a74d3a3f38
Switches meterpreter to SSL by default, using the PolarSSL library. To build this, just place polarssl.lib into an workspace/common/Release/
...
git-svn-id: file:///home/svn/framework3/trunk@6718 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-26 23:18:53 +00:00
45afe789af
Test case update
...
git-svn-id: file:///home/svn/framework3/trunk@6717 4d416f70-5f16-0410-b530-b9f4589650da
2009-06-26 03:01:11 +00:00
6f8d309949
Passivex fixed. Reverting r6318 for rex/proto/http/packet. Works on IE8, tests on IE6/7 welcome.
...
git-svn-id: file:///home/svn/framework3/trunk@6514 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-30 20:38:57 +00:00
a8b64c56b5
Handle encoding of special chars
...
git-svn-id: file:///home/svn/framework3/trunk@6508 4d416f70-5f16-0410-b530-b9f4589650da
2009-04-29 04:04:40 +00:00
96c8f6127c
Replace += with << for Strings in a bunch of places.
...
git-svn-id: file:///home/svn/framework3/trunk@6318 4d416f70-5f16-0410-b530-b9f4589650da
2009-03-08 07:55:47 +00:00
1d499a9756
fix empty body when Content-Length is not set
...
git-svn-id: file:///home/svn/framework3/trunk@6176 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-23 21:10:58 +00:00
49cd8d7223
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@6114 4d416f70-5f16-0410-b530-b9f4589650da
2009-01-11 04:48:06 +00:00
248f1e9fc3
Remove "#{xxx.to_s}" redundancies ('s/\(#{[^}]*\)\.to_s}/\1}/g')
...
git-svn-id: file:///home/svn/framework3/trunk@6022 4d416f70-5f16-0410-b530-b9f4589650da
2008-12-19 07:11:08 +00:00
5d0ebc18cf
See #250 . Adds a wait() wrapper to the HTTP service as well
...
git-svn-id: file:///home/svn/framework3/trunk@5927 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-16 21:00:44 +00:00
f124597a56
Code cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-19 21:03:39 +00:00
36a06e7576
initial commit of php findsock. This patch makes all http connections global and removes the "close if (!pipelining)" checks, so beware of bugs.
...
git-svn-id: file:///home/svn/framework3/trunk@5678 4d416f70-5f16-0410-b530-b9f4589650da
2008-09-24 04:41:51 +00:00
757b610a59
Fixes #163 . Multiple headers with the same value are now squashed into a single long line in the response object.
...
git-svn-id: file:///home/svn/framework3/trunk@5273 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-06 20:11:02 +00:00
dbb22495a6
Unit test for #173 fix
...
git-svn-id: file:///home/svn/framework3/trunk@5272 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-06 20:07:28 +00:00
af9407e7b0
Fixes #173 . Handle mixed-case header lookups better
...
git-svn-id: file:///home/svn/framework3/trunk@5271 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-06 20:06:39 +00:00
3b74c476a1
patch from Kris K
...
git-svn-id: file:///home/svn/framework3/trunk@5210 4d416f70-5f16-0410-b530-b9f4589650da
2007-11-29 06:57:14 +00:00
7498562eb5
Add proxy support to HTTP mixin using modules. Fix socks proxy support.
...
git-svn-id: file:///home/svn/framework3/trunk@5113 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 04:44:44 +00:00
6f23487daa
Fixes #117 . No longer treat connection: close as a stop-processing case
...
git-svn-id: file:///home/svn/framework3/trunk@5090 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-09 22:27:27 +00:00
ebb84d5b32
Check for typos next time =P
...
git-svn-id: file:///home/svn/framework3/trunk@4879 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-06 22:33:21 +00:00
21e37f1b0c
* older IIS allowed you to encode multiple times. Expose the ability to encode as many times as you wish. 1 is default
...
git-svn-id: file:///home/svn/framework3/trunk@4867 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-04 15:17:25 +00:00
65cfd287e5
Improvements to the SSL socket support in Rex, fixes #102 , and a HTTP client response parsing bug
...
git-svn-id: file:///home/svn/framework3/trunk@4851 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-03 20:01:29 +00:00
c79649ebc3
add chunked encoding evasion back into the client API (not in the mixin yet)
...
git-svn-id: file:///home/svn/framework3/trunk@4790 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-26 21:08:22 +00:00
affc5fb958
fixes #85 (basic auth to http)
...
git-svn-id: file:///home/svn/framework3/trunk@4744 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-23 22:48:22 +00:00
1e1cc94831
req_string rather than req
...
git-svn-id: file:///home/svn/framework3/trunk@4732 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-22 07:50:07 +00:00
d14221898d
Merge in the new generic PHP exploit with new targets
...
Added type definitions to HTTP::Client
git-svn-id: file:///home/svn/framework3/trunk@4537 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-17 20:10:57 +00:00
4d87a3f9fb
Adding the missing raw_headers function required for the recent php bug
...
git-svn-id: file:///home/svn/framework3/trunk@4518 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-11 16:28:13 +00:00
547ec3c6c6
This patch adds header folding, fixed hex-random and u-random encoding, fake uri end, fake uri parameters. This fixes #16 , the remaining two options (chunked and pipelining), will be added in a future version.
...
git-svn-id: file:///home/svn/framework3/trunk@4513 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-10 05:58:14 +00:00
c61e0e8931
change the behavior of nil non-required options, fixes #49
...
git-svn-id: file:///home/svn/framework3/trunk@4509 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-09 06:12:28 +00:00
e6f221ad80
Major updates to the HTTP api, re-addition of HTTP evasion, see #16
...
git-svn-id: file:///home/svn/framework3/trunk@4506 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-08 14:08:41 +00:00
2db1945637
Fix a bone-headed error when adding http evasion, this fixes #31
...
git-svn-id: file:///home/svn/framework3/trunk@4459 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-22 07:33:00 +00:00
51d61c161d
Sessions can be detached and killed from the console
...
git-svn-id: file:///home/svn/framework3/trunk@4437 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 22:35:07 +00:00
279c0e3e52
defanged mode
...
git-svn-id: file:///home/svn/framework3/trunk@4303 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-30 04:48:35 +00:00
d09046a5b9
Accessing res['header'] is now case insensitive for HTTP responses
...
Added the Google Appliance exploit
git-svn-id: file:///home/svn/framework3/trunk@4259 4d416f70-5f16-0410-b530-b9f4589650da
2007-01-05 05:22:39 +00:00
2bc1d4be18
Updates to the client API
...
git-svn-id: file:///home/svn/framework3/trunk@4242 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-28 23:42:54 +00:00
804df25240
Initial overhaul of the HTTP client api. This removes nearly all of the client evasion methods, but leaves the code in a great state to reimplement them with less issues.
...
git-svn-id: file:///home/svn/framework3/trunk@4222 4d416f70-5f16-0410-b530-b9f4589650da
2006-12-19 07:11:55 +00:00
f1fb05690f
misc bugfixes in the http subsystem
...
git-svn-id: file:///home/svn/framework3/trunk@4019 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 09:27:39 +00:00
abf2e057c8
apache chunked encoding win32 port
...
git-svn-id: file:///home/svn/framework3/trunk@4017 4d416f70-5f16-0410-b530-b9f4589650da
2006-10-11 08:31:54 +00:00
7bd26e4925
fixed bug in service manager hardcore alias, new passivex dll/proj files
...
git-svn-id: file:///home/svn/framework3/trunk@3807 4d416f70-5f16-0410-b530-b9f4589650da
2006-08-08 03:29:26 +00:00
df32aedf44
added parens to fix precedence/void context bug
...
git-svn-id: file:///home/svn/framework3/trunk@3747 4d416f70-5f16-0410-b530-b9f4589650da
2006-07-18 17:32:09 +00:00
1a61d3d2fb
changes to support native win32
...
git-svn-id: file:///home/svn/incoming/trunk@3654 4d416f70-5f16-0410-b530-b9f4589650da
2006-06-08 20:53:15 +00:00
1a54cc810a
Fixed numerous issues involving smb/dcerpc interaction
...
Fixed 'bad' use of method definition (space after method name, will be depreciated soon)
git-svn-id: file:///home/svn/incoming/trunk@3626 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-30 19:49:27 +00:00
df49cfabb0
* add SSL TCP server support, using runtime generated/signed keys
...
* add HTTPS support
note, SSL service tests don't work. Right now, the tests just bail early. The
client spins forever trying to get data. When the client & server are in
seperate processes, this isn't a problem. A threaded test implementation is
closer, as data sent from the client gets to the server just fine.
git-svn-id: file:///home/svn/incoming/trunk@3616 4d416f70-5f16-0410-b530-b9f4589650da
2006-04-24 18:49:00 +00:00
5b675262be
properlly support responses when we get a request like this:
...
(echo "GET / HTTP/1.0"; echo ) |nc IP PORT
git-svn-id: file:///home/svn/incoming/trunk@3566 4d416f70-5f16-0410-b530-b9f4589650da
2006-03-09 19:51:37 +00:00
279abda264
* uri encoding is now part of Rex::Text
...
* add junk param start
* add junk URI end
git-svn-id: file:///home/svn/incoming/trunk@3546 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-27 19:55:22 +00:00
524c0a3f74
* add 'none' encoding
...
git-svn-id: file:///home/svn/incoming/trunk@3521 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-10 15:44:15 +00:00
1351ceed1c
* add support to hex/%u encode a URI
...
git-svn-id: file:///home/svn/incoming/trunk@3517 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 22:48:57 +00:00
0f6055c73c
support both POST and SEARCH as basic post request types.
...
git-svn-id: file:///home/svn/incoming/trunk@3512 4d416f70-5f16-0410-b530-b9f4589650da
2006-02-06 20:23:52 +00:00
05b9aacbc1
'none' is an ok content-encoding, just does nothing... (passed in from the exploit mixin)
...
git-svn-id: file:///home/svn/incoming/trunk@3475 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-30 17:31:32 +00:00
20fec01d68
* add junk pipelined request support
...
* fix socket creation on pipelined requests
* when a server says that the connection should be closed (Connection: closed), then close the connection, since its going to regardless, and we don't want to loose our state
* support non-standard line termination in headers. ie \n instead of \r\n
* add junk headers (X-rand: rand)
* add header folding (for evasion)
* add parse_header_re (still leaving parse_header around, though its dead code ATM) that does the right thing on non-standard line endings
* move 'gzip' to a 'compression' option
* add 'deflate' compression option (really, just raw zlib, and only firefox does deflate right)
* fix a bunch of TE:chunked decoding bugs based based on the fact that Apache doesn't always close chunks appropriately
* modify parse_body to not return state, since it doesn't always do that, and the return isn't used... self.state is.
* add TE:chunked request support
* normalize URIs in requests before saving them
* Move params out of the URI, but when the uri is requested, and the method is GET, and there are params, return a URI that has the params that are approrpiately encoded (needed for junk_params, see below)
* move request.to_s support of params to use the request params array when a POST, allows use of junk params support (see below). NOTE: If the body is provided, use the body instead of params, in case you want to hardcode the params in a POST request, eg: php_xmlrpc_eval.rb
* Add junk params when building a param list, eg: a=b becomes asdfasdf=asdrt32a&asdfad=okhgasd&a=b&hjklasdf=hkasgd
* add URI junk slash support (eg: /////foo.html)
* param splitting now supports both '&', and ';', which CGI.pm and PHP both allow
* add URI junk directory support, eg: /asdf/../foo.html
* add param encoding support, eg: param A with value '=' is A=%3d
* add URI junk self referring directory support, eg: /././foo.html
git-svn-id: file:///home/svn/incoming/trunk@3457 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 21:57:44 +00:00
b4ad4a5d75
Tabs vs Spaces
...
git-svn-id: file:///home/svn/incoming/trunk@3453 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-27 05:33:08 +00:00
a1db0b6196
space to tab (happy skape?)
...
git-svn-id: file:///home/svn/incoming/trunk@3445 4d416f70-5f16-0410-b530-b9f4589650da
2006-01-25 21:57:30 +00:00
HD Moore
natron
James Lee
Ramon de C Valle
Matt Miller
Spoon M