erberkan
648489cfe5
fortilogger_arbitrary_fileupdate
2021-03-01 17:55:55 +03:00
Gabriel Garcia
1223bd0852
Slightly more idiomatic way
2021-02-28 00:53:49 -08:00
Gabriel Garcia
1135135ce1
Fixing linting
2021-02-28 00:51:52 -08:00
Gabriel Garcia
5c0293c56b
Skipping empty files for path traversal enumeration
2021-02-28 00:41:06 -08:00
Grant Willcox
2124ec25ba
Rename files and update the exploit module title to better reflect its purpose. Also fix a minor RuboCop related change
...
Fix up documentation to reflect recent file renaming changes.
2021-02-26 14:32:37 -06:00
RAMELLA Sébastien
801164a244
fix. separator for creds collector.
2021-02-26 14:32:29 -06:00
RAMELLA Sébastien
eb5f418fe2
fix. some rubocop recommendations
2021-02-26 14:32:21 -06:00
RAMELLA Sébastien
b84909fe67
change parsing method
2021-02-26 14:32:20 -06:00
RAMELLA Sébastien
82c8b55be9
fix. remove call to eval and some minor change
2021-02-26 14:32:19 -06:00
RAMELLA Sébastien
7eb91e76ab
add. fortios path traversal (cve-2018-13379)
2021-02-26 14:32:13 -06:00
Grant Willcox
6d939c16ce
Land #14783 , Update KarjaSoft Sami FTP Server v2.0.2 USER Overflow module
2021-02-26 11:17:05 -06:00
Paul Werther
c570c9f30e
add documentation and linting (rubocop)
2021-02-26 16:16:23 +01:00
RAMELLA Sébastien
70b260cb40
fix. separator
2021-02-26 16:52:55 +04:00
RAMELLA Sébastien
ee2abf40fb
fix. separator for creds collector.
2021-02-26 11:37:24 +04:00
Brendan Coles
743248d993
Update KarjaSoft Sami FTP Server v2.0.2 USER Overflow module
2021-02-25 20:53:30 +00:00
Brendan Coles
f89d67df19
dup_scout_enterprise_login_bof: Add v9.9.14 target and auto targeting
2021-02-25 17:14:25 +00:00
Brendan Coles
1f00ad011c
dupscts_bof: Add additional targets and auto targeting
2021-02-25 17:12:27 +00:00
dwelch-r7
319f15d938
Handle nil versions for rubygems 4
2021-02-25 16:47:49 +00:00
Grant Willcox
ff16c24d03
Land #14806 , Rubocop recently landed modules continued
2021-02-25 10:36:50 -06:00
Alan Foster
b06c5c12aa
Rubocop recently landed modules continued
2021-02-25 14:13:40 +00:00
bwatters
7cdd41df76
Land #14544 , RDP Web Login User Enumeration Auxiliary Module
...
Merge branch 'land-14544' into upstream-master
2021-02-24 16:10:41 -06:00
bwatters
18f6245637
Land #14648 , Process Herpaderping evasion module
...
Merge branch 'land-14648' into upstream-master
2021-02-24 11:39:47 -06:00
bwatters
1acfa55dcd
rubocop -a fixes
2021-02-24 11:38:06 -06:00
Spencer McIntyre
8c1721b845
Land #14766 , Add Apache Flink JobManager Traversal
2021-02-23 10:16:42 -05:00
Spencer McIntyre
f176f6b5de
Use CheckCode::Unknown when the HTTP response is nil
2021-02-23 10:16:20 -05:00
Spencer McIntyre
1d5a6e4a0b
Land #14771 , Add Apache Flink JAR Upload Java Code Execution
2021-02-23 09:19:56 -05:00
Paul Werther
90cfbdd023
nicer formatting
...
Co-authored-by: bcoles <bcoles@gmail.com >
2021-02-23 10:08:27 +01:00
Grant Willcox
f65b4155e5
Fix up modules to use more explicit reference to ARCH_X64 and to correctly check sysinfo['Architecture'] as per #14599
2021-02-22 18:47:46 -06:00
Brendan Coles
8a6c6d18fb
Add Apache Flink JobManager Traversal
2021-02-22 23:03:58 +00:00
Brendan Coles
69031fa91f
Add Apache Flink JAR Upload Java Code Execution
2021-02-22 23:00:57 +00:00
Spencer McIntyre
4d20e382a0
Land #14784 , Update ScadaBR Credentials Dumper module
2021-02-22 15:55:14 -05:00
Spencer McIntyre
4f089c3004
Base64 encode stored hash data for JtR
2021-02-22 15:52:12 -05:00
Brendan Coles
bc1ffec2c1
Update ScadaBR Credentials Dumper module
2021-02-22 20:32:55 +00:00
Tim W
edea755096
Land #14740 , CVE-2021-3156 Sudo LPE (AKA: Baron Samedit) Improvements
2021-02-22 17:48:33 +00:00
Spencer McIntyre
9ef6bf384e
Update payload cached sizes
2021-02-19 15:35:36 -05:00
agalway-r7
8a339f54c1
Land #14734 , updates and runs rubocop against recent modules
...
Rubocop recently landed modules
2021-02-19 13:48:47 +00:00
agalway-r7
275e9c5454
Land #14696 , Further Zeitwerk lands to improve boot speed
...
Zeitwerk rex folder
2021-02-19 10:33:37 +00:00
kalba-security
68d4b197fa
Add SrClient DLL Hijacking local exploit module and docs
2021-02-18 13:50:28 -05:00
Jeffrey Martin
158dd89e53
guard when spawn is used with TcpServer mixin
...
added locations where the `super` from TcpServer could cause
deadlock waiting for a timeout when a thread is spawned
and fails to trigger the target make a request.
2021-02-18 10:42:56 -06:00
Christophe De La Fuente
bbdaf23672
Land #14576 , Wordpress Plugin: Chopslider 3 SQLi
2021-02-18 11:49:07 +01:00
Jeffrey Martin
2e1dba1af1
guard thread in ftp module
2021-02-17 15:27:44 -06:00
k0pak4
8a4b6461e8
Final pylint updates to module
2021-02-17 08:16:11 -05:00
Alan Foster
5b3fde7735
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
Christophe De La Fuente
ab9dd177b7
Add kernel file version check to avoid BSOD on Win10 x86
2021-02-15 21:10:10 +01:00
adfoster-r7
b0758eb120
Land #14738 , fix multi/manage/shell_to_meterpreter on macOS
2021-02-15 14:46:41 +00:00
A Galway
f227e82600
Land #14730 , OBM Local PrivEsc to SYSTEM
2021-02-15 10:24:34 +00:00
Jeffrey Martin
dbce3982fd
Land #14067 , [GSoC] Module for CVE-2019-13375, and PostgreSQL support for the library
2021-02-14 12:11:09 -06:00
h00die
28aa29fcab
updates from review
2021-02-13 15:11:39 -05:00
Brendan Coles
a1c316c679
msftidy: Fix exploit module checks for author and stack buffer overflow
2021-02-13 04:10:13 +00:00
Shelby Pace
c1e2cfd9e7
Land #14744 , add Klog Server unauth cmd injection
2021-02-12 11:40:57 -06:00