James Lee
|
dd323e2a7b
|
don't try to run methods on an object we just confirmed was nil
git-svn-id: file:///home/svn/framework3/trunk@7538 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-16 18:48:34 +00:00 |
|
James Lee
|
94729103b4
|
added osvdb ref and keywords
git-svn-id: file:///home/svn/framework3/trunk@7532 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-16 16:18:51 +00:00 |
|
James Lee
|
7fb9c4a791
|
add coverage for cve-2009-1151
git-svn-id: file:///home/svn/framework3/trunk@7528 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-16 08:42:32 +00:00 |
|
James Lee
|
53640065da
|
license
git-svn-id: file:///home/svn/framework3/trunk@7522 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-15 19:53:03 +00:00 |
Mario Ceballos
|
bbfc195735
|
added patch from Steve Tornio.
git-svn-id: file:///home/svn/framework3/trunk@7514 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-14 13:26:27 +00:00 |
HD Moore
|
8b9238e33b
|
Cosmetic/reference cleanups.
git-svn-id: file:///home/svn/framework3/trunk@7506 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-14 04:31:00 +00:00 |
|
James Lee
|
d90b932383
|
add a bit more entropy
git-svn-id: file:///home/svn/framework3/trunk@7504 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-14 02:09:32 +00:00 |
|
James Lee
|
38c0a3bd1b
|
302 is not the same as 200...
git-svn-id: file:///home/svn/framework3/trunk@7503 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-14 02:03:16 +00:00 |
|
James Lee
|
d2451547d6
|
add exploit module for osCommerce file upload
git-svn-id: file:///home/svn/framework3/trunk@7502 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-14 01:56:21 +00:00 |
|
HD Moore
|
5eed9deb2d
|
Adds the joomla TinyMCE file upload exploit from spinbad.
git-svn-id: file:///home/svn/framework3/trunk@7283 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-26 20:00:39 +00:00 |
|
HD Moore
|
e3f68f2639
|
Another large number of warnings fixed by Yoann Guillot
git-svn-id: file:///home/svn/framework3/trunk@7248 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-25 17:18:23 +00:00 |
|
HD Moore
|
a0fbc2914f
|
Remove the milw0rm references, as the links are no longer valid.
git-svn-id: file:///home/svn/framework3/trunk@7237 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-24 18:13:07 +00:00 |
|
Mario Ceballos
|
2b85ceb4c1
|
added exploit modules base_qry_common.rb and mambo_cache_lite.rb
git-svn-id: file:///home/svn/framework3/trunk@7210 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-20 15:01:10 +00:00 |
|
HD Moore
|
26db223636
|
OSVDB reference update from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@7149 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-12 14:39:51 +00:00 |
|
James Lee
|
9ace8f33eb
|
OSVDB references from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@7030 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-12 04:22:58 +00:00 |
|
James Lee
|
85a4f1b9db
|
add a simple check for the generic php exploits
git-svn-id: file:///home/svn/framework3/trunk@7025 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-10 05:24:03 +00:00 |
|
HD Moore
|
7fb18d6e11
|
Add coverage for the new nagios3 cmd execution bug
git-svn-id: file:///home/svn/framework3/trunk@6936 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-04 19:27:50 +00:00 |
|
HD Moore
|
876a80f601
|
Updated osvdb references from Steve Tornio, updated capture/eth_spoof modules
git-svn-id: file:///home/svn/framework3/trunk@6907 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-27 14:05:23 +00:00 |
kris
|
7262621d35
|
switch 'Version' Rev to Revision since msf doesn't handle it correctly
git-svn-id: file:///home/svn/framework3/trunk@6877 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-23 03:06:01 +00:00 |
|
HD Moore
|
e70ac6cc19
|
Added a new set of match flags for cmd injection exploits (RequiredCmds). This reduces the number of 'bad' payloads listed for explot modules. A good example is disabling the netcat -e payloads for old Solaris exploits
git-svn-id: file:///home/svn/framework3/trunk@6854 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-21 15:20:35 +00:00 |
|
HD Moore
|
f8c2a203fd
|
OSVDB references updates from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@6812 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-16 16:02:24 +00:00 |
|
James Lee
|
bc037bbbac
|
make php findsock work again for php_eval and php_include
git-svn-id: file:///home/svn/framework3/trunk@6678 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-20 05:50:52 +00:00 |
|
HD Moore
|
a5f567e76e
|
Massive OSVDB reference update from Steve Tornio.
git-svn-id: file:///home/svn/framework3/trunk@6629 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-07 20:20:42 +00:00 |
|
HD Moore
|
92d242cc2f
|
osvdb references from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@6568 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-05-19 13:20:32 +00:00 |
|
James Lee
|
6c8a93035f
|
make the new random header stuff work with magic_quotes
git-svn-id: file:///home/svn/framework3/trunk@6559 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-05-17 00:35:56 +00:00 |
|
HD Moore
|
9d8581a17e
|
More osvdb references from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@6550 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-05-13 17:39:42 +00:00 |
|
HD Moore
|
0981295879
|
More osvdb references from Steve Tornio
git-svn-id: file:///home/svn/framework3/trunk@6547 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-05-12 19:56:54 +00:00 |
|
James Lee
|
b31abbc6f9
|
move the payload into a random X- header so it doesn't show up in access logs
git-svn-id: file:///home/svn/framework3/trunk@6493 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-04-19 15:47:14 +00:00 |
|
kris
|
37c2e301ed
|
replacing defunct framework URL in header comments in most modules and pcap_log
git-svn-id: file:///home/svn/framework3/trunk@6479 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-04-13 14:33:26 +00:00 |
|
HD Moore
|
eccfcdfced
|
Sets svn keywords on modules missing it, tweaks the emailer module
git-svn-id: file:///home/svn/framework3/trunk@6407 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-03-28 06:03:35 +00:00 |
Patrick Webster
|
46351557bc
|
Added dogfood_spell_exec exploit module from LSO.
git-svn-id: file:///home/svn/framework3/trunk@6282 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-03-03 03:32:36 +00:00 |
|
Patrick Webster
|
92c45abf2d
|
Added contentkeeperweb_mimencode exploit module.
git-svn-id: file:///home/svn/framework3/trunk@6250 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-02-25 03:41:25 +00:00 |
|
Mario Ceballos
|
ff8323e6d2
|
added modules from Matteo Cantoni.
git-svn-id: file:///home/svn/framework3/trunk@6170 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-01-21 12:51:30 +00:00 |
|
Patrick Webster
|
33ba28346d
|
Added exploit module awstats_migrate_exec.
git-svn-id: file:///home/svn/framework3/trunk@6155 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-01-15 07:09:56 +00:00 |
|
Patrick Webster
|
97ffd10f89
|
Updated to support Windows targets.
git-svn-id: file:///home/svn/framework3/trunk@5912 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-11-13 09:01:24 +00:00 |
Ramon de C Valle
|
c66d6c4e46
|
Set property 'svn:keywords'
git-svn-id: file:///home/svn/framework3/trunk@5783 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-10-23 02:43:21 +00:00 |
|
Ramon de C Valle
|
f124597a56
|
Code cleanups
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-10-19 21:03:39 +00:00 |
|
James Lee
|
4c091edac1
|
fixes #198; generic php eval exploit
git-svn-id: file:///home/svn/framework3/trunk@5746 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-10-13 05:55:10 +00:00 |
|
HD Moore
|
fd256ec4a1
|
This massive commit changes the metasploit 3 module format. The new syntax allows for greater scalability and future improvements to the metasploit module loader. This change also makes it easier for users to add new modules, since the class name no longer needs to match the directory structure.
git-svn-id: file:///home/svn/framework3/trunk@5709 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-10-02 05:23:59 +00:00 |
|
James Lee
|
647118f333
|
remove debug statements, add disabled_functions evasion in php findsock stuff
git-svn-id: file:///home/svn/framework3/trunk@5700 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-09-30 19:56:16 +00:00 |
|
James Lee
|
36a06e7576
|
initial commit of php findsock. This patch makes all http connections global and removes the "close if (!pipelining)" checks, so beware of bugs.
git-svn-id: file:///home/svn/framework3/trunk@5678 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-09-24 04:41:51 +00:00 |
|
Patrick Webster
|
3effb133cc
|
Added spamassassin_exec module.
git-svn-id: file:///home/svn/framework3/trunk@5560 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-07-19 15:40:30 +00:00 |
|
Patrick Webster
|
405637297f
|
Added guestbook_ssi_exec.rb module.
git-svn-id: file:///home/svn/framework3/trunk@5517 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-06-04 12:19:43 +00:00 |
|
HD Moore
|
6a329ea831
|
Update title to match code
git-svn-id: file:///home/svn/framework3/trunk@5474 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-04-14 18:24:06 +00:00 |
|
Patrick Webster
|
66d8f7e8b6
|
Added clamav_milter_blackhole.rb exploit module
git-svn-id: file:///home/svn/framework3/trunk@5447 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-03-17 11:51:30 +00:00 |
|
Patrick Webster
|
1f7eb2147f
|
phpBB2_highlight module port
git-svn-id: file:///home/svn/framework3/trunk@5432 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-03-05 09:42:57 +00:00 |
|
James Lee
|
dfa0f6c0c4
|
More reliable reverse shell
git-svn-id: file:///home/svn/framework3/trunk@5429 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-03-04 07:34:26 +00:00 |
|
Patrick Webster
|
e15dd5a7dc
|
Added SPHPBlog exploit module.
git-svn-id: file:///home/svn/framework3/trunk@5193 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-11-11 09:17:49 +00:00 |
|
Patrick Webster
|
0ebb7c95bd
|
Updated module by Matteo Cantoni
git-svn-id: file:///home/svn/framework3/trunk@5187 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-10-30 13:22:46 +00:00 |
|
fab
|
5b3768ef29
|
added exploit module squirrelmail_pgp_plugin from Nicob
git-svn-id: file:///home/svn/framework3/trunk@5047 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-07-14 17:59:53 +00:00 |
|
HD Moore
|
f915504cfa
|
Fix #53, use Author, not Authors
git-svn-id: file:///home/svn/framework3/trunk@4529 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-03-12 01:08:18 +00:00 |
Matt Miller
|
d42194e14a
|
updated modules to use base class rand_xxx methods
git-svn-id: file:///home/svn/framework3/trunk@4498 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-03-01 08:21:36 +00:00 |
|
HD Moore
|
abbeb2e87e
|
Adding an Id tag and a standard header to all modules
git-svn-id: file:///home/svn/framework3/trunk@4419 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-02-18 00:10:39 +00:00 |
|
HD Moore
|
b278bef22d
|
Reference updates
git-svn-id: file:///home/svn/framework3/trunk@4266 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-01-05 14:44:09 +00:00 |
|
HD Moore
|
9dc2148eb9
|
Moved the other web app bugs into the right place, added php_wordpress_lastpost
git-svn-id: file:///home/svn/framework3/trunk@4262 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-01-05 05:58:13 +00:00 |
|
HD Moore
|
752cc9f978
|
Added the PAJAX exploit
git-svn-id: file:///home/svn/framework3/trunk@4261 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-01-05 05:38:28 +00:00 |
|
HD Moore
|
d09046a5b9
|
Accessing res['header'] is now case insensitive for HTTP responses
Added the Google Appliance exploit
git-svn-id: file:///home/svn/framework3/trunk@4259 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-01-05 05:22:39 +00:00 |
|
HD Moore
|
de5c27e39f
|
Exploit ports
git-svn-id: file:///home/svn/framework3/trunk@4257 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-01-05 04:28:32 +00:00 |
|
HD Moore
|
8fd09e3880
|
Renamed
git-svn-id: file:///home/svn/framework3/trunk@4256 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-01-05 03:48:16 +00:00 |
|
HD Moore
|
b221af7791
|
Integration of the new HTTP Client API
git-svn-id: file:///home/svn/framework3/trunk@4241 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-12-28 23:42:36 +00:00 |
|
HD Moore
|
810f80612b
|
Reference updates
git-svn-id: file:///home/svn/framework3/trunk@4154 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-11-28 17:18:43 +00:00 |
|
HD Moore
|
d0bc17f17a
|
Minor updates
git-svn-id: file:///home/svn/framework3/trunk@3778 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-07-30 21:31:02 +00:00 |
|
HD Moore
|
d086a1bedf
|
BSD license the default for non-msfdev created modules.
git-svn-id: file:///home/svn/incoming/trunk@3636 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-05-06 16:34:39 +00:00 |
|
bmc
|
9eaa03d43b
|
* uniq exploit class name
git-svn-id: file:///home/svn/incoming/trunk@3540 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-02-22 20:34:43 +00:00 |
|
HD Moore
|
e249d9ebe5
|
Massive update to tab indentation (used ./dev/tabify.rb)
git-svn-id: file:///home/svn/incoming/trunk@3450 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-01-27 05:00:35 +00:00 |
|
bmc
|
6ab42be37d
|
* wee, more php bullshit
git-svn-id: file:///home/svn/incoming/trunk@3448 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-01-26 02:07:59 +00:00 |
|
HD Moore
|
1bffccf605
|
New licensing terms, revision bump to v3
git-svn-id: file:///home/svn/incoming/trunk@3425 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-01-21 22:10:20 +00:00 |
|
HD Moore
|
c18e5a10a9
|
distcc
git-svn-id: file:///home/svn/incoming/trunk@3423 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-01-21 05:05:19 +00:00 |
|
bmc
|
164520753c
|
* kill the debugging info
git-svn-id: file:///home/svn/incoming/trunk@3415 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-01-20 20:25:07 +00:00 |
|
bmc
|
d6608d4dd5
|
* xmlrpc vuln
git-svn-id: file:///home/svn/incoming/trunk@3414 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-01-20 20:18:55 +00:00 |