 Christophe De La Fuente
|
fb26c93291
|
Land #18541, Glibc Tunables Privilege Escalation CVE-2023-4911 (Looney Tunables)
|
2023-12-20 20:04:21 +01:00 |
|
|
Jack Heysel
|
77fb5d02b2
|
Fixed up indentation and rubocop complaints
|
2023-12-20 13:16:32 -05:00 |
|
|
jheysel-r7
|
342492557d
|
Apply suggestions from code review
|
2023-12-20 13:09:13 -05:00 |
|
|
jheysel-r7
|
6a16602a08
|
Apply suggestions from code review
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
|
2023-12-20 13:08:33 -05:00 |
|
|
Christophe De La Fuente
|
7ca256560d
|
Land #18542, Vinchin Backup & Recovery Command Injection
|
2023-12-20 18:56:50 +01:00 |
|
|
Balgogan
|
9c9af0dca1
|
Fix statement
|
2023-12-20 01:51:19 +01:00 |
|
|
h00die
|
1e374403ec
|
better check for vmon
|
2023-12-19 19:01:45 -05:00 |
|
|
Balgogan
|
22a05c8bf5
|
Add CVE-2023-50917
|
2023-12-20 00:43:00 +01:00 |
|
|
Spencer McIntyre
|
3ac9c0c38a
|
Patch in the theme version to the MSStyles file
|
2023-12-19 17:05:01 -05:00 |
|
|
Jack Heysel
|
d65ceb9abc
|
Rubocop
|
2023-12-19 13:54:23 -05:00 |
|
|
Jack Heysel
|
b86df4820c
|
Responded to comments from jvoisin
|
2023-12-19 13:50:09 -05:00 |
|
|
jheysel-r7
|
96241f509a
|
Apply suggestions from code review
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
|
2023-12-19 13:18:45 -05:00 |
|
|
Jack Heysel
|
065abf6b92
|
Rubocop, doc scenario update
|
2023-12-19 12:30:02 -05:00 |
|
|
Jack Heysel
|
44b4b3b5bc
|
Update version parsing
|
2023-12-19 12:16:17 -05:00 |
|
|
Jack Heysel
|
4e61596e7a
|
Check Build ID before running exploit
|
2023-12-19 12:15:35 -05:00 |
|
|
Jack Heysel
|
e858628292
|
Execute python payload in memory
|
2023-12-19 00:46:11 -05:00 |
|
|
Jack Heysel
|
549ee43df9
|
Update docs description minor comments
|
2023-12-19 00:32:21 -05:00 |
|
|
Jack Heysel
|
c6a6809700
|
Updated attribution
|
2023-12-18 19:41:49 -05:00 |
|
|
Jack Heysel
|
c895364675
|
Initial commit, files created
|
2023-12-18 19:26:14 -05:00 |
|
|
Christophe De La Fuente
|
45d2c7f4e0
|
Land #18566, CVE-2023-22518: Confluence Auth Bypass Restore From Backup RCE
|
2023-12-18 18:51:36 +01:00 |
|
|
h00die-gr3y
|
5d7cf90521
|
Some minor changes to the module and documentation
|
2023-12-18 08:23:16 +00:00 |
|
|
h00die
|
5e30328268
|
move options
|
2023-12-17 15:24:56 -05:00 |
|
|
h00die
|
6b376b9156
|
move options
|
2023-12-17 15:24:16 -05:00 |
|
|
h00die-gr3y
|
0641839e69
|
Added documentation and removed debug info
|
2023-12-17 13:10:18 +00:00 |
|
|
h00die-gr3y
|
db099f8f4c
|
Third release of module
|
2023-12-16 16:06:05 +00:00 |
|
|
h00die
|
02302439a0
|
saltstack salt minion deployer
|
2023-12-16 10:13:46 -05:00 |
|
|
h00die
|
c911ec1413
|
ansible collection
|
2023-12-16 07:16:26 -05:00 |
|
|
Jack Heysel
|
df111afb06
|
Glibc Tunables Exploit
|
2023-12-14 18:28:43 -05:00 |
|
|
Jack Heysel
|
c1459df10f
|
Check method improvement
|
2023-12-14 12:42:23 -05:00 |
|
|
jheysel-r7
|
a14b28e941
|
Update modules/exploits/multi/http/atlassian_confluence_unauth_backup.rb
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
|
2023-12-14 11:55:48 -05:00 |
|
|
h00die-gr3y
|
d00249f083
|
Second release with manual cleanup of php* files
|
2023-12-14 12:57:07 +00:00 |
|
|
ErikWynter
|
e946d78993
|
Add opennms_horizon_authenticated_rce exploit
|
2023-12-13 18:03:56 +02:00 |
|
|
Kevin Joensen
|
5de0e4e234
|
Update modules/exploits/windows/http/prtg_authenticated_rce_cve_2023_32781.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2023-12-13 14:30:00 +01:00 |
|
|
Kevin Joensen
|
52a23e3afb
|
Update modules/exploits/windows/http/prtg_authenticated_rce_cve_2023_32781.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2023-12-13 14:29:49 +01:00 |
|
|
bwatters
|
95eb4cc304
|
Pull in changes from Spencer's branch, but not the Gemfile changes.
|
2023-12-12 10:09:13 -06:00 |
|
|
bwatters
|
3534181067
|
rename file
|
2023-12-12 10:09:13 -06:00 |
|
|
bwatters
|
d3b0c538a1
|
Probably need to figure out how to get the requested filename....
|
2023-12-12 10:09:13 -06:00 |
|
|
bwatters
|
62d3cfa72d
|
Still not working, but closer
|
2023-12-12 10:09:13 -06:00 |
|
|
bwatters
|
ce55c1cd78
|
Fix silly file name disagreement
|
2023-12-12 10:09:13 -06:00 |
|
|
bwatters
|
486f42896f
|
Non-Working Draft Module
|
2023-12-12 10:09:13 -06:00 |
|
|
Dean Welch
|
cf24bca946
|
Add smb session support to smb_relay module
|
2023-12-12 11:59:07 +00:00 |
|
|
cgranleese-r7
|
5f396245f2
|
Land #18539, Add Smb session type
|
2023-12-12 11:45:19 +00:00 |
|
|
Jack Heysel
|
862194d63f
|
Documentation and rubocop changes
|
2023-12-11 19:01:35 -05:00 |
|
|
Jack Heysel
|
61414fab27
|
Refactored module to use mixin
|
2023-12-11 18:24:37 -05:00 |
|
|
bwatters
|
daa6d5363f
|
Land #18577, Added RCE Module for Splunk Enterprise (CVE-2023-46214)
Merge branch 'land-18577' into upstream-master
|
2023-12-11 15:52:05 -06:00 |
|
|
Balgogan
|
374d724567
|
Lint
|
2023-12-11 15:36:10 +01:00 |
|
|
Valentin Lobstein
|
78c57c1c5c
|
Update modules/exploits/unix/http/splunk_xslt_authenticated_rce.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2023-12-11 15:22:33 +01:00 |
|
|
Valentin Lobstein
|
cb0ee49f71
|
Update modules/exploits/unix/http/splunk_xslt_authenticated_rce.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2023-12-11 15:22:09 +01:00 |
|
|
h00die-gr3y
|
ff44932113
|
first draft release of module
|
2023-12-10 21:09:40 +00:00 |
|
|
Kevin Joensen
|
83dccfafaf
|
added retry_until_truthy and sensor deletion upon payload running
|
2023-12-07 15:16:42 +01:00 |
|