 Stephen Fewer
|
fad278566b
|
Add in the elevator dll, used by getsystem for a number of things.
git-svn-id: file:///home/svn/framework3/trunk@8294 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 13:45:31 +00:00 |
|
|
Stephen Fewer
|
e58847009c
|
Add in the new getsystem command to the priv extension.
git-svn-id: file:///home/svn/framework3/trunk@8293 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 13:40:55 +00:00 |
|
|
Stephen Fewer
|
f82b6c5952
|
Update RDI by adding in the LoadRemoteLibraryR function to use RDI to inject into arbitrary processes. Current limitation is it only works on x86->x86 and x64->x64 scenarios, due to the offsets used in parsing the PE file being determined at compile time (e.g. if we compile LoadRemoteLibraryR into an x86 binary it wont be able to load x64 images). Solution is to not rely on compiler for the offset but to do it manually which shouldn't be too much work.
git-svn-id: file:///home/svn/framework3/trunk@8292 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 13:37:55 +00:00 |
|
|
Stephen Fewer
|
9f4332ce60
|
bug fix for the stdapi command rev2self. was not playing nice with new thread token stuff.
git-svn-id: file:///home/svn/framework3/trunk@8291 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 13:33:24 +00:00 |
|
|
Stephen Fewer
|
095b6ee7ed
|
move these macros from base_dispatch.c to common.h as they are useful to use elsewhere.
git-svn-id: file:///home/svn/framework3/trunk@8290 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-28 13:32:16 +00:00 |
|
|
Stephen Fewer
|
4e4a65b9a4
|
Complete overhaul of process migration. Migration across x86->x86, x64->x64, wow64->x64 and x64->wow64 all supported using a number of techniques.
git-svn-id: file:///home/svn/framework3/trunk@8198 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-22 19:46:18 +00:00 |
|
|
Stephen Fewer
|
159e240f3a
|
updated stapi project file.
git-svn-id: file:///home/svn/framework3/trunk@8158 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-19 11:07:21 +00:00 |
|
|
Stephen Fewer
|
757276d70f
|
First cut for improved process listing. Now works well on NT4 and up. One issue with getting the path for x64 processes on an x86 meterpreter.
git-svn-id: file:///home/svn/framework3/trunk@8156 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-19 10:40:02 +00:00 |
|
|
Stephen Fewer
|
0286a67f1e
|
small bug fix to get getuid working on NT4
git-svn-id: file:///home/svn/framework3/trunk@8155 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-19 10:36:12 +00:00 |
|
|
HD Moore
|
42b3a5774d
|
Adds the process username to the ps output (when possible).
git-svn-id: file:///home/svn/framework3/trunk@8056 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-02 03:41:21 +00:00 |
|
|
HD Moore
|
4d7aec7c2d
|
Fixes #745. This commit changes how token manipulation works, adds the steal_token, drop_token, and getprivs commands. Tested on NT 4.0, 2000 SP4, XP SP3, 2003 SP2, Vista, and Windows 7
git-svn-id: file:///home/svn/framework3/trunk@8055 4d416f70-5f16-0410-b530-b9f4589650da
|
2010-01-02 00:35:10 +00:00 |
|
|
HD Moore
|
98f83bbab1
|
Adds reg queryclass
git-svn-id: file:///home/svn/framework3/trunk@8046 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-31 15:52:30 +00:00 |
|
|
HD Moore
|
68aafc8e13
|
Fixes #658 by adding a 250ms sleep to the dispatch of the close call.
git-svn-id: file:///home/svn/framework3/trunk@7934 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-21 19:53:10 +00:00 |
|
|
Stephen Fewer
|
be588716c5
|
Bug fix for meterpreter on NT4 (Tested on NT4.0 SP6). Add a function thread_open() in thread.c to wrap the use kernel32!OpenThread and ntdll!NtOpenThread for backwards compatibility.
git-svn-id: file:///home/svn/framework3/trunk@7806 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 18:12:51 +00:00 |
|
|
HD Moore
|
6da0fda5ed
|
Updated meterpreter binaries with a slight change to the thread schedule (solves a looping problem when the socket is dead).
git-svn-id: file:///home/svn/framework3/trunk@7793 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-10 05:42:47 +00:00 |
|
|
HD Moore
|
ff19b649f3
|
See #662. This should fix most of the meterpreter-side issues with sockets, there is still a second piece of this which is unflushed data on the local forwards from the ruby code.
git-svn-id: file:///home/svn/framework3/trunk@7761 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 22:08:06 +00:00 |
|
|
HD Moore
|
792724c3f3
|
Cleanups to the socket code, its still not perfect, but much more usable now
git-svn-id: file:///home/svn/framework3/trunk@7750 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-08 14:52:07 +00:00 |
|
|
Stephen Fewer
|
4f8cfc27d4
|
Replace the use of Critical Sections for locking with Mutex's (thread.c). This appears to resolve a deadlock issue with OpenSSL on some Windows systems. This commit resolves a bug in interactive processes where an interactive waiter thread will chew cpu due to a tight loop introduced by anonymous pipes not blocking (process.c). Dynamic lock creation for OpenSSL has been re-enabled should a future version of OpenSSL require it, AFAIK the current version used, v0.8.9, does not use dynamic lock creation (server_setup.c). Channels have been given locks to help synchronize concurrent access to a single channel.
git-svn-id: file:///home/svn/framework3/trunk@7732 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 13:04:41 +00:00 |
|
|
HD Moore
|
dfa0d155fc
|
See #607. Switch sniffer code to use mutexes
git-svn-id: file:///home/svn/framework3/trunk@7728 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-07 05:19:46 +00:00 |
|
|
Stephen Fewer
|
a273c9f07c
|
Initial commit of the multi-threaded meterpreter.
git-svn-id: file:///home/svn/framework3/trunk@7698 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-12-04 17:37:21 +00:00 |
|
|
HD Moore
|
e5e89906d0
|
Switch the meterpreter to SSLv3 and try to generate a slightly more realistic CN for the certificate. The goal is to work through a wider range of inline proxies.
git-svn-id: file:///home/svn/framework3/trunk@7311 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-31 20:44:23 +00:00 |
|
|
HD Moore
|
5234fe8ff8
|
Fixes 416. Adds the rm/del commands to meterpreter, fixes build problems triggered by the POSIX code merge
git-svn-id: file:///home/svn/framework3/trunk@7291 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-27 02:31:07 +00:00 |
|
|
HD Moore
|
276a3f8052
|
Use _WIN32 instead of __WIN32__ to be consistent
git-svn-id: file:///home/svn/framework3/trunk@7290 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-27 01:13:35 +00:00 |
|
|
HD Moore
|
7d7c565a37
|
Merge in the POSIX stdapi extension, still some work left to finish
git-svn-id: file:///home/svn/framework3/trunk@7266 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-10-26 04:34:20 +00:00 |
|
|
HD Moore
|
bf5068f6b1
|
Fixes #288 and #320. This should fix the BSoD issue with the sniffer module (other than the mac filter change, this matches the vendor's example) and confirmed that the keyscan_dump fix works
git-svn-id: file:///home/svn/framework3/trunk@7066 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-26 16:26:05 +00:00 |
|
|
et
|
a89914d448
|
Finally screenshot capture. BMP at this time
git-svn-id: file:///home/svn/framework3/trunk@7063 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-26 04:05:09 +00:00 |
|
|
Stephen Fewer
|
1937839e79
|
Patch meterpreter's sysinfo command to resolve the system language and architecture.
git-svn-id: file:///home/svn/framework3/trunk@7028 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-10 13:09:48 +00:00 |
|
|
Stephen Fewer
|
36d60d5d12
|
Commit the x64 build of the meterpreter incognito extension.
git-svn-id: file:///home/svn/framework3/trunk@7009 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-07 09:25:25 +00:00 |
|
|
Stephen Fewer
|
ff9efacffa
|
Commit the x64 build of the meterpreter priv extension.
git-svn-id: file:///home/svn/framework3/trunk@7008 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-07 09:17:29 +00:00 |
|
|
Stephen Fewer
|
402608ec6f
|
Commit the openssl x64 static libraries required for compilation. These are freshly built using the latest stable release (openssl-0.9.8k). Instructions for re-building the libraries also included.
git-svn-id: file:///home/svn/framework3/trunk@7001 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-04 01:58:17 +00:00 |
|
|
Stephen Fewer
|
5dee5819b1
|
Commit the source code for the cross compilable reflective dll injection module. Some minor modifications to the stdapi extension were also required. All the projects (.vcproj) now have an x64 debug/release target as well as an x86 counterpart.
git-svn-id: file:///home/svn/framework3/trunk@7000 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-09-04 01:53:58 +00:00 |
|
|
HD Moore
|
87ea275a17
|
Fixes #299 - corrects the win32 build environment and source to build properly again
git-svn-id: file:///home/svn/framework3/trunk@6987 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-30 01:57:25 +00:00 |
|
|
HD Moore
|
a811f28535
|
Patch from snfernandez to fix posix extension loading
git-svn-id: file:///home/svn/framework3/trunk@6954 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-12 23:15:08 +00:00 |
|
|
HD Moore
|
41121f5870
|
Major merge of Meterpreter POSIX codebase from JR, Win32 projects may need a few more fixes to work properly
git-svn-id: file:///home/svn/framework3/trunk@6949 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-10 02:02:16 +00:00 |
|
|
HD Moore
|
d5ffcc1907
|
fix the posix build (patch from JR)
git-svn-id: file:///home/svn/framework3/trunk@6945 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-09 17:28:44 +00:00 |
|
|
HD Moore
|
79df0ab405
|
Merge in JR's ulibc code
git-svn-id: file:///home/svn/framework3/trunk@6944 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-09 02:27:52 +00:00 |
|
|
HD Moore
|
da32f1bdea
|
Updated meterpreter code/binaries to scrub memory after use, works around Peter's memoryze signatures from BH/DC 2009
git-svn-id: file:///home/svn/framework3/trunk@6942 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-08 14:22:32 +00:00 |
|
|
HD Moore
|
9a1e07c4f3
|
First round of posix meterpreter commits from jr
git-svn-id: file:///home/svn/framework3/trunk@6934 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-08-01 14:21:58 +00:00 |
|
|
HD Moore
|
c173bff563
|
Updated reflective stuff to match the new hashing function
git-svn-id: file:///home/svn/framework3/trunk@6923 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-31 17:57:51 +00:00 |
|
|
HD Moore
|
5577fac39e
|
Closes #297. Switches to the dnet headers for the sniffer packet decodes
git-svn-id: file:///home/svn/framework3/trunk@6822 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-17 19:39:31 +00:00 |
|
|
HD Moore
|
2c4acca92a
|
Fixes #296. Removes polarssl references
git-svn-id: file:///home/svn/framework3/trunk@6811 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-16 16:00:29 +00:00 |
|
|
HD Moore
|
975093efca
|
Updated VC++ project files to fix the directory paths/includes for OpenSSL
git-svn-id: file:///home/svn/framework3/trunk@6774 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 03:14:20 +00:00 |
|
|
HD Moore
|
148ca687f5
|
Updated libraries and source code now using OpenSSL
git-svn-id: file:///home/svn/framework3/trunk@6773 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 03:10:39 +00:00 |
|
|
HD Moore
|
6b0974f618
|
Goodbye PolarSSL (your license stinks).
git-svn-id: file:///home/svn/framework3/trunk@6772 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-13 03:03:53 +00:00 |
|
|
HD Moore
|
e8784d68fb
|
Fixes up the sniffer to handle large packet captures better, fixes a regression in the sysinfo command.
git-svn-id: file:///home/svn/framework3/trunk@6768 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-12 13:17:37 +00:00 |
|
|
HD Moore
|
f76d73a823
|
Free packet memory when the capture is stopped
git-svn-id: file:///home/svn/framework3/trunk@6765 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-11 18:19:42 +00:00 |
|
|
HD Moore
|
4989f9bdbe
|
Fixes a bug where if the sniffer SDK could not initialize, it would still be treated as initialized the next time it was checked.
git-svn-id: file:///home/svn/framework3/trunk@6764 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-11 17:52:40 +00:00 |
|
|
HD Moore
|
645ca020e9
|
Fixes a memory corruption issue with the SSL file descriptor (was using a stack reference instead of the Remote->fd reference), adds the source code sans the Packet SDK for the sniffer module
git-svn-id: file:///home/svn/framework3/trunk@6763 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-11 17:32:50 +00:00 |
|
|
HD Moore
|
608ca7aae8
|
This patch removes some of the meterpreter compiler warnings and fixes migration over SSL
git-svn-id: file:///home/svn/framework3/trunk@6761 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-09 22:44:33 +00:00 |
|
|
HD Moore
|
7b516e06fe
|
Transfer the migration payload over SSL, still working on a crash bug after migration completes
git-svn-id: file:///home/svn/framework3/trunk@6756 4d416f70-5f16-0410-b530-b9f4589650da
|
2009-07-09 03:22:10 +00:00 |
|