7985eafda0
Add Baldr Botnet Panel RCE Module
2020-07-24 07:45:43 +03:00
5ec31d2e41
Update recent modules to use prepend
2020-07-01 14:43:15 -05:00
b841246536
Update autocheck to use prepend instead of include, add ForceExploit functionality
2020-06-30 11:40:46 +01:00
2b1af9acaa
Land #13610 , add atutor auth dir trav / rce
2020-06-29 11:58:34 -05:00
ad48170a18
replace forceexploit with autocheck
2020-06-29 11:54:01 -05:00
f2c79ca1ef
add changes for linux
2020-06-29 10:43:26 -05:00
2f6847c321
move login to its own method
2020-06-26 14:50:34 -05:00
d0509fecf4
Improve the method of setting the cmdstager flavor
2020-06-24 06:50:00 -04:00
18926e874c
Fix file_traversal_path check
2020-06-23 15:26:14 -04:00
d1792bdf51
Add extra suggestion from code review
2020-06-18 16:48:46 -04:00
57f40053da
Improve autoselect (incorporate suggestions from code review)
2020-06-18 16:39:11 -04:00
738dd4b5ce
Land #12277 , add Agent Tesla panel rce module
2020-06-18 15:06:15 -05:00
1d6e7313ce
remove ForceExploit option
2020-06-18 15:05:02 -05:00
199d7db222
Fix up items mentioned by @space-r7 during her review
2020-06-18 09:56:20 -05:00
275ed6429e
Fix up rubocop errors in the module
2020-06-17 15:11:55 -05:00
eebacb8fbb
Make adjustments so that this module only supports Windows so that we can land this for now. Linux support may be added in the future.
2020-06-17 14:56:40 -05:00
c29cf491ed
Add idea for trying to fix up not being able to write to disk, may need further improvements
2020-06-17 12:36:00 -05:00
25f32d68d5
Add in some RuboCop fixes
2020-06-17 11:15:10 -05:00
c7bcd9152c
Add in support to detect if the PHP payload was not uploaded successfully.
2020-06-17 11:13:24 -05:00
3787849a6b
Fix cleanup code for Windows, should now have good working Windows code
2020-06-16 14:49:09 -05:00
cc0ab19dea
Clear up release date and add more comments explaining purpose of some of the resource links
2020-06-16 12:17:13 -05:00
b6dfbe926c
Simplify the Description field of the exploit
2020-06-16 11:58:51 -05:00
876836bcce
update doc and fix module syntax.
2020-06-16 10:47:51 -05:00
fbffefbdb2
add. original module edb reference.
2020-06-16 10:47:50 -05:00
1ab77af898
fix. remove setup function initialization
2020-06-16 10:47:50 -05:00
624c69bebf
add. authenticated exploitation
2020-06-16 10:47:50 -05:00
1a9431d965
fix. json parser and add random number into sqli
2020-06-16 10:47:49 -05:00
c704dba44c
add. agent tesla panel rce exploit module
2020-06-16 10:47:49 -05:00
b5ad7a8511
Use session_created, update documentation
2020-06-15 13:37:59 -04:00
8bc35859ff
Remove comment left from testing
2020-06-15 13:22:06 -04:00
546dcdbeef
Add register_file_for_cleanup
2020-06-15 13:13:52 -04:00
e4351d37b8
Add ATutor 2.2.4 directory traversal / RCE module and docs
2020-06-12 16:02:00 -04:00
49eb1efd40
Base64 enc payload to bypass escaping quotes etc.
...
The second step (POST with payload) of this module wasn't working as-written as the server was escaping out quotes etc.
Added b64 decoding/encoding to injected code in step 1 and step 2 payload to bypass server-side escaping of quotes etc.
2020-06-12 13:44:00 +08:00
51fca24a38
Land #13545 , add drag / drop file upload rce
2020-06-04 10:35:03 -05:00
329ba1091f
add session_created, fix typo
2020-06-04 10:32:17 -05:00
0df1a2a502
more error handling
2020-06-04 06:45:29 -04:00
434a1f587f
rubocop
2020-06-03 10:44:48 -04:00
a2e385e565
more fixes
2020-06-03 10:42:25 -04:00
8f587e4c6f
A user reported that the CVE-2020-12720 modules were not properly handling cases where a table prefix was not used, this guard clauses was redundant in that the one inside the get_table_prefix method is already checking the result of the SQL injection performed.
2020-06-02 19:16:35 -05:00
ff067088fd
docs
2020-06-02 16:24:04 -04:00
41b512ecda
dnd multi file upload rce
2020-05-30 21:07:46 -04:00
7bf2a802b1
Check for existance of res in guard clauses through getindexablecontent exploit and aux module.
2020-05-28 20:00:19 -05:00
e5dcb2e23c
Switch to use res.get_json_document from JSON.parse and more cleanup.
2020-05-28 11:16:44 -05:00
b8e8606977
Added actions to module for dumpuser/dumpall option (and removed module option) plus misc syntax formatting.
2020-05-28 10:13:18 -05:00
7ef7af0d30
Ran msftidy across documentation and made recommended changes to clean up module for MSF pull request.
2020-05-26 17:31:02 -05:00
e7d7ddc213
Initial push of vbulletin_getIndexableContent auxillary and exploit modules + documentation.
2020-05-23 03:20:46 -05:00
2c61fd0aff
Update Apache Shiro RCE module docs
2020-04-28 14:24:17 -04:00
daf31a3178
Avoid server load balancing
2020-04-27 10:50:34 -05:00
64ecd1f95a
fixed
2020-04-27 10:50:09 -05:00
5732b0f038
fixed
2020-04-27 10:50:09 -05:00
Ege Balcı