Commit Graph

7368 Commits (a447149907f5b7ae00d898052d9522998eba10ab)

Author SHA1 Message Date
Joshua Drake 9c95c0ac1a add note about string indexing
git-svn-id: file:///home/svn/framework3/trunk@10105 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-23 16:39:39 +00:00
Patrick Webster bb9be48739 Added tomcat utf8 traversal aux module.
git-svn-id: file:///home/svn/framework3/trunk@10104 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-23 16:17:43 +00:00
Tod Beardsley 2e84d222d3 Fixes #2434 by using the new report_auth_info API.
git-svn-id: file:///home/svn/framework3/trunk@10103 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-23 15:27:22 +00:00
HD Moore 65af96745f Set manual ranking until we have a vulnerable extension list added by default
git-svn-id: file:///home/svn/framework3/trunk@10101 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-23 13:41:59 +00:00
HD Moore cc3554601f Tools for testing DLL hijack flaws
git-svn-id: file:///home/svn/framework3/trunk@10100 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-23 05:43:47 +00:00
Joshua Drake 8c9d08b1e8 add egg override param for egghunter
git-svn-id: file:///home/svn/framework3/trunk@10098 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-22 20:19:19 +00:00
James Lee 90e89622c6 make it a little easier to distinguish these two from their output
git-svn-id: file:///home/svn/framework3/trunk@10096 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-21 07:53:25 +00:00
James Lee b35cea94cd add source code for cve-2010-0840
git-svn-id: file:///home/svn/framework3/trunk@10095 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-21 07:27:26 +00:00
HD Moore 7ad4f80014 Add a badchars argument
git-svn-id: file:///home/svn/framework3/trunk@10094 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-21 07:20:58 +00:00
James Lee 7381ab8b6d duh, dont actually need this
git-svn-id: file:///home/svn/framework3/trunk@10093 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-21 07:19:49 +00:00
James Lee 6b08dfed61 Add exploit module for cve-2010-08040. This is an awesome bug and my description field doesn't do it justice
git-svn-id: file:///home/svn/framework3/trunk@10092 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-21 06:38:29 +00:00
James Lee eda50fc89e spawn out into another process so killing the browser won't drop our shell
git-svn-id: file:///home/svn/framework3/trunk@10091 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-21 06:28:29 +00:00
James Lee 56396a6d8b add java support to browser_autopwn
git-svn-id: file:///home/svn/framework3/trunk@10089 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 20:49:33 +00:00
Joshua Drake 6d64b22c82 add arch and platform filtering
git-svn-id: file:///home/svn/framework3/trunk@10088 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 20:36:06 +00:00
Joshua Drake 09af63c1fb generate returning nil in payload.size
git-svn-id: file:///home/svn/framework3/trunk@10087 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 20:35:48 +00:00
James Lee 0e896261cb 1.8.6 compatibility fix
git-svn-id: file:///home/svn/framework3/trunk@10086 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 20:31:39 +00:00
Joshua Drake 9c69e3c670 add payload length tool
git-svn-id: file:///home/svn/framework3/trunk@10085 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 19:39:13 +00:00
Matt Weeks 57b48314a6 Add logging support to console sessions.
git-svn-id: file:///home/svn/framework3/trunk@10084 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 19:07:15 +00:00
Joshua Drake b1411084ff add -h and invalid param error to cmd_show
git-svn-id: file:///home/svn/framework3/trunk@10083 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 18:45:33 +00:00
Joshua Drake a40c683754 set ranking to manual, since there is no default target
git-svn-id: file:///home/svn/framework3/trunk@10082 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 18:13:07 +00:00
Joshua Drake 198cc37f8a load java payload mixin, fixes #2432
git-svn-id: file:///home/svn/framework3/trunk@10081 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 18:04:48 +00:00
Joshua Drake fce9a6404c correct regex again, see #2427
git-svn-id: file:///home/svn/framework3/trunk@10080 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 17:55:44 +00:00
Carlos Perez b7ec92ae1f Ticket #2427 Fixed regex in main part of the code and changed the UAC check to the one in the Meterpreter Mixin
git-svn-id: file:///home/svn/framework3/trunk@10079 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 13:07:41 +00:00
Steve Tornio 0e1ed07e73 add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@10078 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 11:36:50 +00:00
James Lee 871a6185b8 refactor
git-svn-id: file:///home/svn/framework3/trunk@10077 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 07:15:23 +00:00
James Lee 5b38990e70 missed this
git-svn-id: file:///home/svn/framework3/trunk@10076 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 07:13:35 +00:00
James Lee 232af015cb add source code for javapayload, thanks mihi. see #406
git-svn-id: file:///home/svn/framework3/trunk@10075 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 07:09:51 +00:00
James Lee 249016056e and the bins. see #406
git-svn-id: file:///home/svn/framework3/trunk@10074 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 07:04:39 +00:00
James Lee 5d95f48848 add preliminary support for the new java payloads. Working meterpreter and shell stages with tcp bind and reverse stagers, see #406
git-svn-id: file:///home/svn/framework3/trunk@10073 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 07:01:23 +00:00
James Lee d6af8743e9 add a simple test exploit for using java payloads
git-svn-id: file:///home/svn/framework3/trunk@10072 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 06:57:57 +00:00
Joshua Drake 1cc13485ae bring ranking down
git-svn-id: file:///home/svn/framework3/trunk@10070 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 23:55:59 +00:00
Joshua Drake 791af4b6c5 add exploit for sonicwall aventail activex format string
git-svn-id: file:///home/svn/framework3/trunk@10069 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 23:52:11 +00:00
Matt Weeks 937606ab1f Ability to close consoles and discover old consoles.
git-svn-id: file:///home/svn/framework3/trunk@10068 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 23:22:22 +00:00
Tod Beardsley d0ea2737c5 Don't overwrite source_id just because we don't have one.
git-svn-id: file:///home/svn/framework3/trunk@10067 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 23:19:34 +00:00
Matt Weeks 6c38930db6 Do not poll for output on hidden windows. Improves performance with many windows open.
git-svn-id: file:///home/svn/framework3/trunk@10066 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 23:02:31 +00:00
Joshua Drake 2545410bc7 make exe template names more consistent
git-svn-id: file:///home/svn/framework3/trunk@10065 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 21:08:51 +00:00
Joshua Drake ec169b9722 add amd64 dll pe template
git-svn-id: file:///home/svn/framework3/trunk@10064 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 20:49:28 +00:00
Joshua Drake 41382b503b add a 64-bit compile mode for pe/dll
git-svn-id: file:///home/svn/framework3/trunk@10063 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 20:49:12 +00:00
Tod Beardsley 5b6f110efa Wrapping credential migration in a rescue to ensure it never fails; there are no schema changes in this migration, so a failure in migrating credentials to the Cred table shouldn't block future changes to the schema.
git-svn-id: file:///home/svn/framework3/trunk@10062 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 19:51:13 +00:00
James Lee 99da53193d add dll output to msfencode, refactor some junk
git-svn-id: file:///home/svn/framework3/trunk@10061 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 19:07:41 +00:00
James Lee ccc4b4492a whitespace fixes
git-svn-id: file:///home/svn/framework3/trunk@10060 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 18:44:45 +00:00
James Lee 09fb3bea6e add support for generating dlls with msfpayload, thanks to an anonymous contributor
git-svn-id: file:///home/svn/framework3/trunk@10059 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 18:31:33 +00:00
Tod Beardsley bae0bbbdbd See #2412. Migrates existing auth.* notes to the new Creds table. Anything unexpected should fall through to a new note of "migrated_auth".
git-svn-id: file:///home/svn/framework3/trunk@10058 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 17:35:56 +00:00
James Lee d9337f3cca add a Jar class to Rex::Zip
git-svn-id: file:///home/svn/framework3/trunk@10057 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 17:08:29 +00:00
James Lee d5149b8e23 less verbose Entry#inspect
git-svn-id: file:///home/svn/framework3/trunk@10056 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 17:04:42 +00:00
Stephen Fewer a9a4e3f2da Add meterpreter client side support for cleaning up loaded extensions upon server termination by calling the loaded extensions cleanup() method if available.
git-svn-id: file:///home/svn/framework3/trunk@10055 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 11:37:22 +00:00
Stephen Fewer 49d34d048f ...and the bins
git-svn-id: file:///home/svn/framework3/trunk@10054 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 11:35:17 +00:00
Stephen Fewer 73f7b20935 Add meterpreter server side support for cleaning up loaded extensions upon server termination by calling the loaded extensions DeinisServerExtension() functions.
git-svn-id: file:///home/svn/framework3/trunk@10053 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 11:34:23 +00:00
Stephen Fewer fd0b96ee9d Add a list_shift() function to the common linked list code.
git-svn-id: file:///home/svn/framework3/trunk@10052 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 11:25:11 +00:00
Joshua Drake 7d560e9c18 rescue NoCompatiblePayloadError inside size method, fixes #1604
git-svn-id: file:///home/svn/framework3/trunk@10051 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 00:10:06 +00:00