2bf2d4d8a4
Merge branch 'netgear_sph200d_traversal' of https://github.com/m-1-k-3/metasploit-framework into m-1-k-3-netgear_sph200d_traversal
2013-02-03 23:35:29 +01:00
c24c926ffa
add aditional check to detect valid device
2013-02-01 20:55:06 +01:00
996ee06b0f
fix another print_ call
2013-02-01 20:43:54 +01:00
152f397a1f
first module cleanup
2013-02-01 20:38:11 +01:00
988761a6de
more updates, BID, Exploit-DB
2013-02-01 20:18:53 +01:00
fdd5fe77c1
more updates ...
2013-02-01 19:59:19 +01:00
0e22ee73b5
updates ...
2013-02-01 19:26:34 +01:00
c174e6a208
Correctly use normalize_uri()
...
normalize_uri() should be used when you're joining URIs. Because if
you're merging URIs after it's normalized, you could get double
slashes again.
2013-01-30 23:23:41 -06:00
ea5e993bf3
initial
2013-01-29 22:02:29 +01:00
690ef85ac1
Fix trailing slash problem
...
These modules require the target URI to be a directory path. So
if you remove the trailing slash, the web server might return a
301 or 404 instead of 200.
Related to: [SeeRM: #7727 ]
2013-01-28 13:19:31 -06:00
15253f23bf
added RHOSTS funct
2013-01-24 15:29:35 -06:00
1fc747994e
cleanup for linksys_wrt54gl_exec
2013-01-24 17:50:14 +01:00
3a5e92ba6f
hopefully all fixex included
2013-01-23 12:15:34 +01:00
c601ceba3c
Fixed error deleting ntds and sys files
2013-01-22 09:42:49 -06:00
ed3b886b61
working with psexec mixin
2013-01-22 09:36:43 -06:00
11c13500be
small fix
2013-01-21 13:41:42 +01:00
62ff52280a
initial linksys OS command injection
2013-01-21 13:19:29 +01:00
a89db93891
psexec_command - Unable to execute specified command: can't convert nil into Integer
...
Patched as described in Redmine bug #7680
2013-01-14 15:54:40 -05:00
ff9ef80cc6
Fixed terrible tab issues that occured because of an evil vimrc filegit add ntdsgrab.rb
2013-01-07 12:49:58 -06:00
e4546b13f3
Creating new pull request to beat Travis build strange errors...
2013-01-07 12:21:59 -06:00
c1f0e1172b
Still fighing with Travis build errors
2013-01-07 11:52:37 -06:00
33751c7ce4
Merges and resolves CJR's normalize_uri fixes
...
Merge remote-tracking branch 'ChrisJohnRiley/set_normalize_uri_on_modules'
into set_normalize_uri_on_modules
Note that this trips all kinds of msftidy warnings, but that's for another
day.
Conflicts:
modules/exploits/unix/webapp/tikiwiki_jhot_exec.rb
modules/exploits/windows/http/xampp_webdav_upload_php.rb
2013-01-07 11:16:58 -06:00
ac2182c69b
Edited to fix Travis build process
2013-01-07 11:10:21 -06:00
44e07c8577
Created psexec mixin to get rid of ugly copy-paste
2013-01-04 09:58:48 -06:00
4d8a2a0885
msftidy: remove $Revision$
2013-01-03 01:01:18 +01:00
95948b9d7c
msftidy: remove $Revision$
2013-01-03 00:58:09 +01:00
ca890369b1
msftidy: remove $Id$
2013-01-03 00:54:48 +01:00
321a4ecb74
Escaped quotes in windows command
2012-12-29 13:46:22 -06:00
02bbcb5803
surrounded ntdspath in a space
2012-12-29 13:33:32 -06:00
174e6e8f17
Fixed array instantiation
2012-12-29 13:31:54 -06:00
0344c568fd
Merge branch 'smb_fixes' of git://github.com/alexmaloteaux/metasploit-framework into alexmaloteaux-smb_fixes
2012-12-18 11:38:14 -06:00
10511e8281
Merge remote branch 'origin/bug/fix-double-slashes'
...
Ran the new normalize_uri() specs, all passes, so I'm quite confident in
this change.
2012-12-17 13:29:19 -06:00
2eb01168c8
Cleaned build junk
2012-12-14 10:44:53 -06:00
82a6519dc4
cleaned up print_status and print_errors
2012-12-14 10:41:40 -06:00
1b26036028
removed junk
2012-12-14 09:23:26 -06:00
ae663b2a08
removed | from author section
2012-12-14 09:02:19 -06:00
27ca43c915
Added to create new pull request
2012-12-14 08:53:22 -06:00
d2885d9045
Correct US Cert references
2012-12-13 14:19:53 -06:00
c66777d028
Merge branch 'command' of git://github.com/R3dy/metasploit-framework into R3dy-command
2012-12-06 16:08:04 -06:00
205276c38f
Update modules/auxiliary/admin/smb/psexec_command.rb
...
Fixed static path to Windows directory. This causes problems with directory is 'WINNT' for example.
2012-12-06 16:03:44 -06:00
3dada00f43
fix typo accor ding to redmine 7550
2012-12-04 22:37:08 +01:00
c0c3dff4e6
Several fixes for smb, mainly win 8 compatibility
2012-11-28 22:49:40 +01:00
319fa04c16
Fix Ruby 1.8 comma of death
2012-11-26 16:45:43 -06:00
414fd052c1
final cleanup
2012-11-24 15:03:14 +01:00
f7fb8bb862
change module filename
2012-11-23 11:43:34 +01:00
cb7e98ea29
Cleanup for command module
2012-11-23 11:42:59 +01:00
e16cea6db8
Fixed execerror, redundant if statement, and poor exception handling
2012-11-20 18:46:07 -06:00
795ea5bec2
Fix randomize of dislayname and removed filename from command.rb
2012-11-19 14:34:06 -06:00
7fa8717860
Fixed cleanup method to report an Error on command.rb
2012-11-19 13:59:58 -06:00
f9b4971fc3
Fixed hard coded paths in psexec on command.rb
2012-11-13 10:28:16 -06:00
683bcd4b82
Added disconnect method to command.rb
2012-11-12 11:25:12 -06:00
e57275d3f6
added check cleanup method to command.rb
2012-11-12 09:46:02 -06:00
cffedd0c97
Set back to target_uri.path
2012-11-11 12:04:31 +01:00
6e257d5f57
Simplify main method
2012-11-09 08:50:09 -06:00
0dd4f4d03d
Formatting
2012-11-08 17:51:06 +01:00
f88ec5cbc8
Add normalize_uri to modules that may have
...
been missed by PULL 1045.
Please ensure PULL 1045 is in place prior to
looking at this (as it implements normalize_uri)
ref --> https://github.com/rapid7/metasploit-framework/pull/1045
2012-11-08 17:42:48 +01:00
4d2147f392
Adds normalize_uri() and fixes double-slash typos
2012-11-08 07:16:51 -06:00
22ecd6afa9
Edit command.rb
2012-11-07 15:17:13 -06:00
18aab8bcc7
Remove extrat comment lines from command.rb
2012-11-07 15:09:57 -06:00
d159aa6f9f
Changed error handeling of command.rb module
2012-11-07 15:03:31 -06:00
ac518f7091
Removed double lines in Author field and general URLs
2012-11-07 08:22:09 -06:00
aec4d99549
ran msftidy on command.rb
2012-11-06 16:33:47 -06:00
9f87b7b674
Removed smb_exec from this branch
2012-11-06 16:18:38 -06:00
0b940d8087
New module command.rb
2012-11-05 12:03:51 -06:00
aa6e8c7437
smb_exec
2012-11-05 11:46:39 -06:00
a9db705b60
New module for submission smb_exec
2012-11-05 11:45:03 -06:00
2c4273e478
Correct some modules with res nil
2012-10-29 04:41:30 -05:00
f1423bf0b4
If a message is clearly a warning, then use print_warning
2012-10-24 00:44:53 -05:00
910644400d
References EDB cleanup
...
All other types of references use String arguments, but approximately half
of the EDB references use Fixnums. Fix this by using Strings here too.
2012-10-23 21:02:09 +02:00
04a6021631
Privileged cleanup: auxiliary modules can't
2012-10-22 20:36:49 +02:00
39e81d3e53
Arch/Platform cleanup: aux modules need neither
2012-10-22 20:28:02 +02:00
ae690f5fd3
Remove that extra "," that breaks Ruby 1.8
2012-10-20 02:11:49 -05:00
7b1c35624e
Merge branch 'mssql_ntlm_stealer' of https://github.com/nullbind/metasploit-framework into nullbind-mssql_ntlm_stealer
2012-10-17 22:50:54 +02:00
1f55e02535
minor cleanup
2012-10-17 22:21:28 +02:00
12e2ff9bb5
proposed cleanup
2012-10-17 19:03:28 +02:00
c52b834f50
updated name and description
2012-10-16 14:37:02 -05:00
d8c2aa9796
added mssql ntlm stealer for sqli
2012-10-16 14:26:10 -05:00
fafa6e49ce
address comments from jvazquez
2012-10-16 12:10:37 -05:00
553ce82e79
added mssql ntlm stealer
2012-10-15 13:29:51 -05:00
54ed60e24e
Forgot to remove the second require
2012-09-24 18:50:53 -05:00
6bd450e114
Make Ruby 1.8 happy
2012-09-24 18:49:41 -05:00
f75ff8987c
updated all my authour refs to use an alias
2012-09-19 21:46:14 -05:00
c83b49ad58
Unix linefeeds, not windows
...
That's what I get for just committing willy-nilly with a fresh install
of Gvim for Windows.
Also, this is an experiment to see if linefeeds are being respected in
this editor Window. I doubt it will be, given GitHub's resistence to
50/72 as a sensible default.
2012-09-16 18:10:35 -05:00
2fc34e0073
Auth successful, not successfully
...
Just fixing up some adverb versus adjective grammar.
2012-09-16 17:51:00 -05:00
63d2d60c68
delete don't needed line
2012-09-15 23:56:38 +02:00
ff2e9fc157
add changes proposed by sinn3r
2012-09-15 23:55:55 +02:00
70ff7621d6
added module for CVE-2012-2983
2012-09-15 15:11:12 +02:00
6771466cb7
Added module for CVE-2011-2750
2012-09-13 17:24:16 +02:00
32e2232de3
Disambiguating hkm from hdm
...
Having an author name of "hkm" really looks like a typo for "hdm," but
it's not.
2012-09-11 11:13:20 -05:00
aaf7fcd5e9
Closing bracket doh
2012-09-07 08:57:27 -05:00
53e4818c2e
Humble-desser, not humble-dresser
2012-09-07 08:49:27 -05:00
ff97b1da00
Whitespace EOL
2012-09-05 14:04:20 -05:00
b8132cae5c
Add the redistribution comment splat
2012-09-04 15:58:43 -05:00
15f1dd8525
Moving greetz to Author fields
2012-09-04 15:58:43 -05:00
6e7cbe793c
Spamguard e-mail addresses, make auth name consistent
2012-09-04 15:58:43 -05:00
f80abaf0d1
Dropping trailing whitespace
2012-09-04 15:58:42 -05:00
114ade6bea
applied todb requested fixes, and added sql 2k support
2012-09-04 15:58:42 -05:00
6cd6f9d5d1
minor comment updates
2012-09-04 15:58:42 -05:00
7e168f2e5c
Modified module to write query results to a file with report/loot options
2012-09-04 15:58:42 -05:00
522fb401e9
Find data on a SQL Server, sample it, and write it to a CSV file.
2012-09-04 15:58:42 -05:00
b4b860f356
Correct MC's name
2012-08-08 14:16:02 -05:00
b46fb260a6
Comply with msftidy
...
*Knock, knock!* Who's there? Me, the msftidy nazi!
2012-08-07 15:59:01 -05:00
f26053c2c3
Add vendor's name in there for easier searching
2012-08-07 12:16:52 -05:00
614ae02a26
Add CVE-2012-2626 Scrutinizer add-user aux mod
2012-08-07 12:13:25 -05:00
d5b165abbb
Msftidy.rb cleanup on recent modules.
...
Notably, DisclosureDate is required for other module parsers, so let's
not ignore those, even if you have to guess at the disclosure or call
the module's publish date the disclosure date.
2012-08-04 12:18:00 -05:00
76fee330ee
Squashed commit of the following:
...
commit dadb717f5e17851a85183847f3fdb01e45e6caaa
Author: James Lee <egypt@metasploit.com>
Date: Fri Aug 3 18:48:53 2012 -0600
Rescue SMB errors
Prevents backtraces and gives the user some idea of what happened.
Specifically useful for STATUS_ACCESS_DENIED and STATUS_LOGON_FAILURE.
commit aba203ead75eec22606f52d7eb67f1581c44c4df
Author: Rob Fuller <jd.mubix@gmail.com>
Date: Fri Jul 20 03:24:26 2012 -0400
add SMB list directory module
[Closes #628 ]
2012-08-03 19:00:11 -06:00
981ba60fee
Fix exception handlings
...
Two things:
1. Make msftidy happy
2. Exception handling shouldn't be used to shut errors up.
2012-07-18 12:05:14 -05:00
464df4ed1d
Oraenum - added error handling
...
The oraenum module has errror handling to catch instances where the user used to run the checks doesn't have the appropriate rights, however in one place (The default password check) the error handling code isn't included. This patch just adds the same check for that code.
2012-07-18 09:22:22 +01:00
78edf15a86
Improve module
2012-07-17 08:39:56 -05:00
dde2254f29
rename file
2012-07-17 08:36:02 -05:00
d5711efd26
Merge branch 'master' of https://github.com/j0hnf/metasploit-framework into j0hnf-master
2012-07-17 08:35:49 -05:00
e5dd6fc672
Update milw0rm references.
...
milw0rm.com is long gone, so all milw0rm references are just
a bunch of broken links. Change to exploit-db instead.
2012-06-28 14:27:12 -05:00
97974d9241
Shorten title for display
2012-06-27 10:19:46 -05:00
7d20f14525
exec SQL from file
2012-06-26 12:40:34 +01:00
83260c9c89
module to exe SQL queries from a file
2012-06-26 12:15:30 +01:00
f93658b37a
Minor name change
2012-06-25 15:51:02 -05:00
637edc21ce
Add CVE-2010-2731
2012-06-25 15:48:36 -05:00
302ab963d1
Adding ref for intersil module
2012-06-20 15:05:56 -05:00
7c417fa977
Add a select command for the various SQL modules
2012-06-18 23:59:57 -06:00
e72303a922
Add Intersil HTTP Basic auth pass reset (originally #453 )
...
The modified version of pull request #453 . This addresses a couple
of things including:
* Change the description to better explain what the vulnerability is.
The advisory focuses the problem as an auth bypass, not DoS,
although it can end up dosing the server.
* The title and filename are changed as a result of matching that
advisory's description.
* Use 'TARGETURI' option instead of 'URI'.
* The reset attempt needs to check if the directory actually has
401 in place, otherwise this may result a false-positive.
* The last HTTP request needs to check a possible nil return value.
* More verbose outputs.
2012-06-16 21:14:57 -05:00
72cdd67cd0
Remove function cleanup()
...
There is no point of having this function, because there's nothing
in it.
2012-06-06 00:54:04 -05:00
3f0431cf51
Massive whitespace destruction
...
Remove whitespace found at the end of the line
2012-06-06 00:36:17 -05:00
c30af98b53
Massive whitespace destruction
...
Remove all the lines that have nothing but whitespace
2012-06-06 00:22:36 -05:00
0fcc53b0a2
Handle nil for get_once
2012-06-04 15:31:10 -05:00
01803c4a33
Fix possible nil res. Bug #6939 . Part 1.
2012-06-04 13:11:47 -05:00
3752c10ccf
Adding FireFart's RPORT(80) cleanup
...
This was tested by creating a resource script to load every changed
module and displaying the options, like so:
````
use auxiliary/admin/2wire/xslt_password_reset
show options
use auxiliary/admin/http/contentkeeper_fileaccess
show options
````
...etc. This was run in both the master branch and FireFart's branch
while spooling out the results of msfconsole, then diffing those
results. All modules loaded successfully, and there were no changes to
the option sets, so it looks like a successful fix.
Thanks FireFart!
Squashed commit of the following:
commit 7c1eea53fe3743f59402e445cf34fab84cf5a4b7
Author: Christian Mehlmauer <FireFart@gmail.com>
Date: Fri May 25 22:09:42 2012 +0200
Cleanup Opt::RPORT(80) since it is already registered by Msf::Exploit::Remote::HttpClient
2012-06-02 09:53:19 -05:00
86ba759c07
Oops, I left one more anonymous out.
2012-05-26 15:30:20 -05:00
c606896122
Multiple fixes and improvements:
...
* Make session ID configurable based on feature #6894's suggestion.
* Fix a potential bug when res is nil.
* Use print_error() to make the error message more readable.
2012-05-24 02:16:29 -05:00
22601180f3
Save the pilfered file as loot
2012-05-23 18:07:13 -06:00
336a00bc54
Fixing CVE reference
2012-05-16 14:34:04 -05:00
82885cc6e5
Fixing author tags
...
Ensuring a space between name and email.
2012-05-15 15:45:07 -05:00
bc6ec537f9
Fix a ruby 1.8 compat error
...
Can't have commas at the end of argument lists.
2012-05-15 11:53:49 -06:00
8b06835109
Make changes to proper API usage, whitespace, and extra characters.
2012-05-15 01:26:42 -05:00
a8b534ddec
Cisco Secure ACS Module - Updated error handling
2012-05-14 20:03:26 -04:00
2e49e56126
Made suggested changes
2012-05-14 19:50:34 -04:00
6b6dc60b25
Cisco Secure ACS Auth Bypass Module
2012-05-13 16:16:18 -04:00
aa3930fcb9
Typo on fixed tftp module
2012-05-10 21:42:33 -05:00
36c805c5ff
Move the context setting to the module
...
Apparently you can't hit the framework object before running the module
any more. Bummer.
[Fixes #6843 ]
2012-05-10 21:21:32 -05:00
5151a4c530
Cosmetic
2012-05-03 00:33:09 -05:00
99d7b2601c
Cosmetic
2012-05-03 00:31:50 -05:00
91763dd063
Fix 1.8 compatibility
2012-04-25 15:54:42 -05:00
b0a76a1aa1
Add wake-on-lan module
2012-04-21 03:29:49 -05:00
dfe2bbc958
Use rport for modicon_password recovery, not 21.
2012-04-07 13:03:43 -05:00
461352f24f
Don't need to require net/ftp anymore
...
Nothing actually used it anyway.
2012-04-06 10:35:28 -05:00
9c8e6ac9da
Ruby 1.8 compat for the SCADA modules.
...
But really, you should be using Ruby 1.9 by now.
2012-04-05 17:05:03 -05:00
14d9953634
Adding DigitalBond SCADA modules
2012-04-05 12:35:48 -05:00
0df4a8a63d
Rogue period, DELETED.
2012-03-28 14:29:31 -06:00
2c3e296b36
remove trailing comma, thanks troulouliou
2012-03-28 14:29:31 -06:00
47493af103
Merge pull request #259 from todb-r7/edb-2
...
Convert Exploit-DB references to first-tier "EDB-12345" references
2012-03-23 12:09:07 -07:00
10733f6a1c
Update description
2012-03-23 13:05:40 -05:00
jvazquez-r7
m-1-k-3
sinn3r
Brandon McCann
Royce Davis
lmercer
Tod Beardsley
Christian Mehlmauer
Royce Davis
Alexandre Maloteaux
Chris John Riley
Chris John Riley
HD Moore
Michael Schierl
nullbind
David Maloney
Rob Fuller
Rory McCune
j0hn__f
James Lee
pyoor
Tod Beardsley
Jonathan Cran