Commit Graph

35981 Commits

Author SHA1 Message Date
erberkan 648489cfe5 fortilogger_arbitrary_fileupdate 2021-03-01 17:55:55 +03:00
Gabriel Garcia 1223bd0852 Slightly more idiomatic way 2021-02-28 00:53:49 -08:00
Gabriel Garcia 1135135ce1 Fixing linting 2021-02-28 00:51:52 -08:00
Gabriel Garcia 5c0293c56b Skipping empty files for path traversal enumeration 2021-02-28 00:41:06 -08:00
Grant Willcox 2124ec25ba Rename files and update the exploit module title to better reflect its purpose. Also fix a minor RuboCop related change
Fix up documentation to reflect recent file renaming changes.
2021-02-26 14:32:37 -06:00
RAMELLA Sébastien 801164a244 fix. separator for creds collector. 2021-02-26 14:32:29 -06:00
RAMELLA Sébastien eb5f418fe2 fix. some rubocop recommendations 2021-02-26 14:32:21 -06:00
RAMELLA Sébastien b84909fe67 change parsing method 2021-02-26 14:32:20 -06:00
RAMELLA Sébastien 82c8b55be9 fix. remove call to eval and some minor change 2021-02-26 14:32:19 -06:00
RAMELLA Sébastien 7eb91e76ab add. fortios path traversal (cve-2018-13379) 2021-02-26 14:32:13 -06:00
Grant Willcox 6d939c16ce Land #14783, Update KarjaSoft Sami FTP Server v2.0.2 USER Overflow module 2021-02-26 11:17:05 -06:00
Paul Werther c570c9f30e add documentation and linting (rubocop) 2021-02-26 16:16:23 +01:00
RAMELLA Sébastien 70b260cb40 fix. separator 2021-02-26 16:52:55 +04:00
RAMELLA Sébastien ee2abf40fb fix. separator for creds collector. 2021-02-26 11:37:24 +04:00
Brendan Coles 743248d993 Update KarjaSoft Sami FTP Server v2.0.2 USER Overflow module 2021-02-25 20:53:30 +00:00
Brendan Coles f89d67df19 dup_scout_enterprise_login_bof: Add v9.9.14 target and auto targeting 2021-02-25 17:14:25 +00:00
Brendan Coles 1f00ad011c dupscts_bof: Add additional targets and auto targeting 2021-02-25 17:12:27 +00:00
dwelch-r7 319f15d938 Handle nil versions for rubygems 4 2021-02-25 16:47:49 +00:00
Grant Willcox ff16c24d03 Land #14806, Rubocop recently landed modules continued 2021-02-25 10:36:50 -06:00
Alan Foster b06c5c12aa Rubocop recently landed modules continued 2021-02-25 14:13:40 +00:00
bwatters 7cdd41df76 Land #14544, RDP Web Login User Enumeration Auxiliary Module
Merge branch 'land-14544' into upstream-master
2021-02-24 16:10:41 -06:00
bwatters 18f6245637 Land #14648, Process Herpaderping evasion module
Merge branch 'land-14648' into upstream-master
2021-02-24 11:39:47 -06:00
bwatters 1acfa55dcd rubocop -a fixes 2021-02-24 11:38:06 -06:00
Spencer McIntyre 8c1721b845 Land #14766, Add Apache Flink JobManager Traversal 2021-02-23 10:16:42 -05:00
Spencer McIntyre f176f6b5de Use CheckCode::Unknown when the HTTP response is nil 2021-02-23 10:16:20 -05:00
Spencer McIntyre 1d5a6e4a0b Land #14771, Add Apache Flink JAR Upload Java Code Execution 2021-02-23 09:19:56 -05:00
Paul Werther 90cfbdd023 nicer formatting
Co-authored-by: bcoles <bcoles@gmail.com>
2021-02-23 10:08:27 +01:00
Grant Willcox f65b4155e5 Fix up modules to use more explicit reference to ARCH_X64 and to correctly check sysinfo['Architecture'] as per #14599 2021-02-22 18:47:46 -06:00
Brendan Coles 8a6c6d18fb Add Apache Flink JobManager Traversal 2021-02-22 23:03:58 +00:00
Brendan Coles 69031fa91f Add Apache Flink JAR Upload Java Code Execution 2021-02-22 23:00:57 +00:00
Spencer McIntyre 4d20e382a0 Land #14784, Update ScadaBR Credentials Dumper module 2021-02-22 15:55:14 -05:00
Spencer McIntyre 4f089c3004 Base64 encode stored hash data for JtR 2021-02-22 15:52:12 -05:00
Brendan Coles bc1ffec2c1 Update ScadaBR Credentials Dumper module 2021-02-22 20:32:55 +00:00
Tim W edea755096 Land #14740, CVE-2021-3156 Sudo LPE (AKA: Baron Samedit) Improvements 2021-02-22 17:48:33 +00:00
Spencer McIntyre 9ef6bf384e Update payload cached sizes 2021-02-19 15:35:36 -05:00
agalway-r7 8a339f54c1 Land #14734, updates and runs rubocop against recent modules
Rubocop recently landed modules
2021-02-19 13:48:47 +00:00
agalway-r7 275e9c5454 Land #14696, Further Zeitwerk lands to improve boot speed
Zeitwerk rex folder
2021-02-19 10:33:37 +00:00
kalba-security 68d4b197fa Add SrClient DLL Hijacking local exploit module and docs 2021-02-18 13:50:28 -05:00
Jeffrey Martin 158dd89e53 guard when spawn is used with TcpServer mixin
added locations where the `super` from TcpServer could cause
deadlock waiting for a timeout when a thread is spawned
and fails to trigger the target make a request.
2021-02-18 10:42:56 -06:00
Christophe De La Fuente bbdaf23672 Land #14576, Wordpress Plugin: Chopslider 3 SQLi 2021-02-18 11:49:07 +01:00
Jeffrey Martin 2e1dba1af1 guard thread in ftp module 2021-02-17 15:27:44 -06:00
k0pak4 8a4b6461e8 Final pylint updates to module 2021-02-17 08:16:11 -05:00
Alan Foster 5b3fde7735 Rubocop recently landed modules 2021-02-16 15:08:08 +00:00
Christophe De La Fuente ab9dd177b7 Add kernel file version check to avoid BSOD on Win10 x86 2021-02-15 21:10:10 +01:00
adfoster-r7 b0758eb120 Land #14738, fix multi/manage/shell_to_meterpreter on macOS 2021-02-15 14:46:41 +00:00
A Galway f227e82600 Land #14730, OBM Local PrivEsc to SYSTEM 2021-02-15 10:24:34 +00:00
Jeffrey Martin dbce3982fd Land #14067, [GSoC] Module for CVE-2019-13375, and PostgreSQL support for the library 2021-02-14 12:11:09 -06:00
h00die 28aa29fcab updates from review 2021-02-13 15:11:39 -05:00
Brendan Coles a1c316c679 msftidy: Fix exploit module checks for author and stack buffer overflow 2021-02-13 04:10:13 +00:00
Shelby Pace c1e2cfd9e7 Land #14744, add Klog Server unauth cmd injection 2021-02-12 11:40:57 -06:00