Wei Chen
|
f54939cda9
|
Change target name and description. The module works on multiple systems.
git-svn-id: file:///home/svn/framework3/trunk@13853 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-10 16:47:33 +00:00 |
|
Wei Chen
|
8488343e46
|
Add CVE-2011-2595 (Feature #5645)
git-svn-id: file:///home/svn/framework3/trunk@13852 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-10 16:11:05 +00:00 |
|
Wei Chen
|
756aafd7f2
|
Add CVE and OSVDB refs
git-svn-id: file:///home/svn/framework3/trunk@13848 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-09 22:56:17 +00:00 |
|
Joshua Drake
|
eab8a2434b
|
fix typo in description
git-svn-id: file:///home/svn/framework3/trunk@13845 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-09 19:39:15 +00:00 |
|
Wei Chen
|
487ee5b46e
|
Does not work against Win 7 SP0/SP1 and Windows Server 2003 SP2. Definitely not an universal target.
git-svn-id: file:///home/svn/framework3/trunk@13841 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-09 05:36:42 +00:00 |
|
Wei Chen
|
a3cc25615d
|
Add bug #5505 (scriptftp_list module)
git-svn-id: file:///home/svn/framework3/trunk@13839 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-09 04:17:03 +00:00 |
|
HD Moore
|
3d8a18cfd1
|
Fix tab indent
git-svn-id: file:///home/svn/framework3/trunk@13836 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-08 18:39:23 +00:00 |
|
Joshua Drake
|
2e7edeff81
|
See #3585: Happy Third Birthday MS08-067!
Adds an AlwaysOn DEP bypass for XP SP2 and SP3
git-svn-id: file:///home/svn/framework3/trunk@13835 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-08 07:26:37 +00:00 |
|
Steve Tornio
|
93f8d73b0c
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@13810 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-02 17:03:23 +00:00 |
|
Mario Ceballos
|
711bfa7d53
|
initial coverage for ca total defense sqli
git-svn-id: file:///home/svn/framework3/trunk@13809 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-10-02 15:53:44 +00:00 |
|
Wei Chen
|
2b3a277124
|
Found an instance that causes the win 7 target to fail. This fix corrects it.
git-svn-id: file:///home/svn/framework3/trunk@13797 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-27 08:55:07 +00:00 |
|
Matt Weeks
|
de9e99bd3d
|
Fix some TOCTOU confusion and database errors.
git-svn-id: file:///home/svn/framework3/trunk@13779 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-23 15:12:19 +00:00 |
|
Wei Chen
|
ec6f290fbd
|
Add Windows 7 target and all kinds of stuff.
git-svn-id: file:///home/svn/framework3/trunk@13775 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-22 17:40:35 +00:00 |
|
Steve Tornio
|
e93341f9f1
|
add cve and osvdb refs
git-svn-id: file:///home/svn/framework3/trunk@13768 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-21 11:55:56 +00:00 |
|
Wei Chen
|
5d4f68a6f2
|
Fix JS
git-svn-id: file:///home/svn/framework3/trunk@13767 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-21 03:13:45 +00:00 |
|
Wei Chen
|
936f3de84c
|
This simple math would do the trick
git-svn-id: file:///home/svn/framework3/trunk@13766 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-20 18:56:21 +00:00 |
|
Wei Chen
|
742edf1ad1
|
Add eSignal and eSignal Pro exploit
git-svn-id: file:///home/svn/framework3/trunk@13765 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-20 17:39:53 +00:00 |
|
Joshua Drake
|
3318b132c8
|
add x90c's email address
git-svn-id: file:///home/svn/framework3/trunk@13757 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-19 19:40:48 +00:00 |
|
Steve Tornio
|
ee09c028a0
|
add cve and osvdb refs
git-svn-id: file:///home/svn/framework3/trunk@13756 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-19 11:38:49 +00:00 |
|
Matt Weeks
|
1d2ddc55e8
|
Add UI for PXE attack reset.
git-svn-id: file:///home/svn/framework3/trunk@13753 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-18 20:44:16 +00:00 |
|
James Lee
|
f4be092ac1
|
include the CVE with more details that definitely applies to this bug, in addition to the ambiguous one that may or may not
git-svn-id: file:///home/svn/framework3/trunk@13751 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-18 03:57:27 +00:00 |
|
Wei Chen
|
bf315b09ed
|
Add DAQFactory bof
git-svn-id: file:///home/svn/framework3/trunk@13750 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-18 02:45:55 +00:00 |
|
Tod Beardsley
|
10c76f66ba
|
Adding an extra print line to adobe_cooltype_sing that clearly displays the user-agent.
git-svn-id: file:///home/svn/framework3/trunk@13748 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-17 20:12:51 +00:00 |
|
Wei Chen
|
56025609f0
|
Add fix commit url to reference. Thx jduck!
git-svn-id: file:///home/svn/framework3/trunk@13745 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-17 06:48:33 +00:00 |
|
Wei Chen
|
2ebef435a0
|
Add CVE-2011-2950 Real Player heap overflow
git-svn-id: file:///home/svn/framework3/trunk@13738 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-16 19:22:29 +00:00 |
|
Wei Chen
|
6443ee024c
|
Add Measuresoft ScadaPro exploit
git-svn-id: file:///home/svn/framework3/trunk@13737 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-16 08:23:59 +00:00 |
|
Wei Chen
|
7569cad178
|
Correct variable use in heap spray js function
git-svn-id: file:///home/svn/framework3/trunk@13735 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-15 22:37:13 +00:00 |
|
Wei Chen
|
70fa0e630b
|
Add Windows 7 + IE 8 target. Also use a different approach to get code execution.
git-svn-id: file:///home/svn/framework3/trunk@13734 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-15 20:51:01 +00:00 |
|
Steve Tornio
|
de98758f2b
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@13728 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-13 20:10:28 +00:00 |
|
Wei Chen
|
9e5d07b201
|
Add ScadaTEC ScadaPhone bof
git-svn-id: file:///home/svn/framework3/trunk@13727 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-13 17:25:03 +00:00 |
|
Steve Tornio
|
e6ce90c551
|
add osvdb ref
git-svn-id: file:///home/svn/framework3/trunk@13724 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-12 21:42:36 +00:00 |
|
Wei Chen
|
8b8388ed44
|
Add CVE-2011-3322 Procyon Core Server HMI
git-svn-id: file:///home/svn/framework3/trunk@13721 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-12 17:54:31 +00:00 |
|
Wei Chen
|
e597891a1f
|
Add support for DEP bypass
git-svn-id: file:///home/svn/framework3/trunk@13711 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-09 18:15:50 +00:00 |
|
James Lee
|
e31acef6e9
|
whitespace cleanup
git-svn-id: file:///home/svn/framework3/trunk@13702 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-07 15:30:08 +00:00 |
|
Mario Ceballos
|
6f28911d3d
|
added patch from joshua taylor.
git-svn-id: file:///home/svn/framework3/trunk@13698 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-06 19:58:40 +00:00 |
|
Wei Chen
|
819e673b88
|
Mention about the RSA attack in the description, also add a reference for it
git-svn-id: file:///home/svn/framework3/trunk@13697 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-06 17:22:00 +00:00 |
|
HD Moore
|
7fb4a3c571
|
Fix up the disablenops syntax
git-svn-id: file:///home/svn/framework3/trunk@13694 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-05 16:27:04 +00:00 |
|
Mario Ceballos
|
2f2421badc
|
initial coverage of the pnsize bug (fileformat)
git-svn-id: file:///home/svn/framework3/trunk@13691 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-03 21:17:58 +00:00 |
|
Wei Chen
|
44ba7e80d5
|
This module still works against 2.5 (most current as of Sept 2 2011)
git-svn-id: file:///home/svn/framework3/trunk@13688 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-03 04:52:04 +00:00 |
|
David Rude
|
8a070b81a2
|
Add the noobfuscation arg to the heaplib call
git-svn-id: file:///home/svn/framework3/trunk@13675 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-01 09:00:20 +00:00 |
|
Wei Chen
|
4e92190fa8
|
Add additional references, correct disclosure date
git-svn-id: file:///home/svn/framework3/trunk@13673 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-01 05:20:47 +00:00 |
|
Wei Chen
|
717b0eddee
|
Add DVD X plf playlist buffer overflow
git-svn-id: file:///home/svn/framework3/trunk@13672 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-09-01 05:14:21 +00:00 |
|
Wei Chen
|
22dc0ed551
|
Fix disclosure date
git-svn-id: file:///home/svn/framework3/trunk@13670 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-31 00:15:46 +00:00 |
|
David Rude
|
c5fe6ed503
|
Reset the target to allow for multiple client connections
git-svn-id: file:///home/svn/framework3/trunk@13669 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-30 22:29:14 +00:00 |
|
David Rude
|
70dffd6afb
|
Adds Citrix Gateway ActiveX Stack Based Buffer Overflow module
git-svn-id: file:///home/svn/framework3/trunk@13666 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-30 22:22:32 +00:00 |
|
Matt Weeks
|
6853221762
|
Fixes #5313 by adding logging support to pivoted PXE attacks, and displaying results as the module runs.
git-svn-id: file:///home/svn/framework3/trunk@13646 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-27 15:46:49 +00:00 |
|
Matt Weeks
|
f9e651d382
|
Report to DB too.
git-svn-id: file:///home/svn/framework3/trunk@13640 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-25 22:56:22 +00:00 |
|
Matt Weeks
|
23b4f4ed98
|
Address #5313 for locally-launched PXE attacks.
git-svn-id: file:///home/svn/framework3/trunk@13639 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-25 22:48:33 +00:00 |
|
amaloteaux
|
9cfba23558
|
psexec: allow o upload payload in a subfolder
git-svn-id: file:///home/svn/framework3/trunk@13638 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-25 22:30:46 +00:00 |
|
Matt Weeks
|
06c3dabe31
|
Fixes #5312 for pivoted PXE attacks.
git-svn-id: file:///home/svn/framework3/trunk@13634 4d416f70-5f16-0410-b530-b9f4589650da
|
2011-08-25 02:07:35 +00:00 |
|