Commit Graph

663 Commits (989a0bf88fe712d49d3a19bc4ec8fdb37990cb6b)

Author SHA1 Message Date
James Lee 36a06e7576 initial commit of php findsock. This patch makes all http connections global and removes the "close if (!pipelining)" checks, so beware of bugs.
git-svn-id: file:///home/svn/framework3/trunk@5678 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 04:41:51 +00:00
HD Moore ddc47955f2 Simplified module loader, update to the platform module to be more compat with ruby 1.9
git-svn-id: file:///home/svn/framework3/trunk@5677 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 04:15:10 +00:00
HD Moore fba4fb2889 Fix deprecated while/case syntax
git-svn-id: file:///home/svn/framework3/trunk@5676 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-23 15:41:13 +00:00
HD Moore b001e4684d Import first version of WMAP from ET LoWNOISE
git-svn-id: file:///home/svn/framework3/trunk@5675 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-22 22:32:20 +00:00
Ramon de C Valle 58cef5775e Added ARCH_POWER constant and fixed AIX payload modules
git-svn-id: file:///home/svn/framework3/trunk@5663 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-17 01:42:51 +00:00
Ramon de C Valle 117bae1e3e Added AIX POWER/PowerPC payload modules
git-svn-id: file:///home/svn/framework3/trunk@5654 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-10 20:13:36 +00:00
HD Moore 0f25d98fb2 Fixes a typo with IPv4->IPv6 address translation
git-svn-id: file:///home/svn/framework3/trunk@5652 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-05 16:23:34 +00:00
James Lee 0c2f8537a1 re-enable randomization of basic blocks in php shells
git-svn-id: file:///home/svn/framework3/trunk@5647 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-01 04:43:07 +00:00
HD Moore ecf211a0d8 Pass the correct payload space value when specified via target or override
git-svn-id: file:///home/svn/framework3/trunk@5645 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-26 22:57:06 +00:00
HD Moore 1fa95d6050 This patch adds support for IPv6 scope_ids to AddressRange parameters. Ranges consisting of a single address are not expanded
git-svn-id: file:///home/svn/framework3/trunk@5640 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-23 07:05:38 +00:00
HD Moore fcaa218548 Fix IPv4 payloads, dont commit past midnight anymore.
git-svn-id: file:///home/svn/framework3/trunk@5638 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-22 22:06:14 +00:00
HD Moore d53dd66701 Adds initial support for IPv6, including two stager. Tested Meterpreter over IPv6 stages on XP and Vista. Using this is still tricky, I will add a wiki page tomorrow to explain the ScopeID stuff for link-local testing. This commit also includes the raw (oversized) assembler for the stagers as well as the entire old metasploit assembly set (useful for development).
git-svn-id: file:///home/svn/framework3/trunk@5635 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-22 06:34:57 +00:00
HD Moore 3cf81f257e Ensure that the Content-Type is set to text/html by default.
git-svn-id: file:///home/svn/framework3/trunk@5615 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-08 02:37:54 +00:00
James Lee f5fe1e0305 fix escaping bug in js_base64
git-svn-id: file:///home/svn/framework3/trunk@5611 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-30 02:56:21 +00:00
HD Moore 905366758a Add the US-CERT-VU reference type
git-svn-id: file:///home/svn/framework3/trunk@5578 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 20:56:36 +00:00
HD Moore f52f4d7b62 Add |)ruid's infos to author, fix an issue with auxiliary options checking.
git-svn-id: file:///home/svn/framework3/trunk@5577 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-23 20:14:47 +00:00
HD Moore ca7c8b0f68 Adds the Exploit::Remote::Ip mixin
git-svn-id: file:///home/svn/framework3/trunk@5566 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 19:12:05 +00:00
James Lee 2d344e64df browser_autopwn now works with mozilla_compareto, mozilla_navigatorjava, and firefox_queryinterface; increased reliability of OS and browser detection
git-svn-id: file:///home/svn/framework3/trunk@5563 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 07:28:05 +00:00
Patrick Webster 301b1514f3 Added pop2 mixin, aux module, typos.
git-svn-id: file:///home/svn/framework3/trunk@5550 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-08 14:21:48 +00:00
James Lee 8800372e46 initial commit of browser_autopwn;
revamp php payloads;
socks5 for IPv6 (untested)



git-svn-id: file:///home/svn/framework3/trunk@5546 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-01 01:44:56 +00:00
Matt Miller b2b7a05abb comment out stage encoding until I can troubleshoot it some more
git-svn-id: file:///home/svn/framework3/trunk@5522 4d416f70-5f16-0410-b530-b9f4589650da
2008-06-05 07:03:10 +00:00
Matt Miller 30ae3af6fb experimental: stages encoded by default, set DisableStageEncoding 1 to disable
git-svn-id: file:///home/svn/framework3/trunk@5511 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-26 07:59:03 +00:00
Matt Miller d94bfaf373 better support for nx with dllinject payloads/meterp
git-svn-id: file:///home/svn/framework3/trunk@5510 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-26 06:34:12 +00:00
James Lee 2db9dd6ab2 Reversing over greedy commit. =(
git-svn-id: file:///home/svn/framework3/trunk@5506 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 06:17:41 +00:00
James Lee 93199c5610 "set foo" prints the value of foo if it exists
git-svn-id: file:///home/svn/framework3/trunk@5505 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 05:29:32 +00:00
HD Moore 5ec3509103 egypt found a bug, regenerate payload was overwriting datastore entries and not setting them back
git-svn-id: file:///home/svn/framework3/trunk@5504 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-16 21:20:43 +00:00
HD Moore c5a910525c Adding the BPS reference type, URLs are not public yet, will be soon.
git-svn-id: file:///home/svn/framework3/trunk@5481 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-21 05:21:28 +00:00
HD Moore 125d114526 Properly handle SMB::pipe_(read|write)_(min|max)
git-svn-id: file:///home/svn/framework3/trunk@5466 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-04 20:54:39 +00:00
HD Moore 03276c9cc0 Add a find_layers method
git-svn-id: file:///home/svn/framework3/trunk@5456 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-22 19:55:23 +00:00
HD Moore 1ea29ba8f0 Fixes #218. Updates the http password capture module. Removes a bogus makefile from the tree
git-svn-id: file:///home/svn/framework3/trunk@5452 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-22 06:34:52 +00:00
HD Moore 06aa636126 Payload patch from toto
git-svn-id: file:///home/svn/framework3/trunk@5450 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-18 16:01:15 +00:00
HD Moore c3a4cda127 Merged all of the scruby patches, fixed Dot11 support with regards to RadioTap headers.
git-svn-id: file:///home/svn/framework3/trunk@5446 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-17 04:46:42 +00:00
HD Moore 4ee248bf3e Pass the IP address in the IPC$ tree connect (required by novell)
git-svn-id: file:///home/svn/framework3/trunk@5441 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-13 15:46:33 +00:00
James Lee dfa0f6c0c4 More reliable reverse shell
git-svn-id: file:///home/svn/framework3/trunk@5429 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-04 07:34:26 +00:00
HD Moore 509fc09382 Lots of updates related to <secret project X>.
git-svn-id: file:///home/svn/framework3/trunk@5424 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-02 04:46:13 +00:00
Ramon de C Valle a3ccb61b91 Pulled out image_source
git-svn-id: file:///home/svn/framework3/trunk@5401 4d416f70-5f16-0410-b530-b9f4589650da
2008-02-09 04:35:21 +00:00
HD Moore 62303eefbf Merged revisions 5378-5379 via svnmerge from
svn+ssh://metasploit.com/home/svn/framework3/branches/framework-3.1

........
  r5379 | hdm | 2008-01-27 21:13:27 -0600 (Sun, 27 Jan 2008) | 3 lines
  
  Remove $stderr prints
........


git-svn-id: file:///home/svn/framework3/trunk@5380 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-28 03:13:55 +00:00
HD Moore 6677beb174 Merged revisions 5366-5377 via svnmerge from
svn+ssh://metasploit.com/home/svn/framework3/branches/framework-3.1

........
  r5366 | hdm | 2008-01-26 20:30:53 -0600 (Sat, 26 Jan 2008) | 2 lines
  
  Update version information
........
  r5367 | hdm | 2008-01-26 21:10:57 -0600 (Sat, 26 Jan 2008) | 3 lines
  
  Updated for version 3.1
........
  r5369 | hdm | 2008-01-26 21:13:31 -0600 (Sat, 26 Jan 2008) | 3 lines
  
  Wipe the private directories from the branch. 
........
  r5371 | hdm | 2008-01-27 17:24:24 -0600 (Sun, 27 Jan 2008) | 5 lines
  
  Timeout options added for dcerpc connect and read times. Addition of novell netware as a supported target platform. Inclusion of the serverprotect exploit (still works on the latest version). Addition of the first remote netware kernel exploit that leads to a shell, addition of netware stager and shell, and first draft of the release notes for 3.1
........
  r5372 | hdm | 2008-01-27 17:30:08 -0600 (Sun, 27 Jan 2008) | 3 lines
  
  Formatting, indentation, fixed the static IP embedded in the request
........
  r5373 | hdm | 2008-01-27 20:02:48 -0600 (Sun, 27 Jan 2008) | 3 lines
  
  Correctly trap exploit errors in a way that works with all of the UIs
........
  r5374 | hdm | 2008-01-27 20:23:25 -0600 (Sun, 27 Jan 2008) | 3 lines
  
  More last-minute bug fixes
........
  r5375 | hdm | 2008-01-27 20:37:43 -0600 (Sun, 27 Jan 2008) | 3 lines
  
  Force multi-bind off in netware, correct label display in gtk gui labels
........
  r5376 | hdm | 2008-01-27 20:50:03 -0600 (Sun, 27 Jan 2008) | 3 lines
  
  More exception handling fun
........


git-svn-id: file:///home/svn/framework3/trunk@5378 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-28 03:06:31 +00:00
HD Moore 96e543de06 Bumped to 3.2-dev
git-svn-id: file:///home/svn/framework3/trunk@5368 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-27 03:11:33 +00:00
HD Moore 9d2abb9287 The capture mixin is now working again (with scruby)
git-svn-id: file:///home/svn/framework3/trunk@5352 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-25 05:59:06 +00:00
HD Moore ee4fbac2bf Log error message by IP address
git-svn-id: file:///home/svn/framework3/trunk@5348 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-25 04:53:15 +00:00
HD Moore 1e2ec68913 Handle lorcon on windows better
git-svn-id: file:///home/svn/framework3/trunk@5341 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-24 05:49:48 +00:00
HD Moore a9ca5d1ace More GUI work. Changed the location where module exceptions are reported
git-svn-id: file:///home/svn/framework3/trunk@5335 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-24 05:29:35 +00:00
HD Moore 289d280291 More UI updates
git-svn-id: file:///home/svn/framework3/trunk@5293 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-20 22:40:11 +00:00
HD Moore eeed1c8a87 Added consoles to the GUI
git-svn-id: file:///home/svn/framework3/trunk@5283 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-07 07:00:42 +00:00
HD Moore 2b41f4fe05 Dont throw an exception when a module is marked as ambiguous
git-svn-id: file:///home/svn/framework3/trunk@5274 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-06 20:25:09 +00:00
HD Moore a396f655d5 Fixes to the sqlite3 database driver, the db_nmap command, and msfgui
git-svn-id: file:///home/svn/framework3/trunk@5242 4d416f70-5f16-0410-b530-b9f4589650da
2007-12-31 04:05:51 +00:00
HD Moore ab2654f3a0 Defaults for airpcap
git-svn-id: file:///home/svn/framework3/trunk@5229 4d416f70-5f16-0410-b530-b9f4589650da
2007-12-29 23:15:30 +00:00
HD Moore 94c81d866c Fix is a cpu loop bug in batch-mode scanner modules. This was apparent when using a RHOSTS set of 256 hosts but a THREADS count of > 1 with the UDP sweep module
git-svn-id: file:///home/svn/framework3/trunk@5227 4d416f70-5f16-0410-b530-b9f4589650da
2007-12-29 17:16:22 +00:00
Matt Miller 55ddf3865a encoder changes for context key support from druid
git-svn-id: file:///home/svn/framework3/trunk@5177 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-23 20:07:55 +00:00
Matt Miller aad6a6868b added EncoderDontFallThrough option, fixes #155
git-svn-id: file:///home/svn/framework3/trunk@5132 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-02 03:36:45 +00:00
Matt Miller dc23f5b8dc default to first architecture in architecture array for egghunter, fixes #148
git-svn-id: file:///home/svn/framework3/trunk@5131 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-02 03:24:21 +00:00
HD Moore 3b4adaff9c See #17
git-svn-id: file:///home/svn/framework3/trunk@5128 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-30 17:54:15 +00:00
HD Moore ceb69bb541 Overhaul of the ruby-lorcon module to match pylorcon.
git-svn-id: file:///home/svn/framework3/trunk@5124 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-28 06:51:32 +00:00
Patrick Webster 09485b52e7 First commit. Added Netcat NT module.
git-svn-id: file:///home/svn/framework3/trunk@5123 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-26 13:44:25 +00:00
HD Moore 7498562eb5 Add proxy support to HTTP mixin using modules. Fix socks proxy support.
git-svn-id: file:///home/svn/framework3/trunk@5113 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 04:44:44 +00:00
HD Moore 59120eafb2 Adds rand_text_numeric wrapper to the exploit class
git-svn-id: file:///home/svn/framework3/trunk@5086 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-05 13:40:41 +00:00
Matt Miller 23da91742e the tag used for find tag must be sent BEFORE the intermediate stage
git-svn-id: file:///home/svn/framework3/trunk@5084 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-31 17:39:54 +00:00
Matt Miller 1ae7bef139 removed debug puts
git-svn-id: file:///home/svn/framework3/trunk@5082 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-31 04:03:26 +00:00
Matt Miller f61cde59c4 initial support for context encoding
git-svn-id: file:///home/svn/framework3/trunk@5081 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-31 04:01:30 +00:00
Matt Miller bf935736b6 fix flushing to account for suffix
git-svn-id: file:///home/svn/framework3/trunk@5078 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-13 01:32:32 +00:00
Matt Miller 7b65a56d65 initial support for metasm integration, ported sample payload to use it
git-svn-id: file:///home/svn/framework3/trunk@5076 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-11 00:37:50 +00:00
Ramon de C Valle f60810d00c Added more advanced payload options and advanced payload options support for Solaris.
git-svn-id: file:///home/svn/framework3/trunk@5060 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-25 03:24:51 +00:00
HD Moore 4c650f865b It helps when the new hash is actually used...
git-svn-id: file:///home/svn/framework3/trunk@5055 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-17 19:01:04 +00:00
HD Moore 84370e82aa Force the port parameter to be an integer, since some db drivers expect this.
git-svn-id: file:///home/svn/framework3/trunk@5054 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-17 18:42:26 +00:00
HD Moore b21fb10f75 Fixes #120. Applies a one-line patch from egypt[at]nmt.edu
git-svn-id: file:///home/svn/framework3/trunk@5053 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-16 13:52:11 +00:00
HD Moore 1f2791494b General cleanups, bug fixes, removal of debugging statements.
git-svn-id: file:///home/svn/framework3/trunk@5051 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-16 02:17:32 +00:00
Ramon de C Valle f3dd74cfc9 Added advanced payload options for *BSD, improved solaris targets of lsa_transnames_heap.rb, some code cleanups.
git-svn-id: file:///home/svn/framework3/trunk@5044 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-11 03:19:28 +00:00
Ramon de C Valle 99f806b0e9 Added OSX payloads advanced options and improved Samba exploit module.
git-svn-id: file:///home/svn/framework3/trunk@5033 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-06 01:22:54 +00:00
HD Moore e4e674003d Correct the super() call in http's regenerate_payload()
git-svn-id: file:///home/svn/framework3/trunk@5025 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 13:40:45 +00:00
HD Moore 0c6d0e5941 This code IS in a mixin now, remove the old comment :)
git-svn-id: file:///home/svn/framework3/trunk@5024 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:39:58 +00:00
HD Moore 30bf0667d8 cosmetic
git-svn-id: file:///home/svn/framework3/trunk@5023 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:39:18 +00:00
HD Moore ddadf74a85 Fix a typo that could break regenerate_payload
git-svn-id: file:///home/svn/framework3/trunk@5022 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:38:56 +00:00
HD Moore a21ec0a73c Updating the php_include_url function to figure out the server address a little bit better.
git-svn-id: file:///home/svn/framework3/trunk@5019 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:26:28 +00:00
HD Moore d0b15d3d72 Lots of SMB fun, all preparation for Black Hat talk :-) More to come...
git-svn-id: file:///home/svn/framework3/trunk@5015 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:20:50 +00:00
Matt Miller 525319fbd1 default to no badchars
git-svn-id: file:///home/svn/framework3/trunk@5006 4d416f70-5f16-0410-b530-b9f4589650da
2007-06-29 00:29:29 +00:00
Matt Miller d33675d870 framework now properly handles using singles without handlers as both stages and singles, fixes #115
git-svn-id: file:///home/svn/framework3/trunk@4994 4d416f70-5f16-0410-b530-b9f4589650da
2007-06-16 05:04:03 +00:00
HD Moore c45e9b957a This adds suppor for the LSA open policy call for dcerpc exploits
git-svn-id: file:///home/svn/framework3/trunk@4985 4d416f70-5f16-0410-b530-b9f4589650da
2007-06-09 02:26:35 +00:00
HD Moore 40511cffb7 This adds a Linux-payload specific mixin which allows for new advanced options, such as setuid/chroot prepends.
git-svn-id: file:///home/svn/framework3/trunk@4984 4d416f70-5f16-0410-b530-b9f4589650da
2007-06-09 02:25:31 +00:00
HD Moore fadfd17b1e Removed the duplicate author entry
git-svn-id: file:///home/svn/framework3/trunk@4952 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-21 20:46:22 +00:00
pusscat 14332dcb0e Move my email from gmail to metasploit
git-svn-id: file:///home/svn/framework3/trunk@4911 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-14 21:00:46 +00:00
HD Moore 88d3193020 Removed the old pcap mixin, replaced with Capture, updated the test_pcap module
git-svn-id: file:///home/svn/framework3/trunk@4860 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-04 02:56:35 +00:00
HD Moore 4b42797768 Adds timed module support, fixes #97
git-svn-id: file:///home/svn/framework3/trunk@4857 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-03 20:23:27 +00:00
HD Moore 6ac3d5a5cc Prints the banner during connect() now
git-svn-id: file:///home/svn/framework3/trunk@4837 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-02 03:40:46 +00:00
HD Moore 83a8ece022 This patch adds IPv6 support to most feartures of the framework. The major missing component is IPv6-enabled payloads.
git-svn-id: file:///home/svn/framework3/trunk@4814 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-29 23:43:39 +00:00
HD Moore c79d200729 Typos
git-svn-id: file:///home/svn/framework3/trunk@4784 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-24 13:47:46 +00:00
HD Moore 1cfa033ad9 Woops, Raw and String should not mangle their params
git-svn-id: file:///home/svn/framework3/trunk@4778 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-24 06:37:23 +00:00
HD Moore 4d1c274387 Merging all of the auxilliary/scanner related features
git-svn-id: file:///home/svn/framework3/trunk@4749 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-24 06:27:39 +00:00
Matt Miller 02d264cf30 reload plugins from disk if they have already been loaded
git-svn-id: file:///home/svn/framework3/trunk@4733 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-22 07:55:04 +00:00
Matt Miller 0801d3989f fix for handler issue in udp exploits
git-svn-id: file:///home/svn/framework3/trunk@4700 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-16 16:20:59 +00:00
HD Moore 1bb398de59 Adding the Microsoft DNS service exploit, targetting Windows 2000
git-svn-id: file:///home/svn/framework3/trunk@4677 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-14 07:16:33 +00:00
HD Moore fdd9f96145 Adds endpoint mapper and management interface support to the DCERPC exploit mixin
git-svn-id: file:///home/svn/framework3/trunk@4676 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-14 05:22:22 +00:00
HD Moore 4d3a91f63b Add support for hexadecimal values for OptInt options
git-svn-id: file:///home/svn/framework3/trunk@4652 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-05 05:00:55 +00:00
Matt Miller 71a7355e20 added the ability to track jobs, and made rexploit stop the existing job
git-svn-id: file:///home/svn/framework3/trunk@4644 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-04 02:49:08 +00:00
Matt Miller a319b8e582 got rid of duplicated code in browser exploits, fixes #71
git-svn-id: file:///home/svn/framework3/trunk@4642 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-04 02:04:37 +00:00
Matt Miller b74311c71d initial integration of alex's heaplib, and a port of the keyframe exploit
git-svn-id: file:///home/svn/framework3/trunk@4635 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-03 07:35:54 +00:00
HD Moore dd2e9d87fb This adds SMTPDeliver exploit mixin, the SMTP version of the ANI exploit, accessor to Ole::Storage
git-svn-id: file:///home/svn/framework3/trunk@4608 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-02 05:27:19 +00:00
Matt Miller f9d8c4e820 modifications to support using an explicit target to regen payloads
git-svn-id: file:///home/svn/framework3/trunk@4602 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-01 21:21:10 +00:00
Matt Miller f0fcedf728 raw encoder type wasn't being enforced
git-svn-id: file:///home/svn/framework3/trunk@4599 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-01 21:00:51 +00:00
HD Moore 4b8e8dc0e8 Bumped the version of trunk to 3.1-dev
git-svn-id: file:///home/svn/framework3/trunk@4575 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-26 19:55:26 +00:00
HD Moore 46c9c510dd Minor cleanups, less matching, very minor speedup
git-svn-id: file:///home/svn/framework3/trunk@4567 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-25 07:38:11 +00:00
HD Moore 35680b10ca Update the release version
git-svn-id: file:///home/svn/framework3/trunk@4566 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-25 07:35:15 +00:00
HD Moore 9c3bfaeee4 Imported the OLE modules from ruby-msg (GPLv2)
git-svn-id: file:///home/svn/framework3/trunk@4541 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-20 16:49:34 +00:00
Matt Miller 449ca3c826 check to ensure that the step is valid as it will be normalized
git-svn-id: file:///home/svn/framework3/trunk@4525 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-12 00:35:02 +00:00
HD Moore b5e0a70528 Cleanup debugging statement
git-svn-id: file:///home/svn/framework3/trunk@4517 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-11 02:04:35 +00:00
HD Moore d3ff922169 Disable BruteStep for now, its still broken
git-svn-id: file:///home/svn/framework3/trunk@4516 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-11 01:43:51 +00:00
HD Moore 547ec3c6c6 This patch adds header folding, fixed hex-random and u-random encoding, fake uri end, fake uri parameters. This fixes #16, the remaining two options (chunked and pipelining), will be added in a future version.
git-svn-id: file:///home/svn/framework3/trunk@4513 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-10 05:58:14 +00:00
HD Moore 41809d5f0a Rescue Timeout and Runtime errors from the HTTP client. This fixes #42.
git-svn-id: file:///home/svn/framework3/trunk@4512 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-10 03:51:58 +00:00
Matt Miller c61e0e8931 change the behavior of nil non-required options, fixes #49
git-svn-id: file:///home/svn/framework3/trunk@4509 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-09 06:12:28 +00:00
HD Moore e6f221ad80 Major updates to the HTTP api, re-addition of HTTP evasion, see #16
git-svn-id: file:///home/svn/framework3/trunk@4506 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-08 14:08:41 +00:00
HD Moore 30a93c33cb The rand_text_* methods now take an optional badchar list and default it to the payload_badchars data
git-svn-id: file:///home/svn/framework3/trunk@4503 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-06 21:02:38 +00:00
Matt Miller cfd9cbb1f1 added code to disable random nops/text generation if DEBUG is set, fixes #43, but still need to update some exploits
git-svn-id: file:///home/svn/framework3/trunk@4497 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-01 08:09:22 +00:00
HD Moore 88cc653478 The HTTP api now catches SIGPIPEs and just returns a nil response
git-svn-id: file:///home/svn/framework3/trunk@4483 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-27 09:31:23 +00:00
HD Moore 7087457f9e A few more updates to the HTTP exploit mixin, still needs some work before it is completed
git-svn-id: file:///home/svn/framework3/trunk@4481 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-27 09:15:53 +00:00
HD Moore 6d4c234187 Fix a problem where a dcerpc exploit will only work once before the framework must be reloaded
git-svn-id: file:///home/svn/framework3/trunk@4476 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-26 17:38:01 +00:00
Matt Miller 36462709c6 fix typo
git-svn-id: file:///home/svn/framework3/trunk@4474 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-26 03:11:51 +00:00
Matt Miller b30551b59d moved code around that sets the via exploit/payload to the handler code, fixes #32
git-svn-id: file:///home/svn/framework3/trunk@4473 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-26 03:09:55 +00:00
Matt Miller c8bbefcab0 added some comments, and introduced the DatabaseEvent mixin
git-svn-id: file:///home/svn/framework3/trunk@4472 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-25 21:25:41 +00:00
Matt Miller 117d004e01 fixed unit tests in core
git-svn-id: file:///home/svn/framework3/trunk@4464 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-24 06:35:03 +00:00
Matt Miller 58708378d1 ensure that module counts are reflected accurately, and add option to specify a module path to msfconsole, fixes #25
git-svn-id: file:///home/svn/framework3/trunk@4462 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-24 05:29:05 +00:00
Matt Miller 3a8b138e74 don't modify the module cache when a temporary module path is added, fixes #24. also added support for specifying permanent module paths in the global datastore with the MsfModulePaths variable
git-svn-id: file:///home/svn/framework3/trunk@4461 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-24 03:32:32 +00:00
Matt Miller 4d60b8f146 fixes #19, don't skip if overwrite is false
git-svn-id: file:///home/svn/framework3/trunk@4449 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-21 03:10:48 +00:00
Matt Miller fbd91e48d4 fixes #20, re-import default options when flushing all options
git-svn-id: file:///home/svn/framework3/trunk@4448 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-21 03:07:12 +00:00
Matt Miller d4a739f85a fixes #1
git-svn-id: file:///home/svn/framework3/trunk@4435 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 12:08:11 +00:00
HD Moore 904901d163 Change ARCH and PLATFORM to advanced options
git-svn-id: file:///home/svn/framework3/trunk@4433 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 07:38:31 +00:00
HD Moore 24f0608974 Update the smb/dcerpc mixins to use the newly named options
git-svn-id: file:///home/svn/framework3/trunk@4430 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 07:06:30 +00:00
HD Moore 1d1f55f9e9 Added CHOST/CPORT as advanced options. Split out uncommon SMB options as advanced
git-svn-id: file:///home/svn/framework3/trunk@4429 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 07:02:47 +00:00
HD Moore ddb22785ee The datastore is now case insensitive, but this may lead to some confusion... lets see :-)
git-svn-id: file:///home/svn/framework3/trunk@4398 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-16 05:39:38 +00:00
HD Moore 9826b57b11 Added capture mixin (going to replace pcap)
git-svn-id: file:///home/svn/framework3/trunk@4393 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-15 21:14:36 +00:00
HD Moore 52b0f8c2aa More code from alex
git-svn-id: file:///home/svn/framework3/trunk@4392 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-15 21:14:11 +00:00
Matt Miller 93da259db2 additions to the user guide, fix data store to not import globally defined values, added ability to flush datastores
git-svn-id: file:///home/svn/framework3/trunk@4387 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-15 08:02:47 +00:00
HD Moore a1c6dda462 Patches from solar to add symlink support to mod dirs and prevent caching of broken modules
git-svn-id: file:///home/svn/framework3/trunk@4384 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-15 05:32:48 +00:00
HD Moore 9d8fd125a6 Updated the ActiveRecord loader to work properly with new gems package
git-svn-id: file:///home/svn/framework3/trunk@4364 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 23:47:34 +00:00
HD Moore 8a797e6bcc Support for killing sessions from the UI and killing all running jobs with jobs -a
git-svn-id: file:///home/svn/framework3/trunk@4361 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 23:24:25 +00:00
HD Moore 4d205cdcd8 Consistency fixes for the print_* routines
git-svn-id: file:///home/svn/framework3/trunk@4358 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 19:40:33 +00:00
Matt Miller df10ee412d typos
git-svn-id: file:///home/svn/framework3/trunk@4349 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 03:16:08 +00:00
Matt Miller cbd0a8ca35 normalize general framework events to be like other events
git-svn-id: file:///home/svn/framework3/trunk@4307 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-02 03:45:37 +00:00
Matt Miller 279c0e3e52 defanged mode
git-svn-id: file:///home/svn/framework3/trunk@4303 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-30 04:48:35 +00:00
HD Moore 0012389ba0 Adds support for bind payloads in passive exploits
git-svn-id: file:///home/svn/framework3/trunk@4281 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-18 03:51:15 +00:00
Matt Miller d63d365af2 svnserve
git-svn-id: file:///home/svn/framework3/trunk@4265 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-05 06:38:24 +00:00
HD Moore 68274d6870 PHP tags are now added by the php_include handler and no longer a part of the payloads themselves
git-svn-id: file:///home/svn/framework3/trunk@4254 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-05 03:31:18 +00:00
Matt Miller 851f2ccb29 fix for connect_login
git-svn-id: file:///home/svn/framework3/trunk@4243 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-29 11:33:16 +00:00
HD Moore 2bc1d4be18 Updates to the client API
git-svn-id: file:///home/svn/framework3/trunk@4242 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 23:42:54 +00:00
HD Moore 43df6869b2 Compatible encoder list from Diaul
git-svn-id: file:///home/svn/framework3/trunk@4235 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 15:47:00 +00:00
Matt Miller e1565e2af4 fixed a few issues with the alpha2 implementation
git-svn-id: file:///home/svn/framework3/trunk@4230 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 05:19:31 +00:00
HD Moore 804df25240 Initial overhaul of the HTTP client api. This removes nearly all of the client evasion methods, but leaves the code in a great state to reimplement them with less issues.
git-svn-id: file:///home/svn/framework3/trunk@4222 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-19 07:11:55 +00:00
HD Moore 239fe1e8ae Removing the obsolete evasion levels API
git-svn-id: file:///home/svn/framework3/trunk@4221 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-19 04:32:07 +00:00
HD Moore ffc626675b Initial support for PHP payloads
git-svn-id: file:///home/svn/framework3/trunk@4215 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:57:51 +00:00
Matt Miller ddd40907d5 fix for service management issue with tcp server/http server mixins
git-svn-id: file:///home/svn/framework3/trunk@4213 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:12:04 +00:00
Matt Miller d16a368ea2 fix for tcp server/http server compat
git-svn-id: file:///home/svn/framework3/trunk@4210 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 06:49:04 +00:00