 William Vu
|
ba58f41558
|
Sneak Spencer into credits
|
2021-03-19 16:52:15 -05:00 |
|
|
RAMELLA Sébastien
|
f5c807590c
|
a last round of review + rubocop
|
2021-03-20 01:23:43 +04:00 |
|
|
Spencer McIntyre
|
69a2eb4e43
|
Add a check method that relies on the version number
|
2021-03-19 16:48:33 -04:00 |
|
|
William Vu
|
a012eddd1f
|
Add Advantech iView CVE-2021-22652 exploit
|
2021-03-19 13:51:14 -05:00 |
|
|
RAMELLA Sébastien
|
a81a9617fa
|
add. aspnet_client as altenate write path
|
2021-03-19 22:01:41 +04:00 |
|
|
RAMELLA Sébastien
|
ac573d0957
|
all modules code review.
|
2021-03-19 17:35:55 +04:00 |
|
|
RAMELLA Sébastien
|
fa2fdc9b8a
|
add. X-vDirObjectId header
|
2021-03-19 12:35:29 +04:00 |
|
|
RAMELLA Sébastien
|
6e34a80693
|
fix. OAB + code review
|
2021-03-19 10:19:57 +04:00 |
|
|
bwatters
|
2c1869f9df
|
Land #14907, Add exploit for CVE-2021-1732
Merge branch 'land-14907' into upstream-master
|
2021-03-18 14:29:59 -05:00 |
|
|
RAMELLA Sébastien
|
c76e04e92b
|
adjust SID
|
2021-03-18 15:23:21 +04:00 |
|
|
Wes
|
42df4495a7
|
abb_wserver_exec - add CVE reference
add the cve for this
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5620
https://nvd.nist.gov/vuln/detail/CVE-2019-5620
cve was assigned years after public exploit code
|
2021-03-17 15:58:21 -04:00 |
|
|
RAMELLA Sébastien
|
7f80422272
|
replace module into a good dir
|
2021-03-17 23:45:13 +04:00 |
|
|
Wes
|
34674ce174
|
Update abb_wserver_exec.rb
update advisory link
#2708
|
2021-03-17 09:59:15 -04:00 |
|
|
Spencer McIntyre
|
0bff88c0c0
|
Update the module metadata and add module docs
|
2021-03-16 10:40:34 -04:00 |
|
|
RAMELLA Sébastien
|
72a4b58f4b
|
add. missing headers
|
2021-03-16 00:08:56 +04:00 |
|
|
bwatters
|
ae5d31cb39
|
Land # 14776, Add Window Server 2012 SrClient DLL Hijacking local exploit module
Merge branch 'land-14776' into upstream-master
|
2021-03-15 14:34:35 -05:00 |
|
|
Spencer McIntyre
|
2e3d98a36a
|
Move the DLL injection code into a reusable function
|
2021-03-15 11:47:02 -04:00 |
|
|
RAMELLA Sébastien
|
d2df432eff
|
fix. SID regex match
|
2021-03-15 19:38:53 +04:00 |
|
|
RAMELLA Sébastien
|
90dc3cdceb
|
add. autodiscover check, and remove useless SID condition
|
2021-03-15 16:09:24 +04:00 |
|
|
kalba-security
|
98c04eae6c
|
Remove TODO comment, update documentaton to include WAIT_FOR_TIWORKER option.
|
2021-03-15 07:51:12 -04:00 |
|
|
RAMELLA Sébastien
|
e5c76bfe13
|
pass. rubocop
|
2021-03-15 01:16:34 +04:00 |
|
|
RAMELLA Sébastien
|
59955f0a32
|
add. timeout and fix. CmdStagerFLavor
|
2021-03-15 01:10:56 +04:00 |
|
|
RAMELLA Sébastien
|
dcf2b69d6d
|
add. exploitation module doc and some changes
|
2021-03-14 22:49:41 +04:00 |
|
|
RAMELLA Sébastien
|
47f16e56d9
|
add. exploit (for freeze other pull request)
|
2021-03-13 03:49:45 +04:00 |
|
|
Spencer McIntyre
|
f0a9a1deb3
|
Add the initial exploit for CVE-2021-1732
|
2021-03-12 17:30:22 -05:00 |
|
|
Grant Willcox
|
8dce1acd64
|
Land #14794, dup_scout_enterprise_login_bof: Add v9.9.14 target and auto targeting
|
2021-03-12 12:07:57 -06:00 |
|
|
Spencer McIntyre
|
8d2e644f4f
|
Add a new Java Deserialization mixin and use it to set the shell
|
2021-03-11 12:09:29 -06:00 |
|
|
Shelby Pace
|
fbd6f19d04
|
Land #14846, add HPE SIM unauth AMF deser rce
|
2021-03-08 16:50:49 -06:00 |
|
|
Grant Willcox
|
514d46bd4d
|
Rubocop module again and also update the documentation to reflect recent changes
|
2021-03-08 16:08:36 -06:00 |
|
|
Grant Willcox
|
8479f01290
|
Improve the check logic to more accurately detect if a target is vulnerable or not
|
2021-03-08 15:59:26 -06:00 |
|
|
Grant Willcox
|
2e45962cc0
|
Change gsub! to gsub so that we don't end up with nil errors when a match isn't found
|
2021-03-08 15:11:58 -06:00 |
|
|
Berkan
|
f9ac1acabc
|
Target check code part has been improved.
|
2021-03-06 23:46:55 +03:00 |
|
|
kalba-security
|
ab632b93d1
|
Drop x86 target, add checks for Windows Update nil setting and for when TiWorker.exe is already running on the target
|
2021-03-06 10:47:59 -05:00 |
|
|
Grant Willcox
|
02e89947c7
|
Update check method to fix an incorrect check code, change from Appears to Detected
|
2021-03-05 11:16:24 -06:00 |
|
|
Grant Willcox
|
2b488800e6
|
Update the check method to eliminate potential false positives by searching for the presence of three strings that together should only be returned by HPE SIM web servers.
|
2021-03-05 11:14:30 -06:00 |
|
|
Spencer McIntyre
|
53f4d3f193
|
Land #14792, Apply fixes for invalid architecture checks to affected modules
Fixes #14599
|
2021-03-05 09:24:34 -05:00 |
|
|
Christophe De La Fuente
|
32899a61ea
|
Land #14847, Add Microsoft Windows RRAS Service MIBEntryGet Overflow
|
2021-03-05 11:01:58 +01:00 |
|
|
Grant Willcox
|
59d7288773
|
RuboCop module and fix small spelling mistake in documentation
|
2021-03-04 18:48:19 -06:00 |
|
|
Grant Willcox
|
f193caa48e
|
Also make sure that the default option is to use Windows Powershell since this supports Meterpreter and is generally a lot more reliable
|
2021-03-04 18:40:21 -06:00 |
|
|
Grant Willcox
|
d739bf7809
|
Fix up payload_template_adjustments function to use a simpler loop like structure as per space-r7
's recommendations
|
2021-03-04 18:34:45 -06:00 |
|
|
Grant Willcox
|
41794fe4e7
|
Remove redundant assignments of sysinfo["Architecture"] to unused "arch" variable
|
2021-03-04 15:54:38 -06:00 |
|
|
Grant Willcox
|
306e1979af
|
First round of code adjustments per review comments
|
2021-03-04 12:38:11 -06:00 |
|
|
Berkan
|
1917d9620a
|
Some exception code parts have fixed.
|
2021-03-04 20:47:52 +03:00 |
|
|
Grant Willcox
|
3ef8fcd996
|
Update module to fix an extra print statement and write documentation
|
2021-03-03 10:14:41 -06:00 |
|
|
Brendan Coles
|
3da8fce9cf
|
Add Microsoft Windows RRAS Service MIBEntryGet Overflow
|
2021-03-03 02:50:42 +00:00 |
|
|
Grant Willcox
|
f327d30e08
|
First attempt at CVE-2020-7200 module, with RuboCopped module
|
2021-03-02 16:38:19 -06:00 |
|
|
dwelch-r7
|
dc8fea2063
|
remove require 'faker' since we globally autoload it now
|
2021-03-02 13:59:32 +00:00 |
|
|
Berkan
|
45bfe40803
|
Refactored some code parts as mentioned.
|
2021-03-02 15:05:15 +03:00 |
|
|
Berkan
|
20f085fcaa
|
Update fortilogger_arbitrary_fileupload.rb
|
2021-03-01 21:00:05 +03:00 |
|
|
Berkan
|
bfecc5bf91
|
Update fortilogger_arbitrary_fileupload.rb
|
2021-03-01 20:53:27 +03:00 |
|