 Grant Willcox
|
fddd3f15c2
|
Fix up code so that it will not block on attempting to delete the configuration on the folder, just in case the configuration doesn't exist in the first place. Instead print a warning and continue.
|
2022-02-22 17:52:29 -06:00 |
|
|
Grant Willcox
|
a7ace66b3f
|
Use send_request_cgi and update options to use HttpUsername and HttpPassword accordingly. This simplifies code. Also update documentation accordingly
|
2022-02-14 18:19:00 -06:00 |
|
|
Grant Willcox
|
c49591cf11
|
Add in changes to use targets array as per Spencer's suggestion so we can now spawn Meterpreter shells. Also remove ACCOUNT_LOCKOUTS and fix a call that should have been .get_xml_document
|
2022-02-14 17:38:10 -06:00 |
|
|
Grant Willcox
|
4c1b2478fa
|
Add in exploit and documentation
|
2022-02-11 13:58:56 -06:00 |
|
|
William Vu
|
d55af3aa00
|
Add module doc
|
2021-12-23 12:27:57 -06:00 |
|
|
William Vu
|
344bdacae4
|
Remove preferred payload
We'll add it back to Framework later.
|
2021-11-24 10:44:59 -06:00 |
|
|
William Vu
|
d2c322e875
|
Revert option name styling in module doc
Bug in our local renderer's styling. GitHub renders it just fine.
|
2021-11-23 19:05:26 -06:00 |
|
|
William Vu
|
053dc70782
|
Add words to module doc
|
2021-11-23 19:05:09 -06:00 |
|
|
William Vu
|
a8daed1e79
|
Add module doc
|
2021-11-23 19:05:09 -06:00 |
|
|
Grant Willcox
|
8d55b16ade
|
Fix one more mistake and rename document and module to a more easy to find name
|
2021-11-11 16:42:58 -06:00 |
|
|
Grant Willcox
|
27310dc002
|
Add in exploit and documentation for CVE-2021-42237
|
2021-11-10 15:52:22 -06:00 |
|
|
adfoster-r7
|
9f0804cbfb
|
Fix Meterpreter spelling mistake
|
2021-10-12 23:40:43 +01:00 |
|
|
Spencer McIntyre
|
56cd43a8b8
|
Land #15624, Add module for CVE-2020-27955
|
2021-09-15 14:54:19 -04:00 |
|
|
Jack Heysel
|
abbb994dab
|
Updated docs
|
2021-09-07 13:55:21 -04:00 |
|
|
Jack Heysel
|
7fe44583fe
|
Updated docs
|
2021-09-07 13:32:52 -04:00 |
|
|
Jack Heysel
|
3c43bd409d
|
Added docs an Git User-Agent FP
|
2021-09-03 16:15:39 -05:00 |
|
|
Spencer McIntyre
|
95015f0c2b
|
Update the ProxyShell module docs
|
2021-08-27 17:50:28 -04:00 |
|
|
wvu
|
bcf00a0d3a
|
Update exchange_proxyshell_rce.md
|
2021-08-18 14:38:56 -05:00 |
|
|
Spencer McIntyre
|
75e63992d6
|
Write an exploit for ProxyShell
|
2021-08-18 10:50:34 -04:00 |
|
|
William Vu
|
6fbaecf919
|
Backport print changes to recent modules
|
2021-07-08 21:26:35 -05:00 |
|
|
Grant Willcox
|
62f9d15ba3
|
Land #15314, Add Exploit for CVE-2021-31181 (SharePoint RCE)
|
2021-06-16 10:39:49 -05:00 |
|
|
Spencer McIntyre
|
d1be69eae6
|
Implement changes based on PR feedback
|
2021-06-14 10:15:27 -04:00 |
|
|
Spencer McIntyre
|
edee95bbb2
|
Update the check to not fail if a COOKIE is used
|
2021-06-10 11:29:07 -04:00 |
|
|
agalway-r7
|
1858b574ec
|
Land #15305, Authenticated RCE module for NSClient++
|
2021-06-09 15:38:34 +01:00 |
|
|
Yann Castel
|
14c5924044
|
rubocop for documentation is ok
|
2021-06-09 09:08:19 +02:00 |
|
|
Yann Castel
|
674eb51f86
|
add scenario + small changes
|
2021-06-09 08:59:35 +02:00 |
|
|
Spencer McIntyre
|
3afe3ebfa3
|
Add the module docs
|
2021-06-08 15:23:24 -04:00 |
|
|
Hakyac
|
fd988f7f29
|
Update documentation/modules/exploit/windows/http/nscp_authenticated_rce.md
Co-authored-by: bcoles <bcoles@gmail.com>
|
2021-06-08 16:35:10 +02:00 |
|
|
Hakyac
|
e1030226de
|
Update documentation/modules/exploit/windows/http/nscp_authenticated_rce.md
Co-authored-by: bcoles <bcoles@gmail.com>
|
2021-06-08 15:17:53 +02:00 |
|
|
Hakyac
|
0834fa122d
|
Update documentation/modules/exploit/windows/http/nscp_authenticated_rce.md
Co-authored-by: bcoles <bcoles@gmail.com>
|
2021-06-08 15:17:34 +02:00 |
|
|
Hakyac
|
e53ca42570
|
Update documentation/modules/exploit/windows/http/nscp_authenticated_rce.md
Co-authored-by: bcoles <bcoles@gmail.com>
|
2021-06-08 15:16:12 +02:00 |
|
|
Yann Castel
|
bf96b88446
|
add default port + set ssl to true
|
2021-06-07 16:48:16 +02:00 |
|
|
Yann Castel
|
6a7e30749d
|
initial commit
|
2021-06-07 14:39:10 +02:00 |
|
|
William Vu
|
6498554084
|
Clean up NetMotion Mobility exploit and docs
Refactor target selection once again.
|
2021-06-02 23:47:01 -05:00 |
|
|
William Vu
|
1f9a3d99bb
|
Add module doc
|
2021-05-17 13:58:03 -05:00 |
|
|
Shelby Pace
|
71914a1ddb
|
Land #14813, additional dup scout bof targets
|
2021-04-01 13:03:57 -05:00 |
|
|
Spencer McIntyre
|
11f4946817
|
Tweak some ProxyLogon verbiage for clarity
|
2021-03-29 10:07:43 -04:00 |
|
|
RAMELLA Sébastien
|
02b240b22a
|
code review
|
2021-03-29 14:23:39 +04:00 |
|
|
bwatters
|
6505f9ccbd
|
Land #14830, Adding FortiLogger 4.4.2.2 - Unauthenticated Arbitrary File Upload (CVE-2021-3378)
Merge branch 'land-14830' into upstream-master
|
2021-03-24 17:41:10 -05:00 |
|
|
bwatters
|
e2dfca86f9
|
Add warning for failures after rebooting to the documentation.
|
2021-03-24 17:32:08 -05:00 |
|
|
Christophe De La Fuente
|
2dcd0fad04
|
Land #14860, Auxiliary/Exploit Scanner/Gather/RCE for Exchange ProxyLogon (CVE-2021-26855)
|
2021-03-23 13:10:15 +01:00 |
|
|
RAMELLA Sébastien
|
37b0552803
|
last code review before land
|
2021-03-22 23:20:40 +04:00 |
|
|
William Vu
|
d4d9001c84
|
Fix typos
|
2021-03-22 14:16:45 -05:00 |
|
|
Spencer McIntyre
|
8605fe4529
|
Use POST for the check method and write the module docs
|
2021-03-22 15:04:21 -04:00 |
|
|
RAMELLA Sébastien
|
c543b44fc2
|
fix: CmdStagerFlavor, add: Powershell target, ...
|
2021-03-21 22:47:27 +04:00 |
|
|
RAMELLA Sébastien
|
f5c807590c
|
a last round of review + rubocop
|
2021-03-20 01:23:43 +04:00 |
|
|
RAMELLA Sébastien
|
6e34a80693
|
fix. OAB + code review
|
2021-03-19 10:19:57 +04:00 |
|
|
RAMELLA Sébastien
|
59955f0a32
|
add. timeout and fix. CmdStagerFLavor
|
2021-03-15 01:10:56 +04:00 |
|
|
RAMELLA Sébastien
|
dcf2b69d6d
|
add. exploitation module doc and some changes
|
2021-03-14 22:49:41 +04:00 |
|
|
Grant Willcox
|
8dce1acd64
|
Land #14794, dup_scout_enterprise_login_bof: Add v9.9.14 target and auto targeting
|
2021-03-12 12:07:57 -06:00 |
|