 adfoster-r7
|
136599a29a
|
Merge pull request #19714 from bwatters-r7/update/projectsend-cveinfo
Add CVE info to projectsend module
|
2024-12-11 13:54:06 +00:00 |
|
|
bwatters-r7
|
5311b7014e
|
Add CVE info to projectsend module
|
2024-12-11 07:37:43 -06:00 |
|
|
adfoster-r7
|
2421ca768f
|
Merge pull request #19705 from ostrichgolf/projectsend_rce
Add CVE to ProjectSend module
|
2024-12-07 14:24:20 +00:00 |
|
|
ostrichgolf
|
2952dbb0b8
|
Add CVE to module
|
2024-12-07 14:23:30 +01:00 |
|
|
Diego Ledda
|
be30a06af4
|
Land #19430, Moodle RCE (CVE-2024-43425) Module
Land #19430, Moodle RCE (CVE-2024-43425) Module
|
2024-12-06 12:15:35 +01:00 |
|
|
jheysel-r7
|
e8911f9129
|
Land #19402 vCenter Sudo LPE (CVE-2024-37081)
|
2024-12-04 18:25:05 -08:00 |
|
|
h00die
|
bca3626cf2
|
peer review
|
2024-12-04 18:39:43 -05:00 |
|
|
jheysel-r7
|
21cf475cbb
|
Land #19595 Ivanti Connect Secure auth RCE via OpenSSL (CVE-2024-37404)
|
2024-12-04 08:26:07 -08:00 |
|
|
Diego Ledda
|
ab2ca41eb8
|
Land #19629, Chamilo v1.11.24 Unrestricted File Upload (CVE-2023-4220)
Land #19629, Chamilo v1.11.24 Unrestricted File Upload (CVE-2023-4220)
|
2024-12-04 16:49:56 +01:00 |
|
|
jheysel-r7
|
fa3716408f
|
Add comment explaining payload architecture restraints
|
2024-12-03 18:33:43 -08:00 |
|
|
jheysel-r7
|
2d1af7d809
|
Land #19648 Add exploit module for FortiManager (CVE-2024-47575)
|
2024-12-02 18:31:25 -08:00 |
|
|
jheysel-r7
|
5a837d1ef6
|
fix a typo
|
2024-12-02 18:16:43 -08:00 |
|
|
jheysel-r7
|
a230a353e4
|
Land #19613 Asterisk authenticated rce via AMI (CVE-2024-42365)
|
2024-12-02 08:21:35 -08:00 |
|
|
Christophe De La Fuente
|
a46b2f437f
|
Use TARGET_URI when checking the redirection URI
|
2024-12-02 16:45:12 +01:00 |
|
|
Christophe De La Fuente
|
3dcb9d58ab
|
Code review
|
2024-12-02 14:02:07 +01:00 |
|
|
Christophe De La Fuente
|
c943cc6378
|
Add module and documentation
|
2024-12-02 14:02:07 +01:00 |
|
|
h00die
|
d13bccca05
|
peer review
|
2024-11-28 20:24:25 -05:00 |
|
|
sfewer-r7
|
68e9b39ffa
|
register teh Rex socket we create via add_socket. This lets teh frameowkr close the socket after we get a session, and will wait up to WfsDelay for that to happen. This lets us remove the other timeout we had, and teh user can always adjust WfsDelay if needed. (Thanks Spencer)
|
2024-11-22 12:42:08 +00:00 |
|
|
sfewer-r7
|
e5cdf6097d
|
favor File.binread over File.read
|
2024-11-22 12:40:19 +00:00 |
|
|
sfewer-r7
|
f59bfe98a3
|
remove the default payload and the default fetch command, and let the framework choose them for us.
|
2024-11-22 12:39:34 +00:00 |
|
|
sfewer-r7
|
2ba112a5a4
|
We can use OptPath here instead of OptString. Also are these are optional, and we dont specify a default, we can omit the nil default value.
|
2024-11-22 12:38:46 +00:00 |
|
|
sfewer-r7
|
000ffb2406
|
make the check routine return a message for Detected.
|
2024-11-22 12:37:50 +00:00 |
|
|
jheysel-r7
|
d95d549992
|
Land #19531 ProjectSend r1335 - r1605 RCE module
|
2024-11-21 09:53:36 -08:00 |
|
|
ostrichgolf
|
68eb6599fd
|
Create projectsend_unauth_rce
|
2024-11-21 09:34:58 -08:00 |
|
|
h00die
|
0f6da56a52
|
vcenter sudo module
|
2024-11-21 04:34:15 -05:00 |
|
|
jheysel-r7
|
afbbba09e8
|
Land #19584 Judge0 sandbox escape CVE-2024-28185, CVE-2024-28189
|
2024-11-20 14:35:38 -08:00 |
|
|
Takah1ro
|
da6f8cd552
|
Add Judge0 module and document
|
2024-11-20 14:15:38 -08:00 |
|
|
h00die
|
6bd049e346
|
operator working
|
2024-11-18 20:09:13 -05:00 |
|
|
h00die
|
f38661d6c3
|
pod user working
|
2024-11-18 07:30:21 -05:00 |
|
|
sfewer-r7
|
4856817131
|
fix a typo
|
2024-11-18 09:44:53 +00:00 |
|
|
sfewer-r7
|
feb1ac79da
|
add in a suitable certificate and private key to use by default.
|
2024-11-15 17:41:31 +00:00 |
|
|
Spencer McIntyre
|
5d9add4450
|
Merge pull request #19640 from jheysel-r7/pyload_js2py_cve_2024_39205
Pyload RCE (CVE-2024-39205) with js2py sandbox escape (CVE-2024-28397)
|
2024-11-15 09:24:37 -05:00 |
|
|
sfewer-r7
|
e520ca7ee9
|
comment the intent of this code block
|
2024-11-15 12:29:31 +00:00 |
|
|
sfewer-r7
|
2ec5778405
|
get_cert_subject_item may return nil, so test for that here
|
2024-11-15 12:28:25 +00:00 |
|
|
sfewer-r7
|
51ad7ad0bf
|
improve the send_packet logic to fail gracefully if bad data is recieved
|
2024-11-15 12:27:33 +00:00 |
|
|
sfewer-r7
|
c3bd4792ec
|
rename SSLClientCert and SSLClientKey to ClientCert and ClientKey. This then matcheds up with ClientSerialNumber and ClientPlatform, which is clearer IMHO. Also, we explicitly create a Rex TCP socket, so these param names no longer collide with what a mixin would use
|
2024-11-15 09:44:50 +00:00 |
|
|
sfewer-r7
|
6eb15d5b66
|
add a helper method get_cert_subject_item
|
2024-11-15 09:42:59 +00:00 |
|
|
sfewer-r7
|
91587ce30b
|
this message can be on a single line
|
2024-11-15 09:42:06 +00:00 |
|
|
sfewer-r7
|
e89c27fa3b
|
fix some typos. Make msftidy happy. Add comments to the external references.
|
2024-11-15 08:54:32 +00:00 |
|
|
Jack Heysel
|
92e42a63ea
|
Rubocop
|
2024-11-14 12:47:35 -08:00 |
|
|
Jack Heysel
|
4e1f33336c
|
Ofuscation and Gemfile update
|
2024-11-14 12:44:19 -08:00 |
|
|
sfewer-r7
|
47f924bb8f
|
add in the initial work on the FortiManager exploit.
|
2024-11-14 18:53:12 +00:00 |
|
|
Jack Heysel
|
526451fed5
|
Responded to comments
|
2024-11-14 10:46:11 -08:00 |
|
|
Jack Heysel
|
2ba8a6c08d
|
Responded to comments
|
2024-11-13 17:23:08 -08:00 |
|
|
Jack Heysel
|
497ce5e9da
|
Linting and Rex::RandomIdentifier update
|
2024-11-13 08:28:52 -08:00 |
|
|
h4x-x0r
|
afdddf2e43
|
updated
|
2024-11-13 03:40:22 +00:00 |
|
|
Jack Heysel
|
d2ef3cb6a9
|
Pyload RCE (CVE-2024-39205) with js2py sandbox escape (CVE-2024-28397)
|
2024-11-12 16:05:07 -08:00 |
|
|
Brendan
|
19e182ce65
|
Land #19557, Add Palo Alto Expedition RCE (CVE-2024-5910 & CVE-2024-9464) Module
Palo Alto Expedition RCE (CVE-2024-5910 & CVE-2024-9464) Module
|
2024-11-12 16:42:06 -06:00 |
|
|
h4x-x0r
|
6f6f92823a
|
fixed typo
fixed typo
|
2024-11-12 15:15:15 +00:00 |
|
|
h4x-x0r
|
fb102ec409
|
Update modules/exploits/linux/http/paloalto_expedition_rce.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2024-11-12 09:03:22 -06:00 |
|