 Pedro Ribeiro
|
a17d78a327
|
Address review comments
Update documentation/modules/exploit/linux/http/ibm_drm_rce.md
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update documentation/modules/exploit/linux/http/ibm_drm_rce.md
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update documentation/modules/exploit/linux/http/ibm_drm_rce.md
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update ibm_drm_rce.md
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
make final changes!
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/ibm_drm_rce.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
final final final
|
2020-05-05 10:53:08 -05:00 |
|
|
Pedro Ribeiro
|
5651f4ae75
|
break into small chunks
|
2020-05-05 10:01:40 +07:00 |
|
|
bwatters-r7
|
686c2f09a1
|
Land #13290, Cve-2014-2630 HP xglance-bin linux priv esc
Merge branch 'land-13290' into upstream-master
|
2020-05-01 10:18:21 -05:00 |
|
|
Pedro Ribeiro
|
dcf9dc1189
|
add full disclosure URL
|
2020-05-01 21:02:32 +07:00 |
|
|
Pedro Ribeiro
|
dbceec91af
|
add full disclosure URL
|
2020-05-01 21:00:49 +07:00 |
|
|
Pedro Ribeiro
|
4b6ef4cb9e
|
fix spaces at eol
|
2020-05-01 13:30:22 +07:00 |
|
|
Pedro Ribeiro
|
9d09b3a250
|
add cve
|
2020-05-01 10:18:26 +07:00 |
|
|
Pedro Ribeiro
|
af88fae6f3
|
add CVE
|
2020-05-01 10:17:17 +07:00 |
|
|
bwatters-r7
|
417e3427b3
|
Change to cmd_exec for cleanup and warn about post-exploitation manual cleanup
|
2020-04-30 18:53:56 -05:00 |
|
|
Pedro Ribeiro
|
c581cb390f
|
remove CVE for merge, will add later
|
2020-04-30 11:16:09 +07:00 |
|
|
Pedro Ribeiro
|
d28a886c51
|
remove CVE for merge, will add later
|
2020-04-30 11:15:11 +07:00 |
|
|
Pedro Ribeiro
|
e79fa7ca94
|
Update ibm_drm_rce.rb
|
2020-04-28 14:12:38 +07:00 |
|
|
Pedro Ribeiro
|
714c750c04
|
apply rubocop changes
|
2020-04-24 10:23:13 +07:00 |
|
|
Pedro Ribeiro
|
a29b05c453
|
add proper check + rubocup changes
|
2020-04-24 10:20:10 +07:00 |
|
|
William Vu
|
823c29a127
|
Update post-RuboCop style in my recent modules
Mostly 80 columns (yeah, I know) and additional whitespace to complement
the lack of alignment.
|
2020-04-22 10:52:00 -05:00 |
|
|
Pedro Ribeiro
|
0bef1757d2
|
Create ibm_drm_a3user.rb
|
2020-04-22 12:17:34 +07:00 |
|
|
Pedro Ribeiro
|
8f5d6e4fa4
|
Create ibm_drm_rce.rb
|
2020-04-21 15:49:48 +07:00 |
|
|
William Vu
|
c5df5355ac
|
Update my module documentation to the new standard
Also update CheckModule to match current style and best practices.
|
2020-04-20 20:06:52 -05:00 |
|
|
h00die
|
2e88fc2f82
|
more reviews
|
2020-04-20 21:01:15 -04:00 |
|
|
h00die
|
40095a8d05
|
glance variable
|
2020-04-19 22:54:38 -04:00 |
|
|
h00die
|
e1f1ad45bc
|
working exploit
|
2020-04-19 15:19:19 -04:00 |
|
|
h00die
|
58074dc6bb
|
waiting on metasm question
|
2020-04-18 20:26:45 -04:00 |
|
|
Alan Foster
|
f2c3fc5f00
|
Rubocop recently landed modules
|
2020-04-17 11:55:04 +01:00 |
|
|
gwillcox-r7
|
d759fbaed3
|
Land #13259, Miscellaneous fixes for @wvu's modules and documentation
|
2020-04-16 22:10:10 -05:00 |
|
|
William Vu
|
966194d2b7
|
Remove tested admin password from default PASSWORD
|
2020-04-16 21:45:44 -05:00 |
|
|
bwatters-r7
|
b5df7e8147
|
Land #13102, Add UnRAID 6.8.0 Authentication bypass to RCE
Merge branch 'land-13102' into upstream-master
|
2020-04-16 17:18:55 -05:00 |
|
|
bwatters-r7
|
f0f403b48e
|
Automated Rubocop fixes
|
2020-04-16 17:17:02 -05:00 |
|
|
William Vu
|
cd9e5260f7
|
Note post-auth requirements in Nexus exploit
|
2020-04-15 20:25:05 -05:00 |
|
|
William Vu
|
4401e3654f
|
Merge remote-tracking branch 'upstream/master' into bug/misc
So we can grab the Nexus files from master.
|
2020-04-15 20:24:44 -05:00 |
|
|
William Vu
|
0684966dcb
|
Make better comments for the comment god
|
2020-04-15 18:24:28 -05:00 |
|
|
William Vu
|
b7501c1f0c
|
Add my standard print for CmdStager
And comment some methods used by it.
|
2020-04-15 18:06:48 -05:00 |
|
|
William Vu
|
6db312636d
|
Add Nexus Repository Manager Java EL Injection RCE
|
2020-04-15 15:49:33 -05:00 |
|
|
William Vu
|
66d5f51e51
|
Remove Nexus content from this branch
So the remaining changes can be PR'd separately.
|
2020-04-15 15:48:09 -05:00 |
|
|
William Vu
|
e8840563be
|
Comment comments
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
65d338d00e
|
Note tested version in module
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
5a91a1e54f
|
Remove res.code == 200 check again
It really isn't necessary when we're looking for just the header.
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
7dd3be507f
|
Add wget CmdStager
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
e248e2ed43
|
Consolidate CmdStager flavors to symbols
As per the API. Strings are fine, but they're supposed to be symbols.
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
99336f6bd3
|
Add ARTIFACTS_ON_DISK, since it uses CmdStager
Whoops, forgot this when I changed it from ARCH_CMD.
|
2020-04-15 15:47:51 -05:00 |
|
|
William Vu
|
d9aa80268d
|
Rearrange methods a bit
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
e6c42448b2
|
Add res.code check to match prior commit
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
df992bf94b
|
Note compromised user less specifically
This is just what was configured in the Docker container.
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
ae4af1a4f0
|
Format Java EL expression nicely
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
baae9db092
|
Fix some more things
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
6275b16b04
|
Fix some things
|
2020-04-15 15:47:50 -05:00 |
|
|
wvu-r7
|
1ce6c310ba
|
Escape double quotes in EL payload
|
2020-04-15 15:47:50 -05:00 |
|
|
wvu-r7
|
143d8463ec
|
Prefer include? for NXSESSIONID=
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2020-04-15 15:47:50 -05:00 |
|
|
William Vu
|
45263b8aa5
|
Add Nexus Repository Manager Java EL Injection RCE
|
2020-04-15 15:47:50 -05:00 |
|
|
bwatters-r7
|
77ddf2b761
|
Land #13208, Archer a7 c7 lan
Merge branch 'land-13208' into upstream-master
|
2020-04-15 11:15:02 -05:00 |
|
|
gwillcox-r7
|
0858178c09
|
Add cleanup support and update description
|
2020-04-14 13:27:25 -05:00 |
|