Chao Mu
667c00161d
Remembering to Propset and include $Id: $ this time. Also, switching from BSD_LICENSE to MSF_LICENSE.
...
git-svn-id: file:///home/svn/framework3/trunk@13884 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-12 00:30:25 +00:00
Wei Chen
460353fec4
Migrate to process what? :-)
...
git-svn-id: file:///home/svn/framework3/trunk@13883 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-12 00:01:25 +00:00
Wei Chen
9a00527114
Check nil
...
git-svn-id: file:///home/svn/framework3/trunk@13881 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 21:57:20 +00:00
Wei Chen
39049a71ca
Chk nil for user in case it returns nil, but password doesn't
...
git-svn-id: file:///home/svn/framework3/trunk@13880 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 21:55:30 +00:00
Wei Chen
f1f1d16f8b
handle possible nil return value
...
git-svn-id: file:///home/svn/framework3/trunk@13879 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 21:01:22 +00:00
Wei Chen
4a73a21277
registry_getvaldata might return nil due to a RequestError. Need to handle those before printing the values.
...
git-svn-id: file:///home/svn/framework3/trunk@13878 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 20:27:52 +00:00
Wei Chen
d49ffd3fc8
Fix naming style, and some other format problems.
...
git-svn-id: file:///home/svn/framework3/trunk@13877 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 20:08:11 +00:00
Wei Chen
60296e9cf2
Change naming style for consistency
...
git-svn-id: file:///home/svn/framework3/trunk@13876 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 20:03:40 +00:00
Wei Chen
ea0392724e
Check nil first, and then check empty
...
git-svn-id: file:///home/svn/framework3/trunk@13875 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 19:01:09 +00:00
Wei Chen
44761f8755
Fix bug #5675 (nil:NilClass error). Also, nil should be checked first, and then .empty?
...
git-svn-id: file:///home/svn/framework3/trunk@13874 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 18:58:44 +00:00
HD Moore
558894e100
Test cases don't live in the module directory
...
git-svn-id: file:///home/svn/framework3/trunk@13871 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 15:51:22 +00:00
Chao Mu
9414747945
jruby was barfing on super(a, b, c,), so I changed the syntax and wrote a very simple unit test for rewrite_proxy_bypass.
...
git-svn-id: file:///home/svn/framework3/trunk@13870 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 13:52:39 +00:00
Wei Chen
2d3a431fc2
FTP Navigator post module (Feature #5419 )
...
git-svn-id: file:///home/svn/framework3/trunk@13869 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 05:45:03 +00:00
Wei Chen
c1b1917dce
Change correct name for Lincoln. Also, this is feature #5646
...
git-svn-id: file:///home/svn/framework3/trunk@13868 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 03:30:14 +00:00
Wei Chen
e3111e0261
Add CVE-2008-4779
...
git-svn-id: file:///home/svn/framework3/trunk@13867 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 03:28:08 +00:00
Wei Chen
be4f473cfa
Rename meebo for consistency
...
git-svn-id: file:///home/svn/framework3/trunk@13866 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-11 00:38:50 +00:00
Wei Chen
8f2c87fb5e
Add Beckhoff TwinCAT SCADA PLC dos module (Feature #5524 )
...
git-svn-id: file:///home/svn/framework3/trunk@13865 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 23:41:15 +00:00
Chao Mu
dcb6de2b58
Fixes #5667 this module scans for reverse proxy servers that exhibit a misconfiguration like the one detailed in www.contextis.com/research/blog/reverseproxybypass/. By default it requests a URI of @... and checks for a 502
...
git-svn-id: file:///home/svn/framework3/trunk@13864 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 22:34:50 +00:00
Wei Chen
50d4e85c57
"bug" #5583 - Dyn-DNS client password extractor
...
git-svn-id: file:///home/svn/framework3/trunk@13863 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 21:41:36 +00:00
HD Moore
43e6b3066b
Fix errant spaces, closes #5666 , thanks jjarmoc!
...
git-svn-id: file:///home/svn/framework3/trunk@13858 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 21:07:55 +00:00
Tod Beardsley
568bde7aa4
Fixes #5404
...
See #5350
See #5246
See #5241
See #5173
Adds password hash dumping as loot for Postgres, MSSQL, MySQL, and several Oracle flavors of RDBMS. Thanks TheLightCosine!
git-svn-id: file:///home/svn/framework3/trunk@13854 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 17:05:01 +00:00
Wei Chen
f54939cda9
Change target name and description. The module works on multiple systems.
...
git-svn-id: file:///home/svn/framework3/trunk@13853 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 16:47:33 +00:00
Wei Chen
8488343e46
Add CVE-2011-2595 (Feature #5645 )
...
git-svn-id: file:///home/svn/framework3/trunk@13852 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 16:11:05 +00:00
HD Moore
643223ff11
Fixes #5651 by applying patch
...
git-svn-id: file:///home/svn/framework3/trunk@13850 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-10 15:40:59 +00:00
Wei Chen
756aafd7f2
Add CVE and OSVDB refs
...
git-svn-id: file:///home/svn/framework3/trunk@13848 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-09 22:56:17 +00:00
Wei Chen
9ddfc122af
Fix indentation, white spaces, add patch URL to reference
...
git-svn-id: file:///home/svn/framework3/trunk@13847 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-09 20:39:02 +00:00
Wei Chen
262b3bbe00
Use Rex to encode payload to base64
...
git-svn-id: file:///home/svn/framework3/trunk@13846 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-09 20:31:51 +00:00
Joshua Drake
eab8a2434b
fix typo in description
...
git-svn-id: file:///home/svn/framework3/trunk@13845 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-09 19:39:15 +00:00
Tod Beardsley
921549fc3d
Adding OSVDB ref that just popped up for me.
...
git-svn-id: file:///home/svn/framework3/trunk@13844 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-09 15:49:02 +00:00
Wei Chen
98157272fd
Fix indentation for exploit description
...
git-svn-id: file:///home/svn/framework3/trunk@13843 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-09 06:12:54 +00:00
Wei Chen
d1b1b26d01
Add Feature #5499 (Snortreport module)
...
git-svn-id: file:///home/svn/framework3/trunk@13842 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-09 06:10:18 +00:00
Wei Chen
487ee5b46e
Does not work against Win 7 SP0/SP1 and Windows Server 2003 SP2. Definitely not an universal target.
...
git-svn-id: file:///home/svn/framework3/trunk@13841 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-09 05:36:42 +00:00
Wei Chen
a3cc25615d
Add bug #5505 (scriptftp_list module)
...
git-svn-id: file:///home/svn/framework3/trunk@13839 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-09 04:17:03 +00:00
Tod Beardsley
3d9c94633d
Adding MyBB backdoor exploit submitted by tdz. Thanks!
...
git-svn-id: file:///home/svn/framework3/trunk@13838 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-09 03:22:07 +00:00
HD Moore
3d8a18cfd1
Fix tab indent
...
git-svn-id: file:///home/svn/framework3/trunk@13836 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-08 18:39:23 +00:00
Joshua Drake
2e7edeff81
See #3585 : Happy Third Birthday MS08-067!
...
Adds an AlwaysOn DEP bypass for XP SP2 and SP3
git-svn-id: file:///home/svn/framework3/trunk@13835 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-08 07:26:37 +00:00
Wei Chen
e1e74de44a
Add enum_ie.rb (feature #5251 )
...
git-svn-id: file:///home/svn/framework3/trunk@13834 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-07 21:02:05 +00:00
Wei Chen
44ac9d67e0
svn propset
...
git-svn-id: file:///home/svn/framework3/trunk@13831 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-07 17:45:15 +00:00
Steve Tornio
9ec92ee603
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@13830 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-07 15:37:54 +00:00
HD Moore
9862987f45
Add a new module from joernchen
...
git-svn-id: file:///home/svn/framework3/trunk@13829 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-07 15:30:24 +00:00
Carlos Perez
15432fa2f5
Fix misspelled word
...
git-svn-id: file:///home/svn/framework3/trunk@13826 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-07 00:31:28 +00:00
Carlos Perez
1aa5deca43
Updated migrate post module for Meterpreter adding support automatically creating a process with the proper architecture to migrate to and added support to kill original process.
...
git-svn-id: file:///home/svn/framework3/trunk@13825 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-07 00:22:27 +00:00
Wei Chen
c97fc2c683
Fix typo
...
git-svn-id: file:///home/svn/framework3/trunk@13816 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-04 21:05:37 +00:00
Wei Chen
6ffa61b314
Apply patch for bug #5212
...
git-svn-id: file:///home/svn/framework3/trunk@13815 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-04 19:10:33 +00:00
Wei Chen
37069a252c
Support POST. Feature #5571
...
git-svn-id: file:///home/svn/framework3/trunk@13814 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-04 16:02:52 +00:00
Wei Chen
3398b9fa0b
Add add_user_domain
...
git-svn-id: file:///home/svn/framework3/trunk@13813 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-04 15:50:12 +00:00
Wei Chen
5cf6ddc322
Add Windows enum domain post module
...
git-svn-id: file:///home/svn/framework3/trunk@13812 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-03 21:05:54 +00:00
Steve Tornio
93f8d73b0c
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@13810 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-02 17:03:23 +00:00
Mario Ceballos
711bfa7d53
initial coverage for ca total defense sqli
...
git-svn-id: file:///home/svn/framework3/trunk@13809 4d416f70-5f16-0410-b530-b9f4589650da
2011-10-02 15:53:44 +00:00
Wei Chen
d1a0a66a9d
Add post module enum domain admin tokens (by jabra)
...
git-svn-id: file:///home/svn/framework3/trunk@13804 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-29 08:18:13 +00:00
Wei Chen
f3d35a491c
Bug fix #5542 . Issue with String#each. Thx egyp7.
...
git-svn-id: file:///home/svn/framework3/trunk@13800 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-27 23:03:30 +00:00
Wei Chen
612cdc8c73
No need to check if version is 'unknown' if nothing else (other than default) is assigned to it
...
git-svn-id: file:///home/svn/framework3/trunk@13799 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-27 19:12:31 +00:00
David Rude
99d86fc9b7
Adds recording screenshots to disk in non-clobbering way
...
git-svn-id: file:///home/svn/framework3/trunk@13798 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-27 15:26:03 +00:00
Wei Chen
2b3a277124
Found an instance that causes the win 7 target to fail. This fix corrects it.
...
git-svn-id: file:///home/svn/framework3/trunk@13797 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-27 08:55:07 +00:00
Wei Chen
8d1763484d
Fix metadata format
...
git-svn-id: file:///home/svn/framework3/trunk@13792 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-26 03:21:37 +00:00
Wei Chen
8bfdebeaf3
Handle the return value for send_request during the early stage
...
git-svn-id: file:///home/svn/framework3/trunk@13791 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-25 19:28:15 +00:00
Wei Chen
5d4b562e62
Add GlassFish BruteForce auxiliary module by Josh (See #5515 )
...
git-svn-id: file:///home/svn/framework3/trunk@13790 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-25 19:24:53 +00:00
James Lee
565fd957fb
whitespace
...
git-svn-id: file:///home/svn/framework3/trunk@13789 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-24 23:26:40 +00:00
Tod Beardsley
d437c99919
Fixing what looks like a versioning mismatch for the XMAS scan (readreply vs probereply methods).
...
git-svn-id: file:///home/svn/framework3/trunk@13786 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-24 13:39:42 +00:00
James Lee
2cb5dbdb10
fix a silly output bug, thanks mezzendo for noticing
...
git-svn-id: file:///home/svn/framework3/trunk@13785 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-23 22:28:11 +00:00
James Lee
cdead3da54
whitespace cleanup and fix some ArgumentErrors when a field is wide, fixes #5518 , thanks Joshua Taylor
...
git-svn-id: file:///home/svn/framework3/trunk@13783 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-23 17:51:11 +00:00
David Rude
4d850c1ee6
Adds Apache Range DoS aka Apache Killer
...
git-svn-id: file:///home/svn/framework3/trunk@13781 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-23 16:38:35 +00:00
Matt Weeks
de9e99bd3d
Fix some TOCTOU confusion and database errors.
...
git-svn-id: file:///home/svn/framework3/trunk@13779 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-23 15:12:19 +00:00
Wei Chen
db79d21f75
Apply patch for non-default logins by jabra
...
git-svn-id: file:///home/svn/framework3/trunk@13778 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-23 02:48:48 +00:00
Wei Chen
ec6f290fbd
Add Windows 7 target and all kinds of stuff.
...
git-svn-id: file:///home/svn/framework3/trunk@13775 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-22 17:40:35 +00:00
Patrick Webster
5c41385284
Added aux module trendmicro_dlp_traversal.
...
git-svn-id: file:///home/svn/framework3/trunk@13772 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-22 07:34:53 +00:00
amaloteaux
2d0d48a820
remove an Argument Error, Negative Number bug faced at Brucon
...
git-svn-id: file:///home/svn/framework3/trunk@13769 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-21 14:52:52 +00:00
Steve Tornio
e93341f9f1
add cve and osvdb refs
...
git-svn-id: file:///home/svn/framework3/trunk@13768 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-21 11:55:56 +00:00
Wei Chen
5d4f68a6f2
Fix JS
...
git-svn-id: file:///home/svn/framework3/trunk@13767 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-21 03:13:45 +00:00
Wei Chen
936f3de84c
This simple math would do the trick
...
git-svn-id: file:///home/svn/framework3/trunk@13766 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-20 18:56:21 +00:00
Wei Chen
742edf1ad1
Add eSignal and eSignal Pro exploit
...
git-svn-id: file:///home/svn/framework3/trunk@13765 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-20 17:39:53 +00:00
James Lee
7163710bcf
fix a typo and some whitespace, fixes #5480 . Thanks Kurt!
...
git-svn-id: file:///home/svn/framework3/trunk@13764 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-20 17:17:20 +00:00
Wei Chen
f9d74b0701
Printing res code for DELETE should be optional. It's not like we can always trust it anyway.
...
git-svn-id: file:///home/svn/framework3/trunk@13763 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-20 00:41:42 +00:00
Joshua Drake
7c74954461
remove silly comma
...
git-svn-id: file:///home/svn/framework3/trunk@13762 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-19 23:06:35 +00:00
Wei Chen
7f80ba939a
Apparently I can't speaks engrish
...
git-svn-id: file:///home/svn/framework3/trunk@13760 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-19 21:18:48 +00:00
Wei Chen
ec530955ce
Checking response codes is a terrible way for HTTP modules. #5470 .
...
git-svn-id: file:///home/svn/framework3/trunk@13759 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-19 20:36:09 +00:00
Jonathan Cran
a1675bfbc6
replaced by http_put
...
git-svn-id: file:///home/svn/framework3/trunk@13758 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-19 20:14:26 +00:00
Joshua Drake
3318b132c8
add x90c's email address
...
git-svn-id: file:///home/svn/framework3/trunk@13757 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-19 19:40:48 +00:00
Steve Tornio
ee09c028a0
add cve and osvdb refs
...
git-svn-id: file:///home/svn/framework3/trunk@13756 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-19 11:38:49 +00:00
Jonathan Cran
8b1fd95f66
Add a module to check HTTP PUT / DELETE file access. Thanks CG! Resolves 5089.
...
git-svn-id: file:///home/svn/framework3/trunk@13755 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-19 01:18:23 +00:00
Matt Weeks
1d2ddc55e8
Add UI for PXE attack reset.
...
git-svn-id: file:///home/svn/framework3/trunk@13753 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-18 20:44:16 +00:00
James Lee
f4be092ac1
include the CVE with more details that definitely applies to this bug, in addition to the ambiguous one that may or may not
...
git-svn-id: file:///home/svn/framework3/trunk@13751 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-18 03:57:27 +00:00
Wei Chen
bf315b09ed
Add DAQFactory bof
...
git-svn-id: file:///home/svn/framework3/trunk@13750 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-18 02:45:55 +00:00
Tod Beardsley
10c76f66ba
Adding an extra print line to adobe_cooltype_sing that clearly displays the user-agent.
...
git-svn-id: file:///home/svn/framework3/trunk@13748 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-17 20:12:51 +00:00
Jonathan Cran
064255e910
fixup the payload encoding, per joernchen's comment in the #metasploit channel.
...
git-svn-id: file:///home/svn/framework3/trunk@13747 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-17 17:48:51 +00:00
Wei Chen
56025609f0
Add fix commit url to reference. Thx jduck!
...
git-svn-id: file:///home/svn/framework3/trunk@13745 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-17 06:48:33 +00:00
James Lee
7e4826bae4
silly patch fail
...
git-svn-id: file:///home/svn/framework3/trunk@13742 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-16 21:11:57 +00:00
James Lee
c6c133673f
add reverse_https support for java meterpreter, fixes #5288 ; thanks mihi!
...
git-svn-id: file:///home/svn/framework3/trunk@13741 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-16 21:10:11 +00:00
Wei Chen
2ebef435a0
Add CVE-2011-2950 Real Player heap overflow
...
git-svn-id: file:///home/svn/framework3/trunk@13738 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-16 19:22:29 +00:00
Wei Chen
6443ee024c
Add Measuresoft ScadaPro exploit
...
git-svn-id: file:///home/svn/framework3/trunk@13737 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-16 08:23:59 +00:00
et
3dffd09875
Generic HTML data scraper
...
git-svn-id: file:///home/svn/framework3/trunk@13736 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-16 02:36:32 +00:00
Wei Chen
7569cad178
Correct variable use in heap spray js function
...
git-svn-id: file:///home/svn/framework3/trunk@13735 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-15 22:37:13 +00:00
Wei Chen
70fa0e630b
Add Windows 7 + IE 8 target. Also use a different approach to get code execution.
...
git-svn-id: file:///home/svn/framework3/trunk@13734 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-15 20:51:01 +00:00
Steve Tornio
de98758f2b
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@13728 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-13 20:10:28 +00:00
Wei Chen
9e5d07b201
Add ScadaTEC ScadaPhone bof
...
git-svn-id: file:///home/svn/framework3/trunk@13727 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-13 17:25:03 +00:00
HD Moore
85eb581c16
Quick fix to match service changes
...
git-svn-id: file:///home/svn/framework3/trunk@13726 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-13 06:48:07 +00:00
Carlos Perez
c1446fa4d7
Migration of wmic script to post module
...
git-svn-id: file:///home/svn/framework3/trunk@13725 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-12 23:33:09 +00:00
Steve Tornio
e6ce90c551
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@13724 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-12 21:42:36 +00:00
Joshua Drake
f8eb9e5dd4
extraneous space typo
...
git-svn-id: file:///home/svn/framework3/trunk@13722 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-12 19:21:21 +00:00
Wei Chen
8b8388ed44
Add CVE-2011-3322 Procyon Core Server HMI
...
git-svn-id: file:///home/svn/framework3/trunk@13721 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-12 17:54:31 +00:00
Carlos Perez
b7ed699abf
Avoid using session.sock.peerhost to set host in reporting since this will return nil when working thru a pivot, use the address returned by session.tunnel_peer instead
...
git-svn-id: file:///home/svn/framework3/trunk@13716 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-11 03:10:14 +00:00
Matt Weeks
acae5dcdc8
Killing puts.
...
Die, puts, die!!
git-svn-id: file:///home/svn/framework3/trunk@13715 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-11 02:42:39 +00:00
David Rude
fafa615d46
Adds store_loot support for cached credentials
...
git-svn-id: file:///home/svn/framework3/trunk@13712 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-09 18:43:59 +00:00
Wei Chen
e597891a1f
Add support for DEP bypass
...
git-svn-id: file:///home/svn/framework3/trunk@13711 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-09 18:15:50 +00:00
James Lee
e31acef6e9
whitespace cleanup
...
git-svn-id: file:///home/svn/framework3/trunk@13702 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-07 15:30:08 +00:00
Mario Ceballos
6f28911d3d
added patch from joshua taylor.
...
git-svn-id: file:///home/svn/framework3/trunk@13698 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-06 19:58:40 +00:00
Wei Chen
819e673b88
Mention about the RSA attack in the description, also add a reference for it
...
git-svn-id: file:///home/svn/framework3/trunk@13697 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-06 17:22:00 +00:00
HD Moore
7fb4a3c571
Fix up the disablenops syntax
...
git-svn-id: file:///home/svn/framework3/trunk@13694 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-05 16:27:04 +00:00
Wei Chen
eae3f97bfe
Should have deleted this. The replacement for it is enum_devices.rb
...
git-svn-id: file:///home/svn/framework3/trunk@13692 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-04 17:22:50 +00:00
Mario Ceballos
2f2421badc
initial coverage of the pnsize bug (fileformat)
...
git-svn-id: file:///home/svn/framework3/trunk@13691 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-03 21:17:58 +00:00
Wei Chen
44ba7e80d5
This module still works against 2.5 (most current as of Sept 2 2011)
...
git-svn-id: file:///home/svn/framework3/trunk@13688 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-03 04:52:04 +00:00
Wei Chen
835c5938d5
Fix typo. Thx mubix for spotting it.
...
git-svn-id: file:///home/svn/framework3/trunk@13687 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-03 04:39:47 +00:00
Wei Chen
3260721d6f
Add post module that retrieves MS product key
...
git-svn-id: file:///home/svn/framework3/trunk@13686 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-03 04:16:42 +00:00
Wei Chen
91c5a15eb4
Actually, this is the right fix for bug #5363
...
git-svn-id: file:///home/svn/framework3/trunk@13685 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-03 02:20:22 +00:00
Wei Chen
14d2a45c5b
This fix is to make sure BLANK_PASSWORDS functions properly. See bug #5363 .
...
git-svn-id: file:///home/svn/framework3/trunk@13684 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-03 02:09:00 +00:00
HD Moore
400afbadf8
Fixes #5392 by closing the listener after accepting the connection. Fixes a number of formatting and api issues
...
git-svn-id: file:///home/svn/framework3/trunk@13682 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-02 16:19:28 +00:00
HD Moore
e4f74b75f8
Add a module for the rsyslog DoS (not triggerable on many platforms)
...
git-svn-id: file:///home/svn/framework3/trunk@13681 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-02 15:55:54 +00:00
David Rude
8a070b81a2
Add the noobfuscation arg to the heaplib call
...
git-svn-id: file:///home/svn/framework3/trunk@13675 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-01 09:00:20 +00:00
Wei Chen
4e92190fa8
Add additional references, correct disclosure date
...
git-svn-id: file:///home/svn/framework3/trunk@13673 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-01 05:20:47 +00:00
Wei Chen
717b0eddee
Add DVD X plf playlist buffer overflow
...
git-svn-id: file:///home/svn/framework3/trunk@13672 4d416f70-5f16-0410-b530-b9f4589650da
2011-09-01 05:14:21 +00:00
Carlos Perez
6de16f055a
Fix formating problem when saving to file
...
git-svn-id: file:///home/svn/framework3/trunk@13671 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-31 17:20:16 +00:00
Wei Chen
22dc0ed551
Fix disclosure date
...
git-svn-id: file:///home/svn/framework3/trunk@13670 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-31 00:15:46 +00:00
David Rude
c5fe6ed503
Reset the target to allow for multiple client connections
...
git-svn-id: file:///home/svn/framework3/trunk@13669 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-30 22:29:14 +00:00
David Rude
70dffd6afb
Adds Citrix Gateway ActiveX Stack Based Buffer Overflow module
...
git-svn-id: file:///home/svn/framework3/trunk@13666 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-30 22:22:32 +00:00
HD Moore
5fa7ddf5f4
Move this aux module out of the exploits tree
...
git-svn-id: file:///home/svn/framework3/trunk@13657 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-29 15:30:13 +00:00
David Rude
cacc3f237c
Added improvements to this module to use a wordlist of known sensitive files
...
git-svn-id: file:///home/svn/framework3/trunk@13654 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-29 03:13:22 +00:00
HD Moore
160e473943
Minor style tweaks
...
git-svn-id: file:///home/svn/framework3/trunk@13653 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-29 00:59:21 +00:00
HD Moore
d2e0060417
Ruby is not Python
...
git-svn-id: file:///home/svn/framework3/trunk@13652 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-29 00:26:42 +00:00
David Rude
6146d0ab0f
remove some extra whitespace
...
git-svn-id: file:///home/svn/framework3/trunk@13651 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-28 22:40:32 +00:00
David Rude
57814c4012
Add nbd_server post module and move forensics modules into a seperate directory
...
git-svn-id: file:///home/svn/framework3/trunk@13650 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-28 22:38:59 +00:00
Matt Weeks
6853221762
Fixes #5313 by adding logging support to pivoted PXE attacks, and displaying results as the module runs.
...
git-svn-id: file:///home/svn/framework3/trunk@13646 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-27 15:46:49 +00:00
Joshua Drake
496170eac1
aDjUsT tHe CaSe
...
git-svn-id: file:///home/svn/framework3/trunk@13644 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-26 23:46:49 +00:00
David Rude
052feebc29
Adds Google Picasa Password Extractor Post module
...
git-svn-id: file:///home/svn/framework3/trunk@13643 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-26 18:32:42 +00:00
David Rude
ab11d3e3eb
Fix the CVE reference
...
git-svn-id: file:///home/svn/framework3/trunk@13642 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-26 15:25:27 +00:00
David Rude
76f0226ff0
Adds the RealVNC Null Authentication Bypass exploit - gj thelightcosine =)
...
git-svn-id: file:///home/svn/framework3/trunk@13641 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-26 04:40:21 +00:00
Matt Weeks
f9e651d382
Report to DB too.
...
git-svn-id: file:///home/svn/framework3/trunk@13640 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-25 22:56:22 +00:00
Matt Weeks
23b4f4ed98
Address #5313 for locally-launched PXE attacks.
...
git-svn-id: file:///home/svn/framework3/trunk@13639 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-25 22:48:33 +00:00
amaloteaux
9cfba23558
psexec: allow o upload payload in a subfolder
...
git-svn-id: file:///home/svn/framework3/trunk@13638 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-25 22:30:46 +00:00
HD Moore
b5070f9cad
Adds a utility module to close sessions
...
git-svn-id: file:///home/svn/framework3/trunk@13636 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-25 19:07:18 +00:00
Tod Beardsley
3b32e28e0f
Converting the ACTION datastore to the CMD datastore to avoid confusion with an :action attribute.
...
git-svn-id: file:///home/svn/framework3/trunk@13635 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-25 15:56:10 +00:00
Matt Weeks
06c3dabe31
Fixes #5312 for pivoted PXE attacks.
...
git-svn-id: file:///home/svn/framework3/trunk@13634 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-25 02:07:35 +00:00
amaloteaux
c8bb6a5fda
mke this module more automatic and reliable
...
git-svn-id: file:///home/svn/framework3/trunk@13632 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-25 00:11:20 +00:00
amaloteaux
a38aed075c
correct some more packetfu migration bug
...
git-svn-id: file:///home/svn/framework3/trunk@13631 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-24 23:49:58 +00:00
amaloteaux
5e1dd48c72
correct some bug left after packetfu migration and make this module compatible with windows
...
git-svn-id: file:///home/svn/framework3/trunk@13626 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-24 20:44:39 +00:00
Tod Beardsley
6e2dfdee86
Oops, missing orequals.
...
git-svn-id: file:///home/svn/framework3/trunk@13620 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-24 19:47:37 +00:00
Tod Beardsley
628d950d98
See #5029 . A reworked DTP spoofer module using PacketFu and some raw DTP bytes instead of Racket.
...
git-svn-id: file:///home/svn/framework3/trunk@13619 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-24 19:34:12 +00:00
Carlos Perez
110094de1b
Post module for gathering Autologin User Credentials by Myo Soe
...
git-svn-id: file:///home/svn/framework3/trunk@13608 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-22 00:37:09 +00:00
David Rude
98d474c875
Add BNAT Router module to properly establish and route connections to BNAT implementations
...
git-svn-id: file:///home/svn/framework3/trunk@13606 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-21 23:40:09 +00:00
HD Moore
81cb99c7ab
A better fix
...
git-svn-id: file:///home/svn/framework3/trunk@13605 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-21 19:26:41 +00:00
David Rude
b39ed220ca
remove the .strip call in banner check causes stack traces in some cases
...
git-svn-id: file:///home/svn/framework3/trunk@13604 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-21 06:50:51 +00:00
David Rude
3792a8f4b7
Added enum_dirperms post module
...
git-svn-id: file:///home/svn/framework3/trunk@13603 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-21 05:58:38 +00:00
David Rude
adf5d7eb73
Adds the BNAT scan module for actively finding bad NAT implementations
...
git-svn-id: file:///home/svn/framework3/trunk@13602 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-21 04:46:57 +00:00
David Rude
b331073851
cleaned up some column width issues, added on_new_session clean up code to remove files
...
git-svn-id: file:///home/svn/framework3/trunk@13599 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-20 17:47:03 +00:00
Joshua Drake
79c7fc7c70
fix up a typo
...
git-svn-id: file:///home/svn/framework3/trunk@13598 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-20 05:41:59 +00:00
James Lee
a924910b86
add user profile fu for firefox_creds, see #4954
...
git-svn-id: file:///home/svn/framework3/trunk@13597 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-20 05:13:17 +00:00
Carlos Perez
db57999246
Reverse lookup module using Railgun, written by Mubix
...
git-svn-id: file:///home/svn/framework3/trunk@13594 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-20 01:23:24 +00:00
Wei Chen
6723c7fb3e
Minor metadata format fix
...
git-svn-id: file:///home/svn/framework3/trunk@13593 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-20 00:11:22 +00:00
Wei Chen
8fbd81a0f0
Add HP Easy Printer xmlsimpleaccessor exploit
...
git-svn-id: file:///home/svn/framework3/trunk@13592 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-19 23:49:45 +00:00
Mario Ceballos
aef764de08
working on moving things referenced in Feature #653 . added different param for secure backup
...
git-svn-id: file:///home/svn/framework3/trunk@13591 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-19 18:35:29 +00:00
Wei Chen
fe53151324
fix tabs
...
git-svn-id: file:///home/svn/framework3/trunk@13590 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-19 16:58:50 +00:00
Wei Chen
056adf7063
Add Win 7 target
...
git-svn-id: file:///home/svn/framework3/trunk@13589 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-19 16:57:19 +00:00
James Lee
851bc8d7b8
add a single shell payload for java, partially reverts r13213
...
git-svn-id: file:///home/svn/framework3/trunk@13588 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-19 16:31:19 +00:00
Tod Beardsley
4c71b3f1fe
More minor touchups to nbns_response. Dropping the unused FILTER option, making SPOOFIP an OptAddress, spelling.
...
git-svn-id: file:///home/svn/framework3/trunk@13587 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-19 14:34:17 +00:00
David Rude
c78ba0e4d5
hehe remove debugging put call
...
git-svn-id: file:///home/svn/framework3/trunk@13586 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-19 05:59:32 +00:00
David Rude
63e2b759e7
require the URI option
...
git-svn-id: file:///home/svn/framework3/trunk@13585 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-19 05:54:58 +00:00
David Rude
402ca57bb4
Adds Struts2 Remote Code Execution exploit CVE-2010-1870
...
git-svn-id: file:///home/svn/framework3/trunk@13584 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-19 05:52:09 +00:00
Patrick Webster
392684736d
Added aux module check_dir_file.
...
git-svn-id: file:///home/svn/framework3/trunk@13578 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-18 04:10:17 +00:00
Tod Beardsley
a746067089
add a reminder to deal with this and all these other unstoppable while true; do stuff; end endless run() options.
...
git-svn-id: file:///home/svn/framework3/trunk@13575 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-17 21:02:20 +00:00
Tod Beardsley
7f45ed2f8d
Fixes #5109 .
...
Fixes #5198 .
Removes the not actually required rhost (as well as other pcap-provided options that don't appear useful), fixes up the debug mode to not stacktrace when parsing back the recv'ed NBNS request. Thx Brandon and Steve!
git-svn-id: file:///home/svn/framework3/trunk@13574 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-17 21:00:10 +00:00
Wei Chen
2a62ac35ac
Fix bug #5267
...
git-svn-id: file:///home/svn/framework3/trunk@13573 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-17 06:14:51 +00:00
David Rude
41f4677dae
Convert the table to CSV
...
git-svn-id: file:///home/svn/framework3/trunk@13568 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-15 17:48:42 +00:00
Wei Chen
83dd71c905
Add MySQL hashdump auxiliary module
...
git-svn-id: file:///home/svn/framework3/trunk@13567 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-15 16:28:31 +00:00
Wei Chen
6c58dad979
ugh, why the extra spaces
...
git-svn-id: file:///home/svn/framework3/trunk@13566 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-15 15:34:49 +00:00
Wei Chen
eaa5cf6b5d
Use heaplib on IE 8, allow obfuscation as an option
...
git-svn-id: file:///home/svn/framework3/trunk@13565 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-15 15:32:17 +00:00
Wei Chen
278cb5d46e
Fix indents, spaces, and stuff
...
git-svn-id: file:///home/svn/framework3/trunk@13564 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-15 15:21:11 +00:00
Wei Chen
dd56f976f4
Fix indents
...
git-svn-id: file:///home/svn/framework3/trunk@13563 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-15 15:12:55 +00:00
David Rude
1823f20a50
Add apache_userdir_enum aux module
...
git-svn-id: file:///home/svn/framework3/trunk@13562 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-15 05:56:55 +00:00
David Rude
b39503343e
Add pop3_login aux module
...
git-svn-id: file:///home/svn/framework3/trunk@13561 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-15 05:51:59 +00:00
Chao Mu
c77dfcc48e
fixes #5232 Add DLL definition for crypt32. I removed a custom add too
...
git-svn-id: file:///home/svn/framework3/trunk@13560 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-14 21:08:55 +00:00
Wei Chen
20df63a94e
enum_pci_devices.rb is now enum_devices.rb because it enums more than just PCI info
...
git-svn-id: file:///home/svn/framework3/trunk@13559 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-14 00:36:06 +00:00
Wei Chen
ca569ef26f
Apply changes to enum more items
...
git-svn-id: file:///home/svn/framework3/trunk@13558 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-14 00:34:03 +00:00
HD Moore
8b72de1af6
Cosmetic
...
git-svn-id: file:///home/svn/framework3/trunk@13557 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-13 16:51:49 +00:00
Wei Chen
55d60a1af2
Allow JavaScript obfuscation as an option
...
git-svn-id: file:///home/svn/framework3/trunk@13556 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-13 02:28:49 +00:00
Wei Chen
c29a4d5ea3
Specify UUID offset for the custom .Net binary
...
git-svn-id: file:///home/svn/framework3/trunk@13555 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-13 02:15:05 +00:00
Wei Chen
f8bf910fbb
missing var
...
git-svn-id: file:///home/svn/framework3/trunk@13554 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-13 02:05:08 +00:00
Wei Chen
8bf7a9990b
Improve javascript obfuscation, and allow it as an option
...
git-svn-id: file:///home/svn/framework3/trunk@13553 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-12 23:03:11 +00:00
Wei Chen
20f4280d9f
Exploit is much more reliable than before, it gets a promotion
...
git-svn-id: file:///home/svn/framework3/trunk@13549 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-12 19:17:23 +00:00
Wei Chen
bfc59e4c62
Add MS10-026 exploit
...
git-svn-id: file:///home/svn/framework3/trunk@13547 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-12 19:04:25 +00:00
David Rude
41c8f5c3a1
fix up the web_pii module
...
git-svn-id: file:///home/svn/framework3/trunk@13541 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-12 02:17:07 +00:00
David Rude
d9bd7daed6
Add Wills Email PII module
...
git-svn-id: file:///home/svn/framework3/trunk@13540 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-12 02:14:30 +00:00
David Rude
fe975d196f
add Web PII VSploit module
...
git-svn-id: file:///home/svn/framework3/trunk@13538 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 23:45:43 +00:00
Wei Chen
3b04e7bd9e
Add routine to check target before exploiting it
...
git-svn-id: file:///home/svn/framework3/trunk@13535 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 23:05:45 +00:00
Wei Chen
0d9908435a
Allow JavaScript obfuscation as an option
...
git-svn-id: file:///home/svn/framework3/trunk@13533 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 22:18:25 +00:00
James Lee
6f5961db52
don't dump a stack trace when it's a normal encoding failure.
...
git-svn-id: file:///home/svn/framework3/trunk@13532 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 21:29:53 +00:00
Wei Chen
456aeeb90b
Allow JavaScript obfuscation as an option
...
git-svn-id: file:///home/svn/framework3/trunk@13530 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 18:47:21 +00:00
David Rude
a1fdb3063f
move credential collection modules to the new dir structure
...
git-svn-id: file:///home/svn/framework3/trunk@13529 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 18:18:48 +00:00
David Rude
ce9f5d8798
Fix a missing comma
...
git-svn-id: file:///home/svn/framework3/trunk@13528 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 18:14:13 +00:00
David Rude
64d7721ae5
Add VSploit modules and general directory structure
...
git-svn-id: file:///home/svn/framework3/trunk@13527 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 17:43:51 +00:00
David Rude
1c008f3996
Add Meebo Notifier Password Collection post module by silent_dream
...
git-svn-id: file:///home/svn/framework3/trunk@13526 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 17:06:56 +00:00
Wei Chen
4ac431948a
Allow JavaScript obfuscation as an option
...
git-svn-id: file:///home/svn/framework3/trunk@13524 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 15:50:43 +00:00
Wei Chen
a1526e86b8
Use heaplib to spray, and use obfuscation as an option
...
git-svn-id: file:///home/svn/framework3/trunk@13523 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 15:25:14 +00:00
Steve Tornio
a6a444930e
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@13522 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 11:17:30 +00:00
Wei Chen
950a4215a0
Fix a problem where resp.index() might return nil
...
git-svn-id: file:///home/svn/framework3/trunk@13521 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 09:03:19 +00:00
Wei Chen
6a89cf5859
Add TeeChart Professional ActiveX exploit
...
git-svn-id: file:///home/svn/framework3/trunk@13520 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 08:41:30 +00:00
Matt Weeks
dad6103944
Fix documentation to match change; will only affect windows.
...
git-svn-id: file:///home/svn/framework3/trunk@13519 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 03:05:58 +00:00
Matt Weeks
f12742a05f
Better cleanup for PXE attacks.
...
git-svn-id: file:///home/svn/framework3/trunk@13518 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-11 02:57:02 +00:00
Wei Chen
58198f37ba
Fix reference link
...
git-svn-id: file:///home/svn/framework3/trunk@13513 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 18:58:20 +00:00
James Lee
ad941c67ad
move the password-stealing modules into their own directory
...
git-svn-id: file:///home/svn/framework3/trunk@13512 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 17:48:30 +00:00
James Lee
b6f845ee91
UserAgent is already an advanced option, and that's already the default
...
git-svn-id: file:///home/svn/framework3/trunk@13511 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 17:30:30 +00:00
James Lee
4ba46cb565
get_once returns nil if the timeout hits, don't break in that case
...
git-svn-id: file:///home/svn/framework3/trunk@13510 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 17:28:18 +00:00
James Lee
825a2747c1
remove unnecessary dup, unused var
...
git-svn-id: file:///home/svn/framework3/trunk@13509 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 17:27:09 +00:00
Wei Chen
8dc4228ee0
Fix very minor typo
...
git-svn-id: file:///home/svn/framework3/trunk@13508 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 17:05:49 +00:00
Wei Chen
3b1769d621
Add Mozilla Firefox 3.6.16 mChannel Use After Free exploit by Rh0
...
git-svn-id: file:///home/svn/framework3/trunk@13507 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 05:58:02 +00:00
Steve Tornio
28177fd255
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@13505 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 02:54:56 +00:00
Wei Chen
89bc8ce10a
Apply patch by David Maloney
...
git-svn-id: file:///home/svn/framework3/trunk@13504 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-10 01:42:59 +00:00
James Lee
9564d33c44
add proper require, fixes startup errors
...
git-svn-id: file:///home/svn/framework3/trunk@13501 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-09 19:24:37 +00:00
James Lee
ca14e50290
fix syntax errors in 1.9+ Ruby is not python.
...
git-svn-id: file:///home/svn/framework3/trunk@13500 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-09 19:21:33 +00:00
David Rude
b17248c911
Add forensic modules from Wesley McGrew
...
git-svn-id: file:///home/svn/framework3/trunk@13499 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-09 16:49:12 +00:00
amaloteaux
377c987c1d
report hashes captured by htp_ntlm server
...
git-svn-id: file:///home/svn/framework3/trunk@13496 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-06 14:50:15 +00:00
Matt Weeks
b2733c04db
More PXE dust for extra magic!
...
git-svn-id: file:///home/svn/framework3/trunk@13493 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-05 17:10:27 +00:00
Carlos Perez
5dc78a8b00
Made SETPASS and advanced option
...
git-svn-id: file:///home/svn/framework3/trunk@13492 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-04 23:34:40 +00:00
Carlos Perez
3982cf51b4
run_as Post Module by Keith Faber
...
git-svn-id: file:///home/svn/framework3/trunk@13491 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-04 23:29:43 +00:00
Carlos Perez
f8d50b7705
Applied and tested patch from Thomas Ring in bug 5206
...
git-svn-id: file:///home/svn/framework3/trunk@13490 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-04 22:55:06 +00:00
HD Moore
f1afbacb2a
Cron'd
...
git-svn-id: file:///home/svn/framework3/trunk@13485 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-04 17:36:01 +00:00
HD Moore
842bfdebe8
Lets just leave this here (insurance against my laptop melting down between now and tomorrow morning). Nothing to see here, move along ;)
...
git-svn-id: file:///home/svn/framework3/trunk@13483 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-03 22:58:55 +00:00
Carlos Perez
dca3aa9d6a
Remove null bytes from passwords returned
...
git-svn-id: file:///home/svn/framework3/trunk@13478 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-03 00:48:35 +00:00
Wei Chen
1373d1043d
Indent level fix
...
git-svn-id: file:///home/svn/framework3/trunk@13477 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-02 22:42:26 +00:00
Wei Chen
5db12c65eb
Avoid trying to decode empty passwords
...
git-svn-id: file:///home/svn/framework3/trunk@13476 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-02 21:46:51 +00:00
Wei Chen
e231ac7681
Name change
...
git-svn-id: file:///home/svn/framework3/trunk@13474 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-02 21:35:06 +00:00
HD Moore
f3e4c860a7
Slow down a little bit to prevent packet loss
...
git-svn-id: file:///home/svn/framework3/trunk@13468 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-02 00:47:51 +00:00
Wei Chen
a0168d59a8
Minor fix to comply with the 100 columns per line guideline
...
git-svn-id: file:///home/svn/framework3/trunk@13467 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-01 21:20:29 +00:00
David Rude
bee7fba3c8
Small typo fix and some minor formatting
...
git-svn-id: file:///home/svn/framework3/trunk@13466 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-01 19:34:01 +00:00
David Rude
118ca372b3
adding CA Arcserve D2D GWT Credential Information Disclosure module
...
git-svn-id: file:///home/svn/framework3/trunk@13465 4d416f70-5f16-0410-b530-b9f4589650da
2011-08-01 14:40:52 +00:00
Wei Chen
1b326839c9
Consistent naming style
...
git-svn-id: file:///home/svn/framework3/trunk@13456 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 19:16:00 +00:00
Wei Chen
2078b874af
Wrong order. Should check nil first, and then ""
...
git-svn-id: file:///home/svn/framework3/trunk@13454 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 19:02:40 +00:00
Wei Chen
c59a51667d
return value for registry_enumkeys() should be checked
...
git-svn-id: file:///home/svn/framework3/trunk@13453 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:55:38 +00:00
Wei Chen
9d1bcc2cb2
return value from registry_enumkeys should be checked
...
git-svn-id: file:///home/svn/framework3/trunk@13452 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:52:19 +00:00
Wei Chen
50c9bc83cf
Name change
...
git-svn-id: file:///home/svn/framework3/trunk@13451 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:47:11 +00:00
HD Moore
ea2326fc3c
Get the actual order right
...
git-svn-id: file:///home/svn/framework3/trunk@13450 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:28:46 +00:00
HD Moore
a4b343e00b
Delete nil returns, prevent stack traces
...
git-svn-id: file:///home/svn/framework3/trunk@13448 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 18:21:23 +00:00
Wei Chen
730e41263f
Consistent naming
...
git-svn-id: file:///home/svn/framework3/trunk@13445 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 06:17:00 +00:00
Wei Chen
14dfc34930
This time should fix the issue with ruby 1.8 vs 1.9
...
git-svn-id: file:///home/svn/framework3/trunk@13444 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 05:40:08 +00:00
Wei Chen
7ff785f886
syntax change to make ruby 1.8 and 1.9 happy
...
git-svn-id: file:///home/svn/framework3/trunk@13443 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 05:05:26 +00:00
James Lee
021fa0d8cb
missed a line in the conversion to packetfu, see #5038
...
git-svn-id: file:///home/svn/framework3/trunk@13442 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-31 04:41:17 +00:00
HD Moore
a5e63c2ca9
Grab the instance from the query vs the ping (via TheLightCosine)
...
git-svn-id: file:///home/svn/framework3/trunk@13435 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 21:20:57 +00:00
HD Moore
c216219573
Add mssql_ping back in
...
git-svn-id: file:///home/svn/framework3/trunk@13434 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 21:11:53 +00:00
HD Moore
e916e06b6e
Closes #5142 by merging (with some small changes)
...
git-svn-id: file:///home/svn/framework3/trunk@13433 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 21:07:22 +00:00
James Lee
2b912e3b4a
add rob and cg's awesome smartlocker (now known as lockout_keylogger) as a post module, fixes #5105
...
git-svn-id: file:///home/svn/framework3/trunk@13429 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 18:50:24 +00:00
HD Moore
1fb64f099d
Typo
...
git-svn-id: file:///home/svn/framework3/trunk@13427 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 18:23:52 +00:00
Carlos Perez
e121e13083
pulled until post core can be re-worked for multi sessions
...
git-svn-id: file:///home/svn/framework3/trunk@13425 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 15:29:39 +00:00
Carlos Perez
49fb90b835
Service enumeration module by Keith Faber
...
git-svn-id: file:///home/svn/framework3/trunk@13423 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-30 15:11:52 +00:00
Tod Beardsley
486241cc99
SSH scanners shouldn't die just because they're on Windows and they try to talk to reserved addresses.
...
git-svn-id: file:///home/svn/framework3/trunk@13407 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 15:51:11 +00:00
Wei Chen
973c6fdfc7
Change where print_good() is used.
...
git-svn-id: file:///home/svn/framework3/trunk@13406 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 06:26:22 +00:00
Wei Chen
76ea2ea2a3
That was weird. Id didn't set. Trying again.
...
git-svn-id: file:///home/svn/framework3/trunk@13403 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 02:31:18 +00:00
Wei Chen
9f80b8d862
These modules forgot to do svn propset
...
git-svn-id: file:///home/svn/framework3/trunk@13402 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 02:28:46 +00:00
Wei Chen
a64e223062
Indentation fix, and svn propset
...
git-svn-id: file:///home/svn/framework3/trunk@13401 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 02:17:54 +00:00
Wei Chen
625f8c8591
Add Trillian Instant Messenger password decoder (post module)
...
git-svn-id: file:///home/svn/framework3/trunk@13400 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 02:14:59 +00:00
Wei Chen
5d38a47fc6
Indentation fix for metadata
...
git-svn-id: file:///home/svn/framework3/trunk@13399 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:29:15 +00:00
Wei Chen
b6c09d17a9
creds shouldn't have to re-initialize all the time
...
git-svn-id: file:///home/svn/framework3/trunk@13398 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:22:00 +00:00
Wei Chen
e7622da121
Better use of print_good()
...
git-svn-id: file:///home/svn/framework3/trunk@13397 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:19:33 +00:00
Wei Chen
7e01518b69
Minor indentation fix
...
git-svn-id: file:///home/svn/framework3/trunk@13396 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:18:02 +00:00
Wei Chen
c07a891476
Add Nimbuzz Instant Messenger post module
...
git-svn-id: file:///home/svn/framework3/trunk@13395 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-29 01:14:03 +00:00
James Lee
d50577066f
remove some silliness of registering UserAgent as an option since it's already an advanced option for HttpClient, make the default obvious
...
git-svn-id: file:///home/svn/framework3/trunk@13394 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 22:57:47 +00:00
Carlos Perez
1d879e39df
Added patch from thelightcosine for profile mixin
...
git-svn-id: file:///home/svn/framework3/trunk@13393 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 22:56:40 +00:00
Carlos Perez
cb4183e1dc
Check the presences of xml file for sites and for recent connections.
...
git-svn-id: file:///home/svn/framework3/trunk@13392 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 22:39:28 +00:00
Carlos Perez
bdd76a6182
Fix Typo and handling of OTR key file if not present.
...
git-svn-id: file:///home/svn/framework3/trunk@13391 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 22:38:51 +00:00
James Lee
d58d061735
complain if the given applet name is not formatted correctly, fixes #5082
...
git-svn-id: file:///home/svn/framework3/trunk@13389 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 17:46:36 +00:00
Carlos Perez
f0877e1c5b
Applied patch from lightcosine for profile mixin, minor fixes and some code standard changes
...
git-svn-id: file:///home/svn/framework3/trunk@13386 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-28 12:35:50 +00:00
Carlos Perez
f685e179cd
Do not error if time can not be obtained
...
git-svn-id: file:///home/svn/framework3/trunk@13383 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 21:31:21 +00:00
Tod Beardsley
df52bfaa4f
Ensure that we check for pcaprub before doing much anything else for those modules that actually require it. In some cases, that means moving open_pcap() up to be the first method call, in others, insert check_pcaprub_loaded first. Also removes a few cases of redundant checking (the Capture mixin does all this already anyway).
...
git-svn-id: file:///home/svn/framework3/trunk@13381 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 20:21:47 +00:00
Carlos Perez
2a6b9957d0
fixed problem with the command execution
...
git-svn-id: file:///home/svn/framework3/trunk@13377 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 19:37:43 +00:00
Jonathan Cran
78849b2837
check that pcaprub is loaded up front, before checking configuration options
...
git-svn-id: file:///home/svn/framework3/trunk@13376 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 18:53:59 +00:00
amaloteaux
61645c03f2
psnuffle : apply some corrections from hdm
...
git-svn-id: file:///home/svn/framework3/trunk@13373 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 17:56:15 +00:00
amaloteaux
08322fc7ea
smb capture: split creds.ptype from smb_net_hash to smb_netv1_hash and smb_netv2_hash
...
smb_netv1_hash correspond to netlmv1/netntlmv1 and netntlm2_session hash type
smb_netv2_hash correspond to netlmv2/netntlmv2 hash type
also removed the domain name from creds.user and added it to the pass column like this DOMAIN:NETLMHASH:NETNTLMHASH:CHALLENGE
git-svn-id: file:///home/svn/framework3/trunk@13372 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 17:53:09 +00:00
Tod Beardsley
b22ca615c7
Fixes #5038 , missed a couple mentions of Racket. Excised now for sure.
...
git-svn-id: file:///home/svn/framework3/trunk@13371 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 17:44:36 +00:00
Carlos Perez
eedc77e2ba
fixed problem where it looped when ran as system
...
git-svn-id: file:///home/svn/framework3/trunk@13370 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 15:44:29 +00:00
David Rude
5b7a8ad6a3
Fix a stack trace when loading sqlite gem
...
git-svn-id: file:///home/svn/framework3/trunk@13369 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 15:35:35 +00:00
David Rude
29335244d2
reworked some logic
...
git-svn-id: file:///home/svn/framework3/trunk@13368 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 15:12:28 +00:00
David Rude
0e2dfbaa98
Fix a typo
...
git-svn-id: file:///home/svn/framework3/trunk@13367 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 14:54:56 +00:00
Wei Chen
f3fecacc0f
Fix bug #5066
...
git-svn-id: file:///home/svn/framework3/trunk@13366 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 14:38:19 +00:00
Carlos Perez
d1c701a92a
added platform check and message for none nix systems
...
git-svn-id: file:///home/svn/framework3/trunk@13365 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 14:25:56 +00:00
Carlos Perez
3b85b2d08b
check for empty keys returning nil
...
git-svn-id: file:///home/svn/framework3/trunk@13364 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 13:51:37 +00:00
Carlos Perez
49d1bbe9d2
make sure nil is not returned for systems with no share history
...
git-svn-id: file:///home/svn/framework3/trunk@13361 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 13:14:11 +00:00
Wei Chen
41f72deee2
Add PCI devices enum post module
...
git-svn-id: file:///home/svn/framework3/trunk@13358 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 04:53:14 +00:00
Tod Beardsley
c41d60ab1b
Description clean up and a tiny bit of whitespace changes. Also changed one use of eql?() to == since that's nearly always better, says me.
...
git-svn-id: file:///home/svn/framework3/trunk@13357 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 02:39:49 +00:00
amaloteaux
95577d3b1b
smb_net_hash instead of smb_hash
...
git-svn-id: file:///home/svn/framework3/trunk@13356 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 01:49:53 +00:00
amaloteaux
2ed2bf59ed
don't need this option
...
git-svn-id: file:///home/svn/framework3/trunk@13355 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-27 01:33:35 +00:00
amaloteaux
67a3f7bd75
same for http_ntlm capture
...
git-svn-id: file:///home/svn/framework3/trunk@13354 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 23:47:40 +00:00
amaloteaux
8809182f62
smb capture : correct some minor bug and allow ntlm2_session hashes to be dumped in john and cain format has they can easily crack them too
...
git-svn-id: file:///home/svn/framework3/trunk@13353 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 23:36:45 +00:00
amaloteaux
d5ce83e136
pcapreplay: use optpath
...
git-svn-id: file:///home/svn/framework3/trunk@13345 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 20:18:24 +00:00
Wei Chen
eced6619e9
I believe I meant 'next', not 'break'
...
git-svn-id: file:///home/svn/framework3/trunk@13344 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 16:25:42 +00:00
Wei Chen
f15dc33ae6
Add store_loot feature
...
git-svn-id: file:///home/svn/framework3/trunk@13343 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 01:49:51 +00:00
Tod Beardsley
c54e18d757
Fixes #5038 . Removes all instances of Racket objects, as far as I can tell. If I missed any through my mighty grep -ril racket . statement, please reopen!
...
git-svn-id: file:///home/svn/framework3/trunk@13342 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 01:29:21 +00:00
James Lee
4135572816
i don't like giving up based on matching platform since it means we have to rewrite stuff if those APIs ever get implemented in posix, but for now it prevents stack traces
...
git-svn-id: file:///home/svn/framework3/trunk@13341 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-26 00:21:21 +00:00
Wei Chen
4793cd9aed
ugh, I gots to fix my Engrish
...
git-svn-id: file:///home/svn/framework3/trunk@13340 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-25 22:55:40 +00:00
Wei Chen
d56ba5d645
Add Ipswitch iMail user data enumeration post module
...
git-svn-id: file:///home/svn/framework3/trunk@13339 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-25 22:44:51 +00:00
Tod Beardsley
0797b585db
See #5029 . Moved these over to the unstable modules branch.
...
git-svn-id: file:///home/svn/framework3/trunk@13338 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-25 22:37:51 +00:00
David Rude
e0430ee69b
Remote the Post::File mixin its not needed
...
git-svn-id: file:///home/svn/framework3/trunk@13335 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-25 15:29:18 +00:00
Wei Chen
5fdf482a8b
Add MSB reference
...
git-svn-id: file:///home/svn/framework3/trunk@13331 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-24 19:50:56 +00:00
Wei Chen
6fc59d5287
Fill in BID reference
...
git-svn-id: file:///home/svn/framework3/trunk@13330 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-24 19:42:40 +00:00
Wei Chen
067f9bf053
Fix URL reference
...
git-svn-id: file:///home/svn/framework3/trunk@13329 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-24 19:36:37 +00:00
Wei Chen
e115e78f8d
Fix CVE
...
git-svn-id: file:///home/svn/framework3/trunk@13327 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-24 19:20:02 +00:00
Wei Chen
6bf90f884e
Fix debug mode and some extra tabs in JS
...
git-svn-id: file:///home/svn/framework3/trunk@13325 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-24 00:22:29 +00:00
Wei Chen
2ed6d1e0ac
report_auth_info() should not be used because we're not storing host IP
...
git-svn-id: file:///home/svn/framework3/trunk@13298 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 23:09:04 +00:00
Wei Chen
f47a2c7565
Format dictatorship round 2: Fix author e-mail format for all exploit modules
...
git-svn-id: file:///home/svn/framework3/trunk@13297 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 20:17:58 +00:00
Wei Chen
21aae8f749
Exercising my author e-mail format dictatorship for some of the win gather post mods
...
git-svn-id: file:///home/svn/framework3/trunk@13296 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 20:09:26 +00:00
Wei Chen
38638a2daf
Internet Download Manager password decoder by Silent Dream
...
git-svn-id: file:///home/svn/framework3/trunk@13295 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 19:55:20 +00:00
Wei Chen
410d124ec5
Change name for consistency
...
git-svn-id: file:///home/svn/framework3/trunk@13294 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 05:56:04 +00:00
Wei Chen
465f3f2739
Update metadata
...
git-svn-id: file:///home/svn/framework3/trunk@13293 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 05:45:46 +00:00
Wei Chen
320cdb40de
Fix bug #4968
...
git-svn-id: file:///home/svn/framework3/trunk@13292 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-22 04:52:31 +00:00
Chao Mu
253f656b07
fixes #4751 "New Post Module: SmartFTP Password Extraction." Brought to us by thelightcosine/David Maloney. Thank you for such a fantastic module!
...
git-svn-id: file:///home/svn/framework3/trunk@13289 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-21 21:44:58 +00:00
Steve Tornio
b930b2622f
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@13271 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-21 01:20:22 +00:00
Steve Tornio
46451acec5
add/fix some cve and osvdb refs
...
git-svn-id: file:///home/svn/framework3/trunk@13270 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-21 01:10:40 +00:00
David Rude
88125b53b8
remove stray puts
...
git-svn-id: file:///home/svn/framework3/trunk@13268 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-20 17:11:04 +00:00
Carlos Perez
86644e4941
fix typos
...
git-svn-id: file:///home/svn/framework3/trunk@13256 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-20 03:02:15 +00:00
David Rude
52c0231e3b
Add the system user in the loot
...
git-svn-id: file:///home/svn/framework3/trunk@13254 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-20 01:33:57 +00:00
Carlos Perez
059acd8f95
deregister option SESSION since it is not used and remove redundant nil default value, library already sets it as nil.
...
git-svn-id: file:///home/svn/framework3/trunk@13252 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-20 00:15:11 +00:00
HD Moore
ec6dc4641d
Consistency fix
...
git-svn-id: file:///home/svn/framework3/trunk@13251 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 23:28:09 +00:00
HD Moore
33ce5df8ca
Resolve a number of problems with the new multi modules
...
git-svn-id: file:///home/svn/framework3/trunk@13249 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 23:27:28 +00:00
James Lee
775257320d
these need to be Post to live in post/
...
git-svn-id: file:///home/svn/framework3/trunk@13248 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 23:10:47 +00:00
Carlos Perez
f544b85d47
Post module that selects the best method to safely dump hashes depending on the Windows Version, permission and role, will normalize the data returned by the lsass injection method and accounts names with none ASCII chars.
...
git-svn-id: file:///home/svn/framework3/trunk@13246 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 22:25:07 +00:00
Carlos Perez
843b03686e
Modules for executing Meterpreter commands and post modules against several sessions.
...
git-svn-id: file:///home/svn/framework3/trunk@13245 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 22:14:06 +00:00
Carlos Perez
866d250178
Fixed double output being saved
...
git-svn-id: file:///home/svn/framework3/trunk@13243 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 21:52:38 +00:00
David Rude
b96bf9754e
more logic fixes
...
git-svn-id: file:///home/svn/framework3/trunk@13240 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 21:19:34 +00:00
David Rude
a934004a2b
Fix the loop
...
git-svn-id: file:///home/svn/framework3/trunk@13239 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 21:12:44 +00:00
David Rude
bea802ea60
Fix the RPORT default
...
git-svn-id: file:///home/svn/framework3/trunk@13238 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 20:59:13 +00:00
David Rude
1fda05f128
Added SIPDroid extension enumeration module - thanks nibu
...
git-svn-id: file:///home/svn/framework3/trunk@13237 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 20:42:02 +00:00
David Rude
c066ee0a90
no need for railgun_setup
...
git-svn-id: file:///home/svn/framework3/trunk@13230 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 18:05:59 +00:00
David Rude
6e8992acaf
no need for VERBOSE using vprint_status
...
git-svn-id: file:///home/svn/framework3/trunk@13228 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 17:40:19 +00:00
David Rude
d96ac36dac
vprint_status!
...
git-svn-id: file:///home/svn/framework3/trunk@13227 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 17:38:24 +00:00
Joshua Drake
486ca773e4
unpack the bytes so that we can do proper math on them
...
git-svn-id: file:///home/svn/framework3/trunk@13226 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 17:33:02 +00:00
David Rude
b877d3c639
Added memory_grep post module and updated the GetProcessHeaps definition in railgun
...
git-svn-id: file:///home/svn/framework3/trunk@13225 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 17:06:26 +00:00
Wei Chen
25c89c2e7a
Put the short jmp in there
...
git-svn-id: file:///home/svn/framework3/trunk@13224 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 15:07:00 +00:00
HD Moore
7dbb56b38b
No longer default a target for XP systems; some obscure builds of XP Embedded SP1 have a different offset and not good way to differentiate
...
git-svn-id: file:///home/svn/framework3/trunk@13214 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-19 01:40:26 +00:00
James Lee
3c261c346f
add support for java/meterpreter/reverse_http. assuming i didn't miss any files, fixes #4946 , thanks mihi!
...
git-svn-id: file:///home/svn/framework3/trunk@13213 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 23:15:06 +00:00
Wei Chen
3ca9b51984
oops, a little mistake in the description
...
git-svn-id: file:///home/svn/framework3/trunk@13212 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 20:46:08 +00:00
Wei Chen
821e9dd68b
Updated metadata, merged code with #4923 . Thx Joff.
...
git-svn-id: file:///home/svn/framework3/trunk@13211 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 20:39:27 +00:00
HD Moore
764bb36f44
Wait a little longer for a session (5 seconds)
...
git-svn-id: file:///home/svn/framework3/trunk@13208 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 16:05:51 +00:00
HD Moore
8887fe86b8
Either the offset or the env page moves around for this exploit on some non-english systems, do not default the target for 2003 SP0
...
git-svn-id: file:///home/svn/framework3/trunk@13206 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 14:59:55 +00:00
Wei Chen
d13654740a
Update some jboss modules' metadata associated with CVE-2010-0738
...
git-svn-id: file:///home/svn/framework3/trunk@13204 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-18 05:18:25 +00:00
Wei Chen
2eeffc39fc
Add Iconics GENESIS32 GenBroker exploit by lincoln and corelanc0d3r
...
git-svn-id: file:///home/svn/framework3/trunk@13197 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 15:01:46 +00:00
Carlos Perez
f3b404b971
Misspelled variable
...
git-svn-id: file:///home/svn/framework3/trunk@13196 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-17 14:30:06 +00:00
Wei Chen
681563adc9
Fix that extra tab in the description
...
git-svn-id: file:///home/svn/framework3/trunk@13194 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-16 05:21:20 +00:00
Wei Chen
2e93ba06ba
Add HP NNM ToolBar.exe exploit aganist the OvOSLocale cookie parameter
...
git-svn-id: file:///home/svn/framework3/trunk@13193 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-16 05:14:33 +00:00
Wei Chen
86b40e894b
Make room for another exploit against ToolBar.exe
...
git-svn-id: file:///home/svn/framework3/trunk@13192 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-16 04:45:21 +00:00
James Lee
bd07523c35
send the fuzz case instead of a constant value. fixes #4939 , thanks Silent Dream for the patch
...
git-svn-id: file:///home/svn/framework3/trunk@13188 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 23:09:33 +00:00
James Lee
1d25a6d7d1
add an exploit for java's rmid and rmiregistry code-execution-by-design and supporting source. fixes #4378 , thanks mihi!
...
git-svn-id: file:///home/svn/framework3/trunk@13185 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 20:42:31 +00:00
Matt Weeks
1162aafa1e
p function causes problems with rpc.
...
git-svn-id: file:///home/svn/framework3/trunk@13184 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 18:45:05 +00:00
James Lee
c412a836ed
add VERBOSE option to all modules and vprint_* methods to use it
...
git-svn-id: file:///home/svn/framework3/trunk@13183 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-15 15:33:35 +00:00
James Lee
6c8bde17b0
works for meterpreter, too (tested with java)
...
git-svn-id: file:///home/svn/framework3/trunk@13175 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 20:29:19 +00:00
James Lee
39c20b2935
cosmetic
...
git-svn-id: file:///home/svn/framework3/trunk@13174 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 20:27:25 +00:00
James Lee
a1299f90c8
don't break if /proc/scsi/scsi doesn't exist or is unreadable
...
git-svn-id: file:///home/svn/framework3/trunk@13173 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 19:43:09 +00:00
James Lee
ccf891c788
remove superfluous junk in print_* calls
...
git-svn-id: file:///home/svn/framework3/trunk@13171 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 19:24:07 +00:00
Matt Weeks
7122ccbbd1
wscript necessary in certain contexts.
...
Also can avoid warnings in certain cases.
git-svn-id: file:///home/svn/framework3/trunk@13166 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 02:35:33 +00:00
Matt Weeks
0318379ca8
These are not necessary options; the DHCP server has reasonably intelligent defaults. Mark them as such.
...
git-svn-id: file:///home/svn/framework3/trunk@13164 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-14 02:32:28 +00:00
Tod Beardsley
b9c5835b5e
Touching up the ssh key login module to be smarter about duplicate user names, not be so chatty in its messaging to the console, deal with whitespace, and avoid storing duplicate keys when we don't need to.
...
git-svn-id: file:///home/svn/framework3/trunk@13162 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-13 20:51:18 +00:00
Carlos Perez
8e5c5e114d
Check for when reg key list is nil
...
git-svn-id: file:///home/svn/framework3/trunk@13157 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-12 21:05:44 +00:00
Tod Beardsley
dc84ee6aab
More fixups for ssh_login_pubkey and special handlers for long strings of keys.
...
git-svn-id: file:///home/svn/framework3/trunk@13156 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-12 20:58:25 +00:00
Steve Tornio
9278b0a5f5
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@13152 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-11 06:59:00 +00:00
HD Moore
90ced404b3
Updates to the jtr code, supports ruby 1.8.7 now, fixes #4908
...
git-svn-id: file:///home/svn/framework3/trunk@13149 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-11 01:07:46 +00:00
Wei Chen
94aea207d3
Remove extra tabs and spaces
...
git-svn-id: file:///home/svn/framework3/trunk@13148 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-10 21:10:45 +00:00
Wei Chen
9892eb39eb
Syntax fix
...
git-svn-id: file:///home/svn/framework3/trunk@13147 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-10 20:50:52 +00:00
Wei Chen
32a7eb0000
svn propset
...
git-svn-id: file:///home/svn/framework3/trunk@13146 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-10 19:19:00 +00:00
David Rude
7958516549
Adds Xeros Firefox nstreerange exploit
...
git-svn-id: file:///home/svn/framework3/trunk@13143 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-10 17:12:53 +00:00
Wei Chen
5b69b52ec4
"InitialAutoRunScript" is more like it
...
git-svn-id: file:///home/svn/framework3/trunk@13142 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-10 07:28:12 +00:00
Wei Chen
6448daf571
MS10-018, y u no InitialAutoRunScript
...
git-svn-id: file:///home/svn/framework3/trunk@13141 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-10 07:02:38 +00:00
Wei Chen
15f82402af
I changed my mind. The ATTEMPTS options is required.
...
git-svn-id: file:///home/svn/framework3/trunk@13137 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-09 04:10:52 +00:00
HD Moore
7754f0d8f2
This commit adds a basic "analyzer" module for creds
...
git-svn-id: file:///home/svn/framework3/trunk@13136 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-09 02:14:24 +00:00
Wei Chen
1246fd5731
Added Blue Coat Authentication Authorization Agent exploit
...
git-svn-id: file:///home/svn/framework3/trunk@13134 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-09 01:40:29 +00:00
Carlos Perez
c97971732d
cleaned up the logic and added the mods to enum_osx
...
git-svn-id: file:///home/svn/framework3/trunk@13131 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-08 20:45:56 +00:00
James Lee
ff53057965
Use consistent case for Spawn option
...
git-svn-id: file:///home/svn/framework3/trunk@13130 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-08 20:08:40 +00:00
Carlos Perez
0f7166335d
removed unused code and added comments, also improve a bit the extraction of the hashes in the case Lion is configured and integrated with AD
...
git-svn-id: file:///home/svn/framework3/trunk@13125 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-08 02:35:50 +00:00
Carlos Perez
08e8f3aba7
Improvements for dumping OSX Lion NT Hashes
...
git-svn-id: file:///home/svn/framework3/trunk@13122 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 21:28:32 +00:00
Wei Chen
a795dc7552
Added 2Wire Password Reset module by Travis
...
git-svn-id: file:///home/svn/framework3/trunk@13121 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 20:48:53 +00:00
Wei Chen
0fd6c8880e
Added DoS module for kaillera, and a new 'games' folder under windows
...
git-svn-id: file:///home/svn/framework3/trunk@13118 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 19:33:55 +00:00
Carlos Perez
4cfaa74194
Improvements and fixes for dumping OSX Lion Hashes
...
git-svn-id: file:///home/svn/framework3/trunk@13117 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 14:53:10 +00:00
Steve Tornio
94640b6bc4
add osvdb refs
...
git-svn-id: file:///home/svn/framework3/trunk@13115 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 11:54:54 +00:00
Wei Chen
47e6c4a89f
Added #4870 - MicroP .mppl buffer overflow exploit
...
git-svn-id: file:///home/svn/framework3/trunk@13114 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 06:29:37 +00:00
Carlos Perez
283537d5c6
Updated for Lion, tested against Development Gold Master
...
git-svn-id: file:///home/svn/framework3/trunk@13113 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 03:53:44 +00:00
Carlos Perez
d381682ae5
update description
...
git-svn-id: file:///home/svn/framework3/trunk@13112 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 03:51:36 +00:00
Carlos Perez
b8a232eaf5
Support for dumping OSX Lion SHA512 Salted hashes, thanks to hammackj for helping in figuring out how to parse the new format
...
git-svn-id: file:///home/svn/framework3/trunk@13111 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 03:46:33 +00:00
HD Moore
78f2525fdc
Fixes #4879 by adding a new target from bperry
...
git-svn-id: file:///home/svn/framework3/trunk@13110 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 03:33:04 +00:00
Carlos Perez
9b146c7b3e
Outlook Saved Password Enumeration Post Module by Justin Cacak
...
git-svn-id: file:///home/svn/framework3/trunk@13109 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-07 03:04:06 +00:00
Wei Chen
1058948419
Updated ROP, no more hardcoded ntdll addresses
...
git-svn-id: file:///home/svn/framework3/trunk@13106 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-06 07:22:24 +00:00
Wei Chen
7589f8d2f1
Updated target name that works against multiple systems (thx corelanc0d3r)
...
git-svn-id: file:///home/svn/framework3/trunk@13105 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-06 01:59:24 +00:00
James Lee
ba3594b7c4
don't run commands we don't need if previous commands gave us the answer. also add a check for /dev/vmnet to detect VMWare hosts
...
git-svn-id: file:///home/svn/framework3/trunk@13101 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-05 17:11:18 +00:00
HD Moore
ab4961bfa9
Timeline
...
git-svn-id: file:///home/svn/framework3/trunk@13099 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-05 05:20:47 +00:00
HD Moore
e678bb0a8e
Update the description to match the latest information
...
git-svn-id: file:///home/svn/framework3/trunk@13098 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-05 05:11:00 +00:00
HD Moore
c82063d708
Update based on feedback from mc, indicating this backdoor was in place since February 15th 2011 and likely even earlier
...
git-svn-id: file:///home/svn/framework3/trunk@13097 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-05 01:49:05 +00:00
Wei Chen
1e4dfaf6de
Change author name for dookie
...
git-svn-id: file:///home/svn/framework3/trunk@13096 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-04 22:33:47 +00:00
HD Moore
5482a59910
Exit cleanly if the shell as not valid
...
git-svn-id: file:///home/svn/framework3/trunk@13095 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-04 21:18:44 +00:00
HD Moore
bd12c8c6a9
Fix a couple small typos
...
git-svn-id: file:///home/svn/framework3/trunk@13094 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-04 21:10:30 +00:00
HD Moore
e6968c202a
A couple bug fixes to enable cmd_interact and a new module for the VSFTPD backdoor
...
git-svn-id: file:///home/svn/framework3/trunk@13093 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-04 20:09:32 +00:00
Wei Chen
2f6b89516a
Added HP Data Protector omniinet buffer overflow with opcode 20
...
git-svn-id: file:///home/svn/framework3/trunk@13092 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-04 17:02:40 +00:00
HD Moore
db6b8c3545
Probably time to fess up :)
...
git-svn-id: file:///home/svn/framework3/trunk@13088 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-02 01:09:46 +00:00
James Lee
44d7503cc1
prefix most browser autopwn output with the address of the associated client
...
git-svn-id: file:///home/svn/framework3/trunk@13086 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-01 23:50:07 +00:00
Wei Chen
dbd04d754a
Change to a better P/P/R, tested on 4 different machines. Thx fdiskyou.
...
git-svn-id: file:///home/svn/framework3/trunk@13081 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-01 22:26:12 +00:00
Mario Ceballos
b6e1c6a967
add exploit module hp_omniinet_3.rb
...
git-svn-id: file:///home/svn/framework3/trunk@13080 4d416f70-5f16-0410-b530-b9f4589650da
2011-07-01 17:07:38 +00:00
Matt Weeks
afbf445a87
Custom payload.
...
Fixes #4708
git-svn-id: file:///home/svn/framework3/trunk@13058 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-29 01:26:24 +00:00
HD Moore
9220506ba2
Merge in recent meterpreter work. These are not the commits you are looking for (more info on what all this is later this week).
...
git-svn-id: file:///home/svn/framework3/trunk@13053 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-28 21:26:43 +00:00
Wei Chen
fc33b1d20e
'\x00' isn't the same as "\x00"
...
git-svn-id: file:///home/svn/framework3/trunk@13051 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-28 19:45:51 +00:00
Wei Chen
73dc5c605b
Change ranking. Because looks like it works better than "average"
...
git-svn-id: file:///home/svn/framework3/trunk@13042 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-27 18:00:12 +00:00
Wei Chen
e6995b4912
Added ZDI-11-023 Citrix Provisioning Services bof exploit (Feature #4798 )
...
git-svn-id: file:///home/svn/framework3/trunk@13041 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-27 17:54:18 +00:00
David Rude
0107d52d5b
Adds FlashFXP FTP Password Gathering post module by thelightcosine
...
git-svn-id: file:///home/svn/framework3/trunk@13040 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-27 17:42:28 +00:00
Steve Tornio
7e02e7abd6
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@13038 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-27 11:43:54 +00:00
Joshua Drake
2e4fd81740
add CVE-2011-0657 DoS module
...
git-svn-id: file:///home/svn/framework3/trunk@13037 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-27 01:17:07 +00:00
Wei Chen
1b25cf3c43
Using SEH instead of egghunter. Verified again on Win2k3. thx to MC.
...
git-svn-id: file:///home/svn/framework3/trunk@13036 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-26 19:28:14 +00:00
Joshua Drake
bf20ace73e
totally noobd out on that one, thx
...
git-svn-id: file:///home/svn/framework3/trunk@13035 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-26 18:09:21 +00:00
Wei Chen
6325515ca7
Minor name change
...
git-svn-id: file:///home/svn/framework3/trunk@13034 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-26 16:09:53 +00:00
Wei Chen
07f415f4e0
Forgot to switch back to random paddings
...
git-svn-id: file:///home/svn/framework3/trunk@13033 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-26 16:06:39 +00:00
Joshua Drake
a29002ee2e
handle a few corner cases
...
git-svn-id: file:///home/svn/framework3/trunk@13032 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-26 06:03:23 +00:00
Wei Chen
f0e6159a35
Minor name change for the exploit
...
git-svn-id: file:///home/svn/framework3/trunk@13031 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-26 06:01:21 +00:00
Wei Chen
13b2209f3d
Added Microsoft Visio DXF File Buffer Overflow Exploit by Juan
...
git-svn-id: file:///home/svn/framework3/trunk@13030 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-26 05:59:37 +00:00
Wei Chen
0cf51f8d5a
Exploit name change. Also, this thing doesn't use seh.
...
git-svn-id: file:///home/svn/framework3/trunk@13026 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-25 14:25:45 +00:00
Steve Tornio
27eb48f650
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@13025 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-25 11:27:55 +00:00
Wei Chen
f16f850fc6
Added Siemens FactoryLink 8 csservice.exe (port 7580)
...
git-svn-id: file:///home/svn/framework3/trunk@13019 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-25 00:54:18 +00:00
David Rude
ac61cd0427
Changed from web.archive.org to classic-web.archive.org
...
git-svn-id: file:///home/svn/framework3/trunk@13018 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-24 14:43:59 +00:00
David Rude
37b7345fea
Adds Ranking and Fileformat version of the Lotus Notes LZH Exploit
...
git-svn-id: file:///home/svn/framework3/trunk@13015 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-23 15:43:54 +00:00
Steve Tornio
59943cb367
add osvdb and cve refs
...
git-svn-id: file:///home/svn/framework3/trunk@13014 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-23 12:05:09 +00:00
David Rude
7b5860d0ab
Fix a bug if the RHOST length is 15 or longer
...
git-svn-id: file:///home/svn/framework3/trunk@13013 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-23 09:58:50 +00:00
David Rude
df8bf68722
Adds Lotus Notes .lzh Autonomy Keyview Exploit
...
git-svn-id: file:///home/svn/framework3/trunk@13012 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-23 09:51:16 +00:00
Wei Chen
1223275330
Change ranking for now until we have a better solution for SP3
...
git-svn-id: file:///home/svn/framework3/trunk@13009 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-23 01:04:29 +00:00
Carlos Perez
191e783662
Fix typo
...
git-svn-id: file:///home/svn/framework3/trunk@13008 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-23 00:25:32 +00:00
Wei Chen
bd62c13fb0
Added RealWin SCADA Server DATAC Login Buffer Overflow (Feature #4787 ))
...
git-svn-id: file:///home/svn/framework3/trunk@13007 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-22 22:36:55 +00:00
Tod Beardsley
824022fde3
Adds a more universal print_error message for :abort in auth_brute.rb
...
git-svn-id: file:///home/svn/framework3/trunk@13005 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-22 20:53:51 +00:00
David Rude
d4ed8d7984
Fix the Registry mixin include
...
git-svn-id: file:///home/svn/framework3/trunk@13003 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-22 13:53:37 +00:00
David Rude
9f96f73d53
Added CoreFTP Gather Post Module from thelightcosine
...
git-svn-id: file:///home/svn/framework3/trunk@13002 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-22 12:17:14 +00:00
James Lee
57cf0b04a7
stack overflow != stack buffer overflow
...
git-svn-id: file:///home/svn/framework3/trunk@13001 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 23:27:16 +00:00
Steve Tornio
465bc8ce88
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@13000 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 22:42:53 +00:00
Mario Ceballos
a5a1f1587f
add another scada module. winlog_runtime.rb
...
git-svn-id: file:///home/svn/framework3/trunk@12999 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 21:48:30 +00:00
Wei Chen
0400a72ab0
RCA, description update, and some text randomness
...
git-svn-id: file:///home/svn/framework3/trunk@12998 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 21:08:57 +00:00
Joshua Drake
69963a45ab
Fixes #4752 - Auto-detect the windows directory and use it for subsequent requests
...
git-svn-id: file:///home/svn/framework3/trunk@12997 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 18:55:28 +00:00
Steve Tornio
03464a168e
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@12996 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 18:02:35 +00:00
David Rude
d796f523a6
Adds FactorLink vrn.exe exploit from hal
...
git-svn-id: file:///home/svn/framework3/trunk@12995 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 13:20:18 +00:00
HD Moore
e223931a46
Commit a bug fix from Yori Kvitchko
...
git-svn-id: file:///home/svn/framework3/trunk@12994 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 03:56:47 +00:00
HD Moore
18c8f8dbe2
This adds IllWill's Bitcoin waller.dat Post module
...
git-svn-id: file:///home/svn/framework3/trunk@12993 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 03:26:07 +00:00
Wei Chen
fdbc038bd0
Add BlackIce Cover Page ActiveX downloadimagefileurl exploit
...
git-svn-id: file:///home/svn/framework3/trunk@12992 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 02:51:39 +00:00
Carlos Perez
68e3691411
Change Post Mixin for Windows platform in its own separate class and minor fixes on modules and scripts
...
git-svn-id: file:///home/svn/framework3/trunk@12990 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-21 00:38:04 +00:00
Carlos Perez
ff7f68b470
Change Post Mixin for Solaris platform in its own separate class
...
git-svn-id: file:///home/svn/framework3/trunk@12988 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 23:33:59 +00:00
Carlos Perez
5d3bb04ac0
Change Post Mixin for Linux platform in its own separate class
...
git-svn-id: file:///home/svn/framework3/trunk@12985 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 23:27:57 +00:00
HD Moore
346018c321
Disable NTLMv2 Session for Windows 2000 servers
...
git-svn-id: file:///home/svn/framework3/trunk@12984 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 22:54:13 +00:00
HD Moore
846172fa1a
Split options based on shellwords, pass as a hash, this prevents commas in option values from breaking things and allows quotes to be used
...
git-svn-id: file:///home/svn/framework3/trunk@12983 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 20:54:46 +00:00
James Lee
d31dd42c69
whitespace
...
git-svn-id: file:///home/svn/framework3/trunk@12981 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 19:41:35 +00:00
Tod Beardsley
04e2eb43ef
Removing the load() line from ssh_login, just wanted it for dev.
...
git-svn-id: file:///home/svn/framework3/trunk@12980 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 19:23:00 +00:00
James Lee
399efb965f
fix missing require, add meterp to session types so it works in php/java meterp. and who knows maybe posix, too.
...
git-svn-id: file:///home/svn/framework3/trunk@12979 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 16:50:11 +00:00
Steve Tornio
8ee3bf7f54
add cve, osvdb and bugtraq id.
...
git-svn-id: file:///home/svn/framework3/trunk@12978 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 11:07:22 +00:00
HD Moore
3831e49455
See #4506 for Macro handling
...
git-svn-id: file:///home/svn/framework3/trunk@12977 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 07:23:16 +00:00
James Lee
2217a454a9
missing include, fixes stack trace when running checkvm on a physical victim machine
...
git-svn-id: file:///home/svn/framework3/trunk@12976 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 05:21:52 +00:00
Wei Chen
0b30256203
Add licensing
...
git-svn-id: file:///home/svn/framework3/trunk@12975 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 04:01:47 +00:00
Wei Chen
eff703b3ad
Add SCADA Realwin On_FC_CONNECT_FCS_a_FILE buffer overflow
...
git-svn-id: file:///home/svn/framework3/trunk@12974 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-20 00:37:13 +00:00