5f92d9418d
Modules: Fix Stability/SideEffects/Reliability notes for several modules
2022-10-01 17:54:59 +10:00
89ef91c9cd
Update ranking for nft_set_elem_init
2022-09-30 09:57:54 -05:00
76c6632305
Land #16673 , qdPM 9.1 - Authenticated Remote Code Execution (CVE-2020-7246)
...
Merge branch 'land-16673' into upstream-master
2022-09-29 09:46:27 -05:00
379f303ea8
Land #17061 , Mobile Mouse Server RCE
...
This PR includes a module that uses default
configuration in Unified Remote to spawn a
run prompt and return a shell.
2022-09-28 10:48:41 -04:00
e27dbd2787
Land #16794,Add exploit for CVE-2022-34918
...
Merge branch 'land-16794' into upstream-master
2022-09-27 16:37:52 -05:00
547ab00a0e
review comments
2022-09-27 14:51:03 -04:00
a05606ff33
Fix beagent sha auth linting
2022-09-27 16:23:05 +01:00
bd586962e3
add check method
2022-09-26 17:51:07 -04:00
acba21a899
mobile mouse server exploit
2022-09-26 15:56:06 -04:00
61f576d3e1
mobile mouse server exploit
2022-09-26 15:45:42 -04:00
0908006466
Land #16985 , wifi mouse rce - CVE-2022-3218
2022-09-23 14:46:49 -05:00
828cdb8862
Fix a typo
2022-09-23 14:20:18 -05:00
b62f163696
Update documentation on module and exploit a little more to make things a bit clearer
2022-09-23 14:08:18 -05:00
2b5e85cd27
Land #17012 , Veritas Backup Agent RCE
...
This module exploits a chain of the vulnerabilities CVE-2021-27876,
CVE-2021-27877 and CVE-2021-27878 in Veritas Backup Exec Agent which
leads to remote code execution with privileges of system or root user
2022-09-23 12:31:46 -04:00
425d58dd15
fix check methos output in Veritas BE rce
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2022-09-23 09:46:52 +03:00
04c897dbeb
Fix description info Veritas BE RCE
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2022-09-23 09:45:18 +03:00
a8210bfe70
add autocheck to veritas BE RCE
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2022-09-23 09:44:39 +03:00
dd11156922
add new reference to bitbucket module
2022-09-22 16:14:18 -05:00
8b601c9b17
If ForceExploit is set, skip calling module_check
2022-09-22 17:33:24 +02:00
93cad400e8
Update error message if the kernel offsets are not supported
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2022-09-22 17:28:36 +02:00
32402c0e6d
wifi mouse doc updates
2022-09-21 16:35:08 -04:00
415383b48d
Land #17042 , Add exploit for CVE-2022-36804
2022-09-21 13:07:32 -04:00
8d2b182c7b
add cmd stager flavors and bad characters
2022-09-21 10:54:32 -05:00
77d1328c43
add module description
2022-09-21 08:38:18 -05:00
4943d86ec6
Land #16989 , Unified Remote RCE
2022-09-21 14:06:33 +02:00
34a6671c2d
update module to support auth & additional target
2022-09-20 18:45:14 -05:00
9e6c172dd4
unified remote review
2022-09-20 16:44:05 -04:00
9738f23b51
add cmdstager
2022-09-20 10:37:10 -05:00
391e5cc891
add check method, repo search
2022-09-19 17:28:17 -05:00
5c35a8d3fd
remove bad ref
2022-09-19 16:07:52 -04:00
7fe4f282e4
add cve
2022-09-18 19:03:54 -04:00
271171f6d2
unified now with invisible feature
2022-09-18 19:02:59 -04:00
55119aaac7
Land #16940 , Rewrite datastore, and add support for option fallback lookups
2022-09-16 14:19:19 +01:00
3a281234df
Add feature flagged datastore rewrite, with support for option fallback lookups
2022-09-16 12:59:02 +01:00
bf1ebe19a6
cve for wifi mouse
2022-09-15 15:12:35 -04:00
27744edbb3
Fix dwelch-r7 comments: use fail_with and change return value in tls_enabling
2022-09-15 20:13:25 +03:00
aa87ce7018
Fix option names
2022-09-15 19:02:25 +03:00
0216735a83
Fix option name and description
...
Co-authored-by: dwelch-r7 <Dean_Welch@rapid7.com >
2022-09-15 18:58:32 +03:00
52ff168c5e
Land #16914 , Add PAN-OS auth command injection module (CVE-2020-2038)
2022-09-15 17:58:07 +02:00
0fd3a82126
Land #17014 , Increase timeout for laravel check
...
Increase timeout for laravel rce check method
2022-09-15 11:41:07 -04:00
8d5171b810
Removed unnecessary file
2022-09-15 10:47:26 -04:00
b37b91c233
Responded to comments
2022-09-15 10:45:11 -04:00
49cc431660
Update modules/exploits/linux/http/panos_op_cmd_exec.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-09-15 10:29:28 -04:00
59d79e3149
review comments for unified remote
2022-09-14 16:52:58 -04:00
2fcea3763f
Update modules/exploits/linux/http/panos_op_cmd_exec.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-09-14 12:59:56 -04:00
9b6b70cbf3
Update modules/exploits/linux/http/panos_op_cmd_exec.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-09-14 12:50:07 -04:00
d001bf079e
Update modules/exploits/linux/http/panos_op_cmd_exec.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-09-14 12:49:52 -04:00
c39b437f01
Increase timeout for laravel rce check method
2022-09-13 22:36:53 +01:00
0dcfe72614
Use the standard Linux stager
2022-09-13 16:10:48 -04:00
9445731b7e
Change author mail
2022-09-13 22:50:00 +03:00
bcoles