HD Moore
|
3c33128186
|
Ensure that a :ua_string is always present in report_client()
git-svn-id: file:///home/svn/framework3/trunk@13461 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-31 21:02:39 +00:00 |
HD Moore
|
89a41e86da
|
Sanitize host fields for low bytes
git-svn-id: file:///home/svn/framework3/trunk@13441 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-31 03:34:51 +00:00 |
HD Moore
|
b885b8ea74
|
Fixes import of binary data. This may not be a problem for valid imports, but at the least this avoids a stack trace
git-svn-id: file:///home/svn/framework3/trunk@13428 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-30 18:31:12 +00:00 |
HD Moore
|
9f8cbc4145
|
First pass at an import, still missing a few items to call this done
git-svn-id: file:///home/svn/framework3/trunk@13390 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-28 21:17:30 +00:00 |
HD Moore
|
46183783aa
|
Fix a typo in the previous commit
git-svn-id: file:///home/svn/framework3/trunk@13363 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-27 13:38:22 +00:00 |
HD Moore
|
9b076df69f
|
Encode non-ASCII bits in usernames/hashes for now
git-svn-id: file:///home/svn/framework3/trunk@13362 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-27 13:25:55 +00:00 |
Tod Beardsley
|
b965d4b6c8
|
Avoid a problem with phantom services on port 0
git-svn-id: file:///home/svn/framework3/trunk@13334 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-25 13:24:41 +00:00 |
Tod Beardsley
|
9eb71240a4
|
Avoid trying to save multiple MAC addresses with the nessus import.
git-svn-id: file:///home/svn/framework3/trunk@13241 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-19 21:27:02 +00:00 |
HD Moore
|
9b2e03e18b
|
Handle newlines (or lack of them) cleaner
git-svn-id: file:///home/svn/framework3/trunk@13170 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-14 15:11:17 +00:00 |
HD Moore
|
cd6678188e
|
Allow :service to be passed in
git-svn-id: file:///home/svn/framework3/trunk@13139 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-09 06:58:55 +00:00 |
Tod Beardsley
|
fb9e0a72e0
|
Deal with a workspace namespace race in starting the UI.
git-svn-id: file:///home/svn/framework3/trunk@13116 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-07-07 13:33:07 +00:00 |
HD Moore
|
b80d364a64
|
Adds support for <audit> as well as <audits>. Fixes #4744
git-svn-id: file:///home/svn/framework3/trunk@12965 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-17 20:08:27 +00:00 |
Tod Beardsley
|
cc04901610
|
Updating import comment docs.
git-svn-id: file:///home/svn/framework3/trunk@12963 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-17 14:46:54 +00:00 |
HD Moore
|
ee20ed3dc6
|
This adds support for direct import of ASPL files from IP360 (stored in the user's config directory) and fixes an issue with the report_host() processing Host objects. Fixes #4619
git-svn-id: file:///home/svn/framework3/trunk@12945 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-15 00:51:51 +00:00 |
Tod Beardsley
|
bd79b31c80
|
Future-proofing the credential ptype. Don't assume anything not smb_hash|ssh_key is plaintext.
git-svn-id: file:///home/svn/framework3/trunk@12875 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-06 21:36:58 +00:00 |
Tod Beardsley
|
7b4c7d44db
|
Adds a Burp Session XML parser and importer. Also includes fix to Rex's HTTP header parser to ensure that it uses only unencoded regexes.
git-svn-id: file:///home/svn/framework3/trunk@12846 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-03 21:17:57 +00:00 |
Tod Beardsley
|
110f4df649
|
Adding a webapp vulnscanner parser for Appscan
git-svn-id: file:///home/svn/framework3/trunk@12826 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-02 22:16:08 +00:00 |
HD Moore
|
d326423b74
|
Skip another way that qualys indicates an invalid hostname
git-svn-id: file:///home/svn/framework3/trunk@12820 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-02 20:56:42 +00:00 |
Tod Beardsley
|
0a7f6b8528
|
Adds support for importing Acunetix webvuln XML reports.
git-svn-id: file:///home/svn/framework3/trunk@12813 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-02 06:17:38 +00:00 |
Tod Beardsley
|
c0d88caf95
|
Fix the references for MS Bulletins when importing from qualys sources.
git-svn-id: file:///home/svn/framework3/trunk@12804 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-01 20:14:25 +00:00 |
Tod Beardsley
|
23e3d4274d
|
Adds a parser for MBSA XML files.
git-svn-id: file:///home/svn/framework3/trunk@12790 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-06-01 00:01:46 +00:00 |
Tod Beardsley
|
c94577448e
|
Cleans up service name normalization.
git-svn-id: file:///home/svn/framework3/trunk@12787 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-31 19:27:22 +00:00 |
Tod Beardsley
|
a5e6b78d12
|
Cleanup on the yield warning for Retina imports.
git-svn-id: file:///home/svn/framework3/trunk@12783 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-31 16:30:07 +00:00 |
Tod Beardsley
|
8132409497
|
For older Nessus formatted reports, prefer the plugin name over the plugin id when importing vulnerabilities.
git-svn-id: file:///home/svn/framework3/trunk@12782 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-31 16:22:42 +00:00 |
Tod Beardsley
|
f420b9c9e9
|
Adding an importer for Foundstone/Mcafee Network Inventory reports.
git-svn-id: file:///home/svn/framework3/trunk@12780 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-31 15:24:42 +00:00 |
amaloteaux
|
911a219e56
|
db_import nmap: add ms06-035, ms07-029 in the parser too
git-svn-id: file:///home/svn/framework3/trunk@12750 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-27 23:34:12 +00:00 |
Tod Beardsley
|
1ecdb15017
|
It helps to actually require the parser if I'm going to go to all the trouble of writing it.
git-svn-id: file:///home/svn/framework3/trunk@12748 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-27 19:53:40 +00:00 |
amaloteaux
|
c6c7d84c3e
|
db_import : parse nmap script output and report ms08-67 vuln if found
git-svn-id: file:///home/svn/framework3/trunk@12745 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-27 18:51:09 +00:00 |
Tod Beardsley
|
a891d53be4
|
Adding a Nokogiri stream parser for Nexpose raw XML files.
git-svn-id: file:///home/svn/framework3/trunk@12740 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-27 17:30:11 +00:00 |
Tod Beardsley
|
3eabf41a67
|
Adds a Nokogiri parser for Nexpose vuln imports.
git-svn-id: file:///home/svn/framework3/trunk@12737 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-26 20:29:47 +00:00 |
HD Moore
|
c5c679cdb7
|
Remove all calls to framework.db.sync and make this method a no-op now that the task manager is no longer used.
git-svn-id: file:///home/svn/framework3/trunk@12708 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-25 00:30:03 +00:00 |
Tod Beardsley
|
81e1b41840
|
Fixes #4578. If the user has Nokogiri of a reasonable version installed, use that to parse Nmap-created XML documents. Otherwise, fall back to the existing REXML parser.
git-svn-id: file:///home/svn/framework3/trunk@12702 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-24 19:40:50 +00:00 |
Tod Beardsley
|
60dcac616e
|
Renames some nessus-imported vulnerabilities to drop the NSS identifier and just stick with the plugin name (if available). Also drops junk NSS-0 vulnerabilities.
git-svn-id: file:///home/svn/framework3/trunk@12653 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-17 22:18:43 +00:00 |
Tod Beardsley
|
056cde292f
|
Deprecate the exploited_host table. Vulns that indicate a successful exploit without opening a session should set the :exploited_at timestamp.
git-svn-id: file:///home/svn/framework3/trunk@12623 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-15 22:19:00 +00:00 |
Tod Beardsley
|
03549f0b15
|
Nessus imported vulns should reference themselves as a NSS- identifier.
git-svn-id: file:///home/svn/framework3/trunk@12610 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-13 17:00:03 +00:00 |
HD Moore
|
c7439f5ba1
|
Remove the leftover autoloads
git-svn-id: file:///home/svn/framework3/trunk@12603 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-12 20:20:08 +00:00 |
HD Moore
|
ecb726fb2c
|
Rolling two changes through again (stomped on by the autoload revert)
git-svn-id: file:///home/svn/framework3/trunk@12601 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-12 20:08:33 +00:00 |
HD Moore
|
9ce47c01bd
|
Reverting the autoload changes until we can upgrade to a new ActiveSupport library or find a workaround
git-svn-id: file:///home/svn/framework3/trunk@12600 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-12 20:03:55 +00:00 |
Joshua Drake
|
fd4e6db85d
|
Fixes 4373, Migrates lib/msf to use autoload instead of require (first try)
git-svn-id: file:///home/svn/framework3/trunk@12596 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-12 19:07:35 +00:00 |
James Lee
|
06779bc8c0
|
remove unnecessary requires for stuff in rex. autoload and a high-level require 'rex' in lib/msf/core.rb should take care of everything. see #4371, #4373, r12587, and r12554.
git-svn-id: file:///home/svn/framework3/trunk@12588 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-12 00:53:33 +00:00 |
Tod Beardsley
|
3e6d526eca
|
Fixes #4391. Sorry! Ruby incompatability on method defs where if you set one option, you need to set them all (doesn't affect current 1.9 Rubies).
git-svn-id: file:///home/svn/framework3/trunk@12580 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-10 21:27:17 +00:00 |
Tod Beardsley
|
50b26cb2d6
|
Adds another Qualys formatted XML importer for ASSET_DATA_REPORT files.
git-svn-id: file:///home/svn/framework3/trunk@12575 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-10 19:10:02 +00:00 |
HD Moore
|
23c355ba2c
|
Just use :mac not :host_mac
git-svn-id: file:///home/svn/framework3/trunk@12517 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-03 03:03:38 +00:00 |
James Lee
|
e81d3440b8
|
don't try to store session events for sessions without a db_record. fixes #4301
git-svn-id: file:///home/svn/framework3/trunk@12505 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-02 06:45:21 +00:00 |
HD Moore
|
732a1f3993
|
Skip empty vulnerability names
git-svn-id: file:///home/svn/framework3/trunk@12503 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-05-02 05:20:07 +00:00 |
HD Moore
|
2c3e85af05
|
Major cleanups to the session manager, serialized processing of incoming connections, concurrent processing (up to a max scheduler thread count) of meterpreter initialization/scripts. This is to avoid a potential deadlock in openssl and ensure consistent, reliable session staging. This commit also fixes a bug that would mark database sessions as closed too early.
git-svn-id: file:///home/svn/framework3/trunk@12485 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-30 18:51:50 +00:00 |
Tod Beardsley
|
dfb8a9e24b
|
Catching more nils in db_import.
git-svn-id: file:///home/svn/framework3/trunk@12477 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-30 04:33:52 +00:00 |
HD Moore
|
321e5bd292
|
Qualify the exception namespace
git-svn-id: file:///home/svn/framework3/trunk@12475 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-30 03:33:45 +00:00 |
Tod Beardsley
|
94be33e8ee
|
A little cleaner method for determining the nature of imported zip files.
git-svn-id: file:///home/svn/framework3/trunk@12472 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-30 01:49:55 +00:00 |
Tod Beardsley
|
4053764f21
|
In the event an import file isn't an msf_zip, pcapfile, and doesn't have a newline, bail.
git-svn-id: file:///home/svn/framework3/trunk@12465 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-04-29 04:16:42 +00:00 |