Stephen Fewer 9a4293c445 In with the modified VNC payload which now supports an in memory breakout of session isolation for systems like Vista/2008/7 when the payload is run from a service in session 0 isolation. ...

git-svn-id: file:///home/svn/framework3/trunk@8890 4d416f70-5f16-0410-b530-b9f4589650da

2010-03-24 00:00:05 +00:00

..

byakugan

Update binaries and readme file

2009-11-09 20:16:05 +00:00

dllinject

update comment

2008-05-26 10:27:22 +00:00

exploits

add exploit module for cve-2009-3869

2009-12-17 04:52:40 +00:00

ipwn

Adds auto-execute support (hex edit the binary and change the # * 8192 to a list of commands, separated by newlines, ending with a NULL byte, keeping the same buffer size).

2007-10-23 23:22:27 +00:00

kitrap0d

Fixes #784. Adds .NET server support

2010-01-27 07:02:07 +00:00

meterpreter

Commit all the code for the new 'screenshot' command in the stdapi extension. Screenshot will now work on NT4 - 7 on both x86 and x64 and on newer versions of Windows we can break out of session isolation (e.g. session 0 isolation for services) to screenshot the active desktop (or logon screen) without the need to migrate meterpreter. The majority of the migration code-injection stuff has been refactored out into base_inject.c so it can be shared with the new ps_inject() functionality to inject dlls. The 'ps' command now reports what session each process belongs to (if this is too verbose we can remove it or add a -v verbose switch to the ps command). The 'execute' command can now take a -s switch in order to create a process in a users session under the users privs (assuming you have the privs to do this).

2010-03-11 17:09:55 +00:00

metsvc

crossing fingers, big cr removal batch

2009-12-30 22:24:22 +00:00

msfJavaToolkit

Added STDERR to pure java payload, cleaned up user's view.

2010-01-28 22:53:36 +00:00

osx

Stop breaking tar on OS X, thanks

2009-12-10 22:25:29 +00:00

passivex

Commit the PassiveX DLL updated to build with Visual Studio C++ 2008. Removed some compiler warnings. Use VirtualProtect to make second stage RWX. Use WSASocketA() over socket() for second stage compatibility. Seems to now work with the shell stage (Tested on XPSP2/IE7) but still not working with meterpreter.

2009-11-11 00:39:38 +00:00

shellcode

Commit the updated APC injection stubs. fixes a nasty issue in some edge cases whereby when using APC injection for a process in another session then the current host process the injected APC can cause an access violation in kernel32 during a call the kernel32!CreateThread caused by the APC's host thread not having an initialized Activation Context inside its TEB. We now test for this and create a dummy ActivationContext entry to appease the kernel. This will both improve DLL injection reliability as well as meterpreter migration reliability.

2010-03-11 17:00:19 +00:00

tightvnc

Adding TightVNC's java viewer to external/source. vnc.html works, it just needs to have the path set correctly.

2010-02-25 23:18:42 +00:00

unixasm

Updated unixasm on external source tree

2008-11-17 10:34:26 +00:00

vncdll

In with the modified VNC payload which now supports an in memory breakout of session isolation for systems like Vista/2008/7 when the payload is run from a service in session 0 isolation.

2010-03-24 00:00:05 +00:00

ReflectiveDllInjection_v1.0.zip

Import the Reflective DLL Injection skeleton project

2008-11-05 06:12:49 +00:00