 adfoster-r7
|
f65119b353
|
Support OpenSSL3 and run Ubuntu 22.04 in test matrix
|
2022-08-03 15:49:53 +01:00 |
|
|
Jack Heysel
|
04f042ae47
|
Land #16221, a wordpress_scanner bug fix
Adjust wordpress_url_rest_api definition to support
sites that don't place REST API under /index.php/
|
2022-04-13 14:22:17 -07:00 |
|
|
Grant Willcox
|
ce062973cb
|
Make changes from review process, redo code for module to make it make less requests, and generally improve overal operations.
|
2022-03-17 11:29:05 -05:00 |
|
|
Grant Willcox
|
c1d6dced8d
|
Update library code to read exchange versions from exchange_versions.json and populate exchange_versions.json with initial info
|
2022-03-17 11:29:01 -05:00 |
|
|
Grant Willcox
|
419c9ea554
|
Fix review comments to simplify regex, and also add in new is_exchange? function to check if a target is running Exchange Server or not.
|
2022-03-17 11:29:00 -05:00 |
|
|
Grant Willcox
|
1f53e9d1c4
|
Rubocop and fix a mistake on commenting too much of the code out from testing
|
2022-03-17 11:29:00 -05:00 |
|
|
Grant Willcox
|
269cd5cfed
|
Add in Exchange Version mixin and module example
|
2022-03-17 11:28:53 -05:00 |
|
|
Grant Willcox
|
94ca15686f
|
Fix issue hwereby some sites don't expose the WordPress API under the /index.php/ directory but instead under the root directory. This allows us to expand support for these websites.
|
2022-02-24 11:39:17 -06:00 |
|
|
Jake Baines
|
9758251278
|
Initial commit of CVE-2021-37343
|
2022-02-05 18:21:18 -08:00 |
|
|
h00die
|
990e4a1e7a
|
pihole new module and lib
|
2022-01-02 11:48:41 -05:00 |
|
|
h00die
|
c3e0f455ec
|
some cleanup for rubocop
|
2021-12-30 15:35:22 -05:00 |
|
|
alanfoster
|
9346a43e4a
|
Improve kube exec reliability
|
2021-11-05 02:38:44 +00:00 |
|
|
adfoster-r7
|
b306641755
|
Print token claims
|
2021-10-21 11:05:51 +01:00 |
|
|
adfoster-r7
|
f28ced60ee
|
Correctly store extracted loot
|
2021-10-21 11:02:10 +01:00 |
|
|
adfoster-r7
|
adbe6070ab
|
PR feedback
|
2021-10-21 11:02:09 +01:00 |
|
|
adfoster-r7
|
c0ba4bd619
|
Add kubernetes enum module
|
2021-10-21 11:01:25 +01:00 |
|
|
adfoster-r7
|
2f86b332f5
|
Land #15733, Add Module For Kubernetes Pod Authenticated Code Execution
|
2021-10-21 10:46:20 +01:00 |
|
|
Spencer McIntyre
|
d8f2b18649
|
Implement review feedback
|
2021-10-01 14:44:13 -04:00 |
|
|
Spencer McIntyre
|
32540247cb
|
Move the Kubernetes client into a library file
|
2021-10-01 10:32:12 -04:00 |
|
|
h00die
|
65aae010ce
|
more libs for moodle and teacher priv esc to rce module
|
2021-09-04 13:31:11 -04:00 |
|
|
h00die
|
77dff0fc13
|
working admin shell
|
2021-09-01 17:49:17 -04:00 |
|
|
h00die
|
3580920dde
|
moving more to libs
|
2021-09-01 17:36:38 -04:00 |
|
|
h00die
|
5e17074259
|
moodle_teacher_enrollement_priv_esc working but not full exploit chain
|
2021-08-31 16:52:08 -04:00 |
|
|
h00die
|
176c1f0751
|
moodle lib and module
|
2021-08-29 10:50:25 -04:00 |
|
|
A Galway
|
5e732ddd42
|
changes parse to take an origin and updates tests
|
2021-08-03 18:22:23 +01:00 |
|
|
A Galway
|
ff111ecd13
|
remove silent catches of http-cookie argument errs
|
2021-07-30 17:33:04 +01:00 |
|
|
agalway-r7
|
3668230d44
|
reposition self return in add
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com>
|
2021-07-30 16:16:12 +01:00 |
|
|
agalway-r7
|
33a34af0df
|
improve error handling
Co-authored-by: dwelch-r7 <Dean_Welch@rapid7.com>
|
2021-07-30 16:06:53 +01:00 |
|
|
A Galway
|
c7d4155511
|
add origin to httpcookie and supporting tests
|
2021-07-28 14:04:48 +01:00 |
|
|
A Galway
|
80f809bc78
|
handled cookies without valid domain value
|
2021-07-26 14:29:03 +01:00 |
|
|
A Galway
|
e3dbd3a990
|
fixes bug caused by attrs with string keys
|
2021-07-20 15:02:41 +01:00 |
|
|
Spencer McIntyre
|
325ecfedff
|
Add some error handling while extracting the key
|
2021-06-08 14:58:58 -04:00 |
|
|
Spencer McIntyre
|
4ccc468dab
|
Add docs to the SharePoint mixin
|
2021-06-07 16:04:08 -04:00 |
|
|
Spencer McIntyre
|
64077e1395
|
Add and use a new sharepoint mixin
|
2021-06-07 15:25:07 -04:00 |
|
|
A Galway
|
5e4af7241d
|
prevent TLD use in tests & remove HTTP::Cookie DI
|
2021-05-20 17:49:21 +01:00 |
|
|
adfoster-r7
|
0f73031833
|
Land #15165, Add documentation for the new CookieJar functionality
|
2021-05-12 19:29:21 +01:00 |
|
|
A Galway
|
6b61eed3cd
|
documention
|
2021-05-07 14:14:46 +01:00 |
|
|
A Galway
|
a22ebdf76d
|
cookie cleanup
|
2021-05-07 12:46:38 +01:00 |
|
|
Alan Foster
|
0be7452c28
|
Ensure cookie jars are correctly duped
|
2021-05-06 12:11:26 +01:00 |
|
|
A Galway
|
1b02344b55
|
consider vhost & expand tests
|
2021-04-20 15:12:54 +01:00 |
|
|
A Galway
|
5df0f0b164
|
improvements to tests and api
|
2021-04-19 15:13:42 +01:00 |
|
|
A Galway
|
88f17c5128
|
cleanup and removes cookies filtering
|
2021-04-16 17:31:11 +01:00 |
|
|
A Galway
|
fc55d74b80
|
http-client cookie jar support and tests
|
2021-04-16 12:24:21 +01:00 |
|
|
Ivanov Vladimir
|
a803d7a0d1
|
CVE-2019-0307
Add post module smdagent_get_properties.rb
Add lib sap_smd_agent_unencrypted_property.rb
Update auxiliary module cve_2020_6207_solman_rce.rb
Update lib sap_sol_man_eem_miss_auth.rb
|
2021-03-29 20:29:30 +03:00 |
|
|
Grant Willcox
|
80ae750df5
|
Land #14697, Add Nagios XI mixin and auxiliary scanner module and docs
|
2021-03-26 18:12:16 -05:00 |
|
|
kalba-security
|
514f97f4fe
|
Fix bug in nagios_xi_version regex
|
2021-03-26 14:18:25 -04:00 |
|
|
kalba-security
|
83e31aeaa4
|
Use safe navigation operator for get_nsp regex
|
2021-03-26 13:44:17 -04:00 |
|
|
Grant Willcox
|
9039b5687f
|
Fix up version regex and also fix a description to be a little more accurate
|
2021-03-26 11:57:03 -05:00 |
|
|
Grant Willcox
|
1dbf1656d3
|
Update to introduce wrapping on some comments and also to fix up the CVE output a bit
|
2021-03-26 11:46:51 -05:00 |
|
|
kalba-security
|
65b35e4e6a
|
Remove unnecessary empty check for nagios_rce_version_prior hash
|
2021-03-25 15:06:27 -04:00 |
|