github/metasploit-framework
1
Fork 0
mirror of https://github.com/rapid7/metasploit-framework synced 2024-11-12 11:52:01 +01:00
Code Releases Activity
4,530 Commits 20 Branches 920 Tags 1.3 GiB
58ac7efcfa
Commit Graph

4530 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
HD Moore
58ac7efcfa Fixes #457. Oddly enough, it was the nop sled garbling registers 
git-svn-id: file:///home/svn/framework3/trunk@7342 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 23:50:32 +00:00
pusscat
bcc8d5d8ca Update all binaries 
git-svn-id: file:///home/svn/framework3/trunk@7341 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 21:52:00 +00:00
pusscat
c7030e7705 Add tenketsu heap logging 
git-svn-id: file:///home/svn/framework3/trunk@7340 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 21:49:24 +00:00
HD Moore
70bb99b0df Fixes #458. Break VBS lines into shorter ones 
git-svn-id: file:///home/svn/framework3/trunk@7339 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 20:31:28 +00:00
HD Moore
785ab0921d Clean up argument passing, cosmetic 
git-svn-id: file:///home/svn/framework3/trunk@7338 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 20:00:43 +00:00
HD Moore
83e9cf8472 Fixes #456. Matches the new API 
git-svn-id: file:///home/svn/framework3/trunk@7337 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 19:57:52 +00:00
HD Moore
86bcabc411 Swizzle again. 
git-svn-id: file:///home/svn/framework3/trunk@7336 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 19:55:42 +00:00
HD Moore
83fece42fe Handle HTTP failures more gracefully 
git-svn-id: file:///home/svn/framework3/trunk@7335 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 18:10:09 +00:00
HD Moore
737dc327a3 Fixes #435. Resolves a long-standing issue where datastore entries with a default of 'false' were being ignored. 
git-svn-id: file:///home/svn/framework3/trunk@7334 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 18:09:05 +00:00
HD Moore
84ebdfa7eb Move the mercantec check to the exploit code from autofilter 
git-svn-id: file:///home/svn/framework3/trunk@7333 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 17:02:03 +00:00
HD Moore
244f71601c See #432. Remove unused components of the rails directory 
git-svn-id: file:///home/svn/framework3/trunk@7332 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 16:54:33 +00:00
Mario Ceballos
aef3817db9 added patch from steve tornio. 
git-svn-id: file:///home/svn/framework3/trunk@7331 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 12:02:54 +00:00
HD Moore
a8113889ed Swizzle. 
git-svn-id: file:///home/svn/framework3/trunk@7330 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-03 05:17:38 +00:00
Mario Ceballos
b62dc9705e remove some debugging. 
git-svn-id: file:///home/svn/framework3/trunk@7329 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 21:21:50 +00:00
Mario Ceballos
73bd4f7de2 added exploit module symantec_consoleutilities_browseandsavefile.rb from Nikolas Sotiriu. 
git-svn-id: file:///home/svn/framework3/trunk@7328 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 21:02:45 +00:00
HD Moore
7da02115c6 Fixes #453 - 'spoof' the real readline to prevent future requires from loading it 
git-svn-id: file:///home/svn/framework3/trunk@7327 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 20:18:49 +00:00
HD Moore
ac14e84eb6 See #434. Fixes up the last of the modules using the wrong Timeout exception class 
git-svn-id: file:///home/svn/framework3/trunk@7326 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 18:22:50 +00:00
HD Moore
1b5cc24eab See #434. Some libraries used the wrong exception class 
git-svn-id: file:///home/svn/framework3/trunk@7325 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 18:20:02 +00:00
HD Moore
e067823372 See #434. A few modules that used the wrong Timeout syntax as well 
git-svn-id: file:///home/svn/framework3/trunk@7324 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 18:16:51 +00:00
HD Moore
075b8c5fa4 Fixes #434. Always use Timeout.timeout() -- on Ruby 1.9 this results in the Timeout::TimeoutError exception vs RuntimeError 
git-svn-id: file:///home/svn/framework3/trunk@7323 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 18:14:57 +00:00
HD Moore
80a262f991 Fixes #423. Using /s on a regex forces an encoding that cant match random binary gibberish 
git-svn-id: file:///home/svn/framework3/trunk@7322 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 17:59:45 +00:00
HD Moore
f38b43f236 Specify the language as none 
git-svn-id: file:///home/svn/framework3/trunk@7321 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 17:10:06 +00:00
HD Moore
176996fe61 Fixes #452. Solves a number of crashes caused by Regexp.new() on 1.9 without an explicit language specified 
git-svn-id: file:///home/svn/framework3/trunk@7320 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 17:09:13 +00:00
HD Moore
c0a0507fdf Fixes #441. Unpack the version in a way that works with 1.9 
git-svn-id: file:///home/svn/framework3/trunk@7319 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 15:09:54 +00:00
HD Moore
c0758f7bc6 Do not randomize the PDF version (breaks Acrobat 9x) 
git-svn-id: file:///home/svn/framework3/trunk@7318 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 14:41:59 +00:00
HD Moore
f13903f39b Fixes #442. Switch capture to work like lorcon2, works around a blocking issue with ruby 1.9 
git-svn-id: file:///home/svn/framework3/trunk@7317 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 14:36:53 +00:00
Stephen Fewer
54f952129a A fresh build of the x64 meterpreter and extensions to sync up with the recent changes with SSL in #7311 and the addition of the rm/del command from #7291 
git-svn-id: file:///home/svn/framework3/trunk@7316 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-01 16:49:01 +00:00
HD Moore
21e82d8b69 This patch implements a much more flexible executable creation scheme at the cost of exe size. This also adds the "-x" option to msfencode, allowing the user to specify their own executable template for generation. 
git-svn-id: file:///home/svn/framework3/trunk@7315 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-01 04:11:43 +00:00
HD Moore
2c15be2100 Make a copy of the win32 exe template 
git-svn-id: file:///home/svn/framework3/trunk@7314 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-01 03:19:20 +00:00
et
fdce355f3b Option NoDetailMessages added 
git-svn-id: file:///home/svn/framework3/trunk@7313 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-01 01:09:53 +00:00
et
fbbbde55f2 Fix #443. This module should not be use as a directory scanner as there are more suitable modules for such task. This specific module is only made to test a specific vulnerability and will be mode to a per directory check instead of trying to identify directories requiring authentication to be bypassed 
git-svn-id: file:///home/svn/framework3/trunk@7312 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-01 00:59:41 +00:00
HD Moore
e5e89906d0 Switch the meterpreter to SSLv3 and try to generate a slightly more realistic CN for the certificate. The goal is to work through a wider range of inline proxies. 
git-svn-id: file:///home/svn/framework3/trunk@7311 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-31 20:44:23 +00:00
HD Moore
02c3bc232b Typo 
git-svn-id: file:///home/svn/framework3/trunk@7310 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-30 17:05:18 +00:00
HD Moore
1ca1e1cc84 Use the payload as the ICMP tag check 
git-svn-id: file:///home/svn/framework3/trunk@7309 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-30 17:04:21 +00:00
HD Moore
f89085fd20 Check the icmp echo ID 
git-svn-id: file:///home/svn/framework3/trunk@7308 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-30 16:50:45 +00:00
HD Moore
670ee7c238 Fix an invalid next 
git-svn-id: file:///home/svn/framework3/trunk@7307 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-30 16:46:52 +00:00
HD Moore
3d6687902a Adds two modules that re-implement the rogue network tools project as metasploit auxiliary modules. 
git-svn-id: file:///home/svn/framework3/trunk@7306 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-30 07:36:00 +00:00
HD Moore
f347e561db Two very basic HTTP request fuzzers, based on module code from nullthreat, ported to the new API 
git-svn-id: file:///home/svn/framework3/trunk@7305 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-29 21:45:50 +00:00
HD Moore
3faf72dd97 Perform a test RPC call on each discovered interface 
git-svn-id: file:///home/svn/framework3/trunk@7304 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-29 19:00:34 +00:00
HD Moore
4f3128c061 Stop randomizing the module version, it breaks Acrobat 9 
git-svn-id: file:///home/svn/framework3/trunk@7303 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-29 04:09:07 +00:00
et
20be000d47 Wmap able to load exploits and check for vulnerabilities. Next step exploit if vulnerable 
git-svn-id: file:///home/svn/framework3/trunk@7302 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-29 03:16:27 +00:00
HD Moore
ef302da508 Allow the interrupt exception to still propogate up 
git-svn-id: file:///home/svn/framework3/trunk@7301 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 19:39:16 +00:00
HD Moore
b444fdfa33 Handles fatal exceptions and prevents the framework from exiting, fixes #424 
git-svn-id: file:///home/svn/framework3/trunk@7300 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 19:37:43 +00:00
HD Moore
8377077297 Huide the error output from stty execs. Fixes #426 
git-svn-id: file:///home/svn/framework3/trunk@7299 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 19:37:19 +00:00
HD Moore
3cf4329335 Updates the autopwn matching algorithm to use multiple ports and service names 
git-svn-id: file:///home/svn/framework3/trunk@7298 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 18:04:50 +00:00
HD Moore
a41b1db7de Autofilter based on existence of the softcart cgi 
git-svn-id: file:///home/svn/framework3/trunk@7297 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 18:02:37 +00:00
HD Moore
aa09862813 Fixes #401. Ends up Windows NT doesn't like DCERPC requests to be partially written by SMB writes, this patches the min write size to be at least as big as the DCERPC request. The DCERPC::max_frag_size parameter can still be used for more evasion. 
[*] Started reverse handler
[*] Detected a Windows NT 4.0 target
[*] Adjusting the SMB/DCERPC parameters for Windows NT
[*] Binding to 4b324fc8-1670-01d3-1278-5a47bf6ee188:3.0@ncacn_np:192.168.0.128[\BROWSER] ...
[*] Bound to 4b324fc8-1670-01d3-1278-5a47bf6ee188:3.0@ncacn_np:192.168.0.128[\BROWSER] ...
[*] Building the stub data...
[*] Calling the vulnerable function...
[*] Sending stage (719360 bytes)
[*] Meterpreter session 1 opened (192.168.0.136:4444 -> 192.168.0.128:1485)

meterpreter > sysinfo
Computer: VMNT4
OS      : Windows NT 4.0 (Build 1381, Service Pack 6).
Arch    : x86
Language: en_US



git-svn-id: file:///home/svn/framework3/trunk@7296 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 16:37:18 +00:00
HD Moore
bffb98ba9f Add XP SP3 target for WarFTPD. 
git-svn-id: file:///home/svn/framework3/trunk@7295 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 10:29:41 +00:00
HD Moore
9141d4e967 Condense the lorcon2 each_packet method, the queue isnt necessary after testing 
git-svn-id: file:///home/svn/framework3/trunk@7294 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 01:41:17 +00:00
HD Moore
31276e1626 Fixes #427. Finally found a solution that works for 1.8 and 1.9, this allows lorcon modules to run in the background or foreground and handle interrupts from the console gracefully. Its still a hack 
git-svn-id: file:///home/svn/framework3/trunk@7293 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 00:19:17 +00:00