Commit Graph

288 Commits (b99a9e5075f6505d3b67a8dd9a043f91e3900b47)

Author SHA1 Message Date
bmc ca315abe1b * add uri-encoding as an evasion method (though, exploits could hard code it if they need to...)
git-svn-id: file:///home/svn/incoming/trunk@3516 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:10 +00:00
bmc 32dfdc114c * allow a request to pass a timeout (and by allowing passing a timeout, the ability to not parse the response)
git-svn-id: file:///home/svn/incoming/trunk@3511 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:22:47 +00:00
HD Moore 5b497d5e4d Added Irix platform
Tweaked reverse.rb to use a subshell and background it
Added Irix lpdexec


git-svn-id: file:///home/svn/incoming/trunk@3505 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 18:10:08 +00:00
vlad902 3acdd81b9e metasploit -> mozilla
git-svn-id: file:///home/svn/incoming/trunk@3504 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-05 01:56:34 +00:00
HD Moore 868d7bf561 Working findtag + samba
Removed call to evasions that didnt have corresponding definition


git-svn-id: file:///home/svn/incoming/trunk@3501 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-04 21:04:50 +00:00
bmc 40961655d6 * enable evasions on the socket as they come in
git-svn-id: file:///home/svn/incoming/trunk@3498 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:56:50 +00:00
bmc 3adb2211b8 * add tcp segment size evasion
* add tcp write delay evasion


git-svn-id: file:///home/svn/incoming/trunk@3497 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-03 19:55:56 +00:00
bmc 620dfad4a9 gee, these were not cut and paste targets...
git-svn-id: file:///home/svn/incoming/trunk@3490 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:33:49 +00:00
bmc 2f2790386f providing the XDR alias is important...
git-svn-id: file:///home/svn/incoming/trunk@3489 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-01 22:31:28 +00:00
bmc d4d73114c1 * add the following evasions for attacks against HTTP servers:
HTTP::chunked
    HTTP::header_folding
    HTTP::junk_headers
    HTTP::junk_slashes
    HTTP::junk_directories
    HTTP::junk_params
    HTTP::junk_self_referring_directories
    HTTP::junk_pipeline

* add the following evasions for attacks against HTTP clients:
    HTTP::junk_headers
    HTTP::compression (was gzip)

* added an exploit mixin for HTML based attacks with HTML based evasions.  eg: aim_goaway.rb
    HTML::unicode
    HTML::javascript::base64
    HTML::javascript::escape


git-svn-id: file:///home/svn/incoming/trunk@3458 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 22:02:35 +00:00
HD Moore b4ad4a5d75 Tabs vs Spaces
git-svn-id: file:///home/svn/incoming/trunk@3453 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 05:33:08 +00:00
bmc 7f9baa9744 * update OptEnum so that desc displays the valid options, less duplication of data
* add OptEnum to the test suite


git-svn-id: file:///home/svn/incoming/trunk@3442 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-25 19:15:09 +00:00
HD Moore bdfd2c5152 Recon modules and the recon event subsystem have been temporarily removed.
The 'auxiliary' system is designed to replace it and recon features will
slowly be moved back into the framework


git-svn-id: file:///home/svn/incoming/trunk@3438 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-24 03:59:44 +00:00
HD Moore 9dc316e932 Updated license
git-svn-id: file:///home/svn/incoming/trunk@3429 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-22 19:28:05 +00:00
HD Moore f485585e7c License information displayed by info
git-svn-id: file:///home/svn/incoming/trunk@3428 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-22 19:25:55 +00:00
HD Moore 1bffccf605 New licensing terms, revision bump to v3
git-svn-id: file:///home/svn/incoming/trunk@3425 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 22:10:20 +00:00
vlad902 0d2fab2f27 Support for SunRPC
git-svn-id: file:///home/svn/incoming/trunk@3422 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 02:45:07 +00:00
vlad902 126c71d25a Basic sunrpc interface
git-svn-id: file:///home/svn/incoming/trunk@3421 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-21 02:44:54 +00:00
HD Moore 737a1cb711 Pass socket context to child sockets from server, pass context from http mixin to socket
git-svn-id: file:///home/svn/incoming/trunk@3402 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:35:44 +00:00
HD Moore e02eb0d2eb Fixed to NOP vs Nop, Encoder vs ENCODER, setting the preferred NOP
Fixed multiple CPU spinning bugs in the alpha2 encoders
Fixed SiteReference to expose site type and value


git-svn-id: file:///home/svn/incoming/trunk@3401 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 04:09:40 +00:00
Matt Miller ba0b13292b support for preferred nop
git-svn-id: file:///home/svn/incoming/trunk@3399 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-17 01:11:26 +00:00
HD Moore de9452dc34 Enum fix
git-svn-id: file:///home/svn/incoming/trunk@3396 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 23:32:51 +00:00
HD Moore 374f7f0c11 Added Enum
git-svn-id: file:///home/svn/incoming/trunk@3395 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 23:30:59 +00:00
Matt Miller ef8e171e2a fix clearing user defined options to work correctly
git-svn-id: file:///home/svn/incoming/trunk@3389 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 16:11:32 +00:00
HD Moore 64f86f88aa alpha-2
git-svn-id: file:///home/svn/incoming/trunk@3388 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 04:32:30 +00:00
Matt Miller f1596d0d26 fix for obscure ruby thing
git-svn-id: file:///home/svn/incoming/trunk@3380 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 03:56:08 +00:00
HD Moore 08027a53c7 Added HPUX, defined licensing in COPYING
git-svn-id: file:///home/svn/incoming/trunk@3378 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 03:36:43 +00:00
Matt Miller 2e19a86843 added license to all modules
git-svn-id: file:///home/svn/incoming/trunk@3377 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-16 02:59:47 +00:00
HD Moore 884fffa28c Ported the unix revers command payloads and handler
git-svn-id: file:///home/svn/incoming/trunk@3372 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-14 20:12:53 +00:00
Matt Miller c81e6a799d properly pass encoder selection on to payload encoder
git-svn-id: file:///home/svn/incoming/trunk@3367 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-11 18:16:33 +00:00
Matt Miller 79e055c7fd fix termination of bind handler thread
git-svn-id: file:///home/svn/incoming/trunk@3349 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-08 19:49:14 +00:00
Matt Miller 60abf5cff5 fix for compat matching with one side set and one side not
git-svn-id: file:///home/svn/incoming/trunk@3343 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-08 03:19:11 +00:00
Matt Miller 8e72f20095 better support for random uri base in px
git-svn-id: file:///home/svn/incoming/trunk@3331 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 20:11:21 +00:00
Matt Miller b6395069ee fixed a few bugs for px
git-svn-id: file:///home/svn/incoming/trunk@3323 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 18:59:04 +00:00
Matt Miller ae5c816e85 various enhancements to support passivex, seems to be functional, somewhat
git-svn-id: file:///home/svn/incoming/trunk@3322 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-07 10:04:30 +00:00
Matt Miller 7a24c3556c to_native
git-svn-id: file:///home/svn/incoming/trunk@3320 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 15:35:06 +00:00
Matt Miller 237af88317 update to encoder and exploit classes to support target/exploit specific encoder type/encoder options
git-svn-id: file:///home/svn/incoming/trunk@3315 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 02:25:47 +00:00
Matt Miller f9d058887b initial import of alpha2 from pusscat
git-svn-id: file:///home/svn/incoming/trunk@3313 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-06 00:57:14 +00:00
HD Moore 8049b32cbc Patches from <anon>
git-svn-id: file:///home/svn/incoming/trunk@3310 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-05 22:20:28 +00:00
HD Moore d0c8775f56 Adds a new 'evasion' option type
git-svn-id: file:///home/svn/incoming/trunk@3309 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-05 03:57:12 +00:00
Matt Miller a590caaf77 fix for merging compat options and for mirroring Payload->Compat with Compat->Payload
git-svn-id: file:///home/svn/incoming/trunk@3304 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-03 04:43:40 +00:00
Matt Miller e63ba080a8 added support for use_gzip
git-svn-id: file:///home/svn/incoming/trunk@3303 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-03 04:24:03 +00:00
HD Moore 96d4591b87 Updates to httpserver mixin, gzip encoding added to text, bugfix to wordstar, added metafile exploit, will rename and make it nice later
git-svn-id: file:///home/svn/incoming/trunk@3299 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-02 07:49:52 +00:00
HD Moore 9fc93bbe56 Miscellaneous fixes, changes to CMD payloads
git-svn-id: file:///home/svn/incoming/trunk@3296 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-02 01:12:36 +00:00
Matt Miller 09d21fbced remove puts
git-svn-id: file:///home/svn/incoming/trunk@3295 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-01 22:26:18 +00:00
Matt Miller 6bbc5f7e17 remove all non-user defined datastore params when switching payloads
git-svn-id: file:///home/svn/incoming/trunk@3293 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 20:26:17 +00:00
HD Moore 8de634c25f timing fixes
git-svn-id: file:///home/svn/incoming/trunk@3292 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 19:49:12 +00:00
Matt Miller f2002f32d2 restore original buffer when init_state is called since encoders might modify it
git-svn-id: file:///home/svn/incoming/trunk@3290 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:47:53 +00:00
Matt Miller 00d15f8f1d reinitializing counters
git-svn-id: file:///home/svn/incoming/trunk@3289 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:26:34 +00:00
Matt Miller e9318c64d7 catch all exceptions
git-svn-id: file:///home/svn/incoming/trunk@3288 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-31 18:23:30 +00:00