 eu
|
6a260f60e0
|
Initial commit
|
2023-09-07 13:53:42 +02:00 |
|
|
Ron Bowes
|
b12fe743d0
|
Resolve PR comments
|
2023-09-06 14:11:29 -07:00 |
|
|
Christophe De La Fuente
|
8217745a85
|
Land #18257, Apache nifi h2 rce (CVE-2023-34468)
|
2023-08-30 13:37:37 +02:00 |
|
|
h00die
|
f467e0747a
|
review comments
|
2023-08-28 17:39:02 -04:00 |
|
|
Christophe De La Fuente
|
bf1b5ffaa3
|
Land #18272, Bug fix for ColdFusion RCE module - CVE-2023-26360
|
2023-08-23 16:05:33 +02:00 |
|
|
Ron Bowes
|
4b130f5be7
|
Change a variable name
|
2023-08-22 09:00:31 -07:00 |
|
|
h00die
|
1bd14dd8f4
|
error handling for apache modules
|
2023-08-21 18:12:26 -04:00 |
|
|
Ron Bowes
|
1bbf8194ce
|
Remove more unnecessary arguments
|
2023-08-21 14:45:09 -07:00 |
|
|
Ron Bowes
|
79fa3dea8b
|
Fix a variable name
|
2023-08-21 14:32:06 -07:00 |
|
|
Ron Bowes
|
b1c1f705be
|
Remove some unneeded arguments
|
2023-08-21 14:30:25 -07:00 |
|
|
Ron Bowes
|
6dd89a513b
|
Make some changes from jvoisin's suggestions in the PR
|
2023-08-21 14:26:34 -07:00 |
|
|
Ron Bowes
|
f5908a5818
|
Add a comment
|
2023-08-21 08:53:52 -07:00 |
|
|
Ron Bowes
|
ce50cfa11a
|
Add module for SonicWall vulns, which includes cve-2023-34124
|
2023-08-21 08:53:07 -07:00 |
|
|
h00die
|
a45792877a
|
lib and spec updates
|
2023-08-20 19:37:22 -04:00 |
|
|
h00die
|
7b024f21bd
|
apache nifi h2 rce
|
2023-08-08 17:44:35 -04:00 |
|
|
h00die
|
5cdac38ac0
|
apache nifi h2 rce
|
2023-08-08 17:44:35 -04:00 |
|
|
sfewer-r7
|
85ab3113c2
|
bug fix for issue 18237. ColdFusion configured with a Development profile behaves slightly differently than ColdFusion deployed in a Production profile, so we need to test for some different return values during exploitation.
|
2023-08-08 14:47:14 +01:00 |
|
|
ismaildawoodjee
|
19dcc2d674
|
Move module and documentation from linux/http to multi/http
|
2023-08-02 10:10:27 -04:00 |
|
|
adfoster-r7
|
b979217227
|
Land #18239, Add version numbers to apache nifi rce module
|
2023-07-31 22:28:52 +01:00 |
|
|
h00die
|
5d9a65eeb0
|
version numbers for apache nifi rce
|
2023-07-31 16:14:57 -04:00 |
|
|
Christophe De La Fuente
|
56661f49ee
|
Add a comment explaining why the Windows target is disabled
|
2023-07-31 15:13:35 +02:00 |
|
|
Ege Balcı
|
c509b7b341
|
Comment out Windows target related lines
|
2023-07-28 17:06:21 +02:00 |
|
|
Ege Balcı
|
225a33995a
|
Merge branch 'rudder_server_sqli_rce' of github.com:egebalci/metasploit-framework into rudder_server_sqli_rce
|
2023-07-28 00:54:29 +02:00 |
|
|
Ege Balcı
|
6b11439fa1
|
Remove basic auth and API_USER/PASS options
|
2023-07-28 00:44:44 +02:00 |
|
|
Ege Balcı
|
5d00f882ad
|
Update modules/exploits/multi/http/rudder_server_sqli_rce.rb
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com>
|
2023-07-27 21:58:06 +00:00 |
|
|
Ege Balcı
|
ca9601bb58
|
Fixed check method and targets
|
2023-07-26 18:01:26 +02:00 |
|
|
Ege Balcı
|
5b5f666256
|
Make rubocop happy
|
2023-07-26 16:26:18 +02:00 |
|
|
Ege Balcı
|
006831938d
|
Adjust targets
|
2023-07-26 16:26:18 +02:00 |
|
|
Ege Balcı
|
f5e91f686c
|
Update modules/exploits/multi/http/rudder_server_sqli_rce.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2023-07-26 16:26:18 +02:00 |
|
|
Ege Balcı
|
d50fceca40
|
Update modules/exploits/multi/http/rudder_server_sqli_rce.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2023-07-26 16:26:17 +02:00 |
|
|
Ege Balcı
|
1b52c7c8ba
|
Update modules/exploits/multi/http/rudder_server_sqli_rce.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2023-07-26 16:26:17 +02:00 |
|
|
Ege Balcı
|
bc58254db8
|
Update modules/exploits/multi/http/rudder_server_sqli_rce.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2023-07-26 16:26:17 +02:00 |
|
|
Ege Balcı
|
d6328edc27
|
Make rubocop happy
|
2023-07-26 16:26:17 +02:00 |
|
|
Ege Balcı
|
47f48e8adb
|
Add rudder-server SQLI RCE (CVE-2023-30625) exploit
|
2023-07-26 16:26:17 +02:00 |
|
|
h00die-gr3y
|
43056ad621
|
removed powershell mixin
|
2023-07-25 14:06:45 +01:00 |
|
|
h00die-gr3y
|
c1d84e950c
|
Update based on bwatters-r7 comments
|
2023-07-25 14:06:44 +01:00 |
|
|
h00die-gr3y
|
45eacec846
|
Updated module with WordPress check
|
2023-07-25 14:06:44 +01:00 |
|
|
h00die-gr3y
|
cda6ab5960
|
init commit module
|
2023-07-25 14:06:29 +01:00 |
|
|
bwatters
|
297c484a1c
|
Land #18173, Add Openfire Authentication Bypass RCE [CVE-2023-32315]
Merge branch 'land-18173' into upstream-master
|
2023-07-18 18:13:20 -05:00 |
|
|
h00die-gr3y
|
7f35abff86
|
fixed the invalid character at the store_valid_credential function
|
2023-07-18 08:38:06 +00:00 |
|
|
h00die-gr3y
|
0ff2ca4f40
|
updates based on latest comments
|
2023-07-16 18:43:21 +00:00 |
|
|
H00die.Gr3y
|
f608424242
|
Apply suggestions from code review
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2023-07-15 12:02:22 +02:00 |
|
|
bwatters
|
b15d595de2
|
Adjust files to be better shared
|
2023-07-14 12:47:04 -05:00 |
|
|
h00die-gr3y
|
c34779a5f1
|
updates based on comments of jvoisin and adfoster-r7
|
2023-07-09 12:20:58 +00:00 |
|
|
h00die-gr3y
|
8edbf73b6f
|
first release exploit module
|
2023-07-08 09:48:17 +00:00 |
|
|
Jack Heysel
|
f1b5cd46f4
|
Apache RocketMQ update config RCE
|
2023-07-05 12:38:51 -04:00 |
|
|
Jack Heysel
|
bf1e6bddd1
|
Land #18134, Add exploit for CVE-2023-25194
This exploits a Java deserialization vulnerbility
in Apache Druid which arises from a JNDI injection
within Apache Kafka clients.
|
2023-06-23 16:52:04 -04:00 |
|
|
Heyder Andrade
|
b026b38851
|
Apply suggestions from code review
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2023-06-23 09:36:50 +02:00 |
|
|
Redwaysecurity.com
|
77bb6759a6
|
Review suggestions
|
2023-06-22 18:12:13 +02:00 |
|
|
dwelch-r7
|
e298788a28
|
Land #18049, Update jenkins login scanner to work with newer versions
|
2023-06-22 14:04:24 +01:00 |
|