6e61878393
Respin of meterpreter bins (add Win 8 to sysinfo, fix a few bugs)
2012-06-24 13:27:10 -05:00
65197e79e2
added Exploit for CVE-2008-6508 (Openfire Auth bypass)
2012-06-24 07:35:38 -04:00
54309c3c3d
Merge branch 'armitage' of https://github.com/rsmudge/metasploit-framework into rsmudge-armitage
2012-06-24 02:25:38 -05:00
322e0766a1
Armitage 06.23.12
2012-06-23 13:03:55 -04:00
b891e868f5
Added actionscript and swf needed
2012-06-23 08:36:35 +02:00
d7d314862f
Need the trigger to actually make it work, duh!
2012-06-22 23:16:12 -05:00
572fb4cb0c
Permissions fix
2012-06-21 15:39:17 -05:00
f7ecc98923
Merge branch 'master' into feature/vuln-info
2012-06-20 13:34:53 -05:00
79fc053a2e
Merge branch 'module-CVE-2011-2110' of https://github.com/mrmee/metasploit-framework into mrmee-module-CVE-2011-2110
2012-06-19 22:05:07 -05:00
fcf42d3e7b
added adobe flashplayer array indexing exploit (CVE-2011-2110)
2012-06-20 12:52:37 +10:00
d5768080bf
Add a fail_message to attempts and fix bugs
2012-06-19 00:48:39 -05:00
ffdcea6a0a
Permissions, ignore
2012-06-18 18:12:51 -05:00
e8ad66b799
Exploit attempt tracking is mostly complete
2012-06-17 23:00:21 -05:00
8709473e72
Add fullname to modules, load mixins, fix platform
2012-06-17 11:57:33 -05:00
b4b1a4168e
Add missing module_detail_id's and references
2012-06-17 01:44:32 -05:00
e4fffc36de
Move to one to many instead of m2m for module_detail tracking
2012-06-17 01:21:38 -05:00
03b29fff68
Merge up the latest, does not automaticlly load
...
the module tree into the database right now.
2012-06-14 04:35:43 -05:00
a6070f8584
Tweak schema (type gets mangled by AR), add caching routine
2012-06-14 03:27:36 -05:00
1401ec0b19
Keep ID columns for record mgmt
2012-06-14 01:50:08 -05:00
80db388354
Fix up the schema relationships
2012-06-14 00:23:23 -05:00
2aa9de7f63
Fix the boolean definition
2012-06-13 22:16:59 -05:00
1bdd8dc533
Fix the constant
2012-06-13 22:15:58 -05:00
d48a99146f
Add the migration for new module_details tables
2012-06-13 22:07:56 -05:00
5922ec1f7a
Permissions
2012-06-12 15:20:25 -05:00
7a449bffe2
Permissions
2012-06-12 15:19:41 -05:00
6290bba71b
Merge branch 'master' into feature/vuln-info
2012-06-12 12:41:41 -05:00
21ea539648
Permissions
2012-06-12 11:50:28 -05:00
34ecc7fd18
Adding @schierlm 's AES encryption for Java
...
Tested with and without AES, works as advertised. Set an AESPassword,
get encryptification. Score.
Squashed commit of the following:
commit cca6c5c36cschierlm@gmx.de >
Date: Wed Apr 4 00:45:24 2012 +0200
Do not break other architectures
even when using `setg AESPassword`
commit 422d1e341bschierlm@gmx.de >
Date: Tue Apr 3 21:50:42 2012 +0200
binaries
commit 27368b5675schierlm@gmx.de >
Date: Tue Apr 3 21:49:10 2012 +0200
Add AES support to Java stager
This is compatible to the AES mode of the JavaPayload project.
I'm pretty sure the way I did it in the handlers (Rex::Socket::tcp_socket_pair())
is not the supposed way, but it works :-)
2012-06-11 16:13:25 -05:00
d975d1a236
Add counter caches for host_details, vuln_details, vuln_attempts
2012-06-10 17:15:53 -05:00
beefea6fb9
Merge branch 'master' into feature/vuln-info
2012-06-10 12:54:58 -05:00
9dcb3059f8
MDM update
2012-06-10 03:46:58 -05:00
7c8cb2d79e
Add vuln_attempts, track exploit attempts when a matching vuln exists.
...
This also fixes an issue with report_vuln() from exploited hosts not
setting the service correctly. This introduces a fail_reason method
to the exploit base class, which attempts to determine why an exploit
did not work (closed port, unreachable host, missing page, etc). There
is still quite a bit of work to do around this to finish it up.
2012-06-10 03:15:48 -05:00
4743c9fb33
Add MS12-005 (CVE-2012-0013) exploit
2012-06-10 01:08:28 -05:00
55bdbb6ec9
Merge branch 'master' into feature/vuln-info
2012-06-09 01:37:11 -05:00
e840f7e9ee
Add additional host detail columns and parsers
2012-06-09 00:43:03 -05:00
1be9ce8649
Fixes command parsing in Post::Common
...
The meterpreter API wants arguments in a seperate string (not an array,
mind you) just so it can concatenate them on the server side.
Originally, I worked around that by using Shellwords.shellwords to pull
out the first token. But! Shellwords.shellwords inexplicably and
inexcusably removes backslashes in ways that make it impossible to quote
things on Windows. This commit works around both of those things.
2012-06-07 22:24:59 -06:00
68dd0cd497
Armitage 06.07.12 - improved collaboration performance and fixed two bugs.
2012-06-07 13:16:16 -04:00
49b3c9b0e8
More cleanup related to vuln schema
2012-06-07 04:42:16 -05:00
42c3bedfad
Merge MDM, add migrations, tweak report_vuln
2012-06-07 00:40:26 -05:00
e8af6882eb
Permissions
2012-06-06 20:05:29 -05:00
93741770e2
Added module for CVE-2011-3400
2012-06-05 18:21:55 +02:00
315d68b6f5
Add fix for counter_cache migration to keep from throwing readonly column error.
2012-06-01 13:31:00 -05:00
c5c1e71b32
Add migrations for counter_cache columns to framework.
2012-06-01 12:07:08 -05:00
b5f1554caf
Adding rsmudge's Armitage update
...
Squashed commit of the following:
commit 60be1b2d1drsmudge@gmail.com >
Date: Wed May 30 19:43:07 2012 -0400
Armitage 05.30.12
A small collection of bug fixes.
2012-05-30 19:20:14 -05:00
287d68f304
added module for CVE-2008-0320
2012-05-23 17:14:11 +02:00
3f1a72932e
Merge pull request #401 from rsmudge/armitage
...
Armitage 05.21.12
2012-05-20 20:01:12 -07:00
c14a3e655e
Armitage 05.21.12
...
This release improves collaboration performance and fixes a few Windows specific issues.
2012-05-20 22:54:25 -04:00
fec2ec37f8
Squashed commit of the following:
...
commit fa9b2841cfsyndrowm@gmail.com >
Date: Mon Apr 2 17:00:59 2012 -0600
header files needed to generate solaris and bsd elf executables
commit f03fb2ff97syndrowm@gmail.com >
Date: Mon Apr 2 16:59:46 2012 -0600
add functions to allow generating elf executables for bsd and solaris
[Closes #292 ]
2012-05-18 10:21:34 -06:00
14d8ba00af
Added batik svg java module
2012-05-17 16:48:38 +02:00
a88af1dd36
Merge pull request #391 from rsmudge/armitage
...
add color to armitage's presentation of the Metasploit console
2012-05-16 21:57:43 -07:00
HD Moore