github/metasploit-framework
1
Fork 0
mirror of https://github.com/rapid7/metasploit-framework synced 2024-11-12 11:52:01 +01:00
Code Releases Activity
8,334 Commits 20 Branches 920 Tags 1.3 GiB
45efaa2088
Commit Graph

3285 Commits

Author SHA1 Message Date
Joshua Drake
b0f64ebba1 add a debug target 
git-svn-id: file:///home/svn/framework3/trunk@10912 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-05 00:08:55 +00:00
Joshua Drake
76123e79c1 style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10909 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-04 23:59:56 +00:00
Joshua Drake
b7f2d57709 style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10908 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-04 23:50:35 +00:00
Joshua Drake
979ddcd8e5 add exploit for cve-2010-3962 
git-svn-id: file:///home/svn/framework3/trunk@10907 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-04 23:44:23 +00:00
Mario Ceballos
f517b88d9c added exploit modules lgserver_multi.rb and moxa_mediadbplayback.rb 
git-svn-id: file:///home/svn/framework3/trunk@10904 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-04 22:19:26 +00:00
Joshua Drake
cabfd0c2f2 add exploit for cve-2010-3867 
git-svn-id: file:///home/svn/framework3/trunk@10900 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-04 18:12:11 +00:00
Patrick Webster
fc708df5c6 Added exploit module pgp_keyserver7. 
git-svn-id: file:///home/svn/framework3/trunk@10897 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-04 15:44:21 +00:00
Joshua Drake
dee671318e style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10895 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-04 02:54:16 +00:00
cg
5421be199a adobe xml inject aux module 
git-svn-id: file:///home/svn/framework3/trunk@10894 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-04 02:11:31 +00:00
Mario Ceballos
99eadeff89 added exploit module lgserver_rxssetdatagrowthscheduleandfilter.rb 
git-svn-id: file:///home/svn/framework3/trunk@10893 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-04 01:51:54 +00:00
Mario Ceballos
e276697af9 heh, put not puts. 
git-svn-id: file:///home/svn/framework3/trunk@10892 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-03 22:09:44 +00:00
Patrick Webster
b97cbff5af Added webster_http exploit module. 
git-svn-id: file:///home/svn/framework3/trunk@10887 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-03 12:19:19 +00:00
Steve Tornio
d79bbd8440 add osvdb ref 
git-svn-id: file:///home/svn/framework3/trunk@10886 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-03 11:17:25 +00:00
Mario Ceballos
45fd14417c removed. worked fine under IIS 6.0 
git-svn-id: file:///home/svn/framework3/trunk@10874 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-02 23:51:17 +00:00
Mario Ceballos
b12d03b7c4 add exploit module coldfusion_fckeditor.rb 
git-svn-id: file:///home/svn/framework3/trunk@10865 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-02 20:13:36 +00:00
Joshua Drake
b572414eac add exploit for cve-2010-3654 
git-svn-id: file:///home/svn/framework3/trunk@10857 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-01 22:34:13 +00:00
Joshua Drake
21f16f63a1 style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10855 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-01 21:45:49 +00:00
Tod Beardsley
9c6f771252 Suppress the error when your @result is nil in smtp_enum.rb 
git-svn-id: file:///home/svn/framework3/trunk@10853 4d416f70-5f16-0410-b530-b9f4589650da
 2010-11-01 13:56:42 +00:00
Tod Beardsley
730ec09464 Allow for blank FTP usernames. Just not nil ones. 
git-svn-id: file:///home/svn/framework3/trunk@10834 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-27 20:12:51 +00:00
Joshua Drake
1f235a8c9b remove 64-bit targets since we dont have an x86_64 linux exe generator 
git-svn-id: file:///home/svn/framework3/trunk@10833 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-27 17:21:54 +00:00
Steve Tornio
9f5fca12f7 add osvdb ref 
git-svn-id: file:///home/svn/framework3/trunk@10828 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-26 15:28:04 +00:00
Joshua Drake
e78aa83021 style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10821 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-25 20:58:49 +00:00
Joshua Drake
f909b360ba note tested on 6u11 
git-svn-id: file:///home/svn/framework3/trunk@10820 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-25 20:22:08 +00:00
Joshua Drake
3fffd15549 add exploit for cve-2010-3552 (w/dep bypass) 
git-svn-id: file:///home/svn/framework3/trunk@10819 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-25 20:21:41 +00:00
Joshua Drake
672fc87055 fixed typo, thx rmkml 
git-svn-id: file:///home/svn/framework3/trunk@10803 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-23 23:35:44 +00:00
HD Moore
cf500fb294 Subtract the stupid 
git-svn-id: file:///home/svn/framework3/trunk@10792 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-23 07:09:59 +00:00
Joshua Drake
be841a4810 check for failed serverinfo result 
git-svn-id: file:///home/svn/framework3/trunk@10788 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-22 21:32:12 +00:00
James Lee
3b2c43fac4 get rid of the redundant second java target 
git-svn-id: file:///home/svn/framework3/trunk@10785 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-22 20:07:18 +00:00
Steve Tornio
0251c446f1 add cve, osvdb refs 
git-svn-id: file:///home/svn/framework3/trunk@10784 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-22 12:21:30 +00:00
Steve Tornio
ddf8294beb add osvdb ref 
git-svn-id: file:///home/svn/framework3/trunk@10783 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-22 12:09:10 +00:00
James Lee
56839ccf36 stupid debug prints 
git-svn-id: file:///home/svn/framework3/trunk@10782 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-22 10:24:28 +00:00
James Lee
f33d7cc670 revamp java payloads and make shells work with tomcat_mgr_deploy. tested java_trusted_chain and java_tester to verify that this doesn't break other java payload usage. see #3009 and #2973, meterpreter doesn't work yet, so not marking resolved. 
git-svn-id: file:///home/svn/framework3/trunk@10781 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-22 10:19:51 +00:00
Joshua Drake
7a9fe2c4d7 add exploit module for cve-2010-3585 
git-svn-id: file:///home/svn/framework3/trunk@10780 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-22 06:16:31 +00:00
Joshua Drake
6bd75bb2d5 add shockwave exploit from abysssec/rel1k 
git-svn-id: file:///home/svn/framework3/trunk@10779 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-22 03:15:22 +00:00
Steve Tornio
27d2761ec0 add osvdb ref 
git-svn-id: file:///home/svn/framework3/trunk@10775 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-21 11:41:18 +00:00
Tod Beardsley
6f56086df9 See #2888. Editing the title and description to reflect the multitude of Barracuda products affected by this module. Only three are actually listed specifically, but users can always refer to the OSVDB listing to get the complete list. 
git-svn-id: file:///home/svn/framework3/trunk@10772 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-21 01:18:38 +00:00
Joshua Drake
1f1cd6af9f commit a couple fixes from peter 
git-svn-id: file:///home/svn/framework3/trunk@10766 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-20 15:15:50 +00:00
Mario Ceballos
d384863a83 exploit module fatplayer_wav.rb from dookie. 
git-svn-id: file:///home/svn/framework3/trunk@10764 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-20 11:53:12 +00:00
Joshua Drake
04858c69fc style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10758 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-19 22:54:19 +00:00
Joshua Drake
c6f1fa716d add a java target, fixes #2973 
git-svn-id: file:///home/svn/framework3/trunk@10755 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-19 22:36:59 +00:00
Joshua Drake
771ea5862c fix typo 
git-svn-id: file:///home/svn/framework3/trunk@10754 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-19 22:24:33 +00:00
Joshua Drake
1935f2007f fix exe generation for auto-targetting 
git-svn-id: file:///home/svn/framework3/trunk@10753 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-19 22:21:19 +00:00
Joshua Drake
7c1d8c7d05 fix false negatives, slightly reworked, fixes #2888 
git-svn-id: file:///home/svn/framework3/trunk@10751 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-19 21:55:19 +00:00
Joshua Drake
20e2742596 fix indent 
git-svn-id: file:///home/svn/framework3/trunk@10750 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-19 15:52:33 +00:00
Joshua Drake
042e71c357 add ports/refs for ZDI-10-214 
git-svn-id: file:///home/svn/framework3/trunk@10747 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-19 14:28:52 +00:00
Joshua Drake
933eb3f6e6 switch to cr/lf vs just lf, fixes #2428 
git-svn-id: file:///home/svn/framework3/trunk@10741 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-19 00:47:06 +00:00
Mario Ceballos
0411111dfd couple of modules from Luigi Auriemma's DATAC RealWin advisory 
git-svn-id: file:///home/svn/framework3/trunk@10734 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-18 21:20:02 +00:00
Joshua Drake
2d6b995623 rename/clarify PrintfUtil encoder, fixes #2308 
git-svn-id: file:///home/svn/framework3/trunk@10729 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-18 15:41:13 +00:00
Joshua Drake
8a17803279 add exploit for ZDI-10-190 
git-svn-id: file:///home/svn/framework3/trunk@10726 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-18 07:05:22 +00:00
Joshua Drake
f3f7b1dc83 fix typo 
git-svn-id: file:///home/svn/framework3/trunk@10725 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-18 07:04:57 +00:00
HD Moore
f88033f0cc Merge in R3L1K's Powershell enhancements and powerdump code (hashdump through powershell) 
git-svn-id: file:///home/svn/framework3/trunk@10721 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-17 17:39:43 +00:00
HD Moore
79c8e18e6b Add a wfs_delay for reverse_https. This fixes #2508 and fixes #1764. This should prevent the race condition that was the root cause of both issues. 
git-svn-id: file:///home/svn/framework3/trunk@10716 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-17 02:33:47 +00:00
HD Moore
9902dcb9cc Fixes #2661 by removing exitfunc as a parameter, since it needs to be ExitProcess 
git-svn-id: file:///home/svn/framework3/trunk@10714 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-16 22:01:01 +00:00
HD Moore
5e1d181da5 Fixes #2132 by removing patchup version of vnc inject 
git-svn-id: file:///home/svn/framework3/trunk@10708 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-16 18:10:10 +00:00
HD Moore
21bd23b9e6 Fixes #2786 
git-svn-id: file:///home/svn/framework3/trunk@10707 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-16 17:53:27 +00:00
Steve Tornio
62622d51c2 add osvdb refs 
git-svn-id: file:///home/svn/framework3/trunk@10703 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-16 12:17:51 +00:00
Tod Beardsley
97ebcd30a9 Fixes #788 by (finally!) committing Daniele's IPv6 link-local IPv6 scanner. Note that the timing can be a little touchy for this module (as well as for the IPv4 ARP scanner) but seems to be reliable enough on normal networks when scanning a /24. 
Sorry for the delay!


git-svn-id: file:///home/svn/framework3/trunk@10700 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-15 22:48:18 +00:00
Tod Beardsley
48bcc580b8 Fixes #2623. This solves the original problem with the SNMP community scanner not respecting the ShowProgress toggle. The other fixes proposed in this bug really kind of seem to be quibbles over what's useful for verbosity and what's not. Please open another ticket for that with a unified diff of the proposed changes. 
Thanks for the report!



git-svn-id: file:///home/svn/framework3/trunk@10697 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-15 20:11:51 +00:00
Tod Beardsley
865b711b5c Fixes #2974. Adds an "Unknown" level to Exploit::CheckCode, fixes the URI check for exploit/unix/webapp/php_include (which was relying on Unknown). 
git-svn-id: file:///home/svn/framework3/trunk@10694 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-15 12:24:17 +00:00
Mario Ceballos
1f8bca0f3f added auxiliary module for cve-2010-2415 
git-svn-id: file:///home/svn/framework3/trunk@10691 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-15 00:20:04 +00:00
Joshua Drake
b49e81300a fix auto-target exe generation 
git-svn-id: file:///home/svn/framework3/trunk@10688 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-14 21:26:05 +00:00
James Lee
1384ba6620 fix a typo. see #2578 
git-svn-id: file:///home/svn/framework3/trunk@10680 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-14 18:24:56 +00:00
Joshua Drake
4ca2007d67 add ranking 
git-svn-id: file:///home/svn/framework3/trunk@10665 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-13 03:03:24 +00:00
Joshua Drake
b11fbb67eb oops, messed up whitespace 
git-svn-id: file:///home/svn/framework3/trunk@10661 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-12 18:40:13 +00:00
Joshua Drake
e0e4aebcc1 fix a few stack bof vulnerability descriptions 
git-svn-id: file:///home/svn/framework3/trunk@10660 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-12 18:39:21 +00:00
Joshua Drake
ad4064ed20 add ftp client fuzzer and exploits from corelanc0d3r! 
git-svn-id: file:///home/svn/framework3/trunk@10658 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-12 17:31:18 +00:00
Joshua Drake
7e4f4b3791 silly whitespace tweak 
git-svn-id: file:///home/svn/framework3/trunk@10642 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-11 19:30:57 +00:00
Joshua Drake
3e26e9ffd5 fix type in print 
git-svn-id: file:///home/svn/framework3/trunk@10639 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-11 05:16:17 +00:00
Joshua Drake
9e6e29428a add disclosure date 
git-svn-id: file:///home/svn/framework3/trunk@10638 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-11 04:00:57 +00:00
Joshua Drake
8230bb6edf update disclosure date 
git-svn-id: file:///home/svn/framework3/trunk@10637 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-11 03:59:19 +00:00
HD Moore
06291bb78e Clean up the barracuda module a bit (grammar and removal of the report_auth_info until its refactored) 
git-svn-id: file:///home/svn/framework3/trunk@10631 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-10 17:45:30 +00:00
Joshua Drake
54133b79fd add barracuda module from Tiago 
git-svn-id: file:///home/svn/framework3/trunk@10627 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-10 01:42:26 +00:00
HD Moore
a3ad8f5061 Add a quick module for exploiting basic web cmd injection 
git-svn-id: file:///home/svn/framework3/trunk@10624 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-09 21:32:19 +00:00
Tod Beardsley
87d7368166 Next time, try a couple more test cases. :( 
git-svn-id: file:///home/svn/framework3/trunk@10623 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-09 19:54:03 +00:00
Tod Beardsley
fc755f7a7a Fixes a bug where the return was getting ignored by each_user_pass for FTP. As a result, all usernames would get tried, instead of retiring a username once a good password was found. 
git-svn-id: file:///home/svn/framework3/trunk@10622 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-09 19:03:49 +00:00
Joshua Drake
ae04e34cf7 fix some non-full-namespace includes 
git-svn-id: file:///home/svn/framework3/trunk@10617 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-09 06:55:52 +00:00
Steve Tornio
ba2f6f5efa add osvdb ref, add advisory link 
git-svn-id: file:///home/svn/framework3/trunk@10613 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-08 22:59:19 +00:00
Joshua Drake
c6d2f8b550 huh? 
git-svn-id: file:///home/svn/framework3/trunk@10612 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-08 22:39:58 +00:00
Joshua Drake
996dfe86db fix egghunter reference 
git-svn-id: file:///home/svn/framework3/trunk@10611 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-08 21:58:06 +00:00
Joshua Drake
dd380c0716 add nuance pdf stack bof exploit from corelan 
git-svn-id: file:///home/svn/framework3/trunk@10610 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-08 21:52:43 +00:00
Joshua Drake
ede859f60e use Msf::WindowsError, see #2214 
git-svn-id: file:///home/svn/framework3/trunk@10607 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-08 19:51:50 +00:00
Tod Beardsley
c2938323cc Pretty much the same deal as r10592, but for SSH, which sometimes has similiar RST problems. 
git-svn-id: file:///home/svn/framework3/trunk@10593 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-08 02:11:06 +00:00
Tod Beardsley
df48b11093 Makes telnet_login a more resistant to intermittant RSTs. If a machine gives us a reset, try again with a backoff. Only after 3 retries should we give up entirely. You'd be amazed how many devices this is required for. 
git-svn-id: file:///home/svn/framework3/trunk@10592 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-08 01:54:56 +00:00
Tod Beardsley
b5fe64aca2 This works around a blocking problem encountered with recv_telnet(). Don't hang around trying to recv when we've already got a password prompt or a success/fail response. 
git-svn-id: file:///home/svn/framework3/trunk@10590 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-08 00:48:24 +00:00
Joshua Drake
840824e3e8 remove unexplained binary characters 
git-svn-id: file:///home/svn/framework3/trunk@10588 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-07 16:22:16 +00:00
HD Moore
bf2b4d199c Unbreak 
git-svn-id: file:///home/svn/framework3/trunk@10561 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-06 00:53:45 +00:00
Joshua Drake
425757a6e7 move more platform designations from target to exploit info block 
git-svn-id: file:///home/svn/framework3/trunk@10559 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-05 23:41:17 +00:00
Joshua Drake
de159e3fe7 rename with msXX_XXX name, fix platform 
git-svn-id: file:///home/svn/framework3/trunk@10558 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-05 23:39:14 +00:00
Joshua Drake
b36e383581 clean up exceptions a bit further 
git-svn-id: file:///home/svn/framework3/trunk@10557 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-05 23:23:17 +00:00
Joshua Drake
7a04ce32ca demote due to interaction requirement 
git-svn-id: file:///home/svn/framework3/trunk@10556 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-05 23:13:04 +00:00
Joshua Drake
74db9d7fe4 demote to manual ranking due to domain requirement 
git-svn-id: file:///home/svn/framework3/trunk@10554 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-05 19:29:10 +00:00
Joshua Drake
d2c5d62606 do not wait for WfsDelay if unable to enum printers 
git-svn-id: file:///home/svn/framework3/trunk@10553 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-05 19:03:52 +00:00
Steve Tornio
3276451e3d add osvdb refs 
git-svn-id: file:///home/svn/framework3/trunk@10551 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-05 12:38:46 +00:00
Mario Ceballos
dc7a9cb321 use the right bid id. 
git-svn-id: file:///home/svn/framework3/trunk@10550 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-05 01:05:49 +00:00
Joshua Drake
739bff4fb2 remove SRVPORT option, since it is set to the default 
git-svn-id: file:///home/svn/framework3/trunk@10548 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-04 23:52:30 +00:00
Mario Ceballos
f921aca916 brightstor blah blah blah 
git-svn-id: file:///home/svn/framework3/trunk@10547 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-04 22:00:22 +00:00
Joshua Drake
dd2d7d3864 fix fingerprint bug 
git-svn-id: file:///home/svn/framework3/trunk@10546 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-04 20:53:51 +00:00
Joshua Drake
6f18c4a468 do not wait for WfsDelay if unable to bind 
git-svn-id: file:///home/svn/framework3/trunk@10545 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-04 20:48:48 +00:00
Stephen Fewer
df8b9f8e95 Merge in the IPv6 Teredo patch. 
git-svn-id: file:///home/svn/framework3/trunk@10543 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-04 11:02:46 +00:00
Joshua Drake
7de96a710f add trendmicro extsetowner exploit from Trancer 
git-svn-id: file:///home/svn/framework3/trunk@10538 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-04 04:26:09 +00:00
Joshua Drake
c862fdd42b add exploit module from Abhishek Lyall 
git-svn-id: file:///home/svn/framework3/trunk@10537 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-04 03:42:58 +00:00
James Lee
3d26c54bd7 preserve some more datastore bits 
git-svn-id: file:///home/svn/framework3/trunk@10518 4d416f70-5f16-0410-b530-b9f4589650da
 2010-10-01 14:06:59 +00:00
Joshua Drake
279c604015 missed a couple exe generater includes 
git-svn-id: file:///home/svn/framework3/trunk@10504 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-28 16:19:50 +00:00
HD Moore
2f344fe7c8 Moving to ManualRanking since it requires user/pass 
git-svn-id: file:///home/svn/framework3/trunk@10503 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-28 15:23:14 +00:00
Tod Beardsley
ea128c6404 Mention the port when bruteforcing SMB services. Handy for noticing when you're being direct or indirect. 
git-svn-id: file:///home/svn/framework3/trunk@10498 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-27 17:11:40 +00:00
Joshua Drake
0f65deaf72 add messagebox payload from corelanc0d3r 
git-svn-id: file:///home/svn/framework3/trunk@10495 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-27 13:31:48 +00:00
James Lee
8c1f0713db regenerate the payload so we get the correct *lhost* 
git-svn-id: file:///home/svn/framework3/trunk@10490 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-27 00:09:17 +00:00
James Lee
4fbb0653a1 regenerate the payload so we get the correct rhost 
git-svn-id: file:///home/svn/framework3/trunk@10488 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-26 23:55:03 +00:00
pks
14cabd2611 Allow debugging to be enabled. 
This will make it easier to hopefully track down bugs.

exploitme-posix.c - make complete stack executable. On some kernel versions, execstack doesn't do the trick.

git-svn-id: file:///home/svn/framework3/trunk@10485 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-26 05:58:59 +00:00
pks
1392ef78d7 Use exit() instead of exit_group() 
git-svn-id: file:///home/svn/framework3/trunk@10483 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-26 05:58:41 +00:00
Joshua Drake
7c1dc98456 switch logic around, add some debug/verbose prints 
git-svn-id: file:///home/svn/framework3/trunk@10478 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-25 18:14:54 +00:00
Mario Ceballos
811eb99980 free up the handler 
git-svn-id: file:///home/svn/framework3/trunk@10477 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-25 11:59:02 +00:00
HD Moore
c1f934dbb4 jduck the grammar checker strikes again (thanks!) 
git-svn-id: file:///home/svn/framework3/trunk@10476 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-25 04:54:10 +00:00
HD Moore
46db59c5af Treat access denied the same as logon failure 
git-svn-id: file:///home/svn/framework3/trunk@10474 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-25 03:30:22 +00:00
HD Moore
3ee6117219 Default to english, in the end, this is still the most common language pack 
git-svn-id: file:///home/svn/framework3/trunk@10471 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-25 03:18:08 +00:00
HD Moore
25d18f1f1b Quit when we get an SSL exception 
git-svn-id: file:///home/svn/framework3/trunk@10470 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-25 03:14:21 +00:00
James Lee
a9c3628a2d make it more obvious that the connection failed, not the login. see #2682 
git-svn-id: file:///home/svn/framework3/trunk@10467 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-24 21:45:36 +00:00
Tod Beardsley
09cab24dbf Report_note no longer tries to re-report a service name; it just re-reports port numbers and protocols. This is to avoid unidentifying identified services. 
git-svn-id: file:///home/svn/framework3/trunk@10458 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-24 17:52:25 +00:00
HD Moore
748f2d3acd Make the title consistent with other modules 
git-svn-id: file:///home/svn/framework3/trunk@10457 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-24 16:55:38 +00:00
pks
740e2c1ab2 Change base from 0x90040000 to 0x20040000. 
This is more portable across kernel versions / patches it seems. This
will be better for SEGMEXEC compatibility as well.

git-svn-id: file:///home/svn/framework3/trunk@10455 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-24 04:06:28 +00:00
Joshua Drake
b8b21cd53c handle dirs and index.html specially 
git-svn-id: file:///home/svn/framework3/trunk@10454 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-24 01:11:05 +00:00
James Lee
0001550e6d String#to_a was removed in 1.9.2, replace with [ str ] for compat 
git-svn-id: file:///home/svn/framework3/trunk@10448 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-23 21:17:41 +00:00
Patrick Webster
e6969ba30e Fixed spelling mistake. 
git-svn-id: file:///home/svn/framework3/trunk@10445 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-23 05:48:07 +00:00
Joshua Drake
3acede0f3c fix indent 
git-svn-id: file:///home/svn/framework3/trunk@10442 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-23 02:15:40 +00:00
Joshua Drake
d9d0f8cc03 modify to use EXE mixin, remove unused SUBJECT option 
git-svn-id: file:///home/svn/framework3/trunk@10436 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-22 20:55:57 +00:00
James Lee
aa1d8e403f make sure the list of handler jobs is initialized in case we hit cleanup before exploits have started 
git-svn-id: file:///home/svn/framework3/trunk@10430 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-21 22:43:50 +00:00
Joshua Drake
600ec0a848 add two exploits from Trancer! woot! 
git-svn-id: file:///home/svn/framework3/trunk@10429 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-21 18:46:29 +00:00
HD Moore
3204b3ad83 Patch for the SMB timestamp parser which allows it to function in GMT+ zones 
git-svn-id: file:///home/svn/framework3/trunk@10425 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-21 14:21:38 +00:00
HD Moore
8d45915f8c Remove the buggy report_host 
git-svn-id: file:///home/svn/framework3/trunk@10414 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-21 03:14:08 +00:00
HD Moore
d89004753c Fixes #2450 by allowing any length extension 
git-svn-id: file:///home/svn/framework3/trunk@10411 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-21 02:59:22 +00:00
HD Moore
048b21e3b9 Ensure that errors in the PHPInclude mixin lead to the service being stopped. Handle unreachable services in the php_include module better. Fix database-enabled tab completion to be workspace friendly 
git-svn-id: file:///home/svn/framework3/trunk@10410 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-21 02:52:49 +00:00
Joshua Drake
a0b193f9d3 note psexec release date 
git-svn-id: file:///home/svn/framework3/trunk@10405 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-21 01:50:50 +00:00
Joshua Drake
8e5cf31e9a big exe/dll update, see #2017 
NOTE: These changes specifically affect payload encoding via RPC, "use
payload", and msfencode

1. consolidate user-specified exe generation routine (now
Msf::Util::EXE.to_executable_fmt)
2. supported format types are now queried/checked using arrays
3. cleaned up and standardized exe option passing
4. rename data store options for EXE mixin
5. add generate_payload_exe_service for psexec/smb_relay
6. reworked default template handling in Msf::Util::EXE
  a. added template search path option (not used if template includes
a path separator)
  b. "fallback" flag to enable using default if specified file doesn't
exist
7. added Msf::Util::EXE.to_win64pe_dll
8. improved error messages from exe generation



git-svn-id: file:///home/svn/framework3/trunk@10404 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-21 00:13:30 +00:00
HD Moore
76b14e5db7 Invert logic for consistency 
git-svn-id: file:///home/svn/framework3/trunk@10403 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-21 00:06:18 +00:00
HD Moore
74e5c38fe8 Make the challenge configurable via patch from troulouliou 
git-svn-id: file:///home/svn/framework3/trunk@10402 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-21 00:05:08 +00:00
Joshua Drake
bd1eeb3722 rework to_jsp_war a bit, fix uses, default msfencode -t war to x86/win32 
git-svn-id: file:///home/svn/framework3/trunk@10397 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-20 15:59:46 +00:00
Joshua Drake
4590844871 tons of indentation fixes, some other style tweaks 
git-svn-id: file:///home/svn/framework3/trunk@10394 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-20 08:06:27 +00:00
Joshua Drake
78188beb6b change from capture to service 
git-svn-id: file:///home/svn/framework3/trunk@10393 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-20 08:05:50 +00:00
Joshua Drake
0149ec0253 bump exe name to 14 chars to avoid randomly smashing existing bins 
git-svn-id: file:///home/svn/framework3/trunk@10391 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-20 05:06:51 +00:00
Joshua Drake
19db412383 convert remaining EXE generation to use the mixin, fixes #2017 
git-svn-id: file:///home/svn/framework3/trunk@10389 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-20 04:38:13 +00:00
Joshua Drake
21d88b36c1 rename generate_exe -> generate_payload_exe 
git-svn-id: file:///home/svn/framework3/trunk@10388 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-20 04:37:25 +00:00
HD Moore
e59ec467af Quick SMB upload module for when you need to upload a file via PTH 
git-svn-id: file:///home/svn/framework3/trunk@10387 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-20 04:03:26 +00:00
HD Moore
3dae16482f Required admin creds == ManualRanking 
git-svn-id: file:///home/svn/framework3/trunk@10384 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-20 02:56:29 +00:00
James Lee
5f0cc946b1 document report_note a little better, and modify several modules to use it correctly. fixes #2568 
git-svn-id: file:///home/svn/framework3/trunk@10377 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-19 22:25:56 +00:00
Mario Ceballos
9975827d22 updated module from Thomas Ring. 
git-svn-id: file:///home/svn/framework3/trunk@10371 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-18 23:59:28 +00:00
HD Moore
ad4bf32a45 Move to the SMB directory 
git-svn-id: file:///home/svn/framework3/trunk@10370 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-18 17:56:22 +00:00
HD Moore
36444591b8 Fix tab indent and make exe name more unique (since its not a fully-qualified path) 
git-svn-id: file:///home/svn/framework3/trunk@10369 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-18 15:08:23 +00:00
Joshua Drake
ff22e5212e revert to backward compatible method of using utc+zone 
git-svn-id: file:///home/svn/framework3/trunk@10367 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-18 05:09:47 +00:00
HD Moore
e939379b1b Fix missing end, use explicit Timeout class 
git-svn-id: file:///home/svn/framework3/trunk@10366 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-18 04:15:32 +00:00
Tod Beardsley
b023d89469 Wrap SSH and Telnet version checkers in a timeout, or else they sometimes hang forever. 
git-svn-id: file:///home/svn/framework3/trunk@10365 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-18 03:00:19 +00:00
Joshua Drake
3cf8dea0c6 add exploit for cve-2010-2729, finally 
git-svn-id: file:///home/svn/framework3/trunk@10363 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-18 01:17:59 +00:00
Stephen Fewer
5e2295a9a8 Add in an aux module to create a socks4 proxy server. If you add in a route via a meterpreter session to the framework routing table the proxy server will use that route where appropriate. (Also modified the servers opts hash to optionally take a 'Comm' param if you want to programmatically create a socks4 server which will always use a specific meterpreter session for all socket creation - by default this does not happen and it uses the rex socket switchboard as per normal rex socket creation). 
git-svn-id: file:///home/svn/framework3/trunk@10337 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-16 18:23:03 +00:00
Joshua Drake
9dae361383 typo fixes 
git-svn-id: file:///home/svn/framework3/trunk@10332 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-16 16:23:46 +00:00
HD Moore
9d3bafce12 Do not automatically run the Lyris module 
git-svn-id: file:///home/svn/framework3/trunk@10326 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-15 18:21:14 +00:00
Tod Beardsley
8cf8fe9436 Making postgres_version more subdued in its successful fingerprint reporting with print_status instead of print_good, since other fingerprinting modules use print_status for the most part. 
git-svn-id: file:///home/svn/framework3/trunk@10313 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-14 14:43:56 +00:00
Joshua Drake
d8fb8e5c49 merge in another posix meterpreter update from philip, see #2418 
git-svn-id: file:///home/svn/framework3/trunk@10307 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-13 14:44:00 +00:00
Steve Tornio
bceca3832b add osvdb ref 
git-svn-id: file:///home/svn/framework3/trunk@10284 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-10 12:18:27 +00:00
Joshua Drake
7d3e892ad3 lol, how did those lines survive 
git-svn-id: file:///home/svn/framework3/trunk@10283 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-10 06:37:41 +00:00
Joshua Drake
2d145aef6a add exploit for Integard from the Corelan Team 
git-svn-id: file:///home/svn/framework3/trunk@10281 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-09 23:33:28 +00:00
Joshua Drake
5250ff20bb add svn:keywords, increase ranking, add browser version 
git-svn-id: file:///home/svn/framework3/trunk@10280 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-09 23:23:40 +00:00
Joshua Drake
66c428988f support exploit vista/7, still only 9.x tho 
git-svn-id: file:///home/svn/framework3/trunk@10279 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-09 22:49:31 +00:00
Joshua Drake
5de3146533 style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10273 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-09 15:47:35 +00:00
Joshua Drake
2769087435 redacted 
git-svn-id: file:///home/svn/framework3/trunk@10270 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-09 03:39:29 +00:00
Steve Tornio
f61827b0bb add osvdb ref 
git-svn-id: file:///home/svn/framework3/trunk@10264 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-08 23:37:41 +00:00
Joshua Drake
eaf8ef00d0 add initial version of cve-2010-2883 exploit 
git-svn-id: file:///home/svn/framework3/trunk@10263 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-08 23:05:18 +00:00
James Lee
a9a312fa66 typo 
git-svn-id: file:///home/svn/framework3/trunk@10257 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-08 15:23:04 +00:00
James Lee
85126af521 add an exploit module for cve-2010-0094, thanks Matthias Kaiser. 
git-svn-id: file:///home/svn/framework3/trunk@10255 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-08 08:20:55 +00:00
James Lee
8814752e67 fix broken ENUM_TLD in auxiliary/gather/dns_enum 
git-svn-id: file:///home/svn/framework3/trunk@10253 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-07 15:44:38 +00:00
Joshua Drake
cef87782d7 fix some typos 
git-svn-id: file:///home/svn/framework3/trunk@10238 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-04 02:10:22 +00:00
Joshua Drake
471ae29269 remove extra copy of the payload 
git-svn-id: file:///home/svn/framework3/trunk@10227 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-03 00:43:44 +00:00
HD Moore
9b5d613563 Additional D-Link target from John Sawyer 
git-svn-id: file:///home/svn/framework3/trunk@10219 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-02 14:34:18 +00:00
HD Moore
800812a1d0 This commit adds functional exploits for retrieving the Apple Airport Extreme password through the VxWorks debugger service and for setting the auto-answer flag to true for the D-Link i2Eye video conferencing system. 
git-svn-id: file:///home/svn/framework3/trunk@10218 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-02 14:32:39 +00:00
cg
8cf89d7e05 fix a typo 
git-svn-id: file:///home/svn/framework3/trunk@10211 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-01 01:57:22 +00:00
cg
6b1eb27ab5 put scanner modules in the scanner directory 
git-svn-id: file:///home/svn/framework3/trunk@10210 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-01 01:49:06 +00:00
cg
36bbd6e8b6 coldfusion directory traversal module 
git-svn-id: file:///home/svn/framework3/trunk@10209 4d416f70-5f16-0410-b530-b9f4589650da
 2010-09-01 01:43:48 +00:00
Tod Beardsley
21540e22ed Checking in missing reporting stuff for bruteforce. Namely, report_exploit, also changes ftp's pw type to just "password" and re-opens newly verified sessions. 
git-svn-id: file:///home/svn/framework3/trunk@10205 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-31 20:33:16 +00:00
Joshua Drake
ace873a37a update test notes 
git-svn-id: file:///home/svn/framework3/trunk@10204 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-31 17:55:43 +00:00
Joshua Drake
3b67eefe4e sync up with Philip's code, see #2418 
git-svn-id: file:///home/svn/framework3/trunk@10202 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-31 15:10:41 +00:00
Steve Tornio
3c704ec753 add osvdb ref 
git-svn-id: file:///home/svn/framework3/trunk@10201 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-31 11:44:11 +00:00
Joshua Drake
3ab9a9b8d7 add Win7 IE8 target 
git-svn-id: file:///home/svn/framework3/trunk@10199 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-30 23:31:01 +00:00
James Lee
94aac0c517 dunno why i never thought of this before. clean up spawned exploits when stopping browser_autopwn 
git-svn-id: file:///home/svn/framework3/trunk@10197 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-30 22:17:26 +00:00
Joshua Drake
561c861a3a add CVE reference 
git-svn-id: file:///home/svn/framework3/trunk@10196 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-30 21:52:45 +00:00
James Lee
080f662595 make the LPORT_JAVA option actually visible 
git-svn-id: file:///home/svn/framework3/trunk@10195 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-30 21:36:38 +00:00
Joshua Drake
2d6a956763 update description 
git-svn-id: file:///home/svn/framework3/trunk@10194 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-30 20:50:52 +00:00
Joshua Drake
f68fd01772 nudge reliability up 
git-svn-id: file:///home/svn/framework3/trunk@10193 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-30 20:44:43 +00:00
Joshua Drake
a39639c56f add exploit for quicktime backdoor 
git-svn-id: file:///home/svn/framework3/trunk@10192 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-30 20:42:51 +00:00
Joshua Drake
eae0261893 style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10191 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-30 20:41:22 +00:00
Joshua Drake
467861ceb7 style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10190 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-30 20:40:05 +00:00
Carlos Perez
8dfa3f15a1 missed an end 
git-svn-id: file:///home/svn/framework3/trunk@10185 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-30 01:33:37 +00:00
Carlos Perez
b5bfe1983d Fixed typo on 2 xmmp SRV record typos, wildcard management of CNAME records and removed multithreading while I figure out how to update to the latest version of the net-dns lib. 
git-svn-id: file:///home/svn/framework3/trunk@10184 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-30 01:30:57 +00:00
Joshua Drake
430878e3e9 improve reliability, add automatic cleanup functionality (if using meterpreter paylad) 
git-svn-id: file:///home/svn/framework3/trunk@10170 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-27 17:24:19 +00:00
Joshua Drake
4651a0ad33 style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10160 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-26 20:21:41 +00:00
Joshua Drake
6e48076249 fixes #2435, add BROADCAST option to DHCP server, use in cases where sending to 255.255.255.255 fails 
git-svn-id: file:///home/svn/framework3/trunk@10159 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-26 19:34:53 +00:00
Joshua Drake
2d14c0054f add two contributed linux armle payloads, thx guys! 
git-svn-id: file:///home/svn/framework3/trunk@10152 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 21:44:33 +00:00
Joshua Drake
330281eadd see #684, adds checksum support, updates modules to use it, fixes some wfs_delay/WfsDelay issues 
git-svn-id: file:///home/svn/framework3/trunk@10150 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 20:55:37 +00:00
James Lee
34eb75af73 overhaul smtp to add support for authentication and STARTTLS. can now send email through a gmail account 
git-svn-id: file:///home/svn/framework3/trunk@10148 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 20:31:46 +00:00
Joshua Drake
bc56ae73a1 correct typo, thx jcran 
git-svn-id: file:///home/svn/framework3/trunk@10142 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 16:18:02 +00:00
Joshua Drake
aac956db50 style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10128 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-24 18:22:48 +00:00
Joshua Drake
52ebce48e9 add svn keywords 
git-svn-id: file:///home/svn/framework3/trunk@10127 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-24 18:22:34 +00:00
Joshua Drake
2e4757f4ae add no-js version of adobe_pdf_embedded_exe from Jeremy Conway 
git-svn-id: file:///home/svn/framework3/trunk@10126 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-24 18:20:16 +00:00
Joshua Drake
d7e9a25bc7 add two windows cmd payloads from scriptjunkie, fixes #1876 
git-svn-id: file:///home/svn/framework3/trunk@10122 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-23 22:50:24 +00:00
Joshua Drake
2572bb6919 add svn:keywords property 
git-svn-id: file:///home/svn/framework3/trunk@10121 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-23 22:49:43 +00:00
James Lee
2e13a330fa typo'd Matthias' name. i suck 
git-svn-id: file:///home/svn/framework3/trunk@10113 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-23 18:49:35 +00:00
Joshua Drake
bf60098257 add exploit from dookie, thx! 
git-svn-id: file:///home/svn/framework3/trunk@10107 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-23 16:58:42 +00:00
Patrick Webster
bb9be48739 Added tomcat utf8 traversal aux module. 
git-svn-id: file:///home/svn/framework3/trunk@10104 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-23 16:17:43 +00:00
HD Moore
65af96745f Set manual ranking until we have a vulnerable extension list added by default 
git-svn-id: file:///home/svn/framework3/trunk@10101 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-23 13:41:59 +00:00
HD Moore
cc3554601f Tools for testing DLL hijack flaws 
git-svn-id: file:///home/svn/framework3/trunk@10100 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-23 05:43:47 +00:00
James Lee
90e89622c6 make it a little easier to distinguish these two from their output 
git-svn-id: file:///home/svn/framework3/trunk@10096 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-21 07:53:25 +00:00
James Lee
7381ab8b6d duh, dont actually need this 
git-svn-id: file:///home/svn/framework3/trunk@10093 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-21 07:19:49 +00:00
James Lee
6b08dfed61 Add exploit module for cve-2010-08040. This is an awesome bug and my description field doesn't do it justice 
git-svn-id: file:///home/svn/framework3/trunk@10092 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-21 06:38:29 +00:00
James Lee
eda50fc89e spawn out into another process so killing the browser won't drop our shell 
git-svn-id: file:///home/svn/framework3/trunk@10091 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-21 06:28:29 +00:00
James Lee
56396a6d8b add java support to browser_autopwn 
git-svn-id: file:///home/svn/framework3/trunk@10089 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-20 20:49:33 +00:00
Joshua Drake
a40c683754 set ranking to manual, since there is no default target 
git-svn-id: file:///home/svn/framework3/trunk@10082 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-20 18:13:07 +00:00
Steve Tornio
0e1ed07e73 add osvdb ref 
git-svn-id: file:///home/svn/framework3/trunk@10078 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-20 11:36:50 +00:00
James Lee
871a6185b8 refactor 
git-svn-id: file:///home/svn/framework3/trunk@10077 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-20 07:15:23 +00:00
James Lee
5d95f48848 add preliminary support for the new java payloads. Working meterpreter and shell stages with tcp bind and reverse stagers, see #406 
git-svn-id: file:///home/svn/framework3/trunk@10073 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-20 07:01:23 +00:00
James Lee
d6af8743e9 add a simple test exploit for using java payloads 
git-svn-id: file:///home/svn/framework3/trunk@10072 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-20 06:57:57 +00:00
Joshua Drake
1cc13485ae bring ranking down 
git-svn-id: file:///home/svn/framework3/trunk@10070 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-19 23:55:59 +00:00
Joshua Drake
791af4b6c5 add exploit for sonicwall aventail activex format string 
git-svn-id: file:///home/svn/framework3/trunk@10069 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-19 23:52:11 +00:00
Joshua Drake
2545410bc7 make exe template names more consistent 
git-svn-id: file:///home/svn/framework3/trunk@10065 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-19 21:08:51 +00:00
Joshua Drake
621c0e9829 add args to call, fixes #2352 
git-svn-id: file:///home/svn/framework3/trunk@10048 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-18 23:20:16 +00:00
Joshua Drake
056711e186 regen payload after updating req.id, fixes #2341 
git-svn-id: file:///home/svn/framework3/trunk@10042 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-18 20:01:55 +00:00
Joshua Drake
dc3e099f5b remove custom function in favor of new NO RECV flags to smb client methods 
git-svn-id: file:///home/svn/framework3/trunk@10040 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-18 17:24:46 +00:00
Joshua Drake
9cc66b39dd indicate not to attempt to read a resposne 
git-svn-id: file:///home/svn/framework3/trunk@10039 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-18 17:21:56 +00:00
Joshua Drake
c551f8d2ee add note about authentication to module description, see #2405 
git-svn-id: file:///home/svn/framework3/trunk@10035 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-18 03:26:35 +00:00
Tod Beardsley
6d6a547b34 Fixes #2412. Adds a creds table, modifies the db_report_auth API, adds the db_creds and db_add_cred commands. 
git-svn-id: file:///home/svn/framework3/trunk@10034 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-18 00:58:20 +00:00
Joshua Drake
2aad6188d7 add ws2ord payload compat 
git-svn-id: file:///home/svn/framework3/trunk@10024 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-17 01:35:03 +00:00
Joshua Drake
4f9ed0e4e9 style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10022 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-16 17:12:16 +00:00
Joshua Drake
bb11321709 add two more cisco spoofing modules from Spencer 
git-svn-id: file:///home/svn/framework3/trunk@10021 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-16 17:11:35 +00:00
James Lee
73081e319f allow multi/handler to work with java 
git-svn-id: file:///home/svn/framework3/trunk@10020 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-16 16:34:55 +00:00
Joshua Drake
6243d8fe2a change existing to_win*pe_service uses to pass a hash instead of a string, r10016+this fixes #2398 
git-svn-id: file:///home/svn/framework3/trunk@10017 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-14 20:43:43 +00:00
Joshua Drake
cb445588e0 fix problem with unclosed sockets 
git-svn-id: file:///home/svn/framework3/trunk@10012 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-14 04:58:27 +00:00
Joshua Drake
5f0d68d883 add exploit for cve-2010-1799 
git-svn-id: file:///home/svn/framework3/trunk@10011 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-13 23:11:23 +00:00
Joshua Drake
acb82fa857 style compliance fixes 
git-svn-id: file:///home/svn/framework3/trunk@10010 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-13 23:11:14 +00:00
Joshua Drake
939bf2a881 merge dhcp.diif from scriptjunkie, see #2329 
git-svn-id: file:///home/svn/framework3/trunk@9990 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-13 03:11:30 +00:00
Carlos Perez
d9a60f429a Josh Wright SSID List Beacon module 
git-svn-id: file:///home/svn/framework3/trunk@9989 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-13 02:24:06 +00:00
Joshua Drake
1b31a44b57 move riff support from ani_loadimage browser sploit to mixin 
git-svn-id: file:///home/svn/framework3/trunk@9984 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-12 16:56:41 +00:00
Joshua Drake
5783c40f99 randomize triggers a bit 
git-svn-id: file:///home/svn/framework3/trunk@9983 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-12 16:45:30 +00:00
HD Moore
040a292181 Create a new mixin that changes SMBUser/SMBPass to normal options, include this mixin within SMB modules that more often than not require authentication 
git-svn-id: file:///home/svn/framework3/trunk@9981 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-12 15:00:58 +00:00
HD Moore
929d7bd158 Patch from Robin Wood 
git-svn-id: file:///home/svn/framework3/trunk@9980 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-12 14:45:24 +00:00
Joshua Drake
cb05bd715e comment trigger value, remove loop and debug print, add little wait 
git-svn-id: file:///home/svn/framework3/trunk@9979 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-11 22:07:16 +00:00
Joshua Drake
9e9f2ca46e add DoS trigger for MS10-054 
git-svn-id: file:///home/svn/framework3/trunk@9978 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-11 19:54:00 +00:00
Steve Tornio
8175d25148 add osvdb ref 
git-svn-id: file:///home/svn/framework3/trunk@9977 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-10 20:45:44 +00:00
Joshua Drake
7a612cd6af fix up vuln version info, fixes #2353 
git-svn-id: file:///home/svn/framework3/trunk@9974 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-09 17:34:59 +00:00
Joshua Drake
d540818f01 split http exploit mixin into http/server and http/client 
git-svn-id: file:///home/svn/framework3/trunk@9971 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-07 06:59:16 +00:00
Steve Tornio
cc81905c11 add osvdb ref 
git-svn-id: file:///home/svn/framework3/trunk@9968 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-07 00:51:52 +00:00
Mario Ceballos
b50f5fd0fe update from dookie. 
git-svn-id: file:///home/svn/framework3/trunk@9967 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-06 23:16:20 +00:00
Mario Ceballos
18f8624a47 fix from Brennon Thomas. 
git-svn-id: file:///home/svn/framework3/trunk@9966 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-06 20:12:51 +00:00
Joshua Drake
92e9eb93f3 add wm downloader exploit from dookie 
git-svn-id: file:///home/svn/framework3/trunk@9965 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-06 20:09:04 +00:00
Joshua Drake
7f8bbbc535 add dhcp/pxe stuff from scriptjunkie, see #2329 
git-svn-id: file:///home/svn/framework3/trunk@9963 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-06 17:37:28 +00:00