 Spencer McIntyre
|
98906a5976
|
Add the SHOW_LUID action, refactor printed output
|
2023-10-27 12:47:19 -04:00 |
|
|
Spencer McIntyre
|
7b4caf79f8
|
Move the code into libraries for reuse
|
2023-10-27 12:47:19 -04:00 |
|
|
Spencer McIntyre
|
3a6086d88b
|
Initial kerberos_tickets WIP
|
2023-10-27 12:47:19 -04:00 |
|
|
Spencer McIntyre
|
5b5d5ade40
|
Free data using the new util API
|
2023-10-27 12:47:19 -04:00 |
|
|
Spencer McIntyre
|
1dc4e35134
|
Fix typos and log vulnerable servers
Log servers that are vulnerable but don't leak any cookies
|
2023-10-27 11:47:01 -04:00 |
|
|
adfoster-r7
|
3b4302d902
|
Land #18441, Add at rest encryption to Meterpreter payloads
|
2023-10-27 12:18:19 +01:00 |
|
|
Jemmy Wang
|
93c13ad6a7
|
Apply document suggestions from code review
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2023-10-27 02:02:00 +08:00 |
|
|
Zach Goldman
|
d960aa522c
|
Land #18348, Splunk account take over (CVE-2023-32707) leading to RCE
|
2023-10-26 11:34:02 -04:00 |
|
|
Spencer McIntyre
|
94ede61a99
|
Add module docs
|
2023-10-26 09:52:59 -04:00 |
|
|
Spencer McIntyre
|
8bd976e118
|
Initial commit of Citrix Bleed (CVE-2023-4966)
|
2023-10-26 09:15:03 -04:00 |
|
|
Heyder Andrade
|
e5e58bc0be
|
Update modules/exploits/multi/http/splunk_privilege_escalation_cve_2023_32707.rb
Co-authored-by: Zach Goldman <106169455+zgoldman-r7@users.noreply.github.com>
|
2023-10-26 14:03:06 +02:00 |
|
|
Jemmy Wang
|
013e4b5af2
|
Add Module for PL/SQL Developer to gather credentials
|
2023-10-26 19:38:02 +08:00 |
|
|
Christophe De La Fuente
|
9e5e57390f
|
Land #18194, Useradd post module
|
2023-10-25 19:29:59 +02:00 |
|
|
Christophe De La Fuente
|
14a5aaab98
|
Fix small typo
|
2023-10-25 19:28:23 +02:00 |
|
|
Heyder Andrade
|
c0af43c10b
|
Update modules/exploits/multi/http/splunk_privilege_escalation_cve_2023_32707.rb
Co-authored-by: Zach Goldman <106169455+zgoldman-r7@users.noreply.github.com>
|
2023-10-25 11:02:30 +02:00 |
|
|
Christophe De La Fuente
|
ff9639e6a6
|
Land #18460, VMWare Aria Operations for Networks (vRealize Network Insight) Static SSH key RCE
|
2023-10-24 17:32:28 +02:00 |
|
|
h00die-gr3y
|
50b7e0305e
|
first release module
|
2023-10-24 15:29:18 +00:00 |
|
|
Heyder Andrade
|
5e19c8fd88
|
Update splunk_privilege_escalation_cve_2023_32707.rb
|
2023-10-24 14:44:27 +02:00 |
|
|
h00die
|
fa71d8b6e2
|
set all targets to dynamically build list
|
2023-10-23 06:54:38 -04:00 |
|
|
h00die
|
97f9edb5f7
|
review
|
2023-10-23 06:35:23 -04:00 |
|
|
h00die-gr3y
|
c62f9a1c45
|
added D-Link GO-RT-AC750 target and lowered linemax to 900 bytes
|
2023-10-22 17:49:21 +00:00 |
|
|
h00die-gr3y
|
93d38f2d53
|
added additional CVE reference
|
2023-10-20 13:58:32 +00:00 |
|
|
Spencer McIntyre
|
15aaa90379
|
Land #18447, CVE-2023-22515 Confluence Auth Bypass
CVE-2023-22515 - Atlassian Confluence Data Center and Server Authentication Bypass
|
2023-10-19 17:35:17 -04:00 |
|
|
Spencer McIntyre
|
ee0e5b9eda
|
Tidy the docs, fix the username
The username can not contain capital letters, or the operation will
fail.
|
2023-10-19 17:19:55 -04:00 |
|
|
Emir Polat
|
c79cc5a36b
|
Final Checks
|
2023-10-19 17:19:55 -04:00 |
|
|
Emir Polat
|
b3a9579e8a
|
Update modules/auxiliary/admin/http/atlassian_confluence_auth_bypass.rb
Implement changes proposed by Spencer McIntyre (smcintyre-r7)
|
2023-10-19 17:19:30 -04:00 |
|
|
emirpolatt
|
258ac6421b
|
Fix fail_with response code compare and documentation fixes
|
2023-10-19 17:19:30 -04:00 |
|
|
emirpolatt
|
7c977e07ef
|
Remove of the X-Atlassian-Token header from server-info.action
|
2023-10-19 17:19:30 -04:00 |
|
|
emirpolatt
|
236a301f27
|
Check method fixes
get_confluence_version inside to check method. Also new status messages
|
2023-10-19 17:19:08 -04:00 |
|
|
h00die-gr3y
|
13e3d037c9
|
fifth release module
|
2023-10-19 17:42:53 +00:00 |
|
|
h00die-gr3y
|
3024824cc9
|
fourth release module
|
2023-10-19 17:31:48 +00:00 |
|
|
Christophe De La Fuente
|
da9d04d32d
|
Land #18461, CVE-2023-22515 - Atlassian Confluence unauthenticated RCE
|
2023-10-19 10:22:57 +02:00 |
|
|
h00die-gr3y
|
8ea82693a9
|
third release module + documentation
|
2023-10-18 19:55:13 +00:00 |
|
|
sfewer-r7
|
5e84f57ab3
|
set :random to true during generate_jar so we can randomize teh metasploit class path
|
2023-10-18 09:53:46 +01:00 |
|
|
sfewer-r7
|
fcffd36af0
|
no need to test for true, jsut return the value as we are waiting for done to be set to true
|
2023-10-18 09:37:04 +01:00 |
|
|
sfewer-r7
|
9fdbccb74f
|
catch a JSON ParserError exception and fail_with() if needed. Also detect if the JSON data doesnt have the expected value and fail_with() if needed
|
2023-10-18 09:36:02 +01:00 |
|
|
h00die-gr3y
|
3d405cda0a
|
second release module
|
2023-10-17 19:09:03 +00:00 |
|
|
h00die
|
00b534dbed
|
review
|
2023-10-17 13:17:10 -04:00 |
|
|
h00die-gr3y
|
7e29519c9c
|
initial release module
|
2023-10-17 16:59:45 +00:00 |
|
|
sfewer-r7
|
34107e4f3b
|
favod over for string concatenation.
|
2023-10-17 11:36:07 +01:00 |
|
|
sfewer-r7
|
0fc35bf6d3
|
randomize the plugins version number
|
2023-10-17 10:01:02 +01:00 |
|
|
sfewer-r7
|
415bd49b15
|
use next semantics to return from a yielded block early (note we cannot use return for this)
|
2023-10-17 09:43:00 +01:00 |
|
|
sfewer-r7
|
54f334479a
|
fix another typo
|
2023-10-17 09:30:52 +01:00 |
|
|
sfewer-r7
|
9e6e9538e1
|
typo
|
2023-10-17 09:29:38 +01:00 |
|
|
sfewer-r7
|
d2438bad4e
|
add a note to explain we need to concat a trailing forward slash
|
2023-10-17 09:28:04 +01:00 |
|
|
sfewer-r7
|
4acdaf3087
|
typos
|
2023-10-17 09:22:09 +01:00 |
|
|
sfewer-r7
|
d17f065f12
|
remove 'localhost' in favor of some random chars
|
2023-10-17 09:21:28 +01:00 |
|
|
sfewer-r7
|
3242a7009b
|
clarify timeout is in seconds
|
2023-10-17 09:11:05 +01:00 |
|
|
sfewer-r7
|
b97cb9f63d
|
remove whitespace
|
2023-10-17 09:10:28 +01:00 |
|
|
Corey
|
60b72fb4be
|
remove vmicheartbeat from hyperv_services
|
2023-10-16 17:27:37 -04:00 |
|