 Spencer McIntyre
|
0f9986c787
|
Land #18947, Fix inconsistent casing
Fix inconsistent casing in windows/local/wmi_persistence
|
2024-03-19 12:40:34 -04:00 |
|
|
cgranleese-r7
|
4e0e3da74c
|
Land #18835, clean up code duplication
|
2024-03-12 14:09:22 +00:00 |
|
|
Adrian Șendroiu
|
2007e6d8fb
|
Fix inconsistent casing in windows/local/wmi_persistence
|
2024-03-12 12:17:46 +02:00 |
|
|
Zach Goldman
|
7ce91df66e
|
clean up code duplication
|
2024-03-11 09:09:46 -05:00 |
|
|
Christophe De La Fuente
|
1e8e6d3bc4
|
Land #18796, Enhance ManageEngine Endpoint Central and ServiceDesk Plus CVE-2022-47966
|
2024-03-04 20:35:22 +01:00 |
|
|
sjanusz-r7
|
3c8f43e23e
|
Align SQL sessions peerhost and peerport
|
2024-03-04 13:11:32 +00:00 |
|
|
sjanusz-r7
|
b423241e6b
|
Use Rex Post MySQL Client for lib, specs & modules
|
2024-02-28 18:19:50 +00:00 |
|
|
errorxyz
|
97513d473f
|
Update manageengine_endpoint_central and servicedesk_plus default payloads
|
2024-02-23 00:00:18 +05:30 |
|
|
cgranleese-r7
|
d52220cccb
|
Fixes the create session datastore option from appearing for payloads
|
2024-02-22 14:58:41 +00:00 |
|
|
Gaurav Jain
|
b2cb102c9b
|
Merge branch 'rapid7:master' into manageengine
|
2024-02-22 17:20:28 +05:30 |
|
|
cgranleese-r7
|
de17261926
|
Removes session types from module with session type mixin
|
2024-02-19 10:34:16 +00:00 |
|
|
Dean Welch
|
fa5c4c0193
|
lowercase session types
|
2024-02-14 15:45:34 +00:00 |
|
|
Dean Welch
|
0d4e1ed755
|
Use mssql option session mixin with mssql modules
|
2024-02-14 15:37:11 +00:00 |
|
|
Dean Welch
|
587a8690a1
|
Use individual session mixins
|
2024-02-14 15:37:11 +00:00 |
|
|
Dean Welch
|
08872d0211
|
Add session type to info hash in the mixin
|
2024-02-14 15:37:11 +00:00 |
|
|
Dean Welch
|
0f319bdfb9
|
Extract SMB and PostgreSQL optional sessions into their own mixins
|
2024-02-14 15:37:11 +00:00 |
|
|
adfoster-r7
|
1794a5fbee
|
Land #18763, Mssql session modules
|
2024-02-14 10:54:04 +00:00 |
|
|
Zach Goldman
|
d18520adc6
|
update rhost and rport calls
|
2024-02-13 13:00:38 -06:00 |
|
|
Zach Goldman
|
c05c6773df
|
adjust session logic in modules
|
2024-02-13 11:59:09 -06:00 |
|
|
Spencer McIntyre
|
202db99004
|
Land #18801, Fix revision number checks
Fix revision number checks in cve_2022_26904_superprofile.rb
|
2024-02-12 15:52:16 -05:00 |
|
|
Spencer McIntyre
|
45365c8666
|
Land #18800, Fix revision number checks
Fix revision number checks for cve_2021_40449.rb
|
2024-02-12 15:19:56 -05:00 |
|
|
Spencer McIntyre
|
ce0498377d
|
Land #18798, fix version checks
windows/local/cve_2020_0787_bits_arbitrary_file_move (and similar) fails due to incorrect revision_number checks
|
2024-02-12 15:11:07 -05:00 |
|
|
Spencer McIntyre
|
8eb5aa6aa6
|
Land #18799, Fix revision number checks
Fix revision number checks for cve_2020_17136.rb
|
2024-02-12 15:01:45 -05:00 |
|
|
Zach Goldman
|
94223f05fc
|
update relevant modules to work with sessions
separate out optional session logic
fixing session handling
|
2024-02-09 13:18:49 -06:00 |
|
|
sjanusz-r7
|
30fc29e0f5
|
Use PostgreSQL session type for modules
|
2024-02-09 15:38:06 +00:00 |
|
|
Gaurav Jain
|
184ed3a162
|
Add suggested changes
|
2024-02-09 02:22:20 +05:30 |
|
|
Gaurav Jain
|
4dc21bae45
|
Merge branch 'rapid7:master' into manageengine
|
2024-02-08 15:11:15 +05:30 |
|
|
Gaurav Jain
|
25804edbf4
|
Add java targets for manageengine cve-2022-47966 modules
|
2024-02-08 01:55:52 +05:30 |
|
|
upsidedwn
|
4b5d04e59e
|
Fix revision number checks in cve_2022_26904_superprofile.rb
|
2024-02-07 11:30:42 +08:00 |
|
|
upsidedwn
|
ccb446f2ae
|
Fix revision number checks for cve_2021_40449.rb
|
2024-02-07 11:28:00 +08:00 |
|
|
upsidedwn
|
436efad4ca
|
Fix revision number checks
|
2024-02-07 11:25:41 +08:00 |
|
|
upsidedwn
|
47d30696bc
|
Fix revision_number checks
|
2024-02-07 11:20:12 +08:00 |
|
|
cgranleese-r7
|
e80f0ef8cd
|
Removes session logic from mixins and uses client instead of datastore for rhost and rport
|
2024-02-06 14:11:16 +00:00 |
|
|
cgranleese-r7
|
577304cf7c
|
Updates more modules
|
2024-02-02 14:59:56 +00:00 |
|
|
adfoster-r7
|
7ac4387d35
|
Land #18696, Convert MSSQL mixin to class
|
2024-02-02 14:14:34 +00:00 |
|
|
Zach Goldman
|
35778e92b2
|
client consolidation
convert first module from remote to client
move client to rex
remove metasploit mixin
|
2024-02-01 17:23:55 -06:00 |
|
|
Dean Welch
|
1abaef4945
|
Move new session information alerts behind a feature flag
|
2024-01-30 16:38:00 +00:00 |
|
|
Dean Welch
|
9a2ec90c16
|
Add alert to show user the new session options available in Metasploit 6.4
|
2024-01-29 17:06:21 +00:00 |
|
|
adfoster-r7
|
8c5628826f
|
Land #18735, update iis_webdav_scstoragepathfromurl module metadata
|
2024-01-23 15:56:01 +00:00 |
|
|
aleksa
|
67e402e1be
|
Added Notes
|
2024-01-22 19:12:21 -05:00 |
|
|
adfoster-r7
|
094d6ee36b
|
Add additional reliability and stability notes to modules
|
2024-01-22 23:29:57 +00:00 |
|
|
aleksa
|
e9e5a44522
|
Updated with side effects
|
2024-01-22 18:03:28 -05:00 |
|
|
aleksa
|
8e3fbcae26
|
notes added to storage path exploit.
|
2024-01-22 17:55:26 -05:00 |
|
|
bwatters
|
46a0052286
|
Land #18568, added exploit for CVE-2023-32781 - PRTG authenticated RCE
Merge branch 'land-18568' into upstream-master
|
2024-01-22 11:35:38 -06:00 |
|
|
Kevin Joensen
|
dfa54d02b9
|
Update modules/exploits/windows/http/prtg_authenticated_rce_cve_2023_32781.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2024-01-22 10:10:14 +01:00 |
|
|
adfoster-r7
|
0075212fa9
|
Land #18596, Update smb modules to work with smb sessions
|
2024-01-15 12:07:07 +00:00 |
|
|
bwatters
|
f341f72c72
|
add AKA
|
2024-01-04 11:11:23 -06:00 |
|
|
Spencer McIntyre
|
97c3ccc8af
|
Keep the service running when a session is opened
|
2023-12-29 14:03:27 -05:00 |
|
|
Spencer McIntyre
|
d67d39ace6
|
Add error checking to #setup
|
2023-12-29 14:03:23 -05:00 |
|
|
Kevin Joensen
|
3b8f684d08
|
Fixed check module function
|
2023-12-29 16:18:50 +01:00 |
|