Commit Graph

1316 Commits

Author SHA1 Message Date
Spencer McIntyre 8317a484a3 Land #15548, Overhaul SMB auth capture server 2021-08-30 10:01:55 -04:00
space-r7 17da80163c fix typo, set COUNT default to 3 as noted in docs 2021-08-25 14:17:47 -05:00
h00die b9db47f873 wp_learnpress sqli 2021-08-23 19:45:45 -04:00
adfoster-r7 d9baaed0ba Fix smb enum gpp module 2021-08-18 11:44:03 +01:00
A Galway 534ba9a7af splits jtr hash files, adds timeout & updates docs 2021-08-16 16:57:49 +01:00
A Galway 89b7613d6a typos, errors handiling, & removes unused args 2021-08-16 13:27:00 +01:00
A Galway 08c732dbb5 improves documentation and placeholder comments 2021-08-13 17:53:00 +01:00
A Galway 8ce50af72d updates docs & adds in os reporting placeholder 2021-08-13 17:11:21 +01:00
Christophe De La Fuente 07c9350733 Land #15430, Support for SSH pivoting 2021-08-09 18:34:08 +02:00
Grant Willcox a518fcac98 Add in timeout to 10th and final request to prevent module from throwing errors like it isn't working when it really is 2021-07-28 11:32:47 -05:00
Grant Willcox a53411229f Move files over to start work on converting this into an auxiliary module 2021-07-27 13:00:17 -05:00
Spencer McIntyre 426898e065 Add a tip and note in the module docs 2021-07-26 09:13:11 -04:00
Shelby Pace 7a39f4c4dd Land #15211, add apache tapestry gatherer 2021-07-22 11:58:03 -05:00
Shelby Pace bc1f106bcb change method of retrieving key
add checks on responses, update docs
2021-07-21 17:56:41 -05:00
William Vu b9a71449e5 Add module docs 2021-07-20 20:07:08 -05:00
Spencer McIntyre c593ec9e8f Fix the markdown formatting in the module docs 2021-07-12 15:03:39 -04:00
Spencer McIntyre e155bb64cd Improved check method for PrintNightmare 2021-07-09 12:15:39 -04:00
Grant Willcox 70fd9376e3 Final documentation improvements to explain SMB setup and improvements to module to fix one minor error output 2021-07-07 17:05:22 -05:00
Spencer McIntyre f42aa3742c Automatically reconnect to the named pipe 2021-07-07 13:25:51 -04:00
Spencer McIntyre d5d48949b2 Update PrintNightmare module docs 2021-07-06 16:30:51 -04:00
Spencer McIntyre 9c6b023b0d Add PrintNightmare module docs 2021-07-02 16:00:39 -04:00
Spencer McIntyre 9cc17095d4 Land #15282, CVE-2019-15975 Cisco DCNM auth bypass 2021-06-24 11:59:21 -04:00
Spencer McIntyre fe6b725d3f Update the documentation and fix a couple of bugs 2021-06-24 11:19:26 -04:00
Yann Castel 5ac025477a parent e7983c3b6f
author Yann Castel <yann.castel@orange.com> 1622466490 +0200
committer Spencer McIntyre <Spencer_McIntyre@rapid7.com> 1624547674 -0400

Add an exploit for CVE-2019-15975 (Cisco DCNM)

add documentation

passed rubocop

edit documentation

set ssl to true by default

edit documentation

rubocop again

int return code was replaced by symbols

Update modules/auxiliary/admin/networking/cisco_dcnm_auth_bypass.rb

Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>

rubocop ok

various changes

Update modules/auxiliary/admin/networking/cisco_dcnm_auth_bypass.rb

Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>

Update modules/auxiliary/admin/networking/cisco_dcnm_auth_bypass.rb

Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>

various changes 2

various changes

Update modules/auxiliary/admin/networking/cisco_dcnm_auth_bypass.rb

Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>

adding some guards + module notes
2021-06-24 11:19:25 -04:00
h00die 0f16c1a633 Land #14836, emby ssrf module and scanner for cve-2020-26948 2021-06-12 15:18:12 -04:00
h00die 65bbe021bc updated docs 2021-06-12 15:08:53 -04:00
btnz-k f684955537 updated documentation, modified var type 2021-06-09 15:26:29 -07:00
Spencer McIntyre eea2f10f2e Use ALL_CAPS for normal datastore options 2021-06-04 10:22:42 -04:00
btnz-k 267a07166c Updated per R7 requests. 2021-06-03 13:08:08 -07:00
Ashley Donaldson 51969602a7 Updated documentation for redis extractor changes 2021-06-03 12:02:03 +10:00
Hakyac 8d5a987037 Update cve_2021_27850_apache_tapestry_hmac_key.md 2021-05-28 10:45:53 +02:00
Yann Castel 13f916c687 Installation info in documentation 2021-05-28 09:53:59 +02:00
Hakyac 2cfc97160c Update documentation/modules/auxiliary/gather/http/cve_2021_27850_apache_tapestry_hmac_key.md
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-05-26 15:34:45 +02:00
Hakyac de05c11095 Update documentation/modules/auxiliary/gather/http/cve_2021_27850_apache_tapestry_hmac_key.md
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-05-26 15:34:10 +02:00
Yann Castel 72928e0865 module moved to a better location (again) and renamed 2021-05-20 16:47:13 +02:00
Yann Castel 2ef3eadcd4 add description for this module 2021-05-19 11:49:14 +02:00
Grant Willcox ad266b4348 Update documentation to clear a few things up and add in additional checks to module to check the file exists and is readable before using it 2021-05-13 13:39:39 -05:00
pingport80 baabd0265f update docs and add a check 2021-05-13 13:39:32 -05:00
pingport80 e475eaa7bd add formatting option back and update docs 2021-05-13 13:39:19 -05:00
pingport80 854b6a4be4 update telegram/send_message to support multiple chat_ids and document 2021-05-13 13:38:50 -05:00
pingport80 b3bd0ee03f add send_document module and docs 2021-05-13 13:38:41 -05:00
h00die 33727ef664 idrac docs and cleanup 2021-05-02 08:52:11 -04:00
Ashley Donaldson 78295b654b Land #14702, Add module Redis extractor 2021-04-29 11:02:38 +10:00
btnz-k 9d23121fa0 Updated documentation content. 2021-04-28 14:02:06 -07:00
btnz-k a223baf0a3 Updated emby_version_ssrf to include timeout. Updated documentation filenames and content. 2021-04-28 13:07:51 -07:00
btnz-k b3b9d89bd1 changes to meet r7 reqs 2021-04-28 12:41:41 -07:00
Ashley Donaldson dc24800407 Robustness improvements to Redis extractor module
* Use RESP's information about bulk string and array lengths
* Iterative rather than recursive approach
2021-04-28 11:17:48 +10:00
Cooper Travis 6cc800e0fc Updated logging and documentation 2021-04-23 10:26:46 -05:00
Cooper Travis 9bfcbc8a2e Added string PKey support for ssh module
* Implemented command shell session reporting
  * Updated ssh login pubkey module documentation
2021-04-22 14:49:45 -05:00
Spencer McIntyre c4f88e35ba Land #14622, add the sp_oacreate technique to the mssql_exec module 2021-04-12 15:00:15 -04:00