 Takah1ro
|
393aed445d
|
Formatting
|
2024-07-26 21:14:51 +09:00 |
|
|
Takah1ro
|
b5c4fd0e32
|
use the same instance
OpenSSL::Digest.new('sha256')
|
2024-07-26 21:05:59 +09:00 |
|
|
Takah1ro
|
5ee86967e5
|
Pass a Hash as argument
|
2024-07-26 20:59:54 +09:00 |
|
|
Takah1ro
|
bff7e48e3c
|
Avoid code duplication
|
2024-07-26 20:44:18 +09:00 |
|
|
Takah1ro
|
10b723751b
|
Avoid code duplication
|
2024-07-26 13:11:26 +09:00 |
|
|
Takah1ro
|
0b9b7a49e7
|
Add response check
|
2024-07-26 08:48:45 +09:00 |
|
|
Takah1ro
|
b0689971b6
|
Fix to_bytes
|
2024-07-26 08:38:14 +09:00 |
|
|
Takah1ro
|
ed0720dcfd
|
Separate write_file function
|
2024-07-26 08:32:32 +09:00 |
|
|
Takah1ro
|
ae95bb6c0f
|
Fix build_routing_packet
|
2024-07-26 08:22:57 +09:00 |
|
|
Takah1ro
|
b1e304a61f
|
Fix match
|
2024-07-26 08:16:30 +09:00 |
|
|
Takah1ro
|
0fab915abb
|
Update to use original aes_encrypt function
|
2024-07-24 12:14:16 +09:00 |
|
|
Takah1ro
|
b48a2089cf
|
fix previous commit bug affecting original exploit
|
2024-07-24 11:55:05 +09:00 |
|
|
Takah1ro
|
79ad046f56
|
Refactoring skywalker
|
2024-07-24 11:42:19 +09:00 |
|
|
Takah1ro
|
eface45c5c
|
Refactoring skywalker
|
2024-07-24 10:19:03 +09:00 |
|
|
Takah1ro
|
ab0433e95f
|
Update to target both vulnerabilities
|
2024-07-23 22:21:08 +09:00 |
|
|
Takah1ro
|
61754f3c92
|
Add cve ref and update broken link
|
2024-07-23 08:43:45 +09:00 |
|
|
Takahiro Yokoyama
|
ad82481cce
|
Update empire_skywalker.rb
|
2024-07-20 21:55:39 +09:00 |
|
|
Christophe De La Fuente
|
df8f281d18
|
Land #19204, Zyxel VPN Series Pre-auth Command Injection
|
2024-07-03 20:14:39 +02:00 |
|
|
jheysel-r7
|
b67f05f50d
|
Apply suggestions from code review
|
2024-07-03 13:51:50 -04:00 |
|
|
Jack Heysel
|
7e4c6ca028
|
Added code to print stdout of payloads without reverse connections
|
2024-07-03 09:36:36 -07:00 |
|
|
Jack Heysel
|
1d602da6b5
|
Added space between command and stderr/stout redirection
|
2024-07-03 08:23:38 -07:00 |
|
|
Jack Heysel
|
9cfaa2e69f
|
Lowered rank and explained mock testing
|
2024-06-24 09:13:46 -07:00 |
|
|
Christophe De La Fuente
|
24fa34e7b9
|
Land #19188, Netis MW5360 unauthenticated RCE [CVE-2024-22729]
|
2024-06-24 13:40:51 +02:00 |
|
|
Christophe De La Fuente
|
8fc6e20cec
|
Update other modules to use java_class_loader_start_service and cmdstager_start_service
|
2024-06-14 12:57:42 +02:00 |
|
|
h00die-gr3y
|
4e26704d73
|
Update addressing cdelafuente-r7 comments
|
2024-06-12 18:57:29 +00:00 |
|
|
Jack Heysel
|
12b1936e16
|
Fixed typo added Options section docs
|
2024-06-10 07:39:24 -07:00 |
|
|
h00die-gr3y
|
6a77c2e562
|
Final tweaks in check method
|
2024-06-08 11:33:55 +00:00 |
|
|
h00die-gr3y
|
0e3471d543
|
Final draft
|
2024-06-07 19:47:06 +00:00 |
|
|
h00die-gr3y
|
55fa94995b
|
Updated check method
|
2024-06-06 22:23:35 +00:00 |
|
|
Jack Heysel
|
9d47372fe6
|
rubocop
|
2024-06-03 15:43:25 -04:00 |
|
|
jheysel-r7
|
a8335478c7
|
Apply suggestions from code review
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
|
2024-06-03 15:33:46 -04:00 |
|
|
Jack Heysel
|
d8d1ea7ffb
|
Added on_new_session method
|
2024-05-29 16:04:00 -04:00 |
|
|
Jack Heysel
|
72f332aba0
|
Land #19150, Add Flowmon Command Injection Module
Unauthenticated Command Injection Module for Progress Flowmon
CVE-2024-2389
|
2024-05-29 08:28:37 -04:00 |
|
|
Jack Heysel
|
e57f4d3cb5
|
Change xml to html in get_html_document
|
2024-05-28 16:29:55 -04:00 |
|
|
Jack Heysel
|
5d2a6aa4a1
|
Updated authors
|
2024-05-28 16:03:56 -04:00 |
|
|
Jack Heysel
|
9955724f0a
|
Fixed check method, responded to comments
|
2024-05-28 15:54:28 -04:00 |
|
|
Jack Heysel
|
d13ce0b1b8
|
rubocop fixes
|
2024-05-27 15:05:07 -04:00 |
|
|
h00die-gr3y
|
e7d65fe60a
|
Update based on bwatters-r7 comments
|
2024-05-27 17:45:07 +00:00 |
|
|
Jack Heysel
|
92b259981f
|
Added WRITEABLE_DIR datastore option plus minor improvements
|
2024-05-27 12:48:17 -04:00 |
|
|
Jack Heysel
|
a0597007e4
|
Minor fixes, respond to comments
|
2024-05-23 14:02:28 -04:00 |
|
|
h00die-gr3y
|
66a7fbf0ea
|
Update based on jvoisin comments
|
2024-05-21 20:21:35 +00:00 |
|
|
cgranleese-r7
|
67154a12e0
|
Land #19104, CHAOS rat xss to rce
|
2024-05-21 11:10:57 +01:00 |
|
|
h00die-gr3y
|
31babb6ca1
|
Fixed disclosure date
|
2024-05-19 12:23:21 +00:00 |
|
|
h00die-gr3y
|
6d844ae9c8
|
first release module
|
2024-05-19 12:16:14 +00:00 |
|
|
h00die
|
d1739f32c2
|
review of chaos rat
|
2024-05-13 16:55:43 -04:00 |
|
|
Jack Heysel
|
576191b34f
|
beta commit
|
2024-05-10 09:01:58 -07:00 |
|
|
DaveYesland
|
a7e97e50ad
|
Add module for flowmon cmd injection CVE-2024-2389
|
2024-05-01 08:42:55 -07:00 |
|
|
bwatters
|
364d491af7
|
Land #18972, Progress LoadMaster unauthenticated command injection module CVE-2024-1212
Merge branch 'land-18972' into upstream-master
|
2024-04-26 18:18:40 -05:00 |
|
|
bwatters
|
02c31159ab
|
Add vulnerable versions and fix indention
|
2024-04-26 17:36:50 -05:00 |
|
|
h00die
|
7f02902ba1
|
add event_dependent to chaos_xss
|
2024-04-24 16:53:24 -04:00 |
|