Joshua Drake 6d1e7bdaa5 big commit - lots of cmdstager changes ...

created 4 cmd stagers (instead of just one): CmdStagerVBS, CmdStagerDebugAsm, CmdStagerDebugWrite, CmdStagerTFTP
created a TFTPServer mixin
created Msf::Exploit::EXE mixin to generate executables
updated all uses of CmdStager to use CmdStagerVBS for the time being
add exploit for cve-2001-0333 using CmdStagerTFTP
updated tftp server to wait for transfers to finish (up to 30 seconds) before shutting down
write debug.exe stager stub in 16-bit assembly (used in CmdStagerDebugAsm)


git-svn-id: file:///home/svn/framework3/trunk@9375 4d416f70-5f16-0410-b530-b9f4589650da

2010-05-26 22:39:56 +00:00

..

arkeia.rb

Another large number of warnings fixed by Yoann Guillot

2009-10-25 17:18:23 +00:00

browser_autopwn.rb

allow the browser_autopwn mixin access to exploit modules' Rank constants. see 628

2009-12-15 07:21:17 +00:00

brute.rb

Code cleanups

2008-10-19 21:03:39 +00:00

brutetargets.rb

Remove "#{xxx.to_s}" redundancies ('s/\(#{[^}]*\)\.to_s}/\1}/g')

2008-12-19 07:11:08 +00:00

capture.rb

Fixes #1109 -- ARP is now less picky about ARP replies, but does conform to normal networking standards.

2010-03-16 16:04:02 +00:00

cmdstager_debug_asm.rb

big commit - lots of cmdstager changes

2010-05-26 22:39:56 +00:00

cmdstager_debug_write.rb

big commit - lots of cmdstager changes

2010-05-26 22:39:56 +00:00

cmdstager_tftp.rb

big commit - lots of cmdstager changes

2010-05-26 22:39:56 +00:00

cmdstager_vbs.rb

big commit - lots of cmdstager changes

2010-05-26 22:39:56 +00:00

cmdstager.rb

big commit - lots of cmdstager changes

2010-05-26 22:39:56 +00:00

db2.rb

See #726. Cleaning up my gross whitespace.

2010-01-28 23:08:39 +00:00

dcerpc_epm.rb

Fixes #441. Unpack the version in a way that works with 1.9

2009-11-02 15:09:54 +00:00

dcerpc_lsa.rb

Fixes #441. Unpack the version in a way that works with 1.9

2009-11-02 15:09:54 +00:00

dcerpc_mgmt.rb

Fixes #441. Unpack the version in a way that works with 1.9

2009-11-02 15:09:54 +00:00

dcerpc.rb

Adds the check() method and scanner module to ms08-067, massively upgrades the smb/version scanner, with better SP detection and remote language pack detection.

2008-11-03 09:17:08 +00:00

dcerpc.rb.ut.rb

Fixes #441. Unpack the version in a way that works with 1.9

2009-11-02 15:09:54 +00:00

dect_coa.rb

remove executable property

2010-05-26 01:14:46 +00:00

dialup.rb

Parenthesized arguments

2009-07-08 20:51:47 +00:00

egghunter.rb

grammar!

2010-05-26 15:38:13 +00:00

exe.rb

big commit - lots of cmdstager changes

2010-05-26 22:39:56 +00:00

fileformat.rb

Fix up the fileformat mixin; some slightly wrong ruby and an extra \n at the end of the generated files

2009-03-14 01:28:59 +00:00

fmtstr.rb

grammar!

2010-05-26 15:40:12 +00:00

ftp.rb

handle failed logins - fixes #1014

2010-03-05 17:05:12 +00:00

ftpserver.rb

Fixes #434. Always use Timeout.timeout() -- on Ruby 1.9 this results in the Timeout::TimeoutError exception vs RuntimeError

2009-11-02 18:14:57 +00:00

http.rb

Fixes #2002. Needed to work with some pipelining to get this all to work right, but it seems to function now pretty well -- if the target takes Basic, do basic, if the target takes NTLM, do NTLM. Should implement Digest too, but I don't think hardly anyone uses that.

2010-05-22 17:58:01 +00:00

imap.rb

Add pop3/imap4 scanners

2010-02-26 19:06:26 +00:00

ip.rb

comment typo

2009-07-15 06:40:23 +00:00

java.rb

warn and remove commas from CERTCN to prevent a crash bug in Rjb's keytool, fixes 1543

2010-05-07 18:19:50 +00:00

kernel_mode.rb

Another large number of warnings fixed by Yoann Guillot

2009-10-25 17:18:23 +00:00

lorcon2.rb

Add channel support back in, patch from dragorn

2009-11-09 19:52:18 +00:00

lorcon.rb

Remove "#{xxx.to_s}" redundancies ('s/\(#{[^}]*\)\.to_s}/\1}/g')

2008-12-19 07:11:08 +00:00

mixins.rb

big commit - lots of cmdstager changes

2010-05-26 22:39:56 +00:00

mssql_commands.rb

Merge in David Kennedy's new MSSQL changes (centralized SQL query mixin)

2009-10-23 19:15:32 +00:00

mssql.rb

execute xp_cmdshell from master explicitly

2010-03-04 23:55:04 +00:00

mysql.rb

use the authbrute mixin

2010-01-18 22:22:22 +00:00

ndmp.rb

Another large number of warnings fixed by Yoann Guillot

2009-10-25 17:18:23 +00:00

oracle.rb

i'm tired of support requests for oci libs not being installed

2010-03-24 19:02:38 +00:00

pdf_parse.rb

Fixes #452. Solves a number of crashes caused by Regexp.new() on 1.9 without an explicit language specified

2009-11-02 17:09:13 +00:00

pop2.rb

Another large number of warnings fixed by Yoann Guillot

2009-10-25 17:18:23 +00:00

postgres.rb

Adding OpenSoliaris Postgres fingerprints.

2010-02-23 14:09:21 +00:00

seh.rb

grammar!

2010-05-26 15:38:13 +00:00

seh.rb.ut.rb

Code cleanups

2008-10-19 21:03:39 +00:00

smb.rb

Change default to 445, its 2010

2010-03-27 21:00:28 +00:00

smtp_deliver.rb

Updates the autopwn matching algorithm to use multiple ports and service names

2009-10-28 18:04:50 +00:00

smtp.rb

Fix up the stored banner for SMTP

2010-02-26 18:47:48 +00:00

snmp.rb

Oops

2009-05-08 20:27:40 +00:00

sunrpc.rb

Fixes #2004. Add back the timeout argument to sunrpc_call method.

2010-05-24 00:57:18 +00:00

tcp.rb

Move away from Kernel.select in exchange for IO.select, solves some issues with windows compatibility

2010-05-20 20:42:17 +00:00

tcp.rb.ut.rb

Code cleanups

2008-10-19 21:03:39 +00:00

telnet.rb

Fixes the handling for telnet services when the server is "busy" -- this is common wit HP JetDirect servers, where the server will respond with a busy message up to several seconds after the last connection logged off. While this does mean that credential tests will be skipped, they will at least not be scored incorrectly as false postives.

2010-03-16 18:45:50 +00:00

tftp.rb

big commit - lots of cmdstager changes

2010-05-26 22:39:56 +00:00

tns.rb

adds support for a 10g packet given the right connect string.

2009-08-05 00:46:35 +00:00

udp.rb

Improvements to the cleanup process, close sockets properly for exploits and auxiliary

2010-05-01 16:26:24 +00:00