319eb30cce
Refactoring
2019-04-11 23:54:58 +03:00
000c35a7ad
Refactoring
2019-04-11 23:39:50 +03:00
c0b4e7701f
Fix docs
2019-04-11 17:54:10 +03:00
eab1f6ca54
Added Atlassian Confluence exploit documentation
2019-04-11 17:52:08 +03:00
7881d627ca
Add Atlassian Confluence RCE exploit
2019-04-11 15:55:51 +03:00
4d0a41ff1a
Land #11657 , add Horde form file upload
2019-04-09 13:47:59 -05:00
4018d47b65
changed if not to unless
2019-04-09 13:43:54 -05:00
b56e171172
Fix extraction of session tokens
2019-04-09 09:28:52 +01:00
e32bb9e915
Land #11682 , don't check 'localhost' unconditionally, fix headers
2019-04-08 10:39:18 -05:00
7e62a69e16
Land #11660 , Update use_single_quotes to wrap_double_quotes
2019-04-06 15:44:39 -05:00
fff129ae9f
Land #11587 , add Wordpress core RCE module
2019-04-04 15:22:56 -05:00
6efd80e139
added note in info
2019-04-04 15:19:58 -05:00
2884d9afcb
modified checks, added function
2019-04-04 15:09:12 -05:00
e164c2350c
Properly encode command input with XML entities
...
REXML would make this less ghetto.
2019-04-03 19:10:27 -05:00
d5ac1e3a33
minor adjustments to indentation and requests
2019-04-03 19:03:47 -05:00
8350effaa5
Fixed wrong check (did never work)
...
* HOST was always localhost
* Now sends both Range and the legacy 'Request-Range'
TODO: Method HEAD is not always sufficient, should be editable
2019-04-03 16:23:58 +02:00
7d1f6afd4a
Remove trailing space from CVE reference
2019-04-03 09:21:55 -05:00
9e3984ea51
Remove duplicate CVE for Mailcleaner module
...
See #11304
2019-04-02 12:51:09 -05:00
3081b13a1f
Adding payload in exploit code
2019-04-02 10:24:48 +02:00
1b6cd64016
Land #11136 , exploit/multi/misc/weblogic_deserialize_unicastref
2019-04-01 18:15:26 -05:00
40191e5a01
Dissected JSOs, randomized strings, copied T3 header breakdown from @acamro
2019-04-01 18:05:45 -05:00
06397bb087
Land #11636 , postgres_createlang version check fix
2019-04-01 15:21:57 -05:00
f292befed4
Land #11134 , exploit/multi/misc/weblogic_serialize_marshalledobject
2019-04-01 14:11:30 -05:00
4d0e47044b
Fixed a hardcoded payload length resulting in 40% failures
2019-04-01 14:05:39 -05:00
ddbd7ba080
Case insensitive match
2019-04-01 18:58:14 +00:00
5867158238
Land #11595 , can_flood post module
2019-04-01 12:38:46 -05:00
f5f4c4bec2
Clean up module
2019-04-01 12:24:35 -05:00
2afd27a671
1)Fixed documentation format 2)Refactoring and more efficient loop
2019-03-30 17:12:15 +01:00
496f270b30
Update use_single_quotes to wrap_double_quotes
2019-03-29 18:14:56 -05:00
82b7c926fe
Land #11579 , Add support for splunk 7.2.4 to splunk_upload_app_exec
2019-03-29 16:22:26 -05:00
9c38d58e9f
Land #11625 , add es file explorer open port CVE-2019-6447 module
2019-03-29 15:46:09 -05:00
5c84e9e61a
Remove web root guessing since not reliable
2019-03-29 16:16:06 +00:00
269cb4bca6
Land #11635 , Authors check for msftidy
2019-03-29 10:45:31 -05:00
af494300ec
Add timwr as an author to his own modules
2019-03-29 10:44:58 -05:00
f8c5852902
Add Horde Form File Upload
2019-03-29 12:31:14 +00:00
0a24266029
Land #11482 , RV320 Unauthenticated RCE
2019-03-28 17:53:05 -05:00
1e6850fa53
land #11623 oracle 12 support for hashdumper
2019-03-28 10:07:54 -04:00
2a311931d3
oracle hashdump cleanup
2019-03-28 10:06:56 -04:00
f2a19d5e32
Final revisions
2019-03-27 21:53:52 -05:00
927d20cb95
Land #11592 , Add CMS Made Simple (CMSMS) Showtime2 File Upload RCE
2019-03-27 15:21:07 -05:00
38bdccb91a
Use instance variables instead of datastore options
2019-03-27 15:17:32 -05:00
fdb1f4adea
Update cmsms_showtime2_rce.rb
...
Fix to CSRF Token stealing function for older versions of CMSMS
2019-03-27 20:09:14 +01:00
3f9c9341f9
add 2016 authors
2019-03-26 19:39:17 -04:00
399532154d
Fix a git snafu when landing #11131
...
While landing PR #11131 , I tripped over my own shoelaces and overwrote `weblogic_deserialize_rawobject.rb` with `weblogic_deserialize_unicastref.rb`, destroying my changes and introducing a great deal of confusion.
This PR gets us back to where we should have been, with #11131 landed and a few changes to add randomization and expanding on the T3 protocol.
2019-03-26 17:54:37 -05:00
385cfd679a
Land #11131 , Weblogic_serialize_rawobject CVE-2015-4852
2019-03-26 17:07:04 -05:00
26b67bbf91
Fix two-byte error, add randomization, T3 notes from @acamro
2019-03-26 16:45:17 -05:00
5f5d475c2e
Add expected traceback error to documentation
2019-03-26 16:44:45 -05:00
f9361324bd
Merge branch 'weblogic_serialize_rawobject' of git://github.com/acamro/metasploit-framework into acamro-weblogic_serialize_rawobject
2019-03-26 16:38:27 -05:00
d9fc7af68e
Fix version detection
2019-03-26 20:17:34 +00:00
75ec3e7df6
add date and more docs
2019-03-26 16:13:42 -04:00
rrockru