Commit Graph

267 Commits (b9bdd96f9771e0c317d76fb010f070cfa9f95d42)

Author SHA1 Message Date
Matt Miller 8d7e729261 fix for platform problem
git-svn-id: file:///home/svn/incoming/trunk@3221 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:37:19 +00:00
HD Moore e79c9f8658 Something is still breaking, use w3who, show payloads, exploit, breaks
git-svn-id: file:///home/svn/incoming/trunk@3218 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-14 00:21:23 +00:00
HD Moore 557153e01c Code from Brian Caswell
git-svn-id: file:///home/svn/incoming/trunk@3210 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-13 06:08:40 +00:00
Matt Miller 22278ce458 vncinject payload
git-svn-id: file:///home/svn/incoming/trunk@3201 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-12 07:07:19 +00:00
HD Moore b9638a7aa2 Removed debugging line
git-svn-id: file:///home/svn/incoming/trunk@3199 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-09 05:23:53 +00:00
Matt Miller be449c54a5 stagers stat works
git-svn-id: file:///home/svn/incoming/trunk@3183 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-06 19:37:59 +00:00
HD Moore 6c2da4d313 Imap exploits
Addition of MC as a common author
Added the IMAP mixin
Fixed bug in base64


git-svn-id: file:///home/svn/incoming/trunk@3172 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-05 05:00:27 +00:00
HD Moore 9b977bee1b Fixed some authors
git-svn-id: file:///home/svn/incoming/trunk@3163 4d416f70-5f16-0410-b530-b9f4589650da
2005-12-02 01:18:51 +00:00
HD Moore 4d43e8f482 mnor
git-svn-id: file:///home/svn/incoming/trunk@3159 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-29 02:57:04 +00:00
Matt Miller ebf9cf5c48 add none to default
git-svn-id: file:///home/svn/incoming/trunk@3158 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-29 02:43:20 +00:00
Matt Miller a2df616bd4 devguide samples
git-svn-id: file:///home/svn/incoming/trunk@3154 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 23:49:48 +00:00
Matt Miller 5a42b1d86b msfd fixes
git-svn-id: file:///home/svn/incoming/trunk@3150 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 20:41:11 +00:00
Matt Miller 5bb104c993 msfd
git-svn-id: file:///home/svn/incoming/trunk@3146 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 16:36:06 +00:00
Matt Miller d99f972357 changes to comments
git-svn-id: file:///home/svn/incoming/trunk@3144 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-28 12:40:13 +00:00
HD Moore 9340ecdeab IIS exploits ported
Added on_new_session callback and session_created? flag to exploit
Fixed socket fd leak in Comm::Local


git-svn-id: file:///home/svn/incoming/trunk@3135 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-27 18:42:44 +00:00
HD Moore 7624b4d78a Bug fixes for alphanum vs alphanumeric
Added some target print code to the brightstor explotis
Added the backupexec epxloits


git-svn-id: file:///home/svn/incoming/trunk@3132 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-27 01:51:50 +00:00
HD Moore 40aa62968f Arkeia exploits added
git-svn-id: file:///home/svn/incoming/trunk@3129 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 19:56:03 +00:00
HD Moore f4d6a11fd7 Mixins
git-svn-id: file:///home/svn/incoming/trunk@3123 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 11:16:50 +00:00
HD Moore 7403e8bf23 Mssql code!
git-svn-id: file:///home/svn/incoming/trunk@3122 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 11:16:36 +00:00
HD Moore 9bf0d901cf Added the egghunter mixin
Consolidated all unicode routines to go through Rex::Text.to_unicode()
Added a new function for sending evil blobs through smb


git-svn-id: file:///home/svn/incoming/trunk@3114 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 02:34:39 +00:00
HD Moore fb8b56f55f Changed up the way mixins are handled, all exploits just require 'msf/core' and
all current mixins will be loaded. Egghunter was moved to a mixin and generates
based on target arch and platform.


git-svn-id: file:///home/svn/incoming/trunk@3111 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-26 00:04:26 +00:00
HD Moore fb47661a8f Serv-U exploit working, depends on searcher() in x86, many fixes to FTP mixin
git-svn-id: file:///home/svn/incoming/trunk@3103 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-25 20:02:21 +00:00
Matt Miller 6c4703add7 fix generation stuff
git-svn-id: file:///home/svn/incoming/trunk@3093 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-25 02:07:35 +00:00
Matt Miller 04a27c3475 msfweb payload generation functional
git-svn-id: file:///home/svn/incoming/trunk@3092 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-25 01:59:54 +00:00
Matt Miller 32c471498a more msfweb action
git-svn-id: file:///home/svn/incoming/trunk@3089 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 20:41:56 +00:00
Matt Miller 88c4916967 catch IOErrors in disconnect
git-svn-id: file:///home/svn/incoming/trunk@3084 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 19:15:24 +00:00
Matt Miller 96d75dcbb4 support for aborting sockets once a remote, non-find exploit succeeds
git-svn-id: file:///home/svn/incoming/trunk@3082 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 18:50:33 +00:00
HD Moore 81a1de755b SEH frame stuff integrated into ftp modules, added generate_seh_payload
git-svn-id: file:///home/svn/incoming/trunk@3081 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 18:30:56 +00:00
HD Moore bbe464e358 Added note to TODO, reordered some functios in FTP, will change these again
once we get the socket abort stuff going


git-svn-id: file:///home/svn/incoming/trunk@3080 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 17:45:00 +00:00
Matt Miller 68e661065d more msfweb foo
git-svn-id: file:///home/svn/incoming/trunk@3077 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 05:13:40 +00:00
Matt Miller a19e98757d more hackery on msfweb
git-svn-id: file:///home/svn/incoming/trunk@3076 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 04:23:43 +00:00
Matt Miller adc09f4aa1 hacking on msfweb
git-svn-id: file:///home/svn/incoming/trunk@3069 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-24 03:31:23 +00:00
Matt Miller 2f05b6959f updated sample to support console command dispatcher registration
git-svn-id: file:///home/svn/incoming/trunk@3059 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-23 14:34:11 +00:00
Matt Miller 36f6c79986 fixed up plugins to be loadable with local input/output handles
git-svn-id: file:///home/svn/incoming/trunk@3058 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-23 14:02:30 +00:00
Matt Miller 09a41d4d5c framework plugins
git-svn-id: file:///home/svn/incoming/trunk@3053 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-19 16:25:26 +00:00
Matt Miller 0e9c5bab5b logging fix, meterpreter multi-load fixed, advanced option display, meterpreter optino to autoload stdapi
git-svn-id: file:///home/svn/incoming/trunk@3052 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-19 15:09:41 +00:00
Matt Miller cbbce06ee0 fix for multiple exploit
git-svn-id: file:///home/svn/incoming/trunk@3046 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-18 00:26:19 +00:00
Matt Miller 07328a0841 partial fix
git-svn-id: file:///home/svn/incoming/trunk@3045 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-17 23:03:53 +00:00
HD Moore 4edf57d731 ms04_011 works perfectly
updated smb, evasion can be set via SMBEvasion datastore (temporary)
added the first osx exploit, cant test for a week or so


git-svn-id: file:///home/svn/incoming/trunk@3044 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-17 19:41:54 +00:00
HD Moore ee3745ef8c More tweaks
git-svn-id: file:///home/svn/incoming/trunk@3043 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-17 04:25:30 +00:00
HD Moore 16c5e232f5 Addition of get_once() in io::stream, rewritten recv code for smb/dcerpc, error handling in exploit mixins
git-svn-id: file:///home/svn/incoming/trunk@3042 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-16 17:56:07 +00:00
HD Moore 3150bd2f3a SMB mixin is mostly working now
git-svn-id: file:///home/svn/incoming/trunk@3037 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 23:02:17 +00:00
Matt Miller 510669e7ef option normalization
git-svn-id: file:///home/svn/incoming/trunk@3035 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 21:50:10 +00:00
Matt Miller fc42fef941 exploits now pass context when creating sockets
git-svn-id: file:///home/svn/incoming/trunk@3034 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 21:25:23 +00:00
Matt Miller 5676117bff last of normalized docs from last night
git-svn-id: file:///home/svn/incoming/trunk@3030 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-15 15:11:43 +00:00
Matt Miller b89a92f28f payloads now display multiple stages
git-svn-id: file:///home/svn/incoming/trunk@3025 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-12 05:11:56 +00:00
Matt Miller eeda1d06d7 woop
git-svn-id: file:///home/svn/incoming/trunk@3023 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:49:02 +00:00
Matt Miller 2f52fc9e02 bugfix
git-svn-id: file:///home/svn/incoming/trunk@3022 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:27:57 +00:00
Matt Miller 05a84cc7da bug fixes in x86 asm, jmp call additive, payload generation, and new exploit
git-svn-id: file:///home/svn/incoming/trunk@3021 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-11 01:22:03 +00:00
Matt Miller 61456015da persistent storage work
git-svn-id: file:///home/svn/incoming/trunk@3019 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-09 03:28:21 +00:00
Matt Miller d0a66d9ec1 route integration into the ui
git-svn-id: file:///home/svn/incoming/trunk@3017 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-08 18:00:17 +00:00
Matt Miller ac9b0edf94 bug fix
git-svn-id: file:///home/svn/incoming/trunk@3012 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-03 00:18:12 +00:00
Matt Miller efc687de84 fix up handlers
git-svn-id: file:///home/svn/incoming/trunk@3007 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 17:32:34 +00:00
Matt Miller 39c9af8069 updated comments to be more uniformed in class definition
git-svn-id: file:///home/svn/incoming/trunk@3005 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 16:56:39 +00:00
Matt Miller 6a5870ddcd updated comments to be more uniformed in class definition
git-svn-id: file:///home/svn/incoming/trunk@3004 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 16:49:45 +00:00
Matt Miller 15ce3c424b added is_usable check
git-svn-id: file:///home/svn/incoming/trunk@3003 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 14:18:50 +00:00
Matt Miller 1c3fc58349 updated logging levels and defined guidelines
git-svn-id: file:///home/svn/incoming/trunk@3002 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-02 00:27:59 +00:00
Matt Miller a9c7ecc42b bind and reverse handler unit tests
git-svn-id: file:///home/svn/incoming/trunk@2999 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 02:41:29 +00:00
Matt Miller 1605e575cd implemented some unit tests for modules
git-svn-id: file:///home/svn/incoming/trunk@2998 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 00:48:40 +00:00
Matt Miller efa51ca309 unit tests for encoders
git-svn-id: file:///home/svn/incoming/trunk@2997 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 00:30:20 +00:00
Matt Miller db6a30693b foo
git-svn-id: file:///home/svn/incoming/trunk@2996 4d416f70-5f16-0410-b530-b9f4589650da
2005-11-01 00:02:51 +00:00
Matt Miller 27b8f880ff basic workings of auto-recon
git-svn-id: file:///home/svn/incoming/trunk@2987 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-31 15:56:59 +00:00
Matt Miller 204a215bc7 corrected some stuff
git-svn-id: file:///home/svn/incoming/trunk@2982 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-30 22:45:29 +00:00
Matt Miller 2e7a7dbe8d fixed up contextual recon event notifications
git-svn-id: file:///home/svn/incoming/trunk@2981 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-30 22:35:32 +00:00
Matt Miller a6d6cedd1d automatic module subscription to events
git-svn-id: file:///home/svn/incoming/trunk@2980 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-30 22:20:29 +00:00
Matt Miller 1fc49df4d2 more recon work, starting to become functional
git-svn-id: file:///home/svn/incoming/trunk@2979 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-29 13:47:07 +00:00
Matt Miller cc7add451d more work on recon module stuff
git-svn-id: file:///home/svn/incoming/trunk@2976 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-27 03:23:38 +00:00
Matt Miller c7eb56cab2 laying the groundwork for recon
git-svn-id: file:///home/svn/incoming/trunk@2975 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-27 02:54:39 +00:00
Matt Miller 712f7ef776 more docs
git-svn-id: file:///home/svn/incoming/trunk@2974 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-19 03:37:22 +00:00
Matt Miller 81c8cf3104 documentation fixes, code cleanup
git-svn-id: file:///home/svn/incoming/trunk@2973 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-19 03:20:20 +00:00
Matt Miller b06a2ca030 initial support for compat filtering, may be buggy
git-svn-id: file:///home/svn/incoming/trunk@2971 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-19 01:48:10 +00:00
Matt Miller 7cdf02d8da support for module reloading
git-svn-id: file:///home/svn/incoming/trunk@2956 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-10 00:30:14 +00:00
HD Moore a5cde85299 More SMB
git-svn-id: file:///home/svn/incoming/trunk@2954 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-03 13:51:05 +00:00
Matt Miller be79a295b7 opty2 ported
git-svn-id: file:///home/svn/incoming/trunk@2952 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 19:32:52 +00:00
Matt Miller ad6273ce35 cleanup payload and exploit after failure
git-svn-id: file:///home/svn/incoming/trunk@2950 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 18:39:51 +00:00
Matt Miller 17071db65c msfcli action
git-svn-id: file:///home/svn/incoming/trunk@2944 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 05:48:05 +00:00
Matt Miller b955e21a8b no .log
git-svn-id: file:///home/svn/incoming/trunk@2941 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 04:06:31 +00:00
Matt Miller 1a8bb86843 improved session logging
git-svn-id: file:///home/svn/incoming/trunk@2939 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 03:57:46 +00:00
Matt Miller db40a55547 session logging support
git-svn-id: file:///home/svn/incoming/trunk@2938 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-02 03:21:26 +00:00
Matt Miller fd38a7e39f variable validation, fixed tab complete
git-svn-id: file:///home/svn/incoming/trunk@2937 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-01 21:51:45 +00:00
Matt Miller a220e67128 msfencode and msfpayload updates
git-svn-id: file:///home/svn/incoming/trunk@2934 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-01 21:26:17 +00:00
Matt Miller 17a596186e added the concept of payload convention
git-svn-id: file:///home/svn/incoming/trunk@2925 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-01 06:09:46 +00:00
Matt Miller dd20214f32 added target specific stuff, generic stack adjustment, etc
git-svn-id: file:///home/svn/incoming/trunk@2924 4d416f70-5f16-0410-b530-b9f4589650da
2005-10-01 05:55:15 +00:00
Matt Miller ccd1e8f10a payload info can now be target specific
git-svn-id: file:///home/svn/incoming/trunk@2923 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-30 07:12:32 +00:00
Matt Miller 6f6924e001 meterpreter comm session implemented, untested
git-svn-id: file:///home/svn/incoming/trunk@2920 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-30 05:59:44 +00:00
Matt Miller 6ec3700b16 pivoting with portfwd command
git-svn-id: file:///home/svn/incoming/trunk@2916 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-29 20:18:24 +00:00
Matt Miller fdf9553991 fix for argument error
git-svn-id: file:///home/svn/incoming/trunk@2914 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-27 00:35:51 +00:00
Matt Miller 89f184335d defaults
git-svn-id: file:///home/svn/incoming/trunk@2901 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-25 23:55:32 +00:00
Matt Miller 109aa7f63b smaller
git-svn-id: file:///home/svn/incoming/trunk@2898 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-25 19:47:48 +00:00
Matt Miller 6f33b93f37 comment
git-svn-id: file:///home/svn/incoming/trunk@2893 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 19:47:56 +00:00
Matt Miller 8090968279 add regenerate_payload
git-svn-id: file:///home/svn/incoming/trunk@2891 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 19:37:27 +00:00
Matt Miller 501d7da9f9 aim goaway exploit ported, fixed a few bugs in sled gen
git-svn-id: file:///home/svn/incoming/trunk@2888 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 19:17:07 +00:00
Matt Miller c05ea5839b update testing suites
git-svn-id: file:///home/svn/incoming/trunk@2886 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 18:42:29 +00:00
Matt Miller d07b602089 TODO update
git-svn-id: file:///home/svn/incoming/trunk@2882 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 18:02:24 +00:00
Matt Miller 4400f659ec seh mixin
git-svn-id: file:///home/svn/incoming/trunk@2881 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 18:02:03 +00:00
Matt Miller bde47f6ce2 exploit error catching
git-svn-id: file:///home/svn/incoming/trunk@2877 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-24 00:19:27 +00:00
Matt Miller 6f8f862e2a support for multiple con-current sessions
git-svn-id: file:///home/svn/incoming/trunk@2869 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-23 06:08:04 +00:00
Matt Miller 3116a654d4 enhanced logging a bit, added a few badchars to ie obj type, improving job support
git-svn-id: file:///home/svn/incoming/trunk@2868 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-23 05:51:09 +00:00
Matt Miller b522132350 moved some stuff around, working on adding the concept of jobs
git-svn-id: file:///home/svn/incoming/trunk@2864 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-22 04:53:46 +00:00
Matt Miller fe0a151d7e ported ie object type, more work on http stuff
git-svn-id: file:///home/svn/incoming/trunk@2861 4d416f70-5f16-0410-b530-b9f4589650da
2005-09-22 03:24:32 +00:00