f0eb7da43b
Update modules/exploits/multi/http/october_upload_bypass_exec.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-09-04 12:28:51 +05:30
7359e4bdd6
fixes suggested by @space-r7
...
fixed check before passing to the accessor, removed res which is not used.
2019-09-04 12:20:39 +05:30
6c6603bbd7
Update modules/exploits/multi/http/october_upload_bypass_exec.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-09-03 23:18:31 +05:30
aee17608cd
Update modules/exploits/multi/http/october_upload_bypass_exec.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-09-03 23:17:50 +05:30
6934af0b7d
Update modules/exploits/multi/http/october_upload_bypass_exec.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-09-03 23:15:33 +05:30
bade8bfc48
add live compiling
2019-09-03 17:31:04 +08:00
615661a03d
first build
...
first build of october_upload_bypass_exec
2019-09-03 12:04:38 +05:30
ea50149ba7
land #12212 linux LPE ktsuss exploit
2019-09-02 13:32:45 -04:00
4b9e748882
ktsuss misc fixes
2019-09-02 13:31:30 -04:00
5b89c221f0
land #11799 linux local priv esc for cached sudo privs
2019-09-02 11:12:21 -04:00
cd13a83eb2
add arch check
2019-08-31 20:54:18 +08:00
6f58981396
Land #12244 , cisco_ucs_scpuser exploit
2019-08-30 13:35:50 -05:00
83de041894
Land #12243 , cisco_ucs_rce exploit
2019-08-30 13:35:29 -05:00
042c181f67
Land #12058 , cisco_dcnm_upload_2019 exploit
2019-08-30 13:33:19 -05:00
e36308e5bb
Add FD ref
2019-08-31 00:18:46 +07:00
b0b72892be
Deprecate/delete cisco_rv130_rmi_rce by alias
2019-08-30 12:03:43 -05:00
49b3af3870
Merge remote-tracking branch 'upstream/master' into pr/12133
2019-08-30 12:01:48 -05:00
2ea5e90764
Land #12223 , module deprecation by alias
2019-08-30 11:36:50 -05:00
0c1f3f2d03
make some adjustments
2019-08-29 19:50:01 +07:00
40b0d02f39
make some adjustments
2019-08-29 19:49:37 +07:00
3dd9c38fd1
Update cisco_dcnm_upload_2019.rb
2019-08-29 12:42:01 +07:00
bbbf426ec7
make requested changes
2019-08-29 12:16:58 +07:00
bda1120cac
make requested changes
2019-08-29 11:14:40 +07:00
c88ce55013
Add github link
2019-08-28 11:08:35 +07:00
98efac5bfb
Add github link
2019-08-28 11:08:01 +07:00
7fd56f5fb3
Add Cisco UCS scpuser exploit
2019-08-28 11:00:08 +07:00
d6f47fd03a
s/Directory/Director
2019-08-28 10:58:41 +07:00
1aad95f7c4
Add exploit for Cisco UCS RCE
2019-08-28 10:55:49 +07:00
64695f1354
initial commit
2019-08-24 13:42:22 +08:00
ea3e2c1047
fix #11574 , add WSReset UAC Bypass
2019-08-24 13:35:40 +08:00
413cd7194d
Land #12064 , add Exim Local Privesc module
2019-08-23 12:23:53 -05:00
8aa00d97aa
Add new moved_from to moved module
2019-08-22 17:58:20 -05:00
901943c90f
Move Ubiquiti AirOS exploit from SSH to HTTP
2019-08-22 17:58:20 -05:00
67b427f277
Remove expired deprecated modules
2019-08-22 17:58:20 -05:00
d8e8a33b46
Rewrite Msf::Module::Deprecated w/ alerts, aliases
...
Less janky, and allows module moves without copying!
2019-08-22 17:58:20 -05:00
dff2aed1ac
Simplify request by combining POST parameters
...
There's no need to discriminate between versions. Send 'em all.
2019-08-21 17:50:48 -05:00
6b8c0bc589
Simplify targets with automatic targeting
2019-08-21 16:41:41 -05:00
3f4c0e972b
Refactor check and support 1.900-1.920 targets
2019-08-21 16:16:56 -05:00
227ea6de3a
Fix typo
2019-08-21 15:41:45 -05:00
55b5e6a616
Drop =~ habit
2019-08-21 11:55:03 -05:00
a6d7011efa
Adjust check
2019-08-21 11:42:49 -05:00
5de2b37110
Add diff3 output between 1.{890,930,920}
2019-08-21 11:17:12 -05:00
c6f8dedf45
Add more words and an additional reference
2019-08-21 02:26:17 -05:00
41d4dafdca
Add Webmin password_change.cgi backdoor exploit
2019-08-21 02:02:26 -05:00
bc6cff3d4f
Land #12207 , add LibreOffice/Logo file fmt exploit
2019-08-19 13:14:23 -05:00
8fd5c1e0c1
remove PrependMigrate option
2019-08-19 13:12:54 -05:00
ca82e6cd25
Add ktsuss suid Privilege Escalation module
2019-08-19 13:28:02 +00:00
b0a531982e
Adds default options
...
- Changes target to Automatic
- Set default options instead of default target for options
- Adds links for the two vulnerabilities exploited by this module
- Removes unnecessary double encoding+eval
2019-08-18 14:42:48 +02:00
409b3c9c4b
using python payload for platform independence
2019-08-16 15:36:42 -05:00
3838fc2164
Adds references to the next CVE
...
This new CVE explains this exploit (global events are used)
2019-08-16 12:59:23 +02:00
Touhid M Shaikh