2283e0ffe4
Update executable template and API
...
git-svn-id: file:///home/svn/framework3/trunk@6682 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 17:42:17 +00:00
d9792d4beb
More ruby-1.9.1 compatibility fixes
...
git-svn-id: file:///home/svn/framework3/trunk@6679 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-20 14:26:22 +00:00
147a292825
Minor fixes for ruby 1.9.1 compatibility, still quite a bit more to go
...
git-svn-id: file:///home/svn/framework3/trunk@6612 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-02 23:36:58 +00:00
3bc44cc395
Consolidate exe generation into a single to_executable() function. Will reduce code in exploit modules dropping later today...
...
git-svn-id: file:///home/svn/framework3/trunk@6586 4d416f70-5f16-0410-b530-b9f4589650da
2009-05-27 13:37:41 +00:00
3ede3a1d41
Patch from int_80
...
git-svn-id: file:///home/svn/framework3/trunk@6496 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-23 17:49:04 +00:00
0b14dac349
Added rand_text_highascii method.
...
git-svn-id: file:///home/svn/framework3/trunk@6487 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-16 03:02:41 +00:00
6d9a70c6ad
fix codepage_map_cache for unit tests
...
git-svn-id: file:///home/svn/framework3/trunk@6324 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-09 05:18:33 +00:00
96c8f6127c
Replace += with << for Strings in a bunch of places.
...
git-svn-id: file:///home/svn/framework3/trunk@6318 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-08 07:55:47 +00:00
90f906d8c5
Add assignment to to_ruby and to_perl output, and allow changing of variable
...
name in to_java output
git-svn-id: file:///home/svn/framework3/trunk@6032 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-20 07:40:27 +00:00
5822ab75a7
Adds an exploit module (universal) for the new internet explorer xml bug. This module shows off the .NET memory techniques discovered by Alexander Sotirov and Mark Dowd. This code should bypass DEP, ASLR, and NX :-)
...
git-svn-id: file:///home/svn/framework3/trunk@6012 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-12 01:45:00 +00:00
b4a5cb455b
Short variable names to fit more into memory
...
git-svn-id: file:///home/svn/framework3/trunk@5896 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 23:51:36 +00:00
a70e982369
Adds utlities for creating VBA scripts from an EXE (or payload)
...
git-svn-id: file:///home/svn/framework3/trunk@5893 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 19:15:24 +00:00
b53695f7db
The psexec module now uses a service-compatible exe, shellcode is spawned in a subprocess and the service cleans up properly
...
git-svn-id: file:///home/svn/framework3/trunk@5829 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 23:06:37 +00:00
1df0612f61
Adds a case-sensitivity permutation routine
...
git-svn-id: file:///home/svn/framework3/trunk@5780 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 22:43:13 +00:00
f124597a56
Code cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:03:39 +00:00
af9a8eba9a
Swap back to 8192 until the exploits which use it are updated.
...
git-svn-id: file:///home/svn/framework3/trunk@5694 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-27 17:13:11 +00:00
14e8e75cb6
Another, smaller, win32 wrapper
...
git-svn-id: file:///home/svn/framework3/trunk@5693 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-27 05:02:36 +00:00
16d2825b83
Wrap the shellcode in SEH
...
git-svn-id: file:///home/svn/framework3/trunk@5692 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 23:35:47 +00:00
b94d10f53c
Switch the exe back to windows mode (vs console)
...
git-svn-id: file:///home/svn/framework3/trunk@5691 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 23:01:58 +00:00
4d47f49c1c
Randomize the timedatestamp
...
git-svn-id: file:///home/svn/framework3/trunk@5690 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 22:37:41 +00:00
6d5ac7eead
Switches the executable template to something a little nicer and adds exe output to msfencode
...
git-svn-id: file:///home/svn/framework3/trunk@5689 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-26 22:34:51 +00:00
9903e0bb1d
Add the ror/rol ror13hash code to msf3
...
git-svn-id: file:///home/svn/framework3/trunk@5627 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-13 01:44:37 +00:00
2db9dd6ab2
Reversing over greedy commit. =(
...
git-svn-id: file:///home/svn/framework3/trunk@5506 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 06:17:41 +00:00
93199c5610
"set foo" prints the value of foo if it exists
...
git-svn-id: file:///home/svn/framework3/trunk@5505 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-17 05:29:32 +00:00
af4ac919fe
add whitespace randomization to Rex::Text. Will update modules to use this instead of copy-paste
...
git-svn-id: file:///home/svn/framework3/trunk@5494 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-23 06:54:00 +00:00
84d921633b
Fun with saved passwords
...
git-svn-id: file:///home/svn/framework3/trunk@5490 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-22 18:48:21 +00:00
967a4c0fc6
Add x86 macho output support
...
git-svn-id: file:///home/svn/framework3/trunk@5205 4d416f70-5f16-0410-b530-b9f4589650da
2007-11-26 22:23:51 +00:00
ec94968d82
Add support for context-map files to msfpescan ( http://sourceforge.net/projects/smem-map/ )
...
git-svn-id: file:///home/svn/framework3/trunk@5154 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-18 16:55:23 +00:00
ffc5c0a57d
Use a class variable instead of a global to cache unicode code pages.
...
git-svn-id: file:///home/svn/framework3/trunk@5126 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-29 06:47:16 +00:00
1527d92154
Correct offset typos in the new iphone modules. Add EXE output support for OS X PPC, Linux x86, and make the OS X ARM smaller.
...
git-svn-id: file:///home/svn/framework3/trunk@5119 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-25 01:50:05 +00:00
cbec13de60
Add "X" mode for iPhone payloads
...
git-svn-id: file:///home/svn/framework3/trunk@5117 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 17:54:51 +00:00
7cc30f0fa8
Support pattern_create() lengths larger than the maximum set size
...
git-svn-id: file:///home/svn/framework3/trunk@5104 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-13 16:11:33 +00:00
00beaa7049
Fixes #136 . Detects a nil str parameter
...
git-svn-id: file:///home/svn/framework3/trunk@5088 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-09 22:10:38 +00:00
448714ab7b
Adds rand_text_numeric
...
git-svn-id: file:///home/svn/framework3/trunk@5085 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-05 13:39:45 +00:00
3f903a4e24
fix from spoonm
...
git-svn-id: file:///home/svn/framework3/trunk@5077 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-11 07:09:13 +00:00
5e23a54296
* uhwtfms_half - half-width encoding ( http://www.kb.cert.org/vuls/id/739224 )
...
git-svn-id: file:///home/svn/framework3/trunk@4910 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-14 20:49:35 +00:00
793048c879
This patch adds support for java byte array output (useful for sticking shellcode into java applets).
...
git-svn-id: file:///home/svn/framework3/trunk@4880 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-07 04:42:11 +00:00
2ec5cea6df
Adds to_hex_dump
...
git-svn-id: file:///home/svn/framework3/trunk@4662 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-11 22:23:32 +00:00
d31b36a4ca
Add windows suppor to pe_memdump. Fix a stupid typo in pattern_create
...
git-svn-id: file:///home/svn/framework3/trunk@4629 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-03 02:42:30 +00:00
9333609211
Adds a second argument to encode_base64
...
git-svn-id: file:///home/svn/framework3/trunk@4618 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-02 06:23:14 +00:00
547ec3c6c6
This patch adds header folding, fixed hex-random and u-random encoding, fake uri end, fake uri parameters. This fixes #16 , the remaining two options (chunked and pipelining), will be added in a future version.
...
git-svn-id: file:///home/svn/framework3/trunk@4513 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-10 05:58:14 +00:00
e6f221ad80
Major updates to the HTTP api, re-addition of HTTP evasion, see #16
...
git-svn-id: file:///home/svn/framework3/trunk@4506 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-08 14:08:41 +00:00
51d61c161d
Sessions can be detached and killed from the console
...
git-svn-id: file:///home/svn/framework3/trunk@4437 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 22:35:07 +00:00
9cda28221f
more gracefully handle iconv being missing
...
git-svn-id: file:///home/svn/framework3/trunk@4400 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-16 18:49:07 +00:00
020ec49767
Updates to the msfgui interface
...
git-svn-id: file:///home/svn/framework3/trunk@4355 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 09:22:06 +00:00
7d949bf802
Remove whitespace from base64
...
git-svn-id: file:///home/svn/framework3/trunk@4238 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:56:57 +00:00
bb79a9a6be
Use pack/unpack vs the Base64 library (seems to be broken on OS X)
...
git-svn-id: file:///home/svn/framework3/trunk@4237 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:55:35 +00:00
58f75149e0
Explicitly specify the ::Base64 class
...
git-svn-id: file:///home/svn/framework3/trunk@4236 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:52:33 +00:00
804df25240
Initial overhaul of the HTTP client api. This removes nearly all of the client evasion methods, but leaves the code in a great state to reimplement them with less issues.
...
git-svn-id: file:///home/svn/framework3/trunk@4222 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-19 07:11:55 +00:00
00b2cafec8
md5 was replaced with digest/md5 in 1.9 and 1.8.5
...
git-svn-id: file:///home/svn/framework3/trunk@4119 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-09 19:54:40 +00:00
fa91b4b5dd
Bug fixes to rescue statements (was catching relative exception class, not the main exception class)
...
git-svn-id: file:///home/svn/framework3/trunk@4086 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-29 17:41:19 +00:00
38b01597e8
Fix base64
...
git-svn-id: file:///home/svn/framework3/trunk@4057 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-26 02:42:04 +00:00
a724d42aa0
added mcafee mcsubmgr exploit, added functional avoid utf8 encoder
...
git-svn-id: file:///home/svn/framework3/trunk@3830 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-14 08:55:37 +00:00
377e606929
Added javascript and win32 pe output formats
...
git-svn-id: file:///home/svn/framework3/trunk@3787 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 04:05:20 +00:00
e55cff59e1
Fixed Rex::Arch.endian()
...
Added Rex::Text.to_unescape()
Added two mozilla exploits
Fixed firefox exploit to use new api
git-svn-id: file:///home/svn/framework3/trunk@3784 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-31 02:50:41 +00:00
5b319613ab
* add html encoding
...
git-svn-id: file:///home/svn/framework3/trunk@3755 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-24 19:25:59 +00:00
1af7c1dd23
Change to an assignment, ruby warnings about a void context (which is true)
...
git-svn-id: file:///home/svn/framework3/trunk@3746 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:30:43 +00:00
71fc4bd219
* random states
...
* random hostnames
git-svn-id: file:///home/svn/incoming/trunk@3605 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-21 03:59:07 +00:00
ca5da765c5
* fix oddball bug with newlines thanks to using Regexp to split chars
...
git-svn-id: file:///home/svn/incoming/trunk@3576 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-29 18:40:15 +00:00
64c7a2063f
* add uri encoding as a text modifier
...
* add multibyte hex encoding. useful for %u
git-svn-id: file:///home/svn/incoming/trunk@3544 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:51:17 +00:00
59f16d0a1b
* add MS's widechar encoding support, named uhwtfms :P (note, to use in something like a URI, it needs to be cleaned up... since you have to send %uXXXX instead of just 2 bytes raw encoded)
...
git-svn-id: file:///home/svn/incoming/trunk@3541 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-22 23:29:34 +00:00
b56432346e
* all non-printable characters are utf-8 by default
...
git-svn-id: file:///home/svn/incoming/trunk@3528 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-14 01:04:06 +00:00
bce161e622
* add utf-8 support, with overlong and invalid overlong encodings
...
* update utf-7 support to a mode to specify "all"
git-svn-id: file:///home/svn/incoming/trunk@3526 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-13 22:52:01 +00:00
b091a21f2b
* to_unicode now supports more than just utf-16le, which is still the default.
...
* add tests for all of the unicode variations.
git-svn-id: file:///home/svn/incoming/trunk@3524 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 17:30:41 +00:00
6c8f513e47
* add "good" char list as well, since well... otherwise its painful.
...
git-svn-id: file:///home/svn/incoming/trunk@3485 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-31 22:25:55 +00:00
b4ad4a5d75
Tabs vs Spaces
...
git-svn-id: file:///home/svn/incoming/trunk@3453 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 05:33:08 +00:00
bdfd2c5152
Recon modules and the recon event subsystem have been temporarily removed.
...
The 'auxiliary' system is designed to replace it and recon features will
slowly be moved back into the framework
git-svn-id: file:///home/svn/incoming/trunk@3438 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-24 03:59:44 +00:00
cd7f1d1979
patch for unicode/to_hex/other changes from bmc
...
git-svn-id: file:///home/svn/incoming/trunk@3408 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-19 15:12:22 +00:00
e02eb0d2eb
Fixed to NOP vs Nop, Encoder vs ENCODER, setting the preferred NOP
...
Fixed multiple CPU spinning bugs in the alpha2 encoders
Fixed SiteReference to expose site type and value
git-svn-id: file:///home/svn/incoming/trunk@3401 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:09:40 +00:00
8049b32cbc
Patches from <anon>
...
git-svn-id: file:///home/svn/incoming/trunk@3310 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-05 22:20:28 +00:00
1a73949451
added gzip detection
...
git-svn-id: file:///home/svn/incoming/trunk@3302 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-03 04:07:20 +00:00
96d4591b87
Updates to httpserver mixin, gzip encoding added to text, bugfix to wordstar, added metafile exploit, will rename and make it nice later
...
git-svn-id: file:///home/svn/incoming/trunk@3299 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-02 07:49:52 +00:00
f61c5f4ece
merge patch from bmc to speed up rand_base
...
git-svn-id: file:///home/svn/incoming/trunk@3228 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 20:13:35 +00:00
7421057221
some useful tools, msfweb daemonize, fix pattern creation
...
git-svn-id: file:///home/svn/incoming/trunk@3197 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-09 00:03:52 +00:00
ffc30f497c
nasm shell
...
git-svn-id: file:///home/svn/incoming/trunk@3193 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-08 15:37:10 +00:00
6c2da4d313
Imap exploits
...
Addition of MC as a common author
Added the IMAP mixin
Fixed bug in base64
git-svn-id: file:///home/svn/incoming/trunk@3172 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-05 05:00:27 +00:00
8a42985d84
Tpyo
...
git-svn-id: file:///home/svn/incoming/trunk@3162 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-02 00:49:46 +00:00
b931b02c14
Changes from Brian Caswell
...
git-svn-id: file:///home/svn/incoming/trunk@3161 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-30 19:42:19 +00:00
9340ecdeab
IIS exploits ported
...
Added on_new_session callback and session_created? flag to exploit
Fixed socket fd leak in Comm::Local
git-svn-id: file:///home/svn/incoming/trunk@3135 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-27 18:42:44 +00:00
7403e8bf23
Mssql code!
...
git-svn-id: file:///home/svn/incoming/trunk@3122 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 11:16:36 +00:00
9bf0d901cf
Added the egghunter mixin
...
Consolidated all unicode routines to go through Rex::Text.to_unicode()
Added a new function for sending evil blobs through smb
git-svn-id: file:///home/svn/incoming/trunk@3114 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 02:34:39 +00:00
def6c64abf
Tweak
...
git-svn-id: file:///home/svn/incoming/trunk@3068 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 03:16:10 +00:00
3b79fa0658
move string utils into text
...
git-svn-id: file:///home/svn/incoming/trunk@3020 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-09 04:18:08 +00:00
6a5870ddcd
updated comments to be more uniformed in class definition
...
git-svn-id: file:///home/svn/incoming/trunk@3004 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 16:49:45 +00:00
13e8c4eeaf
text compressing description
...
git-svn-id: file:///home/svn/incoming/trunk@2926 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-01 06:15:39 +00:00
aeb6e66e67
md5 and base64
...
git-svn-id: file:///home/svn/incoming/trunk@2922 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-30 06:48:52 +00:00
d22d0ee851
pattern create and pattern offset
...
git-svn-id: file:///home/svn/incoming/trunk@2921 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-30 06:40:35 +00:00
b14a626ad1
fixed nop handler n stuff
...
git-svn-id: file:///home/svn/incoming/trunk@2795 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 14:39:00 +00:00
fcf0a8390d
Added rand_text_* routines
...
git-svn-id: file:///home/svn/incoming/trunk@2786 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 01:47:18 +00:00
48b59caeff
Minor tweaks
...
git-svn-id: file:///home/svn/incoming/trunk@2782 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-17 10:30:11 +00:00
3aaeeca644
moved hex to raw
...
git-svn-id: file:///home/svn/incoming/trunk@2749 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-13 23:01:34 +00:00
8dc1128b3c
more cool shit
...
git-svn-id: file:///home/svn/incoming/trunk@2711 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-10 19:21:40 +00:00
26a28807eb
oops
...
git-svn-id: file:///home/svn/incoming/trunk@2704 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-10 07:27:50 +00:00
01aff25bd0
how you like me now, gold teef when I smile
...
git-svn-id: file:///home/svn/incoming/trunk@2703 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-10 07:15:20 +00:00
HD Moore
Patrick Webster
James Lee
kris
Ramon de C Valle
Matt Miller
Spoon M