James Lee
|
8e5311cb61
|
File.read is not binary safe. replace it with File.open in a few places where it matters.
git-svn-id: file:///home/svn/framework3/trunk@12957 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-16 22:02:00 +00:00 |
|
James Lee
|
ea5dc1c85c
|
use the right uri for our jar when other webserver modules are running
git-svn-id: file:///home/svn/framework3/trunk@12944 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-14 23:57:10 +00:00 |
HD Moore
|
85f5e5fb98
|
Fix the disclosure date to match when signing was made available to the masses
git-svn-id: file:///home/svn/framework3/trunk@12891 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-09 17:08:05 +00:00 |
|
HD Moore
|
c3c061334d
|
Add a "disclosure date" (applets were included in the first java release) and changing the title.
git-svn-id: file:///home/svn/framework3/trunk@12883 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-08 03:31:49 +00:00 |
|
James Lee
|
1c4bf118e8
|
add a version check
git-svn-id: file:///home/svn/framework3/trunk@12847 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-03 23:47:44 +00:00 |
|
James Lee
|
5b91eadb87
|
fix the string replacement and do it at setup time instead of for every request
git-svn-id: file:///home/svn/framework3/trunk@12747 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-27 19:36:12 +00:00 |
|
James Lee
|
cd3f306ef2
|
clarify info a bit; make APPLETNAME option actually do something.
git-svn-id: file:///home/svn/framework3/trunk@12746 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-27 19:13:47 +00:00 |
|
James Lee
|
5a54a408f5
|
stupid debugging stuff
git-svn-id: file:///home/svn/framework3/trunk@12736 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-26 19:10:54 +00:00 |
|
James Lee
|
c5781ae515
|
add support for PKCS12 (.pfx) cert/key files and cert chains in PEM files
git-svn-id: file:///home/svn/framework3/trunk@12735 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-26 17:52:12 +00:00 |
|
James Lee
|
11a1b5dcad
|
fix the requires for java signing.
git-svn-id: file:///home/svn/framework3/trunk@12719 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-25 18:02:02 +00:00 |
|
James Lee
|
812bae9df9
|
add support for signing applets (or any other jar) with openssl. this removes the need for a dependency on RJB
git-svn-id: file:///home/svn/framework3/trunk@12718 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-25 16:45:20 +00:00 |
|
James Lee
|
ef48240606
|
Make it obvious which exploit is handling a request
git-svn-id: file:///home/svn/framework3/trunk@12693 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-23 17:05:44 +00:00 |
|
James Lee
|
04efaf9281
|
referencing navigator.javaEnabled breaks ie6, only check navigator.javaEnabled();
git-svn-id: file:///home/svn/framework3/trunk@12655 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-17 22:44:39 +00:00 |
David Rude
|
a8b6c43636
|
reverting the disclosure dates for now need to clean up the patch
git-svn-id: file:///home/svn/framework3/trunk@12540 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-04 20:43:19 +00:00 |
|
David Rude
|
3b7ea08f6a
|
Fixes a ton of Disclosure Date discrepencies in various modules, thanks a ton to Michael Baker for spending the time to ensure accuracy
git-svn-id: file:///home/svn/framework3/trunk@12539 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-04 19:17:31 +00:00 |
Wei Chen
|
6d71990dfc
|
Disclosure date change
git-svn-id: file:///home/svn/framework3/trunk@12390 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-21 15:40:59 +00:00 |
Joshua Drake
|
d2374a435f
|
add .jar extension, thx for the contribution!
git-svn-id: file:///home/svn/framework3/trunk@12285 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-09 17:03:41 +00:00 |
|
Joshua Drake
|
287f4c87fe
|
style compliance fixes
git-svn-id: file:///home/svn/framework3/trunk@11516 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-01-08 01:13:26 +00:00 |
|
James Lee
|
fd1fb44bfc
|
add targets for windows and linux
git-svn-id: file:///home/svn/framework3/trunk@11345 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-12-15 22:46:22 +00:00 |
|
James Lee
|
05d073c467
|
move the evil-looking metasploit.PayloadApplet to the more inocuous SiteLoader.class, re-enable rjb compiling for the applet class
git-svn-id: file:///home/svn/framework3/trunk@11249 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-12-07 20:43:53 +00:00 |
|
James Lee
|
62a425f6b6
|
add rjb signing back in to java_signed_applet
git-svn-id: file:///home/svn/framework3/trunk@11186 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-12-01 01:29:08 +00:00 |
|
James Lee
|
191c4e8eb7
|
make java_signed_applet work with generic java payloads, but keep the default target as Windows/x86 since it is by far the most common victim.
git-svn-id: file:///home/svn/framework3/trunk@11172 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-11-30 03:50:40 +00:00 |
|
Joshua Drake
|
1d8e1e332c
|
add better error reporting
git-svn-id: file:///home/svn/framework3/trunk@11120 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-11-24 01:11:49 +00:00 |
|
Joshua Drake
|
3992eb7ef8
|
Mass RE-update: fix all framework URL references
git-svn-id: file:///home/svn/framework3/trunk@10998 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-11-11 22:43:22 +00:00 |
|
Joshua Drake
|
9fc6f2f3a3
|
Mass update: fix all framework URL references
git-svn-id: file:///home/svn/framework3/trunk@10996 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-11-11 22:25:13 +00:00 |
|
James Lee
|
8c1f0713db
|
regenerate the payload so we get the correct *lhost*
git-svn-id: file:///home/svn/framework3/trunk@10490 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-27 00:09:17 +00:00 |
|
James Lee
|
4fbb0653a1
|
regenerate the payload so we get the correct rhost
git-svn-id: file:///home/svn/framework3/trunk@10488 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-26 23:55:03 +00:00 |
|
Joshua Drake
|
4590844871
|
tons of indentation fixes, some other style tweaks
git-svn-id: file:///home/svn/framework3/trunk@10394 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-20 08:06:27 +00:00 |
|
Joshua Drake
|
19db412383
|
convert remaining EXE generation to use the mixin, fixes #2017
git-svn-id: file:///home/svn/framework3/trunk@10389 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-20 04:38:13 +00:00 |
|
James Lee
|
a9a312fa66
|
typo
git-svn-id: file:///home/svn/framework3/trunk@10257 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-08 15:23:04 +00:00 |
|
James Lee
|
85126af521
|
add an exploit module for cve-2010-0094, thanks Matthias Kaiser.
git-svn-id: file:///home/svn/framework3/trunk@10255 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-08 08:20:55 +00:00 |
|
Joshua Drake
|
aac956db50
|
style compliance fixes
git-svn-id: file:///home/svn/framework3/trunk@10128 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-24 18:22:48 +00:00 |
|
James Lee
|
2e13a330fa
|
typo'd Matthias' name. i suck
git-svn-id: file:///home/svn/framework3/trunk@10113 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-23 18:49:35 +00:00 |
|
James Lee
|
90e89622c6
|
make it a little easier to distinguish these two from their output
git-svn-id: file:///home/svn/framework3/trunk@10096 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-21 07:53:25 +00:00 |
|
James Lee
|
7381ab8b6d
|
duh, dont actually need this
git-svn-id: file:///home/svn/framework3/trunk@10093 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-21 07:19:49 +00:00 |
|
James Lee
|
6b08dfed61
|
Add exploit module for cve-2010-08040. This is an awesome bug and my description field doesn't do it justice
git-svn-id: file:///home/svn/framework3/trunk@10092 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-21 06:38:29 +00:00 |
|
James Lee
|
56396a6d8b
|
add java support to browser_autopwn
git-svn-id: file:///home/svn/framework3/trunk@10089 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-20 20:49:33 +00:00 |
|
Joshua Drake
|
2545410bc7
|
make exe template names more consistent
git-svn-id: file:///home/svn/framework3/trunk@10065 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-19 21:08:51 +00:00 |
|
James Lee
|
e1ed341136
|
remove debug prints
git-svn-id: file:///home/svn/framework3/trunk@9938 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-27 21:05:41 +00:00 |
|
Joshua Drake
|
f6033b9bd6
|
change some print_status to print_error, rename a few msft modules using msb convention
git-svn-id: file:///home/svn/framework3/trunk@9929 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-25 21:37:54 +00:00 |
|
Joshua Drake
|
2482a83526
|
style compliance fixes
git-svn-id: file:///home/svn/framework3/trunk@9927 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-25 19:14:00 +00:00 |
Steve Tornio
|
018af7f690
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@9906 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-21 21:09:54 +00:00 |
|
James Lee
|
08d705c1db
|
add java meterpreter and update java_calendar_deserialize to be able to use it, see #406
git-svn-id: file:///home/svn/framework3/trunk@9874 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-20 00:53:24 +00:00 |
|
James Lee
|
9891ea5374
|
Typo which caused this exploit never to get run in browser_autopwn
git-svn-id: file:///home/svn/framework3/trunk@9802 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-13 09:03:56 +00:00 |
|
James Lee
|
9f37d46f7b
|
minimize autopwn settings
git-svn-id: file:///home/svn/framework3/trunk@9784 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-11 23:21:04 +00:00 |
|
James Lee
|
28e40bdc9f
|
add java_calendar_deserialize to browser_autopwn
git-svn-id: file:///home/svn/framework3/trunk@9783 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-11 23:16:51 +00:00 |
|
Joshua Drake
|
7d945ed9dc
|
add lots of disclosure dates from OSVDB
git-svn-id: file:///home/svn/framework3/trunk@9669 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-03 03:13:45 +00:00 |
|
Joshua Drake
|
fa505a4069
|
various fixes, mostly consistency changes to disclosure dates
git-svn-id: file:///home/svn/framework3/trunk@9525 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-06-15 07:18:08 +00:00 |
|
Joshua Drake
|
128e0515ef
|
stop perpetuating the ambiguity!
git-svn-id: file:///home/svn/framework3/trunk@9262 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-05-09 17:45:00 +00:00 |
|
James Lee
|
e70dabf3e3
|
warn and remove commas from CERTCN to prevent a crash bug in Rjb's keytool, fixes 1543
git-svn-id: file:///home/svn/framework3/trunk@9241 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-05-07 18:19:50 +00:00 |