67e402e1be
Added Notes
2024-01-22 19:12:21 -05:00
e9e5a44522
Updated with side effects
2024-01-22 18:03:28 -05:00
8e3fbcae26
notes added to storage path exploit.
2024-01-22 17:55:26 -05:00
e3e6afbaa3
Land #16753 , ms03_007_ntdll_webdav: Cleanup and add additional offsets
...
Merge branch 'land-16753' into upstream-master
2022-07-19 08:48:06 -05:00
2af8042bfa
Land #16761 , clean up ms01_023_printer
...
Adds additional offsets for various Windows 2000 targets.
Replaces raw socket TCP with HttpClient. This works fine in testing.
Fixes default payload, adds docs and notes.
2022-07-16 17:56:59 -04:00
adecb0d94b
Merge branch 'master' into ms02_065_msadc
2022-07-16 17:26:23 -04:00
77be219bc2
Land #16754 , add offsets to ms02_065
...
Adds additional offsets for various Windows 2000
Professional targets, adds docs, fixes default
payload and resolves rubocop violations.
2022-07-16 16:43:47 -04:00
59685f82f8
ms02_065_msadc: Cleanup and add additional offsets
2022-07-15 00:15:56 +10:00
ccef129807
Land #16727 , set tftphost option
2022-07-12 15:29:42 -05:00
83bc954e9d
ms01_023_printer: cleanup; use HttpClient; add additional targets
2022-07-09 01:36:10 +10:00
3f63f9fcd1
ms02_065_msadc: Cleanup and add additional offsets
2022-07-08 00:26:02 +10:00
7d111938d5
ms03_007_ntdll_webdav: Cleanup and add additional offsets
2022-07-07 20:31:57 +10:00
04aa05faa2
ms01_026_dbldecode: Use HttpClient; remove meterpreter code; fix stager
2022-07-03 18:22:55 +10:00
bbbec267b6
exploits: Set tftphost option for modules which use Windows TFTP stager
2022-06-29 19:10:52 +10:00
28eab4d871
Add Meterpreter compatibility metadata
2021-10-06 13:54:51 +01:00
46718e3390
Run Rubocop layout rules on modules
2021-09-10 12:53:39 +01:00
6096d0f135
Remove superfluous default_cred? methods
2021-04-07 06:12:25 -05:00
b95be3ed10
Zeitwerk rex folder
2021-02-08 12:24:12 +00:00
30809787c4
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
bfe47302cf
Fix memory leak in ms01_026_dbldecode
2020-05-20 00:48:26 +01:00
54878d3f68
Remove preceding whitespace from module name
2020-03-12 01:12:00 +00:00
cf9b94a964
Set needs_cleanup flag for exploits that need it
...
The `needs_cleanup` flag needs to be set per-module when an exploit
needs an interactive session to clean up. Some `FileDropper` exploits
need additional cleanup to what the mixin provides, but since all
`FileDropper`s already mark themselves as needing cleanup those are not
covered here. A few of these could potentially be refactored to use the
original exploitation method to clean up or to compile the list of
files/commands to clean up ahead of time, but that is out of the scope
of this fix.
2019-08-02 10:23:53 -05:00
5523dce897
Fix disclosure date for WebDAV module
2019-05-22 09:05:56 -04:00
6126a627cc
Land #10570 , AKA Metadata Refactor
2018-09-17 22:29:20 -05:00
4c036e70c1
Fix http://seclists.org links to https://
...
I have no idea how this happened in my own code. I was seeing https://.
2018-09-15 18:54:45 -05:00
eb17d9b198
Refactor AKA references for modules
2018-08-31 16:56:05 -05:00
ad0291e552
Update false negatives
2018-08-20 18:08:19 -05:00
134417b598
Account for nil
2018-07-14 10:44:09 -05:00
a634e6347d
minor code cleanup
2018-07-08 06:09:38 +00:00
2f6da89674
Change author name to nick.
2017-11-09 03:00:24 +11:00
30f833f684
80 pages left
2017-09-13 22:03:34 -04:00
6300758c46
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
524373bb48
OCD - Removed un-needed full stop
2017-07-21 07:41:51 -07:00
b8d80d87f1
Remove last newline after class - Make @wvu-r7 happy
2017-07-19 11:19:49 +01:00
aa8c580aba
updates
2017-06-28 20:14:38 -04:00
461ab4501d
add 'Also known as', AKA 'AKA', to module references
2017-06-28 15:53:00 -04:00
b5caeb29dd
only support for 32bit so far
2017-05-22 12:30:52 +02:00
b76229b5f7
removed unessessary line
2017-05-18 19:15:49 -07:00
7ca0fe5a68
Added make_junk function
2017-05-18 19:06:09 -07:00
2f39daafc5
Updated module removing hardcoded binary payload strings
...
-Used only nessessary pointers needed for exploit to work removing junk/filler chars
-Repaced ROP chain with generic from msvcrt (even though original was beautiful and smaller, uses hardcoded pointers for leave instructions)
-Cannot use ropdb since 4 byte junk char during generation may result in InvalidByteSequenceError during UTF conversion
-It's been some years since my last pull request...so I might be a bit rusty to new Metasploit standards (please forgive me!)
2017-05-16 23:22:42 -07:00
2b4ace9960
convert to "screaming snake"
2017-05-09 09:30:45 +02:00
f70b402dd9
add comment
2017-05-09 00:17:00 +02:00
806963359f
fix fail with condition
2017-05-08 23:47:48 +02:00
f62ac6327d
add @rwhitcroft
2017-05-08 23:20:12 +02:00
26373798fa
change rank
2017-05-08 23:07:12 +02:00
962a31f879
change minimum length
2017-05-08 23:01:17 +02:00
7dccb17834
auto extract values and implement brute forcing
2017-05-08 22:47:29 +02:00
406a7f1ae2
Merge remote-tracking branch 'dmchell/dmchell-cve-2017-7269' into iis2
2017-05-08 21:51:51 +02:00
64452de06d
Fix msf/core and self.class msftidy warnings
...
Also fixed rex requires.
2017-05-03 15:44:51 -05:00
30c4a665f4
update iis exploit
2017-04-03 20:06:16 +02:00
aleksa