 h00die
|
6944e67f5c
|
add missing docs
|
2020-10-30 11:36:28 -04:00 |
|
|
Grant Willcox
|
a2e15235b8
|
Make fixes to documentation for smart_hashdump.md to fix msftidy issues and improve readability
|
2020-10-08 14:07:44 -05:00 |
|
|
0x44434241
|
73e826486f
|
Adding some basic documentation, as it was missing for this module.
|
2020-10-08 12:58:31 +09:00 |
|
|
Ivanov Vladimir
|
32b489408e
|
Update docs
|
2020-10-07 10:12:10 -05:00 |
|
|
Grant Willcox
|
5ad2190c40
|
Apply updates to the module from the review process and a minor update to the documentation to note the renaming of the PATH option to URIPATH. Also update the check method so that it now works correctly and so that other functions return errors appropriately.
|
2020-10-07 10:08:57 -05:00 |
|
|
Ivanov Vladimir
|
cc721fd64f
|
Update several functions to apply review edits and also update the documentation accordingly.
|
2020-10-07 10:07:48 -05:00 |
|
|
Ivanov Vladimir
|
24d14f8816
|
Rename URN to PATH in several functions. Also change check function.
|
2020-10-07 10:04:55 -05:00 |
|
|
Grant Willcox
|
8a8dfafcc3
|
Rename the files and update some descriptions as there may be more XXE bugs in SAP in the future. Also update the documentation accordingly.
|
2020-10-07 10:04:03 -05:00 |
|
|
Grant Willcox
|
14f4de1f0c
|
Clean up documentation to improve English and descriptions, and to also remove some excess information that was leading to some potential confusion
|
2020-10-07 10:04:03 -05:00 |
|
|
Vladimir Ivanov
|
7c682af98b
|
Create sap_igs_xxe.rb and its associated documentation, and apply RuboCop fixes.
|
2020-10-07 10:03:09 -05:00 |
|
|
bwatters
|
3a6293357e
|
Land #14190, Add the DOMAIN option to the CVE-2020-0688 Exploit
Merge branch 'land-14190' into upstream-master
|
2020-10-05 12:12:21 -05:00 |
|
|
h00die
|
15bb690308
|
fix vulnerability spelling
|
2020-10-04 13:00:48 -04:00 |
|
|
Grant Willcox
|
f45d9b295a
|
Land #14204, Update the module docs for CVE-2020-1472 (Zerologon)
|
2020-10-01 10:09:19 -05:00 |
|
|
bwatters
|
e24a81919a
|
Land #13996, Add module for CVE-2020-9801, CVE-2020-9850 and CVE-2020-9856,
RCE for Safari on macOS 10.15.3 (pwn2own2020)
Merge branch 'land-13996' into upstream-master
|
2020-10-01 09:46:39 -05:00 |
|
|
Spencer McIntyre
|
bf13ffc692
|
Update documentation based on feedback
|
2020-10-01 09:19:15 -04:00 |
|
|
Spencer McIntyre
|
377c019d99
|
Update the module docs for CVE-2020-1472
|
2020-09-30 17:41:14 -04:00 |
|
|
Grant Willcox
|
fb73be7e35
|
Land #14199, Fix SecureCRT missing registry key bug
|
2020-09-30 13:17:06 -05:00 |
|
|
Grant Willcox
|
b0bad9fc85
|
Fix up small issue with one of the checks and update the documentation with the new SESSION_PATH option
|
2020-09-30 12:26:32 -05:00 |
|
|
Spencer McIntyre
|
c0b42ff7a2
|
Land #13995, Add a Windows Secrets Dump module
|
2020-09-30 11:47:59 -04:00 |
|
|
bwatters
|
3aeeede4a6
|
Land #14187, Added CVE-2020-3433 module
Merge branch 'land-14187' into upstream-master
|
2020-09-29 13:41:33 -05:00 |
|
|
Christophe De La Fuente
|
9cb419ae8c
|
Resync with master branch
|
2020-09-28 15:45:02 +02:00 |
|
|
Spencer McIntyre
|
e7d2b73600
|
Add a DOMAIN option to CVE-2020-0688 for consistency with other modules
|
2020-09-28 09:24:39 -04:00 |
|
|
Christophe De La Fuente
|
59fff3d7fe
|
Land #14161, VyOS config processor
|
2020-09-28 13:02:19 +02:00 |
|
|
Shelby Pace
|
f0f4da2b1e
|
Land #14157, Windows update orchestrator privesc
|
2020-09-25 16:07:27 -05:00 |
|
|
Antoine GOICHOT
|
fef88f27eb
|
Added CVE-2020-3433 module
|
2020-09-25 23:04:58 +02:00 |
|
|
Shelby Pace
|
2111865acf
|
remove stray backtick
|
2020-09-25 16:04:46 -05:00 |
|
|
Christophe De La Fuente
|
7bfc47f08a
|
Land #14175, MaraCMS 7.5 Arbitrary File Upload (CVE-2020-25042)
|
2020-09-25 20:24:55 +02:00 |
|
|
bwatters
|
2ed72007e0
|
Typos and cleanup
|
2020-09-25 12:27:55 -05:00 |
|
|
Shelby Pace
|
2f083b03dd
|
Land #14140, add software enumeration module
|
2020-09-23 18:43:28 -05:00 |
|
|
Grant Willcox
|
1710b98ba4
|
Land #14173, Unify the socks modules using a VERSION option
|
2020-09-22 17:09:34 -05:00 |
|
|
Grant Willcox
|
6d78a54e61
|
Update the documentation to include the output of 'show options' so people can see what options we are running it with, and so it uses MSF6 prompts
|
2020-09-22 17:08:56 -05:00 |
|
|
kalba-security
|
e65083c092
|
Add maracms_upload_exec.rb exploit module and docs
|
2020-09-22 16:53:29 -04:00 |
|
|
Grant Willcox
|
13bf1b7711
|
Land #14118, SecureCRT Session Credential Grabber, try 2
|
2020-09-22 15:38:25 -05:00 |
|
|
Grant Willcox
|
a96827a823
|
Land #14118, SecureCRT Session Credential Grabber
|
2020-09-22 15:17:04 -05:00 |
|
|
Grant Willcox
|
02320dd76f
|
Apply tidying fixes to the documentation to make it msftidy_docs.rb compatible.
|
2020-09-22 14:54:33 -05:00 |
|
|
Grant Willcox
|
b9fa36c89b
|
Add in option to decrypt Login Script V3 within session files and also update some of the existing regex to fix some minor mistakes
|
2020-09-22 14:47:28 -05:00 |
|
|
William Vu
|
f74eba731e
|
Land #14151, Zerologon (CVE-2020-1472) module
|
2020-09-22 14:02:23 -05:00 |
|
|
bwatters
|
6cf3c0491f
|
Add documentation
|
2020-09-22 12:16:29 -05:00 |
|
|
Spencer McIntyre
|
77f0d90bf0
|
Unify the socks modules using a VERSION option
|
2020-09-22 10:16:00 -04:00 |
|
|
Christophe De La Fuente
|
2d1b378a18
|
Land #14122, Jenkins Deserialization RCE (CVE-2017-1000353)
|
2020-09-22 12:32:09 +02:00 |
|
|
Shelby Pace
|
2ae50e9304
|
Land #14025, add Artica Proxy auth bypass / rce
|
2020-09-21 15:27:53 -05:00 |
|
|
h00die
|
610d4d86d2
|
initial vyos implementation
|
2020-09-20 19:48:20 -04:00 |
|
|
h00die
|
ee77cc8e78
|
Land #14123, vyos restricted shell escape and priv escalation
|
2020-09-19 09:13:38 -04:00 |
|
|
Spencer McIntyre
|
a810d37c47
|
Move the NetrServerPasswordSet2 DCERPC data defs into RubySMB
|
2020-09-18 16:19:23 -04:00 |
|
|
Spencer McIntyre
|
fdedcfa600
|
Updates to use the latest proposed RubySMB changes
|
2020-09-18 14:27:14 -04:00 |
|
|
Brendan Coles
|
6208f8795a
|
vyos_restricted_shell_privesc: support login as admin user
|
2020-09-18 15:49:25 +00:00 |
|
|
Grant Willcox
|
f6b032b744
|
Add warning about Linux results to documentation and to the module's description field
|
2020-09-18 10:35:59 -05:00 |
|
|
Shelby Pace
|
74669f4052
|
Land #14135, add tp-link command injection
|
2020-09-18 09:47:02 -05:00 |
|
|
Shelby Pace
|
f4bfad0439
|
msftidy_docs changes
|
2020-09-18 09:42:14 -05:00 |
|
|
Pietro Oliva
|
5f204257a5
|
Remove unnecessary comma, fix docs
|
2020-09-18 10:15:23 -04:00 |
|