github/metasploit-framework
1
Fork 0
mirror of https://github.com/rapid7/metasploit-framework synced 2024-11-05 14:57:30 +01:00
Code Releases Activity
4,613 Commits 20 Branches 919 Tags 1.3 GiB
927fe6b6c2
Commit Graph

4613 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
HD Moore
1b5cc24eab See #434. Some libraries used the wrong exception class 
git-svn-id: file:///home/svn/framework3/trunk@7325 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 18:20:02 +00:00
HD Moore
e067823372 See #434. A few modules that used the wrong Timeout syntax as well 
git-svn-id: file:///home/svn/framework3/trunk@7324 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 18:16:51 +00:00
HD Moore
075b8c5fa4 Fixes #434. Always use Timeout.timeout() -- on Ruby 1.9 this results in the Timeout::TimeoutError exception vs RuntimeError 
git-svn-id: file:///home/svn/framework3/trunk@7323 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 18:14:57 +00:00
HD Moore
80a262f991 Fixes #423. Using /s on a regex forces an encoding that cant match random binary gibberish 
git-svn-id: file:///home/svn/framework3/trunk@7322 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 17:59:45 +00:00
HD Moore
f38b43f236 Specify the language as none 
git-svn-id: file:///home/svn/framework3/trunk@7321 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 17:10:06 +00:00
HD Moore
176996fe61 Fixes #452. Solves a number of crashes caused by Regexp.new() on 1.9 without an explicit language specified 
git-svn-id: file:///home/svn/framework3/trunk@7320 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 17:09:13 +00:00
HD Moore
c0a0507fdf Fixes #441. Unpack the version in a way that works with 1.9 
git-svn-id: file:///home/svn/framework3/trunk@7319 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 15:09:54 +00:00
HD Moore
c0758f7bc6 Do not randomize the PDF version (breaks Acrobat 9x) 
git-svn-id: file:///home/svn/framework3/trunk@7318 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 14:41:59 +00:00
HD Moore
f13903f39b Fixes #442. Switch capture to work like lorcon2, works around a blocking issue with ruby 1.9 
git-svn-id: file:///home/svn/framework3/trunk@7317 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-02 14:36:53 +00:00
Stephen Fewer
54f952129a A fresh build of the x64 meterpreter and extensions to sync up with the recent changes with SSL in #7311 and the addition of the rm/del command from #7291 
git-svn-id: file:///home/svn/framework3/trunk@7316 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-01 16:49:01 +00:00
HD Moore
21e82d8b69 This patch implements a much more flexible executable creation scheme at the cost of exe size. This also adds the "-x" option to msfencode, allowing the user to specify their own executable template for generation. 
git-svn-id: file:///home/svn/framework3/trunk@7315 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-01 04:11:43 +00:00
HD Moore
2c15be2100 Make a copy of the win32 exe template 
git-svn-id: file:///home/svn/framework3/trunk@7314 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-01 03:19:20 +00:00
et
fdce355f3b Option NoDetailMessages added 
git-svn-id: file:///home/svn/framework3/trunk@7313 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-01 01:09:53 +00:00
et
fbbbde55f2 Fix #443. This module should not be use as a directory scanner as there are more suitable modules for such task. This specific module is only made to test a specific vulnerability and will be mode to a per directory check instead of trying to identify directories requiring authentication to be bypassed 
git-svn-id: file:///home/svn/framework3/trunk@7312 4d416f70-5f16-0410-b530-b9f4589650da
 2009-11-01 00:59:41 +00:00
HD Moore
e5e89906d0 Switch the meterpreter to SSLv3 and try to generate a slightly more realistic CN for the certificate. The goal is to work through a wider range of inline proxies. 
git-svn-id: file:///home/svn/framework3/trunk@7311 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-31 20:44:23 +00:00
HD Moore
02c3bc232b Typo 
git-svn-id: file:///home/svn/framework3/trunk@7310 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-30 17:05:18 +00:00
HD Moore
1ca1e1cc84 Use the payload as the ICMP tag check 
git-svn-id: file:///home/svn/framework3/trunk@7309 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-30 17:04:21 +00:00
HD Moore
f89085fd20 Check the icmp echo ID 
git-svn-id: file:///home/svn/framework3/trunk@7308 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-30 16:50:45 +00:00
HD Moore
670ee7c238 Fix an invalid next 
git-svn-id: file:///home/svn/framework3/trunk@7307 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-30 16:46:52 +00:00
HD Moore
3d6687902a Adds two modules that re-implement the rogue network tools project as metasploit auxiliary modules. 
git-svn-id: file:///home/svn/framework3/trunk@7306 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-30 07:36:00 +00:00
HD Moore
f347e561db Two very basic HTTP request fuzzers, based on module code from nullthreat, ported to the new API 
git-svn-id: file:///home/svn/framework3/trunk@7305 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-29 21:45:50 +00:00
HD Moore
3faf72dd97 Perform a test RPC call on each discovered interface 
git-svn-id: file:///home/svn/framework3/trunk@7304 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-29 19:00:34 +00:00
HD Moore
4f3128c061 Stop randomizing the module version, it breaks Acrobat 9 
git-svn-id: file:///home/svn/framework3/trunk@7303 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-29 04:09:07 +00:00
et
20be000d47 Wmap able to load exploits and check for vulnerabilities. Next step exploit if vulnerable 
git-svn-id: file:///home/svn/framework3/trunk@7302 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-29 03:16:27 +00:00
HD Moore
ef302da508 Allow the interrupt exception to still propogate up 
git-svn-id: file:///home/svn/framework3/trunk@7301 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 19:39:16 +00:00
HD Moore
b444fdfa33 Handles fatal exceptions and prevents the framework from exiting, fixes #424 
git-svn-id: file:///home/svn/framework3/trunk@7300 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 19:37:43 +00:00
HD Moore
8377077297 Huide the error output from stty execs. Fixes #426 
git-svn-id: file:///home/svn/framework3/trunk@7299 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 19:37:19 +00:00
HD Moore
3cf4329335 Updates the autopwn matching algorithm to use multiple ports and service names 
git-svn-id: file:///home/svn/framework3/trunk@7298 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 18:04:50 +00:00
HD Moore
a41b1db7de Autofilter based on existence of the softcart cgi 
git-svn-id: file:///home/svn/framework3/trunk@7297 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 18:02:37 +00:00
HD Moore
aa09862813 Fixes #401. Ends up Windows NT doesn't like DCERPC requests to be partially written by SMB writes, this patches the min write size to be at least as big as the DCERPC request. The DCERPC::max_frag_size parameter can still be used for more evasion. 
[*] Started reverse handler
[*] Detected a Windows NT 4.0 target
[*] Adjusting the SMB/DCERPC parameters for Windows NT
[*] Binding to 4b324fc8-1670-01d3-1278-5a47bf6ee188:3.0@ncacn_np:192.168.0.128[\BROWSER] ...
[*] Bound to 4b324fc8-1670-01d3-1278-5a47bf6ee188:3.0@ncacn_np:192.168.0.128[\BROWSER] ...
[*] Building the stub data...
[*] Calling the vulnerable function...
[*] Sending stage (719360 bytes)
[*] Meterpreter session 1 opened (192.168.0.136:4444 -> 192.168.0.128:1485)

meterpreter > sysinfo
Computer: VMNT4
OS      : Windows NT 4.0 (Build 1381, Service Pack 6).
Arch    : x86
Language: en_US



git-svn-id: file:///home/svn/framework3/trunk@7296 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 16:37:18 +00:00
HD Moore
bffb98ba9f Add XP SP3 target for WarFTPD. 
git-svn-id: file:///home/svn/framework3/trunk@7295 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 10:29:41 +00:00
HD Moore
9141d4e967 Condense the lorcon2 each_packet method, the queue isnt necessary after testing 
git-svn-id: file:///home/svn/framework3/trunk@7294 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 01:41:17 +00:00
HD Moore
31276e1626 Fixes #427. Finally found a solution that works for 1.8 and 1.9, this allows lorcon modules to run in the background or foreground and handle interrupts from the console gracefully. Its still a hack 
git-svn-id: file:///home/svn/framework3/trunk@7293 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-28 00:19:17 +00:00
HD Moore
7b22b2cc04 Mostly working codebase, still hanging on some instances, depends on latest svn of lorcon2. See #427 
git-svn-id: file:///home/svn/framework3/trunk@7292 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-27 20:13:20 +00:00
HD Moore
5234fe8ff8 Fixes 416. Adds the rm/del commands to meterpreter, fixes build problems triggered by the POSIX code merge 
git-svn-id: file:///home/svn/framework3/trunk@7291 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-27 02:31:07 +00:00
HD Moore
276a3f8052 Use _WIN32 instead of __WIN32__ to be consistent 
git-svn-id: file:///home/svn/framework3/trunk@7290 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-27 01:13:35 +00:00
HD Moore
6dcffd0373 Catch attempts to migrate to a name vs a pid 
git-svn-id: file:///home/svn/framework3/trunk@7289 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-27 00:56:56 +00:00
HD Moore
8d8bc45dfd Adds a shortcut for getting a shell (execute -f cmd -c -i -H) is now just "shell" 
git-svn-id: file:///home/svn/framework3/trunk@7288 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-27 00:47:00 +00:00
HD Moore
3b99a513ec Fixes #352 and fixes #350. Can no longer reproduce memory corruption or packet loss with this code 
git-svn-id: file:///home/svn/framework3/trunk@7287 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 22:49:43 +00:00
HD Moore
b662d044a6 Fixes #412. Still an issue with lorcon not yielding back when there is no traffic, but this is a different bug 
git-svn-id: file:///home/svn/framework3/trunk@7286 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 22:36:24 +00:00
HD Moore
ddeb80e0da See #412. Fix compile warnings and errors on 1.9, still needs testing 
git-svn-id: file:///home/svn/framework3/trunk@7285 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 21:09:40 +00:00
HD Moore
e1559b1ab4 Fixes #408. Trims leads spaces, adds trailing space, prevents line wipe when tab completing is done 
git-svn-id: file:///home/svn/framework3/trunk@7284 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 20:33:55 +00:00
HD Moore
5eed9deb2d Adds the joomla TinyMCE file upload exploit from spinbad. 
git-svn-id: file:///home/svn/framework3/trunk@7283 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 20:00:39 +00:00
HD Moore
5e137e92fd Fixes #381. To scan for TLSv1 only services, set SSLVersion TLS1 
git-svn-id: file:///home/svn/framework3/trunk@7282 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 19:48:15 +00:00
HD Moore
478a7ce8ab Fixes #410. Calls the real _close function, not the best solution, but will do until we fix the IO::Stream override. 
git-svn-id: file:///home/svn/framework3/trunk@7281 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 19:06:50 +00:00
HD Moore
91dd38550f Fixes #398. Allow globals to override local defaults, but fallthrough to local defaults if no global or local is set 
git-svn-id: file:///home/svn/framework3/trunk@7280 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 18:48:06 +00:00
HD Moore
bbb85ceb2c Updated userguide and latex file to match copyright and links 
git-svn-id: file:///home/svn/framework3/trunk@7279 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 18:04:49 +00:00
HD Moore
32f7d742b3 Fixes #328. Crafty little bug -- if asm was "" vs nil, the stage would try to compile as metasm instead of using the raw payload. 
git-svn-id: file:///home/svn/framework3/trunk@7278 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 17:44:43 +00:00
HD Moore
e7638ef887 Fixes #397. Webrick requires :BindAddress but msfweb only passed in :Host, likely an api change was missed during a rails upgrade. 
git-svn-id: file:///home/svn/framework3/trunk@7277 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 17:33:05 +00:00
James Lee
0a6bb91cb9 keywords 
git-svn-id: file:///home/svn/framework3/trunk@7276 4d416f70-5f16-0410-b530-b9f4589650da
 2009-10-26 15:14:28 +00:00