HD Moore
|
197a5684a2
|
New bins, implements the server side of multi-call railgun
git-svn-id: file:///home/svn/framework3/trunk@9806 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-13 19:19:21 +00:00 |
|
HD Moore
|
15ff9acb1c
|
Merge railgun, tweak configurations
git-svn-id: file:///home/svn/framework3/trunk@9709 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-07-07 16:29:03 +00:00 |
|
James Lee
|
a664572f5b
|
meterpreter now compiles on 64-bit linux in a 32-bit chroot. still need payload handlers and some stdapi love to make it useable
git-svn-id: file:///home/svn/framework3/trunk@9468 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-06-10 06:10:15 +00:00 |
|
Stephen Fewer
|
6f25e39b27
|
Commit all the code for the new 'screenshot' command in the stdapi extension. Screenshot will now work on NT4 - 7 on both x86 and x64 and on newer versions of Windows we can break out of session isolation (e.g. session 0 isolation for services) to screenshot the active desktop (or logon screen) without the need to migrate meterpreter. The majority of the migration code-injection stuff has been refactored out into base_inject.c so it can be shared with the new ps_inject() functionality to inject dlls. The 'ps' command now reports what session each process belongs to (if this is too verbose we can remove it or add a -v verbose switch to the ps command). The 'execute' command can now take a -s switch in order to create a process in a users session under the users privs (assuming you have the privs to do this).
git-svn-id: file:///home/svn/framework3/trunk@8787 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-11 17:09:55 +00:00 |
|
Stephen Fewer
|
795faa0295
|
Commit snojobs jpeg patch for espia with an x64 build and some minor changes on the ruby side (The 'screenshot' command is now 'screengrab' to avoid a future conflict with changes happening in stdapi).
git-svn-id: file:///home/svn/framework3/trunk@8726 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-03-05 15:50:24 +00:00 |
|
Stephen Fewer
|
2bcfe8f18c
|
Commit the meterpreter C side (and bins) for transparent zlib (zlib.c copied from the posix meterpreter source) compression of TLV's and channels. To use transparent compression with channels, create them with CHANNEL_FLAG_COMPRESS. To use transparent compression with any TLV value, bitwise or the TLV type with TLV_META_TYPE_COMPRESSED (Don't create the TLV type with TLV_META_TYPE_COMPRESSED as the compressed flag is removed on the remote end after compression). For consistency with the ruby side we could at a later stage add a boolean compress parameter to all the packet_add_tlv_* functions so you don't have to manually specify TLV_META_TYPE_COMPRESSED flag.
git-svn-id: file:///home/svn/framework3/trunk@8515 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-02-16 14:56:24 +00:00 |
|
Stephen Fewer
|
5a0d64211e
|
Commit the Meterpreter C side for the UDP socket pivoting. (+1 bug fix for the TCP client socket notify event function)
git-svn-id: file:///home/svn/framework3/trunk@8430 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-02-09 16:43:33 +00:00 |
|
Stephen Fewer
|
85ed7baa43
|
Commit the new TCP server channel support on the meterpreter end as well as some fixes to TCP client channels.
git-svn-id: file:///home/svn/framework3/trunk@8383 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-02-06 17:55:41 +00:00 |
|
Stephen Fewer
|
d0d1bce6c9
|
...update the project files. I have added in an extra post build step for elevator.dll so it can work on NT4 (when used with rundll32.exe for getsystem technique #2). The post build step uses the editbin.exe to set the major OS/Subsystem version to 4 instead of 5 so NT4 will load it, (visual c++ 2008 cant build NT4 binaries, only 2000 and above).
git-svn-id: file:///home/svn/framework3/trunk@8318 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-29 01:12:35 +00:00 |
|
HD Moore
|
be80aa81b9
|
Fixes #744. The core issue was the migrate code waiting on SetEvent, but the migrate stub was blocked on a WSASocket due to a pending packet_receive in the main server thread. Simply settin the thread termination signal did not work, as the SSL_read was already in progress. This change forcible terminates the main server thread before waiting on the event in order to bypass this deadlock. The downside is a failed migrate has no way to recover if it makes it this far.
git-svn-id: file:///home/svn/framework3/trunk@8309 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 22:55:41 +00:00 |
|
Stephen Fewer
|
c80fcf9558
|
modularize the source for each technique, making it cleaner to add in new techniques at a later stage.
git-svn-id: file:///home/svn/framework3/trunk@8298 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 15:04:27 +00:00 |
|
Stephen Fewer
|
e081adaaf3
|
update the workspace files.
git-svn-id: file:///home/svn/framework3/trunk@8295 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 13:46:51 +00:00 |
|
Stephen Fewer
|
ff9d9f48aa
|
updated stapi project file.
git-svn-id: file:///home/svn/framework3/trunk@8158 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-19 11:07:21 +00:00 |
|
Stephen Fewer
|
3c9eb16fe0
|
Replace the use of Critical Sections for locking with Mutex's (thread.c). This appears to resolve a deadlock issue with OpenSSL on some Windows systems. This commit resolves a bug in interactive processes where an interactive waiter thread will chew cpu due to a tight loop introduced by anonymous pipes not blocking (process.c). Dynamic lock creation for OpenSSL has been re-enabled should a future version of OpenSSL require it, AFAIK the current version used, v0.8.9, does not use dynamic lock creation (server_setup.c). Channels have been given locks to help synchronize concurrent access to a single channel.
git-svn-id: file:///home/svn/framework3/trunk@7732 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 13:04:41 +00:00 |
|
Stephen Fewer
|
0a5c87b678
|
Initial commit of the multi-threaded meterpreter.
git-svn-id: file:///home/svn/framework3/trunk@7698 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-04 17:37:21 +00:00 |
|
HD Moore
|
a0b6ee7885
|
Merge in the POSIX stdapi extension, still some work left to finish
git-svn-id: file:///home/svn/framework3/trunk@7266 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-26 04:34:20 +00:00 |
|
et
|
18f0d3588c
|
Finally screenshot capture. BMP at this time
git-svn-id: file:///home/svn/framework3/trunk@7063 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-26 04:05:09 +00:00 |
|
Stephen Fewer
|
5ad901fdb1
|
Commit the x64 build of the meterpreter incognito extension.
git-svn-id: file:///home/svn/framework3/trunk@7009 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-07 09:25:25 +00:00 |
|
Stephen Fewer
|
245bb65c54
|
Commit the x64 build of the meterpreter priv extension.
git-svn-id: file:///home/svn/framework3/trunk@7008 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-07 09:17:29 +00:00 |
|
Stephen Fewer
|
96bf84163d
|
Commit the source code for the cross compilable reflective dll injection module. Some minor modifications to the stdapi extension were also required. All the projects (.vcproj) now have an x64 debug/release target as well as an x86 counterpart.
git-svn-id: file:///home/svn/framework3/trunk@7000 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-04 01:53:58 +00:00 |
|
HD Moore
|
e47be2ef4f
|
Fixes #299 - corrects the win32 build environment and source to build properly again
git-svn-id: file:///home/svn/framework3/trunk@6987 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-30 01:57:25 +00:00 |
|
HD Moore
|
109991ecd1
|
Patch from snfernandez to fix posix extension loading
git-svn-id: file:///home/svn/framework3/trunk@6954 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-12 23:15:08 +00:00 |
|
HD Moore
|
071f888b16
|
Major merge of Meterpreter POSIX codebase from JR, Win32 projects may need a few more fixes to work properly
git-svn-id: file:///home/svn/framework3/trunk@6949 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-10 02:02:16 +00:00 |
|
HD Moore
|
8f3db3cb8b
|
fix the posix build (patch from JR)
git-svn-id: file:///home/svn/framework3/trunk@6945 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-09 17:28:44 +00:00 |
|
HD Moore
|
34580b5785
|
Merge in JR's ulibc code
git-svn-id: file:///home/svn/framework3/trunk@6944 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-09 02:27:52 +00:00 |
|
HD Moore
|
d5476de6cf
|
First round of posix meterpreter commits from jr
git-svn-id: file:///home/svn/framework3/trunk@6934 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-01 14:21:58 +00:00 |
|
HD Moore
|
81e434af80
|
Updated VC++ project files to fix the directory paths/includes for OpenSSL
git-svn-id: file:///home/svn/framework3/trunk@6774 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 03:14:20 +00:00 |
|
HD Moore
|
0f9246b4bf
|
Goodbye PolarSSL (your license stinks).
git-svn-id: file:///home/svn/framework3/trunk@6772 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 03:03:53 +00:00 |
|
HD Moore
|
8bbbd84aeb
|
Fixes a memory corruption issue with the SSL file descriptor (was using a stack reference instead of the Remote->fd reference), adds the source code sans the Packet SDK for the sniffer module
git-svn-id: file:///home/svn/framework3/trunk@6763 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-11 17:32:50 +00:00 |
|
HD Moore
|
2a365951cd
|
This patch removes some of the meterpreter compiler warnings and fixes migration over SSL
git-svn-id: file:///home/svn/framework3/trunk@6761 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-09 22:44:33 +00:00 |
|
HD Moore
|
b42efcb965
|
Add the PolarSSL lib file and output directory to make building easier
git-svn-id: file:///home/svn/framework3/trunk@6719 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-26 23:22:07 +00:00 |
|
HD Moore
|
3c022997cc
|
Switches meterpreter to SSL by default, using the PolarSSL library. To build this, just place polarssl.lib into an workspace/common/Release/
git-svn-id: file:///home/svn/framework3/trunk@6718 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-06-26 23:18:53 +00:00 |
|
et
|
85ec1dec7d
|
ext code and project adjustments
git-svn-id: file:///home/svn/framework3/trunk@6500 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-04-27 04:34:28 +00:00 |
|
et
|
35620d0bea
|
espia early stages
git-svn-id: file:///home/svn/framework3/trunk@6499 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-04-27 03:43:22 +00:00 |
|
HD Moore
|
d6f629ad19
|
Source code and VS project changes for cleaner build and new keyboard logging code
git-svn-id: file:///home/svn/framework3/trunk@6374 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-03-23 05:26:11 +00:00 |
|
HD Moore
|
fa51ea5d15
|
Swapping in the latest patched copy of Meterpreter. See #275
git-svn-id: file:///home/svn/framework3/trunk@6357 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-03-22 18:56:28 +00:00 |
|
HD Moore
|
a3fa8e90cb
|
Swapping out old Meterpreter code for Stephen Fewer's latest patched copy
git-svn-id: file:///home/svn/framework3/trunk@6356 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-03-22 18:55:36 +00:00 |
|
Matt Miller
|
5812c4cf15
|
better support for nx with dllinject payloads/meterp
git-svn-id: file:///home/svn/framework3/trunk@5510 4d416f70-5f16-0410-b530-b9f4589650da
|
2008-05-26 06:34:12 +00:00 |
|
Matt Miller
|
b52c7bc814
|
fix portfwd command not functioning properly
git-svn-id: file:///home/svn/framework3/trunk@5075 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-08-10 23:54:26 +00:00 |
|
Matt Miller
|
b82a1a0422
|
fix DEP issue with meterp, fixes #48
git-svn-id: file:///home/svn/framework3/trunk@4703 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-04-19 03:14:49 +00:00 |
|
Matt Miller
|
4d294dd6cb
|
proj file updates
git-svn-id: file:///home/svn/framework3/trunk@4604 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-04-01 22:12:03 +00:00 |
|
Matt Miller
|
0ec4eaf357
|
updated meterp stdapi to properly detect windows vista
git-svn-id: file:///home/svn/framework3/trunk@4603 4d416f70-5f16-0410-b530-b9f4589650da
|
2007-04-01 22:04:24 +00:00 |
|
Matt Miller
|
bc9c10e898
|
support for meterpreter scripts
git-svn-id: file:///home/svn/framework3/trunk@3916 4d416f70-5f16-0410-b530-b9f4589650da
|
2006-09-19 03:15:25 +00:00 |
|
Matt Miller
|
ecd0afd28b
|
timestomp integration
git-svn-id: file:///home/svn/incoming/trunk@3219 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-12-14 00:34:05 +00:00 |
|
Matt Miller
|
eb621baaf2
|
initial import of the priv esc extension
git-svn-id: file:///home/svn/incoming/trunk@3209 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-12-13 05:59:59 +00:00 |
|
Matt Miller
|
d037bdf5cc
|
remove bogus files
git-svn-id: file:///home/svn/incoming/trunk@3178 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-12-06 03:40:07 +00:00 |
|
Matt Miller
|
c12f50545f
|
updated workspace
git-svn-id: file:///home/svn/incoming/trunk@3177 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-12-06 03:38:04 +00:00 |
|
Matt Miller
|
8456a63351
|
fix module dependency problem, made it so the server sock in meterp isn't inherited
git-svn-id: file:///home/svn/incoming/trunk@2842 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-08-22 01:42:13 +00:00 |
|
Matt Miller
|
49d2eef5cf
|
a few things I needed to commit
git-svn-id: file:///home/svn/incoming/trunk@2839 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-08-12 14:45:54 +00:00 |
|
Matt Miller
|
73eebb42b2
|
migration now enables the debug privilege first so it can migrate to system services, added reboot/shutdown wrappers
git-svn-id: file:///home/svn/incoming/trunk@2834 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-26 04:52:59 +00:00 |
|
Matt Miller
|
ef3185398a
|
workspac'in it
git-svn-id: file:///home/svn/incoming/trunk@2807 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-22 03:34:52 +00:00 |
|
Matt Miller
|
bf8df89e7e
|
foo
git-svn-id: file:///home/svn/incoming/trunk@2803 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-22 02:55:55 +00:00 |
|
Matt Miller
|
e5b40e4e55
|
fixed line endings
git-svn-id: file:///home/svn/incoming/trunk@2802 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-22 02:06:33 +00:00 |
|
Matt Miller
|
e19147152b
|
fixed line endings
git-svn-id: file:///home/svn/incoming/trunk@2801 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-07-22 02:00:47 +00:00 |
|
Matt Miller
|
736528e546
|
import of meterp shit
git-svn-id: file:///home/svn/incoming/trunk@2516 4d416f70-5f16-0410-b530-b9f4589650da
|
2005-05-24 19:08:32 +00:00 |
|