Metasploit
03bb062c2e
automatic module_metadata_base.json update
6.2.29
2022-12-01 09:50:22 -06:00
bwatters
dcff4d37b6
Land #17163 , Pfsense PfBlockerNG RCE module check method improvement
...
Merge branch 'land-17163' into upstream-master
2022-12-01 09:25:18 -06:00
Metasploit
b9c18de4fe
automatic module_metadata_base.json update
2022-11-30 16:55:15 -06:00
adfoster-r7
13ab155545
Land #17322 , fix OpoenOffice description typo
2022-11-30 22:31:53 +00:00
Maik Ro
330cb2944b
fix typo
...
OptString.new('FILENAME', [true, 'The OpoenOffice Text document name', 'msf.odt']) -> OpoenOffice changed to OpenOffice
2022-11-30 22:10:18 +01:00
Metasploit
07a91df7a1
automatic module_metadata_base.json update
2022-11-30 11:43:21 -06:00
Christophe De La Fuente
d3057f15b2
Land #17275 , Add Exploit For CVE-2022-41082 (ProxyNotShell)
2022-11-30 18:16:19 +01:00
Metasploit
35bbfc8af4
automatic module_metadata_base.json update
2022-11-28 15:47:01 -06:00
Spencer McIntyre
8ea8e2410d
Land #17299 , Fixes #17227
...
Fixes #17227 - polkit_dbus_auth_bypass module when run from a command…
2022-11-28 16:22:52 -05:00
Metasploit
8a66a359a6
automatic module_metadata_base.json update
2022-11-28 15:16:21 -06:00
Jack Heysel
5d3cfa69b8
Land #17210 , add ParseError rescue to snmp modules
...
snmp_enum, snmp_enumshares and snmp_enumusers now rescue
SNMP ParseErrors
2022-11-28 15:37:02 -05:00
bwatters
3462dc6bf4
Land #17087 , remote control collection rce
...
Merge branch 'land-17087' into upstream-master
2022-11-28 14:29:52 -06:00
Spencer McIntyre
264d45e04a
Appease rubocop
2022-11-28 10:16:55 -05:00
Spencer McIntyre
f24df8a051
Change an exception class and drop DOMAIN passing
2022-11-28 10:06:14 -05:00
Spencer McIntyre
009c6c5350
Add the MaxBackendRetries datastore option
2022-11-28 09:45:04 -05:00
Metasploit
c49dd0b6cd
automatic module_metadata_base.json update
2022-11-27 14:27:39 -06:00
adfoster-r7
de75f0ecbe
Land #17304 , added target uri in to "Authorization not requested" error message
2022-11-27 20:04:00 +00:00
omer citak
9aa1a84b3a
added target uri in to "Authorization not requested" error message
2022-11-27 15:35:34 +03:00
Ashley Donaldson
638a1c8f78
Prevent double-delimiter situations in general
2022-11-25 15:32:55 +11:00
Ashley Donaldson
25a0d0ff0e
Fixes #17227 - polkit_dbus_auth_bypass module when run from a command shell
2022-11-25 15:13:57 +11:00
adfoster-r7
c218063a1a
Land #17280 , Weekly dependency updates for Gemfile.lock
2022-11-24 23:11:49 +00:00
Metasploit
ed954eec0c
Bump version of framework to 6.2.29
2022-11-24 12:09:06 -06:00
adfoster-r7
0aa0884e26
Land #17296 , add warning about external links
6.2.28
2022-11-24 10:30:44 +00:00
Metasploit
c9ba07e3a7
automatic module_metadata_base.json update
2022-11-23 17:20:29 -06:00
Spencer McIntyre
6350daf2d8
Land #17273 , F5 exploit module CVE-2022-41800
...
F5 exploit module CVE-2022-41800 (authenticated RCE in RPM code)
2022-11-23 17:57:18 -05:00
Spencer McIntyre
3805a79079
Add support for Exchange Data Access Group (DAG)
...
This updates the HttpSsrf class to retry requests to the Powershell
backend when they fail because they were routed to a new server. Now
when the transport is initialized, it will store the backend used by the
first successful request.
2022-11-23 15:37:58 -05:00
Jeffrey Martin
453cfc5939
spelling change per review
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2022-11-23 13:26:19 -06:00
Ron Bowes
cbb50ed902
Remove non-functioning Arch'es
2022-11-23 10:42:07 -08:00
Jeffrey Martin
cb8e023734
add warning about external links
...
Links to external resources not controlled by the project maintainers
are subject to bitrot and malicious take over. Warnings seem appropriate.
2022-11-23 12:08:05 -06:00
Spencer McIntyre
3f58bfe11e
Check that the target is Exchange Server 2019
2022-11-23 10:47:10 -05:00
Spencer McIntyre
45391b1714
Land #17279 , ducky-script format for msfvenom
...
ducky-script format for msfvenom (flipper zero compatible)
2022-11-23 09:05:57 -05:00
h00die
b866917ee1
review
2022-11-22 16:57:01 -05:00
Spencer McIntyre
2265370c5f
Land #17288 , Add #bit_names to MsDtypAccessMask
...
Support for Windows Access mask to MsDtypAccessMask
2022-11-22 09:01:16 -05:00
Metasploit
0af1f95f5a
automatic module_metadata_base.json update
2022-11-22 06:52:15 -06:00
adfoster-r7
6446c1425b
Land #17283 , enum_psk: Cleanup
2022-11-22 12:28:55 +00:00
adfoster-r7
6c76fd7beb
Land #17284 , modules/post/linux/gather: Use Post::Linux::System.get_hostname method
2022-11-22 11:55:47 +00:00
adfoster-r7
390e58958c
Land #17285 , tor_hiddenservices - check locate command exists
...
: Check locate command exists
2022-11-22 11:42:50 +00:00
JustAnda7
28157b677b
Support for Access Mask in MsDtypAccess
2022-11-22 04:50:54 -05:00
h00die
637ad5f809
make ducky more psh friendly
2022-11-21 17:55:48 -05:00
h00die
7227bec259
set autocheck false
2022-11-21 15:53:37 -05:00
bwatters
8c9e2c9fc7
Add check method, update hosting IP/port
2022-11-21 15:53:37 -05:00
h00die
d141efcbfe
screen effects
2022-11-21 15:53:37 -05:00
h00die
181b8e4eea
review comments
2022-11-21 15:53:37 -05:00
h00die
d4536b24a6
remote control collection rce
2022-11-21 15:53:37 -05:00
Spencer McIntyre
de8a396b3a
Land #17277 , Fix python reverse http stager crash
2022-11-21 12:41:25 -05:00
Spencer McIntyre
ed99f2f67f
Bypass EEMS M1
2022-11-21 11:13:16 -05:00
bcoles
651dd68439
tor_hiddenservices: Check locate command exists
2022-11-21 01:07:50 +11:00
bcoles
2dbd2043ec
modules/post/linux/gather: Use Post::Linux::System.get_hostname method
2022-11-21 00:46:44 +11:00
bcoles
ad36f28ec1
enum_psk: Cleanup
2022-11-21 00:28:34 +11:00
Metasploit
234949bff8
automatic module_metadata_base.json update
2022-11-18 19:52:50 -06:00