070fd399f2
Merge branch 'master' of https://github.com/rapid7/metasploit-framework
2013-03-31 20:23:08 +02:00
587170ae52
fixed author details - next try
2013-03-30 12:43:55 +01:00
1d6184cd63
fixed author details
2013-03-30 12:41:31 +01:00
8032a33cd5
report_auth_info - proof
2013-03-29 22:06:25 +01:00
1156194a6b
feedback included, server fingerprinting
2013-03-29 22:04:22 +01:00
2b4d6eb455
feedback included, server header check
2013-03-29 21:30:45 +01:00
b6a50da394
feedback included, server header check
2013-03-29 21:20:51 +01:00
5616b8245b
Merge branch 'master' of https://github.com/rapid7/metasploit-framework
2013-03-29 11:59:33 +01:00
9086c53751
Not an HttpClient, so doesn't have normalize_uri
...
[FixRM #7851 ]
2013-03-28 13:16:21 -05:00
5b30115336
vprint_status changed to vprint_error as requested
2013-03-28 14:27:51 +00:00
0f147dcf47
vprint_status changed to vprint_error as requested
2013-03-28 14:24:57 +00:00
eee702a329
vprint_status changed to vprint_error as requested
2013-03-28 14:23:21 +00:00
e2212ca8c9
vprint_status changed to vprint_error as requested
2013-03-28 14:22:01 +00:00
9594693ecb
vprint_status changed to vprint_error as requested
2013-03-28 14:16:19 +00:00
9d87db6831
vprint_status changed to vprint_error as requested
2013-03-28 14:08:24 +00:00
aae1d5933e
removed socket print, left over from debugging
2013-03-28 10:49:23 +00:00
376ca7b107
fixed issue with access denied condition thanks to @pho_bos
2013-03-28 10:41:37 +00:00
aa981cc991
DIR-645 also working
2013-03-27 12:11:14 +01:00
615aa57399
Dlink DIR615 HW rev B login module
2013-03-27 09:26:23 +01:00
680b551215
default to user admin
2013-03-27 08:59:19 +01:00
032214fb1d
default to user admin
2013-03-27 08:49:04 +01:00
e1a719a6c0
http login module for DLink DIR300revB, DIR600revB, DIR815
2013-03-26 20:57:24 +01:00
c4fe21865c
user fix
2013-03-26 20:15:19 +01:00
bcc26427c0
EPS_GET_DIRECTORY_LISTING (List Directory abd SMB Relay)
2013-03-25 20:26:56 +00:00
d8086a27a6
vprint_status mod
2013-03-25 20:20:29 +00:00
121c75f646
vprint_status mod
2013-03-25 20:18:14 +00:00
da6a99defb
vprint_status mod
2013-03-25 20:16:11 +00:00
f66ffbfa81
vprint_status mod
2013-03-25 20:13:45 +00:00
95e7d55313
remove sap_soap_rfc_eps_delete_file_smb_relay.rb
2013-03-25 20:09:59 +00:00
f7ccfa634e
This module exploits an authentication bypass vulnerability in SAP NetWeaver CTC service
2013-03-25 19:59:16 +00:00
3c12459703
Merge branch 'master' of https://github.com/rapid7/metasploit-framework
2013-03-25 19:33:36 +01:00
9717a8c3b4
cleanup for tplink_traversal_noauth
2013-03-25 19:20:18 +01:00
543b401a55
Merge branch 'tplink-traversal' of https://github.com/m-1-k-3/metasploit-framework into m-1-k-3-tplink-traversal
2013-03-25 19:18:53 +01:00
393d5d8bf5
Merge branch 'master' of https://github.com/rapid7/metasploit-framework
2013-03-25 19:09:42 +01:00
f92f59bfad
EPS_DELETE_FILE (File deletion and SMB Relay)
2013-03-25 17:23:27 +00:00
dcce23d23d
Merge branch 'bugs/tomcat_enum-double_check' of github.com:neinwechter/metasploit-framework into neinwechter-bugs/tomcat_enum-double_check
2013-03-25 12:19:52 -05:00
01ee30e389
PFL_CHECK_OS_FILE_EXISTENCE (file existence and SMB relay)
2013-03-25 17:11:23 +00:00
fdd06c923a
cleanup for dlink_dir_645_password_extractor
2013-03-25 18:04:12 +01:00
a9a5a3f64f
Merge branch 'dlink-dir645-password-extractor' of https://github.com/m-1-k-3/metasploit-framework into m-1-k-3-dlink-dir645-password-extractor
2013-03-25 18:02:51 +01:00
aad0eed485
Fix whitespace EOL
2013-03-25 13:00:37 -04:00
5be98593a9
RZL_READ_DIR_LOCAL (directory listing and SMB relay)
2013-03-25 16:59:37 +00:00
3f79b2fd3b
Use :abort for scanner mixin
2013-03-25 12:59:18 -04:00
e840578ea2
SAP /sap/bw/xml/soap/xmla XMLA service (XML DOCTYPE) SMB relay
2013-03-25 16:57:12 +00:00
0d56da0511
Merge branch 'netgear-sph200d' of github.com:m-1-k-3/metasploit-framework into m-1-k-3-netgear-sph200d
2013-03-25 11:45:40 -05:00
99fe2a33d7
Deregister USER_AS_PASS and stop on connect error
2013-03-25 12:35:52 -04:00
53b862300e
cleanup for linksys_e1500_traversal
2013-03-25 17:33:38 +01:00
ea804d433e
change file name
2013-03-25 17:33:16 +01:00
660d3d5388
Merge branch 'linksys-traversal' of https://github.com/m-1-k-3/metasploit-framework into m-1-k-3-linksys-traversal
2013-03-25 17:31:11 +01:00
2d5a0d6916
Merge branch 'master' of https://github.com/rapid7/metasploit-framework
2013-03-25 17:08:23 +01:00
e57498190b
dlink dir 300/600 login module - initial commit
2013-03-25 08:48:24 +01:00
98ac6e8090
feedback included
2013-03-24 21:01:30 +01:00
d90de54891
reporting and feedback
2013-03-24 15:00:18 +01:00
9f8ec37060
store loot
2013-03-24 11:48:49 +01:00
71708c4bc3
dir 645 password extractor - initial commit
2013-03-24 11:44:24 +01:00
49ac3ac1a3
cleanup for linksys_e1500_e2500_exec
2013-03-23 23:30:49 +01:00
98be5d97b8
Merge branch 'linksys-e1500-e2500-exec' of https://github.com/m-1-k-3/metasploit-framework into m-1-k-3-linksys-e1500-e2500-exec
2013-03-23 23:30:14 +01:00
b2bf1df098
fixed encoding and set telnetd as default cmd
2013-03-23 22:56:15 +01:00
7ff9c70e38
10 to 0 is good :)
2013-03-23 22:46:26 +01:00
47d458a294
replacement of the netgear-sph200d module
2013-03-23 22:40:32 +01:00
bd522a03e3
replace module to the scanner directory
2013-03-23 22:29:44 +01:00
b1ae2f7bf4
replace module to the scanner directory
2013-03-23 22:29:31 +01:00
8f59999f82
replace module to the scanner directory
2013-03-23 22:25:04 +01:00
f58554bb57
replace module to the scanner directory
2013-03-23 22:24:50 +01:00
965ec34368
check of the server on the first try
2013-03-23 22:13:01 +01:00
aacd14ae45
version removed, encode params removed
2013-03-23 21:31:08 +01:00
b01959ea70
tplink traversal - initial commit
2013-03-23 20:30:32 +01:00
cb56b2de4b
Merge branch 'master' of https://github.com/rapid7/metasploit-framework
2013-03-23 20:06:05 +01:00
36d1746c0d
linksys traversal module - initial commit
2013-03-23 17:01:02 +01:00
270f64acc2
feedback included
2013-03-23 15:54:34 +01:00
f22c18e026
Merge branch 'module-psexec_command-file_prefix' of github.com:kn0/metasploit-framework into kn0-module-psexec_command-file_prefix
2013-03-22 13:08:13 -05:00
b30a5aa6e8
Merge branch 'master' of https://github.com/rapid7/metasploit-framework
2013-03-21 09:07:41 +01:00
dcd2aebdcd
feedback included
2013-03-20 21:34:30 +01:00
011b6899b0
Merge 'neinwechter/browser_autopwn-updates'
...
Brings in neinwechter's BAP fixes. Seems to not only be a more sane
strategy, but in practice, ends up with tons more shells for at least
MSIE which is what most people are using it for anyway.
[Closes #1612 ]
2013-03-20 15:26:09 -05:00
e377e30873
unscrewing syntax error
2013-03-20 15:04:31 -05:00
fd20eba35e
Expanding the title and desc for external_ip
...
Also allowing the capitalization on "via" to be small.
2013-03-20 14:42:12 -05:00
44f07cef19
Merge branch 'linksys-e1500-e2500-exec' of https://github.com/m-1-k-3/metasploit-framework
2013-03-20 00:47:31 +01:00
80d218b284
Merge branch 'master' of https://github.com/rapid7/metasploit-framework
2013-03-19 19:55:51 +01:00
9fc0f9a927
initial commit
2013-03-19 17:31:01 +01:00
116f5b87f0
Merge branch 'axigen_file_access' of github.com:jvazquez-r7/metasploit-framework into jvazquez-r7-axigen_file_access
2013-03-19 08:33:58 -05:00
fd5bd52e6d
Added some error handling if the connection dies.
2013-03-18 17:26:40 -04:00
66dcbca562
Sysax Multi-Server SSHD DoS
...
This exploit affects Sysax Multi-Server version 6.10. It causes a
Denial of Service by sending a specially crafted Key Exchange, which
causes the service to crash.
2013-03-18 17:16:12 -04:00
3eb4505f6f
Merge branch 'master' of https://github.com/rapid7/metasploit-framework
2013-03-14 16:01:40 +01:00
02f90b5bbd
cleanup for dopewars
2013-03-14 15:53:19 +01:00
4d9f2bbb06
Merge branch 'master' of https://github.com/dougsko/metasploit-framework into dougsko-master
2013-03-14 15:51:47 +01:00
d3a78db77a
Merge branch 'master' of https://github.com/rapid7/metasploit-framework
2013-03-14 14:12:11 +01:00
7403239de7
cleanup for psexec_ntdsgrab
2013-03-14 13:40:45 +01:00
9ae2c8e718
Merge branch 'ntdsgrab4' of https://github.com/R3dy/metasploit-framework into R3dy-ntdsgrab4
2013-03-14 13:39:41 +01:00
97023413cb
Added advanced option for temp filenames prefix
2013-03-14 01:50:52 -05:00
abbb3b248d
methods that use @ip now reference it directly instead of being passed in as paramaters
2013-03-13 19:35:53 -05:00
462ffb78c1
Simplified copy_ntds & copy_sys check on line 91
2013-03-13 19:31:36 -05:00
4e9af74763
All print statements now use #{peer}
2013-03-13 19:28:09 -05:00
edf2804bb5
Added simple.disconnect to end of cleanup_after method
2013-03-13 19:23:22 -05:00
8eba71ebe2
Added simple.disconnect to end of download_sys_hive method
2013-03-13 19:20:58 -05:00
2f11796dfa
Fix typo
...
[SeeRM #7800 ]
2013-03-13 16:10:20 -05:00
e5f7c08d6f
Added module for CVE-2012-4940
2013-03-13 11:52:54 +01:00
22133ba8ff
removed version number
2013-03-12 16:36:14 -04:00
70da739666
fixed errors in dopewars.rb shown by msftidy
2013-03-12 15:47:31 -04:00
c8c50a6407
cleaned up dopewars module
2013-03-12 12:56:12 -04:00
91fbeda062
up to date
2013-03-12 17:04:27 +01:00
6055438476
up to date
2013-03-12 17:04:27 +01:00
ee98f28017
up to date
2013-03-12 16:58:48 +01:00
1331952515
up to date
2013-03-12 16:55:06 +01:00
6bd995f37e
up to date
2013-03-12 16:53:37 +01:00
9891650c30
up to date
2013-03-12 16:51:00 +01:00
b498bf9b71
up to date
2013-03-12 16:50:35 +01:00
9a970415bc
Module uses store_loot now instead of logdir which has been removed
2013-03-11 20:05:23 -05:00
a199c397e4
...
2013-03-11 17:09:17 -04:00
4d6e19b40b
small edits to dopewars.rb
2013-03-11 17:07:05 -04:00
0e607f8252
added dopewars module
2013-03-11 16:52:49 -04:00
2684e6103c
use of send_request_cgi
2013-03-11 20:36:47 +01:00
9c89599737
cleanup before merge external_ip
2013-03-11 20:35:25 +01:00
546e24a9c6
Merge branch 'external_ip_discovery' of https://github.com/sempervictus/metasploit-framework into sempervictus-external_ip_discovery
2013-03-11 20:35:07 +01:00
aa4cc11640
Removed Scanner class running as stand-alone single target module now
2013-03-11 13:39:47 -05:00
074ea7dee4
Merge branch 'ssl' of https://github.com/luh2/metasploit-framework into luh2-ssl
2013-03-11 15:36:20 +01:00
a96753e9df
Added licensing stuff at the top
2013-03-10 20:07:04 -05:00
bf9a2e4f52
Fixed module to use psexec mixin
2013-03-10 15:15:50 -05:00
907983db4a
updating with r7-msf
2013-03-10 14:19:20 -05:00
2160718250
Fix file header comment
...
[See #1555 ]
2013-03-07 17:53:19 -06:00
25f3f935c4
Apply Egypt's cleanup
...
Remove revision, raise the exception itself, remove scanner mixin,
datastore['RHOST'] unstead of RHOSTS, and useles agent var removed.
2013-03-07 18:34:12 -05:00
db1f4d7e1d
added license info
2013-03-07 00:20:02 +00:00
e8c1899dc2
added license info
2013-03-07 00:18:32 +00:00
3946cdf91e
added license info
2013-03-07 00:17:55 +00:00
1b493d0e4c
added license info
2013-03-07 00:16:26 +00:00
9e89d9608f
added license info
2013-03-07 00:11:45 +00:00
56639e7f15
added license info
2013-03-07 00:10:46 +00:00
dfe3a4f394
msftidy and module placement per todb
2013-03-06 17:36:01 -05:00
1d8c759a34
yeah
2013-03-06 16:01:36 -06:00
225b15f7f3
Add external IP discovery module
...
This module performs an HTTP request to ifconfig.me/ip.
The body of the response contains the publicly routable IP from
which the request originated. This can be useful in discovering
routes on pivoted hosts and initial recon as a simple aux module.
2013-03-05 23:42:31 -05:00
ca43900a7c
Merge remote-tracking branch 'R3dy/psexec-mixin2' into rapid7
2013-03-05 16:34:11 -06:00
781132b1cf
cleanup for openssl_aesni
2013-03-05 22:41:16 +01:00
784c075986
Merge branch 'module-cve-2012-2686' of https://github.com/ettisan/metasploit-framework into ettisan-module-cve-2012-2686
2013-03-05 22:40:46 +01:00
27727df415
Merge branch 'R3dy-psexec-mixin2' into rapid7
2013-03-05 14:36:55 -06:00
867875b445
Beautified OpenSSL-AESNI module
...
Modifed the CVE-2012-2686 module to follow
suggestions by @jvazquez-r7:
* Added description for all fields in the
SSL packets
* MAX_TRIES now required
* use get_once instead of timeout
2013-03-04 19:09:50 +01:00
71ba044d03
remove debugging aid
2013-03-04 11:25:34 -06:00
6dcca7df78
Remove duplicated header issues
...
Headers were getting duped back into client config, causing invalid
requests to be sent out
2013-03-04 11:24:26 -06:00
4212c36566
Fix up basic auth madness
2013-03-01 11:59:02 -06:00
b2f68f0fdb
Merge branch 'dmaloney-r7-feature/http/authv2' of git://github.com/jlee-r7/metasploit-framework into jlee-r7-dmaloney-r7-feature/http/authv2
2013-02-28 14:37:37 -06:00
c290bc565e
Merge branch 'master' into feature/http/authv2
2013-02-28 14:33:44 -06:00
8f58c7b25e
cleanup for sap_icf_public_info
2013-02-28 18:47:48 +01:00
0dcfb51071
cleanup for sap_soap_rfc_system_info
2013-02-28 18:46:18 +01:00
1a10c27872
Merge branch 'sap_rfc_system_info' of https://github.com/ChrisJohnRiley/metasploit-framework into ChrisJohnRiley-sap_rfc_system_info
2013-02-28 18:45:42 +01:00
e7015985e7
Added CVE-2012-2686
...
Added Module for a DoS issue in OpenSSL (pre 1.0.1d). Can be exploited
with services that use TLS >= 1.1 and AES-NI. Because of improper
length computation, an integer underflow occurs leading to a
segmentation fault. This module brute-forces serveral encrypted
messages - when the decrypted message coincidentally specifies a
certain value for the size, the integer underflow occurs. Though this
could be accomplished more effectively (e.g. implementing or
maninpulating and TLS implementation), this module still does what it
should do.
2013-02-27 22:57:53 +01:00
d3b3587660
Merge branch 'rapid7' into dmaloney-r7-feature/http/authv2
2013-02-27 14:01:57 -06:00
cbce1bdff2
update module description
...
This adds the version of wordpress the issue was fixed in to the description
2013-02-26 00:24:46 +00:00
1ce86b7adb
Whitespace
2013-02-25 14:29:10 -06:00
cae1939914
Kinda too long
2013-02-25 13:44:11 -06:00
2c0a916c83
Made the password optional
2013-02-23 17:14:30 -05:00
b221711ecd
Added basic error handling
2013-02-23 10:24:04 -05:00
67c2c3da20
Code Review Feedback
...
Fixed the USER/PASS that I missed in last review
Converted from Scanner module to Gather
2013-02-23 10:09:23 -05:00
fc07bf16e7
Merge branch 'rapid7' into dmaloney-r7-feature/http/authv2
2013-02-22 15:41:49 -06:00
b4f002d080
Code Review Feedback
...
Modified USER and PASS to USERNAME and PASSWORD
Moved the Scanner mixin to the bottom and removed deregister
2013-02-21 16:55:27 -05:00
4784db3403
Fixed name
2013-02-21 15:48:41 -05:00
29cb4b1008
Merge remote-tracking branch 'upstream/master' into xbmc
2013-02-21 15:25:37 -05:00
ac50c32d51
Tested, works on server 2k8
2013-02-20 10:02:50 -06:00
0ae489b37b
last of revert-merge snaffu
2013-02-19 23:16:46 -06:00
92093cd7d8
There's no HttpClient, so it shouldn't be using normalize_uri
2013-02-19 15:04:18 -06:00
4703278183
Move SMB mixins into their own directory
2013-02-19 12:55:06 -06:00
ede804e6af
Make psexec mixin a bit better
...
* Removes copy-pasted code from psexec_command module and uses the mixin
instead
* Uses the SMB protocol to delete files rather than psexec'ing to call
cmd.exe and del
* Replaces several instances of "rescue StandardError" with better
exception handling so we don't accidentally swallow things like
NoMethodError
* Moves file reading and existence checking into the Exploit::SMB mixin
2013-02-19 12:33:19 -06:00
49f00acc11
Fix nil deref when dnsdomain is empty
2013-02-19 11:24:05 -06:00
d49797267e
Correct SAP Table Name
2013-02-19 11:20:49 +01:00
358b2f5783
Added module credit as this has turned into a rewrite ;)
2013-02-19 11:15:04 +01:00
f3cf8ad1b9
Whitespace EOL
2013-02-19 11:13:33 +01:00
a75bae927d
Replaced report_note and table output with single function
...
Added proposed extract data function (HDM)
2013-02-19 11:12:12 +01:00
d4011227e3
Made suitable changes to original module also (only report on non empty response)
2013-02-19 09:43:36 +01:00
4170a85d8a
Added logic to only report when value is present
2013-02-19 09:42:13 +01:00
ec5c8e3a88
Merge branch 'dlink-dir300-600-execution' of https://github.com/m-1-k-3/metasploit-framework into m-1-k-3-dlink-dir300-600-execution
2013-02-16 19:12:42 +01:00
a19da61177
deleting trailing comma
2013-02-16 00:53:28 +01:00
829cf0f076
name changed to dns_srv_enum
2013-02-15 16:20:55 +01:00
d1ba860409
changing filename for dns_srv
2013-02-15 16:20:33 +01:00
374faf9b02
cleanup for dns_srv
2013-02-15 16:19:48 +01:00
9d4bd763a6
Merge branch 'darkoperator-dnsenum2dnssrv' of https://github.com/darkoperator/metasploit-framework into darkoperator-darkoperator-dnsenum2dnssrv
2013-02-15 16:19:31 +01:00
38f5fbced3
cleanup for dns_reverse_lookup
2013-02-15 12:56:01 +01:00
f1e3dab45f
Merge branch 'darkoperator-dnsenum2dnsreverselookup' of https://github.com/darkoperator/metasploit-framework into darkoperator-darkoperator-dnsenum2dnsreverselookup
2013-02-15 12:55:39 +01:00
6aed858f80
cleanup for dns_bruteforce
2013-02-15 12:37:46 +01:00
1be003a4d0
Merge branch 'darkoperator-dnsenum2dnsbruteforce' of https://github.com/darkoperator/metasploit-framework into darkoperator-darkoperator-dnsenum2dnsbruteforce
2013-02-15 12:37:27 +01:00
57e1d1baa5
cleanup for dns_info
2013-02-15 12:03:08 +01:00
8a1874b4d1
Merge branch 'darkoperator-dnsenum2dnsinfo' of https://github.com/darkoperator/metasploit-framework into darkoperator-darkoperator-dnsenum2dnsinfo
2013-02-15 12:02:48 +01:00
bcd59aa8fa
Typo word module does not go in the name.
2013-02-14 21:56:24 -04:00
1d64de6c11
Typo word module does not go in the name.
2013-02-14 21:55:38 -04:00
7f7b4e5a97
more changes to description and name
2013-02-14 21:49:57 -04:00
faf970cf1f
more changes to description and name
2013-02-14 21:47:43 -04:00
1b8610042a
more changes to description and name
2013-02-14 21:46:21 -04:00
0b9d4d976f
more changes to description and name
2013-02-14 21:44:31 -04:00
23320a5dde
Fix spelling problems
2013-02-14 15:48:11 -04:00
a7d4f5ff4a
Fix spelling problems
2013-02-14 15:46:36 -04:00
7f97ff271f
Fix spelling problems
2013-02-14 15:44:32 -04:00
1872b137f5
Fix spelling problems
2013-02-14 15:41:17 -04:00
e8ccfae048
Fix spelling problems
2013-02-14 15:38:17 -04:00
c2f8e4adbd
Minor - Note Rails 3.1.11 patch in Description.
2013-02-13 22:30:54 -06:00
4eca6e5502
Merge branch 'feature/web_crawler_skip_paths' of github.com:tasos-r7/metasploit-framework into tasos-r7-feature/web_crawler_skip_paths
2013-02-13 14:07:20 -06:00
d1784babea
little cleanup plus msftidy compliant
2013-02-13 20:24:49 +01:00
0ae473b010
info updated with rails information
2013-02-13 09:52:17 +01:00
f46eda2fa9
Merge branch 'rails_devise_pw_reset' of https://github.com/jjarmoc/metasploit-framework into jjarmoc-rails_devise_pw_reset
2013-02-13 09:51:37 +01:00
799beb5adc
minor cleanup
2013-02-13 01:00:25 +01:00
167f5970c1
minor cleanup for rails_json_yaml_scanner
2013-02-13 00:07:58 +01:00
3e2a368823
Merge branch 'rails_json_yaml_scanner' of https://github.com/jjarmoc/metasploit-framework into jjarmoc-rails_json_yaml_scanner
2013-02-13 00:07:11 +01:00
846052a34d
s/URIPATH/TARGETURI/g per @jvasquez-r7 comments on another pull.
2013-02-12 15:13:06 -06:00
1d5d33f306
use normalize_uri()
2013-02-12 14:58:07 -06:00
c6a7a4e68d
/URIPATH/TARGETURI/g
2013-02-12 14:50:10 -06:00
f2cf4304d2
Merge remote-tracking branch 'upstream/master' into feature/web_crawler_skip_paths
2013-02-12 22:10:40 +02:00
jvazquez-r7
m-1-k-3
James Lee
nmonkee
sinn3r
Nathan Einwechter
Tod Beardsley
Matt Andreko
Trenton Ivey
Royce Davis
Doug P
RageLtMan
J.Townsend
Wolfgang Ettlinger
David Maloney
Chris John Riley
Carlos Perez
Jeff Jarmoc
Tasos Laskos