bf1b3b377c
Add cve-2021-3493 module
2021-12-01 14:54:47 -06:00
21a6a18d92
trade URI.encode & URI.escape for Ruby 3
...
Ruby 3 removed the `URI.escape` methods however access to
the a parse for the same RFC is stil available at `URI::DEFAULT_PARSER.escape`.
Per the Ruby forum [comment](https://bugs.ruby-lang.org/issues/17309#note-1 ) this should equal.
2021-11-22 14:11:03 -06:00
d7cb7804e6
Implement some changes from PR feedback
2021-11-18 16:35:13 -05:00
a915c3ce5c
Add fixes for some of the issues raised during the review process on both the documentation and module side of things
2021-11-17 17:25:50 -06:00
9fa65092d1
Switch to the new Rex stopwatch function
2021-11-16 10:12:57 -05:00
0b3f95abca
Writeup the module docs and move the protocol code
2021-11-12 15:15:51 -05:00
1f1e0fc2cc
Write and use a check method
2021-11-12 14:08:19 -05:00
7284f14fd8
Define custom Thrift types, improve syncing
2021-11-12 10:30:48 -05:00
21ff65994c
Initial commit of the Storm Nimbus cmd exec
2021-11-12 10:30:15 -05:00
1dd26bca03
Land #15802 , add OMIGOD LPE
2021-11-09 10:30:50 -06:00
278d940fee
Update the Python exploit code to fix a bug
2021-11-02 10:10:18 -04:00
73e55fcaee
Land #15665 , Add Meterpreter compatibility metadata
2021-10-29 12:45:26 +01:00
98528c8ba6
Fail over to default paths
2021-10-28 15:01:12 -04:00
1ca9f48266
Land #15783 , Add Sophos UTM CVE-2020-25223 exploit
2021-10-28 09:00:08 -04:00
78ebc89106
Improve sleep timeout using science
2021-10-27 22:49:41 -05:00
3c4bc600f7
Link to open() in perldoc
2021-10-27 19:31:03 -05:00
c419ca04bd
Warn when LPORT isn't 443
2021-10-27 19:31:03 -05:00
14421ed5f5
Refactor elapsed time calculation
2021-10-27 19:31:03 -05:00
7bbf0305c0
Fix elapsed time calculation using monotonic clock
...
Hat tip @adfoster-r7.
2021-10-27 19:31:03 -05:00
3f9b22dbb7
Add Sophos UTM CVE-2020-25223 exploit
2021-10-27 19:31:03 -05:00
ae56ffa934
Initial exploit for CVE-2021-38648
2021-10-27 12:05:56 -04:00
21c45b3733
Update module metadata
2021-10-27 11:58:53 -04:00
60b17b5c6f
Add the module docs for OMIGOD
2021-10-26 12:08:48 -04:00
33bacd2b20
Update references and add a check method
2021-10-26 10:35:13 -04:00
e9582d1ddb
Initial commit for CVE-2021-38647
2021-10-25 17:36:55 -04:00
64654a3134
Merge branch 'master' into suitecrm_log_file_rce
2021-10-22 22:11:51 -05:00
e90a2a9274
Added CVE
2021-10-22 18:55:37 -05:00
f270d3ef7a
Comment path traversals
2021-10-20 14:16:46 -05:00
83500a17d4
Update vmware_vcenter_analytics_file_upload
2021-10-14 16:58:04 -05:00
42ed1b6eef
Add Windows support to CVE-2021-26084 exploit
2021-10-14 16:58:04 -05:00
262b5e09f0
Add VMware vCenter Server CVE-2021-22005 exploit
2021-10-06 16:43:57 -05:00
28eab4d871
Add Meterpreter compatibility metadata
2021-10-06 13:54:51 +01:00
2c7aa022d4
Add PoC for CVE-2021-22555 Netfilter Priv Escalation
2021-10-04 16:48:23 +01:00
731b3d5ffe
OptRegExp default value as string representation
...
OptRegExp default should be string to utilize in a Regex.
This allows for the object to serialize in metadata and via
rpc bridge when transimiteed using msgpack.
2021-09-17 16:34:46 -05:00
12af64c4d8
Land #15604 , add buffer overflow G-Cam module
2021-09-16 13:02:57 -05:00
a2f83c22ba
Add Pattern Create
2021-09-16 08:22:57 +01:00
480dec9a1e
Land #15658 , Add module for CVE-2021-32682
2021-09-14 14:09:27 -04:00
278807be98
check contents of json after attempted upload
2021-09-14 11:36:28 -05:00
1499b1988e
Land #15609 , Add Meterpreter compatibility commands
2021-09-13 15:21:03 +01:00
46718e3390
Run Rubocop layout rules on modules
2021-09-10 12:53:39 +01:00
91ae50eb27
escapeshellcmd -> escapeshellarg
2021-09-09 17:28:05 -05:00
0095613a94
add completed module and documentation
2021-09-09 16:58:40 -05:00
059e39a6f0
Specify meterpreter compatibility command requirements
2021-09-08 22:59:25 +01:00
8c4e5d262c
Add Atlassian Confluence CVE-2021-26084 exploit
2021-09-08 06:57:31 -05:00
80dc8b9502
add elfinder module
2021-09-03 18:26:18 -05:00
41690d6e1d
Linting again
2021-09-02 17:33:57 +01:00
f336f7a4d6
Removed global vars & Fixed linting
2021-09-02 17:30:18 +01:00
0e0e3bbcfb
Land #15603 , Add Geutebruck CVE_2021_335XX command injection module
2021-09-01 10:59:22 -05:00
ded8200396
Land #15537 , Add support for ruby 3
2021-09-01 10:30:54 +01:00
ff50a94348
Land #15567 , Add in Exploit for CVE-2021-3490
...
Merge branch 'land-15567' into upstream-master
2021-08-31 18:46:25 -05:00
bwatters