ca7c8b0f68
Adds the Exploit::Remote::Ip mixin
...
git-svn-id: file:///home/svn/framework3/trunk@5566 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 19:12:05 +00:00
2d344e64df
browser_autopwn now works with mozilla_compareto, mozilla_navigatorjava, and firefox_queryinterface; increased reliability of OS and browser detection
...
git-svn-id: file:///home/svn/framework3/trunk@5563 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-22 07:28:05 +00:00
301b1514f3
Added pop2 mixin, aux module, typos.
...
git-svn-id: file:///home/svn/framework3/trunk@5550 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-08 14:21:48 +00:00
8800372e46
initial commit of browser_autopwn;
...
revamp php payloads;
socks5 for IPv6 (untested)
git-svn-id: file:///home/svn/framework3/trunk@5546 4d416f70-5f16-0410-b530-b9f4589650da
2008-07-01 01:44:56 +00:00
5ec3509103
egypt found a bug, regenerate payload was overwriting datastore entries and not setting them back
...
git-svn-id: file:///home/svn/framework3/trunk@5504 4d416f70-5f16-0410-b530-b9f4589650da
2008-05-16 21:20:43 +00:00
125d114526
Properly handle SMB::pipe_(read|write)_(min|max)
...
git-svn-id: file:///home/svn/framework3/trunk@5466 4d416f70-5f16-0410-b530-b9f4589650da
2008-04-04 20:54:39 +00:00
03276c9cc0
Add a find_layers method
...
git-svn-id: file:///home/svn/framework3/trunk@5456 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-22 19:55:23 +00:00
1ea29ba8f0
Fixes #218 . Updates the http password capture module. Removes a bogus makefile from the tree
...
git-svn-id: file:///home/svn/framework3/trunk@5452 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-22 06:34:52 +00:00
c3a4cda127
Merged all of the scruby patches, fixed Dot11 support with regards to RadioTap headers.
...
git-svn-id: file:///home/svn/framework3/trunk@5446 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-17 04:46:42 +00:00
4ee248bf3e
Pass the IP address in the IPC$ tree connect (required by novell)
...
git-svn-id: file:///home/svn/framework3/trunk@5441 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-13 15:46:33 +00:00
dfa0f6c0c4
More reliable reverse shell
...
git-svn-id: file:///home/svn/framework3/trunk@5429 4d416f70-5f16-0410-b530-b9f4589650da
2008-03-04 07:34:26 +00:00
6677beb174
Merged revisions 5366-5377 via svnmerge from
...
svn+ssh://metasploit.com/home/svn/framework3/branches/framework-3.1
........
r5366 | hdm | 2008-01-26 20:30:53 -0600 (Sat, 26 Jan 2008) | 2 lines
Update version information
........
r5367 | hdm | 2008-01-26 21:10:57 -0600 (Sat, 26 Jan 2008) | 3 lines
Updated for version 3.1
........
r5369 | hdm | 2008-01-26 21:13:31 -0600 (Sat, 26 Jan 2008) | 3 lines
Wipe the private directories from the branch.
........
r5371 | hdm | 2008-01-27 17:24:24 -0600 (Sun, 27 Jan 2008) | 5 lines
Timeout options added for dcerpc connect and read times. Addition of novell netware as a supported target platform. Inclusion of the serverprotect exploit (still works on the latest version). Addition of the first remote netware kernel exploit that leads to a shell, addition of netware stager and shell, and first draft of the release notes for 3.1
........
r5372 | hdm | 2008-01-27 17:30:08 -0600 (Sun, 27 Jan 2008) | 3 lines
Formatting, indentation, fixed the static IP embedded in the request
........
r5373 | hdm | 2008-01-27 20:02:48 -0600 (Sun, 27 Jan 2008) | 3 lines
Correctly trap exploit errors in a way that works with all of the UIs
........
r5374 | hdm | 2008-01-27 20:23:25 -0600 (Sun, 27 Jan 2008) | 3 lines
More last-minute bug fixes
........
r5375 | hdm | 2008-01-27 20:37:43 -0600 (Sun, 27 Jan 2008) | 3 lines
Force multi-bind off in netware, correct label display in gtk gui labels
........
r5376 | hdm | 2008-01-27 20:50:03 -0600 (Sun, 27 Jan 2008) | 3 lines
More exception handling fun
........
git-svn-id: file:///home/svn/framework3/trunk@5378 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-28 03:06:31 +00:00
9d2abb9287
The capture mixin is now working again (with scruby)
...
git-svn-id: file:///home/svn/framework3/trunk@5352 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-25 05:59:06 +00:00
1e2ec68913
Handle lorcon on windows better
...
git-svn-id: file:///home/svn/framework3/trunk@5341 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-24 05:49:48 +00:00
eeed1c8a87
Added consoles to the GUI
...
git-svn-id: file:///home/svn/framework3/trunk@5283 4d416f70-5f16-0410-b530-b9f4589650da
2008-01-07 07:00:42 +00:00
ab2654f3a0
Defaults for airpcap
...
git-svn-id: file:///home/svn/framework3/trunk@5229 4d416f70-5f16-0410-b530-b9f4589650da
2007-12-29 23:15:30 +00:00
dc23f5b8dc
default to first architecture in architecture array for egghunter, fixes #148
...
git-svn-id: file:///home/svn/framework3/trunk@5131 4d416f70-5f16-0410-b530-b9f4589650da
2007-10-02 03:24:21 +00:00
ceb69bb541
Overhaul of the ruby-lorcon module to match pylorcon.
...
git-svn-id: file:///home/svn/framework3/trunk@5124 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-28 06:51:32 +00:00
7498562eb5
Add proxy support to HTTP mixin using modules. Fix socks proxy support.
...
git-svn-id: file:///home/svn/framework3/trunk@5113 4d416f70-5f16-0410-b530-b9f4589650da
2007-09-24 04:44:44 +00:00
1f2791494b
General cleanups, bug fixes, removal of debugging statements.
...
git-svn-id: file:///home/svn/framework3/trunk@5051 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-16 02:17:32 +00:00
e4e674003d
Correct the super() call in http's regenerate_payload()
...
git-svn-id: file:///home/svn/framework3/trunk@5025 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 13:40:45 +00:00
0c6d0e5941
This code IS in a mixin now, remove the old comment :)
...
git-svn-id: file:///home/svn/framework3/trunk@5024 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:39:58 +00:00
30bf0667d8
cosmetic
...
git-svn-id: file:///home/svn/framework3/trunk@5023 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:39:18 +00:00
ddadf74a85
Fix a typo that could break regenerate_payload
...
git-svn-id: file:///home/svn/framework3/trunk@5022 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:38:56 +00:00
a21ec0a73c
Updating the php_include_url function to figure out the server address a little bit better.
...
git-svn-id: file:///home/svn/framework3/trunk@5019 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:26:28 +00:00
d0b15d3d72
Lots of SMB fun, all preparation for Black Hat talk :-) More to come...
...
git-svn-id: file:///home/svn/framework3/trunk@5015 4d416f70-5f16-0410-b530-b9f4589650da
2007-07-03 04:20:50 +00:00
c45e9b957a
This adds suppor for the LSA open policy call for dcerpc exploits
...
git-svn-id: file:///home/svn/framework3/trunk@4985 4d416f70-5f16-0410-b530-b9f4589650da
2007-06-09 02:26:35 +00:00
88d3193020
Removed the old pcap mixin, replaced with Capture, updated the test_pcap module
...
git-svn-id: file:///home/svn/framework3/trunk@4860 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-04 02:56:35 +00:00
6ac3d5a5cc
Prints the banner during connect() now
...
git-svn-id: file:///home/svn/framework3/trunk@4837 4d416f70-5f16-0410-b530-b9f4589650da
2007-05-02 03:40:46 +00:00
4d1c274387
Merging all of the auxilliary/scanner related features
...
git-svn-id: file:///home/svn/framework3/trunk@4749 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-24 06:27:39 +00:00
0801d3989f
fix for handler issue in udp exploits
...
git-svn-id: file:///home/svn/framework3/trunk@4700 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-16 16:20:59 +00:00
1bb398de59
Adding the Microsoft DNS service exploit, targetting Windows 2000
...
git-svn-id: file:///home/svn/framework3/trunk@4677 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-14 07:16:33 +00:00
fdd9f96145
Adds endpoint mapper and management interface support to the DCERPC exploit mixin
...
git-svn-id: file:///home/svn/framework3/trunk@4676 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-14 05:22:22 +00:00
a319b8e582
got rid of duplicated code in browser exploits, fixes #71
...
git-svn-id: file:///home/svn/framework3/trunk@4642 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-04 02:04:37 +00:00
b74311c71d
initial integration of alex's heaplib, and a port of the keyframe exploit
...
git-svn-id: file:///home/svn/framework3/trunk@4635 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-03 07:35:54 +00:00
dd2e9d87fb
This adds SMTPDeliver exploit mixin, the SMTP version of the ANI exploit, accessor to Ole::Storage
...
git-svn-id: file:///home/svn/framework3/trunk@4608 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-02 05:27:19 +00:00
f9d8c4e820
modifications to support using an explicit target to regen payloads
...
git-svn-id: file:///home/svn/framework3/trunk@4602 4d416f70-5f16-0410-b530-b9f4589650da
2007-04-01 21:21:10 +00:00
9c3bfaeee4
Imported the OLE modules from ruby-msg (GPLv2)
...
git-svn-id: file:///home/svn/framework3/trunk@4541 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-20 16:49:34 +00:00
449ca3c826
check to ensure that the step is valid as it will be normalized
...
git-svn-id: file:///home/svn/framework3/trunk@4525 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-12 00:35:02 +00:00
b5e0a70528
Cleanup debugging statement
...
git-svn-id: file:///home/svn/framework3/trunk@4517 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-11 02:04:35 +00:00
d3ff922169
Disable BruteStep for now, its still broken
...
git-svn-id: file:///home/svn/framework3/trunk@4516 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-11 01:43:51 +00:00
547ec3c6c6
This patch adds header folding, fixed hex-random and u-random encoding, fake uri end, fake uri parameters. This fixes #16 , the remaining two options (chunked and pipelining), will be added in a future version.
...
git-svn-id: file:///home/svn/framework3/trunk@4513 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-10 05:58:14 +00:00
41809d5f0a
Rescue Timeout and Runtime errors from the HTTP client. This fixes #42 .
...
git-svn-id: file:///home/svn/framework3/trunk@4512 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-10 03:51:58 +00:00
c61e0e8931
change the behavior of nil non-required options, fixes #49
...
git-svn-id: file:///home/svn/framework3/trunk@4509 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-09 06:12:28 +00:00
e6f221ad80
Major updates to the HTTP api, re-addition of HTTP evasion, see #16
...
git-svn-id: file:///home/svn/framework3/trunk@4506 4d416f70-5f16-0410-b530-b9f4589650da
2007-03-08 14:08:41 +00:00
88cc653478
The HTTP api now catches SIGPIPEs and just returns a nil response
...
git-svn-id: file:///home/svn/framework3/trunk@4483 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-27 09:31:23 +00:00
7087457f9e
A few more updates to the HTTP exploit mixin, still needs some work before it is completed
...
git-svn-id: file:///home/svn/framework3/trunk@4481 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-27 09:15:53 +00:00
6d4c234187
Fix a problem where a dcerpc exploit will only work once before the framework must be reloaded
...
git-svn-id: file:///home/svn/framework3/trunk@4476 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-26 17:38:01 +00:00
d4a739f85a
fixes #1
...
git-svn-id: file:///home/svn/framework3/trunk@4435 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 12:08:11 +00:00
24f0608974
Update the smb/dcerpc mixins to use the newly named options
...
git-svn-id: file:///home/svn/framework3/trunk@4430 4d416f70-5f16-0410-b530-b9f4589650da
2007-02-18 07:06:30 +00:00
HD Moore
James Lee
Patrick Webster
Matt Miller