Commit Graph

1066 Commits (bc7b19f554a274f2547e71e7a6d79a4df2f53a13)

Author SHA1 Message Date
HD Moore bc7b19f554 Adds keywords to some missing modules, adds an old/lame DoS module that was fixed in Vista SP1
git-svn-id: file:///home/svn/framework3/trunk@5849 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-07 22:11:58 +00:00
HD Moore 95d5624a96 Correct scratch/scratch typo
git-svn-id: file:///home/svn/framework3/trunk@5847 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-06 14:56:06 +00:00
HD Moore 308a90a01d Complete international support for XP SP2 / XP SP3
git-svn-id: file:///home/svn/framework3/trunk@5846 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-06 06:08:45 +00:00
kris 9ee7eb2e87 little typo fix
git-svn-id: file:///home/svn/framework3/trunk@5845 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-05 19:31:55 +00:00
HD Moore be3bfb36a9 Correct the DLL path
git-svn-id: file:///home/svn/framework3/trunk@5844 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-05 06:13:26 +00:00
HD Moore 0881649f14 The psexec and smb_relay module now automatically cleanup. The ms08-06 module now supports all languages of XP SP3.
git-svn-id: file:///home/svn/framework3/trunk@5841 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 22:27:59 +00:00
HD Moore 187f79eddf Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
git-svn-id: file:///home/svn/framework3/trunk@5837 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 20:08:24 +00:00
James Lee 0193cd5219 fix session vs client variable problems with meterpreter AutoRunScript and make usage actually reflect what the code does
git-svn-id: file:///home/svn/framework3/trunk@5834 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 06:40:12 +00:00
kris 8bb6ffe64a Update ruby-lorcon path in wifun description
git-svn-id: file:///home/svn/framework3/trunk@5833 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 05:55:14 +00:00
kris 1026957da1 Remove eton() definitions from aux modules since it's in the Lorcon mixin
git-svn-id: file:///home/svn/framework3/trunk@5831 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 03:03:22 +00:00
kris 55bb15d695 Adding file2air aux wireless module which lets you write frames from binary
files to the air after optionally changing the addresses.

This module looks at ToDS and FromDS when replacing the addresses, which isn't
done in the original.



git-svn-id: file:///home/svn/framework3/trunk@5830 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 02:34:57 +00:00
HD Moore b53695f7db The psexec module now uses a service-compatible exe, shellcode is spawned in a subprocess and the service cleans up properly
git-svn-id: file:///home/svn/framework3/trunk@5829 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 23:06:37 +00:00
HD Moore e02f740277 Handle multiple sessions by default
git-svn-id: file:///home/svn/framework3/trunk@5828 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 21:08:46 +00:00
HD Moore 133d7ce658 Adds an automatic default target to ms08-067, autodetects OS, SP, and language now.
git-svn-id: file:///home/svn/framework3/trunk@5827 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 20:37:51 +00:00
HD Moore be30436058 Better SP2/SP3 check method from Rhys Kidd, Danish fingerprint from MaXe <security[at]intern0t.net>
git-svn-id: file:///home/svn/framework3/trunk@5826 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 17:24:49 +00:00
HD Moore 4b30f3ef1a Update the check() comments to reflect new information >:(
git-svn-id: file:///home/svn/framework3/trunk@5825 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 15:29:51 +00:00
Mario Ceballos 97b2adcc46 added the connect()/smb_login()
git-svn-id: file:///home/svn/framework3/trunk@5824 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 13:14:06 +00:00
HD Moore f1789fc1b2 Adds the check() method and scanner module to ms08-067, massively upgrades the smb/version scanner, with better SP detection and remote language pack detection.
git-svn-id: file:///home/svn/framework3/trunk@5823 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 09:17:08 +00:00
HD Moore d9ffc23128 Adds 0x40 to the badchars list, fixes a weird issue, found by Ramon
git-svn-id: file:///home/svn/framework3/trunk@5822 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-02 02:35:57 +00:00
HD Moore 4f45818a0f The prefix change makes ms08-067 more reliable vs windows 2000
git-svn-id: file:///home/svn/framework3/trunk@5820 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 21:10:45 +00:00
HD Moore de6c726e0a New french targets from Antoine
git-svn-id: file:///home/svn/framework3/trunk@5818 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 15:34:17 +00:00
HD Moore c5ad82fb68 Add SP2 German
git-svn-id: file:///home/svn/framework3/trunk@5817 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 14:15:16 +00:00
HD Moore d366e8342a Spanish target is SP3 not SP2
git-svn-id: file:///home/svn/framework3/trunk@5816 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 14:07:58 +00:00
Ramon de C Valle 7427d913c0 Added targets for Portuguese (Brazil) (NX) SP2/SP3 to ms08_067_netapi.rb
git-svn-id: file:///home/svn/framework3/trunk@5815 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 11:45:52 +00:00
HD Moore 571d577bbd Adds Windows XP SP0/SP1 targets for English
git-svn-id: file:///home/svn/framework3/trunk@5814 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 06:12:49 +00:00
HD Moore e784bcd515 Adds Windows 2003 SP1 (NO NX and NX(is this needed)).
git-svn-id: file:///home/svn/framework3/trunk@5813 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 05:55:57 +00:00
HD Moore 7fcf5b3dc2 Lots of new targets merged in for MS08-067 including Brett Moore's 2003 SP2 DEP bypass
git-svn-id: file:///home/svn/framework3/trunk@5812 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 05:16:02 +00:00
HD Moore 56a413d803 Reflective DLL injection payloads from Stephen Fewer
git-svn-id: file:///home/svn/framework3/trunk@5806 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 22:17:32 +00:00
HD Moore dfbc35da3c Patch for ms08-067 from antoine, fixes braindead bug on my part, should increase reliability
git-svn-id: file:///home/svn/framework3/trunk@5805 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 17:21:07 +00:00
HD Moore e9d133e9aa Remove the while(true) which snuck into this module
git-svn-id: file:///home/svn/framework3/trunk@5803 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 07:21:53 +00:00
kris 330bd2ef5b Update some of my aux modules that require a successful login to not continue
running without it


git-svn-id: file:///home/svn/framework3/trunk@5802 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 00:52:38 +00:00
kris 4740e6e452 Adding DoS aux module for the Victory FTP Server v5.0
git-svn-id: file:///home/svn/framework3/trunk@5801 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-29 21:57:31 +00:00
kris 3c4aec43d5 Adding DoS aux module for the PacketTrap TFTP server
git-svn-id: file:///home/svn/framework3/trunk@5800 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-29 17:28:34 +00:00
HD Moore f9f6c8d3e6 Adds an initial exploit for MS08-067, support for XP SP2/SP3 DEP, 2003 SP0/SP2 no-DEP.
git-svn-id: file:///home/svn/framework3/trunk@5798 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-28 07:35:17 +00:00
kris aec269616a Ignore EACCES from connect in TCP portscanner aux module. This can be caused
by (at least) ICMPv6 Administratively Prohibited messages, on at least Linux.
I got these by scanning ports 21-23 on ipv6.google.com, for example.



git-svn-id: file:///home/svn/framework3/trunk@5797 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-28 02:55:10 +00:00
kris 71885912b8 Allow more flexible (Nmap-esque) port specifications in TCP portscan aux module,
so things like "21-25,80,443", "1024-" and "-" behave like you expect.  This
replaces the PORTSTART and PORTSTOP options with a single PORTS option.



git-svn-id: file:///home/svn/framework3/trunk@5796 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 23:33:34 +00:00
kris 9d565f9a51 Fix CERT ref numbers in bailiwicked DNS aux modules
git-svn-id: file:///home/svn/framework3/trunk@5794 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 22:26:48 +00:00
Mario Ceballos e700980288 update the return. thanks jacop.
git-svn-id: file:///home/svn/framework3/trunk@5793 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 20:50:44 +00:00
HD Moore c0ffd16629 Patch from antoine, corrected description and pre-calculated hashes
git-svn-id: file:///home/svn/framework3/trunk@5791 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 17:58:56 +00:00
et 75be2e33ad Added module reporting and wmap_reports command
git-svn-id: file:///home/svn/framework3/trunk@5789 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 02:22:30 +00:00
HD Moore ce58c15d6e Switch to cain&abel / halflm tables compatible challenge
git-svn-id: file:///home/svn/framework3/trunk@5788 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-26 21:53:36 +00:00
et ebc5294574 Added new wmap sqlmap module
git-svn-id: file:///home/svn/framework3/trunk@5787 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-25 03:26:50 +00:00
Ramon de C Valle 8d19ba7bbf Changed AIX_VERSION to AIXLEVEL
git-svn-id: file:///home/svn/framework3/trunk@5786 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 13:22:12 +00:00
et 29e983567e removed reports_exist check
git-svn-id: file:///home/svn/framework3/trunk@5785 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 04:23:54 +00:00
et c4dc77c15b fixed ip handling and CN parsing
git-svn-id: file:///home/svn/framework3/trunk@5784 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 03:19:24 +00:00
Ramon de C Valle c66d6c4e46 Set property 'svn:keywords'
git-svn-id: file:///home/svn/framework3/trunk@5783 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:43:21 +00:00
Ramon de C Valle eb0c6d1a65 Added missing Linux x86 payload modules from unixasm
git-svn-id: file:///home/svn/framework3/trunk@5782 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:19:50 +00:00
Ramon de C Valle 693202fd4b Updated AIX POWER/PowerPC payload modules
git-svn-id: file:///home/svn/framework3/trunk@5781 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 02:04:18 +00:00
pusscat 16612cacba Rename
git-svn-id: file:///home/svn/framework3/trunk@5778 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 17:51:12 +00:00
pusscat 822234771f Initial import of the bea oracle weblogic apache plugin
git-svn-id: file:///home/svn/framework3/trunk@5777 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 17:44:57 +00:00