Commit Graph

1058 Commits (c46c1c2d0498b1e311dd66ee22b2f3f9f3895973)

Author SHA1 Message Date
Matt Miller 851f2ccb29 fix for connect_login
git-svn-id: file:///home/svn/framework3/trunk@4243 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-29 11:33:16 +00:00
HD Moore 2bc1d4be18 Updates to the client API
git-svn-id: file:///home/svn/framework3/trunk@4242 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 23:42:54 +00:00
HD Moore 7d949bf802 Remove whitespace from base64
git-svn-id: file:///home/svn/framework3/trunk@4238 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:56:57 +00:00
HD Moore bb79a9a6be Use pack/unpack vs the Base64 library (seems to be broken on OS X)
git-svn-id: file:///home/svn/framework3/trunk@4237 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:55:35 +00:00
HD Moore 58f75149e0 Explicitly specify the ::Base64 class
git-svn-id: file:///home/svn/framework3/trunk@4236 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 19:52:33 +00:00
HD Moore 43df6869b2 Compatible encoder list from Diaul
git-svn-id: file:///home/svn/framework3/trunk@4235 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 15:47:00 +00:00
Matt Miller e1565e2af4 fixed a few issues with the alpha2 implementation
git-svn-id: file:///home/svn/framework3/trunk@4230 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 05:19:31 +00:00
HD Moore 804df25240 Initial overhaul of the HTTP client api. This removes nearly all of the client evasion methods, but leaves the code in a great state to reimplement them with less issues.
git-svn-id: file:///home/svn/framework3/trunk@4222 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-19 07:11:55 +00:00
HD Moore 239fe1e8ae Removing the obsolete evasion levels API
git-svn-id: file:///home/svn/framework3/trunk@4221 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-19 04:32:07 +00:00
HD Moore ffc626675b Initial support for PHP payloads
git-svn-id: file:///home/svn/framework3/trunk@4215 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:57:51 +00:00
Matt Miller 23a61e0a49 woops
git-svn-id: file:///home/svn/framework3/trunk@4214 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:52:05 +00:00
Matt Miller ddd40907d5 fix for service management issue with tcp server/http server mixins
git-svn-id: file:///home/svn/framework3/trunk@4213 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:12:04 +00:00
HD Moore 8a922d0641 Always use IO.read vs IO.readlines.join
git-svn-id: file:///home/svn/framework3/trunk@4211 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 07:00:44 +00:00
Matt Miller d16a368ea2 fix for tcp server/http server compat
git-svn-id: file:///home/svn/framework3/trunk@4210 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 06:49:04 +00:00
HD Moore 6fef5abeda Resolve a crash bug in the send_response_html() method
Add the MS06_013 CreateTextRange() exploit



git-svn-id: file:///home/svn/framework3/trunk@4208 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-17 02:34:27 +00:00
Matt Miller fb161fc3dd ported putty exploit, untested
git-svn-id: file:///home/svn/framework3/trunk@4198 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-14 02:20:21 +00:00
Matt Miller 6ea76fdfbc squid ntlm authenticate ported, fixed bugs in brute force mixni
git-svn-id: file:///home/svn/framework3/trunk@4192 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-14 00:23:56 +00:00
HD Moore 40242aca92 Added -I and -X options to db_autopwn
git-svn-id: file:///home/svn/framework3/trunk@4181 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-10 08:21:52 +00:00
HD Moore feac78350f Break on ^c
git-svn-id: file:///home/svn/framework3/trunk@4174 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-10 06:04:51 +00:00
HD Moore ea204ee0ff API change for the HTML mixin, the send_response method is no longer overloaded, instead exploits must call send_response_html to enable HTML evasion. The old method caused problems when a exploit needed HTML and non-HTML response capabilities
git-svn-id: file:///home/svn/framework3/trunk@4173 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-10 03:26:53 +00:00
HD Moore 7bc77e8203 Extend option command completion to include all possible values for Enum options
git-svn-id: file:///home/svn/framework3/trunk@4172 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-10 03:16:38 +00:00
HD Moore f91a4dd9d4 Fix a typo (Html -> HTML)
git-svn-id: file:///home/svn/framework3/trunk@4171 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-10 03:11:48 +00:00
HD Moore 45066abcd3 Changed Html to HTML
git-svn-id: file:///home/svn/framework3/trunk@4170 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-10 02:55:25 +00:00
HD Moore 9c7cdef7de Fixes to "extra" commands provided by the auxiliary modules
git-svn-id: file:///home/svn/framework3/trunk@4161 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-03 17:46:34 +00:00
HD Moore 789556f004 Woops, forgot to commit this, thanks MC!
git-svn-id: file:///home/svn/framework3/trunk@4160 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-02 23:56:52 +00:00
HD Moore 3edea24c3d This adds the backupexec registry access module and a supporting library for windows registry constants
git-svn-id: file:///home/svn/framework3/trunk@4159 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-02 19:48:10 +00:00
HD Moore f4d6983a74 Add pattern_create to exploit mixins
git-svn-id: file:///home/svn/framework3/trunk@4147 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-16 06:09:28 +00:00
HD Moore 8746882bf4 Changed the defaut win32 process back to lsass.exe until we come up with a better solution -- spools just results in nothing happening in many cases.
git-svn-id: file:///home/svn/framework3/trunk@4145 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-16 03:49:56 +00:00
HD Moore 1fad9eef5c Force the interface up when open_wifi is called
git-svn-id: file:///home/svn/framework3/trunk@4132 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-12 21:33:33 +00:00
HD Moore f925120ddd Wifi updates
git-svn-id: file:///home/svn/framework3/trunk@4129 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 21:45:28 +00:00
Matt Miller b306da967d exit thread instead of exit proc
git-svn-id: file:///home/svn/framework3/trunk@4127 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 19:18:04 +00:00
Matt Miller 2627f5b7f9 hurray for the next stager
git-svn-id: file:///home/svn/framework3/trunk@4126 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 19:17:00 +00:00
Matt Miller 702d6a6544 added recovery stub for kiidleloop
git-svn-id: file:///home/svn/framework3/trunk@4122 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 04:38:45 +00:00
HD Moore dddc4a7640 New stager from johnycsh
git-svn-id: file:///home/svn/framework3/trunk@4121 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-11 04:14:57 +00:00
HD Moore 00b2cafec8 md5 was replaced with digest/md5 in 1.9 and 1.8.5
git-svn-id: file:///home/svn/framework3/trunk@4119 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-09 19:54:40 +00:00
HD Moore e2a78bc758 Move eton into the mixin
git-svn-id: file:///home/svn/framework3/trunk@4117 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-09 07:46:31 +00:00
HD Moore 54cef446f9 Thanks Rhys
git-svn-id: file:///home/svn/framework3/trunk@4115 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-07 14:39:13 +00:00
HD Moore 777e70b088 Addition of the new Pcap interface
Force user to install the pcapx and lorcon libs



git-svn-id: file:///home/svn/framework3/trunk@4114 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-06 05:29:56 +00:00
Matt Miller 568f40f308 somehow abad's banner causes a stack overflow in ruby from deb, removing it for now
git-svn-id: file:///home/svn/framework3/trunk@4106 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-06 02:04:52 +00:00
HD Moore 2982440a28 Removed msflorcon in favor of the new ruby-lorcon module
git-svn-id: file:///home/svn/framework3/trunk@4105 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-06 00:26:35 +00:00
HD Moore 44bb7e0901 Typo
git-svn-id: file:///home/svn/framework3/trunk@4099 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-01 20:14:05 +00:00
HD Moore c7b95f4a5c Add WVE and fixes milw0rm
git-svn-id: file:///home/svn/framework3/trunk@4098 4d416f70-5f16-0410-b530-b9f4589650da
2006-11-01 20:11:56 +00:00
HD Moore 8d007b2de8 Commenting this out til its committored
git-svn-id: file:///home/svn/framework3/trunk@4092 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-31 23:19:57 +00:00
HD Moore b9834c8524 VoIP module from david maynor
git-svn-id: file:///home/svn/framework3/trunk@4091 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-31 23:18:54 +00:00
HD Moore 652cc08711 Only set the abortive_close flag if the socket type supports it
git-svn-id: file:///home/svn/framework3/trunk@4089 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-31 02:11:18 +00:00
HD Moore 80781d7b83 Added a new jpegtochat created logo
git-svn-id: file:///home/svn/framework3/trunk@4087 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-29 18:01:34 +00:00
HD Moore fa91b4b5dd Bug fixes to rescue statements (was catching relative exception class, not the main exception class)
git-svn-id: file:///home/svn/framework3/trunk@4086 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-29 17:41:19 +00:00
HD Moore 6c245f561c Cosmetic changes, removal of advanced/evasion options from dumps
git-svn-id: file:///home/svn/framework3/trunk@4085 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-29 17:31:53 +00:00
HD Moore 4281e18e45 Decrementing the minimal byte size to match lower-mtu networks
git-svn-id: file:///home/svn/framework3/trunk@4083 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-29 05:24:39 +00:00
Matt Miller 6a4c32401e added support to list which exploit a session was spawned through
git-svn-id: file:///home/svn/framework3/trunk@4061 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-28 01:50:04 +00:00
HD Moore 38b01597e8 Fix base64
git-svn-id: file:///home/svn/framework3/trunk@4057 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-26 02:42:04 +00:00
Matt Miller 68a5fb928d added PrependUser and AppendUser to extended options
git-svn-id: file:///home/svn/framework3/trunk@4056 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-26 01:48:10 +00:00
Matt Miller 5ae0993151 added PrependUser and AppendUser to extended options
git-svn-id: file:///home/svn/framework3/trunk@4055 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-26 01:44:25 +00:00
HD Moore d366f3a90c Working lorcon interface
git-svn-id: file:///home/svn/framework3/trunk@4053 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-25 19:16:55 +00:00
Matt Miller 2c5cf95d0f removed modules that don't currently function
git-svn-id: file:///home/svn/framework3/trunk@4052 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-25 13:29:25 +00:00
Matt Miller 6c2ad54dfd license array
git-svn-id: file:///home/svn/framework3/trunk@4050 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-20 14:24:02 +00:00
Matt Miller e6b9e4f24b a few tweaks to make things more reliable, added wfs_delay
git-svn-id: file:///home/svn/framework3/trunk@4045 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-17 00:16:04 +00:00
Matt Miller 465ea3c677 initial integration of basic kernel-mode payload support
git-svn-id: file:///home/svn/framework3/trunk@4044 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 23:59:14 +00:00
Matt Miller fa14510b78 starting integration of kernel-mode payloads
git-svn-id: file:///home/svn/framework3/trunk@4043 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 21:40:38 +00:00
Matt Miller c12e3f2992 better implementation
git-svn-id: file:///home/svn/framework3/trunk@4042 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 19:04:39 +00:00
Matt Miller 34f388d0e5 added code to support HEX var substitution
git-svn-id: file:///home/svn/framework3/trunk@4041 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 18:51:34 +00:00
Matt Miller 7b0c80b922 mixins method
git-svn-id: file:///home/svn/framework3/trunk@4040 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-16 08:06:52 +00:00
Matt Miller b354c82258 ypops overflow ported
git-svn-id: file:///home/svn/framework3/trunk@4021 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-12 03:24:31 +00:00
Matt Miller f1fb05690f misc bugfixes in the http subsystem
git-svn-id: file:///home/svn/framework3/trunk@4019 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 09:27:39 +00:00
Matt Miller abf2e057c8 apache chunked encoding win32 port
git-svn-id: file:///home/svn/framework3/trunk@4017 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 08:31:54 +00:00
Matt Miller b477547a3d partial fix for mod cache issue? committed vlad's new stagers
git-svn-id: file:///home/svn/framework3/trunk@4013 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-10 06:44:15 +00:00
HD Moore dea617c67a Unspammed
git-svn-id: file:///home/svn/framework3/trunk@4011 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-06 04:02:55 +00:00
Spoon M c7ffe342e5 ug, I hate the world
git-svn-id: file:///home/svn/framework3/trunk@4010 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-05 03:08:15 +00:00
HD Moore 17e97fc84c Fix the duplicate connection problem for dcerpc bugs
git-svn-id: file:///home/svn/framework3/trunk@4008 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-02 21:32:00 +00:00
HD Moore 070f9af55f Reverse connection payloads now listen on 0.0.0.0 by default.
git-svn-id: file:///home/svn/framework3/trunk@4000 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-01 16:56:17 +00:00
HD Moore f14f8d144c Updated the framework revision
git-svn-id: file:///home/svn/framework3/trunk@3997 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-01 05:26:02 +00:00
HD Moore ec987e0f28 Bug fix for passive-exploits
Bug fix for a crash in the DB import for XML




git-svn-id: file:///home/svn/framework3/trunk@3920 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-21 14:51:58 +00:00
Matt Miller 934230a005 fix for variable ref
git-svn-id: file:///home/svn/framework3/trunk@3917 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-19 20:24:55 +00:00
Matt Miller 00ffcc3835 support for meterpreter scripts
git-svn-id: file:///home/svn/framework3/trunk@3916 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-19 03:15:25 +00:00
HD Moore fa5503d0ea Fix the case of hosts with no services
git-svn-id: file:///home/svn/framework3/trunk@3915 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-18 06:22:43 +00:00
HD Moore d559ad6a4e Postgres driver layer is complete, but not yet tested
git-svn-id: file:///home/svn/framework3/trunk@3909 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-18 00:05:09 +00:00
Matt Miller 9018329f1a added cleanup to meterp
git-svn-id: file:///home/svn/framework3/trunk@3908 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 23:12:46 +00:00
HD Moore c525ac455b Updated command set
git-svn-id: file:///home/svn/framework3/trunk@3907 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 22:07:52 +00:00
HD Moore c3876b6dd6 Updates for the autopwn stuff...
git-svn-id: file:///home/svn/framework3/trunk@3906 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 08:00:37 +00:00
Matt Miller d3670564a0 hopeful commit to uber session stupid number 2
git-svn-id: file:///home/svn/framework3/trunk@3905 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 07:26:22 +00:00
HD Moore f5298f5a94 The postgres plugin is updated and now works with autopwn/load/etc
git-svn-id: file:///home/svn/framework3/trunk@3904 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 07:17:27 +00:00
HD Moore f3b79d2c2c Default to X86
git-svn-id: file:///home/svn/framework3/trunk@3903 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 05:07:47 +00:00
HD Moore 7fc40e4734 More work towards automation
git-svn-id: file:///home/svn/framework3/trunk@3902 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-17 00:39:23 +00:00
HD Moore 0d1137e562 More work on the database backend
git-svn-id: file:///home/svn/framework3/trunk@3901 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 20:08:13 +00:00
HD Moore 4c5b257a94 Fix a bug that prevents jobs from being cleaned up
git-svn-id: file:///home/svn/framework3/trunk@3900 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 20:07:25 +00:00
HD Moore a309a6755b Fix background job support
git-svn-id: file:///home/svn/framework3/trunk@3899 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 20:07:07 +00:00
Matt Miller 902136a85e fixing up a few things
git-svn-id: file:///home/svn/framework3/trunk@3898 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 07:21:41 +00:00
HD Moore 6a9f9ebee7 Cleanups for database management, use a persistent sqlite3 database with the db_sqlite3 plugin
git-svn-id: file:///home/svn/framework3/trunk@3897 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 06:45:06 +00:00
HD Moore 033da6245a Display an ugly warning message if a broken module is found in the tree
git-svn-id: file:///home/svn/framework3/trunk@3896 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 06:27:14 +00:00
HD Moore 475df9c08b Added the stderr log sink
git-svn-id: file:///home/svn/framework3/trunk@3895 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 05:50:10 +00:00
HD Moore 6b4105db8e Tab completion of RHOST options based the available services and the current RPORT
git-svn-id: file:///home/svn/framework3/trunk@3894 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-16 05:33:50 +00:00
HD Moore ccbe1cc876 Import CONST
git-svn-id: file:///home/svn/framework3/trunk@3888 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-14 05:51:24 +00:00
HD Moore 0b71dc5d04 A few updates to add NT Trans2 secondary requests, fix an authentication issue, and support a new denial of service module
git-svn-id: file:///home/svn/framework3/trunk@3885 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-14 05:41:54 +00:00
Matt Miller d11604cca9 filter out privileged payloads used with non-privileged exploits
git-svn-id: file:///home/svn/framework3/trunk@3869 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-12 05:58:07 +00:00
Matt Miller 3e69f46a3a added support for manual ranking
git-svn-id: file:///home/svn/framework3/trunk@3866 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-12 05:34:58 +00:00
HD Moore 47039ff3fa First round of bugfixes for encoders. Alphanumeric encoders no longer default the BufferRegister option, since this can lead to non-compatible exploits falling through to these encoders, selecting them, and then crashing. The new method uses a dynamic (not quite poly) geteip generator, that while not yet alphanumeric compatible, it handles most of the known use cases. Remaining items:
1) Figure out how to handle unicode geteip (unicode encoded, alphanum probably)
2) Add keys to the unicode payloads to force a corresponding keyu on the exploit side to enable 




git-svn-id: file:///home/svn/framework3/trunk@3863 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 05:10:48 +00:00
Matt Miller 7a051c8ee1 bidirectional pipe
git-svn-id: file:///home/svn/framework3/trunk@3862 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 02:21:23 +00:00
Matt Miller a3f620b224 buffered input
git-svn-id: file:///home/svn/framework3/trunk@3861 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 02:21:12 +00:00
Matt Miller 06aca0378e changes to start supporting new msfweb
git-svn-id: file:///home/svn/framework3/trunk@3860 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 01:29:05 +00:00
Matt Miller e8d45bbf1b changes to start supporting new msfweb
git-svn-id: file:///home/svn/framework3/trunk@3859 4d416f70-5f16-0410-b530-b9f4589650da
2006-09-10 01:28:59 +00:00