James Lee
|
d2451547d6
|
add exploit module for osCommerce file upload
git-svn-id: file:///home/svn/framework3/trunk@7502 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-14 01:56:21 +00:00 |
|
James Lee
|
4c0ba49a65
|
fix syntax error
git-svn-id: file:///home/svn/framework3/trunk@7500 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-13 23:22:19 +00:00 |
Joshua Drake
|
cd11c784e0
|
added CVE references
git-svn-id: file:///home/svn/framework3/trunk@7499 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-13 22:54:10 +00:00 |
Mario Ceballos
|
8a2a16c921
|
fixes a syntax error. console yells when loaded.
git-svn-id: file:///home/svn/framework3/trunk@7496 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-13 22:37:45 +00:00 |
HD Moore
|
fbdccdc9e2
|
Adds a module for eDirectory cookie prediction - trivial bug found while working on others.
git-svn-id: file:///home/svn/framework3/trunk@7493 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-13 21:31:39 +00:00 |
|
Joshua Drake
|
da6fa072f2
|
add module for cve-2008-0492
git-svn-id: file:///home/svn/framework3/trunk@7490 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-13 18:09:50 +00:00 |
|
Joshua Drake
|
7758ebfda4
|
uniquified name
git-svn-id: file:///home/svn/framework3/trunk@7488 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-13 00:22:14 +00:00 |
|
Joshua Drake
|
61f2c0b195
|
uniqified name
git-svn-id: file:///home/svn/framework3/trunk@7487 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-13 00:21:54 +00:00 |
|
Joshua Drake
|
2e4f5734ea
|
fixed typo
git-svn-id: file:///home/svn/framework3/trunk@7486 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-13 00:21:09 +00:00 |
|
James Lee
|
41604957fa
|
fix no compatible payloads due to misplaced compat options
git-svn-id: file:///home/svn/framework3/trunk@7483 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-12 20:36:23 +00:00 |
|
HD Moore
|
0d8eaa9190
|
Fix up a typo in the ddwrt exploit
git-svn-id: file:///home/svn/framework3/trunk@7481 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-12 16:13:51 +00:00 |
|
HD Moore
|
d892264ad7
|
Adds a DoS proof of concept for MS09-065 (EOT)
git-svn-id: file:///home/svn/framework3/trunk@7470 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-11 23:48:53 +00:00 |
|
James Lee
|
68959ece65
|
use the new DisablePayloadHandler option to reduce the number of open ports required; lports per OS can be modified via advanced options
git-svn-id: file:///home/svn/framework3/trunk@7469 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-11 21:38:30 +00:00 |
|
HD Moore
|
a305bc82c2
|
Add a status message, fix syntax error in references
git-svn-id: file:///home/svn/framework3/trunk@7468 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-11 20:17:20 +00:00 |
|
HD Moore
|
3980a7f18e
|
Add a metasploit module implement laurent's latest bug
git-svn-id: file:///home/svn/framework3/trunk@7467 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-11 16:59:55 +00:00 |
Carlos Perez
|
10cf618c19
|
Fix AXFR error handling
git-svn-id: file:///home/svn/framework3/trunk@7466 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-11 14:14:55 +00:00 |
|
Joshua Drake
|
c9f6e32c70
|
optimization for extra stack data
git-svn-id: file:///home/svn/framework3/trunk@7463 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-11 01:01:53 +00:00 |
|
Joshua Drake
|
92408fbed4
|
added patch, finder, and pub exploit refs
git-svn-id: file:///home/svn/framework3/trunk@7457 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-10 23:52:07 +00:00 |
|
Joshua Drake
|
9edcda6862
|
updated badchars/encoder, increased bytes to end of stack, ppr had badchar in it
git-svn-id: file:///home/svn/framework3/trunk@7456 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-10 23:36:54 +00:00 |
|
Joshua Drake
|
e812a2317c
|
added exploit for cve-2009-0184
git-svn-id: file:///home/svn/framework3/trunk@7455 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-10 21:52:17 +00:00 |
|
HD Moore
|
6deb2fe58e
|
windows 2000 target via anonymous submission
git-svn-id: file:///home/svn/framework3/trunk@7454 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-10 20:03:57 +00:00 |
Stephen Fewer
|
159ca526b4
|
Fixed a null pointer dereference bug (occurring in stages loaded by the PassiveX stager) that was being caused when an invalid exit funk was being patched into the stage by the PassiveX stager. This happened because the PassiveX stager uses the old type exit funks while the stages use the new type. This fix ensures the PassiveX stager gets the expected old exit funk value while the chosen stage gets the new exit funk value. This patch does not fix Bug #291 (PassiveX broken). Also I have left the PassiveX stager disabled until we can resolve the rest of the problems.
git-svn-id: file:///home/svn/framework3/trunk@7448 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-10 16:07:01 +00:00 |
|
Carlos Perez
|
b91d198e09
|
Fix AXFR false positive bug
git-svn-id: file:///home/svn/framework3/trunk@7441 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-10 04:14:25 +00:00 |
|
Carlos Perez
|
2620ad3a3c
|
Fix AXFR Bug, Added SRV checks for MS OCS Services, Option to Exit on Wildcard detection for ENUM_BRT and modified ENUM_TLD to properly test for IANA TLD list
git-svn-id: file:///home/svn/framework3/trunk@7439 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-10 03:08:16 +00:00 |
|
Joshua Drake
|
434ee654b4
|
minor tweaks
git-svn-id: file:///home/svn/framework3/trunk@7429 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-09 19:31:11 +00:00 |
|
Joshua Drake
|
55c32f8bb1
|
miscellanous cleanups and minimized
git-svn-id: file:///home/svn/framework3/trunk@7421 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-09 05:55:50 +00:00 |
|
James Lee
|
d9b5d62a3e
|
disable passivex for the rc1 until we can figure out why it doesn't work. see #291
git-svn-id: file:///home/svn/framework3/trunk@7419 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-09 04:32:22 +00:00 |
|
Joshua Drake
|
0e2c8f4894
|
StackAdjustment or Prepend, not both :)
git-svn-id: file:///home/svn/framework3/trunk@7418 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-09 04:31:02 +00:00 |
|
Joshua Drake
|
b07d997787
|
initial commit, randomization to come
git-svn-id: file:///home/svn/framework3/trunk@7417 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-09 04:27:30 +00:00 |
|
HD Moore
|
06372f3c40
|
See #430. This adds the AllowWin32SEH option to the upper/mixed alphanumeric encoders, providing 100% alphanumeric payloads for Windows platforms
git-svn-id: file:///home/svn/framework3/trunk@7405 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-08 00:45:51 +00:00 |
|
HD Moore
|
10b1e4e703
|
Fixes #469. Check address[0]
git-svn-id: file:///home/svn/framework3/trunk@7403 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-08 00:16:00 +00:00 |
et
|
5a460d451c
|
Ugly mixin
git-svn-id: file:///home/svn/framework3/trunk@7401 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-07 22:17:42 +00:00 |
|
et
|
7b832b9d3e
|
Wmap checking for vulnerabilities and launching exploits
git-svn-id: file:///home/svn/framework3/trunk@7399 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-07 21:55:33 +00:00 |
|
Mario Ceballos
|
95694ddd97
|
updated module targets from Brett Gervasoni.
git-svn-id: file:///home/svn/framework3/trunk@7398 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-07 13:18:03 +00:00 |
|
HD Moore
|
2075377fc8
|
Fix to correct the IP TTL of all raw modules - these were defaulting to 0. Reported by Job Kibler
git-svn-id: file:///home/svn/framework3/trunk@7397 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-07 03:17:19 +00:00 |
|
HD Moore
|
1d5f1e5f69
|
Fixes #472. This module still needs alot of work, but this solves this particular bug. Caused by unsetting the variable
git-svn-id: file:///home/svn/framework3/trunk@7396 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-06 21:16:56 +00:00 |
|
Mario Ceballos
|
c3dd1698fc
|
added exploit module hp_power_manager_login.rb
git-svn-id: file:///home/svn/framework3/trunk@7371 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-06 01:31:17 +00:00 |
|
Mario Ceballos
|
0c12d36cad
|
added patch from Steve Tornio.
git-svn-id: file:///home/svn/framework3/trunk@7365 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-05 12:09:58 +00:00 |
|
Mario Ceballos
|
3da8b7b7f6
|
added exploit module safenet_softremote_groupname.rb
git-svn-id: file:///home/svn/framework3/trunk@7358 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-04 23:10:50 +00:00 |
|
James Lee
|
70b2d06c86
|
speed up content creation, string concat sucks
git-svn-id: file:///home/svn/framework3/trunk@7356 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-04 19:06:01 +00:00 |
|
James Lee
|
c675cfb1cf
|
Fix 1.9.1 issues, make the vbs smaller (down to about 4MB from almost 10)
git-svn-id: file:///home/svn/framework3/trunk@7355 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-04 18:55:32 +00:00 |
|
James Lee
|
68564f9d5e
|
modules should not handle exceptions like this. if you're just going to print a backtrace, let the dispatcher deal with it so we can get logs
git-svn-id: file:///home/svn/framework3/trunk@7353 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-04 17:04:01 +00:00 |
|
HD Moore
|
9e654c51f2
|
Revive
git-svn-id: file:///home/svn/framework3/trunk@7348 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-04 04:04:39 +00:00 |
|
HD Moore
|
4b53b1d378
|
Purge
git-svn-id: file:///home/svn/framework3/trunk@7347 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-04 04:04:17 +00:00 |
|
HD Moore
|
98d9d66905
|
Replaced with encoded shiny bits
git-svn-id: file:///home/svn/framework3/trunk@7346 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-04 03:56:12 +00:00 |
|
HD Moore
|
0a52c98e03
|
Purging this module due to lame AV sigs, re-adding in a sillier form
git-svn-id: file:///home/svn/framework3/trunk@7345 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-04 03:50:31 +00:00 |
|
HD Moore
|
84ebdfa7eb
|
Move the mercantec check to the exploit code from autofilter
git-svn-id: file:///home/svn/framework3/trunk@7333 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-03 17:02:03 +00:00 |
|
Mario Ceballos
|
aef3817db9
|
added patch from steve tornio.
git-svn-id: file:///home/svn/framework3/trunk@7331 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-03 12:02:54 +00:00 |
|
Mario Ceballos
|
b62dc9705e
|
remove some debugging.
git-svn-id: file:///home/svn/framework3/trunk@7329 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-02 21:21:50 +00:00 |
|
Mario Ceballos
|
73bd4f7de2
|
added exploit module symantec_consoleutilities_browseandsavefile.rb from Nikolas Sotiriu.
git-svn-id: file:///home/svn/framework3/trunk@7328 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-02 21:02:45 +00:00 |