a4af80d3e1
Land #15005 , add VMware vRealize SSRF RCE
2021-04-27 09:19:55 -05:00
a640443cab
Land #15014 , Added string PKey support for ssh module
...
Able to specify an individual private key as a string parameter into the module
2021-04-27 15:42:37 +10:00
bba6a230b7
add macOS gatekeeper bypass exploit
2021-04-26 22:59:14 +01:00
363db0e271
Land #14977 , add Apache Druid js rce
2021-04-26 12:01:19 -05:00
da01a839d1
Set required commands spec for all post mixins
2021-04-26 12:28:18 -04:00
77b0b3e183
add shell support for win checkvm
2021-04-24 18:06:37 +05:30
6b4e5a7e4d
Land PR #15088 , Fix a typo in Eclipse Equinox product name
2021-04-23 17:07:37 -05:00
16401b0c30
Land #14953 , fix python3.6 string formatting in rdp_web_login
2021-04-23 21:01:53 +01:00
d742ee00af
use python string.format
2021-04-23 20:59:51 +01:00
6cc800e0fc
Updated logging and documentation
2021-04-23 10:26:46 -05:00
07d82cde93
fix timeout errors in rubocop
2021-04-23 22:10:38 +07:00
c1c402f069
Update modules/auxiliary/scanner/ssh/ssh_login_pubkey.rb
...
Co-authored-by: Ashley Donaldson <smashery@gmail.com >
2021-04-23 10:07:32 -05:00
02ce5a1724
Update modules/exploits/linux/http/microfocus_obr_cmd_injection.rb
...
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com >
2021-04-23 22:01:05 +07:00
58e00b582e
Update modules/exploits/linux/http/microfocus_obr_cmd_injection.rb
...
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com >
2021-04-23 22:00:55 +07:00
651a34af53
add sploit for MF OBR cmd injection
2021-04-23 21:04:36 +07:00
95e59f514c
Land #15021 , add KOFFEE exploit for CVE-2020-8539
2021-04-23 09:25:16 -04:00
50873d3d88
Fix some typos and markdown formatting
2021-04-23 09:24:38 -04:00
83329cc8de
clarify it's only for winblows
2021-04-23 19:24:49 +07:00
02656a2c31
add clarification - it's for linux only
2021-04-23 19:23:18 +07:00
dcf457f7e9
Fix a typo in Eclipse Equinox product name
...
The osgi_console_exec module docs had a few stray characters for the
product name and description. The product name confused me when
googling for this module.
2021-04-23 11:57:48 +01:00
62ba64375c
fix typos and add default rport
2021-04-23 17:38:06 +07:00
092c22ab4e
fix typo in URL
2021-04-23 16:47:46 +07:00
8b3687b9e6
update privesc sploit
2021-04-23 16:38:25 +07:00
9a779fef79
add ZDI id
2021-04-23 15:15:09 +07:00
30c333b30d
fix typo in shrboadmin
2021-04-23 15:03:34 +07:00
71f5955b42
add OBR SSH module
2021-04-23 15:00:06 +07:00
9bfcbc8a2e
Added string PKey support for ssh module
...
* Implemented command shell session reporting
* Updated ssh login pubkey module documentation
2021-04-22 14:49:45 -05:00
68ad21c6a6
Adds error handling for NoMethodError
2021-04-22 12:48:39 +01:00
12cb8b3f02
Removed not needed require
2021-04-22 04:49:22 -04:00
3c64475da9
Adding new actions on the module and updated documentation
2021-04-22 04:34:22 -04:00
8186a75235
Add meterpreter command compatibility to modules
2021-04-21 18:22:15 -04:00
a62d1dfbcd
Add some details back in
2021-04-21 16:02:21 -05:00
7dc1c19814
Land #15078 , Update reverse_http.rb to fix a typo.
2021-04-21 15:25:30 -05:00
397530c554
Add meterpreter command compat to module info
2021-04-21 14:24:01 -04:00
5111caf536
Address @gwillcox-r7 review
...
New words from @gwillcox-r7.
2021-04-21 13:10:21 -05:00
faae3ff40e
Update reverse_http.rb
...
Fixing a typo
2021-04-21 19:47:18 +03:00
b6ed3f2752
Update reverse_https.rb
...
Fixing a typo
2021-04-21 19:46:44 +03:00
22433d5b2c
Add clarifying comment
2021-04-21 10:42:10 -05:00
08907a5e3a
Add VMware vRealize Operations Manager SSRF RCE
...
CVE-2021-21975 + CVE-2021-21983
2021-04-21 10:42:10 -05:00
634e88339d
Land #15072 , Remove is_root? check from linux_hashdump module and replace it with a check to see if the /etc/shadow file is readable by the current user.
2021-04-21 08:55:18 -05:00
93c7727622
Land #15058 , Cockpit CMS RCE
2021-04-21 13:21:55 +01:00
f6cb88b642
remove is_root check from linux_hashdump
2021-04-21 10:19:30 +05:30
7b7e521d6c
Fix up a wrong type field value and set it back to 1 from 2 in the send_exploit() function, since this was causing the exploit to fail
2021-04-20 17:45:51 -05:00
00db3767b1
Fix a bug when restoring corrupted memory
2021-04-20 18:18:42 -04:00
e0f13e44d1
Land #14699 , Add Nagios XI snmptrap RCE and docs (CVE-2020-5792)
2021-04-20 14:30:45 -05:00
e39b065e06
vprint to print
2021-04-20 15:26:47 -04:00
f241a050b8
Apply review comments and fixes to documentation and the module
2021-04-20 12:38:34 -05:00
deaa241ca5
Land #15065 , fix post/linux/gather/checkvm
2021-04-20 17:02:45 +01:00
a4cfc3684e
remove ls_pci_data initialization
2021-04-20 21:26:21 +05:30
32bfa887da
rubocop fixes
2021-04-20 21:23:24 +05:30
Shelby Pace