 space-r7
|
4bb843fe70
|
add documentation, adjust method of getting ids
|
2023-03-13 15:31:41 -05:00 |
|
|
h00die
|
8dfe58e617
|
review comment
Co-authored-by: cgranleese-r7 <69522014+cgranleese-r7@users.noreply.github.com>
|
2023-03-13 14:42:26 -04:00 |
|
|
space-r7
|
4eef052fcd
|
add usage of linux cmdstager, cleanup, description
|
2023-03-13 13:24:15 -05:00 |
|
|
Grant Willcox
|
3a7da2ad8a
|
Revert "Added new Datastore options to ssh_login"
|
2023-03-13 10:05:22 -05:00 |
|
|
h00die-gr3y
|
07d7248de8
|
initial module commit
|
2023-03-13 13:32:14 +00:00 |
|
|
Pflegusch
|
94e9504727
|
Use metasploit payload instead of hardcoded one
|
2023-03-11 14:47:32 +01:00 |
|
|
Pflegusch
|
3f7f28dd4f
|
make use of full_uri and change regex
|
2023-03-11 14:25:04 +01:00 |
|
|
Aaron Meese
|
0a6ac589e4
|
Update modules/auxiliary/scanner/http/rpyc_rce.py
Renames `system` function to `remote_system`
Co-authored-by: Jeffrey Martin <jeffrey_martin@rapid7.com>
|
2023-03-09 15:55:51 -07:00 |
|
|
Jack Heysel
|
2a9ddae531
|
Updated description
|
2023-03-09 17:43:14 -05:00 |
|
|
Jack Heysel
|
06e7c3d702
|
Responded to comments updated docs
|
2023-03-09 17:39:53 -05:00 |
|
|
space-r7
|
2fbc80a44f
|
add base cmdstager support for windows target
|
2023-03-09 16:24:12 -06:00 |
|
|
Christophe De La Fuente
|
4866c2b8b8
|
Land #17686, Additional PetitPotam Methods
|
2023-03-09 19:29:16 +01:00 |
|
|
jheysel-r7
|
63e2376f64
|
Apply suggestions from code review
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
|
2023-03-09 12:31:30 -05:00 |
|
|
Grant Willcox
|
beb9f87d53
|
Land #17507, SugarCRM webshell upload RCE [CVE-2023-22952] + Mixin for PNG embedded web shells
|
2023-03-09 10:16:57 -06:00 |
|
|
dwelch-r7
|
9961fffaa2
|
Land #17756, Update secrets dump to generate kerberos rc4 key for machine account
|
2023-03-09 16:12:52 +00:00 |
|
|
dwelch-r7
|
01399e4818
|
Land #17749, Add nthashes to keytab export
|
2023-03-09 16:09:13 +00:00 |
|
|
Pflegusch
|
38511f4d89
|
Rename establish_connection function
|
2023-03-09 17:06:07 +01:00 |
|
|
Pflegusch
|
e66fd8f5ae
|
Use rand_text_alphanumeric function
|
2023-03-09 17:03:48 +01:00 |
|
|
Pflegusch
|
69839d1924
|
Remove get_proxy_protocol function
|
2023-03-09 17:02:10 +01:00 |
|
|
Pflegusch
|
614f4b6d89
|
Make installation path of owa configurable
|
2023-03-09 16:32:28 +01:00 |
|
|
h00die-gr3y
|
fc711131a2
|
added MIME, added break in mixin and added link with installation instructions
|
2023-03-09 09:28:46 -06:00 |
|
|
Grant Willcox
|
deafceed00
|
Update documentation, library, and Gemspec from review
|
2023-03-09 09:28:27 -06:00 |
|
|
h00die-gr3y
|
d3f84af790
|
Included mixin for PHP code injection at PNGs
|
2023-03-09 09:28:14 -06:00 |
|
|
h00die-gr3y
|
dc8ebb722a
|
Added support for native PHP payloads and reengineered webshells
|
2023-03-09 09:28:03 -06:00 |
|
|
h00die-gr3y
|
c844d4d714
|
removed check and fix up some code
|
2023-03-09 09:27:29 -06:00 |
|
|
h00die-gr3y
|
771f32bd8a
|
Add documentation and apply code updates
|
2023-03-09 09:27:03 -06:00 |
|
|
h00die-gr3y
|
378a667f76
|
init commit module
|
2023-03-09 09:26:55 -06:00 |
|
|
Pflegusch
|
2de53712bd
|
Use Rex::Version for version comparison
|
2023-03-09 15:59:42 +01:00 |
|
|
Pflegusch
|
94ceeb075a
|
Redirect is not necessary - replace with simple send_request_cgi request
|
2023-03-09 15:41:15 +01:00 |
|
|
Pflegusch
|
ee95eb2883
|
fix typo: establish_connection
|
2023-03-09 15:09:32 +01:00 |
|
|
adfoster-r7
|
5c1fcc3a72
|
Update secrets dump to generate kerberos rc4 key for machine account
|
2023-03-09 14:05:12 +00:00 |
|
|
Pflegusch
|
14b5c08a62
|
Fix the double slash in the shell url
|
2023-03-09 14:28:15 +01:00 |
|
|
Pflegusch
|
d59175a463
|
make it work for https and http and remove the tmp self signed cert bypass
|
2023-03-09 13:58:56 +01:00 |
|
|
adfoster-r7
|
ab57c09dc2
|
Update get_ticket to support using forged golden tickets
|
2023-03-09 12:21:29 +00:00 |
|
|
Pflegusch
|
f0dbf54c69
|
use fail_with in get_cache_content function
|
2023-03-09 11:04:00 +01:00 |
|
|
Pflegusch
|
7068d4c3f1
|
remove LPORT, RPORT and SSL from DefaultOptions
|
2023-03-09 11:03:24 +01:00 |
|
|
space-r7
|
c69b5c9363
|
add creation of projects and multiple commits
|
2023-03-08 17:46:25 -06:00 |
|
|
Grant Willcox
|
100cfbccf9
|
Fix up some more slight things in documentation. Also tidy up some things in the module
|
2023-03-08 17:25:56 -06:00 |
|
|
Pflegusch
|
76b05a7092
|
Change DisclosureDate according to nvd.nist.gov
|
2023-03-08 21:52:13 +01:00 |
|
|
Pflegusch
|
b37be28191
|
Working module open web analytics 1.7.3 rce
|
2023-03-08 21:30:52 +01:00 |
|
|
Jack Heysel
|
d31220ef1e
|
Updated references
|
2023-03-08 14:17:34 -05:00 |
|
|
Jack Heysel
|
263223b783
|
Last second file reorganization fix
|
2023-03-08 14:08:46 -05:00 |
|
|
Jack Heysel
|
dfae7e2fc4
|
FortiNAC keyUploap.jsp arbitrary file write CVE-2022-39952
|
2023-03-08 14:06:28 -05:00 |
|
|
Christophe De La Fuente
|
bbc071d254
|
Land #17737, Add Gather Wowza Streaming Engine Credentials
|
2023-03-08 19:13:21 +01:00 |
|
|
adfoster-r7
|
3bc4639235
|
Add nthashes to keytab export
|
2023-03-08 18:03:44 +00:00 |
|
|
rohitkumarankam
|
599642bbb9
|
Updated variable names to be more specific
|
2023-03-08 10:53:24 -06:00 |
|
|
rohitkumarankam
|
71e142a5ee
|
updated variable names
|
2023-03-08 10:53:23 -06:00 |
|
|
rohitkumarankam
|
2c3005fee3
|
Added new Datastore options to ssh_login
|
2023-03-08 10:53:23 -06:00 |
|
|
bcoles
|
f62994b4c0
|
Add Gather Wowza Streaming Engine Credentials
|
2023-03-09 01:31:23 +11:00 |
|
|
Christophe De La Fuente
|
6ef92915d2
|
Land #17741, Add in missing EDB reference to pfsense_pfblockerng_webshell
|
2023-03-08 14:53:09 +01:00 |
|