139f9f442b
add addtl root passwords from xanda, fixes #2354
...
git-svn-id: file:///home/svn/framework3/trunk@10047 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-18 23:09:55 +00:00
6d6a547b34
Fixes #2412 . Adds a creds table, modifies the db_report_auth API, adds the db_creds and db_add_cred commands.
...
git-svn-id: file:///home/svn/framework3/trunk@10034 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-18 00:58:20 +00:00
f3648b15cc
Add console support to gui. Includes tab completion.
...
git-svn-id: file:///home/svn/framework3/trunk@10033 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-18 00:30:41 +00:00
d2d419e1a7
Default to user.admin = true
...
git-svn-id: file:///home/svn/framework3/trunk@10032 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-18 00:07:56 +00:00
8785f22454
Update db schema to add user.admin and project_membership table.
...
git-svn-id: file:///home/svn/framework3/trunk@10030 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-17 23:46:41 +00:00
ec1db10fa3
stupid missing files. /me grumbles
...
git-svn-id: file:///home/svn/framework3/trunk@9975 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-09 17:49:01 +00:00
4a5f800064
i swear i added this before.
...
git-svn-id: file:///home/svn/framework3/trunk@9973 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-09 16:18:35 +00:00
4f148f9374
oops, add updateX data files, see #2329
...
git-svn-id: file:///home/svn/framework3/trunk@9964 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-06 19:43:25 +00:00
ffb4b611c6
Confirm rpc exit for menu close operations too.
...
git-svn-id: file:///home/svn/framework3/trunk@9947 4d416f70-5f16-0410-b530-b9f4589650da
2010-08-03 02:42:41 +00:00
02167b8d16
move the stdapi constants into the stdapi extension to save a little space when php meterpreter is standalone
...
git-svn-id: file:///home/svn/framework3/trunk@9939 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-27 21:16:15 +00:00
d227b4f211
example lab mappings
...
git-svn-id: file:///home/svn/framework3/trunk@9932 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-26 15:35:44 +00:00
7f87cb9e55
Fix for date error on job.info call.
...
git-svn-id: file:///home/svn/framework3/trunk@9916 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-23 21:54:18 +00:00
9b0e9fca55
Support stopping rpcd on exit, based on user confirmation. Fixes #2287
...
git-svn-id: file:///home/svn/framework3/trunk@9915 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-23 21:28:39 +00:00
ed74422a62
Fix for Linux error on get system icon call. Fixes bug #2283
...
git-svn-id: file:///home/svn/framework3/trunk@9894 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 23:57:02 +00:00
14263662e5
missed a file
...
git-svn-id: file:///home/svn/framework3/trunk@9882 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 05:05:02 +00:00
6aa24fd26e
And compiled.
...
git-svn-id: file:///home/svn/framework3/trunk@9878 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 03:08:04 +00:00
119f9328fc
remove debug prints. =/
...
git-svn-id: file:///home/svn/framework3/trunk@9875 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 00:57:03 +00:00
08d705c1db
add java meterpreter and update java_calendar_deserialize to be able to use it, see #406
...
git-svn-id: file:///home/svn/framework3/trunk@9874 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-20 00:53:24 +00:00
7963d65f28
Only allow a single instance of a generated DLL to execute (prevent duplicate sessions, like with LNK)
...
git-svn-id: file:///home/svn/framework3/trunk@9871 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 23:24:57 +00:00
f87b7bc59e
Fix up the DLL payloads
...
git-svn-id: file:///home/svn/framework3/trunk@9868 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-19 22:13:34 +00:00
2a8a058519
add a bind stager for php
...
git-svn-id: file:///home/svn/framework3/trunk@9855 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-17 22:42:12 +00:00
b6ef239f15
... and compiled
...
git-svn-id: file:///home/svn/framework3/trunk@9848 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-16 21:48:07 +00:00
626c3f7d96
Swap out templates for one without a msvcrt71 dependency
...
git-svn-id: file:///home/svn/framework3/trunk@9836 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-15 16:58:47 +00:00
85d07af548
Multiple-session script execution fixed.
...
Build config updated for netbeans 6.9 and current tree.
git-svn-id: file:///home/svn/framework3/trunk@9830 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-14 19:27:23 +00:00
2f6d0777ae
Initial commit of compiled java gui.
...
git-svn-id: file:///home/svn/framework3/trunk@9817 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-13 23:00:15 +00:00
8de510f914
add udp support for tunneling. tested with udp_probe
...
git-svn-id: file:///home/svn/framework3/trunk@9816 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-13 22:51:15 +00:00
30d3440b5d
New bins, implements the server side of multi-call railgun
...
git-svn-id: file:///home/svn/framework3/trunk@9806 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-13 19:19:21 +00:00
16851f56c9
Swizzle.
...
git-svn-id: file:///home/svn/framework3/trunk@9796 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-12 21:51:11 +00:00
a47ced6ac4
Partial solution for #1448 . Fall back to CreateProcessWithTokenW when CreateProcessAsUser fails with ERROR_PRIVILEGE_NOT_HELD. While only available on 2003 and above this works on my server 2008 test case which was failing before.
...
git-svn-id: file:///home/svn/framework3/trunk@9781 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 18:36:57 +00:00
7a57ca57a6
Bug fix for a misplaced & in call to DestroyEnvironmentBlock() during process_execute(), was causing a hang on Vista and an Access Violation on server 2008.
...
git-svn-id: file:///home/svn/framework3/trunk@9779 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-11 16:37:50 +00:00
d3a6418e53
Revert changes to elevate, still not getting around restrictions on primary token creation, needs a deeper look
...
git-svn-id: file:///home/svn/framework3/trunk@9759 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:59:31 +00:00
3d01172af5
Binaries for the previous commit
...
git-svn-id: file:///home/svn/framework3/trunk@9757 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:41:06 +00:00
ec9156827e
Switch the elevator methods to DuplicateHandleEx to get a primary token
...
git-svn-id: file:///home/svn/framework3/trunk@9755 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 21:23:05 +00:00
29f9f6671e
This *should* fix all cases where execute -t would fail to use an impersonated token
...
git-svn-id: file:///home/svn/framework3/trunk@9754 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 19:32:51 +00:00
972e7bc282
Clean up some of the token impersonation code around process execution
...
git-svn-id: file:///home/svn/framework3/trunk@9751 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-09 18:54:20 +00:00
114ca4e535
replace / and \ with the current system's directory separator so it doesn't matter what the user types
...
git-svn-id: file:///home/svn/framework3/trunk@9727 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 20:40:19 +00:00
38d15c016d
Rebuilds of meterpreter, including x64
...
git-svn-id: file:///home/svn/framework3/trunk@9716 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:47:35 +00:00
ce1116e622
Add railgun binary
...
git-svn-id: file:///home/svn/framework3/trunk@9711 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:29:55 +00:00
e34bbc281a
Merge railgun binary and new builds
...
git-svn-id: file:///home/svn/framework3/trunk@9710 4d416f70-5f16-0410-b530-b9f4589650da
2010-07-07 16:29:37 +00:00
7e247e2f29
db migration to convert services info from varchar(65535) to text, and save info as a yaml'ed form in order to preserve funny characters.
...
git-svn-id: file:///home/svn/framework3/trunk@9633 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-28 22:42:50 +00:00
2638153f46
abstract connect out into it's own function
...
git-svn-id: file:///home/svn/framework3/trunk@9617 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-25 00:39:48 +00:00
cae5de9bdc
Add reports.downloaded_at db column.
...
git-svn-id: file:///home/svn/framework3/trunk@9608 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-24 16:13:46 +00:00
c9c3e806a5
use $GLOBALS instead of assuming vars declared outside of a function will be global. allows it to work inside a create_function() eval
...
git-svn-id: file:///home/svn/framework3/trunk@9597 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-23 22:38:01 +00:00
c3d183c98d
split stadpi out into an extension, add a reverse_tcp stager, make the main meterpreter stage-aware so it will work as a standalone or eval'd by a stager that sets $msgsock and $msgsock_type; see #2128
...
git-svn-id: file:///home/svn/framework3/trunk@9594 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-23 20:00:27 +00:00
33086db682
Commit a simple x64 service exe template + source based directly off the x86 version (couldn't find the original source anywhere but this also builds to an x86 service.exe template if needed).
...
git-svn-id: file:///home/svn/framework3/trunk@9564 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-20 18:15:41 +00:00
998509529c
don't consider compression when looking for a tlv
...
git-svn-id: file:///home/svn/framework3/trunk@9527 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-15 17:55:37 +00:00
dacd38c49c
consolidate debugging functions in the file
...
git-svn-id: file:///home/svn/framework3/trunk@9517 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-15 00:33:24 +00:00
7498c30b30
replace $setsockopt with a function, remove unused hexdump function
...
git-svn-id: file:///home/svn/framework3/trunk@9516 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-14 23:20:57 +00:00
e2740c9e2b
watch stderr as well as stdout
...
git-svn-id: file:///home/svn/framework3/trunk@9513 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-14 05:01:37 +00:00
a39a0df5dc
shell interaction works in linux, still broken in windows. kill and ps work in windows now
...
git-svn-id: file:///home/svn/framework3/trunk@9512 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-13 16:44:22 +00:00
975e2c326e
ps now works in windows by shelling out to tasklist.exe
...
git-svn-id: file:///home/svn/framework3/trunk@9497 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-11 22:07:23 +00:00
74b30535c4
oops, forgot swf
...
git-svn-id: file:///home/svn/framework3/trunk@9474 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-10 20:14:45 +00:00
4f2c63dae7
add templates for creating linux armle ELFs, thanks Civ
...
git-svn-id: file:///home/svn/framework3/trunk@9455 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-09 07:20:21 +00:00
d47ded220f
overhaul socket handling to use fsockopen if socket_create isn't available. portfwd now works on default Windows and Ubuntu installs
...
git-svn-id: file:///home/svn/framework3/trunk@9450 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-08 07:59:36 +00:00
f13417be08
stdapi is still in the base payload, but this file needs to exist
...
git-svn-id: file:///home/svn/framework3/trunk@9446 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-07 17:00:47 +00:00
334f4915f1
Add parsers
...
git-svn-id: file:///home/svn/framework3/trunk@9441 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-06 03:48:25 +00:00
0de01754ff
Change event.info db column type from varchar(65535) to text
...
git-svn-id: file:///home/svn/framework3/trunk@9434 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-05 00:33:31 +00:00
ff0af3fb5a
turn off debug logging
...
git-svn-id: file:///home/svn/framework3/trunk@9428 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 15:59:45 +00:00
07ec574c3c
fail if the socket couldn't connect
...
git-svn-id: file:///home/svn/framework3/trunk@9427 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 15:28:11 +00:00
b3b2ac9ef1
Adds hsagent
...
git-svn-id: file:///home/svn/framework3/trunk@9421 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 14:16:40 +00:00
17793d8ede
Add new SID: frealek: an addition to metasploit/data/wordlists/sid.txt : "CLRExtProc", source : default listener.ora from Oracle XE 10g 10.2.0.1.0
...
git-svn-id: file:///home/svn/framework3/trunk@9420 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 14:11:39 +00:00
b23696a916
Woot, portfwd works.
...
git-svn-id: file:///home/svn/framework3/trunk@9418 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-04 02:43:17 +00:00
c068e8e6dc
standardize whitespace
...
git-svn-id: file:///home/svn/framework3/trunk@9413 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-03 23:18:21 +00:00
5c87771a89
basic client sockets, connect and write work
...
git-svn-id: file:///home/svn/framework3/trunk@9404 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-03 04:45:48 +00:00
e4e2bc61a4
break out of the main loop when we get eof (or any other area) on the main socket. fixes infinite loop in the server when client exits
...
git-svn-id: file:///home/svn/framework3/trunk@9402 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-03 00:24:55 +00:00
975b207710
switch debug logging to the webserver error_log for easier perusement; add fs_stat which fixes downloads; only return success from delete_file if it actually deleted the file
...
git-svn-id: file:///home/svn/framework3/trunk@9399 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-02 22:43:03 +00:00
4f0ee6d44c
add support for deleting files
...
git-svn-id: file:///home/svn/framework3/trunk@9398 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-02 18:36:14 +00:00
cf4597df3f
use posix_getuid if it exists
...
git-svn-id: file:///home/svn/framework3/trunk@9397 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-02 18:08:09 +00:00
fe43e91bad
initial commit of php meterpreter, see #391 . upload, download, cd, pwd, ls, cat, sysinfo, getpid, and ps all work fine.
...
* execute works with channel read/write but no interact yet
* getuid is weird, since php's get_current_user() and getmyuid() return the owner of the file instead of the running uid (wtf?)
git-svn-id: file:///home/svn/framework3/trunk@9393 4d416f70-5f16-0410-b530-b9f4589650da
2010-06-02 08:28:39 +00:00
6d1e7bdaa5
big commit - lots of cmdstager changes
...
created 4 cmd stagers (instead of just one): CmdStagerVBS, CmdStagerDebugAsm, CmdStagerDebugWrite, CmdStagerTFTP
created a TFTPServer mixin
created Msf::Exploit::EXE mixin to generate executables
updated all uses of CmdStager to use CmdStagerVBS for the time being
add exploit for cve-2001-0333 using CmdStagerTFTP
updated tftp server to wait for transfers to finish (up to 30 seconds) before shutting down
write debug.exe stager stub in 16-bit assembly (used in CmdStagerDebugAsm)
git-svn-id: file:///home/svn/framework3/trunk@9375 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-26 22:39:56 +00:00
0c1878f620
fix buggy migration that caused attempts to set the boundary field in workspace before it existed, fixes #1724
...
git-svn-id: file:///home/svn/framework3/trunk@9269 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-10 06:59:33 +00:00
abbd6aeef7
change vulns.data to vulns.info, fixes #1660
...
git-svn-id: file:///home/svn/framework3/trunk@9265 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-09 23:32:43 +00:00
47cea7bbb3
Respin of the service file
...
git-svn-id: file:///home/svn/framework3/trunk@9226 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-05 18:25:26 +00:00
0e72894e58
more cleanups
...
git-svn-id: file:///home/svn/framework3/trunk@9212 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-03 17:13:09 +00:00
cbd675e369
Add user.prefs
...
git-svn-id: file:///home/svn/framework3/trunk@9191 4d416f70-5f16-0410-b530-b9f4589650da
2010-05-01 22:02:00 +00:00
501820d9cb
Handle deeper objects through recursion
...
git-svn-id: file:///home/svn/framework3/trunk@9182 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-30 21:43:28 +00:00
661293c906
Patch the xml serializer to force binary encoding with newer versions of Ruby - fixes some annoying serialization issues
...
git-svn-id: file:///home/svn/framework3/trunk@9181 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-30 21:35:03 +00:00
4c1aa287a5
Add workspace.description and host.comments database columns.
...
git-svn-id: file:///home/svn/framework3/trunk@9173 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-29 22:22:05 +00:00
16cd48e4dc
turn constants into class vars, fixes #1767
...
git-svn-id: file:///home/svn/framework3/trunk@9172 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-29 21:49:18 +00:00
879a92ffbf
change WriteLine to Write
...
git-svn-id: file:///home/svn/framework3/trunk@9089 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-16 00:24:56 +00:00
5aea21fcb8
speel more godoer
...
git-svn-id: file:///home/svn/framework3/trunk@9080 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-15 02:09:08 +00:00
e5d0e54de8
reduce payload space to 2048
...
git-svn-id: file:///home/svn/framework3/trunk@9078 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 22:16:31 +00:00
f3bc38dc81
use nul padding
...
git-svn-id: file:///home/svn/framework3/trunk@9077 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 22:15:02 +00:00
a9885c041d
use nul padding
...
git-svn-id: file:///home/svn/framework3/trunk@9076 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 22:14:21 +00:00
7c9d347c23
use nul padding
...
git-svn-id: file:///home/svn/framework3/trunk@9075 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 22:14:08 +00:00
730b27eed1
fixup some of the payload exe generation/templating stuff, add pe/dll template+src
...
git-svn-id: file:///home/svn/framework3/trunk@9073 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 21:44:23 +00:00
b251c0c4b7
re-organize template source
...
git-svn-id: file:///home/svn/framework3/trunk@9072 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-14 20:12:00 +00:00
c4fbda758f
add db2admin/db2admin to the default wordlist.
...
git-svn-id: file:///home/svn/framework3/trunk@9043 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-08 23:16:28 +00:00
0e78719eaf
Simple parsing modules
...
git-svn-id: file:///home/svn/framework3/trunk@9042 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-08 03:40:08 +00:00
62ba505f10
Extra parsing modules
...
git-svn-id: file:///home/svn/framework3/trunk@9030 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-07 03:32:50 +00:00
b2ac91dd03
Dumb error on path handling
...
git-svn-id: file:///home/svn/framework3/trunk@9014 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-05 03:09:48 +00:00
097a9614c9
SWF decompilation using flare
...
git-svn-id: file:///home/svn/framework3/trunk@9008 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-04 05:22:26 +00:00
39c371acf9
Parsing fixes
...
git-svn-id: file:///home/svn/framework3/trunk@8991 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 05:52:22 +00:00
c6c956ab46
Small patch to enable a new stager
...
git-svn-id: file:///home/svn/framework3/trunk@8984 4d416f70-5f16-0410-b530-b9f4589650da
2010-04-03 05:21:15 +00:00
86ac69b394
Add columns to workspaces & hosts tables.
...
git-svn-id: file:///home/svn/framework3/trunk@8956 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-29 22:26:35 +00:00
0391cd5f28
typo fix
...
git-svn-id: file:///home/svn/framework3/trunk@8951 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-29 06:04:52 +00:00
d49ed8b366
Expand serialized data fields
...
git-svn-id: file:///home/svn/framework3/trunk@8946 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-28 16:49:53 +00:00
70b15c923c
more detail in form parsing
...
git-svn-id: file:///home/svn/framework3/trunk@8930 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-26 03:15:00 +00:00
4265707030
start to parse forms
...
git-svn-id: file:///home/svn/framework3/trunk@8929 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-26 02:39:19 +00:00
091abc9c6b
Some extra defaults
...
git-svn-id: file:///home/svn/framework3/trunk@8922 4d416f70-5f16-0410-b530-b9f4589650da
2010-03-25 21:58:24 +00:00
Joshua Drake
Tod Beardsley
Matt Weeks
Mike Smith
James Lee
Jonathan Cran
HD Moore
Stephen Fewer
et
Mario Ceballos