63e438e992
Bump RubySMB and add a simple check method
2021-04-09 14:44:27 -04:00
8814218f20
Update tomcat ghost module with default ports
2021-04-08 10:29:09 +01:00
893de0c45c
Land #14987 , Update RbMysql to the most recent version
2021-04-07 13:29:43 +01:00
6096d0f135
Remove superfluous default_cred? methods
2021-04-07 06:12:25 -05:00
6a5529c7cc
Land #14965 , Solman post module for CVE-2019-0307 and new action for cve_2020_6207_solman_rce auxiliary module
2021-04-07 09:46:56 +02:00
690e687e7e
Updates from code review
...
Update modules/post/multi/sap/smdagent_get_properties.rb
Update modules/auxiliary/admin/sap/cve_2020_6207_solman_rce.rb
Update documentation for auxiliary module cve_2020_6207_solman_rce.md
Update documentation for post module smdagent_get_properties.md
Move setup_xml_and_variables to `run` method in auxiliary module cve_2020_6207_solman_rce.rb
Delete list_dir, read_file, file_exist in post module smdagent_get_properties.rb
2021-04-06 21:23:39 +02:00
c267a7fc2d
Fix issue with Rex::Proto::NTP namespacing
2021-04-06 14:45:11 +01:00
3ce4e5ec2c
Updated calls to describe method to fix crashes
2021-04-01 22:06:40 +02:00
278c56652e
Update RbMysql to the most recent code from this gem https://github.com/tmtm/ruby-mysql
2021-04-01 14:17:28 +01:00
8d579ff30c
Update the HTTP Title scanner as a demonstration
2021-03-29 13:56:25 -04:00
a803d7a0d1
CVE-2019-0307
...
Add post module smdagent_get_properties.rb
Add lib sap_smd_agent_unencrypted_property.rb
Update auxiliary module cve_2020_6207_solman_rce.rb
Update lib sap_sol_man_eem_miss_auth.rb
2021-03-29 20:29:30 +03:00
4bf5f4a49c
Land #14963 , Fix cloud_lookup gather module (PublicSuffix)
2021-03-29 15:12:20 +01:00
e09c62a8c2
fix. missing require
2021-03-29 15:56:46 +04:00
80ae750df5
Land #14697 , Add Nagios XI mixin and auxiliary scanner module and docs
2021-03-26 18:12:16 -05:00
db376a9dd8
Working R7 changes to meet requirements
2021-03-26 14:09:49 -07:00
c193465c0f
Drop python 3.6 string formatting syntax because the parser is not there, yet
2021-03-26 13:37:58 -05:00
1dbf1656d3
Update to introduce wrapping on some comments and also to fix up the CVE output a bit
2021-03-26 11:46:51 -05:00
006faaab9a
Land #14924 , Add auxiliary and exploit modules for CVE-2020-6207 in SAP Solution Manager
2021-03-25 17:48:56 -04:00
122dbbea1e
Add additional supported modules. Align results when printing in scanner.
2021-03-25 15:01:05 -04:00
1c3e2d145e
Update modules/auxiliary/scanner/http/jira_user_enum.rb
...
Co-authored-by: cdelafuente-r7 <56716719+cdelafuente-r7@users.noreply.github.com >
2021-03-25 13:15:26 -05:00
6d1986e8ca
Avoid mixing return types in login.rb
2021-03-25 14:13:55 -04:00
16067d2801
Make sure to always call rce_check correctly
2021-03-25 11:24:25 -04:00
707f163e15
Avoid type mixing as much as possible, add other feedback from code review
2021-03-25 11:19:31 -04:00
3b8f3620d2
Minor updates
...
Updated action_exec in auxiliary module cve_2020_6207_solman_rce.rb
Updated execute_command in exploit module cve_2020_6207_solman_rs.rb
2021-03-25 15:37:29 +03:00
0487e451cf
Updated payload
...
Updated make_rce_payload, renamed get_agent_os to check_agent in lib sap_sol_man_eem_miss_auth.rb
Updated action_ssrf, action_exec in auxiliary module cve_2020_6207_solman_rce.rb
Updated execute_command, exploit in exploit module cve_2020_6207_solman_rs.rb
2021-03-25 14:20:54 +03:00
d28bcdc821
Updated action_ssrf, action_exec in auxiliary cve_2020_6207_solman_rce.rb
2021-03-24 16:05:34 +03:00
567f78c532
Update PAYLOAD_XML, check_response in lib sap_sol_man_eem_miss_auth.rb
...
Delete class var agents in auxiliary and exploit modules
2021-03-24 11:21:57 +03:00
c2f0b2a862
Update modules/auxiliary/scanner/http/jira_user_enum.rb
...
Co-authored-by: cdelafuente-r7 <56716719+cdelafuente-r7@users.noreply.github.com >
2021-03-23 16:23:32 -05:00
3d3155c8b6
Update modules/auxiliary/scanner/http/jira_user_enum.rb
...
Co-authored-by: cdelafuente-r7 <56716719+cdelafuente-r7@users.noreply.github.com >
2021-03-23 16:23:02 -05:00
6aba44c4d5
Delete analyze_error in auxiliary module cve_2020_6207_solman_rce.rb
2021-03-23 23:59:20 +03:00
2c18435e6e
Update pretty_agents_table in lib sap_sol_man_eem_miss_auth.rb
...
Change output in auxiliary and exploit modules
2021-03-23 23:00:34 +03:00
4399fa73fc
Update make_rce_payload, make_soap_body in lib sap_sol_man_eem_miss_auth.rb
...
Update rce command in auxiliary module cve_2020_6207_solman_rce.rb
2021-03-23 19:02:59 +03:00
2dcd0fad04
Land #14860 , Auxiliary/Exploit Scanner/Gather/RCE for Exchange ProxyLogon (CVE-2021-26855)
2021-03-23 13:10:15 +01:00
0fae3f4805
Added conditions in options in auxiliary module cve_2020_6207_solman_rce.rb
2021-03-23 14:02:12 +03:00
d76224066f
Rename option URIPATH to TARGETURI
2021-03-23 13:33:39 +03:00
113dce79de
Move lib/metasploit/framework/sap_solman/client.rb to lib/msf/core/exploit/remote/http/sap_sol_man_eem_miss_auth.rb
2021-03-23 13:20:27 +03:00
aa4bbcba8f
Update emby_scan.rb
...
added references
2021-03-22 17:09:24 -07:00
5880fe33a4
Update emby_scan.rb
...
removed version, added disclosure date
2021-03-22 17:02:06 -07:00
05744a2d22
Update emby_scan.rb
...
Description Updated
2021-03-22 16:56:50 -07:00
37b0552803
last code review before land
2021-03-22 23:20:40 +04:00
cf03083dab
Land #14879 , Fix error when running ssh_login_pubkey.rb against a directory/file and improve error handling
2021-03-22 13:00:26 -05:00
2a48dd265d
Replace class var @@agents with a class instance var in auxiliary and exploit modules.
2021-03-22 12:13:04 +03:00
c543b44fc2
fix: CmdStagerFlavor, add: Powershell target, ...
2021-03-21 22:47:27 +04:00
42726a70c0
client.rb - library for auxiliary and exploit modules
...
cve_2020_6207_solman_rce.rb - auxiliary module
cve_2020_6207_solman_rce.md - documentation for auxiliary module
cve_2020_6207_solman_rs.rb - exploit module
cve_2020_6207_solman_rs.md - documentation for exploit module
2021-03-21 16:51:21 +03:00
f5c807590c
a last round of review + rubocop
2021-03-20 01:23:43 +04:00
ac573d0957
all modules code review.
2021-03-19 17:35:55 +04:00
799ea56316
replace ::Rex::Socket.gethostbyname with Socket.getaddrinfo
2021-03-19 11:01:27 +00:00
341212c5f7
Land #14912 , netgear_r6700_pass_reset - Fix check code typo and version check logic
2021-03-18 17:10:12 -05:00
f340a06a4f
use Rex::Version instead of Gem::Version, rebase to get relevant changes
2021-03-18 12:27:12 -04:00
a38e2702c8
Add recommendations from code review, avoid returning checkcodes
2021-03-18 12:21:51 -04:00
Spencer McIntyre