e19511a31c
Update documentation for the smb_shadow module.
...
Add additional clarity and details to the existing documentation for the
smb_shadow module. Remove some outdated comments and fix some spelling
errors.
2021-11-25 08:12:13 +09:00
344bdacae4
Remove preferred payload
...
We'll add it back to Framework later.
2021-11-24 10:44:59 -06:00
e2734293e1
Add SMB Shadow Module: Direct SMB Session Takeover
...
This module intercepts direct SMB connections on the LAN.
Both the SMB Server and Client must be on the LAN.
The SMB Client must be authenticating to the Server as an Administrator.
This module is dependent on an external ARP spoofer.
2021-11-24 20:05:30 +09:00
d2c322e875
Revert option name styling in module doc
...
Bug in our local renderer's styling. GitHub renders it just fine.
2021-11-23 19:05:26 -06:00
053dc70782
Add words to module doc
2021-11-23 19:05:09 -06:00
a8daed1e79
Add module doc
2021-11-23 19:05:09 -06:00
7f6d661ff7
Land #15866 , Add Exploit For CVE-2021-38294 (Apache Storm Nimbus getTopologyHistory RCE)
2021-11-18 17:02:50 -06:00
725c5f8d8c
Add in another scenario into documentation and add additional detail to one setup step
2021-11-18 17:01:25 -06:00
a915c3ce5c
Add fixes for some of the issues raised during the review process on both the documentation and module side of things
2021-11-17 17:25:50 -06:00
a100cd77ae
Land #15858 , Add exploit for CVE-2021-42237
2021-11-15 14:24:47 -05:00
0b3f95abca
Writeup the module docs and move the protocol code
2021-11-12 15:15:51 -05:00
4505d7e834
Land #15700 , Add Aerohive NetConfig <= 10.0r8a RCE (CVE-2020-16152) module
...
Merge branch 'land-15700' into upstream-master
2021-11-11 17:03:54 -06:00
5e670638f3
Add a line suggesting TryToFork on Meterpreter might prevent the hang after exploitation
2021-11-11 16:59:09 -06:00
8d55b16ade
Fix one more mistake and rename document and module to a more easy to find name
2021-11-11 16:42:58 -06:00
27310dc002
Add in exploit and documentation for CVE-2021-42237
2021-11-10 15:52:22 -06:00
3af93cbacc
Fix up changes from timwr's review so long
2021-11-09 10:36:50 -06:00
780a9370a2
First draft of code, documentation, and exploit DLL plus exploit code
2021-11-09 10:36:40 -06:00
1dd26bca03
Land #15802 , add OMIGOD LPE
2021-11-09 10:30:50 -06:00
38973510f7
update modules (auxiliary and exploit)
2021-11-09 15:18:58 +04:00
6f4aa55022
Land #15816 , GitLab Unauth Command Injection
2021-11-03 16:57:57 -04:00
4b7c5acc5b
Changed qx delimiter to # and added it to badchars. Defaulted to a staged payload
2021-11-03 10:51:37 -07:00
68cae90f45
Fix spelling error
2021-11-03 08:51:07 -07:00
116e2b0c1d
Enabled use of cmdstager::flavor printf. Tested against a CentOS install. Updated docs. Default to MeterpreterTryToFork and enabled autocheck
2021-11-03 08:49:09 -07:00
728965b3c6
fix typos in docs
2021-11-02 20:04:06 -04:00
f778f5f00a
add cleanup, add new info and warning messages, update docs, small improvements
2021-11-02 19:58:16 -04:00
beb30f2b6a
Expanded cmdstager flavors. Removed bad variable name
2021-11-02 12:01:36 -07:00
10bb77ea4b
Addressed a wide variety of spelling and formatting issues. Added a reference. Registered TARGETURI. Randomized the image payload in check. Added additional options information to documentation.
2021-11-02 09:50:06 -07:00
b3a6d09b86
Fix wrong extension for documentation
2021-11-02 08:07:56 -07:00
0681c8780e
Land #15761 , add pie-register code exec
2021-11-02 09:17:50 -05:00
8185b26a12
change should to must in referring to id option
2021-11-02 09:15:59 -05:00
3aadb6000b
Initial version of CVE-2021-22205 GitLab Unauth RCE
2021-11-02 01:46:51 -07:00
1ca9f48266
Land #15783 , Add Sophos UTM CVE-2020-25223 exploit
2021-10-28 09:00:08 -04:00
2a36287d9d
Add more words to module doc
2021-10-27 19:31:03 -05:00
76aa872ff5
Add (empty) Options header to module doc
...
For consistency.
2021-10-27 19:31:03 -05:00
7bbf0305c0
Fix elapsed time calculation using monotonic clock
...
Hat tip @adfoster-r7.
2021-10-27 19:31:03 -05:00
365365bfb0
Add module doc
2021-10-27 19:31:03 -05:00
9635110050
Add documentation for CVE-2021-38648
2021-10-27 12:06:01 -04:00
21c45b3733
Update module metadata
2021-10-27 11:58:53 -04:00
60b17b5c6f
Add the module docs for OMIGOD
2021-10-26 12:08:48 -04:00
7fc38d1b50
Land #15754 , add apache2 path traversal modules
2021-10-22 12:40:57 -04:00
ced61f989b
Tweak the verbiage for clarity, update docs
2021-10-22 12:38:03 -04:00
2f86b332f5
Land #15733 , Add Module For Kubernetes Pod Authenticated Code Execution
2021-10-21 10:46:20 +01:00
1e1b1982b2
Improve image selection when creating a pod
...
The module will now iterate over identified image names by default and
also allows an explicit image name to be specified using the new
PodImage advanced option.
2021-10-20 15:52:23 -04:00
42ed1b6eef
Add Windows support to CVE-2021-26084 exploit
2021-10-14 16:58:04 -05:00
9f0804cbfb
Fix Meterpreter spelling mistake
2021-10-12 23:40:43 +01:00
dcb42da269
Land #15612 , Add multiple moodle modules
2021-10-11 23:18:55 +01:00
b970e38edb
spell betterer
2021-10-11 16:44:32 -04:00
441c1966e2
fix IPs
2021-10-11 15:33:07 -04:00
0745bbe4d8
pie-register on wordpress
2021-10-11 15:25:07 -04:00
60b2b0f009
update modules and docs
2021-10-10 17:01:15 +04:00
usiegl00