 Grant Willcox
|
fcdd47e8f5
|
Land #15064 - Fix Rex::Socket::SSHFactory NameError in exploit/linux/ssh/f5_bigip_known_privkey
|
2021-04-20 10:41:42 -05:00 |
|
|
William Vu
|
8d71cfc024
|
Fix SSHFactory NameError in f5_bigip_known_privkey
This could probably be refactored to use Msf::Exploit::Remote::SSH.
|
2021-04-19 17:07:26 -05:00 |
|
|
Grant Willcox
|
d60cdbebb3
|
Add in Regex fix to ensure that really old versions of NagiosXI will still be detected as vulnerable despite unusual version naming convention
|
2021-04-19 14:17:05 -05:00 |
|
|
Grant Willcox
|
4ac9304ca2
|
Land #14968 - Add Nagios XI Mibs.php Authenticated RCE module and docs (CVE-2020-5791)
|
2021-04-16 14:37:15 -05:00 |
|
|
Grant Willcox
|
496e074ec8
|
Add in fixes to documentation and module from review
|
2021-04-16 13:14:17 -05:00 |
|
|
William Vu
|
9e6f425427
|
Move exploit/linux/http/citrix_dir_traversal_rce
To exploit/freebsd/http/citrix_dir_traversal_rce. It's actually FreeBSD.
|
2021-04-15 19:13:25 -05:00 |
|
|
Grant Willcox
|
832ca92f42
|
Land #14700, Add Nagios XI Plugins Filename Authenticate RCE module and docs (CVE-2020-35578)
|
2021-04-14 16:58:55 -05:00 |
|
|
Grant Willcox
|
61395f3cb1
|
Update scenarios in documentation and also update the module to handle cases where the version number may not be in a format that Rex::Text can immediately handle.
|
2021-04-14 16:32:53 -05:00 |
|
|
Grant Willcox
|
76353efada
|
Fix minor RuboCop error
|
2021-04-14 15:38:06 -05:00 |
|
|
Grant Willcox
|
154e237edd
|
Add in fixes to documentation and module that were covered in the review process
|
2021-04-14 15:33:42 -05:00 |
|
|
Grant Willcox
|
a59e7e196d
|
Land #14701, Rename Nagios XI authenticated RCE module and integrate Nagios XI mixin
|
2021-04-13 18:58:29 -05:00 |
|
|
Grant Willcox
|
d766cf9b96
|
Change module title to be more descriptive and remove bad characters
|
2021-04-13 17:33:34 -05:00 |
|
|
Grant Willcox
|
0aada27128
|
Update the documentation to account for the fact that the plugin name has to be check_ping and also update the module to randomize some of the fields where possible.
|
2021-04-13 17:15:34 -05:00 |
|
|
Grant Willcox
|
ead9d73dc5
|
Add in fixes from review to documentation and module
|
2021-04-13 16:34:13 -05:00 |
|
|
William Vu
|
e842c3ecab
|
Fix Gem::Package NameError with Rex::Tar::Writer
|
2021-04-12 18:50:31 -05:00 |
|
|
Rob V
|
1ba22f9b0c
|
leveraging Udp mixin for version check
|
2021-04-09 15:21:38 -04:00 |
|
|
Rob V
|
3ecd97f8bc
|
using Rex::Version over more manual process
|
2021-04-09 14:39:32 -04:00 |
|
|
Rob V
|
ffcec1f3b4
|
adding comment header
|
2021-04-09 14:16:20 -04:00 |
|
|
Shelby Pace
|
a36030bcb7
|
add AutoCheck and usage of TARGETURI option
remove CheckCmd from docs
|
2021-04-09 12:08:25 -05:00 |
|
|
robvinson
|
85176f4385
|
style change using unless instead of if not
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2021-04-09 09:17:58 -05:00 |
|
|
robvinson
|
c913762077
|
move privileged from false to true
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2021-04-09 09:16:49 -05:00 |
|
|
je5442804
|
352fedcca0
|
Improved
|
2021-04-09 19:50:43 +08:00 |
|
|
je5442804
|
69b62cee3a
|
Update modules/exploits/linux/http/apache_druid_js_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2021-04-09 08:31:38 +08:00 |
|
|
je5442804
|
58f14a3219
|
Update module-send_request
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2021-04-09 08:31:25 +08:00 |
|
|
je5442804
|
afb263bcba
|
Update description
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2021-04-09 08:27:30 +08:00 |
|
|
Adam Cammack
|
6096d0f135
|
Remove superfluous default_cred? methods
|
2021-04-07 06:12:25 -05:00 |
|
|
Shelby Pace
|
cfc6b0a8ba
|
Land #14971, add Apache OFBiz SOAP Deser rce
|
2021-04-05 11:44:40 -05:00 |
|
|
Shelby Pace
|
a803e1e932
|
remove spare comma
|
2021-04-05 09:33:20 -05:00 |
|
|
je5442804
|
76f89dc4d4
|
Update apache_druid_js_rce.rb
|
2021-04-04 21:36:53 +08:00 |
|
|
je5442804
|
80f96f0045
|
Update modules/exploits/linux/http/apache_druid_js_rce.rb
Co-authored-by: wvu <wvu-r7@users.noreply.github.com>
|
2021-04-03 23:57:22 +08:00 |
|
|
kalba-security
|
34a5f7906c
|
Rebase so we can use the latest mixin code,update the version range, update docs
|
2021-04-01 13:29:44 -04:00 |
|
|
kalba-security
|
faab100d9a
|
Add Nagios XI Mibs.php Authenticated RCE module and docs
|
2021-04-01 13:06:33 -04:00 |
|
|
kalba-security
|
f76f58eb51
|
Rebase, use latest mixin code in check, update version and docs
|
2021-04-01 12:43:44 -04:00 |
|
|
kalba-security
|
dd5c747584
|
Add Nagios XI snmptrap RCE and docs
|
2021-04-01 12:26:06 -04:00 |
|
|
kalba-security
|
02b9e5c939
|
rebase, use latest mixin code, correct vulnerable versions, update docs
|
2021-04-01 12:18:46 -04:00 |
|
|
kalba-security
|
3b7e612541
|
Add Nagios XI Plugins Filename Authenticate RCE module and docs
|
2021-04-01 11:23:52 -04:00 |
|
|
kalba-security
|
2df90d8d23
|
Rebase, rename module to nagios_xi_plugins_check_plugin_authenticated_rce, update check to take advantage of mixin, minor improvements
|
2021-04-01 11:07:49 -04:00 |
|
|
Shelby Pace
|
2cbd1a6be9
|
Land #14935, add F5 iControl REST API SSRF RCE
|
2021-04-01 08:40:38 -05:00 |
|
|
kalba-security
|
a02f14f644
|
Add 'moved_from' alias
|
2021-04-01 09:26:24 -04:00 |
|
|
kalba-security
|
0e7c11ada3
|
Rename module and modify it to use the Nagios XI mixin, add autocheck, fix syntax and linting, also update docs
|
2021-04-01 09:26:16 -04:00 |
|
|
je5442804
|
2ac30a5c61
|
Update modules/exploits/linux/http/apache_druid_js_rce.rb
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com>
|
2021-04-01 07:07:24 +08:00 |
|
|
William Vu
|
cb3f1238f3
|
Add F5 iControl REST CVE-2021-22986 exploit
|
2021-03-31 14:02:32 -05:00 |
|
|
Christophe De La Fuente
|
9806026ab9
|
Update from code review
|
2021-03-31 17:48:35 +02:00 |
|
|
je5442804
|
b6b7956f0f
|
Add Apache Druid CVE-2021-25646 RCE
|
2021-03-31 21:11:23 +08:00 |
|
|
Spencer McIntyre
|
d73ec7a751
|
Remove the CmdStager allow list and randomize the domain
|
2021-03-31 08:54:37 -04:00 |
|
|
je5442804
|
21ec87d8bd
|
Add Apache Druid CVE-2021-25646 RCE
|
2021-03-31 20:43:28 +08:00 |
|
|
Spencer McIntyre
|
a0a4bc079a
|
Add the exploit module for CVE-2021-26295
|
2021-03-30 18:18:16 -04:00 |
|
|
Christophe De La Fuente
|
fca8bf37e2
|
Update description & add Stability trait
|
2021-03-29 11:14:35 +02:00 |
|
|
Christophe De La Fuente
|
00698d20bf
|
Add waiting status message and update doc
|
2021-03-26 14:59:27 +01:00 |
|
|
Christophe De La Fuente
|
b069fec866
|
Add module and doc for Saltstack Salt API wheel_async RCE
|
2021-03-26 13:54:06 +01:00 |
|