f0e62de46a
Add CVE-2022-35405 docs and module
2022-08-02 11:57:56 -05:00
d86e666e18
Change Platform to 'win'
2022-08-01 15:37:58 -07:00
7df60f71b6
Remove SCHELEVATOR echo statement as its not needed anymore
2022-07-28 11:02:59 -05:00
d6d51eecb0
manually delete file
2022-07-27 08:50:00 -05:00
24ab27bdfe
add x86 arch and additional check for response
2022-07-25 11:16:26 -05:00
b4d2294255
Use vprint instead of print for some status messages, and clean up some comments
2022-07-22 10:01:27 -07:00
d63912a1b8
Use better thread synchronization methods
2022-07-22 09:59:04 -07:00
fe99eb0d0a
Whoops, better lint - needed -A instead of -a
2022-07-22 09:52:37 -07:00
e6282c3ff8
Remove win_cmd
2022-07-22 09:49:33 -07:00
f3731191a1
Add timeouts for the reverse connections using IO.select()
2022-07-22 09:45:53 -07:00
e0a5bfd7b3
remove opts used for debugging
2022-07-21 18:50:23 -05:00
e1b0e871b3
add finished module and docs
2022-07-21 18:33:56 -05:00
8c729e8414
Add Comm
2022-07-21 08:58:28 -07:00
a5cb271b21
add initial module work
2022-07-19 17:25:57 -05:00
e3e6afbaa3
Land #16753 , ms03_007_ntdll_webdav: Cleanup and add additional offsets
...
Merge branch 'land-16753' into upstream-master
2022-07-19 08:48:06 -05:00
2af8042bfa
Land #16761 , clean up ms01_023_printer
...
Adds additional offsets for various Windows 2000 targets.
Replaces raw socket TCP with HttpClient. This works fine in testing.
Fixes default payload, adds docs and notes.
2022-07-16 17:56:59 -04:00
adecb0d94b
Merge branch 'master' into ms02_065_msadc
2022-07-16 17:26:23 -04:00
77be219bc2
Land #16754 , add offsets to ms02_065
...
Adds additional offsets for various Windows 2000
Professional targets, adds docs, fixes default
payload and resolves rubocop violations.
2022-07-16 16:43:47 -04:00
304d717757
Make the path-traversal depth configurable
2022-07-15 15:41:27 -07:00
7468f6ecd8
Remove JAVA Arch
2022-07-15 15:35:14 -07:00
6f33ddd867
Remove a broken error check
2022-07-15 13:49:56 -07:00
5f3268eae7
Fix the Arch
2022-07-15 13:46:49 -07:00
5257de67f9
Style fixes
2022-07-15 13:43:46 -07:00
59685f82f8
ms02_065_msadc: Cleanup and add additional offsets
2022-07-15 00:15:56 +10:00
ccef129807
Land #16727 , set tftphost option
2022-07-12 15:29:42 -05:00
3e66fc8f4e
Fix crash in ms04-007-killbill
2022-07-10 00:07:26 +01:00
56dd61027f
Rubocop
2022-07-08 10:38:42 -07:00
8090fdb273
Re-order authors
2022-07-08 10:27:41 -07:00
67c60c9c5f
Specify the vulnerable version
2022-07-08 10:27:25 -07:00
bcd4b6e49f
Better name
2022-07-08 10:26:09 -07:00
9685bc4bc3
Use flat_map instead of map().flatten
2022-07-08 10:25:10 -07:00
134ce0d7bd
Make the FTP server more realistic, and remove Timeout
2022-07-08 10:21:58 -07:00
83bc954e9d
ms01_023_printer: cleanup; use HttpClient; add additional targets
2022-07-09 01:36:10 +10:00
728cf97f6e
Land #16718 , Fix run_as module on x64 systems
2022-07-08 09:22:22 -04:00
46b5092be4
Make Rubocop happy, and improve error handling
2022-07-07 16:07:10 -07:00
3a9feac1cf
Finish up the first draft of the module, which seems to work decently
2022-07-07 14:22:37 -07:00
966d469aa5
Continuing cleanup
2022-07-07 12:57:34 -07:00
f9664575c5
Working payload
2022-07-07 10:57:41 -07:00
d785e90bd9
Get the full exploit working, except for a hardcoded payload
2022-07-07 09:58:07 -07:00
3f63f9fcd1
ms02_065_msadc: Cleanup and add additional offsets
2022-07-08 00:26:02 +10:00
7d111938d5
ms03_007_ntdll_webdav: Cleanup and add additional offsets
2022-07-07 20:31:57 +10:00
fa8d109f65
Add the incomplete version of CVE-2022-28219 module to msf
2022-07-06 15:57:13 -07:00
04aa05faa2
ms01_026_dbldecode: Use HttpClient; remove meterpreter code; fix stager
2022-07-03 18:22:55 +10:00
ef9f5ca463
Add rtf support to cve-2022-30190 AKA Follina
2022-06-30 17:30:06 -05:00
0e3fdd0799
Fix from code review
2022-06-29 19:18:47 +02:00
bbbec267b6
exploits: Set tftphost option for modules which use Windows TFTP stager
2022-06-29 19:10:52 +10:00
a9d3e7c758
Fix run_as module on x64 systems
2022-06-27 13:21:58 +02:00
a075c676a6
Fix spacing issue
2022-06-10 08:47:41 -05:00
3f06e237b7
Correctly format the notes sections
2022-06-10 14:01:57 +01:00
c751ef46c9
Land #16635 , Add 0-day MSWord RCE #Follina CVE-2022-30190
...
Merge branch 'land-16635' into upstream-master
2022-06-06 14:41:31 -05:00
Grant Willcox