0252429715
Land #18775 , Adding new module for MinIO (CVE-2023-28432)
2024-03-11 14:46:59 +01:00
980c5053f4
Peer Review
2024-03-08 08:54:38 -05:00
e20558ec35
Land #18821 , Gitlab public email disclosure CVE-2023-5612
2024-03-06 17:39:24 +01:00
f872535c68
Small missing updates before it land
2024-03-06 17:37:33 +01:00
936b311a1b
Don't close smb client when it comes from the session
2024-03-06 14:20:34 +00:00
1124e347df
Fix rubocop error
2024-03-04 18:39:58 -05:00
bf59f58661
Update modules/auxiliary/gather/gitlab_tags_rss_feed_email_disclosure.rb
2024-03-04 18:34:35 -05:00
3c8f43e23e
Align SQL sessions peerhost and peerport
2024-03-04 13:11:32 +00:00
75c6dcdc15
Detect templates that are vulnerable to ESC13
2024-02-26 17:28:42 -05:00
3cbf46c5b7
Reuse the ldap connection once established
2024-02-26 17:28:42 -05:00
57eda908d1
Added suggested modificaitons to check for nil response and modify reference link to vendor's issues page.
2024-02-15 13:28:44 -05:00
08872d0211
Add session type to info hash in the mixin
2024-02-14 15:37:11 +00:00
0f319bdfb9
Extract SMB and PostgreSQL optional sessions into their own mixins
2024-02-14 15:37:11 +00:00
35f8c6ce8a
Added fixes suggested by reviewer. Added a fix for redirects due to workspaces being case-insensitive.
2024-02-14 09:09:52 -05:00
d18520adc6
update rhost and rport calls
2024-02-13 13:00:38 -06:00
58eba131a8
fixed error with single character variable
2024-02-12 09:47:21 -05:00
3203c7cb66
corrected formatting and other errors with rubocop
2024-02-12 09:37:37 -05:00
fdcd9e26ad
Adding module for gitlab_email_disclosure
2024-02-09 20:51:45 -05:00
35778e92b2
client consolidation
...
convert first module from remote to client
move client to rex
remove metasploit mixin
2024-02-01 17:23:55 -06:00
2b01b86374
Adding new module for MinIO
2024-01-31 13:33:04 -05:00
0075212fa9
Land #18596 , Update smb modules to work with smb sessions
2024-01-15 12:07:07 +00:00
8beb6255cb
fix spelling in aux modules
2024-01-07 15:02:53 -05:00
8b970af7f6
Update modules/auxiliary/gather/splunk_raw_server_info.rb
2023-12-27 12:40:18 -05:00
f950711da1
Apply suggestions from code review
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2023-12-27 12:37:17 -05:00
0394f5f7ad
splunk 6.6.0+
2023-12-20 20:47:04 -05:00
a31de9eb05
Adding Splunk Info Disclosure module.
2023-12-20 14:07:50 -05:00
c55d4ceda0
Add smb session support to windows_secrets_dump module
2023-12-12 11:59:07 +00:00
603e5b2bff
Land #18569 , Add a module to perform ASREP-roasts
...
This adds a module to gather credential material from accounts
with Requires Pre-Authentication disabled. The module supports two
mechanisms, Brute Forcing using a list of usernames or using a LDAP
query to request the relevant usernames, followed by requesting TGTs.
2023-12-11 19:58:06 -05:00
abfec99735
Added loop with key value pairs
2023-12-04 20:09:56 -05:00
0f7e00d30e
owncloud exploit
2023-12-03 15:57:36 -05:00
befc87f9f0
owncloud exploit
2023-12-03 15:45:44 -05:00
ea803063b1
owncloud phpinfo reader
2023-12-03 11:04:38 -05:00
b6dbc81f44
Fixed the pluralisation
2023-12-01 08:03:32 +11:00
25f02ebc7c
Better error message in TGT retrieval failure
2023-11-30 17:47:54 +11:00
a0258e3ff6
Nicer pluralisation
2023-11-30 17:43:35 +11:00
11bcd43562
Apply suggestions from code review
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2023-11-30 17:30:59 +11:00
7ab487612c
Default to NTLM auth, since plaintext will almost certainly never work
2023-11-27 17:52:12 +11:00
622277e960
Added documentation for ASREP module
2023-11-24 08:45:26 +11:00
2ead152173
Add specific module to perform ASREP-roasting
2023-11-24 07:43:49 +11:00
6e9facbefb
Merge pull request #18419 from smashery/dcsync_kerberos
...
DCSync using Kerberos Pass-the-Ticket
2023-10-30 09:41:22 -04:00
776c0644e0
Corresponding change from RubySMB code review
2023-10-13 11:11:22 +11:00
05dd2e1473
Land #18351 , Apache Superset RCE (CVE-2023-37941)
2023-10-12 17:10:10 -04:00
1bd229056e
Support Kerberos auth for DCERPC
2023-09-28 16:26:06 +10:00
13e7f6cc27
fix related modules references
2023-09-15 16:35:55 -04:00
619a46d450
working hashes for apache superset rce
2023-09-14 13:21:01 -04:00
28c4902f4a
Land #18180 , Flask unsign library, related modules
...
Apache Supserset Priv Esc (CVE-2023-27524) and Flask unsign Library
2023-09-12 19:02:30 -04:00
c1cabdf099
Process escape sequences in the wordlist
2023-09-12 16:49:38 -04:00
94657d317b
another round of review comments
2023-09-11 14:29:20 -04:00
2ed001ced2
light review changes
2023-09-11 10:33:43 -04:00
235c142274
Merge remote-tracking branch 'origin/flask_unsign' into flask_unsign
2023-09-11 10:27:00 -04:00
Christophe De La Fuente