fbf95ecd92
Add and use a Thrift client object
2023-09-11 14:37:38 -04:00
f1aea836f3
Land #18273 , Add VMware vRealize Log Insight RCE
...
Add VMware vRealize Log Insight unauthenticated RCE exploit
2023-09-08 17:17:23 -04:00
21dde19511
Make some final tweaks
...
Change strings to reference `VMware` using the proper case. Don't
include CmdStager (because it's unnecessary). Set PrependFork to fix
shell payloads. Move CamelCase options to advanced.
2023-09-08 16:55:42 -04:00
57f3b8a352
Land #18350 , Add opentsdb_key_cmd_injection exploit module and docs
2023-09-08 16:50:46 +01:00
7302394ffa
Land #18316 , Kibana Timelion Prototype Pollution RCE (CVE-2019-7609)
2023-09-08 11:50:47 +01:00
5b6ee0cfaf
Add extra sleep during PakUpgrade for stabilization
2023-09-07 19:49:57 +02:00
9a5dd4e4e5
Refactor thrift usage, add extra SRVHOST check, switch to decoded mf_file
2023-09-07 19:29:23 +02:00
7cabe14461
add opentsdb_key_cmd_injection exploit module
2023-09-07 17:29:16 +03:00
cf62d3fa78
rubocop
2023-09-06 15:47:54 -04:00
31d5f8e128
Responded to comments
2023-09-06 15:40:43 -04:00
482fdefb2c
Land #18313 , SolarView Compact unauth RCE module
...
This PR adds a SolarView Compact unauth RCE module.
2023-09-05 17:49:28 -04:00
03ccb3cce0
Apply grammatical suggestions from code review
2023-09-05 17:06:01 -04:00
c6a2652861
review comments
2023-09-01 20:34:35 -04:00
5c12a3e6f4
Remove unused default options
2023-08-31 02:47:40 -04:00
3a7ef46d17
Remove platform linux
2023-08-31 02:32:21 -04:00
7b8debd58f
Tidy up, last minute rubocop
2023-08-31 02:17:35 -04:00
9779b1eeae
Lexmark Device Embedded Web Server RCE (CVE-2023-26068)
2023-08-30 20:30:14 -04:00
68090d0406
Update modules/exploits/linux/http/ivanti_sentry_misc_log_service.rb
...
Co-authored-by: wvu <4551878+wvu@users.noreply.github.com >
2023-08-30 11:46:44 -04:00
8217745a85
Land #18257 , Apache nifi h2 rce (CVE-2023-34468)
2023-08-30 13:37:37 +02:00
a3a7454f74
Ivanti Sentry MICSLogService Auth Bypass resulting in RCE (CVE-2023-38035)
2023-08-29 15:24:04 -04:00
b326832bcf
Renamed module, rubocop
2023-08-29 13:21:13 -04:00
44dd8439df
Add low version guard and token check
2023-08-29 17:43:21 +02:00
db9bf5f6cd
now down to 10 shells!
2023-08-28 17:42:35 -04:00
f467e0747a
review comments
2023-08-28 17:39:02 -04:00
77a1bbef79
Second release module and documentation
2023-08-28 07:49:40 +00:00
eaeb2024d3
Merge branch 'master' into vmware_vrli_rce
...
Merge for ThriftMessageType
2023-08-26 22:42:25 +02:00
b529814563
fix sideeffects/reliability
2023-08-24 16:28:05 -04:00
5382eb22d1
kibana exploit
2023-08-24 16:08:08 -04:00
a037d16b66
Land #18233 , Chamilo unauthenticed RCE [CVE-2023-34960]
2023-08-24 11:49:40 +02:00
3612030cee
first release of module
2023-08-23 22:07:58 +00:00
f64b67968f
Final minor updates
2023-08-23 11:38:07 +00:00
1db284dcaa
Apply suggestions from code review
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2023-08-22 18:46:25 +02:00
1bd14dd8f4
error handling for apache modules
2023-08-21 18:12:26 -04:00
a45792877a
lib and spec updates
2023-08-20 19:37:22 -04:00
b6cf981378
Updates based on review comments
2023-08-19 08:18:50 +00:00
e0f545673c
Add files for cleanup, fix serve address, add retry_until_truthy
2023-08-18 23:25:49 +02:00
e97183e7bd
Update modules/exploits/linux/http/vmware_vrli_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-18 20:21:42 +00:00
20ca3b8720
Update modules/exploits/linux/http/vmware_vrli_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-18 20:17:37 +00:00
d8d5049d97
Update modules/exploits/linux/http/vmware_vrli_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-18 20:16:32 +00:00
4fe15ee788
Update modules/exploits/linux/http/vmware_vrli_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-18 20:16:21 +00:00
1a97b11f09
Update modules/exploits/linux/http/vmware_vrli_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-18 20:16:12 +00:00
86c8f11e17
Update modules/exploits/linux/http/vmware_vrli_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-18 20:16:03 +00:00
900e418796
Land #18226 , H2 Web Interface RCE
...
This PR adds a module to exploit an RCE feature in
the H2 databases Web Interface.
2023-08-15 16:23:09 -04:00
f125ad8870
review comments
2023-08-08 17:44:35 -04:00
7b024f21bd
apache nifi h2 rce
2023-08-08 17:44:35 -04:00
5cdac38ac0
apache nifi h2 rce
2023-08-08 17:44:35 -04:00
e8ce0454cd
review comments
2023-08-08 17:16:57 -04:00
dca125963c
metabase review comments
2023-08-08 17:16:57 -04:00
f30c996340
remove comment
2023-08-08 17:16:56 -04:00
9516592eb6
metabase setup token rce
2023-08-08 17:16:56 -04:00
Spencer McIntyre