 Dave York
|
7b14442ab0
|
replace strings with bools
|
2020-01-14 20:47:27 -05:00 |
|
|
Brent Cook
|
e1e668d7da
|
Land #12651, add OpenMRS deserialization exploit
|
2019-12-16 11:31:24 -06:00 |
|
|
Brendan Coles
|
d7f1c9a4a9
|
Land #12696, Add AKA references to several modules
|
2019-12-12 15:28:21 +00:00 |
|
|
h00die
|
8cb58be4c0
|
style
|
2019-12-11 06:44:35 -05:00 |
|
|
Shelby Pace
|
a4ed143af6
|
Land #12364, add vBulletin widgetconfig RCE
|
2019-12-10 12:12:47 -06:00 |
|
|
Shelby Pace
|
19169bc9b2
|
remove executable permissions
|
2019-12-10 12:10:04 -06:00 |
|
|
Shelby Pace
|
ab6f77ce63
|
add reference
|
2019-12-10 11:47:48 -06:00 |
|
|
Shelby Pace
|
dd2a6f77e3
|
remove unused opts
|
2019-12-10 11:32:46 -06:00 |
|
|
h00die
|
3b2a54a599
|
add aka to some modules
|
2019-12-10 09:53:13 -05:00 |
|
|
Shelby Pace
|
35282b3e35
|
use printf command stager
|
2019-12-04 12:17:35 -06:00 |
|
|
Shelby Pace
|
713099c997
|
improve version check
|
2019-12-03 14:56:44 -06:00 |
|
|
Shelby Pace
|
5f149bc51c
|
Update modules/exploits/multi/http/openmrs_deserialization.rb
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-12-03 13:19:15 -06:00 |
|
|
Shelby Pace
|
d8747c3a02
|
Update modules/exploits/multi/http/openmrs_deserialization.rb
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-12-03 13:19:04 -06:00 |
|
|
Shelby Pace
|
9655c33a66
|
add bcoles' format_payload implementation
|
2019-12-03 12:24:33 -06:00 |
|
|
Shelby Pace
|
f3922d73d8
|
use encode, replace double quotes
|
2019-12-02 15:25:52 -06:00 |
|
|
Francesco Soncina
|
45bee2d500
|
Update splunk_upload_app_exec.rb
|
2019-11-26 15:38:34 +01:00 |
|
|
RAMELLA Sébastien
|
6e93df1224
|
fix. DisablePayloadHandler to false in target 0 and add unknown author.
|
2019-11-22 17:56:50 +04:00 |
|
|
Shelby Pace
|
e6e1156185
|
add reference, description, etc.
|
2019-11-21 14:15:25 -06:00 |
|
|
Shelby Pace
|
a4657da33a
|
code execution with Java 8
|
2019-11-20 15:29:33 -06:00 |
|
|
Shelby Pace
|
1ebef8bcb2
|
Land #12529, add CMSMS object inject exploit
|
2019-11-13 08:37:05 -06:00 |
|
|
Shelby Pace
|
f79a35d428
|
check response
|
2019-11-13 08:34:23 -06:00 |
|
|
scanu92
|
d9b0c1aa2f
|
add advanced options ForceExploit
|
2019-11-12 23:03:28 +01:00 |
|
|
scanu92
|
1489e03f0a
|
Update cmsms_object_injection_rce.rb
|
2019-11-12 23:02:16 +01:00 |
|
|
scanu92
|
78ea784e84
|
Update modules/exploits/multi/http/cmsms_object_injection_rce.rb
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2019-11-12 23:00:31 +01:00 |
|
|
h00die
|
9cf62d02f9
|
land #12492 coldfusion rds updates
|
2019-11-07 05:16:29 -05:00 |
|
|
Shelby Pace
|
a337567101
|
add check method
|
2019-11-06 12:40:45 -06:00 |
|
|
Shelby Pace
|
f898c73e49
|
add module skeleton
|
2019-11-05 11:27:35 -06:00 |
|
|
scanu92
|
1ae2f66c7c
|
Apply suggestions from code review
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-11-03 00:33:17 +01:00 |
|
|
scanu92
|
8a3f7a6b21
|
Apply suggestions from code review
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-11-03 00:32:55 +01:00 |
|
|
scanu92
|
1850cfd0c1
|
Apply suggestions from code review
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-11-03 00:32:32 +01:00 |
|
|
scanu92
|
632e423236
|
Update cmsms_object_injection_rce.rb
|
2019-11-02 21:31:08 +01:00 |
|
|
scanu92
|
33303746f8
|
Update cmsms_object_injection_rce.rb
|
2019-11-02 21:29:38 +01:00 |
|
|
scanu92
|
beffab0787
|
Update cmsms_object_injection_rce.rb
|
2019-11-01 15:26:02 +01:00 |
|
|
scanu92
|
7cc1175287
|
Update cmsms_object_injection_rce.rb
Add NormalRanking to cmsms_object_injection_rce module
|
2019-11-01 15:15:49 +01:00 |
|
|
sk4
|
af0761bcfd
|
Add CMS Made Simple object injection exploit module
|
2019-11-01 12:11:38 +01:00 |
|
|
William Vu
|
f5ce31519c
|
Fix style, once more with feeling
|
2019-10-31 09:59:35 -05:00 |
|
|
wvu-r7
|
dc62ea080b
|
Fix style
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-10-31 09:54:18 -05:00 |
|
|
Shelby Pace
|
0b4a0b3148
|
Land #12476, add Nostromo dir traversal RCE
|
2019-10-31 08:24:41 -05:00 |
|
|
Shelby Pace
|
99fd254348
|
add reference
|
2019-10-31 08:23:57 -05:00 |
|
|
Quentin Kaiser
|
ca81793860
|
Forgot to put ForceExploit in registered options.
|
2019-10-31 10:25:26 +01:00 |
|
|
Quentin Kaiser
|
0531dd7bb9
|
Hash rocket alignment.
|
2019-10-29 12:28:39 +01:00 |
|
|
Quentin Kaiser
|
bc0c2bf721
|
check function rewrite.
|
2019-10-29 12:27:15 +01:00 |
|
|
Quentin Kaiser
|
436d6781c1
|
Fix description.
|
2019-10-29 12:25:01 +01:00 |
|
|
Quentin Kaiser
|
b357db22cf
|
Fix description.
|
2019-10-29 12:24:22 +01:00 |
|
|
Quentin Kaiser
|
8bbb33c483
|
Generic name.
|
2019-10-29 12:24:00 +01:00 |
|
|
Quentin Kaiser
|
b6dd30302a
|
Rewriting of command stager, based on exploits/unix/webapp/webmin_backdoor.
|
2019-10-29 12:23:19 +01:00 |
|
|
William Vu
|
ec0974222c
|
Fix module title again
|
2019-10-27 11:48:50 -05:00 |
|
|
William Vu
|
e010f48a3b
|
Move module to coldfusion_rds_auth_bypass
|
2019-10-27 11:25:56 -05:00 |
|
|
William Vu
|
2cc5f23915
|
Fix module title
|
2019-10-27 11:25:40 -05:00 |
|
|
William Vu
|
a0d1f02fd1
|
Fix failed login check for ColdFusion 9.something
It was merely "ColdFusion Administrator" for the version I tested.
|
2019-10-24 17:07:45 -05:00 |
|