8f587e4c6f
A user reported that the CVE-2020-12720 modules were not properly handling cases where a table prefix was not used, this guard clauses was redundant in that the one inside the get_table_prefix method is already checking the result of the SQL injection performed.
2020-06-02 19:16:35 -05:00
ff067088fd
docs
2020-06-02 16:24:04 -04:00
b7dd7b3f7a
remove old version, rubocop
2020-06-02 14:24:18 -05:00
c7c23a72b1
Land #13512 , Add vbulletin_getindexablecontent exploit and auxillary modules
2020-06-01 18:03:08 -04:00
ffd79ff8cc
add exploit for most versions
2020-06-01 09:41:56 -05:00
63713de14c
fix self.class msftidy warning and minor syntax
2020-05-31 18:39:50 -07:00
5ef76ff232
Merge branch 'master' into upstream-master
2020-05-31 16:52:03 -07:00
41b512ecda
dnd multi file upload rce
2020-05-30 21:07:46 -04:00
dd5ed53217
fix missing module
...
CmdStager included
2020-05-30 06:09:49 +03:00
f7cdbc5faf
author name change
2020-05-30 05:49:22 +03:00
f8d9ab8d7a
add arch
2020-05-30 05:39:52 +03:00
558487c9de
modify failure
2020-05-30 04:34:00 +03:00
d5492014a7
fix res nil
2020-05-30 04:29:35 +03:00
e2050393bc
modify docs and exploit
2020-05-30 04:23:46 +03:00
f60e569c1b
Add Cisco CML and VIRL-PE advisory to Salt modules
...
Hat tip @brudis-r7!
2020-05-29 15:24:00 -05:00
4921814b85
Add new module linuxki_rce
2020-05-29 18:20:46 +03:00
7bf2a802b1
Check for existance of res in guard clauses through getindexablecontent exploit and aux module.
2020-05-28 20:00:19 -05:00
e5dcb2e23c
Switch to use res.get_json_document from JSON.parse and more cleanup.
2020-05-28 11:16:44 -05:00
f1c492fa2d
Land #13470 , Pi-Hole < 4.3.3 dhcp static address RCE
2020-05-28 16:57:22 +01:00
b8e8606977
Added actions to module for dumpuser/dumpall option (and removed module option) plus misc syntax formatting.
2020-05-28 10:13:18 -05:00
695f212d26
pihole default payload fix
2020-05-28 09:55:04 -04:00
513b430f19
no leading 0s on IPs
2020-05-28 08:56:08 -04:00
2e32c7981d
encode token in final stage
2020-05-28 08:22:41 -04:00
504cd0b4db
encode token in final stage
2020-05-28 08:22:04 -04:00
b5f41636b1
Land #13488 , Fix memory leak in ms01_026_dbldecode
2020-05-28 10:23:10 +01:00
7ef7af0d30
Ran msftidy across documentation and made recommended changes to clean up module for MSF pull request.
2020-05-26 17:31:02 -05:00
b33ebeb6f7
msftidy && rubocop -a
2020-05-26 16:21:09 -05:00
137a825d07
Incorporate suggestions from first review
2020-05-26 16:53:31 -04:00
393c44a48d
Add bolt_authenticated_rce linux/http exploit module and docs
2020-05-26 14:03:44 -04:00
e7d7ddc213
Initial push of vbulletin_getIndexableContent auxillary and exploit modules + documentation.
2020-05-23 03:20:46 -05:00
ad05cf7870
Update TinyIdentD 2.2 Stack Buffer Overflow module
2020-05-23 04:43:44 +00:00
d6aea635c7
Update authors in Netsweeper/myLittleAdmin modules
...
Edits for accuracy and precision.
2020-05-22 17:05:12 -05:00
cb06a4e731
Land #13455 , Pi-Hole < 3.3 whitelist RCE
...
Merge branch 'land-13455' into upstream-master
2020-05-22 15:35:16 -05:00
06f9099d7f
Add BASE_DN and ROOT_KEY to vmdir and Salt modules
2020-05-22 11:16:58 -05:00
b49dd37614
Land #13494 , Add Plesk/myLittleAdmin ViewState .NET deserialization pre-auth RCE
2020-05-22 11:53:41 -04:00
2d56931663
Land #13287 , CVE-2017-15889 Synology DSM < 5.2-5967-5 authenticated root exploit
...
Merge branch 'land-13487' into upstream-master
2020-05-22 10:07:50 -05:00
afe7ef5d9a
Bump WfsDelay for first exploit attempt
2020-05-22 09:32:22 -05:00
e471efa399
Whitelist :certutil and :vbs CmdStagers
...
These worked for @smcintyre-r7 on Windows Server 2019.
2020-05-22 09:24:16 -05:00
16886fa41e
Move generate_viewstate_payload to mixin
2020-05-21 18:37:13 -05:00
d1a07e9403
Use ViewState mixin in module
2020-05-21 18:37:13 -05:00
11030dff84
Add CVE references (they weren't there before)
2020-05-21 18:12:57 -05:00
889a4cd6e0
Add Plesk/myLittleAdmin ViewState deserialization
2020-05-21 18:12:57 -05:00
c1996d58ed
add forcexploit
2020-05-21 17:39:54 -04:00
ffb681cb79
Land #13485 , Update eyesofnetwork_autodiscovery_rce with SQLi auth bypass
2020-05-21 17:24:23 -04:00
ecd3c0f820
Minor doc changes, add module notes and SQLi progress output
2020-05-21 16:31:45 -04:00
d90b822356
fix #13486 , add support for python and cmd targets in osx/local/persistence
2020-05-21 20:12:48 +08:00
8473662e32
Land #13463 , Oracle WebLogic CVE-2020-2555 exploit
2020-05-20 23:21:07 -05:00
12d4ad68e3
Fix things in ThinkPHP and ManageEngine exploits
...
Current pattern is print_good instead of vprint_good for this particular
message directly or indirectly called by execute_command.
CmdStagerFlavor is checked at the top level, but it is also checked per
target. Moving this to where it's more appropriate.
2020-05-20 22:47:03 -05:00
7c2c227ea0
Improve version checks, remove comments from previous testing
2020-05-20 18:06:42 -04:00
655088bb0d
Fix punctuation typo in exchange_ecp_viewstate
2020-05-20 09:47:11 -05:00
Zenofex