HD Moore
f5374fe2d2
Syntax fixups
...
git-svn-id: file:///home/svn/framework3/trunk@5894 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 19:31:11 +00:00
HD Moore
a70e982369
Adds utlities for creating VBA scripts from an EXE (or payload)
...
git-svn-id: file:///home/svn/framework3/trunk@5893 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-12 19:15:24 +00:00
HD Moore
71448fd876
Typo for hashes
...
git-svn-id: file:///home/svn/framework3/trunk@5891 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 22:57:18 +00:00
HD Moore
10266c8e51
Better short read detection from antoine.
...
git-svn-id: file:///home/svn/framework3/trunk@5889 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 17:53:13 +00:00
HD Moore
250848ac5c
Handle windows error on broadcast addresses
...
git-svn-id: file:///home/svn/framework3/trunk@5886 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 07:41:07 +00:00
HD Moore
81347ba308
Fix ENONET for BSD
...
git-svn-id: file:///home/svn/framework3/trunk@5885 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:19:44 +00:00
kris
7b002d4288
remove unused exception variables
...
git-svn-id: file:///home/svn/framework3/trunk@5882 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 06:00:54 +00:00
HD Moore
cca9c39eab
Typo fix from Rhyss
...
git-svn-id: file:///home/svn/framework3/trunk@5881 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 05:39:23 +00:00
HD Moore
e9b3919ace
Normalize exceptions across socket libraries
...
git-svn-id: file:///home/svn/framework3/trunk@5879 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 05:11:40 +00:00
kris
aba3f95026
an empty string is better than a nil type-error (found by playing around, not
...
from a faulty module or whathaveyou)
git-svn-id: file:///home/svn/framework3/trunk@5878 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-11 04:01:21 +00:00
HD Moore
bbb53dd9ea
Default max_read to 1M, solves intermittent issues
...
git-svn-id: file:///home/svn/framework3/trunk@5876 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 23:03:16 +00:00
HD Moore
b11939759e
Fix an ugly error when the response was too small
...
git-svn-id: file:///home/svn/framework3/trunk@5875 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 22:56:25 +00:00
HD Moore
7af4772729
All bugs closed
...
git-svn-id: file:///home/svn/framework3/trunk@5874 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 22:15:23 +00:00
HD Moore
8628a9d2c1
Fixes #193 . Add a unicode-capable workaround for windows, patch code to go through the compat lib
...
git-svn-id: file:///home/svn/framework3/trunk@5873 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 21:44:58 +00:00
HD Moore
6dd840e4b3
Fixes #201 . Better error processing of client sockets
...
git-svn-id: file:///home/svn/framework3/trunk@5872 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 21:30:35 +00:00
HD Moore
e2a70dd615
Fixes #111 . Merge in patch to fix memdump support, still not perfect, but usable
...
git-svn-id: file:///home/svn/framework3/trunk@5871 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 21:18:12 +00:00
et
b4cbe4ff8d
Multiple bug fixes. Fixed query modules now resolved to correct function. Corrected in proxy and wmap code handling of RHOSTS as hostnames are not in use. Fixed reporting as target port was not handled properly and modules modified to reflect new wmap_target methods.
...
git-svn-id: file:///home/svn/framework3/trunk@5869 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 04:38:05 +00:00
kris
23274e6efc
Fix Meterpreter route error message
...
git-svn-id: file:///home/svn/framework3/trunk@5868 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 04:17:31 +00:00
kris
cce1166199
Fix Meterpreter's portfwd default "list" behavior
...
git-svn-id: file:///home/svn/framework3/trunk@5867 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 03:56:23 +00:00
kris
21c1eecfa7
Update Meterpreter upload and download commands so that passing one non-option
...
argument sets both the source and destination file/dir (and make it so that
these commands only expect at least one argument instead of two)
git-svn-id: file:///home/svn/framework3/trunk@5866 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-10 02:07:41 +00:00
HD Moore
4250d1e132
Handle socket errors more gracefully
...
git-svn-id: file:///home/svn/framework3/trunk@5864 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 23:02:18 +00:00
HD Moore
2d498ed3c5
Fixes #149 . This doesnt address quite the bug, but solves a case where the DNS server does not reply and the Windows version of ruby acts stupid. The bug mentioned in this ticket is addressed by a newer ruby version.
...
git-svn-id: file:///home/svn/framework3/trunk@5863 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 22:59:21 +00:00
HD Moore
6e773891de
Fixes #167 . Remove the EncoderDontFallThrough option, make this the normal behavior if an encoder is specified
...
git-svn-id: file:///home/svn/framework3/trunk@5862 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 22:23:29 +00:00
HD Moore
3b79f24500
Fixes #242 . Use the bundled copy of activerecord
...
git-svn-id: file:///home/svn/framework3/trunk@5861 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 21:54:04 +00:00
HD Moore
7367c2cbd4
Fixes #248 . Catch empty returns from pgets
...
git-svn-id: file:///home/svn/framework3/trunk@5860 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 21:40:03 +00:00
HD Moore
ecc853d453
Fixes #246 . Revert to older readline behavior, the priority change should prevent the readline idle loop from consuming process time.
...
git-svn-id: file:///home/svn/framework3/trunk@5859 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-09 08:44:36 +00:00
HD Moore
94a7cdcc6b
Fix duplicate options when payload/exploit have a shared optino value
...
git-svn-id: file:///home/svn/framework3/trunk@5856 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-08 23:06:04 +00:00
kris
97fee9e16f
Return "0 secs" instead of "" in Rex::ExtTime.sec_to_s()
...
git-svn-id: file:///home/svn/framework3/trunk@5855 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-08 22:35:37 +00:00
James Lee
75feaa6fab
allow passing args to meterpreter scripts through AutoRunScript
...
git-svn-id: file:///home/svn/framework3/trunk@5853 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-08 19:39:06 +00:00
HD Moore
bc8e5669bd
Fixes #238 . Exposes the RHOST option to the payload and fixes the MSFGUI display of payload options
...
git-svn-id: file:///home/svn/framework3/trunk@5852 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-08 19:25:25 +00:00
HD Moore
d1052fdaf1
Fixes #215 . Reinitialize the input/output after a reload
...
git-svn-id: file:///home/svn/framework3/trunk@5851 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-08 17:48:21 +00:00
HD Moore
5af9abd81d
Fixes #194 . Add nicer call stacks to auxiliary modules
...
git-svn-id: file:///home/svn/framework3/trunk@5850 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-07 22:54:49 +00:00
HD Moore
7c03f14792
Add a better test for the ruby short-named constant bug
...
git-svn-id: file:///home/svn/framework3/trunk@5848 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-07 20:44:13 +00:00
HD Moore
0881649f14
The psexec and smb_relay module now automatically cleanup. The ms08-06 module now supports all languages of XP SP3.
...
git-svn-id: file:///home/svn/framework3/trunk@5841 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 22:27:59 +00:00
HD Moore
68b9a2a421
Adds a new submitted fingerprint for Czech
...
git-svn-id: file:///home/svn/framework3/trunk@5836 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 07:13:48 +00:00
James Lee
0193cd5219
fix session vs client variable problems with meterpreter AutoRunScript and make usage actually reflect what the code does
...
git-svn-id: file:///home/svn/framework3/trunk@5834 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 06:40:12 +00:00
HD Moore
8ee55fb53c
Embed the revision of the smb mixin
...
git-svn-id: file:///home/svn/framework3/trunk@5832 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-04 04:24:11 +00:00
HD Moore
b53695f7db
The psexec module now uses a service-compatible exe, shellcode is spawned in a subprocess and the service cleans up properly
...
git-svn-id: file:///home/svn/framework3/trunk@5829 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 23:06:37 +00:00
HD Moore
133d7ce658
Adds an automatic default target to ms08-067, autodetects OS, SP, and language now.
...
git-svn-id: file:///home/svn/framework3/trunk@5827 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 20:37:51 +00:00
HD Moore
f1789fc1b2
Adds the check() method and scanner module to ms08-067, massively upgrades the smb/version scanner, with better SP detection and remote language pack detection.
...
git-svn-id: file:///home/svn/framework3/trunk@5823 4d416f70-5f16-0410-b530-b9f4589650da
2008-11-03 09:17:08 +00:00
kris
c52f889082
Report hosts as alive through db_tracker and the db Nmap and Nessus commands
...
git-svn-id: file:///home/svn/framework3/trunk@5819 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-31 18:39:53 +00:00
HD Moore
56a413d803
Reflective DLL injection payloads from Stephen Fewer
...
git-svn-id: file:///home/svn/framework3/trunk@5806 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 22:17:32 +00:00
HD Moore
a4d53893ac
Improvements to opty2 from vlad902:
...
1) Fixed a minor bug, sometimes Opty2 would generate C1 /6 instructions which most processors will execute but which are not technically valid (they would exist for SAL but SAL is an alias for SHL so it is defined as C1 /4).
2) I changed the 0x90 nop instruction so that it is no longer considered that 0x90 changes the eax register.
3) Removed o16/0x66 prepend byte from 0x0f, this is currently unused anyways but might prevent some poor person from debugging it in the future.
4) Previously short jumps would only make positive jumps, I added the capability for them to make a "-1" jump which would basically just start executing at the offset byte. For example it could generate something like EB FF XX YY ... where EB FF jumps to FF XX YY ...
5) I added support for the instructions mov reg, segreg (8C), mov reg, imm8/imm32 (C6/C7), and lea reg, mem (8D). I implemented LEA so that it only allows memory references to be in ModR/M form and not be in SIB form (I don't think it's possible to allow SIB in the way Opty2 works at the moment).
git-svn-id: file:///home/svn/framework3/trunk@5804 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-30 07:30:52 +00:00
kris
025b7410a0
Remove spurious ] from db_services output for consistency with other db output
...
git-svn-id: file:///home/svn/framework3/trunk@5799 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-29 13:10:22 +00:00
kris
3e8c5ecebc
Fix db_add_host (undefined variable)
...
git-svn-id: file:///home/svn/framework3/trunk@5795 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 22:47:09 +00:00
druid
a07a3af2d6
Adds a method hook for any primer code needed to execute immediately after server startup.
...
git-svn-id: file:///home/svn/framework3/trunk@5792 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 20:31:40 +00:00
et
75be2e33ad
Added module reporting and wmap_reports command
...
git-svn-id: file:///home/svn/framework3/trunk@5789 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-27 02:22:30 +00:00
et
29e983567e
removed reports_exist check
...
git-svn-id: file:///home/svn/framework3/trunk@5785 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-23 04:23:54 +00:00
HD Moore
1df0612f61
Adds a case-sensitivity permutation routine
...
git-svn-id: file:///home/svn/framework3/trunk@5780 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 22:43:13 +00:00
HD Moore
65419ad206
Adds routines/tools for cracking the NTLM hash from the plaintext case-insensive LANMAN password
...
git-svn-id: file:///home/svn/framework3/trunk@5779 4d416f70-5f16-0410-b530-b9f4589650da
2008-10-22 22:42:52 +00:00