jvazquez-r7
cf63e09188
Add templates for SMB_FIND_FILE_FULL_DIRECTORY_INFO_HDR and SMB_FIND_FILE_NAMES_INFO_HDR
2015-02-20 09:17:51 -06:00
jvazquez-r7
f2405a5dc0
Create SMB_FIND_FILE_BOTH_DIRECTORY_INFO_HDR_LENGTH constant
2015-02-20 00:35:26 -06:00
jvazquez-r7
571dffa317
Create template for SMB_FIND_FILE_BOTH_DIRECTORY_INFO
2015-02-20 00:22:33 -06:00
jvazquez-r7
94ad64546c
Create TRANS2_PARAMETERS template
2015-02-19 23:16:52 -06:00
jvazquez-r7
b24b94ddd3
Do first cleanup of find_first2 handlers
2015-02-19 19:08:56 -06:00
jvazquez-r7
74c43f5527
Delete more unused local variables
2015-02-19 14:39:55 -06:00
jvazquez-r7
1d5a977280
Delete a lot of verbose prints
2015-02-19 14:37:16 -06:00
jvazquez-r7
0940ceae75
Delete unused local variables
2015-02-19 14:26:46 -06:00
jvazquez-r7
c38c3519d8
Delete more unused code
2015-02-19 14:24:18 -06:00
jvazquez-r7
7487f9611b
Do some extra prints
2015-02-19 14:11:27 -06:00
jvazquez-r7
d9b9de8e89
Delete unused code
2015-02-19 13:16:24 -06:00
jvazquez-r7
5510000bf1
Use constant for FLAGS2
2015-02-19 13:02:50 -06:00
jvazquez-r7
392137292e
Old delete register prototype comment
2015-02-19 13:00:12 -06:00
jvazquez-r7
39ceb5b90f
Update smb_error on Exploit::Remote::SMB::Server
2015-02-19 12:10:28 -06:00
jvazquez-r7
b85324435e
Don't waste instance variables
2015-02-18 16:42:52 -06:00
jvazquez-r7
91d9d93fec
Handle instance variables correctly
2015-02-18 16:35:20 -06:00
jvazquez-r7
438b38dfe4
Use Rex::Text
2015-02-18 16:20:47 -06:00
jvazquez-r7
a815858644
Fix setup
2015-02-18 16:19:05 -06:00
jvazquez-r7
06dfa6b5be
Fix initialize
2015-02-18 13:56:06 -06:00
jvazquez-r7
62c08094fd
Delete the old FileServer mixin
2015-02-18 13:54:24 -06:00
jvazquez-r7
9068397fff
Delete code commented by myself
2015-02-18 13:47:05 -06:00
jvazquez-r7
a446df95b2
Make Msf::Exploit::Remote::SMB::Server::Share a mixin
2015-02-18 13:45:48 -06:00
jvazquez-r7
415c671416
Move Rex code, we'll redesign as mixin
2015-02-18 13:44:02 -06:00
jvazquez-r7
ff4aa1f9da
Require FileServer mixin
2015-02-18 11:43:13 -06:00
jvazquez-r7
f960a77754
Solve merging conflicts
2015-02-18 11:36:47 -06:00
sinn3r
8ce1db5081
Fix #4783 , raise exception if the payload arch is incompatible
...
Fix #4783
2015-02-17 21:47:17 -06:00
Matthew Hall
547d4d1950
Merge with master
2015-02-17 17:23:19 +00:00
Matthew Hall
9e2a483977
Add example usage to Msf::Exploit::Remote::SMBFileServer documentation
2015-02-17 17:23:18 +00:00
Matthew Hall
cec817902f
Add yardoc documentation for Msf::Exploit::Remote::SMBFileServer
2015-02-17 17:23:18 +00:00
Matthew Hall
5cf8833697
Tidy lib/msf/core/exploit/smb.rb following feedback from jlee-r7.
...
* Doc comments wrap at 78 chars to follow yardoc convention
* Remove unused :server and SERVER vals
* Use Utils class directly
* Stop server within an ensure
* Change SRVHOST to an OptAddress
2015-02-17 17:23:18 +00:00
Matthew Hall
8beed5652d
Implement SMBFileServer mixin.
...
In order to accomplish remote file injection (e.g. DLL) this module
emulates an SMB service process to allow clients to load a file from a
network share.
This commit implements the SMBFileServer exploit module utilising the
::Rex::Proto::SMB::Server module to export the "start_smb_server"
function.
Utilising the module (example):
include Msf::Exploit::Remote::SMBFileServer
exe = generate_payload_dll
@exe_file = rand_text_alpha(7) + ".dll"
@share = rand_text_alpha(5)
my_host = (datastore['SRVHOST'] == '0.0.0.0') ?
Rex::Socket.source_address : datastore['SRVHOST']
@unc = "\\#{my_host}\#{@share}\#{@exe_file}"
start_smb_server(@unc, exe, @exe_file)
// Inject DLL
handle
A separate commit will provide a sample implementation of utilising this
module within a generic webserver DLL injection exploit:
./exploits/windows/http/generic_http_dllinject.rb
2015-02-17 17:23:18 +00:00
jvazquez-r7
2c842ee6d7
Fix namespaces on Server
2015-02-13 17:34:55 -06:00
jvazquez-r7
9b7bbc220b
Fix namespaces on Client
2015-02-13 17:33:41 -06:00
jvazquez-r7
46c6ac9ca1
Redefine namespaces and requires
2015-02-13 17:09:06 -06:00
jvazquez-r7
df1daff673
Move clients
2015-02-13 17:07:03 -06:00
jvazquez-r7
067aadf3a4
Fix namespaces
2015-02-13 17:05:46 -06:00
jvazquez-r7
f1ab7ed343
Mode smb.rb
2015-02-13 17:04:55 -06:00
jvazquez-r7
7367402bf1
Add requires
2015-02-13 17:03:48 -06:00
jvazquez-r7
ccabf30531
Move smb_server.rb
2015-02-13 16:58:19 -06:00
David Maloney
72878e0c14
fixes bug with smtp header order
...
SMTP servers that support pipelining will not accept any
commands other than MAILFROM and RCPTTO before the DATA
command. We were sending Date and Subject before Data
which would cause some mailservers to suddenly drop
the connection refusing to send the mail.
MSP-12133
2015-02-12 14:13:39 -06:00
Meatballs
33560a2657
Refactor Msf::Exploit::Powershell to Rex::Powershell to allow for
...
msfvenom usage.
2015-02-10 20:53:46 +00:00
Tod Beardsley
0a42ac947a
Land #4737 , fix Socket Context usages
2015-02-09 17:34:03 -06:00
Spencer McIntyre
2a3855c5af
Skip the psh prepend sleep time error when it is 0
2015-02-09 14:20:04 -05:00
HD Moore
985641dbc4
Add missing Context, fixes #4723
2015-02-07 11:27:57 -06:00
Spencer McIntyre
4e0a62cb3a
Land #4664 , MS14-070 Server 2003 tcpip.sys priv esc
2015-02-05 18:49:15 -05:00
Spencer McIntyre
5a39ba32f6
Make the ret instruction for token stealing optional
2015-02-05 14:00:38 -05:00
sinn3r
434bca0b27
Land #4613 , auxiliary/server/capture/smb credential creation
2015-02-04 22:45:36 -06:00
James Lee
1fbed1dcfc
Autoload instead of require
2015-01-30 15:42:16 -06:00
James Lee
062529ce3b
Move HttpServer::HTML into its own file
2015-01-30 15:24:15 -06:00
James Lee
3572ce9a37
Break PHPInclude into its own file
2015-01-30 15:16:54 -06:00