Commit Graph

3336 Commits

Author SHA1 Message Date
bwatters-r7 0b051a6f23 Land #13562, iis_internal_ip docs and vprint_status
Merge branch 'land-13562' into upstream-master
2020-06-08 17:18:47 -05:00
h00die 9c14dcc825 spelling 2020-06-08 12:28:53 -04:00
cappetta 30a2441fc4 editorial update - PR feedback 2020-06-08 12:10:47 -04:00
cappetta ae12b9530b editorial update 2020-06-08 11:16:20 -04:00
h00die 1602d7e975 iis internal ip update 2020-06-06 10:19:29 -04:00
bwatters-r7 19050012fe Land #13306, enum_xchat updates and upgrades
Merge branch 'land-13306' into upstream-master
2020-06-05 18:27:06 -05:00
bwatters-r7 5932e75e1f Land #13384, Add Cisco UCS Director auth bypass, directory traversal(s),
and Cloupia script RCE (CVE-2020-3243 / ZDI-20-540)

Merge branch 'land-13384' into upstream-master
2020-06-04 14:55:01 -05:00
Shelby Pace 51fca24a38 Land #13545, add drag / drop file upload rce 2020-06-04 10:35:03 -05:00
Shelby Pace 329ba1091f add session_created, fix typo 2020-06-04 10:32:17 -05:00
William Vu 8ad7b71829 Land #13552, WebLogic CVE-2020-2883 exploit 2020-06-03 19:52:52 -05:00
William Vu 32ae47c9a9 Add Cisco UCS Director Cloupia script RCE 2020-06-02 22:13:07 -05:00
h00die ff067088fd docs 2020-06-02 16:24:04 -04:00
Shelby Pace d0afec2e99 add documentation 2020-06-02 14:24:58 -05:00
Spencer McIntyre c7c23a72b1 Land #13512, Add vbulletin_getindexablecontent exploit and auxillary modules 2020-06-01 18:03:08 -04:00
h00die a6b6d7b14d make markdown not ruby 2020-05-30 21:21:31 -04:00
h00die 41b512ecda dnd multi file upload rce 2020-05-30 21:07:46 -04:00
William Vu f60e569c1b Add Cisco CML and VIRL-PE advisory to Salt modules
Hat tip @brudis-r7!
2020-05-29 15:24:00 -05:00
Zenofex e5dcb2e23c Switch to use res.get_json_document from JSON.parse and more cleanup. 2020-05-28 11:16:44 -05:00
Alan Foster f1c492fa2d Land #13470, Pi-Hole < 4.3.3 dhcp static address RCE 2020-05-28 16:57:22 +01:00
Zenofex b8e8606977 Added actions to module for dumpuser/dumpall option (and removed module option) plus misc syntax formatting. 2020-05-28 10:13:18 -05:00
h00die 695f212d26 pihole default payload fix 2020-05-28 09:55:04 -04:00
h00die ad2c0c29bd ghost doc fixes 2020-05-28 07:20:38 -04:00
Alan Foster 1d3665115c Land #13530, move exim_gethostbyname_bof docs from the wiki to the main repo 2020-05-28 12:11:13 +01:00
h00die 7902a8e677 exim_gethostbyname_bof docs 2020-05-28 06:48:28 -04:00
Zenofex 7ef7af0d30 Ran msftidy across documentation and made recommended changes to clean up module for MSF pull request. 2020-05-26 17:31:02 -05:00
Spencer McIntyre 9df00cd536 Land #13511, Update TinyIdentD 2.2 Stack Buffer Overflow module 2020-05-26 15:56:59 -04:00
Spencer McIntyre 1c19225fd4 Land #13518, Adding DoS exploit for BIND [CVE-2020-8617] 2020-05-26 12:26:32 -04:00
Spencer McIntyre 6218817034 Make some minor markdown and grammar changes 2020-05-26 12:10:49 -04:00
Spencer McIntyre 37e7e4ff59 Land #13460, Add pop3 capture docs 2020-05-26 09:46:18 -04:00
Spencer McIntyre ca6689cdf4 Dedent the pop3 testing script in the module docs 2020-05-26 09:45:46 -04:00
shutingrz 3eab2f1a17 Add Document of bind_tsig_badtime 2020-05-26 12:09:10 +09:00
Zenofex e7d7ddc213 Initial push of vbulletin_getIndexableContent auxillary and exploit modules + documentation. 2020-05-23 03:20:46 -05:00
Brendan Coles ad05cf7870 Update TinyIdentD 2.2 Stack Buffer Overflow module 2020-05-23 04:43:44 +00:00
bwatters-r7 cb06a4e731 Land #13455, Pi-Hole < 3.3 whitelist RCE
Merge branch 'land-13455' into upstream-master
2020-05-22 15:35:16 -05:00
William Vu 06f9099d7f Add BASE_DN and ROOT_KEY to vmdir and Salt modules 2020-05-22 11:16:58 -05:00
Spencer McIntyre b49dd37614 Land #13494, Add Plesk/myLittleAdmin ViewState .NET deserialization pre-auth RCE 2020-05-22 11:53:41 -04:00
bwatters-r7 2d56931663 Land #13287, CVE-2017-15889 Synology DSM < 5.2-5967-5 authenticated root exploit
Merge branch 'land-13487' into upstream-master
2020-05-22 10:07:50 -05:00
William Vu fe2ab51c8f Update module doc 2020-05-21 18:37:13 -05:00
William Vu 55318baad5 Add module doc 2020-05-21 18:12:57 -05:00
h00die 79f0c07bab add docs for 410 2020-05-21 17:43:46 -04:00
bwatters-r7 25fed982f3 Land #13498, CVE-2017-9554 Synology Username Enumerator
Merge branch 'land-13498' into upstream-master
2020-05-21 16:38:52 -05:00
Spencer McIntyre ffb681cb79 Land #13485, Update eyesofnetwork_autodiscovery_rce with SQLi auth bypass 2020-05-21 17:24:23 -04:00
Spencer McIntyre ecd3c0f820 Minor doc changes, add module notes and SQLi progress output 2020-05-21 16:31:45 -04:00
h00die e095bb496f 36 > 31 2020-05-21 10:08:04 -04:00
h00die 50ed879d81 advanced mode docs 2020-05-21 09:14:45 -04:00
h00die 354b94f7d8 rubocop and tidy 2020-05-21 08:30:06 -04:00
h00die faed681fca msg 3 2020-05-21 08:25:01 -04:00
h00die c9f344ee5d synology un enum 2020-05-21 08:10:00 -04:00
William Vu 8473662e32 Land #13463, Oracle WebLogic CVE-2020-2555 exploit 2020-05-20 23:21:07 -05:00
kalba-security 7c2c227ea0 Improve version checks, remove comments from previous testing 2020-05-20 18:06:42 -04:00