 bwatters
|
3a6293357e
|
Land #14190, Add the DOMAIN option to the CVE-2020-0688 Exploit
Merge branch 'land-14190' into upstream-master
|
2020-10-05 12:12:21 -05:00 |
|
|
h00die
|
15bb690308
|
fix vulnerability spelling
|
2020-10-04 13:00:48 -04:00 |
|
|
Alan Foster
|
26ff912291
|
Fix invalid disclosure date formats
|
2020-10-02 12:20:05 +01:00 |
|
|
bwatters
|
e24a81919a
|
Land #13996, Add module for CVE-2020-9801, CVE-2020-9850 and CVE-2020-9856,
RCE for Safari on macOS 10.15.3 (pwn2own2020)
Merge branch 'land-13996' into upstream-master
|
2020-10-01 09:46:39 -05:00 |
|
|
bwatters
|
3aeeede4a6
|
Land #14187, Added CVE-2020-3433 module
Merge branch 'land-14187' into upstream-master
|
2020-09-29 13:41:33 -05:00 |
|
|
bwatters
|
81fd2ea8a8
|
rubocop changes
|
2020-09-29 13:38:31 -05:00 |
|
|
Spencer McIntyre
|
e7d2b73600
|
Add a DOMAIN option to CVE-2020-0688 for consistency with other modules
|
2020-09-28 09:24:39 -04:00 |
|
|
Shelby Pace
|
f0f4da2b1e
|
Land #14157, Windows update orchestrator privesc
|
2020-09-25 16:07:27 -05:00 |
|
|
Antoine GOICHOT
|
fef88f27eb
|
Added CVE-2020-3433 module
|
2020-09-25 23:04:58 +02:00 |
|
|
Christophe De La Fuente
|
7bfc47f08a
|
Land #14175, MaraCMS 7.5 Arbitrary File Upload (CVE-2020-25042)
|
2020-09-25 20:24:55 +02:00 |
|
|
bwatters
|
2ed72007e0
|
Typos and cleanup
|
2020-09-25 12:27:55 -05:00 |
|
|
kalba-security
|
33b3d6efcc
|
Use register_for_cleanup instead of on_new_session for cleanup
|
2020-09-25 08:11:02 -04:00 |
|
|
kalba-security
|
5b48bae4b0
|
Use keep_cookies instead of @cookie variable
|
2020-09-24 16:36:01 -04:00 |
|
|
kalba-security
|
45d13bf85e
|
Simplify shash checks, use cgi request instead of raw, fix ctype header placement
|
2020-09-24 07:49:55 -04:00 |
|
|
kalba-security
|
e026c74108
|
Improve Failure:: categories and remove empty parameters from POST requests
|
2020-09-23 13:27:19 -04:00 |
|
|
kalba-security
|
1133f76722
|
Improve feedback when authentication fails
|
2020-09-23 07:51:11 -04:00 |
|
|
Christophe De La Fuente
|
7c575223a2
|
Sync with master
|
2020-09-23 10:08:07 +02:00 |
|
|
kalba-security
|
e65083c092
|
Add maracms_upload_exec.rb exploit module and docs
|
2020-09-22 16:53:29 -04:00 |
|
|
bwatters
|
7e68c42876
|
Rubocop, fix check method, clean up c code
|
2020-09-22 07:45:02 -05:00 |
|
|
Christophe De La Fuente
|
2d1b378a18
|
Land #14122, Jenkins Deserialization RCE (CVE-2017-1000353)
|
2020-09-22 12:32:09 +02:00 |
|
|
Shelby Pace
|
2ae50e9304
|
Land #14025, add Artica Proxy auth bypass / rce
|
2020-09-21 15:27:53 -05:00 |
|
|
Shelby Pace
|
18fa28f96b
|
change date format / default payload
|
2020-09-21 15:26:39 -05:00 |
|
|
h00die
|
ee77cc8e78
|
Land #14123, vyos restricted shell escape and priv escalation
|
2020-09-19 09:13:38 -04:00 |
|
|
bwatters
|
534e945cd0
|
First attempt at CVE-2020-1313
|
2020-09-18 15:39:12 -05:00 |
|
|
Brendan Coles
|
6208f8795a
|
vyos_restricted_shell_privesc: support login as admin user
|
2020-09-18 15:49:25 +00:00 |
|
|
Shelby Pace
|
74669f4052
|
Land #14135, add tp-link command injection
|
2020-09-18 09:47:02 -05:00 |
|
|
Pietro Oliva
|
5f204257a5
|
Remove unnecessary comma, fix docs
|
2020-09-18 10:15:23 -04:00 |
|
|
Pietro Oliva
|
e2c169d7d3
|
Remove unnecessarily setting SSL via datastore
|
2020-09-18 09:32:45 -04:00 |
|
|
0xsysenter
|
3144a1aede
|
Add SSL in DefaultOptions
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2020-09-18 15:31:23 +02:00 |
|
|
Pietro Oliva
|
d3f68d0fe4
|
Fix double shell issue
|
2020-09-18 09:23:02 -04:00 |
|
|
Shelby Pace
|
c04e8d73c3
|
Land #14023, spooler svc privesc (PrinterDemon)
|
2020-09-17 16:06:29 -05:00 |
|
|
Shelby Pace
|
8b75401fcf
|
remove requires
|
2020-09-17 16:04:56 -05:00 |
|
|
Shelby Pace
|
09c5b906af
|
change notes and primary command stager flavor
|
2020-09-17 13:25:14 -05:00 |
|
|
Shelby Pace
|
8c1968e01c
|
use more generic regex for versioning
Co-authored-by: cdelafuente-r7 <56716719+cdelafuente-r7@users.noreply.github.com>
|
2020-09-17 09:12:20 -05:00 |
|
|
Pietro Oliva
|
072f35c270
|
-Updated module to work using CmdStager
-Updated documentation accordingly
-Removed unnecessary includes and simplified code
|
2020-09-16 19:51:15 -04:00 |
|
|
Spencer McIntyre
|
c2d101a06b
|
Land #14126, Add Microsoft Exchange Server DLP Policy RCE (CVE-2020-16875)
|
2020-09-16 16:31:13 -04:00 |
|
|
William Vu
|
5bda3b4b9d
|
Revert "Make User-Agent consistent across requests"
This reverts commit 0ec97aa447.
|
2020-09-16 13:24:18 -05:00 |
|
|
William Vu
|
da4e960eb0
|
Revert "Fix HttpUserAgent to UserAgent"
This reverts commit 3c8390a1c7.
|
2020-09-16 13:24:14 -05:00 |
|
|
William Vu
|
3c8390a1c7
|
Fix HttpUserAgent to UserAgent
Payload vs. HttpClient. Whoops.
|
2020-09-16 13:03:55 -05:00 |
|
|
William Vu
|
0ec97aa447
|
Make User-Agent consistent across requests
|
2020-09-16 12:59:17 -05:00 |
|
|
William Vu
|
03e0b9098c
|
Add more words about Exchange role groups
|
2020-09-16 12:55:08 -05:00 |
|
|
Pietro Oliva
|
c396ad0436
|
Fix compatibility issue resulting in no shell on some devices
|
2020-09-16 13:38:34 -04:00 |
|
|
bwatters
|
d8df8a3422
|
Change description and fix typo
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
dcd0918694
|
Fixed cleanup and check
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
198f3905ae
|
Logic errors and typos
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
fe59099678
|
Clean up C code, add support for x86 targets
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
ce8033714d
|
remove copy/pasta code and fix version check
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
c2e2a4fe2c
|
More Rubocop, add documentation, and typo fix
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
f14d6ffe13
|
Rubocop and modularization
|
2020-09-16 11:17:39 -05:00 |
|
|
bwatters
|
a72769909b
|
Change exe to take destination and source files for copy
|
2020-09-16 11:17:39 -05:00 |
|