319f15d938
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
3a2932b798
Migrate old uses of manual autocheck to use the new prepend autocheck
2021-02-02 10:15:46 +00:00
287ce98155
Don't be lazy anymore and pack lengths as shorts
2020-04-15 15:47:51 -05:00
3f8bff2b5a
Fix bad regex on length of "Metasploit" string
...
It won't match a char because it's a newline. While sticking "m" on the
end of the regex would work, there is zero reason we can't hardcode the
length, since the string is fixed.
irb(main):001:0> "\nhi" =~ /.hi/
=> nil
irb(main):002:0> "\nhi" =~ /.hi/m
=> 0
irb(main):003:0>
2020-04-15 15:47:50 -05:00
4bf2c5edf8
Rename exploit_class to constructor_class
2020-04-15 15:47:50 -05:00
79501472ae
Wrap jenkins_metaprogramming Base64 at 80 columns
...
I think I chose Rex::Text::DefaultWrap (60 columns) before to offer a
consistent wrap regardless of indentation. Kind of a dumb waste of
space.
2020-04-15 15:47:50 -05:00
80817204c9
Improve jenkins_metaprogramming here docs
...
Hat tip @adfoster-r7 for the indirect reminder!
2020-04-15 15:47:50 -05:00
7dc1315dac
Update logic for ForceExploit in my modules
...
This lets the user opt out of running check completely.
2020-02-19 01:06:50 -06:00
a0c6035380
Prefer initial slash in normalize_uri
...
I missed the indirect call in check. This decides on a style.
If a URI part contains a slash, we begin with a slash.
2019-05-30 00:08:17 -05:00
0b4cc5b547
Update go_go_gadget2
2019-05-22 15:03:44 -05:00
6d004862e4
Update go_go_gadget1
2019-05-22 15:03:44 -05:00
be89a4d9c5
Update exploit method
2019-05-22 15:03:05 -05:00
f70b3d13a0
Update metadata
2019-05-22 15:03:05 -05:00
4524707437
Fix rebase regressions in jenkins_metaprogramming
...
Ugh.
2019-03-21 11:20:21 -05:00
a1e6d4d19a
Update note about staging payloads over HTTPS
2019-03-16 13:36:58 -05:00
621fa8e4db
Fix issues and refactor module
2019-03-16 00:38:48 -05:00
0fa2d985e7
Add Jenkins ACL bypass and metaprogramming RCE
2019-03-16 00:32:36 -05:00
dwelch-r7