pks
740e2c1ab2
Change base from 0x90040000 to 0x20040000.
...
This is more portable across kernel versions / patches it seems. This
will be better for SEGMEXEC compatibility as well.
git-svn-id: file:///home/svn/framework3/trunk@10455 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-24 04:06:28 +00:00
pks
50241faa57
Implement a sniffer for posix meterpreter using libpcap.
...
This version of the sniffer supports packet filtering after the packet count variable, like so:
meterpreter > sniffer_interfaces
1 - 'eth0' ( type:0 mtu:1514 usable:false dhcp:false wifi:false )
2 - 'any' ( type:0 mtu:1514 usable:false dhcp:false wifi:false )
3 - 'lo' ( type:0 mtu:1514 usable:false dhcp:false wifi:false )
meterpreter > use sniffer
Loading extension sniffer...success.
meterpreter > sniffer_start 1 500000 icmp <-- picks up only icmp packets.
[*] Capture started on interface 1 (500000 packet buffer)
meterpreter > sniffer_stop 1
[*] Capture stopped on interface 1
git-svn-id: file:///home/svn/framework3/trunk@10424 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 11:43:30 +00:00
pks
a179836fca
Initial import of networkpug, a pivoting interface using libpcap to monitor/inject packets on a interface on the remote machine.
...
git-svn-id: file:///home/svn/framework3/trunk@10423 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 09:35:46 +00:00
pks
f196333e02
Strip debugging symbols when compiling the linker.
...
git-svn-id: file:///home/svn/framework3/trunk@10419 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 05:13:53 +00:00
pks
e30b420834
Railgun is windows specific at the moment, move the header include down a little bit and #ifdef the functions down a bit.
...
git-svn-id: file:///home/svn/framework3/trunk@10418 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 05:13:47 +00:00
pks
49b87daa7d
Implement locking in dl* functions
...
git-svn-id: file:///home/svn/framework3/trunk@10417 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 05:13:40 +00:00
pks
89b33c2cc7
Implement a crash handler to ease debugging
...
git-svn-id: file:///home/svn/framework3/trunk@10416 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 05:13:34 +00:00
pks
3c99897115
Missing file, QWORD compile fix, and thread error handling improvements.
...
asm/ucontext.h will be used to implement a crash handler in msflinker,
which should allow for easier debugging and development of msflinker
and extension code.
thread.c/h, fixes a bug if you thread_create(), but stop the thread before
running it.
Compilation fix for WSAGetLastError
git-svn-id: file:///home/svn/framework3/trunk@10415 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 05:13:27 +00:00
Matt Weeks
6736f6d5be
Make encoding payloads a million times faster.
...
git-svn-id: file:///home/svn/framework3/trunk@10374 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-19 02:45:55 +00:00
Matt Weeks
16f2e33442
Better support issuing commands to multiple sessions.
...
git-svn-id: file:///home/svn/framework3/trunk@10360 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-17 22:18:52 +00:00
Matt Weeks
908976c70a
Add ability to refresh console list, and only start polling for input on sessions when the window is opened.
...
git-svn-id: file:///home/svn/framework3/trunk@10359 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-17 21:41:08 +00:00
Matt Weeks
9712a99e42
Properly save host connecting to.
...
git-svn-id: file:///home/svn/framework3/trunk@10356 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-17 21:13:42 +00:00
Matt Weeks
c68861e4f4
Logout if not stopping the rpc daemon.
...
git-svn-id: file:///home/svn/framework3/trunk@10349 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-17 17:43:45 +00:00
Stephen Fewer
50e6d8f0e3
Delete the railgun meterpreter extension and add railgun support directly into stdapi. Support now includes Windows x64. Update meterpreter packet core to handle QWORD TLV's.
...
git-svn-id: file:///home/svn/framework3/trunk@10317 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-14 23:21:36 +00:00
Joshua Drake
d8fb8e5c49
merge in another posix meterpreter update from philip, see #2418
...
git-svn-id: file:///home/svn/framework3/trunk@10307 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-13 14:44:00 +00:00
Matt Weeks
f18ce42d1f
Remove unnecessary options to console run.
...
git-svn-id: file:///home/svn/framework3/trunk@10298 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 22:40:13 +00:00
Matt Weeks
cefe0ecb45
Add ability to run modules in console, some other fixes.
...
git-svn-id: file:///home/svn/framework3/trunk@10297 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 21:54:19 +00:00
James Lee
f15981074b
add source for java meterpreter. see #406
...
git-svn-id: file:///home/svn/framework3/trunk@10294 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 17:47:39 +00:00
Matt Weeks
12b15506c6
Log database connection, plugin loading/unloading, and session upgrades.
...
git-svn-id: file:///home/svn/framework3/trunk@10292 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 16:35:03 +00:00
Matt Weeks
cb41474f49
fix typo and import errors.
...
git-svn-id: file:///home/svn/framework3/trunk@10291 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 16:17:12 +00:00
Matt Weeks
711cf6d9ef
Prefer autodetect on importing, since other options are deprecated.
...
git-svn-id: file:///home/svn/framework3/trunk@10290 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 16:13:26 +00:00
Matt Weeks
995b289635
Add session upgrade capability to command shells.
...
git-svn-id: file:///home/svn/framework3/trunk@10289 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 15:59:19 +00:00
Matt Weeks
f8dafa0308
Display platform on session list for meterpreter sessions.
...
git-svn-id: file:///home/svn/framework3/trunk@10288 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-11 15:31:42 +00:00
Joshua Drake
e3a5195c62
commit some fixes from philip, see #2418
...
git-svn-id: file:///home/svn/framework3/trunk@10275 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-09 15:51:30 +00:00
Joshua Drake
c3db1d7a7f
commit some fixes from philip, see #2418
...
git-svn-id: file:///home/svn/framework3/trunk@10272 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-09 15:39:28 +00:00
James Lee
85126af521
add an exploit module for cve-2010-0094, thanks Matthias Kaiser.
...
git-svn-id: file:///home/svn/framework3/trunk@10255 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-08 08:20:55 +00:00
Matt Weeks
b24a7db785
Add workspace support throughout GUI; add/select/remove db workspace and set default workspace when running modules.
...
git-svn-id: file:///home/svn/framework3/trunk@10233 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-03 17:13:53 +00:00
Matt Weeks
62e27afa36
Add support for deleting items and add clients, notes, and loots db queries.
...
git-svn-id: file:///home/svn/framework3/trunk@10226 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-03 00:43:06 +00:00
Matt Weeks
9e86da570e
Initialize framework after forking when running msfrpcd as a daemon. Fixes #2465 by running database task thread in daemon.
...
git-svn-id: file:///home/svn/framework3/trunk@10207 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-31 23:24:54 +00:00
Joshua Drake
8dc12802fa
add termio.h back, see #2418
...
git-svn-id: file:///home/svn/framework3/trunk@10203 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-31 15:11:29 +00:00
Joshua Drake
3b67eefe4e
sync up with Philip's code, see #2418
...
git-svn-id: file:///home/svn/framework3/trunk@10202 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-31 15:10:41 +00:00
Matt Weeks
6dcd8a8269
Use new search command and script for search/download in gui.
...
git-svn-id: file:///home/svn/framework3/trunk@10198 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-30 22:59:46 +00:00
Stephen Fewer
a0f86c62e3
Meterpreter search support to leverage the index on older systems (2000/XP/2003) via Windows Desktop Search v2.
...
git-svn-id: file:///home/svn/framework3/trunk@10187 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-30 09:50:41 +00:00
Matt Weeks
77aa35c53f
Allow viewing connection details.
...
git-svn-id: file:///home/svn/framework3/trunk@10182 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-29 02:50:03 +00:00
Matt Weeks
d5b31adc6d
Only enable menus when connected to an msfrpc server
...
git-svn-id: file:///home/svn/framework3/trunk@10180 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-28 19:56:11 +00:00
Matt Weeks
a32e88b509
Simplify calling RPC functions in gui with implicit argument array.
...
git-svn-id: file:///home/svn/framework3/trunk@10179 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-28 19:43:38 +00:00
Matt Weeks
60105d8f24
Basic gui plugin support.
...
git-svn-id: file:///home/svn/framework3/trunk@10178 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-28 19:23:19 +00:00
Matt Weeks
633f84888e
Add support for database connect and disconnect, saving connection details.
...
git-svn-id: file:///home/svn/framework3/trunk@10176 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-28 18:09:30 +00:00
James Lee
5d5f075449
do the tar.bz2 as part of the normal build process. fixes #2334
...
git-svn-id: file:///home/svn/framework3/trunk@10171 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-27 18:27:57 +00:00
Stephen Fewer
53bfdb6f37
Commit the source for meterpreter file searching...
...
git-svn-id: file:///home/svn/framework3/trunk@10165 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-27 14:44:42 +00:00
Matt Weeks
8f52ae02df
Tabs disabled until loaded from database, auto-load database on connect, and more simplified database calls,
...
git-svn-id: file:///home/svn/framework3/trunk@10161 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-26 23:49:35 +00:00
Joshua Drake
aee73a3129
resolve some case insensitive filename issues
...
git-svn-id: file:///home/svn/framework3/trunk@10158 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-26 17:32:34 +00:00
Joshua Drake
778ee60d2c
update additional files, see #2418
...
git-svn-id: file:///home/svn/framework3/trunk@10156 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-26 07:25:15 +00:00
Joshua Drake
067830a8d0
remove the old elf server, see #2418 , should have been part of r10154
...
git-svn-id: file:///home/svn/framework3/trunk@10155 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-26 05:24:20 +00:00
Joshua Drake
6d1ed6d779
first attempt to merge in Philip Sanderson's work on the POSIX meterpreter
...
git-svn-id: file:///home/svn/framework3/trunk@10154 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-26 05:16:27 +00:00
HD Moore
3b7c23b841
Remove the duplicate copy
...
git-svn-id: file:///home/svn/framework3/trunk@10145 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 19:22:02 +00:00
HD Moore
24e4645ecb
Updated with revision data, additional bug fixes
...
git-svn-id: file:///home/svn/framework3/trunk@10141 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 15:13:27 +00:00
HD Moore
df918670a2
Add a revision
...
git-svn-id: file:///home/svn/framework3/trunk@10140 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 15:13:06 +00:00
HD Moore
633a169971
Add a packaging script
...
git-svn-id: file:///home/svn/framework3/trunk@10139 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 15:11:19 +00:00
HD Moore
c12947192c
Use the same wait logic for analyze
...
git-svn-id: file:///home/svn/framework3/trunk@10138 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 15:05:37 +00:00
HD Moore
d7b2831557
Fix CSV parsing when the timestamp has a comma, extend the wait period during the audit to handle slow systems better.
...
git-svn-id: file:///home/svn/framework3/trunk@10137 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 15:04:19 +00:00
HD Moore
68a5837b07
Regenerated binaries, error when CSV is missing
...
git-svn-id: file:///home/svn/framework3/trunk@10136 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 14:33:09 +00:00
HD Moore
db1adc0e76
Actually track this in SVN
...
git-svn-id: file:///home/svn/framework3/trunk@10135 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 14:21:53 +00:00
HD Moore
7ea537c7ea
Better, Faster, Stronger: DLLHijackAuditKit v2
...
git-svn-id: file:///home/svn/framework3/trunk@10134 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 06:57:36 +00:00
Matt Weeks
4af82f2937
Add import capability and simplify reloading database.
...
git-svn-id: file:///home/svn/framework3/trunk@10133 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-25 02:05:03 +00:00
HD Moore
f2b30738b1
Add /accepteula to the batch script
...
git-svn-id: file:///home/svn/framework3/trunk@10125 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-24 14:13:52 +00:00
Matt Weeks
f94e174d97
Initial Database support, with improved basic view.
...
git-svn-id: file:///home/svn/framework3/trunk@10124 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-24 00:22:49 +00:00
Joshua Drake
5201aa885a
remove asm file now that the assembly is inlined in the class
...
git-svn-id: file:///home/svn/framework3/trunk@10120 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-23 22:32:32 +00:00
HD Moore
f02956a816
Fix typo in audit.rb
...
git-svn-id: file:///home/svn/framework3/trunk@10115 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-23 19:28:20 +00:00
Joshua Drake
15c7a25d68
add omlet stub asm source
...
git-svn-id: file:///home/svn/framework3/trunk@10110 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-23 17:43:53 +00:00
HD Moore
cc3554601f
Tools for testing DLL hijack flaws
...
git-svn-id: file:///home/svn/framework3/trunk@10100 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-23 05:43:47 +00:00
James Lee
b35cea94cd
add source code for cve-2010-0840
...
git-svn-id: file:///home/svn/framework3/trunk@10095 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-21 07:27:26 +00:00
Matt Weeks
57b48314a6
Add logging support to console sessions.
...
git-svn-id: file:///home/svn/framework3/trunk@10084 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 19:07:15 +00:00
James Lee
232af015cb
add source code for javapayload, thanks mihi. see #406
...
git-svn-id: file:///home/svn/framework3/trunk@10075 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-20 07:09:51 +00:00
Matt Weeks
937606ab1f
Ability to close consoles and discover old consoles.
...
git-svn-id: file:///home/svn/framework3/trunk@10068 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 23:22:22 +00:00
Matt Weeks
6c38930db6
Do not poll for output on hidden windows. Improves performance with many windows open.
...
git-svn-id: file:///home/svn/framework3/trunk@10066 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 23:02:31 +00:00
Stephen Fewer
73f7b20935
Add meterpreter server side support for cleaning up loaded extensions upon server termination by calling the loaded extensions DeinisServerExtension() functions.
...
git-svn-id: file:///home/svn/framework3/trunk@10053 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 11:34:23 +00:00
Stephen Fewer
fd0b96ee9d
Add a list_shift() function to the common linked list code.
...
git-svn-id: file:///home/svn/framework3/trunk@10052 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-19 11:25:11 +00:00
Matt Weeks
f3648b15cc
Add console support to gui. Includes tab completion.
...
git-svn-id: file:///home/svn/framework3/trunk@10033 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-18 00:30:41 +00:00
Matt Weeks
ffb4b611c6
Confirm rpc exit for menu close operations too.
...
git-svn-id: file:///home/svn/framework3/trunk@9947 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-03 02:42:41 +00:00
Matt Weeks
7f87cb9e55
Fix for date error on job.info call.
...
git-svn-id: file:///home/svn/framework3/trunk@9916 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-23 21:54:18 +00:00
Matt Weeks
9b0e9fca55
Support stopping rpcd on exit, based on user confirmation. Fixes #2287
...
git-svn-id: file:///home/svn/framework3/trunk@9915 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-23 21:28:39 +00:00
James Lee
50914a1e68
add a makefile so i don't forget how to compile this stuff
...
git-svn-id: file:///home/svn/framework3/trunk@9901 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-21 07:27:15 +00:00
Matt Weeks
ed74422a62
Fix for Linux error on get system icon call. Fixes bug #2283
...
git-svn-id: file:///home/svn/framework3/trunk@9894 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 23:57:02 +00:00
Matt Weeks
e065891a65
Fix for width of version label.
...
git-svn-id: file:///home/svn/framework3/trunk@9877 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 03:06:17 +00:00
Matt Weeks
e7f748118b
Display number of modules and show console window on double-click
...
git-svn-id: file:///home/svn/framework3/trunk@9876 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 03:04:18 +00:00
James Lee
119f9328fc
remove debug prints. =/
...
git-svn-id: file:///home/svn/framework3/trunk@9875 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 00:57:03 +00:00
James Lee
08d705c1db
add java meterpreter and update java_calendar_deserialize to be able to use it, see #406
...
git-svn-id: file:///home/svn/framework3/trunk@9874 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 00:53:24 +00:00
James Lee
0af37c6d8b
add some option parsing and a bit of documentation.
...
git-svn-id: file:///home/svn/framework3/trunk@9867 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 21:29:50 +00:00
James Lee
ab0d2c365e
nuke the gtk and web UIs for the mini installer
...
git-svn-id: file:///home/svn/framework3/trunk@9866 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 20:28:23 +00:00
James Lee
fb90a81bf0
specify the path to minify.sh
...
git-svn-id: file:///home/svn/framework3/trunk@9865 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 20:12:36 +00:00
James Lee
42600c1f9a
make sure we grab the right scripts/ directory
...
git-svn-id: file:///home/svn/framework3/trunk@9864 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 20:10:52 +00:00
James Lee
92828f2241
quit using ./tmp
...
git-svn-id: file:///home/svn/framework3/trunk@9863 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 20:02:11 +00:00
James Lee
180c3e3bd0
don't spit errors if the symlink doesn't exist
...
git-svn-id: file:///home/svn/framework3/trunk@9862 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 19:38:03 +00:00
James Lee
5059ac9c0e
take an archive as an argument, minify with the new external script
...
git-svn-id: file:///home/svn/framework3/trunk@9861 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 19:16:11 +00:00
Matt Weeks
9029bdf722
Sort modules (exploits, auxiliary, payloads) alphabetically in menu.
...
git-svn-id: file:///home/svn/framework3/trunk@9846 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-16 21:44:55 +00:00
Matt Weeks
85d07af548
Multiple-session script execution fixed.
...
Build config updated for netbeans 6.9 and current tree.
git-svn-id: file:///home/svn/framework3/trunk@9830 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-14 19:27:23 +00:00
Stephen Fewer
c78b87a356
Add support for the ring0 stager_sysenter_hook payload to run its ring3 payload in a new thread in order to preserve/resume the original hijacked ring3 thread.
...
git-svn-id: file:///home/svn/framework3/trunk@9819 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-14 13:43:17 +00:00
Matt Weeks
dcb3ab6441
Initial commit of Java Metasploit GUI source. Netbeans project files included.
...
git-svn-id: file:///home/svn/framework3/trunk@9815 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-13 22:43:43 +00:00
HD Moore
30d3440b5d
New bins, implements the server side of multi-call railgun
...
git-svn-id: file:///home/svn/framework3/trunk@9806 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-13 19:19:21 +00:00
Stephen Fewer
a47ced6ac4
Partial solution for #1448 . Fall back to CreateProcessWithTokenW when CreateProcessAsUser fails with ERROR_PRIVILEGE_NOT_HELD. While only available on 2003 and above this works on my server 2008 test case which was failing before.
...
git-svn-id: file:///home/svn/framework3/trunk@9781 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 18:36:57 +00:00
Stephen Fewer
7a57ca57a6
Bug fix for a misplaced & in call to DestroyEnvironmentBlock() during process_execute(), was causing a hang on Vista and an Access Violation on server 2008.
...
git-svn-id: file:///home/svn/framework3/trunk@9779 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 16:37:50 +00:00
James Lee
11bad248c5
add a simple script for turning a regular checkout into a mini version
...
git-svn-id: file:///home/svn/framework3/trunk@9778 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 16:13:20 +00:00
HD Moore
d0c8f91f21
Bump to 3.4.1
...
git-svn-id: file:///home/svn/framework3/trunk@9764 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-10 15:19:01 +00:00
HD Moore
d3a6418e53
Revert changes to elevate, still not getting around restrictions on primary token creation, needs a deeper look
...
git-svn-id: file:///home/svn/framework3/trunk@9759 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:59:31 +00:00
HD Moore
d5932fc2fd
Switch the namedpipe code to convert the thread token to a primary token first
...
git-svn-id: file:///home/svn/framework3/trunk@9756 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:40:44 +00:00
HD Moore
ec9156827e
Switch the elevator methods to DuplicateHandleEx to get a primary token
...
git-svn-id: file:///home/svn/framework3/trunk@9755 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:23:05 +00:00
HD Moore
29f9f6671e
This *should* fix all cases where execute -t would fail to use an impersonated token
...
git-svn-id: file:///home/svn/framework3/trunk@9754 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 19:32:51 +00:00
James Lee
7fd71dcbcb
note the updated version of ruby
...
git-svn-id: file:///home/svn/framework3/trunk@9753 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 19:29:34 +00:00
HD Moore
972e7bc282
Clean up some of the token impersonation code around process execution
...
git-svn-id: file:///home/svn/framework3/trunk@9751 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 18:54:20 +00:00
HD Moore
ccfea56ed5
Minor tweak to build without the include path for common
...
git-svn-id: file:///home/svn/framework3/trunk@9715 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:46:58 +00:00
HD Moore
5d9a6622de
Merge railgun, tweak configurations
...
git-svn-id: file:///home/svn/framework3/trunk@9709 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:29:03 +00:00
James Lee
fb43495ada
meterpreter now compiles on 64-bit linux in a 32-bit chroot. still need payload handlers and some stdapi love to make it useable
...
git-svn-id: file:///home/svn/framework3/trunk@9468 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-10 06:10:15 +00:00
Joshua Drake
6d1e7bdaa5
big commit - lots of cmdstager changes
...
created 4 cmd stagers (instead of just one): CmdStagerVBS, CmdStagerDebugAsm, CmdStagerDebugWrite, CmdStagerTFTP
created a TFTPServer mixin
created Msf::Exploit::EXE mixin to generate executables
updated all uses of CmdStager to use CmdStagerVBS for the time being
add exploit for cve-2001-0333 using CmdStagerTFTP
updated tftp server to wait for transfers to finish (up to 30 seconds) before shutting down
write debug.exe stager stub in 16-bit assembly (used in CmdStagerDebugAsm)
git-svn-id: file:///home/svn/framework3/trunk@9375 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-26 22:39:56 +00:00
Ramon de C Valle
380ed580fb
Update unixasm external source.
...
git-svn-id: file:///home/svn/framework3/trunk@9348 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-23 20:01:11 +00:00
James Lee
4f61fb6dc3
add a mini installer to the standard build. it can still use some more minification, it's at about 24MB and expands to 132MB
...
git-svn-id: file:///home/svn/framework3/trunk@9341 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-21 06:25:26 +00:00
James Lee
0615dac174
break the common stuff out into a function
...
git-svn-id: file:///home/svn/framework3/trunk@9337 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-21 04:53:46 +00:00
James Lee
a89db83513
use the BINPATH
...
git-svn-id: file:///home/svn/framework3/trunk@9329 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-20 20:39:55 +00:00
James Lee
3a928fc9c2
this is what i really meant.
...
git-svn-id: file:///home/svn/framework3/trunk@9318 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-17 21:14:10 +00:00
James Lee
3ed28c0822
typo
...
git-svn-id: file:///home/svn/framework3/trunk@9317 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-17 21:05:51 +00:00
James Lee
b5cd499b06
only build an arch if we've got bins for it
...
git-svn-id: file:///home/svn/framework3/trunk@9316 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-17 20:49:08 +00:00
James Lee
8d38f0da87
use a variable for the installation directory so we can eventually make it an option
...
git-svn-id: file:///home/svn/framework3/trunk@9314 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-17 20:27:03 +00:00
James Lee
c4a7368591
use our gems directory
...
git-svn-id: file:///home/svn/framework3/trunk@9313 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-17 20:22:57 +00:00
HD Moore
c93642b11f
Update for 3.4.0
...
git-svn-id: file:///home/svn/framework3/trunk@9307 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-16 17:35:56 +00:00
HD Moore
36836423d9
Add a warning, cosmetic comment to asm
...
git-svn-id: file:///home/svn/framework3/trunk@9037 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-07 20:51:05 +00:00
HD Moore
c6ebd735df
Updated comments
...
git-svn-id: file:///home/svn/framework3/trunk@9003 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 15:08:17 +00:00
HD Moore
11c10518b3
Bug fixes for better windows OS compatibility
...
git-svn-id: file:///home/svn/framework3/trunk@9002 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 14:57:51 +00:00
HD Moore
cd2760f2c2
Bug fixes and size improvements for the reverse_https stager
...
git-svn-id: file:///home/svn/framework3/trunk@9001 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 13:53:35 +00:00
HD Moore
e968c3894e
More size tweaks
...
git-svn-id: file:///home/svn/framework3/trunk@8999 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 08:03:28 +00:00
HD Moore
c8defe9716
Size tweaks to bring the ssl stager + encoder + target_id to exactly 400 bytes
...
git-svn-id: file:///home/svn/framework3/trunk@8998 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 07:48:53 +00:00
HD Moore
c6c956ab46
Small patch to enable a new stager
...
git-svn-id: file:///home/svn/framework3/trunk@8984 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 05:21:15 +00:00
HD Moore
5d0fb434b7
Adds a reverse_tcp_dns stager
...
git-svn-id: file:///home/svn/framework3/trunk@8983 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 03:38:57 +00:00
Stephen Fewer
9a4293c445
In with the modified VNC payload which now supports an in memory breakout of session isolation for systems like Vista/2008/7 when the payload is run from a service in session 0 isolation.
...
git-svn-id: file:///home/svn/framework3/trunk@8890 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-24 00:00:05 +00:00
Stephen Fewer
c09ca4eba5
Commit all the code for the new 'screenshot' command in the stdapi extension. Screenshot will now work on NT4 - 7 on both x86 and x64 and on newer versions of Windows we can break out of session isolation (e.g. session 0 isolation for services) to screenshot the active desktop (or logon screen) without the need to migrate meterpreter. The majority of the migration code-injection stuff has been refactored out into base_inject.c so it can be shared with the new ps_inject() functionality to inject dlls. The 'ps' command now reports what session each process belongs to (if this is too verbose we can remove it or add a -v verbose switch to the ps command). The 'execute' command can now take a -s switch in order to create a process in a users session under the users privs (assuming you have the privs to do this).
...
git-svn-id: file:///home/svn/framework3/trunk@8787 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-11 17:09:55 +00:00
Stephen Fewer
c55e9af9ae
Commit the updated APC injection stubs. fixes a nasty issue in some edge cases whereby when using APC injection for a process in another session then the current host process the injected APC can cause an access violation in kernel32 during a call the kernel32!CreateThread caused by the APC's host thread not having an initialized Activation Context inside its TEB. We now test for this and create a dummy ActivationContext entry to appease the kernel. This will both improve DLL injection reliability as well as meterpreter migration reliability.
...
git-svn-id: file:///home/svn/framework3/trunk@8786 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-11 17:00:19 +00:00
Stephen Fewer
08d1850bcc
Commit the new VNC x86/x64 DLL source code...
...
git-svn-id: file:///home/svn/framework3/trunk@8745 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-08 14:49:45 +00:00
Stephen Fewer
d0f2b589b6
Delete the old VNC source code.
...
git-svn-id: file:///home/svn/framework3/trunk@8744 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-08 14:39:20 +00:00
Stephen Fewer
195d1ab4b8
Commit snojobs jpeg patch for espia with an x64 build and some minor changes on the ruby side (The 'screenshot' command is now 'screengrab' to avoid a future conflict with changes happening in stdapi).
...
git-svn-id: file:///home/svn/framework3/trunk@8726 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-05 15:50:24 +00:00
Stephen Fewer
4e73d95dac
Commit the JPEG-8 lib code from snowjobs patch. Added an x64 build environment and the libs directory for x86/x64 projects to link against.
...
git-svn-id: file:///home/svn/framework3/trunk@8725 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-05 15:44:36 +00:00
Stephen Fewer
5f35f33cd1
Forgot the updated build.py, also add in a link to a blog post I wrote for this shellcode.
...
git-svn-id: file:///home/svn/framework3/trunk@8657 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-26 14:27:13 +00:00
Stephen Fewer
88cc851a41
Commit the stager_sysenter_hook win32 kernel shellcode source and mixin patch, resolves #405 .
...
git-svn-id: file:///home/svn/framework3/trunk@8655 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-26 13:41:16 +00:00
Tod Beardsley
d5f4ea9692
Adding TightVNC's java viewer to external/source. vnc.html works, it just needs to have the path set correctly.
...
git-svn-id: file:///home/svn/framework3/trunk@8648 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-25 23:18:42 +00:00
Tod Beardsley
948d9d95d9
Deleting the winvnc java stuff.
...
git-svn-id: file:///home/svn/framework3/trunk@8647 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-25 23:10:00 +00:00
Stephen Fewer
4ed9e71b76
Commit the meterpreter C side (and bins) for transparent zlib (zlib.c copied from the posix meterpreter source) compression of TLV's and channels. To use transparent compression with channels, create them with CHANNEL_FLAG_COMPRESS. To use transparent compression with any TLV value, bitwise or the TLV type with TLV_META_TYPE_COMPRESSED (Don't create the TLV type with TLV_META_TYPE_COMPRESSED as the compressed flag is removed on the remote end after compression). For consistency with the ruby side we could at a later stage add a boolean compress parameter to all the packet_add_tlv_* functions so you don't have to manually specify TLV_META_TYPE_COMPRESSED flag.
...
git-svn-id: file:///home/svn/framework3/trunk@8515 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-16 14:56:24 +00:00
Stephen Fewer
e732ef6872
Commit the Meterpreter C side for the UDP socket pivoting. (+1 bug fix for the TCP client socket notify event function)
...
git-svn-id: file:///home/svn/framework3/trunk@8430 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-09 16:43:33 +00:00
Stephen Fewer
a80d1ad2ee
Commit the new TCP server channel support on the meterpreter end as well as some fixes to TCP client channels.
...
git-svn-id: file:///home/svn/framework3/trunk@8383 4d416f70-5f16-0410-b530-b9f4589650da
2010-02-06 17:55:41 +00:00
et
a40817ea67
Finally the Wmap patch for ratproxy for new db schema. Based on Albert School patch
...
git-svn-id: file:///home/svn/framework3/trunk@8332 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-31 04:15:31 +00:00
HD Moore
42b331b47f
Fix #790 . Initialize the client state to be alive, tweak a few things on the meterpreter side
...
git-svn-id: file:///home/svn/framework3/trunk@8327 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-29 18:52:44 +00:00
Stephen Fewer
7a32f9f2e2
fix ps so an x64 process's path is returned correctly when ps is run from a wow64 meterpeter.
...
git-svn-id: file:///home/svn/framework3/trunk@8322 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-29 12:00:45 +00:00
Stephen Fewer
3824a2938c
...update the project files. I have added in an extra post build step for elevator.dll so it can work on NT4 (when used with rundll32.exe for getsystem technique #2 ). The post build step uses the editbin.exe to set the major OS/Subsystem version to 4 instead of 5 so NT4 will load it, (visual c++ 2008 cant build NT4 binaries, only 2000 and above).
...
git-svn-id: file:///home/svn/framework3/trunk@8318 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-29 01:12:35 +00:00
Stephen Fewer
0e08aa0094
Add in KiTrap0D to the priv getsystem command.
...
git-svn-id: file:///home/svn/framework3/trunk@8317 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-29 01:09:57 +00:00
HD Moore
284af1260a
Disable debug tracing
...
git-svn-id: file:///home/svn/framework3/trunk@8312 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 23:10:58 +00:00
HD Moore
f3408fd327
Fixes #744 . The core issue was the migrate code waiting on SetEvent, but the migrate stub was blocked on a WSASocket due to a pending packet_receive in the main server thread. Simply settin the thread termination signal did not work, as the SSL_read was already in progress. This change forcible terminates the main server thread before waiting on the event in order to bypass this deadlock. The downside is a failed migrate has no way to recover if it makes it this far.
...
git-svn-id: file:///home/svn/framework3/trunk@8309 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 22:55:41 +00:00
natron
69ad365b46
Added STDERR to pure java payload, cleaned up user's view.
...
git-svn-id: file:///home/svn/framework3/trunk@8308 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 22:53:36 +00:00
Stephen Fewer
5793ab128c
modularize the source for each technique in elevator too.
...
git-svn-id: file:///home/svn/framework3/trunk@8299 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 16:30:09 +00:00
Stephen Fewer
8eb036d704
modularize the source for each technique, making it cleaner to add in new techniques at a later stage.
...
git-svn-id: file:///home/svn/framework3/trunk@8298 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 15:04:27 +00:00
Stephen Fewer
62c1a99c8e
update the workspace files.
...
git-svn-id: file:///home/svn/framework3/trunk@8295 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 13:46:51 +00:00
Stephen Fewer
fad278566b
Add in the elevator dll, used by getsystem for a number of things.
...
git-svn-id: file:///home/svn/framework3/trunk@8294 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 13:45:31 +00:00
Stephen Fewer
e58847009c
Add in the new getsystem command to the priv extension.
...
git-svn-id: file:///home/svn/framework3/trunk@8293 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 13:40:55 +00:00
Stephen Fewer
f82b6c5952
Update RDI by adding in the LoadRemoteLibraryR function to use RDI to inject into arbitrary processes. Current limitation is it only works on x86->x86 and x64->x64 scenarios, due to the offsets used in parsing the PE file being determined at compile time (e.g. if we compile LoadRemoteLibraryR into an x86 binary it wont be able to load x64 images). Solution is to not rely on compiler for the offset but to do it manually which shouldn't be too much work.
...
git-svn-id: file:///home/svn/framework3/trunk@8292 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 13:37:55 +00:00
Stephen Fewer
9f4332ce60
bug fix for the stdapi command rev2self. was not playing nice with new thread token stuff.
...
git-svn-id: file:///home/svn/framework3/trunk@8291 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 13:33:24 +00:00
Stephen Fewer
095b6ee7ed
move these macros from base_dispatch.c to common.h as they are useful to use elsewhere.
...
git-svn-id: file:///home/svn/framework3/trunk@8290 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-28 13:32:16 +00:00
natron
cd5e5880d2
Initial commit of Msf::Exploit::Java mixin and multi/browser/java_signed_applet exploit.
...
git-svn-id: file:///home/svn/framework3/trunk@8267 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 19:46:39 +00:00
HD Moore
cf26fcb9ad
Fixes #784 . Adds .NET server support
...
git-svn-id: file:///home/svn/framework3/trunk@8256 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-27 07:02:07 +00:00
pusscat
227dd5ba12
Remove test trap ;)
...
git-svn-id: file:///home/svn/framework3/trunk@8243 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 20:20:16 +00:00
Joshua Drake
e765288c6c
lol, fix funny $Id$ replacement
...
git-svn-id: file:///home/svn/framework3/trunk@8241 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 20:10:56 +00:00
HD Moore
4b637c4912
Updated with new target system, signature for 2000 SP4, fixed SP4 usage, but the priv esclation is non-functional, use twunk16/debug depending on what is available.
...
git-svn-id: file:///home/svn/framework3/trunk@8240 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-26 19:13:28 +00:00
HD Moore
a898901ad3
Switch to twunk_16 for Windows 7 compatibility
...
git-svn-id: file:///home/svn/framework3/trunk@8230 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 18:07:48 +00:00
HD Moore
9f37906ba9
Tweaks for reliability
...
git-svn-id: file:///home/svn/framework3/trunk@8226 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-25 16:55:53 +00:00
Stephen Fewer
4e4a65b9a4
Complete overhaul of process migration. Migration across x86->x86, x64->x64, wow64->x64 and x64->wow64 all supported using a number of techniques.
...
git-svn-id: file:///home/svn/framework3/trunk@8198 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-22 19:46:18 +00:00
Stephen Fewer
cfcbfd5d3c
bug fix x64 migrate shellcodes for wow64->x64 migration.
...
git-svn-id: file:///home/svn/framework3/trunk@8197 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-22 19:37:10 +00:00
Stephen Fewer
538a647671
The stub for wow64->x64 migration.
...
git-svn-id: file:///home/svn/framework3/trunk@8195 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-22 17:12:41 +00:00
Stephen Fewer
1e63f357cb
For now just adding in the new APC migrate stubs and the wow64->x64 exec stub. (fix up the build scripts and use a dedicated migrate directory for this stuff).
...
git-svn-id: file:///home/svn/framework3/trunk@8193 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-22 14:03:53 +00:00
HD Moore
c419511386
Minor changes to make scripting easier and allow it to escalate a specific pid
...
git-svn-id: file:///home/svn/framework3/trunk@8168 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 22:30:15 +00:00
HD Moore
752f8db83b
Add KiTrap0d to the external/source/ as a reference
...
git-svn-id: file:///home/svn/framework3/trunk@8167 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 22:22:19 +00:00
Stephen Fewer
f3fd2eae80
Commit the new x64 migrate stub. Compatible with x64->x64 migration (and x86->x64 migration once the remote thread issue is resolved)
...
git-svn-id: file:///home/svn/framework3/trunk@8163 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 18:39:56 +00:00
Stephen Fewer
d032955959
Commit the new x86 migrate stub. Compatible with x86->x86 migration and x64->x86 migration, on NT4 and up (where applicable).
...
git-svn-id: file:///home/svn/framework3/trunk@8160 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 12:55:24 +00:00
Stephen Fewer
159e240f3a
updated stapi project file.
...
git-svn-id: file:///home/svn/framework3/trunk@8158 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 11:07:21 +00:00
Stephen Fewer
757276d70f
First cut for improved process listing. Now works well on NT4 and up. One issue with getting the path for x64 processes on an x86 meterpreter.
...
git-svn-id: file:///home/svn/framework3/trunk@8156 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 10:40:02 +00:00
Stephen Fewer
0286a67f1e
small bug fix to get getuid working on NT4
...
git-svn-id: file:///home/svn/framework3/trunk@8155 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-19 10:36:12 +00:00
HD Moore
55dc3aa192
Support for slackware's mktemp, fixes #762
...
git-svn-id: file:///home/svn/framework3/trunk@8112 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-14 12:48:30 +00:00
HD Moore
42b3a5774d
Adds the process username to the ps output (when possible).
...
git-svn-id: file:///home/svn/framework3/trunk@8056 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-02 03:41:21 +00:00
HD Moore
4d7aec7c2d
Fixes #745 . This commit changes how token manipulation works, adds the steal_token, drop_token, and getprivs commands. Tested on NT 4.0, 2000 SP4, XP SP3, 2003 SP2, Vista, and Windows 7
...
git-svn-id: file:///home/svn/framework3/trunk@8055 4d416f70-5f16-0410-b530-b9f4589650da
2010-01-02 00:35:10 +00:00
HD Moore
98f83bbab1
Adds reg queryclass
...
git-svn-id: file:///home/svn/framework3/trunk@8046 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-31 15:52:30 +00:00
Joshua Drake
2283e029db
crossing fingers, big cr removal batch
...
git-svn-id: file:///home/svn/framework3/trunk@8038 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-30 22:24:22 +00:00
HD Moore
d0969746a4
Mostly cosmetic changes from local tree
...
git-svn-id: file:///home/svn/framework3/trunk@7970 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-26 03:31:20 +00:00
HD Moore
f648a6605e
Update the build script versions
...
git-svn-id: file:///home/svn/framework3/trunk@7945 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-22 13:39:17 +00:00
HD Moore
68aafc8e13
Fixes #658 by adding a 250ms sleep to the dispatch of the close call.
...
git-svn-id: file:///home/svn/framework3/trunk@7934 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-21 19:53:10 +00:00
Joshua Drake
b37c34579b
add exploit module for cve-2009-3869
...
NOTE: no policy change is required for this exploit to succeed.
git-svn-id: file:///home/svn/framework3/trunk@7899 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-17 04:52:40 +00:00
Joshua Drake
255724d640
compile java applet with 1.3, Fixes #685
...
git-svn-id: file:///home/svn/framework3/trunk@7850 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-14 17:26:19 +00:00
Joshua Drake
34408c5e3e
add exploit module for CVE-2009-3867 (JRE getSoundbank)
...
git-svn-id: file:///home/svn/framework3/trunk@7827 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-11 21:18:31 +00:00
HD Moore
3e98ff9d9a
Stop breaking tar on OS X, thanks
...
git-svn-id: file:///home/svn/framework3/trunk@7815 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 22:25:29 +00:00
Stephen Fewer
be588716c5
Bug fix for meterpreter on NT4 (Tested on NT4.0 SP6). Add a function thread_open() in thread.c to wrap the use kernel32!OpenThread and ntdll!NtOpenThread for backwards compatibility.
...
git-svn-id: file:///home/svn/framework3/trunk@7806 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 18:12:51 +00:00
HD Moore
6da0fda5ed
Updated meterpreter binaries with a slight change to the thread schedule (solves a looping problem when the socket is dead).
...
git-svn-id: file:///home/svn/framework3/trunk@7793 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-10 05:42:47 +00:00
HD Moore
ff19b649f3
See #662 . This should fix most of the meterpreter-side issues with sockets, there is still a second piece of this which is unflushed data on the local forwards from the ruby code.
...
git-svn-id: file:///home/svn/framework3/trunk@7761 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 22:08:06 +00:00
HD Moore
792724c3f3
Cleanups to the socket code, its still not perfect, but much more usable now
...
git-svn-id: file:///home/svn/framework3/trunk@7750 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-08 14:52:07 +00:00
Stephen Fewer
4f8cfc27d4
Replace the use of Critical Sections for locking with Mutex's (thread.c). This appears to resolve a deadlock issue with OpenSSL on some Windows systems. This commit resolves a bug in interactive processes where an interactive waiter thread will chew cpu due to a tight loop introduced by anonymous pipes not blocking (process.c). Dynamic lock creation for OpenSSL has been re-enabled should a future version of OpenSSL require it, AFAIK the current version used, v0.8.9, does not use dynamic lock creation (server_setup.c). Channels have been given locks to help synchronize concurrent access to a single channel.
...
git-svn-id: file:///home/svn/framework3/trunk@7732 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 13:04:41 +00:00
HD Moore
dfa0d155fc
See #607 . Switch sniffer code to use mutexes
...
git-svn-id: file:///home/svn/framework3/trunk@7728 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-07 05:19:46 +00:00
Stephen Fewer
a273c9f07c
Initial commit of the multi-threaded meterpreter.
...
git-svn-id: file:///home/svn/framework3/trunk@7698 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-04 17:37:21 +00:00
HD Moore
8aef3d560c
Fixes #579
...
git-svn-id: file:///home/svn/framework3/trunk@7694 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-04 11:35:24 +00:00
HD Moore
cbb0fb10e7
Tweak for 3.3.1
...
git-svn-id: file:///home/svn/framework3/trunk@7649 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-30 20:14:55 +00:00
HD Moore
8ba8945f53
Fixes #579 . Clean up the runtime environment for ruby, update the version
...
git-svn-id: file:///home/svn/framework3/trunk@7633 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-28 16:38:52 +00:00
HD Moore
ffcd613450
Commit the rc2 installer
...
git-svn-id: file:///home/svn/framework3/trunk@7527 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-16 04:05:45 +00:00
HD Moore
5507d686da
Remove rm of old touched file
...
git-svn-id: file:///home/svn/framework3/trunk@7480 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-12 07:15:13 +00:00
HD Moore
d38ac81282
Hopefully the last round of tweaks for the windows installer
...
git-svn-id: file:///home/svn/framework3/trunk@7479 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-12 07:13:09 +00:00
HD Moore
1e7be6650a
This method seems to work on Windows 7 - $stdin reads on a closed rxvt lead to the hung ruby procs.
...
git-svn-id: file:///home/svn/framework3/trunk@7478 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-12 07:02:40 +00:00
HD Moore
ecc06247ab
Still sorting out permission checks
...
git-svn-id: file:///home/svn/framework3/trunk@7477 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-12 06:38:03 +00:00
HD Moore
ab33e5403d
Fixes #490 . Fixes #497 . Fixes #479 (hopefully in all cases). Updates to the cygwin scripts and batch files
...
git-svn-id: file:///home/svn/framework3/trunk@7475 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-12 06:18:32 +00:00
HD Moore
63383842e5
Fixes #496 . Adds a Cygwin Shell link (and a pdf icon)
...
git-svn-id: file:///home/svn/framework3/trunk@7474 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-12 05:59:46 +00:00
HD Moore
74eb0ed34c
Add the used icons
...
git-svn-id: file:///home/svn/framework3/trunk@7472 4d416f70-5f16-0410-b530-b9f4589650da
2009-11-12 05:41:47 +00:00