github/metasploit-framework
1
Fork 0
mirror of https://github.com/rapid7/metasploit-framework synced 2024-11-12 11:52:01 +01:00
Code Releases Activity
8,077 Commits 20 Branches 920 Tags 1.3 GiB
53f6416dad
Commit Graph

488 Commits

Author SHA1 Message Date
Joshua Drake
067830a8d0 remove the old elf server, see #2418, should have been part of r10154 
git-svn-id: file:///home/svn/framework3/trunk@10155 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-26 05:24:20 +00:00
Joshua Drake
6d1ed6d779 first attempt to merge in Philip Sanderson's work on the POSIX meterpreter 
git-svn-id: file:///home/svn/framework3/trunk@10154 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-26 05:16:27 +00:00
HD Moore
3b7c23b841 Remove the duplicate copy 
git-svn-id: file:///home/svn/framework3/trunk@10145 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 19:22:02 +00:00
HD Moore
24e4645ecb Updated with revision data, additional bug fixes 
git-svn-id: file:///home/svn/framework3/trunk@10141 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 15:13:27 +00:00
HD Moore
df918670a2 Add a revision 
git-svn-id: file:///home/svn/framework3/trunk@10140 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 15:13:06 +00:00
HD Moore
633a169971 Add a packaging script 
git-svn-id: file:///home/svn/framework3/trunk@10139 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 15:11:19 +00:00
HD Moore
c12947192c Use the same wait logic for analyze 
git-svn-id: file:///home/svn/framework3/trunk@10138 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 15:05:37 +00:00
HD Moore
d7b2831557 Fix CSV parsing when the timestamp has a comma, extend the wait period during the audit to handle slow systems better. 
git-svn-id: file:///home/svn/framework3/trunk@10137 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 15:04:19 +00:00
HD Moore
68a5837b07 Regenerated binaries, error when CSV is missing 
git-svn-id: file:///home/svn/framework3/trunk@10136 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 14:33:09 +00:00
HD Moore
db1adc0e76 Actually track this in SVN 
git-svn-id: file:///home/svn/framework3/trunk@10135 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 14:21:53 +00:00
HD Moore
7ea537c7ea Better, Faster, Stronger: DLLHijackAuditKit v2 
git-svn-id: file:///home/svn/framework3/trunk@10134 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 06:57:36 +00:00
Matt Weeks
4af82f2937 Add import capability and simplify reloading database. 
git-svn-id: file:///home/svn/framework3/trunk@10133 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-25 02:05:03 +00:00
HD Moore
f2b30738b1 Add /accepteula to the batch script 
git-svn-id: file:///home/svn/framework3/trunk@10125 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-24 14:13:52 +00:00
Matt Weeks
f94e174d97 Initial Database support, with improved basic view. 
git-svn-id: file:///home/svn/framework3/trunk@10124 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-24 00:22:49 +00:00
Joshua Drake
5201aa885a remove asm file now that the assembly is inlined in the class 
git-svn-id: file:///home/svn/framework3/trunk@10120 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-23 22:32:32 +00:00
HD Moore
f02956a816 Fix typo in audit.rb 
git-svn-id: file:///home/svn/framework3/trunk@10115 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-23 19:28:20 +00:00
Joshua Drake
15c7a25d68 add omlet stub asm source 
git-svn-id: file:///home/svn/framework3/trunk@10110 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-23 17:43:53 +00:00
HD Moore
cc3554601f Tools for testing DLL hijack flaws 
git-svn-id: file:///home/svn/framework3/trunk@10100 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-23 05:43:47 +00:00
James Lee
b35cea94cd add source code for cve-2010-0840 
git-svn-id: file:///home/svn/framework3/trunk@10095 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-21 07:27:26 +00:00
Matt Weeks
57b48314a6 Add logging support to console sessions. 
git-svn-id: file:///home/svn/framework3/trunk@10084 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-20 19:07:15 +00:00
James Lee
232af015cb add source code for javapayload, thanks mihi. see #406 
git-svn-id: file:///home/svn/framework3/trunk@10075 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-20 07:09:51 +00:00
Matt Weeks
937606ab1f Ability to close consoles and discover old consoles. 
git-svn-id: file:///home/svn/framework3/trunk@10068 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-19 23:22:22 +00:00
Matt Weeks
6c38930db6 Do not poll for output on hidden windows. Improves performance with many windows open. 
git-svn-id: file:///home/svn/framework3/trunk@10066 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-19 23:02:31 +00:00
Stephen Fewer
73f7b20935 Add meterpreter server side support for cleaning up loaded extensions upon server termination by calling the loaded extensions DeinisServerExtension() functions. 
git-svn-id: file:///home/svn/framework3/trunk@10053 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-19 11:34:23 +00:00
Stephen Fewer
fd0b96ee9d Add a list_shift() function to the common linked list code. 
git-svn-id: file:///home/svn/framework3/trunk@10052 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-19 11:25:11 +00:00
Matt Weeks
f3648b15cc Add console support to gui. Includes tab completion. 
git-svn-id: file:///home/svn/framework3/trunk@10033 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-18 00:30:41 +00:00
Matt Weeks
ffb4b611c6 Confirm rpc exit for menu close operations too. 
git-svn-id: file:///home/svn/framework3/trunk@9947 4d416f70-5f16-0410-b530-b9f4589650da
 2010-08-03 02:42:41 +00:00
Matt Weeks
7f87cb9e55 Fix for date error on job.info call. 
git-svn-id: file:///home/svn/framework3/trunk@9916 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-23 21:54:18 +00:00
Matt Weeks
9b0e9fca55 Support stopping rpcd on exit, based on user confirmation. Fixes #2287 
git-svn-id: file:///home/svn/framework3/trunk@9915 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-23 21:28:39 +00:00
James Lee
50914a1e68 add a makefile so i don't forget how to compile this stuff 
git-svn-id: file:///home/svn/framework3/trunk@9901 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-21 07:27:15 +00:00
Matt Weeks
ed74422a62 Fix for Linux error on get system icon call. Fixes bug #2283 
git-svn-id: file:///home/svn/framework3/trunk@9894 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-20 23:57:02 +00:00
Matt Weeks
e065891a65 Fix for width of version label. 
git-svn-id: file:///home/svn/framework3/trunk@9877 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-20 03:06:17 +00:00
Matt Weeks
e7f748118b Display number of modules and show console window on double-click 
git-svn-id: file:///home/svn/framework3/trunk@9876 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-20 03:04:18 +00:00
James Lee
119f9328fc remove debug prints. =/ 
git-svn-id: file:///home/svn/framework3/trunk@9875 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-20 00:57:03 +00:00
James Lee
08d705c1db add java meterpreter and update java_calendar_deserialize to be able to use it, see #406 
git-svn-id: file:///home/svn/framework3/trunk@9874 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-20 00:53:24 +00:00
James Lee
0af37c6d8b add some option parsing and a bit of documentation. 
git-svn-id: file:///home/svn/framework3/trunk@9867 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-19 21:29:50 +00:00
James Lee
ab0d2c365e nuke the gtk and web UIs for the mini installer 
git-svn-id: file:///home/svn/framework3/trunk@9866 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-19 20:28:23 +00:00
James Lee
fb90a81bf0 specify the path to minify.sh 
git-svn-id: file:///home/svn/framework3/trunk@9865 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-19 20:12:36 +00:00
James Lee
42600c1f9a make sure we grab the right scripts/ directory 
git-svn-id: file:///home/svn/framework3/trunk@9864 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-19 20:10:52 +00:00
James Lee
92828f2241 quit using ./tmp 
git-svn-id: file:///home/svn/framework3/trunk@9863 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-19 20:02:11 +00:00
James Lee
180c3e3bd0 don't spit errors if the symlink doesn't exist 
git-svn-id: file:///home/svn/framework3/trunk@9862 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-19 19:38:03 +00:00
James Lee
5059ac9c0e take an archive as an argument, minify with the new external script 
git-svn-id: file:///home/svn/framework3/trunk@9861 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-19 19:16:11 +00:00
Matt Weeks
9029bdf722 Sort modules (exploits, auxiliary, payloads) alphabetically in menu. 
git-svn-id: file:///home/svn/framework3/trunk@9846 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-16 21:44:55 +00:00
Matt Weeks
85d07af548 Multiple-session script execution fixed. 
Build config updated for netbeans 6.9 and current tree.



git-svn-id: file:///home/svn/framework3/trunk@9830 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-14 19:27:23 +00:00
Stephen Fewer
c78b87a356 Add support for the ring0 stager_sysenter_hook payload to run its ring3 payload in a new thread in order to preserve/resume the original hijacked ring3 thread. 
git-svn-id: file:///home/svn/framework3/trunk@9819 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-14 13:43:17 +00:00
Matt Weeks
dcb3ab6441 Initial commit of Java Metasploit GUI source. Netbeans project files included. 
git-svn-id: file:///home/svn/framework3/trunk@9815 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-13 22:43:43 +00:00
HD Moore
30d3440b5d New bins, implements the server side of multi-call railgun 
git-svn-id: file:///home/svn/framework3/trunk@9806 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-13 19:19:21 +00:00
Stephen Fewer
a47ced6ac4 Partial solution for #1448. Fall back to CreateProcessWithTokenW when CreateProcessAsUser fails with ERROR_PRIVILEGE_NOT_HELD. While only available on 2003 and above this works on my server 2008 test case which was failing before. 
git-svn-id: file:///home/svn/framework3/trunk@9781 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-11 18:36:57 +00:00
Stephen Fewer
7a57ca57a6 Bug fix for a misplaced & in call to DestroyEnvironmentBlock() during process_execute(), was causing a hang on Vista and an Access Violation on server 2008. 
git-svn-id: file:///home/svn/framework3/trunk@9779 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-11 16:37:50 +00:00
James Lee
11bad248c5 add a simple script for turning a regular checkout into a mini version 
git-svn-id: file:///home/svn/framework3/trunk@9778 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-11 16:13:20 +00:00
HD Moore
d0c8f91f21 Bump to 3.4.1 
git-svn-id: file:///home/svn/framework3/trunk@9764 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-10 15:19:01 +00:00
HD Moore
d3a6418e53 Revert changes to elevate, still not getting around restrictions on primary token creation, needs a deeper look 
git-svn-id: file:///home/svn/framework3/trunk@9759 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-09 21:59:31 +00:00
HD Moore
d5932fc2fd Switch the namedpipe code to convert the thread token to a primary token first 
git-svn-id: file:///home/svn/framework3/trunk@9756 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-09 21:40:44 +00:00
HD Moore
ec9156827e Switch the elevator methods to DuplicateHandleEx to get a primary token 
git-svn-id: file:///home/svn/framework3/trunk@9755 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-09 21:23:05 +00:00
HD Moore
29f9f6671e This *should* fix all cases where execute -t would fail to use an impersonated token 
git-svn-id: file:///home/svn/framework3/trunk@9754 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-09 19:32:51 +00:00
James Lee
7fd71dcbcb note the updated version of ruby 
git-svn-id: file:///home/svn/framework3/trunk@9753 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-09 19:29:34 +00:00
HD Moore
972e7bc282 Clean up some of the token impersonation code around process execution 
git-svn-id: file:///home/svn/framework3/trunk@9751 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-09 18:54:20 +00:00
HD Moore
ccfea56ed5 Minor tweak to build without the include path for common 
git-svn-id: file:///home/svn/framework3/trunk@9715 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-07 16:46:58 +00:00
HD Moore
5d9a6622de Merge railgun, tweak configurations 
git-svn-id: file:///home/svn/framework3/trunk@9709 4d416f70-5f16-0410-b530-b9f4589650da
 2010-07-07 16:29:03 +00:00
James Lee
fb43495ada meterpreter now compiles on 64-bit linux in a 32-bit chroot. still need payload handlers and some stdapi love to make it useable 
git-svn-id: file:///home/svn/framework3/trunk@9468 4d416f70-5f16-0410-b530-b9f4589650da
 2010-06-10 06:10:15 +00:00
Joshua Drake
6d1e7bdaa5 big commit - lots of cmdstager changes 
created 4 cmd stagers (instead of just one): CmdStagerVBS, CmdStagerDebugAsm, CmdStagerDebugWrite, CmdStagerTFTP
created a TFTPServer mixin
created Msf::Exploit::EXE mixin to generate executables
updated all uses of CmdStager to use CmdStagerVBS for the time being
add exploit for cve-2001-0333 using CmdStagerTFTP
updated tftp server to wait for transfers to finish (up to 30 seconds) before shutting down
write debug.exe stager stub in 16-bit assembly (used in CmdStagerDebugAsm)


git-svn-id: file:///home/svn/framework3/trunk@9375 4d416f70-5f16-0410-b530-b9f4589650da
 2010-05-26 22:39:56 +00:00
Ramon de C Valle
380ed580fb Update unixasm external source. 
git-svn-id: file:///home/svn/framework3/trunk@9348 4d416f70-5f16-0410-b530-b9f4589650da
 2010-05-23 20:01:11 +00:00
James Lee
4f61fb6dc3 add a mini installer to the standard build. it can still use some more minification, it's at about 24MB and expands to 132MB 
git-svn-id: file:///home/svn/framework3/trunk@9341 4d416f70-5f16-0410-b530-b9f4589650da
 2010-05-21 06:25:26 +00:00
James Lee
0615dac174 break the common stuff out into a function 
git-svn-id: file:///home/svn/framework3/trunk@9337 4d416f70-5f16-0410-b530-b9f4589650da
 2010-05-21 04:53:46 +00:00
James Lee
a89db83513 use the BINPATH 
git-svn-id: file:///home/svn/framework3/trunk@9329 4d416f70-5f16-0410-b530-b9f4589650da
 2010-05-20 20:39:55 +00:00
James Lee
3a928fc9c2 this is what i really meant. 
git-svn-id: file:///home/svn/framework3/trunk@9318 4d416f70-5f16-0410-b530-b9f4589650da
 2010-05-17 21:14:10 +00:00
James Lee
3ed28c0822 typo 
git-svn-id: file:///home/svn/framework3/trunk@9317 4d416f70-5f16-0410-b530-b9f4589650da
 2010-05-17 21:05:51 +00:00
James Lee
b5cd499b06 only build an arch if we've got bins for it 
git-svn-id: file:///home/svn/framework3/trunk@9316 4d416f70-5f16-0410-b530-b9f4589650da
 2010-05-17 20:49:08 +00:00
James Lee
8d38f0da87 use a variable for the installation directory so we can eventually make it an option 
git-svn-id: file:///home/svn/framework3/trunk@9314 4d416f70-5f16-0410-b530-b9f4589650da
 2010-05-17 20:27:03 +00:00
James Lee
c4a7368591 use our gems directory 
git-svn-id: file:///home/svn/framework3/trunk@9313 4d416f70-5f16-0410-b530-b9f4589650da
 2010-05-17 20:22:57 +00:00
HD Moore
c93642b11f Update for 3.4.0 
git-svn-id: file:///home/svn/framework3/trunk@9307 4d416f70-5f16-0410-b530-b9f4589650da
 2010-05-16 17:35:56 +00:00
HD Moore
36836423d9 Add a warning, cosmetic comment to asm 
git-svn-id: file:///home/svn/framework3/trunk@9037 4d416f70-5f16-0410-b530-b9f4589650da
 2010-04-07 20:51:05 +00:00
HD Moore
c6ebd735df Updated comments 
git-svn-id: file:///home/svn/framework3/trunk@9003 4d416f70-5f16-0410-b530-b9f4589650da
 2010-04-03 15:08:17 +00:00
HD Moore
11c10518b3 Bug fixes for better windows OS compatibility 
git-svn-id: file:///home/svn/framework3/trunk@9002 4d416f70-5f16-0410-b530-b9f4589650da
 2010-04-03 14:57:51 +00:00
HD Moore
cd2760f2c2 Bug fixes and size improvements for the reverse_https stager 
git-svn-id: file:///home/svn/framework3/trunk@9001 4d416f70-5f16-0410-b530-b9f4589650da
 2010-04-03 13:53:35 +00:00
HD Moore
e968c3894e More size tweaks 
git-svn-id: file:///home/svn/framework3/trunk@8999 4d416f70-5f16-0410-b530-b9f4589650da
 2010-04-03 08:03:28 +00:00
HD Moore
c8defe9716 Size tweaks to bring the ssl stager + encoder + target_id to exactly 400 bytes 
git-svn-id: file:///home/svn/framework3/trunk@8998 4d416f70-5f16-0410-b530-b9f4589650da
 2010-04-03 07:48:53 +00:00
HD Moore
c6c956ab46 Small patch to enable a new stager 
git-svn-id: file:///home/svn/framework3/trunk@8984 4d416f70-5f16-0410-b530-b9f4589650da
 2010-04-03 05:21:15 +00:00
HD Moore
5d0fb434b7 Adds a reverse_tcp_dns stager 
git-svn-id: file:///home/svn/framework3/trunk@8983 4d416f70-5f16-0410-b530-b9f4589650da
 2010-04-03 03:38:57 +00:00
Stephen Fewer
9a4293c445 In with the modified VNC payload which now supports an in memory breakout of session isolation for systems like Vista/2008/7 when the payload is run from a service in session 0 isolation. 
git-svn-id: file:///home/svn/framework3/trunk@8890 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-24 00:00:05 +00:00
Stephen Fewer
c09ca4eba5 Commit all the code for the new 'screenshot' command in the stdapi extension. Screenshot will now work on NT4 - 7 on both x86 and x64 and on newer versions of Windows we can break out of session isolation (e.g. session 0 isolation for services) to screenshot the active desktop (or logon screen) without the need to migrate meterpreter. The majority of the migration code-injection stuff has been refactored out into base_inject.c so it can be shared with the new ps_inject() functionality to inject dlls. The 'ps' command now reports what session each process belongs to (if this is too verbose we can remove it or add a -v verbose switch to the ps command). The 'execute' command can now take a -s switch in order to create a process in a users session under the users privs (assuming you have the privs to do this). 
git-svn-id: file:///home/svn/framework3/trunk@8787 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 17:09:55 +00:00
Stephen Fewer
c55e9af9ae Commit the updated APC injection stubs. fixes a nasty issue in some edge cases whereby when using APC injection for a process in another session then the current host process the injected APC can cause an access violation in kernel32 during a call the kernel32!CreateThread caused by the APC's host thread not having an initialized Activation Context inside its TEB. We now test for this and create a dummy ActivationContext entry to appease the kernel. This will both improve DLL injection reliability as well as meterpreter migration reliability. 
git-svn-id: file:///home/svn/framework3/trunk@8786 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-11 17:00:19 +00:00
Stephen Fewer
08d1850bcc Commit the new VNC x86/x64 DLL source code... 
git-svn-id: file:///home/svn/framework3/trunk@8745 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 14:49:45 +00:00
Stephen Fewer
d0f2b589b6 Delete the old VNC source code. 
git-svn-id: file:///home/svn/framework3/trunk@8744 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-08 14:39:20 +00:00
Stephen Fewer
195d1ab4b8 Commit snojobs jpeg patch for espia with an x64 build and some minor changes on the ruby side (The 'screenshot' command is now 'screengrab' to avoid a future conflict with changes happening in stdapi). 
git-svn-id: file:///home/svn/framework3/trunk@8726 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-05 15:50:24 +00:00
Stephen Fewer
4e73d95dac Commit the JPEG-8 lib code from snowjobs patch. Added an x64 build environment and the libs directory for x86/x64 projects to link against. 
git-svn-id: file:///home/svn/framework3/trunk@8725 4d416f70-5f16-0410-b530-b9f4589650da
 2010-03-05 15:44:36 +00:00
Stephen Fewer
5f35f33cd1 Forgot the updated build.py, also add in a link to a blog post I wrote for this shellcode. 
git-svn-id: file:///home/svn/framework3/trunk@8657 4d416f70-5f16-0410-b530-b9f4589650da
 2010-02-26 14:27:13 +00:00
Stephen Fewer
88cc851a41 Commit the stager_sysenter_hook win32 kernel shellcode source and mixin patch, resolves #405. 
git-svn-id: file:///home/svn/framework3/trunk@8655 4d416f70-5f16-0410-b530-b9f4589650da
 2010-02-26 13:41:16 +00:00
Tod Beardsley
d5f4ea9692 Adding TightVNC's java viewer to external/source. vnc.html works, it just needs to have the path set correctly. 
git-svn-id: file:///home/svn/framework3/trunk@8648 4d416f70-5f16-0410-b530-b9f4589650da
 2010-02-25 23:18:42 +00:00
Tod Beardsley
948d9d95d9 Deleting the winvnc java stuff. 
git-svn-id: file:///home/svn/framework3/trunk@8647 4d416f70-5f16-0410-b530-b9f4589650da
 2010-02-25 23:10:00 +00:00
Stephen Fewer
4ed9e71b76 Commit the meterpreter C side (and bins) for transparent zlib (zlib.c copied from the posix meterpreter source) compression of TLV's and channels. To use transparent compression with channels, create them with CHANNEL_FLAG_COMPRESS. To use transparent compression with any TLV value, bitwise or the TLV type with TLV_META_TYPE_COMPRESSED (Don't create the TLV type with TLV_META_TYPE_COMPRESSED as the compressed flag is removed on the remote end after compression). For consistency with the ruby side we could at a later stage add a boolean compress parameter to all the packet_add_tlv_* functions so you don't have to manually specify TLV_META_TYPE_COMPRESSED flag. 
git-svn-id: file:///home/svn/framework3/trunk@8515 4d416f70-5f16-0410-b530-b9f4589650da
 2010-02-16 14:56:24 +00:00
Stephen Fewer
e732ef6872 Commit the Meterpreter C side for the UDP socket pivoting. (+1 bug fix for the TCP client socket notify event function) 
git-svn-id: file:///home/svn/framework3/trunk@8430 4d416f70-5f16-0410-b530-b9f4589650da
 2010-02-09 16:43:33 +00:00
Stephen Fewer
a80d1ad2ee Commit the new TCP server channel support on the meterpreter end as well as some fixes to TCP client channels. 
git-svn-id: file:///home/svn/framework3/trunk@8383 4d416f70-5f16-0410-b530-b9f4589650da
 2010-02-06 17:55:41 +00:00
et
a40817ea67 Finally the Wmap patch for ratproxy for new db schema. Based on Albert School patch 
git-svn-id: file:///home/svn/framework3/trunk@8332 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-31 04:15:31 +00:00
HD Moore
42b331b47f Fix #790. Initialize the client state to be alive, tweak a few things on the meterpreter side 
git-svn-id: file:///home/svn/framework3/trunk@8327 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-29 18:52:44 +00:00
Stephen Fewer
7a32f9f2e2 fix ps so an x64 process's path is returned correctly when ps is run from a wow64 meterpeter. 
git-svn-id: file:///home/svn/framework3/trunk@8322 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-29 12:00:45 +00:00
Stephen Fewer
3824a2938c ...update the project files. I have added in an extra post build step for elevator.dll so it can work on NT4 (when used with rundll32.exe for getsystem technique #2). The post build step uses the editbin.exe to set the major OS/Subsystem version to 4 instead of 5 so NT4 will load it, (visual c++ 2008 cant build NT4 binaries, only 2000 and above). 
git-svn-id: file:///home/svn/framework3/trunk@8318 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-29 01:12:35 +00:00
Stephen Fewer
0e08aa0094 Add in KiTrap0D to the priv getsystem command. 
git-svn-id: file:///home/svn/framework3/trunk@8317 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-29 01:09:57 +00:00
HD Moore
284af1260a Disable debug tracing 
git-svn-id: file:///home/svn/framework3/trunk@8312 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-28 23:10:58 +00:00
HD Moore
f3408fd327 Fixes #744. The core issue was the migrate code waiting on SetEvent, but the migrate stub was blocked on a WSASocket due to a pending packet_receive in the main server thread. Simply settin the thread termination signal did not work, as the SSL_read was already in progress. This change forcible terminates the main server thread before waiting on the event in order to bypass this deadlock. The downside is a failed migrate has no way to recover if it makes it this far. 
git-svn-id: file:///home/svn/framework3/trunk@8309 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-28 22:55:41 +00:00
natron
69ad365b46 Added STDERR to pure java payload, cleaned up user's view. 
git-svn-id: file:///home/svn/framework3/trunk@8308 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-28 22:53:36 +00:00
Stephen Fewer
5793ab128c modularize the source for each technique in elevator too. 
git-svn-id: file:///home/svn/framework3/trunk@8299 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-28 16:30:09 +00:00
Stephen Fewer
8eb036d704 modularize the source for each technique, making it cleaner to add in new techniques at a later stage. 
git-svn-id: file:///home/svn/framework3/trunk@8298 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-28 15:04:27 +00:00
Stephen Fewer
62c1a99c8e update the workspace files. 
git-svn-id: file:///home/svn/framework3/trunk@8295 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-28 13:46:51 +00:00
Stephen Fewer
fad278566b Add in the elevator dll, used by getsystem for a number of things. 
git-svn-id: file:///home/svn/framework3/trunk@8294 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-28 13:45:31 +00:00
Stephen Fewer
e58847009c Add in the new getsystem command to the priv extension. 
git-svn-id: file:///home/svn/framework3/trunk@8293 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-28 13:40:55 +00:00
Stephen Fewer
f82b6c5952 Update RDI by adding in the LoadRemoteLibraryR function to use RDI to inject into arbitrary processes. Current limitation is it only works on x86->x86 and x64->x64 scenarios, due to the offsets used in parsing the PE file being determined at compile time (e.g. if we compile LoadRemoteLibraryR into an x86 binary it wont be able to load x64 images). Solution is to not rely on compiler for the offset but to do it manually which shouldn't be too much work. 
git-svn-id: file:///home/svn/framework3/trunk@8292 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-28 13:37:55 +00:00
Stephen Fewer
9f4332ce60 bug fix for the stdapi command rev2self. was not playing nice with new thread token stuff. 
git-svn-id: file:///home/svn/framework3/trunk@8291 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-28 13:33:24 +00:00
Stephen Fewer
095b6ee7ed move these macros from base_dispatch.c to common.h as they are useful to use elsewhere. 
git-svn-id: file:///home/svn/framework3/trunk@8290 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-28 13:32:16 +00:00
natron
cd5e5880d2 Initial commit of Msf::Exploit::Java mixin and multi/browser/java_signed_applet exploit. 
git-svn-id: file:///home/svn/framework3/trunk@8267 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-27 19:46:39 +00:00
HD Moore
cf26fcb9ad Fixes #784. Adds .NET server support 
git-svn-id: file:///home/svn/framework3/trunk@8256 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-27 07:02:07 +00:00
pusscat
227dd5ba12 Remove test trap ;) 
git-svn-id: file:///home/svn/framework3/trunk@8243 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-26 20:20:16 +00:00
Joshua Drake
e765288c6c lol, fix funny $Id$ replacement 
git-svn-id: file:///home/svn/framework3/trunk@8241 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-26 20:10:56 +00:00
HD Moore
4b637c4912 Updated with new target system, signature for 2000 SP4, fixed SP4 usage, but the priv esclation is non-functional, use twunk16/debug depending on what is available. 
git-svn-id: file:///home/svn/framework3/trunk@8240 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-26 19:13:28 +00:00
HD Moore
a898901ad3 Switch to twunk_16 for Windows 7 compatibility 
git-svn-id: file:///home/svn/framework3/trunk@8230 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-25 18:07:48 +00:00
HD Moore
9f37906ba9 Tweaks for reliability 
git-svn-id: file:///home/svn/framework3/trunk@8226 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-25 16:55:53 +00:00
Stephen Fewer
4e4a65b9a4 Complete overhaul of process migration. Migration across x86->x86, x64->x64, wow64->x64 and x64->wow64 all supported using a number of techniques. 
git-svn-id: file:///home/svn/framework3/trunk@8198 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-22 19:46:18 +00:00
Stephen Fewer
cfcbfd5d3c bug fix x64 migrate shellcodes for wow64->x64 migration. 
git-svn-id: file:///home/svn/framework3/trunk@8197 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-22 19:37:10 +00:00
Stephen Fewer
538a647671 The stub for wow64->x64 migration. 
git-svn-id: file:///home/svn/framework3/trunk@8195 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-22 17:12:41 +00:00
Stephen Fewer
1e63f357cb For now just adding in the new APC migrate stubs and the wow64->x64 exec stub. (fix up the build scripts and use a dedicated migrate directory for this stuff). 
git-svn-id: file:///home/svn/framework3/trunk@8193 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-22 14:03:53 +00:00
HD Moore
c419511386 Minor changes to make scripting easier and allow it to escalate a specific pid 
git-svn-id: file:///home/svn/framework3/trunk@8168 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-19 22:30:15 +00:00
HD Moore
752f8db83b Add KiTrap0d to the external/source/ as a reference 
git-svn-id: file:///home/svn/framework3/trunk@8167 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-19 22:22:19 +00:00
Stephen Fewer
f3fd2eae80 Commit the new x64 migrate stub. Compatible with x64->x64 migration (and x86->x64 migration once the remote thread issue is resolved) 
git-svn-id: file:///home/svn/framework3/trunk@8163 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-19 18:39:56 +00:00
Stephen Fewer
d032955959 Commit the new x86 migrate stub. Compatible with x86->x86 migration and x64->x86 migration, on NT4 and up (where applicable). 
git-svn-id: file:///home/svn/framework3/trunk@8160 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-19 12:55:24 +00:00
Stephen Fewer
159e240f3a updated stapi project file. 
git-svn-id: file:///home/svn/framework3/trunk@8158 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-19 11:07:21 +00:00
Stephen Fewer
757276d70f First cut for improved process listing. Now works well on NT4 and up. One issue with getting the path for x64 processes on an x86 meterpreter. 
git-svn-id: file:///home/svn/framework3/trunk@8156 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-19 10:40:02 +00:00
Stephen Fewer
0286a67f1e small bug fix to get getuid working on NT4 
git-svn-id: file:///home/svn/framework3/trunk@8155 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-19 10:36:12 +00:00
HD Moore
55dc3aa192 Support for slackware's mktemp, fixes #762 
git-svn-id: file:///home/svn/framework3/trunk@8112 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-14 12:48:30 +00:00
HD Moore
42b3a5774d Adds the process username to the ps output (when possible). 
git-svn-id: file:///home/svn/framework3/trunk@8056 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-02 03:41:21 +00:00
HD Moore
4d7aec7c2d Fixes #745. This commit changes how token manipulation works, adds the steal_token, drop_token, and getprivs commands. Tested on NT 4.0, 2000 SP4, XP SP3, 2003 SP2, Vista, and Windows 7 
git-svn-id: file:///home/svn/framework3/trunk@8055 4d416f70-5f16-0410-b530-b9f4589650da
 2010-01-02 00:35:10 +00:00
HD Moore
98f83bbab1 Adds reg queryclass 
git-svn-id: file:///home/svn/framework3/trunk@8046 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-31 15:52:30 +00:00
Joshua Drake
2283e029db crossing fingers, big cr removal batch 
git-svn-id: file:///home/svn/framework3/trunk@8038 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-30 22:24:22 +00:00
HD Moore
d0969746a4 Mostly cosmetic changes from local tree 
git-svn-id: file:///home/svn/framework3/trunk@7970 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-26 03:31:20 +00:00
HD Moore
f648a6605e Update the build script versions 
git-svn-id: file:///home/svn/framework3/trunk@7945 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-22 13:39:17 +00:00
HD Moore
68aafc8e13 Fixes #658 by adding a 250ms sleep to the dispatch of the close call. 
git-svn-id: file:///home/svn/framework3/trunk@7934 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-21 19:53:10 +00:00
Joshua Drake
b37c34579b add exploit module for cve-2009-3869 
NOTE: no policy change is required for this exploit to succeed.



git-svn-id: file:///home/svn/framework3/trunk@7899 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-17 04:52:40 +00:00
Joshua Drake
255724d640 compile java applet with 1.3, Fixes #685 
git-svn-id: file:///home/svn/framework3/trunk@7850 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-14 17:26:19 +00:00
Joshua Drake
34408c5e3e add exploit module for CVE-2009-3867 (JRE getSoundbank) 
git-svn-id: file:///home/svn/framework3/trunk@7827 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-11 21:18:31 +00:00
HD Moore
3e98ff9d9a Stop breaking tar on OS X, thanks 
git-svn-id: file:///home/svn/framework3/trunk@7815 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-10 22:25:29 +00:00
Stephen Fewer
be588716c5 Bug fix for meterpreter on NT4 (Tested on NT4.0 SP6). Add a function thread_open() in thread.c to wrap the use kernel32!OpenThread and ntdll!NtOpenThread for backwards compatibility. 
git-svn-id: file:///home/svn/framework3/trunk@7806 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-10 18:12:51 +00:00
HD Moore
6da0fda5ed Updated meterpreter binaries with a slight change to the thread schedule (solves a looping problem when the socket is dead). 
git-svn-id: file:///home/svn/framework3/trunk@7793 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-10 05:42:47 +00:00
HD Moore
ff19b649f3 See #662. This should fix most of the meterpreter-side issues with sockets, there is still a second piece of this which is unflushed data on the local forwards from the ruby code. 
git-svn-id: file:///home/svn/framework3/trunk@7761 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-08 22:08:06 +00:00
HD Moore
792724c3f3 Cleanups to the socket code, its still not perfect, but much more usable now 
git-svn-id: file:///home/svn/framework3/trunk@7750 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-08 14:52:07 +00:00
Stephen Fewer
4f8cfc27d4 Replace the use of Critical Sections for locking with Mutex's (thread.c). This appears to resolve a deadlock issue with OpenSSL on some Windows systems. This commit resolves a bug in interactive processes where an interactive waiter thread will chew cpu due to a tight loop introduced by anonymous pipes not blocking (process.c). Dynamic lock creation for OpenSSL has been re-enabled should a future version of OpenSSL require it, AFAIK the current version used, v0.8.9, does not use dynamic lock creation (server_setup.c). Channels have been given locks to help synchronize concurrent access to a single channel. 
git-svn-id: file:///home/svn/framework3/trunk@7732 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-07 13:04:41 +00:00
HD Moore
dfa0d155fc See #607. Switch sniffer code to use mutexes 
git-svn-id: file:///home/svn/framework3/trunk@7728 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-07 05:19:46 +00:00
Stephen Fewer
a273c9f07c Initial commit of the multi-threaded meterpreter. 
git-svn-id: file:///home/svn/framework3/trunk@7698 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-04 17:37:21 +00:00
HD Moore
8aef3d560c Fixes #579 
git-svn-id: file:///home/svn/framework3/trunk@7694 4d416f70-5f16-0410-b530-b9f4589650da
 2009-12-04 11:35:24 +00:00
HD Moore
cbb0fb10e7 Tweak for 3.3.1 
git-svn-id: file:///home/svn/framework3/trunk@7649 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-30 20:14:55 +00:00
HD Moore
8ba8945f53 Fixes #579. Clean up the runtime environment for ruby, update the version 
git-svn-id: file:///home/svn/framework3/trunk@7633 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-28 16:38:52 +00:00
HD Moore
ffcd613450 Commit the rc2 installer 
git-svn-id: file:///home/svn/framework3/trunk@7527 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-16 04:05:45 +00:00