Commit Graph

11360 Commits

Author SHA1 Message Date
Yann Castel 61c9b9772e omission of rubocop 2021-05-27 15:09:02 +02:00
Yann Castel d7a8986af9 target_uri + fix targeted_class param + more description 2021-05-27 15:05:27 +02:00
owein 733cd73cfc Fix the shodan search module max pages 2021-05-27 08:53:54 -04:00
Hakyac ddcc42b844 Update modules/auxiliary/gather/http/cve_2021_27850_apache_tapestry_hmac_key.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-05-26 15:35:04 +02:00
Hakyac 22f25d7a7f Update modules/auxiliary/gather/http/cve_2021_27850_apache_tapestry_hmac_key.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-05-26 15:34:54 +02:00
Hakyac d766f89a3f Update modules/auxiliary/gather/http/cve_2021_27850_apache_tapestry_hmac_key.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-05-26 15:34:41 +02:00
Alan Foster 275b5b85e1 Add check method to tomcat ghostcat module 2021-05-24 19:10:10 +01:00
bwatters 6b42fa7d20 Land #15220, Added OS version info to ntlm_info_enumeration.rb
Merge branch 'land-15220' into upstream-master
2021-05-21 15:59:21 -05:00
bwatters 72375d1f67 Land #15024, Add RCE Exploit For CVE-2020-0796 (SMBGhost)
Merge branch 'land-15024' into upstream-master
2021-05-20 17:02:04 -05:00
Yann Castel 72928e0865 module moved to a better location (again) and renamed 2021-05-20 16:47:13 +02:00
Grant Willcox 133b40de30 Land #15212, Converts Python shebangs over to Python 3 2021-05-19 10:39:09 -05:00
bogey3 2d7cb527cc Added OS version to ntlm_info_enumeration.rb
This modification adds the ability to retrieve the OS version from
an NTLMSSP type 2 message.
2021-05-19 16:13:42 +01:00
Yann Castel 99799c177f now is validated by robocop 2021-05-19 10:57:05 +02:00
Patrick Webster 912cda8a2e Remove title whitespace 2021-05-19 01:07:36 +10:00
cgranleese-r7 a894b8cc29 Updates Python shebangs to Python 3 2021-05-18 12:43:04 +01:00
Yann Castel d4c5f59117 file moved to a better place 2021-05-18 09:11:41 +02:00
Yann Castel 2005138017 add CVE-2021-27850 Apache Tapestry HMAC secret key leak 2021-05-17 17:13:09 +02:00
Grant Willcox e7983c3b6f Land #15192, Enforce Style/RedundantBegin for new modules 2021-05-17 09:51:57 -05:00
adfoster-r7 ac2c467121 Land #15011, Enhance analyze command API to understand modules' needs 2021-05-14 14:30:33 +01:00
Grant Willcox ad266b4348 Update documentation to clear a few things up and add in additional checks to module to check the file exists and is readable before using it 2021-05-13 13:39:39 -05:00
pingport80 baabd0265f update docs and add a check 2021-05-13 13:39:32 -05:00
pingport80 e475eaa7bd add formatting option back and update docs 2021-05-13 13:39:19 -05:00
pingport80 854b6a4be4 update telegram/send_message to support multiple chat_ids and document 2021-05-13 13:38:50 -05:00
pingport80 b3bd0ee03f add send_document module and docs 2021-05-13 13:38:41 -05:00
Alan Foster 100da2f1b1 Enforce Style/RedundantBegin for new modules 2021-05-13 04:01:03 +01:00
h00die 33727ef664 idrac docs and cleanup 2021-05-02 08:52:11 -04:00
William Vu 4fafb9a272 Fix missing CheckCode in saltstack_salt_root_key 2021-04-30 23:26:18 -05:00
Ashley Donaldson 78295b654b Land #14702, Add module Redis extractor 2021-04-29 11:02:38 +10:00
Ashley Donaldson 4678790c4a Fixed Rubocop issues 2021-04-29 11:02:12 +10:00
btnz-k a223baf0a3 Updated emby_version_ssrf to include timeout. Updated documentation filenames and content. 2021-04-28 13:07:51 -07:00
btnz-k b3b9d89bd1 changes to meet r7 reqs 2021-04-28 12:41:41 -07:00
btnz 13c619cb7e Add files via upload 2021-04-28 10:37:39 -07:00
btnz a5f68fc043 Add files via upload 2021-04-28 10:36:55 -07:00
Ashley Donaldson 06f3785ec3 Various changes from code review
* Remove use of member variable for storing state
* Display Redis hashes as Ruby hashes
* Rubifying code
2021-04-28 17:12:56 +10:00
Ashley Donaldson 54923c971b Use new parsing code in most requests in the module 2021-04-28 16:23:19 +10:00
Ashley Donaldson dc24800407 Robustness improvements to Redis extractor module
* Use RESP's information about bulk string and array lengths
* Iterative rather than recursive approach
2021-04-28 11:17:48 +10:00
adfoster-r7 24d291c1f0 Land #15081, Adds error handling for mssql_idf when module has no matching results 2021-04-27 15:52:40 +01:00
Ashley Donaldson a640443cab Land #15014, Added string PKey support for ssh module
Able to specify an individual private key as a string parameter into the module
2021-04-27 15:42:37 +10:00
Tim W 16401b0c30 Land #14953, fix python3.6 string formatting in rdp_web_login 2021-04-23 21:01:53 +01:00
Tim W d742ee00af use python string.format 2021-04-23 20:59:51 +01:00
Cooper Travis 6cc800e0fc Updated logging and documentation 2021-04-23 10:26:46 -05:00
Cooper Travis c1c402f069 Update modules/auxiliary/scanner/ssh/ssh_login_pubkey.rb
Co-authored-by: Ashley Donaldson <smashery@gmail.com>
2021-04-23 10:07:32 -05:00
Cooper Travis 9bfcbc8a2e Added string PKey support for ssh module
* Implemented command shell session reporting
  * Updated ssh login pubkey module documentation
2021-04-22 14:49:45 -05:00
cgranleese-r7 68ad21c6a6 Adds error handling for NoMethodError 2021-04-22 12:48:39 +01:00
Spencer McIntyre 20f4050e5b Update redis_login to check that authentication is required 2021-04-12 19:53:01 -04:00
Spencer McIntyre c4f88e35ba Land #14622, add the sp_oacreate technique to the mssql_exec module 2021-04-12 15:00:15 -04:00
Spencer McIntyre ef82219235 Update the mssql_exec docs and some verbiage 2021-04-12 14:52:13 -04:00
Paul Werther 7a07146d03 add ref for xp_cmdshell 2021-04-11 22:18:44 +02:00
Paul Werther 75aba6707b modify original module, add technique option 2021-04-11 22:16:15 +02:00
Grant Willcox 608ac3a0b7 Update module description to clean it up and also add documentation for uncommon options 2021-04-09 16:09:02 -05:00