ab9576f83d
Add changes
2023-12-01 10:55:04 +01:00
b2fa201a7d
Implement check
2023-11-28 16:45:44 +01:00
0146527e55
Add splunk_xslt_authenticated_rce
2023-11-28 15:40:05 +01:00
1da4333611
Land #18434 , Add module for Zoneminder RCE
...
This PR adds an RCE module for the Zoneminder video
surveillance software system (CVE-2023-26035).
2023-11-10 15:15:01 -05:00
5d5f711dcd
updated documentation
2023-11-09 22:40:36 +00:00
58f9a39f72
replaced custom timer with rex::stopwatch
...
updated documentation
2023-10-12 11:46:56 +00:00
557a15a115
spelling fixes on docs
2023-10-10 14:46:18 -04:00
2d065d59cf
Documentation for exploit module for CVE-2023-26035
2023-10-06 17:43:44 +00:00
8717e66b14
Land #18280 , Add Maltrail Unauth RCE Module
...
This PR adds a module for an unauthenticated RCE vulnerability
in Maltrail, a malicious traffic detection system. This vuln
does not have a CVE associated with it.
2023-08-16 17:29:05 -04:00
a91f928d62
Update documentation/modules/exploit/unix/http/maltrail_rce.md
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-16 18:45:37 +00:00
99e78a4c00
Update documentaion file
2023-08-14 21:01:10 -04:00
4b7d98df07
Add Maltrail Unauthenticated RCE exploit
2023-08-10 23:02:20 +02:00
da9200819d
Update scenarios for new targets
2023-08-10 00:55:52 +02:00
41f0c30855
Add RaspAP Unauthenticated Command Injection (CVE-2022-39986) Exploit
2023-08-04 21:22:07 +02:00
34f25fbb65
pfSense Config Data Remote Command Execution as root (CVE-2023-27253) Module
2023-07-12 13:27:02 -04:00
a4e1952da3
Add a module for the latest SPIP vuln
2023-04-17 13:41:03 -04:00
69daea95d6
exploit/unix/ftp/proftpd_modcopy_exec: Add docs and resolve RuboCop violations
2023-03-23 18:13:20 +11:00
6043d0ffba
Update all links from Wiki site to new docs site.
2023-01-27 09:58:53 -06:00
2a28af208d
Land #16992 , Syncovery For Linux - Auth. RCE (CVE-2022-36534)
2022-12-14 13:43:00 +01:00
04e5aa3033
apply suggestions
2022-12-02 16:05:01 +01:00
a3e32ffafa
Add TARGET 0 to documentation
2022-10-12 20:00:33 -05:00
e9f54aa5b8
Update documentation with better wording, and add randomization of parameter name to module along with cleanup code for deleting uploaded files
2022-10-12 19:16:52 -05:00
9652823393
Reverted check method to upload shell
2022-10-12 19:16:44 -05:00
3c27c8e5aa
Condensed payload, changed base64 encoding to hex
2022-10-12 19:12:35 -05:00
e4eac96b4b
Add Module for pfSense pfBlockerNG unauth RCE as root
2022-10-12 19:12:22 -05:00
01556b22d5
Syncovery For Linux - Auth. RCE (CVE-2022-36534)
2022-09-07 13:34:48 +02:00
b56242c7a2
enable MeterpreterTryToFork by default for aerohive_netconfig_lfi_log_poison_rce
2022-07-01 06:15:13 -04:00
dd0b124e84
fix typo in docs, check some responses
2022-05-04 17:28:37 -05:00
0f5e31d593
Apply suggestions from code review
...
Update documentation common default options
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-05-03 15:43:38 +07:00
bb8c130740
Fix docs typo
2022-04-28 21:57:18 +07:00
eba436dd99
Add Zoneminder Language rce module docs
2022-04-28 21:01:00 +07:00
65e16a1a72
Initial implementation of pfSense auth file creation bug (CVE-2021-41282)
2022-02-27 18:12:54 -08:00
4505d7e834
Land #15700 , Add Aerohive NetConfig <= 10.0r8a RCE (CVE-2020-16152) module
...
Merge branch 'land-15700' into upstream-master
2021-11-11 17:03:54 -06:00
5e670638f3
Add a line suggesting TryToFork on Meterpreter might prevent the hang after exploitation
2021-11-11 16:59:09 -06:00
728965b3c6
fix typos in docs
2021-11-02 20:04:06 -04:00
f778f5f00a
add cleanup, add new info and warning messages, update docs, small improvements
2021-11-02 19:58:16 -04:00
8185b26a12
change should to must in referring to id option
2021-11-02 09:15:59 -05:00
b970e38edb
spell betterer
2021-10-11 16:44:32 -04:00
441c1966e2
fix IPs
2021-10-11 15:33:07 -04:00
0745bbe4d8
pie-register on wordpress
2021-10-11 15:25:07 -04:00
6b4aa25490
Add Meterpreter support via Linux target with ARCH_ARMLE and cmdstager
2021-09-23 18:26:13 -04:00
0d42c36655
Specify that newer versions may still be vulnerable as no patch has been confirmed by the vendor
2021-09-23 05:19:07 -04:00
b81d44020a
Add Aerohive NetConfig 10.0r8a LFI and log poisoning to RCE module and docs
2021-09-23 04:57:48 -04:00
809081bc5f
Land #15279 , add Pi-Hole lpe
2021-07-29 11:15:17 -05:00
6d13f0627e
formatting changes
2021-06-25 16:20:42 +02:00
1194e7d0f3
add guards, adjust formatting, add docs
2021-06-25 16:20:42 +02:00
6e3e27984b
Update wp_admin_shell_upload.md
2021-06-13 13:53:08 +02:00
598f925fd3
remove extra spaces
2021-06-01 11:37:45 -05:00
0c3a693bef
working exploit and docs
2021-05-30 14:37:11 -04:00
825cc9d284
upgraded to meterp
2021-05-29 15:55:24 -04:00
Balgogan