1384ba6620
fix a typo. see #2578
...
git-svn-id: file:///home/svn/framework3/trunk@10680 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-14 18:24:56 +00:00
4ca2007d67
add ranking
...
git-svn-id: file:///home/svn/framework3/trunk@10665 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-13 03:03:24 +00:00
b11fbb67eb
oops, messed up whitespace
...
git-svn-id: file:///home/svn/framework3/trunk@10661 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-12 18:40:13 +00:00
e0e4aebcc1
fix a few stack bof vulnerability descriptions
...
git-svn-id: file:///home/svn/framework3/trunk@10660 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-12 18:39:21 +00:00
ad4064ed20
add ftp client fuzzer and exploits from corelanc0d3r!
...
git-svn-id: file:///home/svn/framework3/trunk@10658 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-12 17:31:18 +00:00
7e4f4b3791
silly whitespace tweak
...
git-svn-id: file:///home/svn/framework3/trunk@10642 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-11 19:30:57 +00:00
3e26e9ffd5
fix type in print
...
git-svn-id: file:///home/svn/framework3/trunk@10639 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-11 05:16:17 +00:00
9e6e29428a
add disclosure date
...
git-svn-id: file:///home/svn/framework3/trunk@10638 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-11 04:00:57 +00:00
8230bb6edf
update disclosure date
...
git-svn-id: file:///home/svn/framework3/trunk@10637 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-11 03:59:19 +00:00
06291bb78e
Clean up the barracuda module a bit (grammar and removal of the report_auth_info until its refactored)
...
git-svn-id: file:///home/svn/framework3/trunk@10631 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-10 17:45:30 +00:00
54133b79fd
add barracuda module from Tiago
...
git-svn-id: file:///home/svn/framework3/trunk@10627 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-10 01:42:26 +00:00
a3ad8f5061
Add a quick module for exploiting basic web cmd injection
...
git-svn-id: file:///home/svn/framework3/trunk@10624 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-09 21:32:19 +00:00
87d7368166
Next time, try a couple more test cases. :(
...
git-svn-id: file:///home/svn/framework3/trunk@10623 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-09 19:54:03 +00:00
fc755f7a7a
Fixes a bug where the return was getting ignored by each_user_pass for FTP. As a result, all usernames would get tried, instead of retiring a username once a good password was found.
...
git-svn-id: file:///home/svn/framework3/trunk@10622 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-09 19:03:49 +00:00
ae04e34cf7
fix some non-full-namespace includes
...
git-svn-id: file:///home/svn/framework3/trunk@10617 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-09 06:55:52 +00:00
ba2f6f5efa
add osvdb ref, add advisory link
...
git-svn-id: file:///home/svn/framework3/trunk@10613 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 22:59:19 +00:00
c6d2f8b550
huh?
...
git-svn-id: file:///home/svn/framework3/trunk@10612 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 22:39:58 +00:00
996dfe86db
fix egghunter reference
...
git-svn-id: file:///home/svn/framework3/trunk@10611 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 21:58:06 +00:00
dd380c0716
add nuance pdf stack bof exploit from corelan
...
git-svn-id: file:///home/svn/framework3/trunk@10610 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 21:52:43 +00:00
ede859f60e
use Msf::WindowsError, see #2214
...
git-svn-id: file:///home/svn/framework3/trunk@10607 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 19:51:50 +00:00
c2938323cc
Pretty much the same deal as r10592, but for SSH, which sometimes has similiar RST problems.
...
git-svn-id: file:///home/svn/framework3/trunk@10593 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 02:11:06 +00:00
df48b11093
Makes telnet_login a more resistant to intermittant RSTs. If a machine gives us a reset, try again with a backoff. Only after 3 retries should we give up entirely. You'd be amazed how many devices this is required for.
...
git-svn-id: file:///home/svn/framework3/trunk@10592 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 01:54:56 +00:00
b5fe64aca2
This works around a blocking problem encountered with recv_telnet(). Don't hang around trying to recv when we've already got a password prompt or a success/fail response.
...
git-svn-id: file:///home/svn/framework3/trunk@10590 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-08 00:48:24 +00:00
840824e3e8
remove unexplained binary characters
...
git-svn-id: file:///home/svn/framework3/trunk@10588 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-07 16:22:16 +00:00
bf2b4d199c
Unbreak
...
git-svn-id: file:///home/svn/framework3/trunk@10561 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-06 00:53:45 +00:00
425757a6e7
move more platform designations from target to exploit info block
...
git-svn-id: file:///home/svn/framework3/trunk@10559 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-05 23:41:17 +00:00
de159e3fe7
rename with msXX_XXX name, fix platform
...
git-svn-id: file:///home/svn/framework3/trunk@10558 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-05 23:39:14 +00:00
b36e383581
clean up exceptions a bit further
...
git-svn-id: file:///home/svn/framework3/trunk@10557 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-05 23:23:17 +00:00
7a04ce32ca
demote due to interaction requirement
...
git-svn-id: file:///home/svn/framework3/trunk@10556 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-05 23:13:04 +00:00
74db9d7fe4
demote to manual ranking due to domain requirement
...
git-svn-id: file:///home/svn/framework3/trunk@10554 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-05 19:29:10 +00:00
d2c5d62606
do not wait for WfsDelay if unable to enum printers
...
git-svn-id: file:///home/svn/framework3/trunk@10553 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-05 19:03:52 +00:00
3276451e3d
add osvdb refs
...
git-svn-id: file:///home/svn/framework3/trunk@10551 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-05 12:38:46 +00:00
dc7a9cb321
use the right bid id.
...
git-svn-id: file:///home/svn/framework3/trunk@10550 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-05 01:05:49 +00:00
739bff4fb2
remove SRVPORT option, since it is set to the default
...
git-svn-id: file:///home/svn/framework3/trunk@10548 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-04 23:52:30 +00:00
f921aca916
brightstor blah blah blah
...
git-svn-id: file:///home/svn/framework3/trunk@10547 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-04 22:00:22 +00:00
dd2d7d3864
fix fingerprint bug
...
git-svn-id: file:///home/svn/framework3/trunk@10546 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-04 20:53:51 +00:00
6f18c4a468
do not wait for WfsDelay if unable to bind
...
git-svn-id: file:///home/svn/framework3/trunk@10545 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-04 20:48:48 +00:00
df8b9f8e95
Merge in the IPv6 Teredo patch.
...
git-svn-id: file:///home/svn/framework3/trunk@10543 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-04 11:02:46 +00:00
7de96a710f
add trendmicro extsetowner exploit from Trancer
...
git-svn-id: file:///home/svn/framework3/trunk@10538 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-04 04:26:09 +00:00
c862fdd42b
add exploit module from Abhishek Lyall
...
git-svn-id: file:///home/svn/framework3/trunk@10537 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-04 03:42:58 +00:00
3d26c54bd7
preserve some more datastore bits
...
git-svn-id: file:///home/svn/framework3/trunk@10518 4d416f70-5f16-0410-b530-b9f4589650da
2010-10-01 14:06:59 +00:00
279c604015
missed a couple exe generater includes
...
git-svn-id: file:///home/svn/framework3/trunk@10504 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-28 16:19:50 +00:00
2f344fe7c8
Moving to ManualRanking since it requires user/pass
...
git-svn-id: file:///home/svn/framework3/trunk@10503 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-28 15:23:14 +00:00
ea128c6404
Mention the port when bruteforcing SMB services. Handy for noticing when you're being direct or indirect.
...
git-svn-id: file:///home/svn/framework3/trunk@10498 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-27 17:11:40 +00:00
0f65deaf72
add messagebox payload from corelanc0d3r
...
git-svn-id: file:///home/svn/framework3/trunk@10495 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-27 13:31:48 +00:00
8c1f0713db
regenerate the payload so we get the correct *lhost*
...
git-svn-id: file:///home/svn/framework3/trunk@10490 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-27 00:09:17 +00:00
4fbb0653a1
regenerate the payload so we get the correct rhost
...
git-svn-id: file:///home/svn/framework3/trunk@10488 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-26 23:55:03 +00:00
14cabd2611
Allow debugging to be enabled.
...
This will make it easier to hopefully track down bugs.
exploitme-posix.c - make complete stack executable. On some kernel versions, execstack doesn't do the trick.
git-svn-id: file:///home/svn/framework3/trunk@10485 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-26 05:58:59 +00:00
1392ef78d7
Use exit() instead of exit_group()
...
git-svn-id: file:///home/svn/framework3/trunk@10483 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-26 05:58:41 +00:00
7c1dc98456
switch logic around, add some debug/verbose prints
...
git-svn-id: file:///home/svn/framework3/trunk@10478 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-25 18:14:54 +00:00
811eb99980
free up the handler
...
git-svn-id: file:///home/svn/framework3/trunk@10477 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-25 11:59:02 +00:00
c1f934dbb4
jduck the grammar checker strikes again (thanks!)
...
git-svn-id: file:///home/svn/framework3/trunk@10476 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-25 04:54:10 +00:00
46db59c5af
Treat access denied the same as logon failure
...
git-svn-id: file:///home/svn/framework3/trunk@10474 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-25 03:30:22 +00:00
3ee6117219
Default to english, in the end, this is still the most common language pack
...
git-svn-id: file:///home/svn/framework3/trunk@10471 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-25 03:18:08 +00:00
25d18f1f1b
Quit when we get an SSL exception
...
git-svn-id: file:///home/svn/framework3/trunk@10470 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-25 03:14:21 +00:00
a9c3628a2d
make it more obvious that the connection failed, not the login. see #2682
...
git-svn-id: file:///home/svn/framework3/trunk@10467 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-24 21:45:36 +00:00
09cab24dbf
Report_note no longer tries to re-report a service name; it just re-reports port numbers and protocols. This is to avoid unidentifying identified services.
...
git-svn-id: file:///home/svn/framework3/trunk@10458 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-24 17:52:25 +00:00
748f2d3acd
Make the title consistent with other modules
...
git-svn-id: file:///home/svn/framework3/trunk@10457 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-24 16:55:38 +00:00
740e2c1ab2
Change base from 0x90040000 to 0x20040000.
...
This is more portable across kernel versions / patches it seems. This
will be better for SEGMEXEC compatibility as well.
git-svn-id: file:///home/svn/framework3/trunk@10455 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-24 04:06:28 +00:00
b8b21cd53c
handle dirs and index.html specially
...
git-svn-id: file:///home/svn/framework3/trunk@10454 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-24 01:11:05 +00:00
0001550e6d
String#to_a was removed in 1.9.2, replace with [ str ] for compat
...
git-svn-id: file:///home/svn/framework3/trunk@10448 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-23 21:17:41 +00:00
e6969ba30e
Fixed spelling mistake.
...
git-svn-id: file:///home/svn/framework3/trunk@10445 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-23 05:48:07 +00:00
3acede0f3c
fix indent
...
git-svn-id: file:///home/svn/framework3/trunk@10442 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-23 02:15:40 +00:00
d9d0f8cc03
modify to use EXE mixin, remove unused SUBJECT option
...
git-svn-id: file:///home/svn/framework3/trunk@10436 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-22 20:55:57 +00:00
aa1d8e403f
make sure the list of handler jobs is initialized in case we hit cleanup before exploits have started
...
git-svn-id: file:///home/svn/framework3/trunk@10430 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 22:43:50 +00:00
600ec0a848
add two exploits from Trancer! woot!
...
git-svn-id: file:///home/svn/framework3/trunk@10429 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 18:46:29 +00:00
3204b3ad83
Patch for the SMB timestamp parser which allows it to function in GMT+ zones
...
git-svn-id: file:///home/svn/framework3/trunk@10425 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 14:21:38 +00:00
8d45915f8c
Remove the buggy report_host
...
git-svn-id: file:///home/svn/framework3/trunk@10414 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 03:14:08 +00:00
d89004753c
Fixes #2450 by allowing any length extension
...
git-svn-id: file:///home/svn/framework3/trunk@10411 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 02:59:22 +00:00
048b21e3b9
Ensure that errors in the PHPInclude mixin lead to the service being stopped. Handle unreachable services in the php_include module better. Fix database-enabled tab completion to be workspace friendly
...
git-svn-id: file:///home/svn/framework3/trunk@10410 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 02:52:49 +00:00
a0b193f9d3
note psexec release date
...
git-svn-id: file:///home/svn/framework3/trunk@10405 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 01:50:50 +00:00
8e5cf31e9a
big exe/dll update, see #2017
...
NOTE: These changes specifically affect payload encoding via RPC, "use
payload", and msfencode
1. consolidate user-specified exe generation routine (now
Msf::Util::EXE.to_executable_fmt)
2. supported format types are now queried/checked using arrays
3. cleaned up and standardized exe option passing
4. rename data store options for EXE mixin
5. add generate_payload_exe_service for psexec/smb_relay
6. reworked default template handling in Msf::Util::EXE
a. added template search path option (not used if template includes
a path separator)
b. "fallback" flag to enable using default if specified file doesn't
exist
7. added Msf::Util::EXE.to_win64pe_dll
8. improved error messages from exe generation
git-svn-id: file:///home/svn/framework3/trunk@10404 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 00:13:30 +00:00
76b14e5db7
Invert logic for consistency
...
git-svn-id: file:///home/svn/framework3/trunk@10403 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 00:06:18 +00:00
74e5c38fe8
Make the challenge configurable via patch from troulouliou
...
git-svn-id: file:///home/svn/framework3/trunk@10402 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 00:05:08 +00:00
bd1eeb3722
rework to_jsp_war a bit, fix uses, default msfencode -t war to x86/win32
...
git-svn-id: file:///home/svn/framework3/trunk@10397 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-20 15:59:46 +00:00
4590844871
tons of indentation fixes, some other style tweaks
...
git-svn-id: file:///home/svn/framework3/trunk@10394 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-20 08:06:27 +00:00
78188beb6b
change from capture to service
...
git-svn-id: file:///home/svn/framework3/trunk@10393 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-20 08:05:50 +00:00
0149ec0253
bump exe name to 14 chars to avoid randomly smashing existing bins
...
git-svn-id: file:///home/svn/framework3/trunk@10391 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-20 05:06:51 +00:00
19db412383
convert remaining EXE generation to use the mixin, fixes #2017
...
git-svn-id: file:///home/svn/framework3/trunk@10389 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-20 04:38:13 +00:00
21d88b36c1
rename generate_exe -> generate_payload_exe
...
git-svn-id: file:///home/svn/framework3/trunk@10388 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-20 04:37:25 +00:00
e59ec467af
Quick SMB upload module for when you need to upload a file via PTH
...
git-svn-id: file:///home/svn/framework3/trunk@10387 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-20 04:03:26 +00:00
3dae16482f
Required admin creds == ManualRanking
...
git-svn-id: file:///home/svn/framework3/trunk@10384 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-20 02:56:29 +00:00
5f0cc946b1
document report_note a little better, and modify several modules to use it correctly. fixes #2568
...
git-svn-id: file:///home/svn/framework3/trunk@10377 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-19 22:25:56 +00:00
9975827d22
updated module from Thomas Ring.
...
git-svn-id: file:///home/svn/framework3/trunk@10371 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-18 23:59:28 +00:00
ad4bf32a45
Move to the SMB directory
...
git-svn-id: file:///home/svn/framework3/trunk@10370 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-18 17:56:22 +00:00
36444591b8
Fix tab indent and make exe name more unique (since its not a fully-qualified path)
...
git-svn-id: file:///home/svn/framework3/trunk@10369 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-18 15:08:23 +00:00
ff22e5212e
revert to backward compatible method of using utc+zone
...
git-svn-id: file:///home/svn/framework3/trunk@10367 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-18 05:09:47 +00:00
e939379b1b
Fix missing end, use explicit Timeout class
...
git-svn-id: file:///home/svn/framework3/trunk@10366 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-18 04:15:32 +00:00
b023d89469
Wrap SSH and Telnet version checkers in a timeout, or else they sometimes hang forever.
...
git-svn-id: file:///home/svn/framework3/trunk@10365 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-18 03:00:19 +00:00
3cf8dea0c6
add exploit for cve-2010-2729, finally
...
git-svn-id: file:///home/svn/framework3/trunk@10363 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-18 01:17:59 +00:00
5e2295a9a8
Add in an aux module to create a socks4 proxy server. If you add in a route via a meterpreter session to the framework routing table the proxy server will use that route where appropriate. (Also modified the servers opts hash to optionally take a 'Comm' param if you want to programmatically create a socks4 server which will always use a specific meterpreter session for all socket creation - by default this does not happen and it uses the rex socket switchboard as per normal rex socket creation).
...
git-svn-id: file:///home/svn/framework3/trunk@10337 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-16 18:23:03 +00:00
9dae361383
typo fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10332 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-16 16:23:46 +00:00
9d3bafce12
Do not automatically run the Lyris module
...
git-svn-id: file:///home/svn/framework3/trunk@10326 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-15 18:21:14 +00:00
8cf8fe9436
Making postgres_version more subdued in its successful fingerprint reporting with print_status instead of print_good, since other fingerprinting modules use print_status for the most part.
...
git-svn-id: file:///home/svn/framework3/trunk@10313 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-14 14:43:56 +00:00
d8fb8e5c49
merge in another posix meterpreter update from philip, see #2418
...
git-svn-id: file:///home/svn/framework3/trunk@10307 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-13 14:44:00 +00:00
bceca3832b
add osvdb ref
...
git-svn-id: file:///home/svn/framework3/trunk@10284 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-10 12:18:27 +00:00
7d3e892ad3
lol, how did those lines survive
...
git-svn-id: file:///home/svn/framework3/trunk@10283 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-10 06:37:41 +00:00
2d145aef6a
add exploit for Integard from the Corelan Team
...
git-svn-id: file:///home/svn/framework3/trunk@10281 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-09 23:33:28 +00:00
5250ff20bb
add svn:keywords, increase ranking, add browser version
...
git-svn-id: file:///home/svn/framework3/trunk@10280 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-09 23:23:40 +00:00
66c428988f
support exploit vista/7, still only 9.x tho
...
git-svn-id: file:///home/svn/framework3/trunk@10279 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-09 22:49:31 +00:00
James Lee
Joshua Drake
HD Moore
Tod Beardsley
Steve Tornio
Mario Ceballos
Stephen Fewer
pks
Patrick Webster