Joshua Drake 77bc5cf6cd Big VNC update: ...

* Created Rex::Proto::RFB
 * Updated vnc_none_auth scanner to use Rex::Proto::RFB::Client
 * Added vnc_login (refactored from carstein)
 * Created an initial vnc_passwords.txt file
 * Removed cipher/des.rb - incompatible license
 * Updated getvncpw script to use new Rex::Proto::RFB::Cipher.decrypt




git-svn-id: file:///home/svn/framework3/trunk@11033 4d416f70-5f16-0410-b530-b9f4589650da

2010-11-14 03:37:45 +00:00

..

db2_default_pass.txt

add db2admin/db2admin to the default wordlist.

2010-04-08 23:16:28 +00:00

db2_default_user.txt

add db2admin/db2admin to the default wordlist.

2010-04-08 23:16:28 +00:00

db2_default_userpass.txt

add db2admin/db2admin to the default wordlist.

2010-04-08 23:16:28 +00:00

hci_oracle_passwords.csv

support for McKesson Horizon Clinical Infrastructure Oracle passwords for oracle login_brute http://seclists.org/fulldisclosure/2009/Oct/261

2009-10-21 23:32:44 +00:00

http_default_pass.txt

Add a quick and dirty HTTP scanner

2010-03-24 20:28:09 +00:00

http_default_userpass.txt

Some extra defaults

2010-03-25 21:58:24 +00:00

http_default_users.txt

Add a quick and dirty HTTP scanner

2010-03-24 20:28:09 +00:00

namelist.txt

Applied Patch provided by Rob Fuller Mubix

2010-03-15 00:37:45 +00:00

oracle_default_hashes.txt

updated oraenum.rb with an additional wordlist.

2009-09-29 21:58:01 +00:00

oracle_default_passwords.csv

added auxiliary module login_brute.rb and oracle_default_passwords.csv.

2009-07-17 14:20:22 +00:00

postgres_default_pass.txt

Fixes #769 by implementing a brute force module for Postgres. A couple notes: If you guess wrong at the database name, you still can try to login with a username and password -- you'll get a successful auth, but then get disconnected. So, that's pretty neat.

2010-02-03 21:45:13 +00:00

postgres_default_user.txt

Adding reporting to postgres_login. Logging version info more verbosely for authenticated login, since it's way useful.

2010-02-08 17:35:58 +00:00

postgres_default_userpass.txt

Fixes #769 by implementing a brute force module for Postgres. A couple notes: If you guess wrong at the database name, you still can try to login with a username and password -- you'll get a successful auth, but then get disconnected. So, that's pretty neat.

2010-02-03 21:45:13 +00:00

root_userpass.txt

add addtl root passwords from xanda, fixes #2354

2010-08-18 23:09:55 +00:00

rpc_names.txt

add tebo's rpc wordlist

2009-12-24 00:19:00 +00:00

sid.txt

Adds hsagent

2010-06-04 14:16:40 +00:00

snmp.txt

Add a SNMP brute force scanner

2009-03-29 03:09:04 +00:00

tftp.txt

Adds antoine's tftp brute forcer

2009-06-17 20:52:47 +00:00

tomcat_mgr_default_pass.txt

new tomcat_mgr_login aux module

2010-01-22 20:31:51 +00:00

tomcat_mgr_default_userpass.txt

add xampp default user/pass

2010-11-06 23:50:12 +00:00

tomcat_mgr_default_users.txt

add default username/passwords for IBM Cognos Express Tomcat Manager

2010-02-04 20:34:55 +00:00

unix_passwords.txt

Sample wordlists

2010-02-08 23:00:02 +00:00

unix_users.txt

Sample wordlists

2010-02-08 23:00:02 +00:00

vnc_passwords.txt

Big VNC update:

2010-11-14 03:37:45 +00:00

vxworks_collide_20.txt

Add the script to generate the VxWorks master password list. Add the script to scan a memory image looking for a known password hash. Add two sorted dictionaries of the first 20k collided values (covers most typeable passwords). One dictionary is a straight wordlist, the other is used by vxdigger.rb. The full master password list can be generated with vxmaster.rb

2010-09-02 14:55:34 +00:00

vxworks_common_20.txt

Add the script to generate the VxWorks master password list. Add the script to scan a memory image looking for a known password hash. Add two sorted dictionaries of the first 20k collided values (covers most typeable passwords). One dictionary is a straight wordlist, the other is used by vxdigger.rb. The full master password list can be generated with vxmaster.rb

2010-09-02 14:55:34 +00:00