 h00die
|
a4bde1157c
|
fix #18326
|
2023-08-28 16:49:31 -04:00 |
|
|
Christophe De La Fuente
|
7fa2586e34
|
Land #18247, Netgear NMS RCE CVE-2023-38096/8
|
2023-08-28 11:23:08 +02:00 |
|
|
h00die-gr3y
|
77a1bbef79
|
Second release module and documentation
|
2023-08-28 07:49:40 +00:00 |
|
|
Ege Balcı
|
eaeb2024d3
|
Merge branch 'master' into vmware_vrli_rce
Merge for ThriftMessageType
|
2023-08-26 22:42:25 +02:00 |
|
|
Ege Balcı
|
65402ab3ab
|
Update stability to CRASH_SAFE
|
2023-08-26 18:55:31 +02:00 |
|
|
Ege Balcı
|
047a1c9e03
|
Remove TRA (Tenable vuln ID)
|
2023-08-26 18:45:42 +02:00 |
|
|
Ege Balcı
|
ed01948ffe
|
Randomize buffer + use make_nops
|
2023-08-26 18:43:07 +02:00 |
|
|
Ege Balcı
|
721d5cfaa1
|
Update modules/exploits/windows/misc/ivanti_avalanche_mdm_bof.rb
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
|
2023-08-26 16:27:21 +00:00 |
|
|
Ege Balcı
|
06ab901397
|
Update modules/exploits/windows/misc/ivanti_avalanche_mdm_bof.rb
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
|
2023-08-26 16:27:12 +00:00 |
|
|
Ege Balcı
|
08de344f81
|
Update modules/exploits/windows/misc/ivanti_avalanche_mdm_bof.rb
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
|
2023-08-26 16:26:54 +00:00 |
|
|
bwatters
|
c69e983b30
|
Add module to create directory structures and upload/run exploit
|
2023-08-25 15:41:25 -05:00 |
|
|
h00die
|
772978964e
|
elastic memory disclosure
|
2023-08-25 13:28:17 -04:00 |
|
|
Ege Balcı
|
a971867ca6
|
Add Ivanti Avalanche MDM Buffer Overflow Exploit (CVE-2023-32560)
|
2023-08-25 19:26:06 +02:00 |
|
|
cudalac
|
926bdd03c4
|
roundcube arbitrary file read
|
2023-08-25 08:59:53 -04:00 |
|
|
Spencer McIntyre
|
b830587a60
|
Land #18310, elasticsearch enum module enhancements
elasticsearch enum module enhancements
|
2023-08-24 18:31:48 -04:00 |
|
|
h00die
|
67768567ac
|
review comments
|
2023-08-24 17:24:20 -04:00 |
|
|
h00die
|
b529814563
|
fix sideeffects/reliability
|
2023-08-24 16:28:05 -04:00 |
|
|
h00die
|
43401dd872
|
review comments
|
2023-08-24 16:23:41 -04:00 |
|
|
h00die
|
5382eb22d1
|
kibana exploit
|
2023-08-24 16:08:08 -04:00 |
|
|
RadioLogic
|
8497699d53
|
Moved creation of new groups to its own function
|
2023-08-24 13:26:15 -04:00 |
|
|
RadioLogic
|
1e0ec1b0e1
|
Minimalize groupadd checks
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
|
2023-08-24 13:14:05 -04:00 |
|
|
Christophe De La Fuente
|
a037d16b66
|
Land #18233, Chamilo unauthenticed RCE [CVE-2023-34960]
|
2023-08-24 11:49:40 +02:00 |
|
|
h00die-gr3y
|
3612030cee
|
first release of module
|
2023-08-23 22:07:58 +00:00 |
|
|
h00die
|
8796d5e2d4
|
elasticsearch enum module enhancements
|
2023-08-23 18:06:41 -04:00 |
|
|
Spencer McIntyre
|
3c6f5419f2
|
Land #18214, Change fetch payload default options
Change default command to certutil for Windows HTTP Fetch and default…
|
2023-08-23 17:45:10 -04:00 |
|
|
h00die
|
36327e1ff4
|
elasticsearch enum module enhancements
|
2023-08-23 15:19:06 -04:00 |
|
|
RadioLogic
|
55c22f9848
|
Added some protective statements
|
2023-08-23 13:44:30 -04:00 |
|
|
RadioLogic
|
48acd804da
|
Added PasswordHashType advanced option
|
2023-08-23 13:37:08 -04:00 |
|
|
RadioLogic
|
b464b9119c
|
Added missing newline to manual writes
|
2023-08-23 13:21:53 -04:00 |
|
|
RadioLogic
|
93624cca53
|
Moved groups section to its own function
|
2023-08-23 13:18:01 -04:00 |
|
|
RadioLogic
|
1bff275991
|
Moved manual group write to its own function
|
2023-08-23 13:01:22 -04:00 |
|
|
RadioLogic
|
0ae003f55b
|
Moved os_platform to its own function
|
2023-08-23 12:48:01 -04:00 |
|
|
RadioLogic
|
86885e8e58
|
Replaced echo command in manual with append_file
|
2023-08-23 12:27:39 -04:00 |
|
|
RadioLogic
|
0c005a50c9
|
Moved creating groups towards the top implementing it only once
|
2023-08-23 12:23:59 -04:00 |
|
|
RadioLogic
|
85fc0f48e7
|
Made wrapper to command_exists? to ensure safe run
|
2023-08-23 11:51:14 -04:00 |
|
|
Ismail Dawoodjee
|
009721b3c7
|
Merge branch 'rapid7:master' into apache_airflow_dag_rce
|
2023-08-23 22:13:20 +08:00 |
|
|
Christophe De La Fuente
|
bf1b5ffaa3
|
Land #18272, Bug fix for ColdFusion RCE module - CVE-2023-26360
|
2023-08-23 16:05:33 +02:00 |
|
|
h00die-gr3y
|
f64b67968f
|
Final minor updates
|
2023-08-23 11:38:07 +00:00 |
|
|
RadioLogic
|
432cdce773
|
Fixed condition logic to invalid groups
|
2023-08-22 12:53:09 -04:00 |
|
|
H00die.Gr3y
|
1db284dcaa
|
Apply suggestions from code review
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
|
2023-08-22 18:46:25 +02:00 |
|
|
RadioLogic
|
7d78b52337
|
Got rid of binary_case variable
|
2023-08-22 12:46:24 -04:00 |
|
|
RadioLogic
|
ee4a5a01d2
|
Replaced !invalid.empty? with invalid.any?
|
2023-08-22 12:44:16 -04:00 |
|
|
RadioLogic
|
6116fb6a8f
|
Greatly simplified groups null check
|
2023-08-22 12:41:17 -04:00 |
|
|
RadioLogic
|
1604cf2134
|
Removed default value to groups option
|
2023-08-22 12:40:23 -04:00 |
|
|
RadioLogic
|
c81de292d8
|
Setting sudomethod option to required
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
|
2023-08-22 12:28:35 -04:00 |
|
|
RadioLogic
|
402e25824b
|
Making option only available based on another option
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
|
2023-08-22 12:26:23 -04:00 |
|
|
RadioLogic
|
2c63dfa79f
|
Made groups regex safe
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
|
2023-08-22 12:25:00 -04:00 |
|
|
RadioLogic
|
737b5a46ed
|
Fixed exist condition with ruby ninjutsu
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
|
2023-08-22 12:24:06 -04:00 |
|
|
Ron Bowes
|
4b130f5be7
|
Change a variable name
|
2023-08-22 09:00:31 -07:00 |
|
|
jvoisin
|
b79549f178
|
Use a better detection method for Xen
Based on @adfoster-r7's feedback.
|
2023-08-22 12:36:48 +02:00 |
|