HD Moore
|
ad3e559ff9
|
Adds a working FTP server module
git-svn-id: file:///home/svn/framework3/trunk@6871 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-22 19:10:45 +00:00 |
|
HD Moore
|
4c4a8a764c
|
Let the XP SP0/SP1 and 2000 targets automatically run
git-svn-id: file:///home/svn/framework3/trunk@6865 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-22 12:59:08 +00:00 |
|
HD Moore
|
54fc8e70e2
|
Fixed spurious next
git-svn-id: file:///home/svn/framework3/trunk@6861 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-22 02:56:40 +00:00 |
|
HD Moore
|
ff9efe45bc
|
Fixed spurious next
git-svn-id: file:///home/svn/framework3/trunk@6860 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-22 02:48:00 +00:00 |
|
HD Moore
|
e70ac6cc19
|
Added a new set of match flags for cmd injection exploits (RequiredCmds). This reduces the number of 'bad' payloads listed for explot modules. A good example is disabling the netcat -e payloads for old Solaris exploits
git-svn-id: file:///home/svn/framework3/trunk@6854 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-21 15:20:35 +00:00 |
|
HD Moore
|
47ebd62092
|
Adds coverage for the DD-WRT web interface command execution flaw, adds two netcat -e payloads to work with it
git-svn-id: file:///home/svn/framework3/trunk@6852 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-21 12:56:42 +00:00 |
|
HD Moore
|
8ad948c127
|
Demonstrate how to send raw ethernet frames
git-svn-id: file:///home/svn/framework3/trunk@6851 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-21 10:54:24 +00:00 |
Mario Ceballos
|
4691f2b0e5
|
added exploit module netidentity_xtierrpcpipe.rb
git-svn-id: file:///home/svn/framework3/trunk@6850 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-21 01:04:48 +00:00 |
|
HD Moore
|
17d6de4247
|
Adds a reverse_tcp for metsvc
git-svn-id: file:///home/svn/framework3/trunk@6848 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-19 20:51:58 +00:00 |
James Lee
|
529ded22ae
|
reverting last commit; somebody didn't cross their fingers
git-svn-id: file:///home/svn/framework3/trunk@6847 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-19 20:48:47 +00:00 |
|
James Lee
|
c3dc1ecb55
|
reintegrate browser_autopwn into trunk; cross your fingers and hope this works
git-svn-id: file:///home/svn/framework3/trunk@6846 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-19 17:27:36 +00:00 |
|
HD Moore
|
e7eb7235a7
|
Fixes #298. Thanks Shiyee!
git-svn-id: file:///home/svn/framework3/trunk@6845 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-19 16:07:59 +00:00 |
|
HD Moore
|
309acbaa22
|
Remove extraneous comma
git-svn-id: file:///home/svn/framework3/trunk@6833 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-18 00:27:15 +00:00 |
|
HD Moore
|
282bcb4fae
|
Updated with osvdb and bid references.
git-svn-id: file:///home/svn/framework3/trunk@6832 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-18 00:15:48 +00:00 |
|
HD Moore
|
2d319e9b5b
|
Updated to work better on OS X and avoid 'script is taking too long' errors on all platforms
git-svn-id: file:///home/svn/framework3/trunk@6830 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-17 23:57:59 +00:00 |
|
HD Moore
|
99bc63b11d
|
Adds support for Mac OS X intel (use the vforkshell payloads)
git-svn-id: file:///home/svn/framework3/trunk@6828 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-17 21:28:59 +00:00 |
|
HD Moore
|
7dcc3e5e47
|
Overhaul of all modules to use racket instead of scruby/packetfu
git-svn-id: file:///home/svn/framework3/trunk@6823 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-17 20:36:40 +00:00 |
|
Mario Ceballos
|
3d3ea9788c
|
added auxiliary module login_brute.rb and oracle_default_passwords.csv.
git-svn-id: file:///home/svn/framework3/trunk@6819 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-17 14:20:22 +00:00 |
|
HD Moore
|
f8c2a203fd
|
OSVDB references updates from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@6812 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-16 16:02:24 +00:00 |
|
Mario Ceballos
|
4f88b5a5c1
|
added auxiliary module sid_brute.rb and sid.txt wordlist.
git-svn-id: file:///home/svn/framework3/trunk@6807 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-16 00:03:50 +00:00 |
Patrick Webster
|
f151ecc0ca
|
Added mirc_privmsg_server exploit module.
git-svn-id: file:///home/svn/framework3/trunk@6806 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-15 11:44:55 +00:00 |
|
Mario Ceballos
|
6005ac7c3f
|
added exploit module tns_service_name.rb. updated ora_ntlm_stealer.rb to use the new mixin.
git-svn-id: file:///home/svn/framework3/trunk@6804 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-15 03:50:45 +00:00 |
|
HD Moore
|
6624dbd5ff
|
Adds coverage for SBerry's Firefox 3.5 exploit (win32 only atm).
git-svn-id: file:///home/svn/framework3/trunk@6803 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 21:59:35 +00:00 |
|
HD Moore
|
d5a15718b5
|
Fix up AutoRunScript support (reflective had not been updated before being switched as default)
git-svn-id: file:///home/svn/framework3/trunk@6802 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 21:36:23 +00:00 |
|
Mario Ceballos
|
55356c88e1
|
added auxiliary module tnscmd.rb
git-svn-id: file:///home/svn/framework3/trunk@6800 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 16:48:56 +00:00 |
|
HD Moore
|
b018df89da
|
Some minor tweaks, looks like this module doesnt play nice with the new JS encrypter
git-svn-id: file:///home/svn/framework3/trunk@6799 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 11:59:33 +00:00 |
|
HD Moore
|
f897d1d3d5
|
Patch from jabra for enable mssql brute forcing
git-svn-id: file:///home/svn/framework3/trunk@6798 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 11:30:41 +00:00 |
|
Mario Ceballos
|
212dc2f2b0
|
addition of oracle mixin and sql client.
git-svn-id: file:///home/svn/framework3/trunk@6796 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 03:55:32 +00:00 |
|
HD Moore
|
b2a0f8adf5
|
Comment out references for now
git-svn-id: file:///home/svn/framework3/trunk@6795 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 02:42:52 +00:00 |
|
HD Moore
|
298ba64734
|
Fix the references section
git-svn-id: file:///home/svn/framework3/trunk@6794 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-14 00:25:26 +00:00 |
|
HD Moore
|
306841cc69
|
Adds coverage for the new OWC ActiveX control exploit
git-svn-id: file:///home/svn/framework3/trunk@6792 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 23:39:42 +00:00 |
|
James Lee
|
d84c87fa36
|
updated version info and disclosure date for opera_historysearch
git-svn-id: file:///home/svn/framework3/trunk@6788 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 23:12:25 +00:00 |
|
HD Moore
|
5fb316b383
|
Integrates L4teral's JS encoder/encrypter
git-svn-id: file:///home/svn/framework3/trunk@6784 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 22:17:11 +00:00 |
|
James Lee
|
3e072dd66e
|
add Opera historysearch module; works on linux, windows will come later
git-svn-id: file:///home/svn/framework3/trunk@6777 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 07:48:12 +00:00 |
|
Mario Ceballos
|
055c58b82e
|
rename module to make room for new one.
git-svn-id: file:///home/svn/framework3/trunk@6775 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 03:50:18 +00:00 |
|
HD Moore
|
6e85581e2f
|
Updates from jabra for the phishing modules
git-svn-id: file:///home/svn/framework3/trunk@6767 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-12 03:57:25 +00:00 |
kris
|
58671fd684
|
disconnect() tcp socket instead of just close()ing it
git-svn-id: file:///home/svn/framework3/trunk@6758 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-09 07:08:25 +00:00 |
|
druid
|
c846f02c79
|
Final commit of working CLSIDs
git-svn-id: file:///home/svn/framework3/trunk@6755 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-08 22:15:59 +00:00 |
|
druid
|
7a7b2df5a5
|
Updated list of working ClassIDs
git-svn-id: file:///home/svn/framework3/trunk@6754 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-08 21:34:13 +00:00 |
|
druid
|
b9e7e0b902
|
Removed some CLSIDs that didn't work
git-svn-id: file:///home/svn/framework3/trunk@6753 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-08 21:25:23 +00:00 |
|
druid
|
02f7d6b586
|
Exploit now uses a random ClassID from the list provided by the Microsoft Advisory rather than a static one (also configurable via an advanced option).
git-svn-id: file:///home/svn/framework3/trunk@6751 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-08 19:47:44 +00:00 |
|
HD Moore
|
a54b9a06ef
|
Exploit module for the new MS Video ActiveX flaw from Trancer. See more at http://www.rec-sec.com/2009/07/06/ms-directshow-msvidctl-exploit/
git-svn-id: file:///home/svn/framework3/trunk@6750 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-07 11:11:46 +00:00 |
|
Mario Ceballos
|
94b2eb1cef
|
updated to make things more reliable.
git-svn-id: file:///home/svn/framework3/trunk@6749 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-07 07:00:45 +00:00 |
|
Patrick Webster
|
50fc339988
|
Correct spelling re: RFC. Thanks to Shuyao Yu.
git-svn-id: file:///home/svn/framework3/trunk@6748 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-06 10:07:46 +00:00 |
|
Patrick Webster
|
ee09d81d49
|
Added Cisco VPN Concentrator FTP bug aux module.
git-svn-id: file:///home/svn/framework3/trunk@6747 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-06 10:05:21 +00:00 |
|
HD Moore
|
957d894336
|
Add support for the apple network status check
git-svn-id: file:///home/svn/framework3/trunk@6746 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-06 01:12:55 +00:00 |
|
HD Moore
|
48e1e5f351
|
Merge Stephen Fewer's patches to enable support for Windows 7 (fixes support for NT and 2000 as well)
git-svn-id: file:///home/svn/framework3/trunk@6744 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-05 20:24:37 +00:00 |
|
HD Moore
|
8a9675f27e
|
Switch the reflective loaders to the new default, fixes an issue in the old loader with large DLLs within some processes
git-svn-id: file:///home/svn/framework3/trunk@6743 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-05 06:23:46 +00:00 |
|
HD Moore
|
4ffd60a089
|
Move the old DLL injection payloads to a new naming convention
git-svn-id: file:///home/svn/framework3/trunk@6742 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-05 06:21:58 +00:00 |
|
James Lee
|
01953f7c16
|
improved unix cmd encoder
git-svn-id: file:///home/svn/framework3/trunk@6738 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-03 06:35:13 +00:00 |