 bcoles
|
5f92d9418d
|
Modules: Fix Stability/SideEffects/Reliability notes for several modules
|
2022-10-01 17:54:59 +10:00 |
|
|
h00die
|
547ab00a0e
|
review comments
|
2022-09-27 14:51:03 -04:00 |
|
|
h00die
|
bd586962e3
|
add check method
|
2022-09-26 17:51:07 -04:00 |
|
|
h00die
|
acba21a899
|
mobile mouse server exploit
|
2022-09-26 15:56:06 -04:00 |
|
|
h00die
|
61f576d3e1
|
mobile mouse server exploit
|
2022-09-26 15:45:42 -04:00 |
|
|
Grant Willcox
|
0908006466
|
Land #16985, wifi mouse rce - CVE-2022-3218
|
2022-09-23 14:46:49 -05:00 |
|
|
Grant Willcox
|
828cdb8862
|
Fix a typo
|
2022-09-23 14:20:18 -05:00 |
|
|
Grant Willcox
|
b62f163696
|
Update documentation on module and exploit a little more to make things a bit clearer
|
2022-09-23 14:08:18 -05:00 |
|
|
h00die
|
32402c0e6d
|
wifi mouse doc updates
|
2022-09-21 16:35:08 -04:00 |
|
|
Christophe De La Fuente
|
4943d86ec6
|
Land #16989, Unified Remote RCE
|
2022-09-21 14:06:33 +02:00 |
|
|
h00die
|
9e6c172dd4
|
unified remote review
|
2022-09-20 16:44:05 -04:00 |
|
|
h00die
|
5c35a8d3fd
|
remove bad ref
|
2022-09-19 16:07:52 -04:00 |
|
|
h00die
|
7fe4f282e4
|
add cve
|
2022-09-18 19:03:54 -04:00 |
|
|
h00die
|
271171f6d2
|
unified now with invisible feature
|
2022-09-18 19:02:59 -04:00 |
|
|
adfoster-r7
|
3a281234df
|
Add feature flagged datastore rewrite, with support for option fallback lookups
|
2022-09-16 12:59:02 +01:00 |
|
|
h00die
|
bf1ebe19a6
|
cve for wifi mouse
|
2022-09-15 15:12:35 -04:00 |
|
|
h00die
|
59d79e3149
|
review comments for unified remote
|
2022-09-14 16:52:58 -04:00 |
|
|
h00die
|
803fff9003
|
wifi remote remove unused code
|
2022-09-09 06:06:52 -04:00 |
|
|
h00die
|
66bbe98f5f
|
wifi remote with better cmd stagers
|
2022-09-09 05:57:36 -04:00 |
|
|
h00die
|
ae91cfa9c5
|
unified_remote exploit
|
2022-09-08 17:09:31 -04:00 |
|
|
h00die
|
c7b8ec7511
|
unified_remote exploit
|
2022-09-06 21:44:59 -04:00 |
|
|
h00die
|
3f7e0667f6
|
wifi mouse rce
|
2022-09-05 08:16:49 -04:00 |
|
|
Spencer McIntyre
|
ae5a9bd41b
|
Land #16734, Add rtf support to cve-2022-30190
Add rtf support to cve-2022-30190 AKA Follina
|
2022-08-25 17:26:46 -04:00 |
|
|
Spencer McIntyre
|
68eae1664e
|
Tweak the follina docs
|
2022-08-25 17:10:59 -04:00 |
|
|
bwatters
|
683132242c
|
fix up the uri_space maths
|
2022-08-25 16:08:26 -05:00 |
|
|
Spencer McIntyre
|
07fdc1f1ec
|
Land #16907, ms10_092_schelevator: Cleanup
|
2022-08-22 11:53:02 -04:00 |
|
|
Grant Willcox
|
97bce45e69
|
Land #16915, Add exploit for CVE-2022-23277 (Exchange RCE)
|
2022-08-19 11:11:46 -05:00 |
|
|
bcoles
|
666a3efcfd
|
ms10_092_schelevator: Cleanup
|
2022-08-19 15:19:28 +10:00 |
|
|
Christophe De La Fuente
|
d49b74d164
|
Land #16809, Add exploit module for Advantech iView command injection - CVE-2022-2143
|
2022-08-18 17:19:14 +02:00 |
|
|
Spencer McIntyre
|
7c1dd17c86
|
Add a missing verison, fix typos
|
2022-08-17 17:36:31 -04:00 |
|
|
bwatters
|
115955591b
|
Fix up the Unicode coversions and update docs
|
2022-08-17 13:21:56 -05:00 |
|
|
Spencer McIntyre
|
62ab42b797
|
Update vulnerable version numbers and docs
|
2022-08-17 08:55:46 -04:00 |
|
|
space-r7
|
7f02daac5b
|
change default password
|
2022-08-09 16:12:54 -05:00 |
|
|
Spencer McIntyre
|
0e148d6ba4
|
Update and rename the module
|
2022-08-09 13:32:09 -04:00 |
|
|
Spencer McIntyre
|
2290b04995
|
Update the exploit with the new gadget chain
|
2022-08-08 17:52:53 -04:00 |
|
|
space-r7
|
0334beada2
|
Land #16758, add ManageEngine ADAudit Plus exploit
|
2022-08-05 12:19:42 -05:00 |
|
|
space-r7
|
4202502992
|
make some prints vprints, add steps
|
2022-08-05 11:34:46 -05:00 |
|
|
Ron Bowes
|
7c21c57564
|
Merge branch 'master' into manageengine-adauditplus-cve-2022-28219
|
2022-08-04 14:07:50 -07:00 |
|
|
Ron Bowes
|
713e476139
|
Remove 'puts' again
|
2022-08-04 12:59:11 -07:00 |
|
|
Ron Bowes
|
7844b8f5f8
|
Encode usernames containing spaces into 8.3
|
2022-08-04 12:55:08 -07:00 |
|
|
Ron Bowes
|
530174c940
|
Remove an errant puts
|
2022-08-04 12:42:14 -07:00 |
|
|
Ron Bowes
|
969c81e41c
|
Improve the FTP reverse connection in two ways - 1-add a terminator so we know when it's done, and 2-don't fail the whole thing if we fail on one name
|
2022-08-04 11:13:46 -07:00 |
|
|
Ron Bowes
|
2ec25fc3e5
|
Add a timeout to the reverse FTP connection
|
2022-08-03 15:17:02 -07:00 |
|
|
Jack Heysel
|
82182f7815
|
Land #16852, Zoho PMP XML-RPC Unauth RCE module
Add in exploit module for CVE-2022-35405 aka Zoho
Password Manager Pro XML-RPC Unauthenticated RCE
|
2022-08-02 17:18:28 -04:00 |
|
|
Grant Willcox
|
6d45320c0c
|
Update exploit title/name
|
2022-08-02 14:27:27 -05:00 |
|
|
space-r7
|
175c428ff9
|
remove on_new_session logic
|
2022-08-02 13:41:23 -05:00 |
|
|
space-r7
|
ea1207d6e1
|
add authentication
|
2022-08-02 12:31:52 -05:00 |
|
|
Grant Willcox
|
f0e62de46a
|
Add CVE-2022-35405 docs and module
|
2022-08-02 11:57:56 -05:00 |
|
|
Ron Bowes
|
d86e666e18
|
Change Platform to 'win'
|
2022-08-01 15:37:58 -07:00 |
|
|
Grant Willcox
|
7df60f71b6
|
Remove SCHELEVATOR echo statement as its not needed anymore
|
2022-07-28 11:02:59 -05:00 |
|