24de5d6ee3
Update to use CmdStager
2019-01-08 20:07:35 -08:00
bab651e94d
Add Imperva SecureSphere module
2019-01-07 22:18:04 -08:00
6e450973b9
Land #10295 , Add QNAP Q'Center change_passwd Command Execution exploit
2018-07-14 10:09:46 -05:00
1ad571f136
Fix password typo
2018-07-13 16:02:15 +10:00
392cf3bbe1
Are hosts?
2018-07-13 15:00:31 +10:00
358347358f
Add documentation
2018-07-13 04:18:56 +00:00
c9001699cd
Land #10027 , Hadoop unauthed command execution
2018-07-12 21:58:49 -05:00
50252c75d6
Clean up module
...
With a little rubocop -a.
2018-07-12 21:58:00 -05:00
acb20e5a29
Land #9780 , CouchDB auth bypass and RCE
2018-07-12 03:36:17 -05:00
1af360d7e0
Land #10108 , add IBM QRadar SIEM exploit
2018-07-10 11:52:32 -05:00
625050767e
add module docs
2018-07-10 11:51:57 -05:00
05a0d79be7
Land #10219 , Add HP VAN SDN Controller exploit
2018-07-05 14:21:44 -05:00
830c17f07e
Update outdated print in module doc
2018-07-05 14:18:33 -05:00
53d5d82498
Rename module to match new vector
2018-07-05 13:31:16 -05:00
12a0aaeaf1
Add module doc
2018-07-03 18:31:43 -05:00
7a966e7b9d
Change unauthorized to unauthenticated
2018-07-01 22:43:54 -04:00
fc3199259b
Land #9958 , Nagios xi 2 electric
2018-06-29 12:16:18 -05:00
675a736ab7
Update Docs
2018-06-29 11:08:31 -05:00
6ae55aadd4
Fixing documentation, improving exploits code
2018-05-20 12:55:46 -04:00
c5bdd2ca9d
Add doc for this module
2018-05-15 03:47:09 -04:00
8dd7a27f7b
Fixes according to code review
2018-05-14 05:46:23 -04:00
382364a3ff
Adding documentation, improving description
2018-05-13 15:04:40 -04:00
369c74aa19
Doc typo
2018-05-06 22:32:26 -05:00
dece3e3386
Doc update
2018-05-06 22:25:55 -05:00
1997a57627
Count gooder
2018-05-06 22:21:40 -05:00
8141e949fc
Note the runtimes
2018-05-05 18:34:11 -05:00
a1092fcfd7
Add documentation
2018-05-05 15:48:44 -05:00
4c8ad3ca9c
Removing old exploit/docs
2018-04-30 22:26:37 -04:00
ad8bf6d8e3
Renamed exploit to electric boogaloo
2018-04-30 22:20:35 -04:00
1806c247f1
Fixing tabbed spaces, version number in documentation
2018-04-26 18:15:39 -04:00
b547e6282e
Adding print statement to run the corresponding post module
2018-04-26 17:55:31 -04:00
37a32c2726
Adding module for Nagios XI remote root exploit.
...
See http://blog.redactedsec.net/exploits/2018/04/26/nagios.html for
more information.
2018-04-26 17:42:10 -04:00
6a45e0299b
Add document of exploit module apache_couchdb_cmd_exec
2018-03-29 02:40:51 -04:00
4b8a8fa2b1
Land #9441 , Create exploit for AsusWRT LAN RCE
...
Merge branch 'land-9441' into upstream-master
2018-02-22 10:40:45 -06:00
f89cebbd89
Add sploit doc
2018-02-20 19:35:10 +00:00
d3084638fa
Update netgear_r7000_cgibin_exec docs
...
- Add 'Introduction' header
- Make module name in intro into code (easier to read)
2018-02-02 20:23:43 -05:00
6f086e9110
Fix broken link
2018-02-02 20:08:38 -05:00
8eb6df41e3
Land #9205 , Documentation for Kaltura <= 13.1.0 RCE (CVE-2017-14143)
...
Merge branch 'land-9205' into upstream-master
2018-01-23 12:45:59 -06:00
04806bc84a
Updates to documentation per h00die
2018-01-23 12:44:39 -06:00
aae77fc1a4
Land #9349 , GoAhead LD_PRELOAD CGI Module
2018-01-22 23:10:36 -06:00
6510ee53bc
Land #9204 , Add exploit for Samsung SRN-1670D (CVE-2017-16524)
...
Land #9204
2018-01-10 20:15:29 -06:00
18c179a091
Update module and add documentation
...
This updates the module to pass:
* msftidy
* Ruby style guidelines
* Proper usage of Metasploit API
* Mostly other cosmetic fixes
A documentation is also added.
2018-01-10 20:13:42 -06:00
c3f10c1d57
Land #9336 , Linksys WVBR0-25 exploit
2018-01-03 18:13:44 -06:00
589de0483b
Clarification in product linkage and small syntax fixup in repro steps
2018-01-03 17:00:26 -06:00
a5fa63405f
Land #9206 , Add Xplico RCE exploit module
2018-01-03 16:02:51 -06:00
3b0f0aa358
Adding doc file for module linksys_wvbr0_user_agent_exec_noauth
2018-01-02 14:54:18 -06:00
54159c29eb
Add documentation line from h00die
2017-12-29 16:14:28 -06:00
eb696ee5cf
Documentation update
2017-12-28 16:30:04 -06:00
b86fd551a3
Add a WIP of the module documentation
2017-12-28 14:00:03 -06:00
e6de25d63b
Land #9316 Cambium modules and mixins, tx @juushya
...
These cover several of the CVEs mentioned in
https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
2017-12-26 12:39:51 -06:00
rsp3ar