Metasploit Framework: Activity http://www.metasploit.com/redmine/ 2010-02-08T20:15:47-08:00 Metasploit Redmine Interface Redmine Revision 8427: Regenerate the payload with the specified AIX level, cleanups http://www.metasploit.com/redmine/projects/framework/repository/revisions/8427 2010-02-08T20:15:47-08:00 Joshua Drake <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/ZFcxK3vgkNY" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8427 Revision 8426: extended brute range, minor cleanups http://www.metasploit.com/redmine/projects/framework/repository/revisions/8426 2010-02-08T20:15:15-08:00 Joshua Drake <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/r6HvCUOF_yE" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8426 Revision 8425: Avoid a warning http://www.metasploit.com/redmine/projects/framework/repository/revisions/8425 2010-02-08T20:12:34-08:00 HD Moore <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/si3WypsolUs" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8425 Revision 8424: Regenerate the payload with the specified AIX level http://www.metasploit.com/redmine/projects/framework/repository/revisions/8424 2010-02-08T19:59:20-08:00 HD Moore <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/XxxU09QacgE" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8424 Revision 8423: Fix typo http://www.metasploit.com/redmine/projects/framework/repository/revisions/8423 2010-02-08T17:10:29-08:00 Efrain Torres <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/Qh57fSUOAk8" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8423 Revision 8422: randomize filler http://www.metasploit.com/redmine/projects/framework/repository/revisions/8422 2010-02-08T16:43:56-08:00 Joshua Drake <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/BM9QiNyMTSs" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8422 Revision 8421: it works! don't forget to "set AIX <version>" http://www.metasploit.com/redmine/projects/framework/repository/revisions/8421 2010-02-08T16:41:49-08:00 Joshua Drake <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/kz_A-uOicS0" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8421 Bug #817 (New): AIX bind/reverse payloads won't exit http://www.metasploit.com/redmine/issues/817 2010-02-08T16:13:02-08:00 Joshua Drake <p>The "exit" command does nothing! This might be due to the close() syscalls failing (as shown below).</p> <p>bash-2.04# truss -p 17518<br />sigprocmask(0, 0x2FF22C60, 0x2FF22C68) = 0<br />close(0) Err#9 EBADF<br />kfcntl(19, F_DUPFD, 0x00000000) = 0<br />close(1) Err#9 EBADF<br />kfcntl(17, 14, 0x00000001) = 1<br />close(2) Err#9 EBADF<br />kfcntl(18, 14, 0x00000002) = 2<br />sys_parm(0x00000000, 0x0000000E, 0x20004150, 0x20003F70, 0x00000000, 0x60000000, 0x60007FDD, 0x00000000) = 0x00000000<br />lseek(16, 0, 2) Err#29 ESPIPE<br />close(0) = 0<br />close(1) = 0<br />close(2) = 0<br />sigprocmask(0, 0x2FF22C60, 0x2FF22C68) = 0<br />sigprocmask(2, 0x2FF22C60, 0x2FF22C68) = 0</p> <p>Suspicions point to dup'n of sockets..</p> <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/Kd6UoMeHMwI" height="1" width="1"/> http://www.metasploit.com/redmine/issues/817 Revision 8420: oops, wrong syscall number for listen http://www.metasploit.com/redmine/projects/framework/repository/revisions/8420 2010-02-08T16:05:15-08:00 Joshua Drake <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/iZEsXSvomrI" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8420 Bug #809: Issue with the check command while using a specific smb exploit. http://www.metasploit.com/redmine/issues/809#change-1947 2010-02-08T15:25:21-08:00 Marc-Andre Meloche <p>i have retried with a vulnerable server and everything works.</p> <p>Sorry.</p> <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/z9zQGl7S42k" height="1" width="1"/> http://www.metasploit.com/redmine/issues/809#change-1947 Revision 8419: Sample wordlists http://www.metasploit.com/redmine/projects/framework/repository/revisions/8419 2010-02-08T15:00:02-08:00 HD Moore <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/BbY7-SD5dzk" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8419 Revision 8418: fixed aix payloads to REALLY do variable substitution http://www.metasploit.com/redmine/projects/framework/repository/revisions/8418 2010-02-08T14:41:36-08:00 Joshua Drake <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/6cczHELC1hU" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8418 Revision 8417: See #816. This came up while learning how to perform various postgre tasks via Met... http://www.metasploit.com/redmine/projects/framework/repository/revisions/8417 2010-02-08T14:34:09-08:00 Tod Beardsley todb@metasploit.com <p>This module in particular reads a text file on the remote machine, copies it to a temporary table, and then selects the table.</p> <p>Looks like this:</p> <p><a class="external" href="http://pastie.org/private/uoxgaw7ibjpvuepolr1fuw">http://pastie.org/private/uoxgaw7ibjpvuepolr1fuw</a></p> <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/fgUeTrgd1vM" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8417 Feature #816 (New): Create user enumeration modules for PostgreSQL http://www.metasploit.com/redmine/issues/816 2010-02-08T14:32:34-08:00 Tod Beardsley todb@metasploit.com <p>Need a way to enumerate all the local users on a machine running PostgreSQL.</p> <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/VPiiygTjWR0" height="1" width="1"/> http://www.metasploit.com/redmine/issues/816 Revision 8416: Fix unpack("H*") vs unpack("H*")[0] http://www.metasploit.com/redmine/projects/framework/repository/revisions/8416 2010-02-08T13:37:07-08:00 HD Moore <img src="http://feeds.feedburner.com/~r/metasploit/development/~4/nAeXGznrdzo" height="1" width="1"/> http://www.metasploit.com/redmine/projects/framework/repository/revisions/8416