Joshua Drake
17bd4b8b7d
fixed aix payloads to REALLY do variable substitution
...
git-svn-id: file:///home/svn/framework3/trunk@8418 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-08 22:41:36 +00:00
HD Moore
32f7d742b3
Fixes #328 . Crafty little bug -- if asm was "" vs nil, the stage would try to compile as metasm instead of using the raw payload.
...
git-svn-id: file:///home/svn/framework3/trunk@7278 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 17:44:43 +00:00
HD Moore
e27691c543
Performance and debugging improvements from Yoann Guillot
...
git-svn-id: file:///home/svn/framework3/trunk@6712 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-25 17:59:51 +00:00
Ramon de C Valle
c2362ec409
All your POWER are belong to us.
...
git-svn-id: file:///home/svn/framework3/trunk@6698 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-23 03:49:25 +00:00
Ramon de C Valle
f124597a56
Code cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:03:39 +00:00
Ramon de C Valle
4c847e0d44
Fixed typo
...
git-svn-id: file:///home/svn/framework3/trunk@5772 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 20:38:07 +00:00
Ramon de C Valle
c34bbae344
Added payload advanced packing types for 16/16 and 22/10 bits substitution
...
git-svn-id: file:///home/svn/framework3/trunk@5770 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 20:32:14 +00:00
HD Moore
0f25d98fb2
Fixes a typo with IPv4->IPv6 address translation
...
git-svn-id: file:///home/svn/framework3/trunk@5652 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-05 16:23:34 +00:00
HD Moore
fcaa218548
Fix IPv4 payloads, dont commit past midnight anymore.
...
git-svn-id: file:///home/svn/framework3/trunk@5638 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-22 22:06:14 +00:00
HD Moore
d53dd66701
Adds initial support for IPv6, including two stager. Tested Meterpreter over IPv6 stages on XP and Vista. Using this is still tricky, I will add a wiki page tomorrow to explain the ScopeID stuff for link-local testing. This commit also includes the raw (oversized) assembler for the stagers as well as the entire old metasploit assembly set (useful for development).
...
git-svn-id: file:///home/svn/framework3/trunk@5635 4d416f70-5f16-0410-b530-b9f4589650da
2008-08-22 06:34:57 +00:00
HD Moore
06aa636126
Payload patch from toto
...
git-svn-id: file:///home/svn/framework3/trunk@5450 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-18 16:01:15 +00:00
HD Moore
6677beb174
Merged revisions 5366-5377 via svnmerge from
...
svn+ssh://metasploit.com/home/svn/framework3/branches/framework-3.1
........
r5366 | hdm | 2008-01-26 20:30:53 -0600 (Sat, 26 Jan 2008) | 2 lines
Update version information
........
r5367 | hdm | 2008-01-26 21:10:57 -0600 (Sat, 26 Jan 2008) | 3 lines
Updated for version 3.1
........
r5369 | hdm | 2008-01-26 21:13:31 -0600 (Sat, 26 Jan 2008) | 3 lines
Wipe the private directories from the branch.
........
r5371 | hdm | 2008-01-27 17:24:24 -0600 (Sun, 27 Jan 2008) | 5 lines
Timeout options added for dcerpc connect and read times. Addition of novell netware as a supported target platform. Inclusion of the serverprotect exploit (still works on the latest version). Addition of the first remote netware kernel exploit that leads to a shell, addition of netware stager and shell, and first draft of the release notes for 3.1
........
r5372 | hdm | 2008-01-27 17:30:08 -0600 (Sun, 27 Jan 2008) | 3 lines
Formatting, indentation, fixed the static IP embedded in the request
........
r5373 | hdm | 2008-01-27 20:02:48 -0600 (Sun, 27 Jan 2008) | 3 lines
Correctly trap exploit errors in a way that works with all of the UIs
........
r5374 | hdm | 2008-01-27 20:23:25 -0600 (Sun, 27 Jan 2008) | 3 lines
More last-minute bug fixes
........
r5375 | hdm | 2008-01-27 20:37:43 -0600 (Sun, 27 Jan 2008) | 3 lines
Force multi-bind off in netware, correct label display in gtk gui labels
........
r5376 | hdm | 2008-01-27 20:50:03 -0600 (Sun, 27 Jan 2008) | 3 lines
More exception handling fun
........
git-svn-id: file:///home/svn/framework3/trunk@5378 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-28 03:06:31 +00:00
Matt Miller
7b65a56d65
initial support for metasm integration, ported sample payload to use it
...
git-svn-id: file:///home/svn/framework3/trunk@5076 4d416f70-5f16-0410-b530-b9f4589650da
2007-08-11 00:37:50 +00:00
Ramon de C Valle
f60810d00c
Added more advanced payload options and advanced payload options support for Solaris.
...
git-svn-id: file:///home/svn/framework3/trunk@5060 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-25 03:24:51 +00:00
Ramon de C Valle
f3dd74cfc9
Added advanced payload options for *BSD, improved solaris targets of lsa_transnames_heap.rb, some code cleanups.
...
git-svn-id: file:///home/svn/framework3/trunk@5044 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-11 03:19:28 +00:00
Ramon de C Valle
99f806b0e9
Added OSX payloads advanced options and improved Samba exploit module.
...
git-svn-id: file:///home/svn/framework3/trunk@5033 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-06 01:22:54 +00:00
Matt Miller
d33675d870
framework now properly handles using singles without handlers as both stages and singles, fixes #115
...
git-svn-id: file:///home/svn/framework3/trunk@4994 4d416f70-5f16-0410-b530-b9f4589650da
2007-06-16 05:04:03 +00:00
HD Moore
40511cffb7
This adds a Linux-payload specific mixin which allows for new advanced options, such as setuid/chroot prepends.
...
git-svn-id: file:///home/svn/framework3/trunk@4984 4d416f70-5f16-0410-b530-b9f4589650da
2007-06-09 02:25:31 +00:00
Matt Miller
df10ee412d
typos
...
git-svn-id: file:///home/svn/framework3/trunk@4349 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-11 03:16:08 +00:00
Matt Miller
fa14510b78
starting integration of kernel-mode payloads
...
git-svn-id: file:///home/svn/framework3/trunk@4043 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 21:40:38 +00:00
Matt Miller
c12e3f2992
better implementation
...
git-svn-id: file:///home/svn/framework3/trunk@4042 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 19:04:39 +00:00
Matt Miller
34f388d0e5
added code to support HEX var substitution
...
git-svn-id: file:///home/svn/framework3/trunk@4041 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 18:51:34 +00:00
Matt Miller
e7ffef974c
fix to make it so there aren't errors with Msf::Payload::Generic
...
git-svn-id: file:///home/svn/framework3/trunk@3845 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-27 06:56:32 +00:00
Matt Miller
237af88317
update to encoder and exploit classes to support target/exploit specific encoder type/encoder options
...
git-svn-id: file:///home/svn/incoming/trunk@3315 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 02:25:47 +00:00
Matt Miller
5a42b1d86b
msfd fixes
...
git-svn-id: file:///home/svn/incoming/trunk@3150 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 20:41:11 +00:00
HD Moore
9340ecdeab
IIS exploits ported
...
Added on_new_session callback and session_created? flag to exploit
Fixed socket fd leak in Comm::Local
git-svn-id: file:///home/svn/incoming/trunk@3135 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-27 18:42:44 +00:00
Matt Miller
96d75dcbb4
support for aborting sockets once a remote, non-find exploit succeeds
...
git-svn-id: file:///home/svn/incoming/trunk@3082 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 18:50:33 +00:00
Matt Miller
0e9c5bab5b
logging fix, meterpreter multi-load fixed, advanced option display, meterpreter optino to autoload stdapi
...
git-svn-id: file:///home/svn/incoming/trunk@3052 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-19 15:09:41 +00:00
Matt Miller
fc42fef941
exploits now pass context when creating sockets
...
git-svn-id: file:///home/svn/incoming/trunk@3034 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 21:25:23 +00:00
Matt Miller
5676117bff
last of normalized docs from last night
...
git-svn-id: file:///home/svn/incoming/trunk@3030 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 15:11:43 +00:00
Matt Miller
b89a92f28f
payloads now display multiple stages
...
git-svn-id: file:///home/svn/incoming/trunk@3025 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-12 05:11:56 +00:00
Matt Miller
6a5870ddcd
updated comments to be more uniformed in class definition
...
git-svn-id: file:///home/svn/incoming/trunk@3004 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 16:49:45 +00:00
Matt Miller
81c8cf3104
documentation fixes, code cleanup
...
git-svn-id: file:///home/svn/incoming/trunk@2973 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-19 03:20:20 +00:00
Matt Miller
b06a2ca030
initial support for compat filtering, may be buggy
...
git-svn-id: file:///home/svn/incoming/trunk@2971 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-19 01:48:10 +00:00
Matt Miller
17a596186e
added the concept of payload convention
...
git-svn-id: file:///home/svn/incoming/trunk@2925 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-01 06:09:46 +00:00
Matt Miller
9a420ac750
meterp fs wrapper action rockin the house
...
git-svn-id: file:///home/svn/incoming/trunk@2793 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 07:46:54 +00:00
Matt Miller
577a5c3095
dll injection working, had to fix nop stack alignment crap
...
git-svn-id: file:///home/svn/incoming/trunk@2788 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-18 02:01:36 +00:00
Matt Miller
11724ac797
fixed stager merging, made things a bit more pimply
...
git-svn-id: file:///home/svn/incoming/trunk@2774 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-17 06:01:11 +00:00
Matt Miller
2f2363d141
it lives, major changes, fixed bugs, exploiting works with the test exploit
...
git-svn-id: file:///home/svn/incoming/trunk@2763 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-16 07:32:11 +00:00
Matt Miller
be2414a8b2
exploitation progress
...
git-svn-id: file:///home/svn/incoming/trunk@2762 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-15 23:46:05 +00:00
Matt Miller
aa778d7a99
added ambiguous module name detection
...
git-svn-id: file:///home/svn/incoming/trunk@2754 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-14 20:05:41 +00:00
Matt Miller
fd02a5de71
some work on compatible payload stuff
...
git-svn-id: file:///home/svn/incoming/trunk@2753 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-14 14:46:18 +00:00
Matt Miller
d62566a68f
lots of changes, making the simple wrapper better, lots of improvements
...
git-svn-id: file:///home/svn/incoming/trunk@2750 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-14 06:34:58 +00:00
Matt Miller
72ad97dfd1
fixed up encoding, made payload generation pimper
...
git-svn-id: file:///home/svn/incoming/trunk@2746 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-13 21:09:07 +00:00
Matt Miller
f1691c5470
worked on payload encoding, exploit driver wrapper, platforms updates, spoon would probably hate it
...
git-svn-id: file:///home/svn/incoming/trunk@2744 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-13 18:06:12 +00:00
Matt Miller
5342128907
some readline stuff, tab completion, add spoon's hashed payload stuff
...
git-svn-id: file:///home/svn/incoming/trunk@2736 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-12 05:39:44 +00:00
Matt Miller
9e48b1393e
changed payload names around so little spoony can get his way
...
git-svn-id: file:///home/svn/incoming/trunk@2734 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-11 22:51:25 +00:00
Matt Miller
1be7b9337e
implemented a single payload for grins, spoon will hate it
...
git-svn-id: file:///home/svn/incoming/trunk@2721 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-11 04:24:11 +00:00
Matt Miller
f1aba8e7ba
introducing handlers to the mix
...
git-svn-id: file:///home/svn/incoming/trunk@2719 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-11 04:07:52 +00:00
Matt Miller
8dc1128b3c
more cool shit
...
git-svn-id: file:///home/svn/incoming/trunk@2711 4d416f70-5f16-0410-b530-b9f4589650da
2005-07-10 19:21:40 +00:00