 Grant Willcox
|
339c1941ef
|
Add in myworkspace.id patch for the other missing modules
|
2020-10-07 17:08:00 -05:00 |
|
|
bwatters
|
3a6293357e
|
Land #14190, Add the DOMAIN option to the CVE-2020-0688 Exploit
Merge branch 'land-14190' into upstream-master
|
2020-10-05 12:12:21 -05:00 |
|
|
h00die
|
15bb690308
|
fix vulnerability spelling
|
2020-10-04 13:00:48 -04:00 |
|
|
Alan Foster
|
26ff912291
|
Fix invalid disclosure date formats
|
2020-10-02 12:20:05 +01:00 |
|
|
Grant Willcox
|
f45d9b295a
|
Land #14204, Update the module docs for CVE-2020-1472 (Zerologon)
|
2020-10-01 10:09:19 -05:00 |
|
|
bwatters
|
e24a81919a
|
Land #13996, Add module for CVE-2020-9801, CVE-2020-9850 and CVE-2020-9856,
RCE for Safari on macOS 10.15.3 (pwn2own2020)
Merge branch 'land-13996' into upstream-master
|
2020-10-01 09:46:39 -05:00 |
|
|
Spencer McIntyre
|
bf13ffc692
|
Update documentation based on feedback
|
2020-10-01 09:19:15 -04:00 |
|
|
Grant Willcox
|
fb73be7e35
|
Land #14199, Fix SecureCRT missing registry key bug
|
2020-09-30 13:17:06 -05:00 |
|
|
Grant Willcox
|
b0bad9fc85
|
Fix up small issue with one of the checks and update the documentation with the new SESSION_PATH option
|
2020-09-30 12:26:32 -05:00 |
|
|
Spencer McIntyre
|
c0b42ff7a2
|
Land #13995, Add a Windows Secrets Dump module
|
2020-09-30 11:47:59 -04:00 |
|
|
Christophe De La Fuente
|
94796f5c91
|
Updates from review #2
|
2020-09-30 15:01:54 +02:00 |
|
|
cn-kali-team
|
dce8bdc19a
|
Check that the folder does not exist
|
2020-09-30 07:39:33 +08:00 |
|
|
Spencer McIntyre
|
d53da9a83a
|
Always show the plain password value of the machine account
|
2020-09-29 16:17:02 -04:00 |
|
|
Spencer McIntyre
|
d91a9a0468
|
Consolidate the aes_cts_hmac_sha1_96_key functions
|
2020-09-29 16:05:06 -04:00 |
|
|
bwatters
|
3aeeede4a6
|
Land #14187, Added CVE-2020-3433 module
Merge branch 'land-14187' into upstream-master
|
2020-09-29 13:41:33 -05:00 |
|
|
bwatters
|
81fd2ea8a8
|
rubocop changes
|
2020-09-29 13:38:31 -05:00 |
|
|
Christophe De La Fuente
|
67821e32c4
|
Password cracking integration
|
2020-09-29 20:36:39 +02:00 |
|
|
Christophe De La Fuente
|
9cb419ae8c
|
Resync with master branch
|
2020-09-28 15:45:02 +02:00 |
|
|
Spencer McIntyre
|
e7d2b73600
|
Add a DOMAIN option to CVE-2020-0688 for consistency with other modules
|
2020-09-28 09:24:39 -04:00 |
|
|
Christophe De La Fuente
|
59fff3d7fe
|
Land #14161, VyOS config processor
|
2020-09-28 13:02:19 +02:00 |
|
|
h00die
|
362ba1b235
|
more reviews
|
2020-09-27 08:17:32 -04:00 |
|
|
Shelby Pace
|
f0f4da2b1e
|
Land #14157, Windows update orchestrator privesc
|
2020-09-25 16:07:27 -05:00 |
|
|
Antoine GOICHOT
|
fef88f27eb
|
Added CVE-2020-3433 module
|
2020-09-25 23:04:58 +02:00 |
|
|
Christophe De La Fuente
|
7bfc47f08a
|
Land #14175, MaraCMS 7.5 Arbitrary File Upload (CVE-2020-25042)
|
2020-09-25 20:24:55 +02:00 |
|
|
bwatters
|
2ed72007e0
|
Typos and cleanup
|
2020-09-25 12:27:55 -05:00 |
|
|
kalba-security
|
33b3d6efcc
|
Use register_for_cleanup instead of on_new_session for cleanup
|
2020-09-25 08:11:02 -04:00 |
|
|
Tim W
|
bb04041c93
|
Land #14172, Fix #14170, Add option to disable autorun in persistence_exe
|
2020-09-25 13:16:51 +08:00 |
|
|
Tim W
|
77b7cf4f65
|
make RUN_NOW a non-advanced option
|
2020-09-25 13:15:34 +08:00 |
|
|
Tim W
|
72111a9677
|
don't start service unless RUN_NOW is true
|
2020-09-25 13:15:30 +08:00 |
|
|
kalba-security
|
5b48bae4b0
|
Use keep_cookies instead of @cookie variable
|
2020-09-24 16:36:01 -04:00 |
|
|
kalba-security
|
45d13bf85e
|
Simplify shash checks, use cgi request instead of raw, fix ctype header placement
|
2020-09-24 07:49:55 -04:00 |
|
|
Shelby Pace
|
2f083b03dd
|
Land #14140, add software enumeration module
|
2020-09-23 18:43:28 -05:00 |
|
|
Shelby Pace
|
1b66f4a9de
|
include Android::Priv mixin
|
2020-09-23 18:42:07 -05:00 |
|
|
kalba-security
|
e026c74108
|
Improve Failure:: categories and remove empty parameters from POST requests
|
2020-09-23 13:27:19 -04:00 |
|
|
Grant Willcox
|
35fec19faa
|
Fix Android code so that if we have root permissions we use dumpsys to get the package versions, otherwise just enumerate the installed software, but not the versions as we did before, but this time print out a warning.
|
2020-09-23 12:05:04 -05:00 |
|
|
Grant Willcox
|
8951b2a0d2
|
Add additional support for two other common MacOS package managers, HomeBrew and MacPorts
|
2020-09-23 11:46:08 -05:00 |
|
|
h00die
|
92e41b2678
|
review comments
|
2020-09-23 10:36:26 -04:00 |
|
|
kalba-security
|
1133f76722
|
Improve feedback when authentication fails
|
2020-09-23 07:51:11 -04:00 |
|
|
ingroxd
|
62481f0159
|
Changed DisableExec with RUN_NOW for consistency
|
2020-09-23 09:12:31 +00:00 |
|
|
Christophe De La Fuente
|
7c575223a2
|
Sync with master
|
2020-09-23 10:08:07 +02:00 |
|
|
Grant Willcox
|
1710b98ba4
|
Land #14173, Unify the socks modules using a VERSION option
|
2020-09-22 17:09:34 -05:00 |
|
|
kalba-security
|
e65083c092
|
Add maracms_upload_exec.rb exploit module and docs
|
2020-09-22 16:53:29 -04:00 |
|
|
Grant Willcox
|
13bf1b7711
|
Land #14118, SecureCRT Session Credential Grabber, try 2
|
2020-09-22 15:38:25 -05:00 |
|
|
Grant Willcox
|
a96827a823
|
Land #14118, SecureCRT Session Credential Grabber
|
2020-09-22 15:17:04 -05:00 |
|
|
Grant Willcox
|
b9fa36c89b
|
Add in option to decrypt Login Script V3 within session files and also update some of the existing regex to fix some minor mistakes
|
2020-09-22 14:47:28 -05:00 |
|
|
William Vu
|
f74eba731e
|
Land #14151, Zerologon (CVE-2020-1472) module
|
2020-09-22 14:02:23 -05:00 |
|
|
Spencer McIntyre
|
a14780d024
|
Update the zerologon options for clarity
|
2020-09-22 14:57:57 -04:00 |
|
|
Spencer McIntyre
|
a67379d1e1
|
Fix rubocop complaints
|
2020-09-22 10:28:58 -04:00 |
|
|
Spencer McIntyre
|
77f0d90bf0
|
Unify the socks modules using a VERSION option
|
2020-09-22 10:16:00 -04:00 |
|
|
bwatters
|
7e68c42876
|
Rubocop, fix check method, clean up c code
|
2020-09-22 07:45:02 -05:00 |
|