Tim
|
75c571de83
|
Land #8653, add error handling to mipsbe linux reverse tcp stager
|
2017-07-09 19:36:15 +08:00 |
|
Tim
|
cd0c2c213f
|
pedantic tweaks
|
2017-07-09 19:36:03 +08:00 |
|
tkmru
|
2d8a71de6f
|
tab to space
|
2017-07-05 18:22:06 +09:00 |
|
tkmru
|
d02d6826a9
|
fix reverse tcp stager src
|
2017-07-05 17:56:59 +09:00 |
|
tkmru
|
d1f08a80bd
|
add error handling to reverse_tcp on mipsbe
|
2017-07-05 17:50:49 +09:00 |
|
tkmru
|
084b211e9b
|
add x64 stager_sock_reverse src
|
2017-06-25 16:31:37 +09:00 |
|
Tim
|
03116d7933
|
Land #8543, add error handling to ARM linux reverse tcp stager
|
2017-06-18 15:38:16 +08:00 |
|
Tim
|
210a4cb299
|
fix indent
|
2017-06-18 15:35:23 +08:00 |
|
tkmru
|
1773a5f188
|
fix indent
|
2017-06-16 15:57:09 +09:00 |
|
Tim
|
9cf9d22bae
|
fix mmap return cmp
|
2017-06-16 06:26:40 +08:00 |
|
RaMMicHaeL
|
f17b28930d
|
Update executex64.asm
|
2017-06-04 13:18:50 +03:00 |
|
zerosum0x0
|
bdf121e1c0
|
x86 kernels will safely ret instead of BSOD
|
2017-05-17 23:48:14 -06:00 |
|
zerosum0x0
|
4f3a98d434
|
add arch detection to shellcode
|
2017-05-17 23:36:17 -06:00 |
|
zerosum0x0
|
a5c391dae2
|
multi-arch ring0->ring3 shellcode .asm file (work in progress)
|
2017-05-17 23:29:05 -06:00 |
|
Adam Cammack
|
0390ed4d6e
|
Add MIPS O32 Linux support (big and little endian)
|
2016-07-05 11:24:54 -05:00 |
|
Adam Cammack
|
8de508c4e0
|
Add mettle module for ARM
|
2016-07-05 11:24:54 -05:00 |
|
EarthQuake
|
3147553d4f
|
armeb comments modified
|
2016-06-10 19:59:59 +02:00 |
|
EarthQuake
|
26680f58ca
|
Original shellcode added for Linux ARM big endian bind ipv4 tcp
|
2016-06-10 19:19:16 +02:00 |
|
Brent Cook
|
6eda702b25
|
Land #6292, add reverse_tcp command shell for Z/OS (MVS)
|
2015-12-23 14:11:37 -06:00 |
|
Brent Cook
|
5a19caf10a
|
remove temp file
|
2015-12-23 11:42:09 -06:00 |
|
Bigendian Smalls
|
09d63de502
|
Added revshell shellcode source
Put shell_reverse_tcp.s shellcode source for mainframe reverse shell
into external/source/shellcode/mainframe
|
2015-12-01 08:26:42 -06:00 |
|
Matthias Ganz
|
4eaf1ace81
|
Bugfix loading address of library path into rcx
The old code breaks if the payload is executed from a memory area where the 4 most significant bytes are non-zero.
|
2015-11-02 16:56:07 +01:00 |
|
jvazquez-r7
|
9444c8c410
|
Fix #5988, windows x64 stagers
* Also, use mov esi, esi to save an extra byte
* Also, modify the block_recv.asm code, just to have it up to date
|
2015-09-28 15:52:50 -05:00 |
|
rwhitcroft
|
dab4333867
|
updated asm in block
|
2015-03-18 16:07:46 -04:00 |
|
HD Moore
|
b604599c8e
|
Fix comments
|
2015-03-11 21:32:35 -05:00 |
|
HD Moore
|
479a9cc1a9
|
Fix missing stack variables & remove old comment
|
2015-03-11 21:23:27 -05:00 |
|
HD Moore
|
7e3b4017f0
|
Rename and resynced with master, ready for refactoring
|
2015-03-11 14:36:27 -05:00 |
|
Borja Merino
|
991e72a4fa
|
HTTP stager based on WinHttp
|
2015-03-10 13:40:16 -05:00 |
|
Brent Cook
|
5297ebc1a1
|
Merge branch 'master' into land-1396-http_proxy_pstore
Bring things back to the future
|
2015-02-20 08:50:17 -06:00 |
|
Borja Merino
|
9791acd0bf
|
Add stager ipknock shellcode (PR 2)
|
2014-12-27 22:03:45 +01:00 |
|
William Vu
|
e34c37042a
|
Readd block_hidden_bind_tcp.asm
Because stager_hidden_bind_tcp.asm includes it.
|
2014-12-22 11:13:07 -06:00 |
|
Peregrino Gris
|
c0fa8c0e3f
|
Add stager for hidden bind shell payload
|
2014-12-22 17:21:11 +01:00 |
|
HD Moore
|
e3943682a2
|
Improves linux/armle payloads, lands #3315
|
2014-12-13 18:27:14 -06:00 |
|
Michael Schierl
|
e8728943ec
|
Shave off two more bytes for HTTP(s) stagers
|
2014-12-13 11:49:30 -06:00 |
|
Michael Schierl
|
69c938f65a
|
More shellcode golf
|
2014-12-13 11:49:15 -06:00 |
|
Mark Schloesser
|
9e7f6728d0
|
update the single sources with s/SHELLARG/ARGV0/
|
2014-11-19 22:22:08 +01:00 |
|
mschloesser-r7
|
a5aa6b2e78
|
add source for linux/armle/shell_bind_tcp
|
2014-11-19 21:53:23 +01:00 |
|
mschloesser-r7
|
ebc70138f6
|
add source for linux/armle/shell_bind_tcp
|
2014-11-19 21:53:23 +01:00 |
|
mschloesser-r7
|
8331de2265
|
add source for linux/armle/shell_reverse_tcp
|
2014-11-19 21:53:23 +01:00 |
|
Meatballs
|
25ed68af6e
|
Land #3017, Windows x86 Shell Hidden Bind
A bind shellcode that responds as 'closed' unless the client matches the
AHOST ip.
|
2014-06-08 13:49:49 +01:00 |
|
Florian Gaultier
|
bb4e9e2d4d
|
correct error in block service_change_description
|
2014-05-13 16:04:39 +02:00 |
|
Florian Gaultier
|
6332957bd2
|
Try to add SERVICE_DESCRIPTION options to psexec, but it doesn't seem to work...
|
2014-05-13 16:04:39 +02:00 |
|
Florian Gaultier
|
bdbb70ab71
|
up block_service_stopped.asm
|
2014-05-13 16:04:39 +02:00 |
|
Florian Gaultier
|
e269c1e4f1
|
Improve service_block with service_stopped block to cleanly terminate service
|
2014-05-13 16:04:38 +02:00 |
|
Florian Gaultier
|
c43e3cf581
|
Improve block_create_remote_process to point on shellcode everytime
|
2014-05-13 16:04:38 +02:00 |
|
Florian Gaultier
|
25d48b7300
|
Add create_remote_process block, now used in exe_service generation
|
2014-05-13 16:04:38 +02:00 |
|
Florian Gaultier
|
0bdf7904ff
|
Change author of single_service_stuff.asm
|
2014-05-13 16:04:38 +02:00 |
|
Florian Gaultier
|
513f3de0f8
|
new service exe creation refreshed
|
2014-05-13 16:04:36 +02:00 |
|
Tod Beardsley
|
520d1e69c4
|
Rapid7 Comma Inc
After some more discussion with Rapid7's legal fellow.
|
2014-03-13 09:46:20 -05:00 |
|
Tod Beardsley
|
9d4ceaa3a0
|
Let's try to be consistent about Rapid7 Inc.
According to
http://www.sec.gov/Archives/edgar/data/1560327/000156032712000001/0001560327-12-000001.txt
Rapid7 is actually "Rapid7 Inc" not "Rapid7, LLC" any more.
This does not address the few copyright/license statements around
"Metasploit LLC," whatever that is.
|
2014-03-12 11:20:17 -05:00 |
|