491c36ccaa
Land #12827 , credit updates to Citrix exploit
2020-01-14 10:54:57 -06:00
eaeaae7607
Reformat credit
2020-01-14 10:46:04 -06:00
1cd75d9f40
document additional PoC authors
2020-01-14 10:22:26 -06:00
429329c45d
Land #12801 , add WePresent cmd injection module
2020-01-14 08:29:40 -06:00
009ec162de
Use string interpolation and removed rundant namespace and return statement
2020-01-14 07:52:30 -05:00
ea6263e6bb
Removed redundant return statement
2020-01-14 06:52:24 -05:00
ecb825ea71
Remove redundant parameters.
2020-01-14 06:40:40 -05:00
fa661e58ca
Unified the POST request into one function. Fixed hardcoding of SSL. Fixed Author formatting. Fixed connection failure check in check function
2020-01-14 06:22:00 -05:00
0308f76bbd
Switched to vars_post in send_request_cgi and removed unnecessary documentation
2020-01-14 05:42:06 -05:00
5c4189fdb4
Move unix/webapp/webmin_backdoor to linux/http
2020-01-14 00:50:04 -06:00
3a8b630262
Set a sane default HttpClientTimeout
...
Totally forgot I did this for Pulse Secure.
2020-01-13 22:26:26 -06:00
cd65efb259
Revert tuned timeout in favor of HttpClientTimeout
...
Bad habit!
2020-01-13 22:02:12 -06:00
c71a75950a
Make cmd/unix/generic timeout configurable
2020-01-13 21:35:10 -06:00
93c69b3a96
Bump send_request_cgi timeout to 3.5s for shells
2020-01-13 21:29:28 -06:00
a635676604
Update wording in module description
2020-01-13 21:04:07 -06:00
af4505f007
Clean up module
2020-01-13 20:48:18 -06:00
04084f84f7
Run rubocop -a
2020-01-13 20:25:07 -06:00
a45821b706
Rename module
2020-01-13 20:25:07 -06:00
1429a496da
Remove _telnet from filename
...
No need to keep it, it drops meterpreter as payload now.
2020-01-13 13:18:43 -03:00
eab0bd5755
Randomize "Callback" header URL
2020-01-13 11:39:23 -03:00
caa02c7d2e
Added exploit module for CVE-2019-3929
2020-01-09 08:03:52 -05:00
cf822bf1c4
Fixing syntax errors
2020-01-05 10:35:09 -06:00
e3a5f6bcb6
Addressing PR Comments
2020-01-05 10:12:51 -06:00
0d592a3fca
Replace send_request_cgi with send_request_raw
...
msftidy complains about not using vars_get... Which won't work in this case.
2019-12-31 13:36:09 -03:00
b6731a6d1c
Remove printf as flavor
...
There is no printf in this router.
2019-12-31 13:10:59 -03:00
bedb1132b7
Convert to staged exploit
...
Works with meterpreter now :D
2019-12-31 13:08:51 -03:00
5f2c29946c
Remove the prompt variable + some EOL spaces; modify rand()
...
As suggested by @bcoles
2019-12-31 11:19:59 -03:00
2eec026a28
D-Link DIR-859 Unauthenticated RCE (CVE-2019-17621)
...
Exploits a vulnerability in the /gena.cgi UPnP endpoint in D-Link DIR-859 (and potentially other) SOHO routers. CVE ID: 2019-17621.
Code based on modules/exploits/linux/http/dlink_dir300_exec_telnet.rb
2019-12-30 19:22:04 -03:00
8061cdf974
Land #12760 , improvements to linux/local/bpf_priv_esc module
2019-12-26 13:43:54 -06:00
a7b63557db
Notify operator that cleanup of crontab is required
2019-12-26 16:21:44 +00:00
d449a93b44
Add Msf::Post::File.attributes method
2019-12-25 07:34:44 +00:00
13cadbf3f1
Adding DLINK DWL-2600 Command Injection Module
...
This module takes advantage of a previously discovered command injection
vulnerability in DLINK DWL-2600 WiFi Access points. This vulnerability
is authenticated, and the module is responsible for retrieving a valid
authentication token.
2019-12-24 12:31:49 -06:00
ce991071e4
Land #12524 , update most python code with python 3 compatibility
2019-12-23 14:49:08 -06:00
4f8382fc98
Land #12744 , rds lpe updates and improvements
2019-12-22 10:21:03 -05:00
4e1e8d344f
rds reliability, stability notes
2019-12-22 10:20:00 -05:00
7a027216cc
Land #12701 linux priv esc on reptile_cmd rootkit
2019-12-21 15:50:07 -05:00
c0da9e2202
Rename exploit/linux/local/rds_priv_esc -> exploit/linux/local/rds_rds_page_copy_user_priv_esc
2019-12-18 20:05:19 +00:00
fde942bc37
Land #12517 , replace CheckScanner mixin with CheckModule, which works with anything
2019-12-16 17:40:10 -06:00
42a60034f2
Land #12725 , Bash profile persistence module
2019-12-16 09:19:08 +01:00
1ff925eac9
Land #12727 , netfilter_priv_esc_ipv4 improvements
2019-12-15 07:07:40 -05:00
dd41892123
Update netfilter_priv_esc_ipv4 exploit
2019-12-15 07:17:42 +00:00
c43330934b
New module: Bash Profile Persistence
2019-12-14 21:40:18 -05:00
d7f1c9a4a9
Land #12696 , Add AKA references to several modules
2019-12-12 15:28:21 +00:00
f31930748b
Remove RHOST from solarwinds_lem_exec
...
This doubles as a test.
2019-12-11 13:42:41 -06:00
5eb90d758f
Update modules/exploits/linux/ssh/solarwinds_lem_exec.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-12-11 13:44:37 -05:00
002b9e5b90
Fix typo and lacking RHOST
...
Kinda need a RHOST to use a RCE...
2019-12-11 12:17:53 -05:00
8cb58be4c0
style
2019-12-11 06:44:35 -05:00
1ebfe6c284
Add Reptile Rootkit reptile_cmd Privilege Escalation
2019-12-11 06:48:51 +00:00
3b2a54a599
add aka to some modules
2019-12-10 09:53:13 -05:00
42c8420f5a
Fix style
2019-12-09 20:09:52 -06:00
William Vu