094d6ee36b
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
374d724567
Lint
2023-12-11 15:36:10 +01:00
78c57c1c5c
Update modules/exploits/unix/http/splunk_xslt_authenticated_rce.rb
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2023-12-11 15:22:33 +01:00
cb0ee49f71
Update modules/exploits/unix/http/splunk_xslt_authenticated_rce.rb
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2023-12-11 15:22:09 +01:00
ab9576f83d
Add changes
2023-12-01 10:55:04 +01:00
47e7453930
Enhance Splunk RCE module description for clarity and detail
2023-11-28 17:59:16 +01:00
4967d3e95d
Remove spaces
2023-11-28 17:48:07 +01:00
f2f34f64c8
Add suggested changes
2023-11-28 17:45:13 +01:00
b2fa201a7d
Implement check
2023-11-28 16:45:44 +01:00
a1f31d909a
Add splunk_xslt_authenticated_rce
2023-11-28 15:51:39 +01:00
0146527e55
Add splunk_xslt_authenticated_rce
2023-11-28 15:40:05 +01:00
8717e66b14
Land #18280 , Add Maltrail Unauth RCE Module
...
This PR adds a module for an unauthenticated RCE vulnerability
in Maltrail, a malicious traffic detection system. This vuln
does not have a CVE associated with it.
2023-08-16 17:29:05 -04:00
cd3d053e6e
Update affected versions in the doc file
2023-08-16 16:52:48 -04:00
c3252027f2
Update modules/exploits/unix/http/maltrail_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-16 18:45:26 +00:00
20d25e46d0
Update modules/exploits/unix/http/maltrail_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-16 18:45:12 +00:00
2edf12d303
Syntax fix
2023-08-11 18:25:36 +02:00
0d7591c2fb
Update modules/exploits/unix/http/maltrail_rce.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2023-08-11 16:24:38 +00:00
63305a8db6
Update modules/exploits/unix/http/maltrail_rce.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2023-08-11 16:24:19 +00:00
4b7d98df07
Add Maltrail Unauthenticated RCE exploit
2023-08-10 23:02:20 +02:00
e74a68b3fb
Make rubocop happy
2023-08-10 10:10:02 +02:00
634713ee56
Fix check method and integrate CmdStager
2023-08-10 00:56:44 +02:00
85f8333b15
Update modules/exploits/unix/http/raspap_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-09 21:27:25 +00:00
54ccfc1b8c
Update modules/exploits/unix/http/raspap_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-09 21:26:49 +00:00
a8a7b4eaeb
Update modules/exploits/unix/http/raspap_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-09 21:24:38 +00:00
fade54dc4d
Update modules/exploits/unix/http/raspap_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-09 21:24:24 +00:00
2c8d6b97fe
Update modules/exploits/unix/http/raspap_rce.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-09 21:24:08 +00:00
169ce82ea7
Update modules/exploits/unix/http/raspap_rce.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2023-08-08 18:37:23 +00:00
7217eda1eb
Update modules/exploits/unix/http/raspap_rce.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2023-08-08 18:37:15 +00:00
95bb5a1e09
Update modules/exploits/unix/http/raspap_rce.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2023-08-08 18:37:08 +00:00
2abd826291
Update side effects and options
2023-08-08 00:44:19 +02:00
3b7653c08e
Update modules/exploits/unix/http/raspap_rce.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2023-08-07 22:30:51 +00:00
79e009a03f
Update modules/exploits/unix/http/raspap_rce.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2023-08-07 22:30:25 +00:00
6225df80e9
Update modules/exploits/unix/http/raspap_rce.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2023-08-07 22:23:15 +00:00
41f0c30855
Add RaspAP Unauthenticated Command Injection (CVE-2022-39986) Exploit
2023-08-04 21:22:07 +02:00
34f25fbb65
pfSense Config Data Remote Command Execution as root (CVE-2023-27253) Module
2023-07-12 13:27:02 -04:00
f9d5459a9c
Land #17872 , Ensure identify hashes helper is accessible to modules
2023-04-13 16:20:20 +01:00
8e2169ed47
Ensure identify hashes helper is accessible to modules
2023-04-12 13:28:56 +01:00
40e6917b7f
tests passing
2023-04-04 10:24:09 +01:00
d04c8e1bce
Update broken secunia references
2023-03-23 10:43:57 +00:00
5c4d730cd3
Add in missing EDB reference
2023-03-06 14:32:01 -06:00
2a28af208d
Land #16992 , Syncovery For Linux - Auth. RCE (CVE-2022-36534)
2022-12-14 13:43:00 +01:00
1f1b04e009
finalization
2022-12-14 08:38:20 +01:00
0ae824e169
Update modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-12-14 08:07:55 +01:00
e16e689308
Update modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-12-14 08:07:45 +01:00
d6ba30adcf
Update modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-12-14 08:07:35 +01:00
911431c63b
Update modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-12-14 08:07:24 +01:00
f158cfaadd
Update modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-12-13 16:05:56 +01:00
c8e301224b
Update modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-12-13 16:05:45 +01:00
53cde6d2ef
Update modules/exploits/unix/http/syncovery_linux_rce_2022_36534.rb
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2022-12-13 16:04:45 +01:00
c1d090334c
apply suggestions
2022-12-09 09:31:20 +01:00
adfoster-r7