1e2ada3cce
Add options validation depending on action in forge_ticket.rb
2022-12-06 12:55:42 +00:00
9b55f32474
MinIO_Client
2022-12-06 20:04:10 +08:00
d48319a867
Land #17242 , Add Gather Module for WP BookingPress Plugin unauth SQLi (CVE-2022-0739)
2022-12-05 15:04:31 -06:00
cb68c255bb
Fix up issues from review
2022-12-05 14:17:43 -06:00
4b008d6ea8
revert the identify_hash line
2022-12-05 14:17:39 -06:00
41edc92d5d
Update wp_bookingpress_category_services_sqli to use the SQLi library
2022-12-05 14:17:31 -06:00
1fec75621c
Fix up documentation from review
2022-12-05 14:04:22 -06:00
f29b4fad75
Add Gather Module for WP BookingPress Plugin SQLi (CVE-2022-0739)
2022-12-05 14:04:03 -06:00
37540572e0
Land #17214 , add database functionality to vcenter post module
...
Merge branch 'land-17214' into upstream-master
2022-12-05 12:50:14 -06:00
54cd055276
Land #17286 , CVE-2021-22015 vCenter priv esc
...
Merge branch 'land-17286' into upstream-master
2022-12-05 09:31:01 -06:00
405271a52f
Add pac BinData Model
2022-12-05 14:03:21 +00:00
6e7d4edf02
Land #16990 , Syncovery for Linux - Login brute-force utility
2022-12-05 14:39:29 +01:00
8e9e8468f2
Land #17338 , Lint modules
2022-12-05 13:17:40 +00:00
0d3c1dc122
Land #17333 , Fix typos: Replace 'the the' with 'the'
2022-12-05 11:46:27 +00:00
14d05c9c6c
Lint modules
2022-12-05 10:41:31 +00:00
907612b41d
Dbeaver
2022-12-05 14:54:19 +08:00
8aca86b816
Apply suggestions from code review
2022-12-04 17:29:05 +01:00
c1ff9337c8
dnn_cookie_deserialization_rce: Remove empty 'Payload' Hash key
2022-12-04 17:50:24 +11:00
431804ef15
Fix typos: Replace 'the the' with 'the'
2022-12-04 17:41:24 +11:00
d90dee8235
enum_proxy: Cleanup and support non-Meterpreter sessions
2022-12-04 15:10:47 +11:00
a3c82246a7
Added archer c7 traversal exploit
2022-12-03 20:03:11 -05:00
96da805014
Fix enumerating emails via ProxyShell
...
The ResolveNames endpoint used to gather emails addresses for targeting
only returns 100 at a time. This updates the module to check if the
search result contains all entries and when it does, it recurses into
itself with a refined search prefix. All results are returned to match
the original functionality instead of enumerating and halting once one
that's suitable for exploitation has been found.
2022-12-02 15:58:50 -05:00
04e5aa3033
apply suggestions
2022-12-02 16:05:01 +01:00
c6f8bae1ab
Fix from code review and updates the KrbUseCachedCredentials logic
2022-12-02 15:28:08 +01:00
04dc8e8455
Land #17310 , update checkvm post module
...
Add notes and add powershell to supported SessionTypes
2022-12-01 17:05:09 -05:00
4207449382
Land #17323 , fix enlightenment check method
2022-12-01 20:26:16 +00:00
867059efe5
add super to cleanup command
2022-12-01 14:55:43 -05:00
cc61a26668
Add S4U2Self and S4U2Proxy support to impersonate a user
2022-12-01 20:42:13 +01:00
62b484fdc7
blank over empty
2022-12-01 14:34:09 -05:00
dcff4d37b6
Land #17163 , Pfsense PfBlockerNG RCE module check method improvement
...
Merge branch 'land-17163' into upstream-master
2022-12-01 09:25:18 -06:00
039b611fae
fix enlightenment check method
2022-11-30 17:06:50 -05:00
330cb2944b
fix typo
...
OptString.new('FILENAME', [true, 'The OpoenOffice Text document name', 'msf.odt']) -> OpoenOffice changed to OpenOffice
2022-11-30 22:10:18 +01:00
d3057f15b2
Land #17275 , Add Exploit For CVE-2022-41082 (ProxyNotShell)
2022-11-30 18:16:19 +01:00
d491c10d22
Store service credentials in the database
2022-11-30 11:59:10 -05:00
0323d45737
More correct approach to encoding for command line
2022-11-30 11:54:42 +11:00
5fce80ed1d
Added comments to most functions
2022-11-30 11:53:57 +11:00
3a93fcb404
Rubocop'd
2022-11-30 11:32:23 +11:00
97aef31180
Removed vestigial code while we're at it
2022-11-30 11:31:27 +11:00
1231eefe55
Fixed WQL module while I'm at it
2022-11-30 10:26:19 +11:00
0d68ec5d1b
Fix formatting of winrm_script_exec
2022-11-30 07:48:30 +11:00
6a040e2ee5
#11456 Winrm Script Exec works again
2022-11-30 07:39:38 +11:00
704cee436b
Apply suggestions from code review
2022-11-29 15:25:14 +01:00
c1236500f1
Apply suggestions from code review
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-11-29 14:12:39 +01:00
60180a4442
checkvm: Add notes and add powershell to supported SessionTypes
2022-11-29 21:28:15 +11:00
34d1b5b37e
Fix crash in kerberos get ticket module
2022-11-29 10:17:21 +00:00
8ea8e2410d
Land #17299 , Fixes #17227
...
Fixes #17227 - polkit_dbus_auth_bypass module when run from a command…
2022-11-28 16:22:52 -05:00
5d3cfa69b8
Land #17210 , add ParseError rescue to snmp modules
...
snmp_enum, snmp_enumshares and snmp_enumusers now rescue
SNMP ParseErrors
2022-11-28 15:37:02 -05:00
3462dc6bf4
Land #17087 , remote control collection rce
...
Merge branch 'land-17087' into upstream-master
2022-11-28 14:29:52 -06:00
abe0549db6
Land #17226 , Module to request TGT/TGS tickets
...
Module to request TGT/TGS Kerberos tickets from the KDC
2022-11-28 11:59:17 -05:00
264d45e04a
Appease rubocop
2022-11-28 10:16:55 -05:00
Dean Welch