HD Moore
|
dbbd0dc07e
|
This ensures that even if some wonky string encoding is passed as the body of a HTTP reply, it will be treated as binary. Fixes some of the HTTP Server exploits on Windows
git-svn-id: file:///home/svn/framework3/trunk@10653 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-12 16:16:39 +00:00 |
HD Moore
|
1b4190df38
|
This commit brings configurability to TCP Servers as to which Comm they use. The ReverseListenerComm and ListenerComm advanced options can be used to prevent a given listener from trying to bind a listener over the pivoted routed. This is useful for a number of situations and not possible to configure explicitly before.
git-svn-id: file:///home/svn/framework3/trunk@10534 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-10-04 02:11:22 +00:00 |
James Lee
|
eddd6d481d
|
add some documentation for request_cgi
git-svn-id: file:///home/svn/framework3/trunk@10293 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-09-11 17:31:26 +00:00 |
Joshua Drake
|
8463e026bd
|
read responses until EOF per RFC
git-svn-id: file:///home/svn/framework3/trunk@10045 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-18 22:41:07 +00:00 |
Joshua Drake
|
06dca2addb
|
fix this unit test
git-svn-id: file:///home/svn/framework3/trunk@10044 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-18 22:36:13 +00:00 |
Joshua Drake
|
d46d4313e7
|
reduce verbosity for printed exceptions when processing on_request
git-svn-id: file:///home/svn/framework3/trunk@10029 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-08-17 22:57:52 +00:00 |
Joshua Drake
|
25bc9f2973
|
add error printing for HttpServer exploits
git-svn-id: file:///home/svn/framework3/trunk@9909 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-21 23:24:51 +00:00 |
HD Moore
|
843b6ffa00
|
Make the http client try harder
git-svn-id: file:///home/svn/framework3/trunk@9698 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-06 23:08:28 +00:00 |
Joshua Drake
|
e32abab8dc
|
a HTTP -> an HTTP (http://www.english-zone.com/grammar/a-anlessn.html)
git-svn-id: file:///home/svn/framework3/trunk@9488 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-06-11 16:12:05 +00:00 |
James Lee
|
32c24b944a
|
actually increment the loop variable; document the deficiencies of the employed technique
git-svn-id: file:///home/svn/framework3/trunk@9449 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-06-07 23:56:35 +00:00 |
James Lee
|
7044c65f22
|
make sure we have a newline in a chunk length before parsing it, tighten up the regex. fixes 2063 (I hope)
git-svn-id: file:///home/svn/framework3/trunk@9448 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-06-07 23:43:32 +00:00 |
Tod Beardsley
|
1a2be34a63
|
Fixes #2002. Needed to work with some pipelining to get this all to work right, but it seems to function now pretty well -- if the target takes Basic, do basic, if the target takes NTLM, do NTLM. Should implement Digest too, but I don't think hardly anyone uses that.
git-svn-id: file:///home/svn/framework3/trunk@9346 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-05-22 17:58:01 +00:00 |
HD Moore
|
3c4024a0c6
|
Expose the server client list, set the keepalive
git-svn-id: file:///home/svn/framework3/trunk@8992 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-04-03 06:05:06 +00:00 |
HD Moore
|
cd71cfbad1
|
Handle buggy HTTP servers better
git-svn-id: file:///home/svn/framework3/trunk@8921 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-25 21:35:37 +00:00 |
HD Moore
|
89c62bc838
|
Fixes #1079. Handle a closed SSL socket gracefully
git-svn-id: file:///home/svn/framework3/trunk@8783 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 14:13:53 +00:00 |
James Lee
|
7d348c3593
|
honor the SSL option in HttpServer, fixes #1001
git-svn-id: file:///home/svn/framework3/trunk@8699 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-03 18:47:04 +00:00 |
HD Moore
|
a753666073
|
Switch sysread back to get_once(). This reverts a previous change, but the sysread breaks SSL support
git-svn-id: file:///home/svn/framework3/trunk@8124 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-14 21:40:30 +00:00 |
HD Moore
|
4c6fd97b0e
|
Handles some broken TCP stack implementations better (but not perfectly)
git-svn-id: file:///home/svn/framework3/trunk@7991 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-27 07:02:55 +00:00 |
HD Moore
|
a16feb01bc
|
Minor tweaks to http processing
git-svn-id: file:///home/svn/framework3/trunk@7805 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 18:12:38 +00:00 |
HD Moore
|
5ef9a1c040
|
Wipe the headers before reparsing
git-svn-id: file:///home/svn/framework3/trunk@7801 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 17:04:52 +00:00 |
HD Moore
|
006d5d51fc
|
Fixes #674 by adding 100-continue support
git-svn-id: file:///home/svn/framework3/trunk@7799 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 16:54:27 +00:00 |
James Lee
|
7427640fb0
|
don't wait for a message body that will never come. fixes 659
git-svn-id: file:///home/svn/framework3/trunk@7748 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 02:26:37 +00:00 |
James Lee
|
5182d1c927
|
allow the Connection header to specify keep-alive in a less strict manner. this is more rfc2616 compliant and fixes #601
git-svn-id: file:///home/svn/framework3/trunk@7677 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-03 07:40:37 +00:00 |
HD Moore
|
fc983ef7e3
|
Many bug fixes to db_autopwn, cross-referencing of OS-level vulnerabilities, small bug fixes to HTTP client API
git-svn-id: file:///home/svn/framework3/trunk@7676 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-03 01:36:17 +00:00 |
HD Moore
|
ed7b7ac6f0
|
Fixes #491 and fixes #543 by updating the HTTP stack and validating configuration options
git-svn-id: file:///home/svn/framework3/trunk@7652 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-30 21:15:06 +00:00 |
HD Moore
|
8cadfe66cf
|
Mostly cosmetic
git-svn-id: file:///home/svn/framework3/trunk@7530 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-16 15:16:08 +00:00 |
James Lee
|
78c88c888f
|
don't backtrace just because the client cancelled
git-svn-id: file:///home/svn/framework3/trunk@7453 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-10 19:38:18 +00:00 |
HD Moore
|
83fece42fe
|
Handle HTTP failures more gracefully
git-svn-id: file:///home/svn/framework3/trunk@7335 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-03 18:10:09 +00:00 |
HD Moore
|
075b8c5fa4
|
Fixes #434. Always use Timeout.timeout() -- on Ruby 1.9 this results in the Timeout::TimeoutError exception vs RuntimeError
git-svn-id: file:///home/svn/framework3/trunk@7323 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-11-02 18:14:57 +00:00 |
HD Moore
|
5e137e92fd
|
Fixes #381. To scan for TLSv1 only services, set SSLVersion TLS1
git-svn-id: file:///home/svn/framework3/trunk@7282 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-26 19:48:15 +00:00 |
kris
|
b75ef037c3
|
more tabs vs spaces, and fix a few mismatched indentation levels (def/end, etc)
git-svn-id: file:///home/svn/framework3/trunk@7211 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-20 17:24:33 +00:00 |
HD Moore
|
a74d3a3f38
|
Switches meterpreter to SSL by default, using the PolarSSL library. To build this, just place polarssl.lib into an workspace/common/Release/
git-svn-id: file:///home/svn/framework3/trunk@6718 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-26 23:18:53 +00:00 |
HD Moore
|
45afe789af
|
Test case update
git-svn-id: file:///home/svn/framework3/trunk@6717 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-26 03:01:11 +00:00 |
natron
|
6f8d309949
|
Passivex fixed. Reverting r6318 for rex/proto/http/packet. Works on IE8, tests on IE6/7 welcome.
git-svn-id: file:///home/svn/framework3/trunk@6514 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-04-30 20:38:57 +00:00 |
et
|
a8b64c56b5
|
Handle encoding of special chars
git-svn-id: file:///home/svn/framework3/trunk@6508 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-04-29 04:04:40 +00:00 |
James Lee
|
96c8f6127c
|
Replace += with << for Strings in a bunch of places.
git-svn-id: file:///home/svn/framework3/trunk@6318 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-03-08 07:55:47 +00:00 |
James Lee
|
1d499a9756
|
fix empty body when Content-Length is not set
git-svn-id: file:///home/svn/framework3/trunk@6176 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-01-23 21:10:58 +00:00 |
James Lee
|
49cd8d7223
|
typo fix
git-svn-id: file:///home/svn/framework3/trunk@6114 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-01-11 04:48:06 +00:00 |
kris
|
248f1e9fc3
|
Remove "#{xxx.to_s}" redundancies ('s/\(#{[^}]*\)\.to_s}/\1}/g')
git-svn-id: file:///home/svn/framework3/trunk@6022 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-12-19 07:11:08 +00:00 |
HD Moore
|
5d0ebc18cf
|
See #250. Adds a wait() wrapper to the HTTP service as well
git-svn-id: file:///home/svn/framework3/trunk@5927 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-11-16 21:00:44 +00:00 |
Ramon de C Valle
|
f124597a56
|
Code cleanups
git-svn-id: file:///home/svn/framework3/trunk@5773 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-10-19 21:03:39 +00:00 |
James Lee
|
36a06e7576
|
initial commit of php findsock. This patch makes all http connections global and removes the "close if (!pipelining)" checks, so beware of bugs.
git-svn-id: file:///home/svn/framework3/trunk@5678 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-09-24 04:41:51 +00:00 |
HD Moore
|
757b610a59
|
Fixes #163. Multiple headers with the same value are now squashed into a single long line in the response object.
git-svn-id: file:///home/svn/framework3/trunk@5273 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-01-06 20:11:02 +00:00 |
HD Moore
|
dbb22495a6
|
Unit test for #173 fix
git-svn-id: file:///home/svn/framework3/trunk@5272 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-01-06 20:07:28 +00:00 |
HD Moore
|
af9407e7b0
|
Fixes #173. Handle mixed-case header lookups better
git-svn-id: file:///home/svn/framework3/trunk@5271 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-01-06 20:06:39 +00:00 |
Matt Miller
|
3b74c476a1
|
patch from Kris K
git-svn-id: file:///home/svn/framework3/trunk@5210 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-11-29 06:57:14 +00:00 |
HD Moore
|
7498562eb5
|
Add proxy support to HTTP mixin using modules. Fix socks proxy support.
git-svn-id: file:///home/svn/framework3/trunk@5113 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-09-24 04:44:44 +00:00 |
HD Moore
|
6f23487daa
|
Fixes #117. No longer treat connection: close as a stop-processing case
git-svn-id: file:///home/svn/framework3/trunk@5090 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-09-09 22:27:27 +00:00 |
HD Moore
|
ebb84d5b32
|
Check for typos next time =P
git-svn-id: file:///home/svn/framework3/trunk@4879 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-05-06 22:33:21 +00:00 |
bmc
|
21e37f1b0c
|
* older IIS allowed you to encode multiple times. Expose the ability to encode as many times as you wish. 1 is default
git-svn-id: file:///home/svn/framework3/trunk@4867 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-05-04 15:17:25 +00:00 |