a25b0ee5e0
Land #18713 , Add generic memory search post/multi module
2024-01-23 12:57:24 +00:00
46a0052286
Land #18568 , added exploit for CVE-2023-32781 - PRTG authenticated RCE
...
Merge branch 'land-18568' into upstream-master
2024-01-22 11:35:38 -06:00
06dcc82ced
Land #18630 , Add CVE-2023-50917: MajorDoMo RCE
...
Add CVE-2023-50917: MajorDoMo Command Injection Module
2024-01-19 17:10:40 -05:00
fadb0f45dd
Land #18708 , Ivanti Connect Secure RCE exploit module (CVE-2023-46805 and CVE-2024-21887)
...
Merge branch 'land-18708' into upstream-master
2024-01-19 15:47:43 -06:00
847a72c417
Land #18638 , add exploit for CVE-2022-42889 Apache Commons Text RCE
2024-01-19 13:02:53 +01:00
5ba4aba912
Update documentation/modules/exploit/linux/http/ivanti_connect_secure_rce_cve_2023_46805.md
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2024-01-18 09:18:28 +00:00
b8aa55c322
Land #18633 , WordPress Backup Migration Plugin PHP Filter Chain RCE (CVE-2023-6553)
2024-01-17 18:42:52 +01:00
6d14a244a4
Add generic memory search module documentation
2024-01-17 15:55:26 +00:00
a8d46b3e7a
Land #18627 , Ansible: post gather module, payload deployer, and file reader
2024-01-17 15:26:25 +01:00
2919b36f2b
add in docs
2024-01-17 10:25:04 +00:00
225ef6847f
Add output from test run on windows target
2024-01-15 00:26:47 +05:30
6d8666e35b
Fixed spacing and removed unused method
2024-01-11 13:13:57 -05:00
cdc66dd91f
Last minute fix
2024-01-11 12:56:01 -05:00
5c7061cc0c
Remove OS dependant payload
2024-01-11 12:30:04 -05:00
e711c9ea43
ansible review
2024-01-10 17:16:57 -05:00
57c882cab5
Land #18604 , Add Post Windows Gather to perform Mikrotik Winbox "Keep Password" credentials extraction
...
Merge branch 'land-18604' into upstream-master
2024-01-09 15:38:35 -06:00
98667edf76
Add suggested changes
2024-01-05 22:31:51 +05:30
2028fbd226
Land #18404 , Working Module for CVE-2023-38146
2024-01-04 12:20:26 -05:00
beef573fb8
Land #18635 , Authenticated Splunk Info Disclosure
...
This PR adds a module for an authenticated Splunk information
disclosure. This module gathers information about the host
machine and the Splunk install including OS version, build,
CPU arch, Splunk licnese keys etc.
2023-12-28 11:20:52 -05:00
d0beea91bd
Add exploit for CVE-2022-42889
2023-12-25 00:43:50 +05:30
11c12fcb6d
review comments
2023-12-23 13:23:34 -05:00
3182cb4000
Land #18612 , Craft CMS unauthenticed RCE [CVE-2023-41892]
2023-12-22 10:59:39 +01:00
0a2dea523f
Add suggested changes
2023-12-22 00:04:54 +01:00
ce43db0904
Fix TBDs and give better documentation.
2023-12-21 16:18:36 -06:00
0394f5f7ad
splunk 6.6.0+
2023-12-20 20:47:04 -05:00
78bac2636b
Add documentation
2023-12-20 18:44:05 -06:00
eeb74cd5e1
Updated metadata
2023-12-20 16:49:45 -05:00
6fc0704930
Land #18477 , Add docs for nessus_rest_login
2023-12-20 16:49:09 -05:00
e3062d45e0
Module working docs updated
2023-12-20 16:41:52 -05:00
300c53d005
Fix typos and tweak the section order
2023-12-20 16:31:52 -05:00
a31de9eb05
Adding Splunk Info Disclosure module.
2023-12-20 14:07:50 -05:00
fb26c93291
Land #18541 , Glibc Tunables Privilege Escalation CVE-2023-4911 (Looney Tunables)
2023-12-20 20:04:21 +01:00
7ca256560d
Land #18542 , Vinchin Backup & Recovery Command Injection
2023-12-20 18:56:50 +01:00
22a05c8bf5
Add CVE-2023-50917
2023-12-20 00:43:00 +01:00
065abf6b92
Rubocop, doc scenario update
2023-12-19 12:30:02 -05:00
4e61596e7a
Check Build ID before running exploit
2023-12-19 12:15:35 -05:00
549ee43df9
Update docs description minor comments
2023-12-19 00:32:21 -05:00
c895364675
Initial commit, files created
2023-12-18 19:26:14 -05:00
45d2c7f4e0
Land #18566 , CVE-2023-22518: Confluence Auth Bypass Restore From Backup RCE
2023-12-18 18:51:36 +01:00
5d7cf90521
Some minor changes to the module and documentation
2023-12-18 08:23:16 +00:00
9ac3739605
Minor changes to the documentation
2023-12-17 13:51:30 +00:00
0641839e69
Added documentation and removed debug info
2023-12-17 13:10:18 +00:00
c911ec1413
ansible collection
2023-12-16 07:16:26 -05:00
2f3e207277
Fixed documentation for exploit
2023-12-15 13:58:10 +01:00
d9aa7f914e
Added newline to PoC and removed empty file
2023-12-14 18:42:09 -05:00
df111afb06
Glibc Tunables Exploit
2023-12-14 18:28:43 -05:00
f5e81aee2a
Add docs for ssh_identify_pubkey using Metasploitable2 as target
2023-12-13 17:00:46 +00:00
603e5b2bff
Land #18569 , Add a module to perform ASREP-roasts
...
This adds a module to gather credential material from accounts
with Requires Pre-Authentication disabled. The module supports two
mechanisms, Brute Forcing using a list of usernames or using a LDAP
query to request the relevant usernames, followed by requesting TGTs.
2023-12-11 19:58:06 -05:00
862194d63f
Documentation and rubocop changes
2023-12-11 19:01:35 -05:00
daa6d5363f
Land #18577 , Added RCE Module for Splunk Enterprise (CVE-2023-46214)
...
Merge branch 'land-18577' into upstream-master
2023-12-11 15:52:05 -06:00
adfoster-r7