04aa05faa2
ms01_026_dbldecode: Use HttpClient; remove meterpreter code; fix stager
2022-07-03 18:22:55 +10:00
6b17905790
Land #16722 , Fix notes for SideEffects and Reliability
2022-06-28 10:15:04 +01:00
9087f86cce
exploit/multi/misc/nomad_exec: Fix notes for SideEffects and Reliability
2022-06-28 17:02:51 +10:00
e4ce1c53dd
Fix reference URL link
2022-06-22 15:49:43 -05:00
339114e3c0
Check the target platform for compatibility
2022-06-15 17:11:56 -04:00
dc3596525e
Add Windows targets
2022-06-15 15:23:34 -04:00
a075c676a6
Fix spacing issue
2022-06-10 08:47:41 -05:00
3f06e237b7
Correctly format the notes sections
2022-06-10 14:01:57 +01:00
3875db78ae
Land #16644 , Add Exploit for CVE-2022-26134 (Confluence RCE)
...
Merge branch 'land-16644' into upstream-master
2022-06-07 16:00:37 -05:00
1a06f69f95
Works through v7.18 now too
2022-06-06 22:03:21 -04:00
45c646afea
Refactor #encode_ognl
2022-06-06 18:15:44 -04:00
2c0e034a18
Fix a couple of typos
2022-06-06 18:14:05 -04:00
c751ef46c9
Land #16635 , Add 0-day MSWord RCE #Follina CVE-2022-30190
...
Merge branch 'land-16635' into upstream-master
2022-06-06 14:41:31 -05:00
f55334f0fe
Add version detection
2022-06-03 18:26:04 -04:00
76ec36a091
Remove the Windows targets for now
2022-06-03 16:50:13 -04:00
29a9ef686a
Finish up a draft of the module
2022-06-03 16:47:02 -04:00
cd6bbeb0ba
WIP module
2022-06-03 15:27:13 -04:00
1dc61d02eb
Update php_fpm_rce.rb
2022-06-03 11:23:53 +03:00
474116d413
Land #16611 , DotCMS File Upload to RCE Module (CVE-2022-26352)
2022-06-02 15:30:10 +02:00
3ab06461af
fix. second review
2022-06-02 00:58:20 +04:00
dd1814903c
fix. SRVHOST default value
2022-06-02 00:07:15 +04:00
8c19a02835
fix. first review
2022-06-01 20:15:08 +04:00
97caca4f6e
Update modules/exploits/multi/http/dotcms_file_upload_rce.rb
...
Co-authored-by: cdelafuente-r7 <56716719+cdelafuente-r7@users.noreply.github.com >
2022-06-01 10:54:02 -04:00
bea4207c62
Land PR #16607 - MyBB RCE Module (CVE-2022-24734)
...
This exploit module leverages an improper input validation
vulnerability in MyBB prior to 1.8.30 to execute arbitrary
code in the context of the user running the application.
2022-05-31 11:59:53 -04:00
7f89e92da3
add more informations about
2022-05-31 00:12:30 +04:00
2c02a607ee
Responded to PR feedback
2022-05-30 14:46:54 -04:00
97921b4ed9
fix chmod 644
2022-05-30 22:11:35 +04:00
dfc226cf5f
add. Supposed 0day MSWord RCE
2022-05-30 21:23:18 +04:00
b996f5ee49
Fixes from code review
2022-05-30 16:24:18 +02:00
5f5444936f
Land #16488 , Windows Task Scheduler Mixin
2022-05-25 12:37:03 -04:00
52a8191821
Fix vss_persistence module and remove Windows 7 target
2022-05-25 13:11:34 +02:00
1524020643
Use moved_from to deprecate the module
2022-05-24 09:16:30 -04:00
1f304ef2c4
Add module exploit for MyBB RCE - CVE-2022-24734
2022-05-23 17:27:20 +02:00
3afb9b2ffe
dotCMS file upload to RCE module
2022-05-20 15:57:22 -04:00
4f4287eb6b
Module working on linux
2022-05-19 09:37:48 -04:00
5fd18ef864
Fixes from review
2022-05-19 14:54:07 +02:00
7992cb2072
Update vss_persistenceand persistence_exe modules to includes
...
changes in `TaskScheduler` mixin
2022-05-17 14:52:47 +02:00
14cd7bc335
Add task scheduler mixin and update persistence_exe and vss_persistence modules
2022-05-17 14:52:47 +02:00
02e7a65b93
Just move the auxiliary module into an exploit
2022-05-16 17:44:31 -04:00
d278ad9be1
Add the printnightmare exploit
2022-05-16 14:56:46 -04:00
19a9ff1198
Update a couple of modules for the new SMB server
2022-05-16 14:39:45 -04:00
b79b550d6c
Centralize the log adapter
...
This should eventually be updated to map the levels to the framework
logger and appropriate module-print_* function.
2022-05-16 14:39:45 -04:00
475f6eee8c
Capture hash when serving files over SMB
2022-05-16 14:39:44 -04:00
0196b6fa75
Land #16555 , move duplicated retry_until_truthy code into centralized location
2022-05-16 18:31:57 +01:00
133b9e307a
Land #16563 , Zyxel Firewall Unauthenticated Command Injection (CVE-2022-30525)
2022-05-13 18:55:30 -05:00
2eb31cf765
Add in edits from review
2022-05-13 15:32:12 -05:00
1aceb71971
Rename the function to emphasize truthy
2022-05-13 09:16:01 -04:00
6a1fe27406
Land #16442 , add vars_form_data to the HTTP client
2022-05-13 10:53:16 +01:00
23f8a0b915
Added Zyxel advisory. Added AKB reference. Used xpath as requested.
2022-05-12 07:17:37 -07:00
f3b23c072f
Added a reference to Rapid7 disclosure
2022-05-12 06:33:27 -07:00
bcoles