 sfewer-r7
|
b1327361e9
|
add in new CVE ID and vendor advisory
|
2025-11-14 17:04:33 +00:00 |
|
|
sfewer-r7
|
06fbe46172
|
add in aux moduel for recent FortiWeb exploit
|
2025-11-14 12:02:10 +00:00 |
|
|
h00die
|
c629dc408c
|
replace some bolds
|
2025-10-14 20:44:00 -04:00 |
|
|
h00die
|
1f479ddedc
|
update doc options to h3 from bold
|
2025-10-14 20:23:50 -04:00 |
|
|
Sebastien Dionne
|
77f760c1bf
|
Fix typos in documentation
|
2025-10-05 12:01:16 -04:00 |
|
|
Jack Heysel
|
e9ab1d0839
|
Update esc_update_ldap module so shadow creds not required
|
2025-09-23 14:37:55 -07:00 |
|
|
adfoster-r7
|
093d9f9a99
|
Fix rendering issue on kerberos docs
|
2025-08-11 12:13:53 +01:00 |
|
|
Jack Heysel
|
de15d1e449
|
Minor doc update
|
2025-07-30 15:08:14 -07:00 |
|
|
Jack Heysel
|
e88883c82b
|
ESC9, ESC10 ESC16 exploit support
|
2025-07-30 15:08:14 -07:00 |
|
|
cgranleese-r7
|
adff497bd2
|
Updates msf5 as well
|
2025-07-17 11:51:29 +01:00 |
|
|
cgranleese-r7
|
469f102596
|
Updates docs to reflect new default prompt
|
2025-07-17 09:53:40 +01:00 |
|
|
Brendan
|
36675ccd9a
|
Merge pull request #20349 from sfewer-r7/0day-cve-2024-51978
Add auxiliary module for multiple Brother devices authentication bypass (CVE-2024-51978)
|
2025-07-09 13:07:25 -05:00 |
|
|
sfewer-r7
|
34952d73f6
|
display the AuthCookie if one is received
|
2025-07-09 10:15:30 +01:00 |
|
|
sfewer-r7
|
a7e4b5601f
|
update the docs to use AUTO for the enum option
|
2025-07-01 15:06:44 +01:00 |
|
|
sfewer-r7
|
83a03efa3b
|
aux module for CVE-2024-51978
|
2025-06-20 16:41:39 +01:00 |
|
|
Brendan
|
cc98ef58d4
|
Merge pull request #20140 from h4x-x0r/CVE-2023-2915
ThinManager Path Traversal Delete (CVE-2023-2915) Module
|
2025-06-05 10:08:42 -05:00 |
|
|
Brendan
|
312d052a5c
|
Merge pull request #20141 from h4x-x0r/CVE-2023-2917
ThinManager Path Traversal Upload (CVE-2023-2917) Module
|
2025-06-04 16:48:39 -05:00 |
|
|
Brendan
|
10d443d5d9
|
Merge pull request #20138 from h4x-x0r/CVE-2023-27855
ThinManager Path Traversal Upload (CVE-2023-27855) Module
|
2025-06-04 12:41:34 -05:00 |
|
|
Simon Janusz
|
d497156f84
|
Merge pull request #20258 from zeroSteiner/fix/issue/20251
Update the ldap options for shadow credentials
|
2025-06-03 17:45:18 +01:00 |
|
|
Simon Janusz
|
043f8cb6b4
|
Merge pull request #20260 from zeroSteiner/fix/issue/20252
Update the ldap/change_password module
|
2025-06-03 17:44:26 +01:00 |
|
|
Spencer McIntyre
|
3057f80a1b
|
Update the ldap options for shadow credentials
|
2025-06-03 12:29:04 -04:00 |
|
|
bwatters-r7
|
e282bbda99
|
Update datastore option names in module and docs
|
2025-05-28 09:23:36 -05:00 |
|
|
Spencer McIntyre
|
dae8c9b43a
|
Update the ldap/change_password module
|
2025-05-28 10:19:30 -04:00 |
|
|
h4x-x0r
|
1cc0269edf
|
more versions tested
|
2025-05-07 18:05:57 +01:00 |
|
|
h4x-x0r
|
b5989070d0
|
path update
|
2025-05-07 18:05:04 +01:00 |
|
|
h4x-x0r
|
9ab2acc50f
|
updated
|
2025-05-07 18:03:58 +01:00 |
|
|
h4x-x0r
|
60668f3e26
|
CVE-2023-2917
|
2025-05-07 04:12:53 +01:00 |
|
|
h4x-x0r
|
8b94a560e7
|
Adjusted path
|
2025-05-07 03:53:36 +01:00 |
|
|
h4x-x0r
|
0491d3894e
|
CVE-2023-2915
|
2025-05-07 03:45:59 +01:00 |
|
|
jheysel-r7
|
08e227faca
|
Merge pull request #19934 from sfewer-r7/bugfix-cisco-iosxe-rce
Improve exploit/linux/misc/cisco_ios_xe_rce (CVE-2023-20198 + CVE-2023-20273)
|
2025-03-27 16:51:16 -07:00 |
|
|
sfewer-r7
|
efb0d5da4c
|
fix typo, C1000v should be CSR1000v. Be consistant with IOS XE and not IOS-XE.
|
2025-03-04 09:09:32 +00:00 |
|
|
jheysel-r7
|
b1d0eedc26
|
Merge pull request #19712 from smashery/naa_creds
NAA creds from SCCM
|
2025-03-03 13:50:31 -08:00 |
|
|
sfewer-r7
|
45dfa5fda9
|
update docs for auxiliary/admin/http/cisco_ios_xe_cli_exec_cve_2023_20198 to show it working on C1000v and C8000v targets.
|
2025-03-03 20:23:55 +00:00 |
|
|
sfewer-r7
|
e71a851e3f
|
mention that the C8000v series appliance version 17.6.5 was observed to not be vulnerable to CVE-2023-20273. Inspecting the Lua code shows this appliance has additional command injection filtering in place (see pexec_setsid in /usr/binos/openresty/nginx/conf/pexec.lua) which prevents the injection from working
|
2025-03-03 20:22:46 +00:00 |
|
|
h4x-x0r
|
41a0e089ea
|
CVE-2025-24865 & CVE-2025-22896
CVE-2025-24865 & CVE-2025-22896
|
2025-02-08 02:22:11 +00:00 |
|
|
Ashley Donaldson
|
556e52d1d2
|
Add missing option docs
|
2024-12-17 17:01:27 +11:00 |
|
|
Ashley Donaldson
|
c2495aff58
|
Properly support there being no NAA creds
|
2024-12-17 17:01:27 +11:00 |
|
|
Ashley Donaldson
|
d52874ac46
|
Allow sessions to be not required. Added documentation.
|
2024-12-17 17:01:26 +11:00 |
|
|
Spencer McIntyre
|
f36d786736
|
Merge pull request #19696 from smashery/add_user_module
Add user module
|
2024-12-10 11:26:49 -05:00 |
|
|
Spencer McIntyre
|
f05145dd1e
|
Tweak the documentation verbiage slightly
|
2024-12-10 10:58:17 -05:00 |
|
|
Spencer McIntyre
|
8b93f1a087
|
Merge branch 'master' into smb_change_pw
|
2024-12-09 09:37:45 -05:00 |
|
|
Spencer McIntyre
|
909476ee64
|
Merge pull request #19671 from smashery/ldap_change_pw
LDAP Change Password module
|
2024-12-06 17:13:50 -05:00 |
|
|
Ashley Donaldson
|
75a334ca0a
|
Changes from code review
|
2024-12-06 16:05:53 +11:00 |
|
|
Ashley Donaldson
|
7c46d4d02d
|
Updated text to be clearer about the AES kerberos behaviour
|
2024-12-06 14:28:44 +11:00 |
|
|
Ashley Donaldson
|
d5b2d760e8
|
Updated ancillary documentation
|
2024-12-06 07:53:19 +11:00 |
|
|
h00die
|
1906646e67
|
peer review
|
2024-11-28 13:18:47 -05:00 |
|
|
Ashley Donaldson
|
cd780e4339
|
Added documentation
|
2024-11-22 13:12:38 +11:00 |
|
|
Ashley Donaldson
|
afc735f4a4
|
Add documentation
|
2024-11-20 15:36:36 +11:00 |
|
|
Ashley Donaldson
|
d396d06e35
|
Enable adding Users, not just computers (if permissions allow)
Also added extra error handling for when password is wrong or expired
|
2024-11-12 12:33:29 +11:00 |
|
|
h00die
|
2b593bcf54
|
wp_post_smtp_acct_takeover peer review
|
2024-11-03 13:52:55 -05:00 |
|