Commit Graph

2180 Commits (c971bc930c7799a80e08ff74cbb89cfa3ecd4239)

Author SHA1 Message Date
Carlos Perez 709402bba6 Added IDE Model Check
git-svn-id: file:///home/svn/framework3/trunk@12937 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-13 23:46:25 +00:00
HD Moore 0ea8936c0d Fix module titles to be consistent
git-svn-id: file:///home/svn/framework3/trunk@12935 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-13 03:35:32 +00:00
Carlos Perez 6582d6ee58 Added Amazon Linux enumeration
git-svn-id: file:///home/svn/framework3/trunk@12934 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-13 01:46:54 +00:00
Carlos Perez 02b78c0cd2 Added dmidecode output checking
git-svn-id: file:///home/svn/framework3/trunk@12932 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-13 01:31:58 +00:00
Carlos Perez d6cdb3ec45 Initial Linux Post Module to detect is target host is a Hyper-V, Xen, VMware, Qemu/KVM or VirtualBox VM.
git-svn-id: file:///home/svn/framework3/trunk@12931 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-13 01:07:27 +00:00
Carlos Perez 611b0c9e88 Fix false positive on win 7 x64 with vmware installed
git-svn-id: file:///home/svn/framework3/trunk@12927 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-12 14:50:55 +00:00
Wei Chen f6c54d0fae Using store_loot to store screenshots instad (see #4693). Also, if xwd fails, then we don't save it.
git-svn-id: file:///home/svn/framework3/trunk@12907 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 23:22:15 +00:00
Carlos Perez 2191055a71 will skip accounts locked with no password
git-svn-id: file:///home/svn/framework3/trunk@12903 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 11:28:30 +00:00
Wei Chen fbe81ed82a tab fix
git-svn-id: file:///home/svn/framework3/trunk@12901 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 05:19:09 +00:00
Wei Chen 1a1b89e59d Added post mod to enum linux cron
git-svn-id: file:///home/svn/framework3/trunk@12900 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 05:18:05 +00:00
Carlos Perez 37246299eb Keywords
git-svn-id: file:///home/svn/framework3/trunk@12899 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 03:39:34 +00:00
Carlos Perez 1fced297f4 Indents and Keywords
git-svn-id: file:///home/svn/framework3/trunk@12898 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 03:36:48 +00:00
Carlos Perez 2910308b3b Initial set of Solaris post modules tested against Solaris 10 and 11
git-svn-id: file:///home/svn/framework3/trunk@12896 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-10 03:08:47 +00:00
Wei Chen f334eafca4 Changes to some commands based on Eric Romang Blog's suggestions.
git-svn-id: file:///home/svn/framework3/trunk@12890 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-09 15:33:03 +00:00
Carlos Perez 13f0c5197d Add support for Oracle and Arch linux, thanks to Robin Wood for the Arch info
git-svn-id: file:///home/svn/framework3/trunk@12888 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-09 12:51:23 +00:00
James Lee d19b5af71a add a post module for stealing mRemote saved passwords, fixes #4641; thanks David Maloney!
git-svn-id: file:///home/svn/framework3/trunk@12877 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-06 22:54:31 +00:00
David Rude 26482bf926 Added WS_FTP Client password gather post module, thanks thelightcosine!
git-svn-id: file:///home/svn/framework3/trunk@12867 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-06 16:53:14 +00:00
Wei Chen ba345df338 Added screenshot capture feature in xwd format
git-svn-id: file:///home/svn/framework3/trunk@12842 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-03 15:02:59 +00:00
Wei Chen 5db2a90fe3 Added enum_linux.rb
git-svn-id: file:///home/svn/framework3/trunk@12838 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-03 00:26:29 +00:00
Carlos Perez 237f03f8e9 Windows Post Module for gathering Total Commander FTP client saved passwords
git-svn-id: file:///home/svn/framework3/trunk@12810 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-02 00:20:41 +00:00
HD Moore f20adabf8c Fixes #4626 by checking for an out of bounds value before using the type as an array index
git-svn-id: file:///home/svn/framework3/trunk@12809 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 23:47:16 +00:00
Carlos Perez 5d06a5f366 Linux post Module for dumping hashes in to a unshadowed pwd file
git-svn-id: file:///home/svn/framework3/trunk@12808 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 22:57:36 +00:00
Carlos Perez e030fb0a1e Linux post Module for enumerating startup of configured services
git-svn-id: file:///home/svn/framework3/trunk@12807 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 22:51:50 +00:00
Carlos Perez 849600d31e Updated to use new post libraries
git-svn-id: file:///home/svn/framework3/trunk@12806 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 22:49:24 +00:00
Wei Chen e549e8d539 open_key() call should been part of the begin/rescue block
git-svn-id: file:///home/svn/framework3/trunk@12801 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 19:05:40 +00:00
Carlos Perez 67ec93585a Multi platform ssh_cred post module by Jim Halfpenny, modified the calls to be cmd_exec and added method to identify proper platform in the case the platform is not properly set for the session like in the case of ssh_login aux module.
git-svn-id: file:///home/svn/framework3/trunk@12797 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 12:46:27 +00:00
Carlos Perez 07158d11b4 slackware packages are not managed by rpm by default
git-svn-id: file:///home/svn/framework3/trunk@12796 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 11:52:36 +00:00
Carlos Perez 2473e9c754 Made the printing of the packages optional
git-svn-id: file:///home/svn/framework3/trunk@12795 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 03:37:37 +00:00
Carlos Perez 33d1e147a7 Typos and Keywords
git-svn-id: file:///home/svn/framework3/trunk@12794 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 03:27:17 +00:00
Carlos Perez 0e1bc2f4d6 Linux Post Module for enumerating installed packages.
git-svn-id: file:///home/svn/framework3/trunk@12793 4d416f70-5f16-0410-b530-b9f4589650da
2011-06-01 03:25:17 +00:00
Jonathan Cran 9bdca1f6e2 oops, add a comma back
git-svn-id: file:///home/svn/framework3/trunk@12633 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-16 05:53:49 +00:00
Jonathan Cran 71f6f8c583 copypasta fix
git-svn-id: file:///home/svn/framework3/trunk@12631 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-16 04:07:18 +00:00
Carlos Perez 71dc6ba9d9 Needs more work removing for now
git-svn-id: file:///home/svn/framework3/trunk@12630 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-16 03:19:07 +00:00
Carlos Perez d50613deaa Keywords
git-svn-id: file:///home/svn/framework3/trunk@12618 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-15 18:12:29 +00:00
Carlos Perez 672c8961be OpenSSH Information Gather Module, tested against OSX and Linux
git-svn-id: file:///home/svn/framework3/trunk@12617 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-15 17:28:20 +00:00
David Rude 3c133a1415 added some more verbosity so its clear things are happening, moved the session.type check to be more immediate
git-svn-id: file:///home/svn/framework3/trunk@12594 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-12 17:56:18 +00:00
Wei Chen 90278f308b Fixed issue with 'break'. Added x64 support.
git-svn-id: file:///home/svn/framework3/trunk@12570 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-09 18:27:54 +00:00
David Rude 3b5cf3826a Added TheLightCosines OpenSSL ChangeCipherSpec DoS aux module
git-svn-id: file:///home/svn/framework3/trunk@12538 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-04 19:08:28 +00:00
Wei Chen eb2c0a5919 Fixed more typos
git-svn-id: file:///home/svn/framework3/trunk@12527 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-03 05:29:59 +00:00
Wei Chen c4e8889119 Fixed typo.
git-svn-id: file:///home/svn/framework3/trunk@12526 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-03 05:27:54 +00:00
Wei Chen c0baf731f8 Updated print_error() for sqlite3's rescue
git-svn-id: file:///home/svn/framework3/trunk@12524 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-03 05:23:51 +00:00
Wei Chen 352fc92539 Show OTR key and save it to disk
git-svn-id: file:///home/svn/framework3/trunk@12493 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-01 22:36:20 +00:00
Wei Chen 94832059e5 The path fix would work if I remembered to uncomment the code... geez.
git-svn-id: file:///home/svn/framework3/trunk@12487 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-01 00:32:17 +00:00
Wei Chen b763d66b39 Fixed two issues: NoMethodError undefined method `text' for nil:NilClass and The system cannot find the file specified.
git-svn-id: file:///home/svn/framework3/trunk@12486 4d416f70-5f16-0410-b530-b9f4589650da
2011-05-01 00:20:57 +00:00
HD Moore d9bee35456 Handle cases where iTunes is not installed or the base user directory has been changed
git-svn-id: file:///home/svn/framework3/trunk@12468 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-29 16:10:29 +00:00
David Rude 5e374e1d36 Post module title changes for consistency
git-svn-id: file:///home/svn/framework3/trunk@12455 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-27 16:25:15 +00:00
Wei Chen 46c919cc8a Removed meetRequirements(). No need since it's already specified in SessionTypes.
git-svn-id: file:///home/svn/framework3/trunk@12454 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-27 15:48:35 +00:00
Wei Chen 2f6b941584 Fixed a bug with "TypeError can't convert nil into String"
git-svn-id: file:///home/svn/framework3/trunk@12453 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-27 15:41:37 +00:00
HD Moore 95e9153b33 Move to Windows to reflect the removal of the OS X target
git-svn-id: file:///home/svn/framework3/trunk@12452 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-27 15:29:56 +00:00
James Lee dbf2f5a4af add a post module for stealing obfuscated winscp stored passwords, fixes #4210, thanks TheLightCosine!
git-svn-id: file:///home/svn/framework3/trunk@12449 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-26 23:55:56 +00:00
HD Moore f7eb047659 Fix the title and remove OS X shell session support until bugs are fixed
git-svn-id: file:///home/svn/framework3/trunk@12427 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-24 22:23:00 +00:00
HD Moore 66631388ed Add a Post module that pulls sensitive files from the Apple iOS backup images. This includes a full manifest parser and can be used to collect stored camera images, call history, saved passwords, and the wireless location "tracking" database.
git-svn-id: file:///home/svn/framework3/trunk@12425 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-24 19:28:55 +00:00
James Lee 219b796e28 dup of enum_applications
git-svn-id: file:///home/svn/framework3/trunk@12408 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-22 20:13:43 +00:00
James Lee d9a80d713c pastographical error, thanks dookie for spotting it
git-svn-id: file:///home/svn/framework3/trunk@12395 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-21 18:14:51 +00:00
David Rude 6b538bda06 Fixes for shell commands and store_loot
git-svn-id: file:///home/svn/framework3/trunk@12347 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-18 14:31:01 +00:00
James Lee 02b3b85e7c port get_application_list to post module, with a couple small tweaks (check wow64 reg keys, and don't print blank lines)
git-svn-id: file:///home/svn/framework3/trunk@12274 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-07 21:59:47 +00:00
Jonathan Cran 1ffb5e97e0 mubix's patch. grab the right value from the reg if it's not a fixnum, and set a default report port
git-svn-id: file:///home/svn/framework3/trunk@12249 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-05 19:09:44 +00:00
Carlos Perez bae9a04cf6 Migration of domain_list script to enum_domain_group_users post module by Stephen Haywood
git-svn-id: file:///home/svn/framework3/trunk@12232 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-04 00:42:27 +00:00
Carlos Perez 7aa21e7ef8 Qemu detection support, patch provided by Sergio Guzman.
git-svn-id: file:///home/svn/framework3/trunk@12217 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-02 13:03:43 +00:00
Wei Chen 7502895037 Minor changes
git-svn-id: file:///home/svn/framework3/trunk@12216 4d416f70-5f16-0410-b530-b9f4589650da
2011-04-02 05:54:02 +00:00
David Rude 98d7e5e75e minor info hash fixes
git-svn-id: file:///home/svn/framework3/trunk@12191 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-31 16:56:12 +00:00
David Rude 7f91739062 Converted screen_spy to a post module
git-svn-id: file:///home/svn/framework3/trunk@12189 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-31 16:41:52 +00:00
David Rude 2beeca4c90 Send the session object directly to store_loot fixes issues with report_host stack traces
git-svn-id: file:///home/svn/framework3/trunk@12188 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-31 15:12:08 +00:00
David Rude 9a94359c34 Add a rescue for Profiles directory listing
git-svn-id: file:///home/svn/framework3/trunk@12177 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-29 04:47:01 +00:00
David Rude c0bde3f030 Add a rescue for the file download
git-svn-id: file:///home/svn/framework3/trunk@12176 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-29 04:43:02 +00:00
David Rude 30b25994d7 More file stats just to be safe and more clear on the message
git-svn-id: file:///home/svn/framework3/trunk@12175 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-29 03:56:46 +00:00
David Rude add0f64a93 Check for Mozilla directory before checking for subdirectories
git-svn-id: file:///home/svn/framework3/trunk@12174 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-29 03:50:32 +00:00
David Rude 9904b230fe keep looping don't just return on the first failure
git-svn-id: file:///home/svn/framework3/trunk@12173 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-29 03:37:18 +00:00
David Rude c3fb6b3bf8 Fixed the windows enum user check if the Firefox directory does not exist
git-svn-id: file:///home/svn/framework3/trunk@12172 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-29 03:27:01 +00:00
Carlos Perez 43ba211d3d Module for injection in to a list of processes a given payload connecting to a list of given IP addresses.
git-svn-id: file:///home/svn/framework3/trunk@12145 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-26 03:35:59 +00:00
Carlos Perez 33d1baa835 Did not save output of commands when running against shell
git-svn-id: file:///home/svn/framework3/trunk@12144 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-26 02:56:19 +00:00
Tod Beardsley 1d65ae4122 Adding post module conversion for the Meterpreter autoroute script.
git-svn-id: file:///home/svn/framework3/trunk@12126 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-24 16:34:18 +00:00
Carlos Perez 1a27e6694f Changed order of description for loot file to make identifying cleanup resource files in loot easier.
git-svn-id: file:///home/svn/framework3/trunk@12080 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-23 03:12:43 +00:00
Carlos Perez 0ea46afa75 Migration of getgui script to post module enable_rdp
git-svn-id: file:///home/svn/framework3/trunk@12079 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-23 03:11:04 +00:00
Carlos Perez 735711ae01 Typo of the variable that has the data.
git-svn-id: file:///home/svn/framework3/trunk@12078 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-23 02:59:51 +00:00
Carlos Perez a5c3987b33 Multi Console Command script migrated to post module. Now names run_console_rc_file. Will read and execute meterpreter console commands found in a given resource file.
git-svn-id: file:///home/svn/framework3/trunk@12074 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-22 23:04:41 +00:00
Carlos Perez cffe667c71 Multi command script migrated to post module, supports *nix system and both shell and meterpreter. Will run commands in a given resource file.
git-svn-id: file:///home/svn/framework3/trunk@12073 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-22 22:59:01 +00:00
Carlos Perez 68374e11ef small typo
git-svn-id: file:///home/svn/framework3/trunk@12051 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-21 02:35:12 +00:00
Carlos Perez 7648ab6e5f forgot options descriptions
git-svn-id: file:///home/svn/framework3/trunk@12050 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-21 02:30:27 +00:00
Carlos Perez c7989fff39 Migrate script migrated to post module.
git-svn-id: file:///home/svn/framework3/trunk@12049 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-21 02:27:36 +00:00
Carlos Perez d45969a381 Mubix migration and enhancement of the vnc password script
git-svn-id: file:///home/svn/framework3/trunk@12048 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-21 02:18:34 +00:00
James Lee 95633f7c3d store_loot in gather/env
git-svn-id: file:///home/svn/framework3/trunk@12046 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-21 01:31:05 +00:00
Carlos Perez 92e749f6ff USB Drive history enumeration script contributed by nebulus
git-svn-id: file:///home/svn/framework3/trunk@12044 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-21 01:23:32 +00:00
Carlos Perez 3fca6a4225 Migration of dumplinks script to dumplinks post module
git-svn-id: file:///home/svn/framework3/trunk@12043 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-21 01:22:44 +00:00
Carlos Perez 5b8c2007c8 Migration of credcollector script to credential_collector post module
git-svn-id: file:///home/svn/framework3/trunk@12036 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-20 17:42:37 +00:00
Carlos Perez 71fd7136ae Forgot to update descriptions of the options set
git-svn-id: file:///home/svn/framework3/trunk@12035 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-20 17:36:28 +00:00
Carlos Perez 9cb690b9e3 ARP Scanner script migrated to Post Module
git-svn-id: file:///home/svn/framework3/trunk@12034 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-20 17:28:35 +00:00
James Lee 8db83e406e try to find wow64 installs. also fixes a problem where blank lines were printed when no DisplayName was found
git-svn-id: file:///home/svn/framework3/trunk@12021 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-18 21:46:01 +00:00
James Lee db9c9c625f :host can't be a peerhost (contains the port as well). report will just figure it out if you use a Session object, though
git-svn-id: file:///home/svn/framework3/trunk@12020 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-18 21:21:56 +00:00
Carlos Perez a5e899cb04 Fix loading problem on one of the test boxes
git-svn-id: file:///home/svn/framework3/trunk@12003 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-17 00:10:07 +00:00
Carlos Perez 4031daa1fb update modules to use is_system? to ensure SID is used to verify when running in certain languages in Windows
git-svn-id: file:///home/svn/framework3/trunk@11999 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-16 22:54:40 +00:00
Carlos Perez 8d1b37a452 save hashes to DB
git-svn-id: file:///home/svn/framework3/trunk@11989 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-16 16:26:49 +00:00
Carlos Perez cb9abd8b13 saved sha1 instead of the proper hash, major typo on my part
git-svn-id: file:///home/svn/framework3/trunk@11988 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-16 16:19:37 +00:00
Wei Chen 15f52a2e6b Updated: Make sure sqlite3 is supported before executing SQL queries
git-svn-id: file:///home/svn/framework3/trunk@11949 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-14 00:11:06 +00:00
Wei Chen d8ff158855 Ported Sven Taute's enum_chrome.rb as a POST module. Modified output, saved log format, supports data dumping for x64 Windows, etc. Improvements still needed.
git-svn-id: file:///home/svn/framework3/trunk@11947 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-13 21:19:27 +00:00
Steve Tornio 4534c76882 add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@11907 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-09 02:21:36 +00:00
David Rude 45556f7470 .NET Runtime Optimization Service privilege escalation post module
git-svn-id: file:///home/svn/framework3/trunk@11904 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-09 00:29:59 +00:00
James Lee 5299692fc9 fix a typo (thanks to privmode for pointing out), and incorrect host arg for store_loot. fixes #3897
git-svn-id: file:///home/svn/framework3/trunk@11881 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-05 20:21:12 +00:00
David Rude 921a181ac0 Adds a Firefox post module to collect credentials and cookies
git-svn-id: file:///home/svn/framework3/trunk@11879 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-05 02:57:32 +00:00
David Rude 0663564efc Fixed up some minor bugs, loot converted to csv for parsing
git-svn-id: file:///home/svn/framework3/trunk@11878 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-04 16:59:35 +00:00
David Rude fafb7debcc fixes some minor bugs
git-svn-id: file:///home/svn/framework3/trunk@11876 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-04 15:38:01 +00:00
David Rude 657c7c55a9 Added a require for msf/core/post/file
git-svn-id: file:///home/svn/framework3/trunk@11872 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-03 18:43:30 +00:00
amaloteaux d4d475e9d3 small fix on filezilla_server_cred.rb
git-svn-id: file:///home/svn/framework3/trunk@11871 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-03 18:32:46 +00:00
HD Moore 3ad7cd61e5 Remove the exploit_module= assignment until this feature is completed
git-svn-id: file:///home/svn/framework3/trunk@11870 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-03 13:59:51 +00:00
David Rude f79cfa13a3 Adding post module for collecting FileZilla FTP Server ftp user and admin interface credentials
git-svn-id: file:///home/svn/framework3/trunk@11869 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-03 13:00:55 +00:00
David Rude 0afc75e19b post module for FileZilla FTP Client credential collection
git-svn-id: file:///home/svn/framework3/trunk@11856 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-02 04:11:12 +00:00
HD Moore 261ab6c014 Fix stack trace when parsing silc account settings, cosmetic and style tweaks
git-svn-id: file:///home/svn/framework3/trunk@11854 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-01 15:14:49 +00:00
David Rude dcfd46e3d6 Added Carlos Perez credits from the original meterpreter script.
git-svn-id: file:///home/svn/framework3/trunk@11853 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-01 07:31:26 +00:00
David Rude 04e2d7a829 more style fixes =)
git-svn-id: file:///home/svn/framework3/trunk@11851 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-01 05:02:33 +00:00
David Rude 4d4c760e81 style fixes
git-svn-id: file:///home/svn/framework3/trunk@11850 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-01 04:54:50 +00:00
David Rude 1e33520a86 post module for pidgin credential collection conversion of get_pidgin_creds
git-svn-id: file:///home/svn/framework3/trunk@11849 4d416f70-5f16-0410-b530-b9f4589650da
2011-03-01 04:02:54 +00:00
HD Moore 77c5f02d4d Call the correct version of the report_auth_info() method (this one takes into account workspace)
git-svn-id: file:///home/svn/framework3/trunk@11847 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-28 04:55:56 +00:00
HD Moore e7dbf28626 This patch adds a register_parent() method to the module class, making it easy to propogate things like ParentUUID, Workspace, and Owner down. The multi/handler post modules were updated to use this new api. This fixes an issue where the session generated by a post module would be registered to the wrong workspace.
git-svn-id: file:///home/svn/framework3/trunk@11846 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-28 04:24:35 +00:00
HD Moore f49e040a96 This patch adds a ListenerTimeout option to multi/handler that sets a maximum wait time for sessions. This is useful to prevent leftover background handlers by unsuccessful or misconfigured post modules.
git-svn-id: file:///home/svn/framework3/trunk@11845 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-28 03:22:40 +00:00
HD Moore c9c3ef4933 Port the screen unlocker to a post module
git-svn-id: file:///home/svn/framework3/trunk@11836 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-26 05:56:01 +00:00
HD Moore 9bc2a2cd3a Store keystrokes as loot
git-svn-id: file:///home/svn/framework3/trunk@11835 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-26 04:54:45 +00:00
HD Moore 8a5f7c448f Fix typos in the original module
git-svn-id: file:///home/svn/framework3/trunk@11834 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-26 04:27:49 +00:00
HD Moore 9a54bc0a95 Fix a typo in the original module
git-svn-id: file:///home/svn/framework3/trunk@11833 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-26 04:23:06 +00:00
HD Moore d19ab712c4 Quick typo fix
git-svn-id: file:///home/svn/framework3/trunk@11831 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-26 02:49:25 +00:00
HD Moore b700ed2075 Cosmetic cleanup of post modules
git-svn-id: file:///home/svn/framework3/trunk@11830 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-26 02:47:40 +00:00
HD Moore 880ffeb1f7 This updates the (C) for 2011, adds a CustomPrintPrefix option to set a unique prefix for a module and cleans up some post modules
git-svn-id: file:///home/svn/framework3/trunk@11828 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-26 02:02:34 +00:00
HD Moore 8c01560ade Store enumerated data as loot
git-svn-id: file:///home/svn/framework3/trunk@11826 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-25 21:48:03 +00:00
HD Moore 4c4ae90daf Consistency fix
git-svn-id: file:///home/svn/framework3/trunk@11825 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-25 21:04:52 +00:00
HD Moore f79f704a68 Make the post module titles consist
git-svn-id: file:///home/svn/framework3/trunk@11824 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-25 21:00:33 +00:00
Carlos Perez b712be8949 Secure deleting of temporary screencapture files on targets using srm
git-svn-id: file:///home/svn/framework3/trunk@11823 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-25 00:43:23 +00:00
Carlos Perez f75bd0498f corrected description of action
git-svn-id: file:///home/svn/framework3/trunk@11821 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-24 21:05:53 +00:00
Carlos Perez 7050bbc0ce Forgot to uncomment the sections while debuging
git-svn-id: file:///home/svn/framework3/trunk@11816 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-24 11:57:12 +00:00
Carlos Perez 1c812149b2 Add support to enumerate and download OS X keychain files
git-svn-id: file:///home/svn/framework3/trunk@11815 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-24 01:37:00 +00:00
Carlos Perez a4b6994e46 update to capture all history file on home folder, screncapture will now capture all loginwindow processes if root and it will download .ssh and .gnupg files for all users if running as root
git-svn-id: file:///home/svn/framework3/trunk@11814 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-23 23:13:12 +00:00
James Lee 5d42ed4552 more descriptive name and description
git-svn-id: file:///home/svn/framework3/trunk@11803 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-23 04:42:02 +00:00
Joshua Drake 8ef05017b8 style compliance fixes, naughty naughty
git-svn-id: file:///home/svn/framework3/trunk@11796 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-22 20:49:44 +00:00
Carlos Perez 31d4d335f9 Fixed typos and Regex for clean installs of the OS
git-svn-id: file:///home/svn/framework3/trunk@11795 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-22 20:11:27 +00:00
James Lee 5c87a5db9c more descriptive, standard naming
git-svn-id: file:///home/svn/framework3/trunk@11794 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-22 18:07:26 +00:00
Carlos Perez 7e2fb81cb5 Initial set of OSX Shell Post modules for general basic enumeration and for dumping hashes (SHA, LM and NTLM) for OSX 10.4 and above
git-svn-id: file:///home/svn/framework3/trunk@11792 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-22 14:00:47 +00:00
Matt Weeks b241fc1530 Add service permissions escalate post module.
git-svn-id: file:///home/svn/framework3/trunk@11739 4d416f70-5f16-0410-b530-b9f4589650da
2011-02-10 17:34:09 +00:00
James Lee 3d94cd7d22 cut down on some of the copy-paste
git-svn-id: file:///home/svn/framework3/trunk@11664 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-29 01:55:47 +00:00
James Lee a10a94d373 report configured shares in the same way as modules/auxiliary/scanner/smb/smb_enumshares.rb
git-svn-id: file:///home/svn/framework3/trunk@11663 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-29 00:37:13 +00:00
Joshua Drake 21d93be897 Add fix for WOW64 from ReL1k
git-svn-id: file:///home/svn/framework3/trunk@11650 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-26 16:26:08 +00:00
Joshua Drake 23808d19cd See #3531, Apply fix from Chao Mu
git-svn-id: file:///home/svn/framework3/trunk@11649 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-26 15:55:35 +00:00
Carlos Perez 05fd7b4e57 Patch for railgun and post mixin; and module from cha-mou to add capability to delete users on windows hosts.
git-svn-id: file:///home/svn/framework3/trunk@11638 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-25 13:02:35 +00:00
Joshua Drake 29b03701d1 Fixes #3531, Use new accounts mixin to resolve SID->Account Names
git-svn-id: file:///home/svn/framework3/trunk@11630 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-24 17:25:52 +00:00
Joshua Drake 0af8915fd5 Fixes #1936, Add accounts mixin and accompanying post module
git-svn-id: file:///home/svn/framework3/trunk@11629 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-24 17:23:48 +00:00
Joshua Drake 41e43b557c Rename to MSXX format, add references
git-svn-id: file:///home/svn/framework3/trunk@11598 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-18 17:19:17 +00:00
Joshua Drake 667d7aacea add keywords, some references
git-svn-id: file:///home/svn/framework3/trunk@11597 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-18 00:36:45 +00:00
Joshua Drake 680625ff2d add exploit for cve-2010-2743
git-svn-id: file:///home/svn/framework3/trunk@11596 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-18 00:33:05 +00:00
Carlos Perez 3c8501cd82 Keylogrecorder script migrated in to post module keylog_recorder
git-svn-id: file:///home/svn/framework3/trunk@11570 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-13 02:44:22 +00:00
Joshua Drake 166b4d3250 whitespace
git-svn-id: file:///home/svn/framework3/trunk@11568 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-13 00:14:44 +00:00
Carlos Perez 1f4d36b758 removed spaces
git-svn-id: file:///home/svn/framework3/trunk@11566 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 23:25:00 +00:00
Carlos Perez 3fc76be37c removed spaces
git-svn-id: file:///home/svn/framework3/trunk@11565 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 23:24:46 +00:00
Carlos Perez c6c5488a04 changed threading
git-svn-id: file:///home/svn/framework3/trunk@11564 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 23:24:17 +00:00
Carlos Perez 0a111ee265 get_valid_community migrated to post module and expanded. Now enum_snmp
git-svn-id: file:///home/svn/framework3/trunk@11563 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 23:22:41 +00:00
James Lee 9887e4cc08 fix header comments
git-svn-id: file:///home/svn/framework3/trunk@11560 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 18:29:56 +00:00
James Lee 3781b3e912 fix header comments
git-svn-id: file:///home/svn/framework3/trunk@11559 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 18:11:24 +00:00
Carlos Perez 6599e0638e Fixed small indent
git-svn-id: file:///home/svn/framework3/trunk@11558 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 17:36:58 +00:00
Carlos Perez 50d4f35601 fixed indenting
git-svn-id: file:///home/svn/framework3/trunk@11557 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 17:33:46 +00:00
Carlos Perez 0cfc2f8e45 get_application_list script migrated in to post module enum_applications
git-svn-id: file:///home/svn/framework3/trunk@11556 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 03:55:19 +00:00
Carlos Perez 2af5907220 enum_powershell_env script migrated in to post module
git-svn-id: file:///home/svn/framework3/trunk@11555 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 02:31:13 +00:00
Carlos Perez f2a211cabc checkvm script migrated in to post module
git-svn-id: file:///home/svn/framework3/trunk@11554 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 02:16:06 +00:00
Carlos Perez f7af7924c0 Update windows/registry mixin path for module import
git-svn-id: file:///home/svn/framework3/trunk@11551 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-12 00:11:43 +00:00
Carlos Perez 212e38a3d7 Migrated enum_shares script to module
git-svn-id: file:///home/svn/framework3/trunk@11549 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-11 22:31:37 +00:00
Carlos Perez 3daaaf0c7e Keywords and formatting
git-svn-id: file:///home/svn/framework3/trunk@11548 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-11 22:30:40 +00:00
Carlos Perez b9e31bdfb9 migrated enum logged on users script to module
git-svn-id: file:///home/svn/framework3/trunk@11540 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-11 02:02:11 +00:00
James Lee 88eb09ac66 more renaming fail from #3478
git-svn-id: file:///home/svn/framework3/trunk@11538 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-10 21:36:42 +00:00
Joshua Drake d832296e7d minor cleanups
git-svn-id: file:///home/svn/framework3/trunk@11524 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-09 23:33:10 +00:00
Joshua Drake 287f4c87fe style compliance fixes
git-svn-id: file:///home/svn/framework3/trunk@11516 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-08 01:13:26 +00:00
Joshua Drake 08f3f44f98 allow bypassuac to work on x64 or x86, allow payload selection, cleanup indents
git-svn-id: file:///home/svn/framework3/trunk@11514 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-08 00:43:01 +00:00
James Lee 9c7d40b0b9 fix a namespace screwup
git-svn-id: file:///home/svn/framework3/trunk@11504 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-07 17:00:35 +00:00
James Lee dfd9dd70e6 rename fail
git-svn-id: file:///home/svn/framework3/trunk@11503 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-07 16:59:02 +00:00
Mario Ceballos a11f0d5e42 fixes a uninitialized constant Msf::Post::Registry warning
git-svn-id: file:///home/svn/framework3/trunk@11501 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-07 00:28:04 +00:00
James Lee e10eb7d313 hashdump is windows specific
git-svn-id: file:///home/svn/framework3/trunk@11500 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-06 23:48:16 +00:00
James Lee 38a3b8a387 move windows-specific privesc modules into a windows/ directory, multi-platform mods into a multi/ dir, fixes #3448
git-svn-id: file:///home/svn/framework3/trunk@11499 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-06 22:33:36 +00:00
James Lee dbeae8df24 add support for running post modules from the meterpreter prompt. options are set in the same way as the -o arg to run, e.g. run post/escalate/bypassuac LHOST=192.168.0.1
git-svn-id: file:///home/svn/framework3/trunk@11496 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-06 21:28:00 +00:00
James Lee 152c380a13 remove an erroneous line to get rid of NameErrors, thanks ReL1K
git-svn-id: file:///home/svn/framework3/trunk@11490 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-06 20:23:29 +00:00
HD Moore c003e4b8ef Merge R3L1K's UAC bypass module into the trunk
git-svn-id: file:///home/svn/framework3/trunk@11483 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-06 16:59:25 +00:00
HD Moore 401d8e5a68 Revert until the mixin is checked in
git-svn-id: file:///home/svn/framework3/trunk@11464 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-04 02:46:18 +00:00
James Lee a121a73cdb use the mixin for registry fu.
git-svn-id: file:///home/svn/framework3/trunk@11462 4d416f70-5f16-0410-b530-b9f4589650da
2011-01-04 01:01:29 +00:00
James Lee 9a952b22e4 rearrange post module directory structure
git-svn-id: file:///home/svn/framework3/trunk@11445 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-29 17:10:46 +00:00
James Lee e3cd2c2572 add carlos back to authors list, i suck
git-svn-id: file:///home/svn/framework3/trunk@11432 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-28 19:39:02 +00:00
James Lee a241f435c1 rename the 'privilege_escalation' to the less verbose 'escalate'
git-svn-id: file:///home/svn/framework3/trunk@11431 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-28 19:29:36 +00:00
James Lee f0cc6ff596 big commit for converting meterpreter scripts to modules, see #3377. also fixes payload tab-completion and 'show payloads' after TARGET has changed
git-svn-id: file:///home/svn/framework3/trunk@11421 4d416f70-5f16-0410-b530-b9f4589650da
2010-12-27 17:46:42 +00:00