jvazquez-r7
4ca4d82d89
Land #2939 , @Meatballs1 exploit for Wikimedia RCE and a lot more...
2014-02-18 17:48:02 -06:00
Meatballs
0a3cb3377f
AppendEncoder
2014-02-04 15:41:10 +00:00
James Lee
b9e234f62d
Log the size if it doesn't fit
2014-02-02 22:28:23 -06:00
William Vu
f5d1d8eace
chmod -x .rb files without #! in modules and lib
...
It wasn't just cmdstager_printf.rb. :/
2013-10-30 19:51:25 -05:00
Tab Assassin
7e5e0f7fc8
Retab lib
2013-08-30 16:28:33 -05:00
James Lee
f4498c3916
Remove $Id tags
...
Also adds binary coding magic comment to a few files
2013-05-20 16:21:03 -05:00
James Lee
db676f1a88
Whitespace at EOL
2013-03-07 18:20:08 -06:00
James Lee
d36e38fca6
Move encoding into handle_connection
...
* Allows payloads that override generate_stage to still take advantage
of stage encoding
* Also adds doc comments for a few methods
2013-01-15 10:34:31 -06:00
HD Moore
d656e3185f
Mark all libraries as defaulting to 8-bit strings
2012-06-29 00:18:28 -05:00
James Lee
4181fd9709
Add support for EXE::Custom in EncodedPayload#encoded_exe
...
Fixes an issue with java_signed_applet (and probably others) not
honoring EXE::Custom settings.
2012-04-16 12:09:25 -06:00
HD Moore
1a364df37e
Pull payload/exploit options into nop modules as well
2012-03-12 23:28:47 -05:00
HD Moore
606ca82432
Share the datastore with encoders
2012-03-12 23:23:15 -05:00
scriptjunkie
9d7591467f
Fix "failed to generate" error when passing a preferred encoder to "payload.generate" method using RPC from, for example, the GUI on Windows.
...
framework.encoders[reqs['Encoder']] returns nil when, for example, reqs['Encoder'] is in UTF-8 encoding and the corresponding key of the framework.encoders hash in US-ASCII encoding.
2012-01-20 21:06:53 -06:00
Mario Ceballos
a7d95fad73
typo.. was working on some java sploit and found it.
...
git-svn-id: file:///home/svn/framework3/trunk@13667 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-30 22:23:00 +00:00
James Lee
4188db3a6d
honor the Spawn option when creating a jar
...
git-svn-id: file:///home/svn/framework3/trunk@13215 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 02:54:38 +00:00
James Lee
7581ce0153
try the payload's arch/platform if we don't have an associated exploit
...
git-svn-id: file:///home/svn/framework3/trunk@11116 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-23 20:37:32 +00:00
James Lee
b3b43bbb8b
fix a bug in arch detection when an EncodedPayload's pinst is an EncodedPayload instead of a Payload
...
git-svn-id: file:///home/svn/framework3/trunk@11115 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-23 20:34:27 +00:00
James Lee
9df192497b
make sure we're not turning nil into [nil], since it breaks the arch detection
...
git-svn-id: file:///home/svn/framework3/trunk@11098 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-22 17:48:35 +00:00
James Lee
326dc42bca
add EncodedPayload#encoded_exe, encoded_jar, and encoded_war. simplifies exploits that need java and native payloads. see #406 and #3009
...
git-svn-id: file:///home/svn/framework3/trunk@10999 4d416f70-5f16-0410-b530-b9f4589650da
2010-11-11 23:01:35 +00:00
James Lee
27cc50f29a
missed this in the java payload updates, r10781
...
git-svn-id: file:///home/svn/framework3/trunk@10786 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-22 20:40:25 +00:00
James Lee
5d95f48848
add preliminary support for the new java payloads. Working meterpreter and shell stages with tcp bind and reverse stagers, see #406
...
git-svn-id: file:///home/svn/framework3/trunk@10073 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 07:01:23 +00:00
Joshua Drake
d7a4cd2096
fix next/break handling inside new loop -- fixes #2310
...
git-svn-id: file:///home/svn/framework3/trunk@9951 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-03 16:00:45 +00:00
James Lee
9a583b9e09
fix encoding. =/
...
git-svn-id: file:///home/svn/framework3/trunk@9918 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-24 01:04:58 +00:00
James Lee
e957a7a90e
add support for doing everything msfpayload does into msfconsole and xmlrpc, fixes #589 . Thanks, Ryan Linn for the patch
...
git-svn-id: file:///home/svn/framework3/trunk@9914 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-23 20:22:36 +00:00
HD Moore
7e4d03be86
This adds support for the old exe format to msfencode using -t exe-small and allows encoder modules to change preferences based on the platform, which fully solves #430 .
...
git-svn-id: file:///home/svn/framework3/trunk@7840 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-13 19:03:35 +00:00
James Lee
21ff66996a
make logging a little more useful when encoding
...
git-svn-id: file:///home/svn/framework3/trunk@7051 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-22 06:45:58 +00:00
HD Moore
6e773891de
Fixes #167 . Remove the EncoderDontFallThrough option, make this the normal behavior if an encoder is specified
...
git-svn-id: file:///home/svn/framework3/trunk@5862 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 22:23:29 +00:00
Ramon de C Valle
f124597a56
Code cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:03:39 +00:00
Matt Miller
30ae3af6fb
experimental: stages encoded by default, set DisableStageEncoding 1 to disable
...
git-svn-id: file:///home/svn/framework3/trunk@5511 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-26 07:59:03 +00:00
Matt Miller
aad6a6868b
added EncoderDontFallThrough option, fixes #155
...
git-svn-id: file:///home/svn/framework3/trunk@5132 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-02 03:36:45 +00:00
Matt Miller
f61cde59c4
initial support for context encoding
...
git-svn-id: file:///home/svn/framework3/trunk@5081 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-31 04:01:30 +00:00
Matt Miller
e1565e2af4
fixed a few issues with the alpha2 implementation
...
git-svn-id: file:///home/svn/framework3/trunk@4230 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 05:19:31 +00:00
Matt Miller
465ea3c677
initial integration of basic kernel-mode payload support
...
git-svn-id: file:///home/svn/framework3/trunk@4044 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 23:59:14 +00:00
Matt Miller
3e69f46a3a
added support for manual ranking
...
git-svn-id: file:///home/svn/framework3/trunk@3866 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-12 05:34:58 +00:00
Matt Miller
144249b34d
bump thread priority in encoded payload generation to fix thread starvation issues
...
git-svn-id: file:///home/svn/framework3/trunk@3777 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-30 18:45:36 +00:00
HD Moore
e02eb0d2eb
Fixed to NOP vs Nop, Encoder vs ENCODER, setting the preferred NOP
...
Fixed multiple CPU spinning bugs in the alpha2 encoders
Fixed SiteReference to expose site type and value
git-svn-id: file:///home/svn/incoming/trunk@3401 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:09:40 +00:00
Matt Miller
ba0b13292b
support for preferred nop
...
git-svn-id: file:///home/svn/incoming/trunk@3399 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 01:11:26 +00:00
Matt Miller
237af88317
update to encoder and exploit classes to support target/exploit specific encoder type/encoder options
...
git-svn-id: file:///home/svn/incoming/trunk@3315 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 02:25:47 +00:00
HD Moore
9fc93bbe56
Miscellaneous fixes, changes to CMD payloads
...
git-svn-id: file:///home/svn/incoming/trunk@3296 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-02 01:12:36 +00:00
Matt Miller
a4b622d425
fix for nop ui thing maybe
...
git-svn-id: file:///home/svn/incoming/trunk@3267 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-30 02:38:18 +00:00
Matt Miller
05a84cc7da
bug fixes in x86 asm, jmp call additive, payload generation, and new exploit
...
git-svn-id: file:///home/svn/incoming/trunk@3021 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:22:03 +00:00
Matt Miller
6a5870ddcd
updated comments to be more uniformed in class definition
...
git-svn-id: file:///home/svn/incoming/trunk@3004 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 16:49:45 +00:00
Matt Miller
1c3fc58349
updated logging levels and defined guidelines
...
git-svn-id: file:///home/svn/incoming/trunk@3002 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 00:27:59 +00:00
Matt Miller
1605e575cd
implemented some unit tests for modules
...
git-svn-id: file:///home/svn/incoming/trunk@2998 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 00:48:40 +00:00
Matt Miller
81c8cf3104
documentation fixes, code cleanup
...
git-svn-id: file:///home/svn/incoming/trunk@2973 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-19 03:20:20 +00:00
Matt Miller
501d7da9f9
aim goaway exploit ported, fixed a few bugs in sled gen
...
git-svn-id: file:///home/svn/incoming/trunk@2888 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 19:17:07 +00:00
Matt Miller
3116a654d4
enhanced logging a bit, added a few badchars to ie obj type, improving job support
...
git-svn-id: file:///home/svn/incoming/trunk@2868 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-23 05:51:09 +00:00
Matt Miller
577a5c3095
dll injection working, had to fix nop stack alignment crap
...
git-svn-id: file:///home/svn/incoming/trunk@2788 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 02:01:36 +00:00
Matt Miller
120e6b5a2b
fix for missing min
...
git-svn-id: file:///home/svn/incoming/trunk@2784 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 00:03:29 +00:00
Matt Miller
645725a3b5
config file parsing, datastore persistence, shared data stores, save in the ui
...
git-svn-id: file:///home/svn/incoming/trunk@2761 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-15 22:30:04 +00:00