 Noam Rathaus
|
e75043f00e
|
Module indentation was wrong
|
2024-03-30 16:50:48 +03:00 |
|
|
bwatters
|
e58c6b9df2
|
Land #18721, SharePoint Unauth RCE Exploit Chain (CVE-2023-29357 & CVE-2023-24955)
Merge branch 'land-18721' into upstream-master
|
2024-03-26 12:42:22 -05:00 |
|
|
cgranleese-r7
|
9b4114eda0
|
Land #18961, Adds session documentation
|
2024-03-25 11:23:05 +00:00 |
|
|
adfoster-r7
|
decba4350e
|
Additional changes to documentation
|
2024-03-25 10:53:08 +00:00 |
|
|
Spencer McIntyre
|
0f9986c787
|
Land #18947, Fix inconsistent casing
Fix inconsistent casing in windows/local/wmi_persistence
|
2024-03-19 12:40:34 -04:00 |
|
|
cgranleese-r7
|
4e0e3da74c
|
Land #18835, clean up code duplication
|
2024-03-12 14:09:22 +00:00 |
|
|
Adrian Șendroiu
|
2007e6d8fb
|
Fix inconsistent casing in windows/local/wmi_persistence
|
2024-03-12 12:17:46 +02:00 |
|
|
Zach Goldman
|
7ce91df66e
|
clean up code duplication
|
2024-03-11 09:09:46 -05:00 |
|
|
Christophe De La Fuente
|
1e8e6d3bc4
|
Land #18796, Enhance ManageEngine Endpoint Central and ServiceDesk Plus CVE-2022-47966
|
2024-03-04 20:35:22 +01:00 |
|
|
sjanusz-r7
|
3c8f43e23e
|
Align SQL sessions peerhost and peerport
|
2024-03-04 13:11:32 +00:00 |
|
|
sjanusz-r7
|
b423241e6b
|
Use Rex Post MySQL Client for lib, specs & modules
|
2024-02-28 18:19:50 +00:00 |
|
|
errorxyz
|
97513d473f
|
Update manageengine_endpoint_central and servicedesk_plus default payloads
|
2024-02-23 00:00:18 +05:30 |
|
|
cgranleese-r7
|
d52220cccb
|
Fixes the create session datastore option from appearing for payloads
|
2024-02-22 14:58:41 +00:00 |
|
|
Gaurav Jain
|
b2cb102c9b
|
Merge branch 'rapid7:master' into manageengine
|
2024-02-22 17:20:28 +05:30 |
|
|
cgranleese-r7
|
de17261926
|
Removes session types from module with session type mixin
|
2024-02-19 10:34:16 +00:00 |
|
|
Jack Heysel
|
4e4303c274
|
Fixed backup_bdc_metadata initialization
|
2024-02-15 09:26:54 -05:00 |
|
|
Dean Welch
|
fa5c4c0193
|
lowercase session types
|
2024-02-14 15:45:34 +00:00 |
|
|
Dean Welch
|
0d4e1ed755
|
Use mssql option session mixin with mssql modules
|
2024-02-14 15:37:11 +00:00 |
|
|
Dean Welch
|
587a8690a1
|
Use individual session mixins
|
2024-02-14 15:37:11 +00:00 |
|
|
Dean Welch
|
08872d0211
|
Add session type to info hash in the mixin
|
2024-02-14 15:37:11 +00:00 |
|
|
Dean Welch
|
0f319bdfb9
|
Extract SMB and PostgreSQL optional sessions into their own mixins
|
2024-02-14 15:37:11 +00:00 |
|
|
adfoster-r7
|
1794a5fbee
|
Land #18763, Mssql session modules
|
2024-02-14 10:54:04 +00:00 |
|
|
Zach Goldman
|
d18520adc6
|
update rhost and rport calls
|
2024-02-13 13:00:38 -06:00 |
|
|
Zach Goldman
|
c05c6773df
|
adjust session logic in modules
|
2024-02-13 11:59:09 -06:00 |
|
|
Spencer McIntyre
|
202db99004
|
Land #18801, Fix revision number checks
Fix revision number checks in cve_2022_26904_superprofile.rb
|
2024-02-12 15:52:16 -05:00 |
|
|
Spencer McIntyre
|
45365c8666
|
Land #18800, Fix revision number checks
Fix revision number checks for cve_2021_40449.rb
|
2024-02-12 15:19:56 -05:00 |
|
|
Spencer McIntyre
|
ce0498377d
|
Land #18798, fix version checks
windows/local/cve_2020_0787_bits_arbitrary_file_move (and similar) fails due to incorrect revision_number checks
|
2024-02-12 15:11:07 -05:00 |
|
|
Spencer McIntyre
|
8eb5aa6aa6
|
Land #18799, Fix revision number checks
Fix revision number checks for cve_2020_17136.rb
|
2024-02-12 15:01:45 -05:00 |
|
|
Zach Goldman
|
94223f05fc
|
update relevant modules to work with sessions
separate out optional session logic
fixing session handling
|
2024-02-09 13:18:49 -06:00 |
|
|
sjanusz-r7
|
30fc29e0f5
|
Use PostgreSQL session type for modules
|
2024-02-09 15:38:06 +00:00 |
|
|
Gaurav Jain
|
184ed3a162
|
Add suggested changes
|
2024-02-09 02:22:20 +05:30 |
|
|
Gaurav Jain
|
4dc21bae45
|
Merge branch 'rapid7:master' into manageengine
|
2024-02-08 15:11:15 +05:30 |
|
|
Gaurav Jain
|
25804edbf4
|
Add java targets for manageengine cve-2022-47966 modules
|
2024-02-08 01:55:52 +05:30 |
|
|
upsidedwn
|
4b5d04e59e
|
Fix revision number checks in cve_2022_26904_superprofile.rb
|
2024-02-07 11:30:42 +08:00 |
|
|
upsidedwn
|
ccb446f2ae
|
Fix revision number checks for cve_2021_40449.rb
|
2024-02-07 11:28:00 +08:00 |
|
|
upsidedwn
|
436efad4ca
|
Fix revision number checks
|
2024-02-07 11:25:41 +08:00 |
|
|
upsidedwn
|
47d30696bc
|
Fix revision_number checks
|
2024-02-07 11:20:12 +08:00 |
|
|
Jack Heysel
|
ad45681116
|
Updated jwt_token format
|
2024-02-06 16:42:56 -05:00 |
|
|
Jack Heysel
|
92bbc47bd8
|
Changed tabs to spaces fixed msftidy
|
2024-02-06 15:54:33 -05:00 |
|
|
Jack Heysel
|
4bb871453e
|
Rubocop
|
2024-02-06 15:44:06 -05:00 |
|
|
Jack Heysel
|
326b50bd4d
|
Responded to comments
|
2024-02-06 15:22:21 -05:00 |
|
|
cgranleese-r7
|
e80f0ef8cd
|
Removes session logic from mixins and uses client instead of datastore for rhost and rport
|
2024-02-06 14:11:16 +00:00 |
|
|
cgranleese-r7
|
577304cf7c
|
Updates more modules
|
2024-02-02 14:59:56 +00:00 |
|
|
adfoster-r7
|
7ac4387d35
|
Land #18696, Convert MSSQL mixin to class
|
2024-02-02 14:14:34 +00:00 |
|
|
Zach Goldman
|
35778e92b2
|
client consolidation
convert first module from remote to client
move client to rex
remove metasploit mixin
|
2024-02-01 17:23:55 -06:00 |
|
|
Dean Welch
|
1abaef4945
|
Move new session information alerts behind a feature flag
|
2024-01-30 16:38:00 +00:00 |
|
|
Dean Welch
|
9a2ec90c16
|
Add alert to show user the new session options available in Metasploit 6.4
|
2024-01-29 17:06:21 +00:00 |
|
|
adfoster-r7
|
8c5628826f
|
Land #18735, update iis_webdav_scstoragepathfromurl module metadata
|
2024-01-23 15:56:01 +00:00 |
|
|
aleksa
|
67e402e1be
|
Added Notes
|
2024-01-22 19:12:21 -05:00 |
|
|
adfoster-r7
|
094d6ee36b
|
Add additional reliability and stability notes to modules
|
2024-01-22 23:29:57 +00:00 |
|