Commit Graph

1819 Commits (c1c06d6ea1231094d74b41e9ebc59e1a702d3802)

Author SHA1 Message Date
Joshua Drake 61f2c0b195 uniqified name
git-svn-id: file:///home/svn/framework3/trunk@7487 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-13 00:21:54 +00:00
Joshua Drake 2e4f5734ea fixed typo
git-svn-id: file:///home/svn/framework3/trunk@7486 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-13 00:21:09 +00:00
James Lee 41604957fa fix no compatible payloads due to misplaced compat options
git-svn-id: file:///home/svn/framework3/trunk@7483 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-12 20:36:23 +00:00
HD Moore 0d8eaa9190 Fix up a typo in the ddwrt exploit
git-svn-id: file:///home/svn/framework3/trunk@7481 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-12 16:13:51 +00:00
HD Moore d892264ad7 Adds a DoS proof of concept for MS09-065 (EOT)
git-svn-id: file:///home/svn/framework3/trunk@7470 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 23:48:53 +00:00
James Lee 68959ece65 use the new DisablePayloadHandler option to reduce the number of open ports required; lports per OS can be modified via advanced options
git-svn-id: file:///home/svn/framework3/trunk@7469 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 21:38:30 +00:00
HD Moore a305bc82c2 Add a status message, fix syntax error in references
git-svn-id: file:///home/svn/framework3/trunk@7468 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 20:17:20 +00:00
HD Moore 3980a7f18e Add a metasploit module implement laurent's latest bug
git-svn-id: file:///home/svn/framework3/trunk@7467 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 16:59:55 +00:00
Carlos Perez 10cf618c19 Fix AXFR error handling
git-svn-id: file:///home/svn/framework3/trunk@7466 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 14:14:55 +00:00
Joshua Drake c9f6e32c70 optimization for extra stack data
git-svn-id: file:///home/svn/framework3/trunk@7463 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-11 01:01:53 +00:00
Joshua Drake 92408fbed4 added patch, finder, and pub exploit refs
git-svn-id: file:///home/svn/framework3/trunk@7457 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-10 23:52:07 +00:00
Joshua Drake 9edcda6862 updated badchars/encoder, increased bytes to end of stack, ppr had badchar in it
git-svn-id: file:///home/svn/framework3/trunk@7456 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-10 23:36:54 +00:00
Joshua Drake e812a2317c added exploit for cve-2009-0184
git-svn-id: file:///home/svn/framework3/trunk@7455 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-10 21:52:17 +00:00
HD Moore 6deb2fe58e windows 2000 target via anonymous submission
git-svn-id: file:///home/svn/framework3/trunk@7454 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-10 20:03:57 +00:00
Stephen Fewer 159ca526b4 Fixed a null pointer dereference bug (occurring in stages loaded by the PassiveX stager) that was being caused when an invalid exit funk was being patched into the stage by the PassiveX stager. This happened because the PassiveX stager uses the old type exit funks while the stages use the new type. This fix ensures the PassiveX stager gets the expected old exit funk value while the chosen stage gets the new exit funk value. This patch does not fix Bug #291 (PassiveX broken). Also I have left the PassiveX stager disabled until we can resolve the rest of the problems.
git-svn-id: file:///home/svn/framework3/trunk@7448 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-10 16:07:01 +00:00
Carlos Perez b91d198e09 Fix AXFR false positive bug
git-svn-id: file:///home/svn/framework3/trunk@7441 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-10 04:14:25 +00:00
Carlos Perez 2620ad3a3c Fix AXFR Bug, Added SRV checks for MS OCS Services, Option to Exit on Wildcard detection for ENUM_BRT and modified ENUM_TLD to properly test for IANA TLD list
git-svn-id: file:///home/svn/framework3/trunk@7439 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-10 03:08:16 +00:00
Joshua Drake 434ee654b4 minor tweaks
git-svn-id: file:///home/svn/framework3/trunk@7429 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-09 19:31:11 +00:00
Joshua Drake 55c32f8bb1 miscellanous cleanups and minimized
git-svn-id: file:///home/svn/framework3/trunk@7421 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-09 05:55:50 +00:00
James Lee d9b5d62a3e disable passivex for the rc1 until we can figure out why it doesn't work. see #291
git-svn-id: file:///home/svn/framework3/trunk@7419 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-09 04:32:22 +00:00
Joshua Drake 0e2c8f4894 StackAdjustment or Prepend, not both :)
git-svn-id: file:///home/svn/framework3/trunk@7418 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-09 04:31:02 +00:00
Joshua Drake b07d997787 initial commit, randomization to come
git-svn-id: file:///home/svn/framework3/trunk@7417 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-09 04:27:30 +00:00
HD Moore 06372f3c40 See #430. This adds the AllowWin32SEH option to the upper/mixed alphanumeric encoders, providing 100% alphanumeric payloads for Windows platforms
git-svn-id: file:///home/svn/framework3/trunk@7405 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-08 00:45:51 +00:00
HD Moore 10b1e4e703 Fixes #469. Check address[0]
git-svn-id: file:///home/svn/framework3/trunk@7403 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-08 00:16:00 +00:00
et 5a460d451c Ugly mixin
git-svn-id: file:///home/svn/framework3/trunk@7401 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-07 22:17:42 +00:00
et 7b832b9d3e Wmap checking for vulnerabilities and launching exploits
git-svn-id: file:///home/svn/framework3/trunk@7399 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-07 21:55:33 +00:00
Mario Ceballos 95694ddd97 updated module targets from Brett Gervasoni.
git-svn-id: file:///home/svn/framework3/trunk@7398 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-07 13:18:03 +00:00
HD Moore 2075377fc8 Fix to correct the IP TTL of all raw modules - these were defaulting to 0. Reported by Job Kibler
git-svn-id: file:///home/svn/framework3/trunk@7397 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-07 03:17:19 +00:00
HD Moore 1d5f1e5f69 Fixes #472. This module still needs alot of work, but this solves this particular bug. Caused by unsetting the variable
git-svn-id: file:///home/svn/framework3/trunk@7396 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-06 21:16:56 +00:00
Mario Ceballos c3dd1698fc added exploit module hp_power_manager_login.rb
git-svn-id: file:///home/svn/framework3/trunk@7371 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-06 01:31:17 +00:00
Mario Ceballos 0c12d36cad added patch from Steve Tornio.
git-svn-id: file:///home/svn/framework3/trunk@7365 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-05 12:09:58 +00:00
Mario Ceballos 3da8b7b7f6 added exploit module safenet_softremote_groupname.rb
git-svn-id: file:///home/svn/framework3/trunk@7358 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-04 23:10:50 +00:00
James Lee 70b2d06c86 speed up content creation, string concat sucks
git-svn-id: file:///home/svn/framework3/trunk@7356 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-04 19:06:01 +00:00
James Lee c675cfb1cf Fix 1.9.1 issues, make the vbs smaller (down to about 4MB from almost 10)
git-svn-id: file:///home/svn/framework3/trunk@7355 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-04 18:55:32 +00:00
James Lee 68564f9d5e modules should not handle exceptions like this. if you're just going to print a backtrace, let the dispatcher deal with it so we can get logs
git-svn-id: file:///home/svn/framework3/trunk@7353 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-04 17:04:01 +00:00
HD Moore 9e654c51f2 Revive
git-svn-id: file:///home/svn/framework3/trunk@7348 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-04 04:04:39 +00:00
HD Moore 4b53b1d378 Purge
git-svn-id: file:///home/svn/framework3/trunk@7347 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-04 04:04:17 +00:00
HD Moore 98d9d66905 Replaced with encoded shiny bits
git-svn-id: file:///home/svn/framework3/trunk@7346 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-04 03:56:12 +00:00
HD Moore 0a52c98e03 Purging this module due to lame AV sigs, re-adding in a sillier form
git-svn-id: file:///home/svn/framework3/trunk@7345 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-04 03:50:31 +00:00
HD Moore 84ebdfa7eb Move the mercantec check to the exploit code from autofilter
git-svn-id: file:///home/svn/framework3/trunk@7333 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-03 17:02:03 +00:00
Mario Ceballos aef3817db9 added patch from steve tornio.
git-svn-id: file:///home/svn/framework3/trunk@7331 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-03 12:02:54 +00:00
Mario Ceballos b62dc9705e remove some debugging.
git-svn-id: file:///home/svn/framework3/trunk@7329 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 21:21:50 +00:00
Mario Ceballos 73bd4f7de2 added exploit module symantec_consoleutilities_browseandsavefile.rb from Nikolas Sotiriu.
git-svn-id: file:///home/svn/framework3/trunk@7328 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 21:02:45 +00:00
HD Moore ac14e84eb6 See #434. Fixes up the last of the modules using the wrong Timeout exception class
git-svn-id: file:///home/svn/framework3/trunk@7326 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 18:22:50 +00:00
HD Moore e067823372 See #434. A few modules that used the wrong Timeout syntax as well
git-svn-id: file:///home/svn/framework3/trunk@7324 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 18:16:51 +00:00
HD Moore f38b43f236 Specify the language as none
git-svn-id: file:///home/svn/framework3/trunk@7321 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 17:10:06 +00:00
HD Moore c0758f7bc6 Do not randomize the PDF version (breaks Acrobat 9x)
git-svn-id: file:///home/svn/framework3/trunk@7318 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-02 14:41:59 +00:00
et fdce355f3b Option NoDetailMessages added
git-svn-id: file:///home/svn/framework3/trunk@7313 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 01:09:53 +00:00
et fbbbde55f2 Fix #443. This module should not be use as a directory scanner as there are more suitable modules for such task. This specific module is only made to test a specific vulnerability and will be mode to a per directory check instead of trying to identify directories requiring authentication to be bypassed
git-svn-id: file:///home/svn/framework3/trunk@7312 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-01 00:59:41 +00:00
HD Moore 02c3bc232b Typo
git-svn-id: file:///home/svn/framework3/trunk@7310 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 17:05:18 +00:00
HD Moore 1ca1e1cc84 Use the payload as the ICMP tag check
git-svn-id: file:///home/svn/framework3/trunk@7309 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 17:04:21 +00:00
HD Moore f89085fd20 Check the icmp echo ID
git-svn-id: file:///home/svn/framework3/trunk@7308 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 16:50:45 +00:00
HD Moore 670ee7c238 Fix an invalid next
git-svn-id: file:///home/svn/framework3/trunk@7307 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 16:46:52 +00:00
HD Moore 3d6687902a Adds two modules that re-implement the rogue network tools project as metasploit auxiliary modules.
git-svn-id: file:///home/svn/framework3/trunk@7306 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-30 07:36:00 +00:00
HD Moore f347e561db Two very basic HTTP request fuzzers, based on module code from nullthreat, ported to the new API
git-svn-id: file:///home/svn/framework3/trunk@7305 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-29 21:45:50 +00:00
HD Moore 3faf72dd97 Perform a test RPC call on each discovered interface
git-svn-id: file:///home/svn/framework3/trunk@7304 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-29 19:00:34 +00:00
HD Moore 4f3128c061 Stop randomizing the module version, it breaks Acrobat 9
git-svn-id: file:///home/svn/framework3/trunk@7303 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-29 04:09:07 +00:00
et 20be000d47 Wmap able to load exploits and check for vulnerabilities. Next step exploit if vulnerable
git-svn-id: file:///home/svn/framework3/trunk@7302 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-29 03:16:27 +00:00
HD Moore a41b1db7de Autofilter based on existence of the softcart cgi
git-svn-id: file:///home/svn/framework3/trunk@7297 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 18:02:37 +00:00
HD Moore aa09862813 Fixes #401. Ends up Windows NT doesn't like DCERPC requests to be partially written by SMB writes, this patches the min write size to be at least as big as the DCERPC request. The DCERPC::max_frag_size parameter can still be used for more evasion.
[*] Started reverse handler
[*] Detected a Windows NT 4.0 target
[*] Adjusting the SMB/DCERPC parameters for Windows NT
[*] Binding to 4b324fc8-1670-01d3-1278-5a47bf6ee188:3.0@ncacn_np:192.168.0.128[\BROWSER] ...
[*] Bound to 4b324fc8-1670-01d3-1278-5a47bf6ee188:3.0@ncacn_np:192.168.0.128[\BROWSER] ...
[*] Building the stub data...
[*] Calling the vulnerable function...
[*] Sending stage (719360 bytes)
[*] Meterpreter session 1 opened (192.168.0.136:4444 -> 192.168.0.128:1485)

meterpreter > sysinfo
Computer: VMNT4
OS      : Windows NT 4.0 (Build 1381, Service Pack 6).
Arch    : x86
Language: en_US



git-svn-id: file:///home/svn/framework3/trunk@7296 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 16:37:18 +00:00
HD Moore bffb98ba9f Add XP SP3 target for WarFTPD.
git-svn-id: file:///home/svn/framework3/trunk@7295 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 10:29:41 +00:00
HD Moore 31276e1626 Fixes #427. Finally found a solution that works for 1.8 and 1.9, this allows lorcon modules to run in the background or foreground and handle interrupts from the console gracefully. Its still a hack
git-svn-id: file:///home/svn/framework3/trunk@7293 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-28 00:19:17 +00:00
HD Moore 5eed9deb2d Adds the joomla TinyMCE file upload exploit from spinbad.
git-svn-id: file:///home/svn/framework3/trunk@7283 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 20:00:39 +00:00
HD Moore 5e137e92fd Fixes #381. To scan for TLSv1 only services, set SSLVersion TLS1
git-svn-id: file:///home/svn/framework3/trunk@7282 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-26 19:48:15 +00:00
Mario Ceballos 131adc4c3a fixed cve reference number.
git-svn-id: file:///home/svn/framework3/trunk@7260 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 21:19:27 +00:00
HD Moore e3f68f2639 Another large number of warnings fixed by Yoann Guillot
git-svn-id: file:///home/svn/framework3/trunk@7248 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 17:18:23 +00:00
HD Moore b38a74c961 Another mega-patch from Yoann Guillot: fixes warnings generated by method calls with a space betwee the method and the parans, corrects a problem with the alpha encoders that causes them to overwrite the allowed charset, hardcodes the metasm output size of some modules in order to reduce load time, more to come
git-svn-id: file:///home/svn/framework3/trunk@7246 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 16:40:19 +00:00
HD Moore 1af9353ecb Remove the duplicate module
git-svn-id: file:///home/svn/framework3/trunk@7245 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 05:08:23 +00:00
HD Moore c138724b06 Various SMB fuzzers to demonstrate the new fuzzing api
git-svn-id: file:///home/svn/framework3/trunk@7244 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 05:05:54 +00:00
HD Moore c4e8c52585 Import some basic ssh fuzzers and a smb fuzzer that can trigger the smb2 negotiate bug
git-svn-id: file:///home/svn/framework3/trunk@7243 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 03:25:15 +00:00
HD Moore b03ecfcaff Demonstrate the fuzz_string_corrupt_byte_reverse() method
git-svn-id: file:///home/svn/framework3/trunk@7242 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 01:51:15 +00:00
HD Moore cae0d61491 Adds a basic fuzzing mixin, as well as a TDS username fuzzer to demonstrate usage
git-svn-id: file:///home/svn/framework3/trunk@7241 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 01:40:27 +00:00
HD Moore acf1b2eda7 Relocate the wifi fuzzer modules to a new directory
git-svn-id: file:///home/svn/framework3/trunk@7240 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 00:22:34 +00:00
HD Moore 7433d180da Renaming wireless to wifi as appropriate. See #413
git-svn-id: file:///home/svn/framework3/trunk@7238 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-25 00:21:09 +00:00
HD Moore a0fbc2914f Remove the milw0rm references, as the links are no longer valid.
git-svn-id: file:///home/svn/framework3/trunk@7237 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-24 18:13:07 +00:00
HD Moore b53a596ff0 Merge in David Kennedy's new MSSQL changes (centralized SQL query mixin)
git-svn-id: file:///home/svn/framework3/trunk@7236 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 19:15:32 +00:00
HD Moore 255379c2d0 Fixes #378. Still need to reorganize the modules and fix the lorcon2 mixin for 1.9.1
git-svn-id: file:///home/svn/framework3/trunk@7235 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-23 15:59:13 +00:00
Carlos Perez b87fa8f63f Updated Module info
git-svn-id: file:///home/svn/framework3/trunk@7226 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-22 03:01:34 +00:00
Carlos Perez e4109d8670 Added support for MS SQL 2000
git-svn-id: file:///home/svn/framework3/trunk@7225 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-22 02:56:43 +00:00
cg 2f09fc0c5d update login_brue description
git-svn-id: file:///home/svn/framework3/trunk@7224 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-21 23:41:36 +00:00
Stephen Fewer 995745d642 Commit a jsp bind shell payload (and add a missing require to the jsp reverse shell).
git-svn-id: file:///home/svn/framework3/trunk@7220 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 23:11:28 +00:00
HD Moore 00b2915554 Fixes #342. Set ReverseConnectRetries to a value between 1 and 255 (default is 5). On failure it will ExitProcess (still better than a cpu spin)
git-svn-id: file:///home/svn/framework3/trunk@7217 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 20:31:14 +00:00
kris 5c9b823c8b output typos, etc
git-svn-id: file:///home/svn/framework3/trunk@7212 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 17:49:10 +00:00
Mario Ceballos 2b85ceb4c1 added exploit modules base_qry_common.rb and mambo_cache_lite.rb
git-svn-id: file:///home/svn/framework3/trunk@7210 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-20 15:01:10 +00:00
Mario Ceballos bac233108f added exploit modules ms_visual_studio_msmask.rb and ms_visual_basic_vbp.rb
git-svn-id: file:///home/svn/framework3/trunk@7208 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 12:58:03 +00:00
HD Moore 03b753fd12 Fixes #360. Report each path individually
git-svn-id: file:///home/svn/framework3/trunk@7207 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 10:55:11 +00:00
HD Moore a73df955a3 Move the email collector into the gather directory
git-svn-id: file:///home/svn/framework3/trunk@7206 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 04:59:55 +00:00
HD Moore 9004887009 Three new modules from Carlos Perez
git-svn-id: file:///home/svn/framework3/trunk@7205 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 04:58:50 +00:00
et 5524e9aae2 Fixed #370. Test if uploaded file exists
git-svn-id: file:///home/svn/framework3/trunk@7203 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-19 00:02:54 +00:00
et 6ce7011cba Fixed #369. Added RHOST info and second round to determine error page
git-svn-id: file:///home/svn/framework3/trunk@7202 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 23:26:58 +00:00
HD Moore df414a4904 Add the 'sa' with blank password CVE and vulnerability references, since the default configuratino of the MSSQL mixin exploits just that.
git-svn-id: file:///home/svn/framework3/trunk@7201 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 22:05:19 +00:00
HD Moore 45280f85a5 Fix a looping issue with the new lyris module
git-svn-id: file:///home/svn/framework3/trunk@7199 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 21:51:45 +00:00
HD Moore 36fee594ba Adds coverage for the old Lyris ListManager predictable sa password flaw
git-svn-id: file:///home/svn/framework3/trunk@7198 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 21:46:29 +00:00
kris 9ce45face4 add advanced option for setting ipid sample size
git-svn-id: file:///home/svn/framework3/trunk@7197 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 21:22:55 +00:00
James Lee f90a222fa0 better vnc protocol parsing, fixes #374
git-svn-id: file:///home/svn/framework3/trunk@7196 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:59:35 +00:00
HD Moore 4ac27c9803 Consolidate common APIs into the mixin
git-svn-id: file:///home/svn/framework3/trunk@7195 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:58:01 +00:00
et 6a818c0c64 Fixed #371. Included target information
git-svn-id: file:///home/svn/framework3/trunk@7194 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:51:47 +00:00
et 6cfd1675c4 Fixed #375. Removed the module as frontpage_login provides same information
git-svn-id: file:///home/svn/framework3/trunk@7193 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:45:30 +00:00
et c501187ca4 Fixed typo #368.
git-svn-id: file:///home/svn/framework3/trunk@7192 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:39:40 +00:00
et bfd359f0d8 Fixed #367. Adder error code detection and signatures
git-svn-id: file:///home/svn/framework3/trunk@7191 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:37:40 +00:00
et f085e7cf59 Remove generic modules at this time, until proxy is created and then it can be proxy modules.
git-svn-id: file:///home/svn/framework3/trunk@7190 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:23:33 +00:00
et 249cc10cf5 Fixed #365. Added signatures and error code detection
git-svn-id: file:///home/svn/framework3/trunk@7189 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:18:22 +00:00
et 814675f952 Changed variable name for consistency purposes
git-svn-id: file:///home/svn/framework3/trunk@7188 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 20:01:43 +00:00
et dc415c76ca Fixes #364. Added error message detection and signatures
git-svn-id: file:///home/svn/framework3/trunk@7187 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 19:46:30 +00:00
James Lee f85c522a07 don't try to parse an empty banner, fixes #373
git-svn-id: file:///home/svn/framework3/trunk@7186 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 18:23:19 +00:00
HD Moore 4d4c0905ef Slightly improved error handling for auxiliary and exploit modules. Improved brute forcing mode for mssql_login. Serious errors (broken code, etc) are bubbled up in auxiliary scanners now. Fixes #384 by reading wordlists one line at a time and not buffering
git-svn-id: file:///home/svn/framework3/trunk@7185 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 18:03:02 +00:00
Stephen Fewer e72b347794 Add a remote Vista kernel DoS against the srv2.sys driver. This issue was fixed with MS09-050 but does not appear to be referenced in the advisory so was either silently or inadvertently fixed.
git-svn-id: file:///home/svn/framework3/trunk@7184 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 15:41:51 +00:00
HD Moore 5ea99ac421 Remove from the db_autopwn set for now
git-svn-id: file:///home/svn/framework3/trunk@7183 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 09:31:17 +00:00
et bee78d3b51 First round of fixes for wmap modules
git-svn-id: file:///home/svn/framework3/trunk@7181 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-18 07:10:32 +00:00
HD Moore d3aa513773 Fixes #339. Cleans up author names for the most part - there are still some stragglers, but this should fix up the frequent contributors
git-svn-id: file:///home/svn/framework3/trunk@7173 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-17 05:55:15 +00:00
Mario Ceballos 378b7f29d5 added exploit modules talkative_response.rb, blazedvd_plf.rb, vuplayer_cue.rb and vuplayer_m3u.rb
git-svn-id: file:///home/svn/framework3/trunk@7170 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-16 17:02:44 +00:00
Mario Ceballos 37fa36ed12 fix a typo.
git-svn-id: file:///home/svn/framework3/trunk@7169 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-16 16:51:16 +00:00
Mario Ceballos 7e1c769eef added exploit modules poppeeper_uidl.rb and poppeeper_date.rb
git-svn-id: file:///home/svn/framework3/trunk@7168 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 18:04:58 +00:00
Mario Ceballos 62dc4c74d7 added activepdf_webgrabber.rb, etrust_pestscan.rb, ea_checkrequirements.rb and mcafee_hercules_deletesnapshot.rb exploit modules.
git-svn-id: file:///home/svn/framework3/trunk@7167 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 15:22:16 +00:00
HD Moore 90504e3ea7 Fix email formatting
git-svn-id: file:///home/svn/framework3/trunk@7165 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 12:29:07 +00:00
HD Moore 6e95d1f637 Detect when xp_cmdshell is disabled and re-enable it
git-svn-id: file:///home/svn/framework3/trunk@7164 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 12:14:28 +00:00
HD Moore c4bfae59aa Minor cleanups
git-svn-id: file:///home/svn/framework3/trunk@7163 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-15 01:44:00 +00:00
HD Moore 59676df4db Adds ReL1K's mssql_payload module
git-svn-id: file:///home/svn/framework3/trunk@7162 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 21:11:28 +00:00
HD Moore cd2968a32a Updated mssql_sql and backend mixin, can handle most column types and is somewhat usable as a mssql client
git-svn-id: file:///home/svn/framework3/trunk@7159 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 17:41:12 +00:00
Mario Ceballos aae4ac74c1 more adjusting of the cve entries.
git-svn-id: file:///home/svn/framework3/trunk@7157 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 12:56:13 +00:00
Mario Ceballos 8e365c17fa fixed the cve entrys.
git-svn-id: file:///home/svn/framework3/trunk@7156 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 11:45:14 +00:00
Mario Ceballos aee16a85ab fixed the cve entry.
git-svn-id: file:///home/svn/framework3/trunk@7155 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-14 11:28:50 +00:00
HD Moore a782a68c42 Complete overhaul of the MSSQL API, fixes 1.9 compat issues and makes the MSSQL testing easier
git-svn-id: file:///home/svn/framework3/trunk@7154 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-13 22:24:47 +00:00
Mario Ceballos 63ad9ebf27 added exploit module aol_icq_downloadagent.rb
git-svn-id: file:///home/svn/framework3/trunk@7153 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-13 17:04:05 +00:00
HD Moore 5d9f3323e8 Last two reference updates from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@7150 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-12 14:42:51 +00:00
HD Moore 26db223636 OSVDB reference update from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@7149 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-12 14:39:51 +00:00
Mario Ceballos a8ccd1fe98 updated references with bid/cve.
git-svn-id: file:///home/svn/framework3/trunk@7148 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-12 12:39:15 +00:00
Mario Ceballos 5b6f16a0f9 added exploit modules athocgov_completeinstallation.rb and symantec_iao.rb
git-svn-id: file:///home/svn/framework3/trunk@7147 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-12 12:31:52 +00:00
et 09ec91d9bf Use name convention
git-svn-id: file:///home/svn/framework3/trunk@7146 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 23:07:34 +00:00
et c14bd99aff Base for an error based sql inj. scanner
git-svn-id: file:///home/svn/framework3/trunk@7145 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:52:54 +00:00
et 95bf9f84f7 Basic robots scanner for wmap
git-svn-id: file:///home/svn/framework3/trunk@7144 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:48:25 +00:00
et 97ae32a318 Minor display changes
git-svn-id: file:///home/svn/framework3/trunk@7143 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 22:40:57 +00:00
et ec00f69e66 Subversion scanner
git-svn-id: file:///home/svn/framework3/trunk@7142 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-11 20:49:34 +00:00
Mario Ceballos 1cadfa4ea7 added exploit module amaya_bdo.rb from dookie.
git-svn-id: file:///home/svn/framework3/trunk@7136 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-10 21:51:25 +00:00
HD Moore 3d68290b8c Try both snmp1 and snmp2
git-svn-id: file:///home/svn/framework3/trunk@7132 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-06 23:20:36 +00:00
kris bd0b0b454e deregister unused (not user-settable) options
git-svn-id: file:///home/svn/framework3/trunk@7130 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-06 05:37:36 +00:00
kris f21e3c8754 svn:keywords run
git-svn-id: file:///home/svn/framework3/trunk@7128 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-04 23:38:06 +00:00
Mario Ceballos 65e57f209a added exploit modules xlink_nfsd.rb, xlink_client.rb and xlink_server.rb
git-svn-id: file:///home/svn/framework3/trunk@7123 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-03 23:05:44 +00:00
HD Moore b42cc67e54 Fixes the ASN.1 parser to work with ruby 1.9.1
git-svn-id: file:///home/svn/framework3/trunk@7121 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-03 19:48:15 +00:00
HD Moore e23925ed27 Updated the path check to use the Rex method designed for this. Eventually we need to switch this to use zip/filesystem (under lib/)
git-svn-id: file:///home/svn/framework3/trunk@7104 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-01 13:28:38 +00:00
James Lee 6b8dcdced4 add a dependency check for the existence of the zip command. Thanks Donna Hawthorne for the bug report.
git-svn-id: file:///home/svn/framework3/trunk@7102 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-01 05:46:34 +00:00
Mario Ceballos 3dd0e972e0 added exploit module emc_appextender_keyworks.rb
git-svn-id: file:///home/svn/framework3/trunk@7101 4d416f70-5f16-0410-b530-b9f4589650da
2009-10-01 02:13:16 +00:00
HD Moore aecbf12b5b Fix up the oracle module, remove syntax error, clean up output, only use one connection
git-svn-id: file:///home/svn/framework3/trunk@7099 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-30 21:44:54 +00:00
HD Moore 7abd2fe06f Correct tab indents (from spaces), cosmetic fixes, remove useless rescue, spelling fix in description (thanks rmkml!)
git-svn-id: file:///home/svn/framework3/trunk@7098 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-30 21:04:54 +00:00
Mario Ceballos acf828461c updated oraenum.rb with an additional wordlist.
git-svn-id: file:///home/svn/framework3/trunk@7093 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-29 21:58:01 +00:00
Mario Ceballos b4a291f430 added auxiliary module oraenum.rb from Carlos Perez.
git-svn-id: file:///home/svn/framework3/trunk@7088 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 23:13:06 +00:00
HD Moore 07efe98f6d Whitespace and svn properties set
git-svn-id: file:///home/svn/framework3/trunk@7087 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 10:54:07 +00:00
Stephen Fewer 360cdaab2e rename the smb2 module to something more specific.
git-svn-id: file:///home/svn/framework3/trunk@7086 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 10:23:28 +00:00
Stephen Fewer 50bd91688c Add coverage for the SMBv2 vuln.
git-svn-id: file:///home/svn/framework3/trunk@7085 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 08:12:30 +00:00
James Lee 53e3f166f8 make x86/nonupper raise the right exception type, prettify some formatting
git-svn-id: file:///home/svn/framework3/trunk@7083 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 05:23:23 +00:00
James Lee bbf2aca050 Something about the poly code in jmp_call_additive is busted. Go back to the old static decoder stub until we can figure it out.
git-svn-id: file:///home/svn/framework3/trunk@7082 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 04:56:21 +00:00
Mario Ceballos 9509872b4f fixed disclosure date and removed cmd residue.
git-svn-id: file:///home/svn/framework3/trunk@7079 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-28 00:24:18 +00:00
cg 56d4345830 updated options module
git-svn-id: file:///home/svn/framework3/trunk@7078 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 22:42:24 +00:00
HD Moore a478c11df0 See #339
git-svn-id: file:///home/svn/framework3/trunk@7077 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 21:33:07 +00:00
HD Moore 5972666f63 See #339. Massive cleanup of author names, make them consistent across modules
git-svn-id: file:///home/svn/framework3/trunk@7075 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 21:30:45 +00:00
Stephen Fewer 53b0709a64 commit MC's patch to remove the unused 'req' string.
git-svn-id: file:///home/svn/framework3/trunk@7074 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 19:07:43 +00:00
Stephen Fewer c9efd2428c add MC's module for the Adobe RoboHelp server vuln.
git-svn-id: file:///home/svn/framework3/trunk@7072 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 18:38:48 +00:00
Stephen Fewer 1a220d6dc5 add java payload jsp_shell_reverse_tcp.
git-svn-id: file:///home/svn/framework3/trunk@7071 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 18:35:07 +00:00
HD Moore af1ed06c1c Fixes #335. Merges change that fixes adobe_pdf_embedded_exe when HOMEPATH != C:\
git-svn-id: file:///home/svn/framework3/trunk@7069 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-27 15:02:59 +00:00
Mario Ceballos e715789e7c fix the option description.
git-svn-id: file:///home/svn/framework3/trunk@7065 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-26 12:01:51 +00:00
Mario Ceballos c4594f396f added auxiliary module timbuktu_udp.rb and exploit module timbuktu_fileupload.rb
git-svn-id: file:///home/svn/framework3/trunk@7062 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-26 00:04:00 +00:00
James Lee 6a7a023844 I will not commit when sleep deprived. I will not commit when sleep deprived. I will not commit...
git-svn-id: file:///home/svn/framework3/trunk@7061 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 06:40:42 +00:00
James Lee bc2c38c332 shave an instruction from the new allports stager
git-svn-id: file:///home/svn/framework3/trunk@7060 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 06:13:13 +00:00
HD Moore b47b46e7c0 Set keywords
git-svn-id: file:///home/svn/framework3/trunk@7059 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 05:45:03 +00:00
HD Moore ee9a8f4f76 Adds support for the reverse_tcp_allports stager for Windows. This payload tries to connect back on all ports, one at a time, from LPORT to 65535. This is incredibly slow (depends on the default socket timeout) and requires the user to forward all TCP ports of LHOST to a single listening port in the handler. Inspired by a few user requests and this blog post: http://clinicallyawesome.com/post/196352889/blind-connect-back-through-restrictive-firewall
git-svn-id: file:///home/svn/framework3/trunk@7058 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-25 05:44:50 +00:00
HD Moore b9138f80df Allow the user to set the interface name for scanning, this needs to get merged into the capture mixin, but this solves it for now.
git-svn-id: file:///home/svn/framework3/trunk@7055 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-24 03:34:04 +00:00
HD Moore 7d122ceb02 Fixes #269. Specifically wrap EOFError
git-svn-id: file:///home/svn/framework3/trunk@7045 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-20 19:49:03 +00:00
HD Moore 532d80b7df Fix modules - unpack('s') breaks on big-endian, lots of formatting issues
git-svn-id: file:///home/svn/framework3/trunk@7042 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-19 17:24:29 +00:00
Patrick Webster 5f650c0751 Added HP Web JetAdmin aux command exec module.
git-svn-id: file:///home/svn/framework3/trunk@7041 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-19 00:33:44 +00:00
Patrick Webster b0c9e8b8e5 Added BigAnt 2.5 exploit module from Dr_IDE.
git-svn-id: file:///home/svn/framework3/trunk@7039 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-17 17:04:47 +00:00
Mario Ceballos e0e9ad670f added auxiliary module osb_execqr2.rb
git-svn-id: file:///home/svn/framework3/trunk@7038 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-16 12:07:07 +00:00
HD Moore 110e89fd19 Fix a raise() call that was printing a warning with Ruby 1.8.6
git-svn-id: file:///home/svn/framework3/trunk@7036 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-14 18:46:41 +00:00
James Lee e30e850ba7 shave a few bytes off of the windows stagers
git-svn-id: file:///home/svn/framework3/trunk@7035 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-14 08:45:01 +00:00
HD Moore 41aa5baa6d Fix the check for verbose flag
git-svn-id: file:///home/svn/framework3/trunk@7033 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 15:43:08 +00:00
HD Moore 0885a7262e Merge the DECT code from DK, clean some things up
git-svn-id: file:///home/svn/framework3/trunk@7032 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 15:40:33 +00:00
Patrick Webster b0d1c2681f Added sendmail_prescan aux dos module.
git-svn-id: file:///home/svn/framework3/trunk@7031 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 10:56:36 +00:00
James Lee 9ace8f33eb OSVDB references from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@7030 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-12 04:22:58 +00:00
James Lee 782f830abf make cd work by special-casing it to call chdir()
git-svn-id: file:///home/svn/framework3/trunk@7027 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 06:19:10 +00:00
James Lee 0f957f236e make cd work by special-casing it to call chdir()
git-svn-id: file:///home/svn/framework3/trunk@7026 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 06:11:47 +00:00
James Lee 85a4f1b9db add a simple check for the generic php exploits
git-svn-id: file:///home/svn/framework3/trunk@7025 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 05:24:03 +00:00
HD Moore 185b93bf29 Enforce max password length of 14 to avoid a default policy warning about back compat
git-svn-id: file:///home/svn/framework3/trunk@7024 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-10 03:29:51 +00:00
Mario Ceballos 13f5e1c2e5 added exploit module symantec_altirisdeployment_downloadandinstall.rb
git-svn-id: file:///home/svn/framework3/trunk@7023 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 22:30:01 +00:00
HD Moore 71d644e72e Fix the Payload->Space to match the new max size limit for the EXE generator. Thanks for catching it MC
git-svn-id: file:///home/svn/framework3/trunk@7022 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 21:23:11 +00:00
HD Moore 7505a4568f This commit adds a SMB 2.0 scanner - it also reports uptime and dialect version
git-svn-id: file:///home/svn/framework3/trunk@7021 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 15:51:06 +00:00
Patrick Webster 086d5daaba Try again :)
git-svn-id: file:///home/svn/framework3/trunk@7020 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 15:20:10 +00:00
Patrick Webster d1268286f0 Renamed to correct spelling based on the SAP service.
git-svn-id: file:///home/svn/framework3/trunk@7019 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 15:01:25 +00:00
Patrick Webster 63702412b0 Added exploit module sap_2005_licence from Jacopo Cervini.
git-svn-id: file:///home/svn/framework3/trunk@7018 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 14:59:34 +00:00
HD Moore 858d57acdd Updated referencse and description
git-svn-id: file:///home/svn/framework3/trunk@7017 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 13:41:14 +00:00
HD Moore a7afd1a6c8 Updated referencse and description
git-svn-id: file:///home/svn/framework3/trunk@7016 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 13:34:13 +00:00
HD Moore eeefc4dd27 Fix a typo
git-svn-id: file:///home/svn/framework3/trunk@7015 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 02:06:46 +00:00
HD Moore 56b2ab3f63 Fix the Space and mistyped StackAdjustment in the metaphish merge
git-svn-id: file:///home/svn/framework3/trunk@7014 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-09 00:55:13 +00:00
HD Moore 232ca24b46 Updated to make it clear that 2003 is not affected (thanks for the feedback for those who tested)
git-svn-id: file:///home/svn/framework3/trunk@7012 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-08 20:27:41 +00:00
HD Moore 7006acc1a8 Cosmetic cleanup
git-svn-id: file:///home/svn/framework3/trunk@7011 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-08 17:48:12 +00:00
HD Moore 989989077a Adds a first pass at the new SMB flaw - set the OFFSET variable to test different function table indices. This module contains some offsets/notes from my early attempts at code execution.
git-svn-id: file:///home/svn/framework3/trunk@7010 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-08 17:41:40 +00:00
Mario Ceballos c1aa1b5f22 updated targets list
git-svn-id: file:///home/svn/framework3/trunk@7006 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-05 14:54:22 +00:00
Stephen Fewer 40ca641a96 Initial commit of the windows x64 meterpreter payloads!
git-svn-id: file:///home/svn/framework3/trunk@6997 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-03 17:47:21 +00:00
Mario Ceballos cf0f690e4d added exploit module safenet_ike_11.rb
git-svn-id: file:///home/svn/framework3/trunk@6996 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-02 22:04:35 +00:00
Stephen Fewer 1184f01742 Added Aki Immonen's target for Windows 2000 SP3, thanks Aki!
git-svn-id: file:///home/svn/framework3/trunk@6995 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-02 21:24:34 +00:00
HD Moore 41ab69c600 Updated return address from Stephen Fewer, should work for a wider range now
git-svn-id: file:///home/svn/framework3/trunk@6994 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-01 17:34:47 +00:00
HD Moore 251810685f Fix the target patch
git-svn-id: file:///home/svn/framework3/trunk@6993 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-01 17:22:43 +00:00