adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
9f02523ab9cd44d860162cc69e09e89c8fb3fea2
metasploit-gs/modules/exploits/windows/browser
T
History
Joshua Drake 8e5cf31e9a big exe/dll update, see #2017 
NOTE: These changes specifically affect payload encoding via RPC, "use
payload", and msfencode

1. consolidate user-specified exe generation routine (now
Msf::Util::EXE.to_executable_fmt)
2. supported format types are now queried/checked using arrays
3. cleaned up and standardized exe option passing
4. rename data store options for EXE mixin
5. add generate_payload_exe_service for psexec/smb_relay
6. reworked default template handling in Msf::Util::EXE
  a. added template search path option (not used if template includes
a path separator)
  b. "fallback" flag to enable using default if specified file doesn't
exist
7. added Msf::Util::EXE.to_win64pe_dll
8. improved error messages from exe generation



git-svn-id: file:///home/svn/framework3/trunk@10404 4d416f70-5f16-0410-b530-b9f4589650da
2010-09-21 00:13:30 +00:00
..
adobe_cooltype_sing.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
adobe_flashplayer_newfunction.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
adobe_flatedecode_predictor02.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
adobe_geticon.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
adobe_jbig2decode.rb
various fixes, mostly consistency changes to disclosure dates
2010-06-15 07:18:08 +00:00
adobe_media_newplayer.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
adobe_utilprintf.rb
more cleanups
2010-05-03 17:13:09 +00:00
aim_goaway.rb
add lots of disclosure dates from OSVDB
2010-07-03 03:13:45 +00:00
amaya_bdo.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
aol_ampx_convertfile.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
aol_icq_downloadagent.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
apple_itunes_playlist.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
apple_quicktime_marshaled_punk.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
apple_quicktime_rtsp.rb
fix a couple more silly regex mishaps
2010-05-04 23:09:32 +00:00
apple_quicktime_smil_debug.rb
add exploit for cve-2010-1799
2010-08-13 23:11:23 +00:00
ask_shortformat.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
athocgov_completeinstallation.rb
add missing CVE/OSVDB references, plenty still missing *wink wink*
2010-07-02 00:10:51 +00:00
autodesk_idrop.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
aventail_epi_activex.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
awingsoft_web3d_bof.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
awingsoft_winds3d_sceneurl.rb
convert remaining EXE generation to use the mixin, fixes #2017
2010-09-20 04:38:13 +00:00
baofeng_storm_onbeforevideodownload.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
barcode_ax49.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
ca_brightstor_addcolumn.rb
various fixes, mostly consistency changes to disclosure dates
2010-06-15 07:18:08 +00:00
chilkat_crypt_writefile.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
communicrypt_mail_activex.rb
increase ranking
2010-07-26 19:30:02 +00:00
creative_software_cachefolder.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
dxstudio_player_exec.rb
big commit - lots of cmdstager changes
2010-05-26 22:39:56 +00:00
ea_checkrequirements.rb
added refs. I think all the auxiliary and exploit modules should now be covered.
2010-05-13 16:53:50 +00:00
ebook_flipviewer_fviewerloading.rb
various fixes, mostly consistency changes to disclosure dates
2010-06-15 07:18:08 +00:00
enjoysapgui_preparetoposthtml.rb
various fixes, mostly consistency changes to disclosure dates
2010-06-15 07:18:08 +00:00
facebook_extractiptc.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
gom_openurl.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
greendam_url.rb
finished periodic missing CVE reference check (hint vulns w/o CVEs here!)
2010-03-10 05:58:01 +00:00
hp_loadrunner_addfile.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
hp_loadrunner_addfolder.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
hpmqc_progcolor.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
hyleos_chemviewx_activex.rb
add 3 easy ftp server exploits, 1 chemview activex
2010-07-27 02:25:15 +00:00
ibmegath_getxmlvalue.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
ibmlotusdomino_dwa_uploadmodule.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
ie_createobject.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
ie_iscomponentinstalled.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
ie_unsafe_scripting.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
java_ws_arginject_altjvm.rb
big exe/dll update, see #2017
2010-09-21 00:13:30 +00:00
juniper_sslvpn_ive_setupdll.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
kazaa_altnet_heap.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
logitechvideocall_start.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
lpviewer_url.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
macrovision_downloadandexecute.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
macrovision_unsafe.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
mcafee_mcsubmgr_vsprintf.rb
add lots of disclosure dates from OSVDB
2010-07-03 03:13:45 +00:00
mcafeevisualtrace_tracetarget.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
mirc_irc_url.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
ms03_020_ie_objecttype.rb
see #684, adds checksum support, updates modules to use it, fixes some wfs_delay/WfsDelay issues
2010-08-25 20:55:37 +00:00
ms06_001_wmf_setabortproc.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
ms06_013_createtextrange.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
ms06_055_vml_method.rb
add lots of disclosure dates from OSVDB
2010-07-03 03:13:45 +00:00
ms06_057_webview_setslice.rb
add lots of disclosure dates from OSVDB
2010-07-03 03:13:45 +00:00
ms06_067_keyframe.rb
style compliance fixes
2010-07-16 02:33:25 +00:00
ms06_071_xml_core.rb
add lots of disclosure dates from OSVDB
2010-07-03 03:13:45 +00:00
ms07_017_ani_loadimage_chunksize.rb
move riff support from ani_loadimage browser sploit to mixin
2010-08-12 16:56:41 +00:00
ms08_041_snapshotviewer.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
ms08_053_mediaencoder.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
ms08_070_visual_studio_msmask.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
ms08_078_xml_corruption.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
ms09_002_memory_corruption.rb
stop using some older exploits in browser_autopwn in favor of ie_behaviors which works on more versions
2010-07-12 02:51:50 +00:00
ms09_043_owc_htmlurl.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
ms09_043_owc_msdso.rb
style compliance fixes
2010-07-20 23:28:47 +00:00
ms09_072_style_object.rb
stop using some older exploits in browser_autopwn in favor of ie_behaviors which works on more versions
2010-07-12 02:51:50 +00:00
ms10_002_aurora.rb
stop using some older exploits in browser_autopwn in favor of ie_behaviors which works on more versions
2010-07-12 02:51:50 +00:00
ms10_018_ie_behaviors.rb
stop using some older exploits in browser_autopwn in favor of ie_behaviors which works on more versions
2010-07-12 02:51:50 +00:00
ms10_018_ie_tabular_activex.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
ms10_022_ie_vbscript_winhlp32.rb
convert remaining EXE generation to use the mixin, fixes #2017
2010-09-20 04:38:13 +00:00
ms10_042_helpctr_xss_cmd_exec.rb
rename generate_exe -> generate_payload_exe
2010-09-20 04:37:25 +00:00
ms10_046_shortcut_icon_dllloader.rb
big exe/dll update, see #2017
2010-09-21 00:13:30 +00:00
msvidctl_mpeg2.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
mswhale_checkforupdates.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
nctaudiofile2_setformatlikesample.rb
oops, broke the tree
2010-07-03 01:38:15 +00:00
nis2004_antispam.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
nis2004_get.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
novelliprint_datetime.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
novelliprint_executerequest.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
novelliprint_getdriversettings.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
novelliprint_target_frame.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
oracle_dc_submittoexpress.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
orbit_connecting.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
persits_xupload_traversal.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
realplayer_console.rb
various fixes, mostly consistency changes to disclosure dates
2010-06-15 07:18:08 +00:00
realplayer_import.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
realplayer_smil.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
roxio_cineplayer.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
sapgui_saveviewtosessionfile.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
softartisans_getdrivename.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
sonicwall_addrouteentry.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
symantec_altirisdeployment_downloadandinstall.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
symantec_altirisdeployment_runcmd.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
symantec_appstream_unsafe.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
symantec_backupexec_pvcalendar.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
symantec_consoleutilities_browseandsavefile.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
systemrequirementslab_unsafe.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
trendmicro_officescan.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
tumbleweed_filetransfer.rb
various fixes, mostly consistency changes to disclosure dates
2010-06-15 07:18:08 +00:00
ultraoffice_httpupload.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
verypdf_pdfview.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
webdav_dll_hijacker.rb
big exe/dll update, see #2017
2010-09-21 00:13:30 +00:00
webex_ucf_newobject.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00
winamp_playlist_unc.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
winamp_ultravox.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
windvd7_applicationtype.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
winzip_fileview.rb
big module whitespace/formatting cleanup pass
2010-04-30 08:40:19 +00:00
xmplay_asx.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
yahoomessenger_fvcom.rb
stop perpetuating the ambiguity!
2010-05-09 17:45:00 +00:00
yahoomessenger_server.rb
various fixes, mostly consistency changes to disclosure dates
2010-06-15 07:18:08 +00:00
zenturiprogramchecker_unsafe.rb
tons of indentation fixes, some other style tweaks
2010-09-20 08:06:27 +00:00