 Brent Cook
|
7f74d28245
|
Land #12845, check for SSL when SSL is not enabled
|
2020-01-16 16:12:53 -06:00 |
|
|
William Vu
|
60b787bde1
|
Use new immutable? method in modules
|
2020-01-16 15:05:11 -06:00 |
|
|
William Vu
|
a31e4034c8
|
Check SSL in exploit/linux/http/webmin_backdoor
|
2020-01-16 14:49:13 -06:00 |
|
|
William Vu
|
6712458dbd
|
Land #12758, attributes and immutable? methods
|
2020-01-16 14:01:29 -06:00 |
|
|
bwatters-r7
|
ee5e9dc922
|
Land #12832, DisablePayloadHandler replace strings with bools
Merge branch 'land-12832' into upstream-master
|
2020-01-16 12:10:34 -06:00 |
|
|
Spencer McIntyre
|
033a0d1868
|
Land #12782, add the Plantronics LPE module
|
2020-01-15 11:17:41 -05:00 |
|
|
Dave York
|
7b14442ab0
|
replace strings with bools
|
2020-01-14 20:47:27 -05:00 |
|
|
William Vu
|
491c36ccaa
|
Land #12827, credit updates to Citrix exploit
|
2020-01-14 10:54:57 -06:00 |
|
|
William Vu
|
eaeaae7607
|
Reformat credit
|
2020-01-14 10:46:04 -06:00 |
|
|
Jeffrey Martin
|
1cd75d9f40
|
document additional PoC authors
|
2020-01-14 10:22:26 -06:00 |
|
|
Shelby Pace
|
429329c45d
|
Land #12801, add WePresent cmd injection module
|
2020-01-14 08:29:40 -06:00 |
|
|
Jacob Baines
|
009ec162de
|
Use string interpolation and removed rundant namespace and return statement
|
2020-01-14 07:52:30 -05:00 |
|
|
Jacob Baines
|
ea6263e6bb
|
Removed redundant return statement
|
2020-01-14 06:52:24 -05:00 |
|
|
Jacob Baines
|
ecb825ea71
|
Remove redundant parameters.
|
2020-01-14 06:40:40 -05:00 |
|
|
Jacob Baines
|
fa661e58ca
|
Unified the POST request into one function. Fixed hardcoding of SSL. Fixed Author formatting. Fixed connection failure check in check function
|
2020-01-14 06:22:00 -05:00 |
|
|
Jacob Baines
|
0308f76bbd
|
Switched to vars_post in send_request_cgi and removed unnecessary documentation
|
2020-01-14 05:42:06 -05:00 |
|
|
William Vu
|
5c4189fdb4
|
Move unix/webapp/webmin_backdoor to linux/http
|
2020-01-14 00:50:04 -06:00 |
|
|
William Vu
|
3a8b630262
|
Set a sane default HttpClientTimeout
Totally forgot I did this for Pulse Secure.
|
2020-01-13 22:26:26 -06:00 |
|
|
William Vu
|
cd65efb259
|
Revert tuned timeout in favor of HttpClientTimeout
Bad habit!
|
2020-01-13 22:02:12 -06:00 |
|
|
William Vu
|
c71a75950a
|
Make cmd/unix/generic timeout configurable
|
2020-01-13 21:35:10 -06:00 |
|
|
William Vu
|
93c69b3a96
|
Bump send_request_cgi timeout to 3.5s for shells
|
2020-01-13 21:29:28 -06:00 |
|
|
William Vu
|
a635676604
|
Update wording in module description
|
2020-01-13 21:04:07 -06:00 |
|
|
William Vu
|
af4505f007
|
Clean up module
|
2020-01-13 20:48:18 -06:00 |
|
|
William Vu
|
04084f84f7
|
Run rubocop -a
|
2020-01-13 20:25:07 -06:00 |
|
|
William Vu
|
a45821b706
|
Rename module
|
2020-01-13 20:25:07 -06:00 |
|
|
William Vu
|
b4a08503f8
|
Merge remote-tracking branch 'upstream/master' into pr/12816
|
2020-01-13 20:25:00 -06:00 |
|
|
RAMELLA Sébastien
|
5d3ad626e6
|
add. documentation
|
2020-01-13 18:22:09 +04:00 |
|
|
Brent Cook
|
20cf419e18
|
Land #12797, improve BlueKeep over remote networks
|
2020-01-12 17:15:29 -06:00 |
|
|
RAMELLA Sébastien
|
1570118a14
|
fix: again chmod 644 WTF!
|
2020-01-13 01:43:15 +04:00 |
|
|
RAMELLA Sébastien
|
a64b0fa9e7
|
add. python staged meterpreter support
|
2020-01-13 01:25:29 +04:00 |
|
|
RAMELLA Sébastien
|
c323df180a
|
fix. file perms to 664
|
2020-01-12 22:10:23 +04:00 |
|
|
RAMELLA Sébastien
|
50637d0d91
|
add initial source code
|
2020-01-12 21:12:14 +04:00 |
|
|
Brent Cook
|
33dadefd53
|
move rdp_move_mouse to rdp library, add GROOMDELAY
|
2020-01-12 08:19:44 -06:00 |
|
|
Tim W
|
2ea5bd139a
|
Land #12792, Fix #12791, check for nil response on connection failure in efs_fmws_userid_bof
|
2020-01-10 16:31:32 +08:00 |
|
|
Francesco Soncina
|
abb95ef465
|
feat(web_delivery): use disown on linux too
|
2020-01-09 15:02:04 +01:00 |
|
|
Francesco Soncina
|
1f191bc73e
|
feat: support osx in web_delivery
|
2020-01-09 14:59:47 +01:00 |
|
|
Jacob Baines
|
caa02c7d2e
|
Added exploit module for CVE-2019-3929
|
2020-01-09 08:03:52 -05:00 |
|
|
Francesco Soncina
|
542f582fed
|
fix: ignore SSL cert in python web_delivery
|
2020-01-08 13:22:03 +01:00 |
|
|
zerosum0x0
|
b76f2a9e08
|
inject mouse move events, verbose groom progress/elapsed time, danger zone warnings
|
2020-01-06 23:42:01 -07:00 |
|
|
Brendan Coles
|
326fd26219
|
Check for nil response due to connection failure
|
2020-01-05 21:39:34 +00:00 |
|
|
Brendan Coles
|
c8fb76182c
|
Use PROGRAMDATA environment variable
|
2020-01-03 20:32:01 +00:00 |
|
|
Brendan Coles
|
b3e9d9aee9
|
Add Plantronics Hub SpokesUpdateService Privilege Escalation
|
2020-01-03 20:13:27 +00:00 |
|
|
Brent Cook
|
e8cd136e56
|
Land #12712, add OpenBSD Dynamic Loader chpass privesc
|
2019-12-27 03:56:02 -06:00 |
|
|
Brent Cook
|
8061cdf974
|
Land #12760, improvements to linux/local/bpf_priv_esc module
|
2019-12-26 13:43:54 -06:00 |
|
|
Brendan Coles
|
a7b63557db
|
Notify operator that cleanup of crontab is required
|
2019-12-26 16:21:44 +00:00 |
|
|
Brendan Coles
|
d449a93b44
|
Add Msf::Post::File.attributes method
|
2019-12-25 07:34:44 +00:00 |
|
|
wvu-r7
|
e89a596e5c
|
Land #12754, ForceExploit for 4.3BSD exploits
|
2019-12-23 19:13:42 -06:00 |
|
|
William Vu
|
01b6bc112d
|
Rescue EOFError for good measure
|
2019-12-23 19:02:13 -06:00 |
|
|
William Vu
|
81f8f4f67f
|
Add ForceExploit to 4.3BSD (VAX) exploits
|
2019-12-23 18:17:09 -06:00 |
|
|
Brent Cook
|
ce991071e4
|
Land #12524, update most python code with python 3 compatibility
|
2019-12-23 14:49:08 -06:00 |
|