 16:23:34 +00:00
James Lee
0c2f8537a1
re-enable randomization of basic blocks in php shells
...
git-svn-id: file:///home/svn/framework3/trunk@5647 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-01 04:43:07 +00:00
HD Moore
ecf211a0d8
Pass the correct payload space value when specified via target or override
...
git-svn-id: file:///home/svn/framework3/trunk@5645 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-26 22:57:06 +00:00
HD Moore
1fa95d6050
This patch adds support for IPv6 scope_ids to AddressRange parameters. Ranges consisting of a single address are not expanded
...
git-svn-id: file:///home/svn/framework3/trunk@5640 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-23 07:05:38 +00:00
HD Moore
fcaa218548
Fix IPv4 payloads, dont commit past midnight anymore.
...
git-svn-id: file:///home/svn/framework3/trunk@5638 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-22 22:06:14 +00:00
HD Moore
d53dd66701
Adds initial support for IPv6, including two stager. Tested Meterpreter over IPv6 stages on XP and Vista. Using this is still tricky, I will add a wiki page tomorrow to explain the ScopeID stuff for link-local testing. This commit also includes the raw (oversized) assembler for the stagers as well as the entire old metasploit assembly set (useful for development).
...
git-svn-id: file:///home/svn/framework3/trunk@5635 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-22 06:34:57 +00:00
HD Moore
3cf81f257e
Ensure that the Content-Type is set to text/html by default.
...
git-svn-id: file:///home/svn/framework3/trunk@5615 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-08 02:37:54 +00:00
James Lee
f5fe1e0305
fix escaping bug in js_base64
...
git-svn-id: file:///home/svn/framework3/trunk@5611 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-30 02:56:21 +00:00
HD Moore
905366758a
Add the US-CERT-VU reference type
...
git-svn-id: file:///home/svn/framework3/trunk@5578 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 20:56:36 +00:00
HD Moore
f52f4d7b62
Add |)ruid's infos to author, fix an issue with auxiliary options checking.
...
git-svn-id: file:///home/svn/framework3/trunk@5577 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 20:14:47 +00:00
HD Moore
ca7c8b0f68
Adds the Exploit::Remote::Ip mixin
...
git-svn-id: file:///home/svn/framework3/trunk@5566 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 19:12:05 +00:00
James Lee
2d344e64df
browser_autopwn now works with mozilla_compareto, mozilla_navigatorjava, and firefox_queryinterface; increased reliability of OS and browser detection
...
git-svn-id: file:///home/svn/framework3/trunk@5563 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 07:28:05 +00:00
Patrick Webster
301b1514f3
Added pop2 mixin, aux module, typos.
...
git-svn-id: file:///home/svn/framework3/trunk@5550 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-08 14:21:48 +00:00
James Lee
8800372e46
initial commit of browser_autopwn;
...
revamp php payloads;
socks5 for IPv6 (untested)
git-svn-id: file:///home/svn/framework3/trunk@5546 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-01 01:44:56 +00:00
Matt Miller
b2b7a05abb
comment out stage encoding until I can troubleshoot it some more
...
git-svn-id: file:///home/svn/framework3/trunk@5522 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-05 07:03:10 +00:00
Matt Miller
30ae3af6fb
experimental: stages encoded by default, set DisableStageEncoding 1 to disable
...
git-svn-id: file:///home/svn/framework3/trunk@5511 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-26 07:59:03 +00:00
Matt Miller
d94bfaf373
better support for nx with dllinject payloads/meterp
...
git-svn-id: file:///home/svn/framework3/trunk@5510 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-26 06:34:12 +00:00
James Lee
2db9dd6ab2
Reversing over greedy commit. =(
...
git-svn-id: file:///home/svn/framework3/trunk@5506 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 06:17:41 +00:00
James Lee
93199c5610
"set foo" prints the value of foo if it exists
...
git-svn-id: file:///home/svn/framework3/trunk@5505 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 05:29:32 +00:00
HD Moore
5ec3509103
egypt found a bug, regenerate payload was overwriting datastore entries and not setting them back
...
git-svn-id: file:///home/svn/framework3/trunk@5504 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-16 21:20:43 +00:00
HD Moore
c5a910525c
Adding the BPS reference type, URLs are not public yet, will be soon.
...
git-svn-id: file:///home/svn/framework3/trunk@5481 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-21 05:21:28 +00:00
HD Moore
125d114526
Properly handle SMB::pipe_(read|write)_(min|max)
...
git-svn-id: file:///home/svn/framework3/trunk@5466 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-04 20:54:39 +00:00
HD Moore
03276c9cc0
Add a find_layers method
...
git-svn-id: file:///home/svn/framework3/trunk@5456 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-22 19:55:23 +00:00
HD Moore
1ea29ba8f0
Fixes #218 . Updates the http password capture module. Removes a bogus makefile from the tree
...
git-svn-id: file:///home/svn/framework3/trunk@5452 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-22 06:34:52 +00:00
HD Moore
06aa636126
Payload patch from toto
...
git-svn-id: file:///home/svn/framework3/trunk@5450 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-18 16:01:15 +00:00
HD Moore
c3a4cda127
Merged all of the scruby patches, fixed Dot11 support with regards to RadioTap headers.
...
git-svn-id: file:///home/svn/framework3/trunk@5446 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-17 04:46:42 +00:00
HD Moore
4ee248bf3e
Pass the IP address in the IPC$ tree connect (required by novell)
...
git-svn-id: file:///home/svn/framework3/trunk@5441 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-13 15:46:33 +00:00
James Lee
dfa0f6c0c4
More reliable reverse shell
...
git-svn-id: file:///home/svn/framework3/trunk@5429 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-04 07:34:26 +00:00
HD Moore
509fc09382
Lots of updates related to <secret project X>.
...
git-svn-id: file:///home/svn/framework3/trunk@5424 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-02 04:46:13 +00:00
Ramon de C Valle
a3ccb61b91
Pulled out image_source
...
git-svn-id: file:///home/svn/framework3/trunk@5401 4d416f70-5f16-0410-b530-b9f4589650da
2008-02-09 04:35:21 +00:00
HD Moore
62303eefbf
Merged revisions 5378-5379 via svnmerge from
...
svn+ssh://metasploit.com/home/svn/framework3/branches/framework-3.1
........
r5379 | hdm | 2008-01-27 21:13:27 -0600 (Sun, 27 Jan 2008) | 3 lines
Remove $stderr prints
........
git-svn-id: file:///home/svn/framework3/trunk@5380 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-28 03:13:55 +00:00
HD Moore
6677beb174
Merged revisions 5366-5377 via svnmerge from
...
svn+ssh://metasploit.com/home/svn/framework3/branches/framework-3.1
........
r5366 | hdm | 2008-01-26 20:30:53 -0600 (Sat, 26 Jan 2008) | 2 lines
Update version information
........
r5367 | hdm | 2008-01-26 21:10:57 -0600 (Sat, 26 Jan 2008) | 3 lines
Updated for version 3.1
........
r5369 | hdm | 2008-01-26 21:13:31 -0600 (Sat, 26 Jan 2008) | 3 lines
Wipe the private directories from the branch.
........
r5371 | hdm | 2008-01-27 17:24:24 -0600 (Sun, 27 Jan 2008) | 5 lines
Timeout options added for dcerpc connect and read times. Addition of novell netware as a supported target platform. Inclusion of the serverprotect exploit (still works on the latest version). Addition of the first remote netware kernel exploit that leads to a shell, addition of netware stager and shell, and first draft of the release notes for 3.1
........
r5372 | hdm | 2008-01-27 17:30:08 -0600 (Sun, 27 Jan 2008) | 3 lines
Formatting, indentation, fixed the static IP embedded in the request
........
r5373 | hdm | 2008-01-27 20:02:48 -0600 (Sun, 27 Jan 2008) | 3 lines
Correctly trap exploit errors in a way that works with all of the UIs
........
r5374 | hdm | 2008-01-27 20:23:25 -0600 (Sun, 27 Jan 2008) | 3 lines
More last-minute bug fixes
........
r5375 | hdm | 2008-01-27 20:37:43 -0600 (Sun, 27 Jan 2008) | 3 lines
Force multi-bind off in netware, correct label display in gtk gui labels
........
r5376 | hdm | 2008-01-27 20:50:03 -0600 (Sun, 27 Jan 2008) | 3 lines
More exception handling fun
........
git-svn-id: file:///home/svn/framework3/trunk@5378 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-28 03:06:31 +00:00
HD Moore
96e543de06
Bumped to 3.2-dev
...
git-svn-id: file:///home/svn/framework3/trunk@5368 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-27 03:11:33 +00:00
HD Moore
9d2abb9287
The capture mixin is now working again (with scruby)
...
git-svn-id: file:///home/svn/framework3/trunk@5352 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-25 05:59:06 +00:00
HD Moore
ee4fbac2bf
Log error message by IP address
...
git-svn-id: file:///home/svn/framework3/trunk@5348 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-25 04:53:15 +00:00
HD Moore
1e2ec68913
Handle lorcon on windows better
...
git-svn-id: file:///home/svn/framework3/trunk@5341 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-24 05:49:48 +00:00
HD Moore
a9ca5d1ace
More GUI work. Changed the location where module exceptions are reported
...
git-svn-id: file:///home/svn/framework3/trunk@5335 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-24 05:29:35 +00:00