 Shelby Pace
|
9655c33a66
|
add bcoles' format_payload implementation
|
2019-12-03 12:24:33 -06:00 |
|
|
Shelby Pace
|
f3922d73d8
|
use encode, replace double quotes
|
2019-12-02 15:25:52 -06:00 |
|
|
Francesco Soncina
|
45bee2d500
|
Update splunk_upload_app_exec.rb
|
2019-11-26 15:38:34 +01:00 |
|
|
RAMELLA Sébastien
|
6e93df1224
|
fix. DisablePayloadHandler to false in target 0 and add unknown author.
|
2019-11-22 17:56:50 +04:00 |
|
|
Shelby Pace
|
e6e1156185
|
add reference, description, etc.
|
2019-11-21 14:15:25 -06:00 |
|
|
Shelby Pace
|
a4657da33a
|
code execution with Java 8
|
2019-11-20 15:29:33 -06:00 |
|
|
Shelby Pace
|
1ebef8bcb2
|
Land #12529, add CMSMS object inject exploit
|
2019-11-13 08:37:05 -06:00 |
|
|
Shelby Pace
|
f79a35d428
|
check response
|
2019-11-13 08:34:23 -06:00 |
|
|
scanu92
|
d9b0c1aa2f
|
add advanced options ForceExploit
|
2019-11-12 23:03:28 +01:00 |
|
|
scanu92
|
1489e03f0a
|
Update cmsms_object_injection_rce.rb
|
2019-11-12 23:02:16 +01:00 |
|
|
scanu92
|
78ea784e84
|
Update modules/exploits/multi/http/cmsms_object_injection_rce.rb
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2019-11-12 23:00:31 +01:00 |
|
|
h00die
|
9cf62d02f9
|
land #12492 coldfusion rds updates
|
2019-11-07 05:16:29 -05:00 |
|
|
Shelby Pace
|
a337567101
|
add check method
|
2019-11-06 12:40:45 -06:00 |
|
|
Shelby Pace
|
f898c73e49
|
add module skeleton
|
2019-11-05 11:27:35 -06:00 |
|
|
scanu92
|
1ae2f66c7c
|
Apply suggestions from code review
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-11-03 00:33:17 +01:00 |
|
|
scanu92
|
8a3f7a6b21
|
Apply suggestions from code review
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-11-03 00:32:55 +01:00 |
|
|
scanu92
|
1850cfd0c1
|
Apply suggestions from code review
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-11-03 00:32:32 +01:00 |
|
|
scanu92
|
632e423236
|
Update cmsms_object_injection_rce.rb
|
2019-11-02 21:31:08 +01:00 |
|
|
scanu92
|
33303746f8
|
Update cmsms_object_injection_rce.rb
|
2019-11-02 21:29:38 +01:00 |
|
|
scanu92
|
beffab0787
|
Update cmsms_object_injection_rce.rb
|
2019-11-01 15:26:02 +01:00 |
|
|
scanu92
|
7cc1175287
|
Update cmsms_object_injection_rce.rb
Add NormalRanking to cmsms_object_injection_rce module
|
2019-11-01 15:15:49 +01:00 |
|
|
sk4
|
af0761bcfd
|
Add CMS Made Simple object injection exploit module
|
2019-11-01 12:11:38 +01:00 |
|
|
William Vu
|
f5ce31519c
|
Fix style, once more with feeling
|
2019-10-31 09:59:35 -05:00 |
|
|
wvu-r7
|
dc62ea080b
|
Fix style
Co-Authored-By: bcoles <bcoles@gmail.com>
|
2019-10-31 09:54:18 -05:00 |
|
|
Shelby Pace
|
0b4a0b3148
|
Land #12476, add Nostromo dir traversal RCE
|
2019-10-31 08:24:41 -05:00 |
|
|
Shelby Pace
|
99fd254348
|
add reference
|
2019-10-31 08:23:57 -05:00 |
|
|
Quentin Kaiser
|
ca81793860
|
Forgot to put ForceExploit in registered options.
|
2019-10-31 10:25:26 +01:00 |
|
|
Quentin Kaiser
|
0531dd7bb9
|
Hash rocket alignment.
|
2019-10-29 12:28:39 +01:00 |
|
|
Quentin Kaiser
|
bc0c2bf721
|
check function rewrite.
|
2019-10-29 12:27:15 +01:00 |
|
|
Quentin Kaiser
|
436d6781c1
|
Fix description.
|
2019-10-29 12:25:01 +01:00 |
|
|
Quentin Kaiser
|
b357db22cf
|
Fix description.
|
2019-10-29 12:24:22 +01:00 |
|
|
Quentin Kaiser
|
8bbb33c483
|
Generic name.
|
2019-10-29 12:24:00 +01:00 |
|
|
Quentin Kaiser
|
b6dd30302a
|
Rewriting of command stager, based on exploits/unix/webapp/webmin_backdoor.
|
2019-10-29 12:23:19 +01:00 |
|
|
William Vu
|
ec0974222c
|
Fix module title again
|
2019-10-27 11:48:50 -05:00 |
|
|
William Vu
|
e010f48a3b
|
Move module to coldfusion_rds_auth_bypass
|
2019-10-27 11:25:56 -05:00 |
|
|
William Vu
|
2cc5f23915
|
Fix module title
|
2019-10-27 11:25:40 -05:00 |
|
|
William Vu
|
a0d1f02fd1
|
Fix failed login check for ColdFusion 9.something
It was merely "ColdFusion Administrator" for the version I tested.
|
2019-10-24 17:07:45 -05:00 |
|
|
William Vu
|
3565b0efb8
|
Land #12365, Total.js CMS widget creation RCE
|
2019-10-21 15:22:09 -05:00 |
|
|
Quentin Kaiser
|
d76ea0ca59
|
Initial module version for Nostromo RCE (CVE-2019-16278).
|
2019-10-21 18:11:44 +02:00 |
|
|
RAMELLA Sébastien
|
25f60b07ed
|
compliance for the framework
|
2019-10-18 15:51:58 +04:00 |
|
|
Wei Chen
|
0ebc971d29
|
Use CmdStager mixin
|
2019-10-15 14:00:58 -05:00 |
|
|
Wei Chen
|
bb7c42b2ce
|
Arch and disclosure date
|
2019-10-15 10:25:20 -05:00 |
|
|
Wei Chen
|
a3331dba9f
|
Move totaljs cms module and doc
|
2019-10-15 10:11:14 -05:00 |
|
|
Shelby Pace
|
ec9ea4ce0d
|
Land #12366, fix nil check in atutor module
|
2019-10-14 18:14:06 -05:00 |
|
|
h00die
|
4cc85ecb75
|
adress a spelling problem
|
2019-10-05 14:22:18 -04:00 |
|
|
h00die
|
ffc8c7e32a
|
more ruby style
|
2019-10-02 20:23:12 -04:00 |
|
|
h00die
|
c188d179ed
|
fix atutor bugs
|
2019-09-26 20:37:10 -04:00 |
|
|
RAMELLA Sébastien
|
28bbcd5402
|
fix. linux stager and add. documentation
|
2019-09-26 16:26:44 +04:00 |
|
|
RAMELLA Sébastien
|
dfd97a7518
|
add. stager and fix. generic command
|
2019-09-26 12:40:03 +04:00 |
|
|
Wei Chen
|
6a80bf2cf5
|
Should ensure, not in exception
|
2019-09-25 22:23:41 -05:00 |
|