Changeset 336

Timestamp:

02/20/06 10:38:38 (3 years ago)

Author:

common

Message:

[x] nepenthes 0.1.4 commit
once again, unpacked the package to trunk ... commit to svn ...
this is really not boring

Files:

• nepenthes/trunk/CHANGES (modified) (1 diff)
• nepenthes/trunk/configure (modified) (10 diffs)
• nepenthes/trunk/configure.ac (modified) (2 diffs)
• nepenthes/trunk/modules/Makefile.in (modified) (1 diff)
• nepenthes/trunk/modules/dnsresolve-adns/dnsresolve-adns.cpp (modified) (1 diff)
• nepenthes/trunk/modules/download-nepenthes/DownloadNepenthesDialogue.cpp (modified) (1 diff)
• nepenthes/trunk/modules/geolocation-ip2location/Makefile.am (modified) (1 diff)
• nepenthes/trunk/modules/geolocation-ip2location/Makefile.in (modified) (5 diffs)
• nepenthes/trunk/modules/geolocation-ip2location/geolocation-ip2location.cpp (modified) (5 diffs)
• nepenthes/trunk/modules/geolocation-ip2location/geolocation-ip2location.hpp (modified) (2 diffs)
• nepenthes/trunk/modules/log-surfnet/log-surfnet.cpp (modified) (1 diff)
• nepenthes/trunk/modules/shellcode-generic/sch_generic_cmd.cpp (modified) (1 diff)
• nepenthes/trunk/modules/shellcode-generic/sch_generic_unicode.cpp (modified) (2 diffs)
• nepenthes/trunk/modules/shellcode-generic/sch_generic_xor.cpp (modified) (9 diffs)
• nepenthes/trunk/modules/shellcode-generic/sch_generic_xor.hpp (modified) (3 diffs)
• nepenthes/trunk/modules/shellcode-generic/shellcode-generic.conf.dist (modified) (1 diff)
• nepenthes/trunk/modules/submit-xmlrpc/XMLRPCParser.cpp (modified) (1 diff)
• nepenthes/trunk/modules/vuln-dcom/vuln-dcom.cpp (modified) (1 diff)
• nepenthes/trunk/nepenthes-core/Makefile.in (modified) (1 diff)
• nepenthes/trunk/nepenthes-core/include/FileLogger.hpp (modified) (1 diff)
• nepenthes/trunk/nepenthes-core/include/Makefile.in (modified) (1 diff)
• nepenthes/trunk/nepenthes-core/src/Config.cpp (modified) (1 diff)
• nepenthes/trunk/nepenthes-core/src/FileLogger.cpp (modified) (2 diffs)
• nepenthes/trunk/nepenthes-core/src/RingFileLogger.cpp (modified) (2 diffs)

nepenthes/trunk/CHANGES

@@ +1 @@
+Version 0.1.4
+=============
+Bugfix release/minor features.
+
+Nepenthes
+        FIXES and ADDITIONS
+        -----
+        * FileLogger logged to somewhere after config file was deleted as he lacked a valid path
+
+
+Modules
+        FIXES and ADDITIONS
+        -----
+        * download-nepenthes 
+                * NULL pointer bug fixed
+          
+        * shellcode-generic 
+                * rewrapped xor code, 
+                * added some bindshell codes
+                        * parthenstein
+                        * wackerow
+                        * kaltenborn
+          
+        * geolocation-ip2location 
+                * now makes use of the real ip2location c api you can download on their homepage, 
+                  setting the lib up sucks, but it works
+          
+        * log-surfnet
+                * moduledescription changed, as we log to postgres, not to mysql
+           
+        * dnsresolve-adns 
+                * added modulename and description
+                
+
+
+
-Version 0.1.3
-=============

nepenthes/trunk/configure

@@ -1 +1 @@
-#! /bin/sh
-72 2005-11-22 14:07:02
+95 2005-12-01 20:23:46
-# Guess values for system-dependent variables and create Makefiles.
-3
+4
-#
-# Report bugs to <dornseif@informatik.rwth-aachen.de>.
@@ -425 +425 @@
-PACKAGE_NAME='nepenthes'
-PACKAGE_TARNAME='nepenthes'
-3
-3
+4
+4
-PACKAGE_BUGREPORT='dornseif@informatik.rwth-aachen.de'
-
@@ -957 +957 @@
-  # This message is too long to be a string in the A/UX 3.1 sh.
-  cat <<_ACEOF
-3
+4
-
-Usage: $0 [OPTION]... [VAR=VALUE]...
@@ -1023 +1023 @@
-if test -n "$ac_init_help"; then
-  case $ac_init_help in
-3
+4
-   esac
-  cat <<\_ACEOF
@@ -1061 +1061 @@
-  --with-mysql-lib=PATH specify path to MySQL client library
-  --with-mysql-include=PATH     specify path to MySQL include files
-MySQL
-MySQL
+PostGRE
+PostGRE
-  --with-geoip-include=PATH     specify path to GeoIP include files
-  --with-geoip-lib=PATH specify path to GeoIP client library
@@ -1181 +1181 @@
-if $ac_init_version; then
-  cat <<\_ACEOF
-3
+4
-generated by GNU Autoconf 2.59
-
@@ -1195 +1195 @@
-running configure, to aid debugging if configure makes a mistake.
-
-3
+4
-generated by GNU Autoconf 2.59.  Invocation command line was
-
@@ -1838 +1838 @@
-# Define the identity of the package.
- PACKAGE=nepenthes
-3
+4
-
-
@@ -25764 +25764 @@
-cat >&5 <<_CSEOF
-
-3
+4
-generated by GNU Autoconf 2.59.  Invocation command line was
-
@@ -25827 +25827 @@
-cat >>$CONFIG_STATUS <<_ACEOF
-ac_cs_version="\\
-3
+4
-configured by $0, generated by GNU Autoconf 2.59,
-  with options \\"`echo "$ac_configure_args" | sed 's/[\\""\`\$]/\\\\&/g'`\\"

nepenthes/trunk/configure.ac

@@ -7 +7 @@
-
-AC_PREREQ(2.59)
-3
-3
+4
+4
-AC_REVISION([$Id$])
-
@@ -336 +336 @@
-
-AC_ARG_WITH(postgre-lib,
-MySQL
+PostGRE
-    [postgre_lib=$withval],
-    [postgre_lib=no])
-AC_ARG_WITH(postgre-include,
-MySQL
+PostGRE
-    [postgre_inc=$withval],
-    [postgre_inc=no])

nepenthes/trunk/modules/Makefile.in

@@ -193 +193 @@
-          esac; \
-        done; \
-foreign
+gnu
-        cd $(top_srcdir) && \
-foreign
+gnu
-.PRECIOUS: Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status

nepenthes/trunk/modules/dnsresolve-adns/dnsresolve-adns.cpp

@@ -57 +57 @@
-DNSResolverADNS::DNSResolverADNS(Nepenthes *nepenthes)
-{
+        m_ModuleName        = "dnsresolve-adns";
+        m_ModuleDescription = "resolve dns async";
+        m_ModuleRevision    = "$rev$";
+
-        m_DNSHandlerName = "DNSResolverADNS";
-        m_Queue = 0;

nepenthes/trunk/modules/download-nepenthes/DownloadNepenthesDialogue.cpp

@@ -202 +202 @@
-ConsumeLevel DownloadNepenthesDialogue::connectionShutdown(Message *msg)
-{
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-        }else
-        {
-logInfo("new file %s is done\n",m_MD5Sum.c_str()
-g_Nepenthes->getSubmitMgr()->addSubmission(m_Download
+uint32_t remotehost = msg->getRemoteHost(
+logCrit(" %s tried to fool download-nepenthes (connected without sending data)\n",inet_ntoa(*(in_addr *)&remotehost)
-        }
-        return CL_DROP;

nepenthes/trunk/modules/geolocation-ip2location/Makefile.am

@@ -11 +11 @@
-pkglib_LTLIBRARIES = geolocationip2location.la
-
- Ip2Location.c Ip2Location.h
+
-
-geolocationip2location_la_LDFLAGS = -module -no-undefined -avoid-version

nepenthes/trunk/modules/geolocation-ip2location/Makefile.in

@@ -60 +60 @@
-LTLIBRARIES = $(pkglib_LTLIBRARIES)
-geolocationip2location_la_LIBADD =
-
-
+
-geolocationip2location_la_OBJECTS =  \
-        $(am_geolocationip2location_la_OBJECTS)
@@ -67 +66 @@
-depcomp = $(SHELL) $(top_srcdir)/depcomp
-am__depfiles_maybe = depfiles
+CXXCOMPILE = $(CXX) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) \
+        $(AM_CPPFLAGS) $(CPPFLAGS) $(AM_CXXFLAGS) $(CXXFLAGS)
+LTCXXCOMPILE = $(LIBTOOL) --tag=CXX --mode=compile $(CXX) $(DEFS) \
+        $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) \
+        $(AM_CXXFLAGS) $(CXXFLAGS)
+CXXLD = $(CXX)
+CXXLINK = $(LIBTOOL) --tag=CXX --mode=link $(CXXLD) $(AM_CXXFLAGS) \
+        $(CXXFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@
-COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
-        $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
@@ -75 +82 @@
-LINK = $(LIBTOOL) --tag=CC --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) \
-        $(AM_LDFLAGS) $(LDFLAGS) -o $@
-CXXCOMPILE = $(CXX) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) \
-        $(AM_CPPFLAGS) $(CPPFLAGS) $(AM_CXXFLAGS) $(CXXFLAGS)
-LTCXXCOMPILE = $(LIBTOOL) --tag=CXX --mode=compile $(CXX) $(DEFS) \
-        $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) \
-        $(AM_CXXFLAGS) $(CXXFLAGS)
-CXXLD = $(CXX)
-CXXLINK = $(LIBTOOL) --tag=CXX --mode=link $(CXXLD) $(AM_CXXFLAGS) \
-        $(CXXFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@
-SOURCES = $(geolocationip2location_la_SOURCES)
-DIST_SOURCES = $(geolocationip2location_la_SOURCES)
@@ -197 +196 @@
-AM_LDFLAGS = $IP2LOCATION_LIBS
-pkglib_LTLIBRARIES = geolocationip2location.la
- Ip2Location.c Ip2Location.h
+
-geolocationip2location_la_LDFLAGS = -module -no-undefined -avoid-version
-all: all-am
-
-.SUFFIXES:
- .c
+
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
-        @for dep in $?; do \
@@ -268 +267 @@
-        -rm -f *.tab.c
-
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/Ip2Location.Plo@am__quote@
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/geolocation-ip2location.Plo@am__quote@
-
-.c.o:
-@am__fastdepCC_TRUE@    if $(COMPILE) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ $<; \
-@am__fastdepCC_TRUE@    then mv -f "$(DEPDIR)/$*.Tpo" "$(DEPDIR)/$*.Po"; else rm -f "$(DEPDIR)/$*.Tpo"; exit 1; fi
-@AMDEP_TRUE@@am__fastdepCC_FALSE@       source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
-@AMDEP_TRUE@@am__fastdepCC_FALSE@       DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
-@am__fastdepCC_FALSE@   $(COMPILE) -c $<
-
-.c.obj:
-@am__fastdepCC_TRUE@    if $(COMPILE) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ `$(CYGPATH_W) '$<'`; \
-@am__fastdepCC_TRUE@    then mv -f "$(DEPDIR)/$*.Tpo" "$(DEPDIR)/$*.Po"; else rm -f "$(DEPDIR)/$*.Tpo"; exit 1; fi
-@AMDEP_TRUE@@am__fastdepCC_FALSE@       source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
-@AMDEP_TRUE@@am__fastdepCC_FALSE@       DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
-@am__fastdepCC_FALSE@   $(COMPILE) -c `$(CYGPATH_W) '$<'`
-
-.c.lo:
-@am__fastdepCC_TRUE@    if $(LTCOMPILE) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ $<; \
-@am__fastdepCC_TRUE@    then mv -f "$(DEPDIR)/$*.Tpo" "$(DEPDIR)/$*.Plo"; else rm -f "$(DEPDIR)/$*.Tpo"; exit 1; fi
-@AMDEP_TRUE@@am__fastdepCC_FALSE@       source='$<' object='$@' libtool=yes @AMDEPBACKSLASH@
-@AMDEP_TRUE@@am__fastdepCC_FALSE@       DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
-@am__fastdepCC_FALSE@   $(LTCOMPILE) -c -o $@ $<
-
-.cpp.o:

nepenthes/trunk/modules/geolocation-ip2location/geolocation-ip2location.cpp

@@ -113 +113 @@
-bool GeoLocationIp2Location::Init()
-{
-
+
-
-        if ( m_Config == NULL )
@@ -131 +131 @@
-        }
-
-ip2l
+IP2L
-        {
-                logCrit("Could not open ip2Location Database in Path %s\n",path.c_str());
-        }
-
+
-
-        if ( g_Nepenthes->getGeoMgr()->registerGeolocationHandler(this) == false)
@@ -143 +143 @@
-        }
-        return true;
-/*
+
-        logCrit("%s","Module compiled without libgeoip installed, wont work\n");
-        return false;
-#endif
-
+
-}
-
@@ -158 +158 @@
-bool GeoLocationIp2Location::geoLocate(GeoLocationQuery *query)
-{
-//
+
-        uint32_t ip = query->getAddress();
-
-        char *host = inet_ntoa(*(in_addr *)&ip);
-p
-
+P
+IP2Location_
-        {
-                GeoLocationResult *geo = new GeoLocationResult(ip,record->longitude,record->latitude,record->country_long,record->country_short,record->city,query->getObject());
-                query->getCallback()->locationSuccess(geo);
-
+IP2Location_
-                delete geo;
-        }
@@ -173 +173 @@
-        delete query;
-        return true;
-//
-//
-//
+
+
+
-}
-

nepenthes/trunk/modules/geolocation-ip2location/geolocation-ip2location.hpp

@@ -33 +33 @@
-#ifdef HAVE_GEOLOCATION
-
-_H
-p
+
+P
-#endif
-
-extern "C"
-{
-    #include "Ip2Location.h"
-}
-
-#include "Module.hpp"
@@ -68 +63 @@
-
-        private:
-
-p
-//
+
+P
+
-
-        };

nepenthes/trunk/modules/log-surfnet/log-surfnet.cpp

@@ -75 +75 @@
-{
-        m_ModuleName        = "log-surfnet";
-my
+postgre
-        m_ModuleRevision    = "$Rev$";
-        m_Nepenthes = nepenthes;

nepenthes/trunk/modules/shellcode-generic/sch_generic_cmd.cpp

@@ -64 +64 @@
-bool GenericCMD::Init()
-{
-
+ 
-        const char * pcreEerror;
-        int32_t pcreErrorPos;

nepenthes/trunk/modules/shellcode-generic/sch_generic_unicode.cpp

@@ -128 +128 @@
-
-
-logSpam("Got %i 00  %i -> %i bytes \n",maxuni,maxstart,maxstopp);
+
-
-        if ( maxuni > 2000 )
-        {
-
+
-
-                byte *output;
@@ -139 +139 @@
-                unicodeTryDecode(shellcode, len, &output, &outputLen);
-
+//              g_Nepenthes->getUtilities()->hexdump(l_crit, output, outputLen);                        
-
-                Message *newMessage = new Message((char *)output, outputLen, (*msg)->getLocalPort(), (*msg)->getRemotePort(),

nepenthes/trunk/modules/shellcode-generic/sch_generic_xor.cpp

@@ -87 +87 @@
-        int32_t pcreErrorPos;
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-        };
-
-test[i]
+i <= 6
-        {
-                pcre *mypcre;
-
+.m_PCRE
-                {
-                        logCrit("GenericXOR could not compile pattern %i\n\t\"%s\"\n\t Error:\"%s\" at Position %u", i,
@@ -109 +137 @@
-                }else
-                {
-
+
+
+
+
+
+
+
-                        logSpam("PCRE %i compiled \n",i);
-                }
@@ -121 +155 @@
-        while(m_Pcres.size()>0)
-        {
-
+
+
+
-                m_Pcres.pop_front();
-        }
@@ -138 +174 @@
-        int32_t output[10 * 3];
-
-pcre
+XORPcreContext
-        uint32_t i;
-        for (it=m_Pcres.begin(), i=0; it != m_Pcres.end();it++,i++)
-        {
-                int32_t result=0;
-*it
+(*it)->m_Pcre
-                {
-//                      logSpam("PCRE %i %x matches %i \n",i,*it,result);
+                        const char *preload;
+                        uint32_t preloadSize;
+                        preloadSize = pcre_get_substring((char *) shellcode, output, result, 1, &preload);
+
+
+                        const char *xordecoder;
+                        uint32_t xordecoderSize;
+                        xordecoderSize = pcre_get_substring((char *) shellcode, output, result, 2, &xordecoder);                        
+
-
-                        const char *match;
@@ -153 +198 @@
-                        uint32_t codesize = 0, codesizeLen, totalsize;
-
-1
+3
-                        switch (codesizeLen )
-                        {
@@ -174 +219 @@
-
-
-2
+4
-
-                        switch(keysize)
@@ -194 +239 @@
-
-
-3
+5
-                        byte *decodedMessage = (byte *)malloc(totalsize);
-                        memcpy(decodedMessage, match, totalsize);
-                        pcre_free_substring(match);
-
-
-
+
+
+
-
-                        switch(keysize)
@@ -224 +270 @@
-                        }
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
-                                   (*msg)->getLocalHost(), (*msg)->getRemoteHost(), (*msg)->getResponder(), (*msg)->getSocket());
-
@@ -234 +289 @@
-
-                        free(decodedMessage);
+                        free(newshellcode);
-                        return SCH_REPROCESS;
-                }

nepenthes/trunk/modules/shellcode-generic/sch_generic_xor.hpp

@@ -31 +31 @@
-#define HAVE_GENERICXOR_HPP
-
+#include <stdint.h>
-#include <pcre.h>
-#include "ShellcodeHandler.hpp"
@@ -37 +38 @@
-namespace nepenthes
-{
+        struct XORPcreHelper
+        {
+                char *m_PCRE;
+                char *m_Name;
+                uint16_t m_Options; // will use this later
+
+        };
+
+
+        struct XORPcreContext
+        {
+                pcre *m_Pcre;
+                string m_Name;
+                uint16_t m_Options; // 
+        };
+
-        class GenericXOR : public ShellcodeHandler
-        {
@@ -46 +63 @@
-                bool Exit();
-        protected:
-pcre
+XORPcreContext 
-        };
-}

nepenthes/trunk/modules/shellcode-generic/shellcode-generic.conf.dist

@@ -8 +8 @@
-        "adenauBind",
-                "\\x83\\xEC\\x34\\x8B\\xF4\\xE8\\x47\\x01\\x00\\x00\\x89\\x06\\xFF\\x36\\x68\\x8E\\x4E\\x0E\\xEC\\xE8\\x61\\x01\\x00\\x00\\x89\\x46\\x08\\xFF\\x36\\x68\\xAD\\xD9\\x05\\xCE\\xE8\\x52\\x01\\x00\\x00\\x89\\x46\\x0C\\x68\\x6C\\x6C\\x00\\x00\\x68\\x33\\x32\\x2E\\x64\\x68\\x77\\x73\\x32\\x5F\\x54\\xFF\\x56\\x08\\x89\\x46\\x04\\xFF\\x36\\x68\\x72\\xFE\\xB3\\x16\\xE8\\x2D\\x01\\x00\\x00\\x89\\x46\\x10\\xFF\\x36\\x68\\x7E\\xD8\\xE2\\x73\\xE8\\x1E\\x01\\x00\\x00\\x89\\x46\\x14\\xFF\\x76\\x04\\x68\\xCB\\xED\\xFC\\x3B\\xE8\\x0E\\x01\\x00\\x00\\x89\\x46\\x18\\xFF\\x76\\x04\\x68\\xD9\\x09\\xF5\\xAD\\xE8\\xFE\\x00\\x00\\x00\\x89\\x46\\x1C\\xFF\\x76\\x04\\x68\\xA4\\x1A\\x70\\xC7\\xE8\\xEE\\x00\\x00\\x00\\x89\\x46\\x20\\xFF\\x76\\x04\\x68\\xA4\\xAD\\x2E\\xE9\\xE8\\xDE\\x00\\x00\\x00\\x89\\x46\\x24\\xFF\\x76\\x04\\x68\\xE5\\x49\\x86\\x49\\xE8\\xCE\\x00\\x00\\x00\\x89\\x46\\x28\\xFF\\x76\\x04\\x68\\xE7\\x79\\xC6\\x79\\xE8\\xBE\\x00\\x00\\x00\\x89\\x46\\x2C\\x33\\xFF\\x81\\xEC\\x90\\x01\\x00\\x00\\x54\\x68\\x01\\x01\\x00\\x00\\xFF\\x56\\x18\\x50\\x50\\x50\\x50\\x40\\x50\\x40\\x50\\xFF\\x56\\x1C\\x8B\\xD8\\x57\\x57\\x68\\x02\\x00(..)\\x8B\\xCC\\x6A\\x16\\x51\\x53\\xFF\\x56\\x20\\x57\\x53\\xFF\\x56\\x24\\x57\\x51\\x53\\xFF\\x56\\x28\\x8B\\xD0\\x68\\x65\\x78\\x65\\x00\\x68\\x63\\x6D\\x64\\x2E\\x89\\x66\\x30\\x83\\xEC\\x54\\x8D\\x3C\\x24\\x33\\xC0",
+                
+        "kaltenbornBind"
+                "\\xFF\\x56\\xF4\\x50\\x50\\x50\\x50\\x40\\x50\\x40\\x50\\xFF\\x56\\xF0\\x8B\\xD8\\x57\\x57\\x68\\x02\\x00(..)\\x8B\\xCC\\x6A\\x16\\x51\\x53\\xFF\\x56\\xEC\\x57\\x53\\xFF\\x56\\xE8\\x33\\xFF\\x57\\x51\\x53\\xFF\\x56\\xE2\\x8B\\xD0\\x89\\x46\\xBE\\x68\\x63\\x6D\\x64\\x00\\x89\\x66\\xC2\\x83\\xC4\\xAC\\x8D\\x3C\\x24\\x33\\xC0\\x33\\xC9\\x80\\xC1\\x15\\xAB\\xE2\\xFD\\xC6\\x44\\x24\\x10\\x44\\xFE\\x44\\x24\\x3D\\x89\\x54\\x24\\x48\\x89\\x54\\x24\\x4C\\x89\\x54\\x24\\x50\\x8D\\x44\\x24\\x10\\x54\\x50\\x51\\x51\\x51\\x41\\x51\\x49\\x51\\x51\\xFF\\x76\\xC2\\x51\\xFF\\x56\\xCE\\x8B\\xCC\\x6A\\xFF\\xFF\\x31\\xFF\\x56\\xD2\\x8B\\xC8\\xFF\\x76\\xBE\\xFF\\x56\\xD6\\xEB\\x9E\\xFF\\x56\\x14"    
+                
+        "wackerowBind"
+                "\\xE8\\x7C\\x00\\x00\\x00\\x83\\xC6\\x0D\\x52\\x56\\xFF\\x57\\xFC\\x5A\\x8B\\xD8\\x6A\\x04\\x59\\xE8\\x69\\x00\\x00\\x00\\x50\\x50\\x50\\x50\\x6A\\x01\\x6A\\x02\\xFF\\x57\\xF0\\x8B\\xD8\\xC7\\x07\\x02\\x00(..)\\x33\\xC0\\x89\\x47\\x04\\x6A\\x10\\x57\\x53\\xFF\\x57\\xF4\\x6A\\x01\\x53\\xFF\\x57\\xF8\\x50\\x50\\x53\\xFF\\x57\\xFC\\x83\\xEC\\x44\\x8B\\xF4\\x33\\xDB\\x6A\\x10\\x59\\x89\\x1C\\x8E\\xE2\\xFB\\x89\\x46\\x38\\x89\\x46\\x3C\\x89\\x46\\x40\\xC7\\x46\\x2C\\x01\\x01\\x00\\x00\\x8D\\x47\\x10\\x50\\x56\\x53\\x53\\x53\\x6A\\x01\\x53\\x53\\xC7\\x47\\x3C\\x63\\x6D\\x64\\x00\\x8D\\x47\\x3C\\x50\\x53\\xFF\\x57\\xE4\\x50\\xFF\\x57\\xE8"
+                
+        "parthensteinBind"
+                "\\xFF\\x56\\x18\\x50\\x50\\x50\\x50\\x40\\x50\\x40\\x50\\xFF\\x56\\x1C\\x8B\\xD8\\x57\\x57\\x68\\x02\\x00(..)\\x8B\\xCC\\x6A\\x16\\x51\\x53\\xFF\\x56\\x20\\x57\\x53\\xFF\\x56\\x24\\x57\\x51\\x53\\xFF\\x56\\x28\\x8B\\xD0\\x68\\x65\\x78\\x65\\x00\\x68\\x63\\x6D\\x64\\x2E\\x89\\x66\\x30\\x83\\xEC\\x54\\x8D\\x3C\\x24\\x33\\xC0\\x33\\xC9\\x83\\xC1\\x15\\xAB\\xE2\\xFD\\xC6\\x44\\x24\\x10\\x44\\xFE\\x44\\x24\\x3D\\x89\\x54\\x24\\x48\\x89\\x54\\x24\\x4C\\x89\\x54\\x24\\x50\\x8D\\x44\\x24\\x10\\x54\\x50\\x51\\x51\\x51\\x6A\\x01\\x51\\x51\\xFF\\x76\\x30\\x51\\xFF\\x56\\x10\\x8B\\xCC\\x6A\\xFF\\xFF\\x31\\xFF\\x56\\x0C\\x8B\\xC8\\x57\\xFF\\x56\\x2C\\xFF\\x56\\x14"
-    );
-

nepenthes/trunk/modules/submit-xmlrpc/XMLRPCParser.cpp

@@ -39 +39 @@
-#include <ctype.h>
-#include <stdint.h>
-malloc
+stdlib
-#include <string.h>
-

nepenthes/trunk/modules/vuln-dcom/vuln-dcom.cpp

@@ -111 +111 @@
-//      m_ShellcodeHandlers.push_back( new SOL2KBind    (m_Nepenthes->getShellcodeMgr())); 
-//      m_ShellcodeHandlers.push_back( new SOL2KConnect (m_Nepenthes->getShellcodeMgr()));
-
+
+
+
-
-

nepenthes/trunk/nepenthes-core/Makefile.in

@@ -178 +178 @@
-          esac; \
-        done; \
-foreign
+gnu
-        cd $(top_srcdir) && \
-foreign
+gnu
-.PRECIOUS: Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status

nepenthes/trunk/nepenthes-core/include/FileLogger.hpp

@@ -48 +48 @@
-
-        private:
-onst c
+
-        };
-

nepenthes/trunk/nepenthes-core/include/Makefile.in

@@ -190 +190 @@
-          esac; \
-        done; \
-foreign
+gnu
-        cd $(top_srcdir) && \
-foreign
+gnu
-.PRECIOUS: Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status

nepenthes/trunk/nepenthes-core/src/Config.cpp

@@ -30 +30 @@
-#include <stdlib.h>
-#include <ctype.h>
+#include <stdio.h>
-
-#include "Config.hpp"

nepenthes/trunk/nepenthes-core/src/FileLogger.cpp

@@ -52 +52 @@
-FileLogger::~FileLogger()
-{
+        if( m_Filename != NULL)
+                free(m_Filename);
+        
-}
-
@@ -57 +60 @@
-void FileLogger::setLogFile(const char *filename)
-{
-
+
+
+
+
-}
-

nepenthes/trunk/nepenthes-core/src/RingFileLogger.cpp

@@ -58 +58 @@
-RingFileLogger::~RingFileLogger()
-{
-
+
+
+
+
+
+
+
+
+
-}
-
@@ -64 +72 @@
-void RingFileLogger::setLogFileFormat(char *fmt)
-{
-
-
+
+
+
+
+
+
+
+
+
+
+
-        asprintf(&m_FirstFile, m_FileFormat, 0);
-}