 Ashley Donaldson
|
3839bc5dea
|
Use rex sockets for WinRM transport
|
2021-08-31 21:36:25 +10:00 |
|
|
Ashley Donaldson
|
8d047dca59
|
Basic command shell operational. Does not yet utilise Rex sockets.
|
2021-08-31 15:34:04 +10:00 |
|
|
Ashley Donaldson
|
3dc1b22cdc
|
Created WinRM command shell type
|
2021-08-31 11:00:53 +10:00 |
|
|
Grant Willcox
|
337e80b244
|
Land #15375, Fix LDAP hashdump crash on null char
|
2021-08-30 11:55:46 -05:00 |
|
|
Spencer McIntyre
|
8317a484a3
|
Land #15548, Overhaul SMB auth capture server
|
2021-08-30 10:01:55 -04:00 |
|
|
Your Name
|
690af9f956
|
Fixed CVE Number
|
2021-08-30 08:18:19 +01:00 |
|
|
h00die
|
e3115ba9e9
|
rubocop this thing
|
2021-08-29 17:18:06 -04:00 |
|
|
h00die
|
5ea2cf9e5a
|
moodle_admin_shell_upload working and minor other fixes
|
2021-08-29 16:59:44 -04:00 |
|
|
h00die
|
b969d57f22
|
admin shell upload initial commit
|
2021-08-29 10:51:58 -04:00 |
|
|
h00die
|
176c1f0751
|
moodle lib and module
|
2021-08-29 10:50:25 -04:00 |
|
|
h00die
|
d3b00aa10a
|
Merge branch 'cleanup_moodle' into moodle_310_rce
|
2021-08-29 07:15:01 -04:00 |
|
|
h00die
|
a35be13958
|
moodle 3.8.0 tested
|
2021-08-28 08:10:28 -04:00 |
|
|
Your Name
|
70f3f9d731
|
Fixed CVE Number
|
2021-08-28 11:33:42 +01:00 |
|
|
h00die
|
a5674683f0
|
remove duplicate autocheck
|
2021-08-27 20:08:58 -04:00 |
|
|
h00die
|
3801c525c3
|
cleanup moodle_cmd_exec
|
2021-08-27 20:03:27 -04:00 |
|
|
h00die
|
cd24ad1bdf
|
lint
|
2021-08-27 19:53:45 -04:00 |
|
|
h00die
|
b9c9ed243a
|
lint
|
2021-08-27 19:51:52 -04:00 |
|
|
h00die
|
c0a8535764
|
moodle spellcheck rce
|
2021-08-27 19:51:52 -04:00 |
|
|
Spencer McIntyre
|
95015f0c2b
|
Update the ProxyShell module docs
|
2021-08-27 17:50:28 -04:00 |
|
|
Spencer McIntyre
|
425dcf1f81
|
Cleanup and refactor the exploit logic
|
2021-08-27 17:26:40 -04:00 |
|
|
Spencer McIntyre
|
965dec43ae
|
Delete the draft email
|
2021-08-27 16:59:17 -04:00 |
|
|
Spencer McIntyre
|
0b3b0aab7d
|
Fix the UNC path conversion regex
|
2021-08-27 15:56:58 -04:00 |
|
|
Spencer McIntyre
|
5e32ca9f56
|
Improve error checks and dont use whoami
|
2021-08-27 15:52:34 -04:00 |
|
|
Spencer McIntyre
|
c4cf99795e
|
Remove the requirement on knowing an email address
|
2021-08-27 15:34:51 -04:00 |
|
|
Spencer McIntyre
|
845c01f27f
|
Store the enumerated mailbox email addresses
|
2021-08-27 15:07:13 -04:00 |
|
|
Spencer McIntyre
|
6c01a0dbea
|
Work off of the system mailbox
|
2021-08-27 14:32:26 -04:00 |
|
|
sjanusz
|
ab596dc13d
|
Adds realm, host and service for core credentials
|
2021-08-27 17:33:17 +01:00 |
|
|
adfoster-r7
|
4a9a15e638
|
Run Rubocop layout rules on modules
|
2021-08-27 17:19:43 +01:00 |
|
|
Spencer McIntyre
|
d5fdcb8fcb
|
Add the plumbing to enumerate email addresses
|
2021-08-27 11:44:27 -04:00 |
|
|
Your Name
|
8d28dece69
|
Added Notes
|
2021-08-27 16:42:54 +01:00 |
|
|
adfoster-r7
|
7daec4ab39
|
Update metasploit payloads version
|
2021-08-27 12:55:19 +01:00 |
|
|
Your Name
|
6a501a37ff
|
Add CVE-2021-33549 exploit for Geutebruck G-CAM
|
2021-08-27 01:28:26 +01:00 |
|
|
Grant Willcox
|
7cf2e66085
|
Fix up regex to properly match results and not include the 'version' part of the string, which was causing Rex::Version to return incorrect results and therefore make the 'check' method fail
|
2021-08-26 17:41:41 -05:00 |
|
|
Grant Willcox
|
415b46d9a7
|
Fix Rubocop errors
|
2021-08-26 16:52:58 -05:00 |
|
|
Dimitrie-Toma Furdui
|
63aaa8f438
|
fixed version check for docker_credential_wincred
|
2021-08-26 16:33:45 -05:00 |
|
|
Tim W
|
6c0b90eabb
|
Land #15532, add module for CVE-2021-21300 and git mixins
|
2021-08-26 18:26:04 +01:00 |
|
|
Spencer McIntyre
|
674628e600
|
Land #15384, Improve Windows RDLL injection
|
2021-08-26 12:11:44 -04:00 |
|
|
Grant Willcox
|
be9a7bc9b9
|
Fix up error in alpc_taskscheduler.rb where it expected a DLL but we passed it shellcode instead
|
2021-08-26 09:27:21 -05:00 |
|
|
Grant Willcox
|
7652a2240e
|
Add in missing import for modules/exploits/windows/local/ntapphelpcachecontrol.rb to prevent crashes due to execute_dll not being defined
|
2021-08-25 18:19:58 -05:00 |
|
|
Grant Willcox
|
6f9b06fb4b
|
Add in Manfred Paul's original blog post and chompie1337's original PoC to the list of links. Also add in a relatively detailed description of how to add in new targets to this exploit to the documentation in case that helps anyone down the line
|
2021-08-25 18:09:07 -05:00 |
|
|
space-r7
|
ab622405de
|
Land #15593, add WP Learnpress SQLi module
|
2021-08-25 14:18:51 -05:00 |
|
|
space-r7
|
17da80163c
|
fix typo, set COUNT default to 3 as noted in docs
|
2021-08-25 14:17:47 -05:00 |
|
|
agalway-r7
|
4bcfe81ddb
|
replace magic value with constant
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
|
2021-08-25 14:35:16 +01:00 |
|
|
Grant Willcox
|
29a230ec72
|
Improve error handling for module
|
2021-08-24 17:36:37 -05:00 |
|
|
Grant Willcox
|
5a80e9678c
|
Address Spencer's comments and remove changes that don't directly use the DLL injection library API change
|
2021-08-24 16:34:01 -05:00 |
|
|
A Galway
|
8f77c6ff8a
|
adds JTR NTLM constant & improves module options
|
2021-08-24 12:18:27 +01:00 |
|
|
h00die
|
b9db47f873
|
wp_learnpress sqli
|
2021-08-23 19:45:45 -04:00 |
|
|
Grant Willcox
|
bd490d35ed
|
Add support for Linux 5.11.x on Fedora
|
2021-08-23 15:09:10 -05:00 |
|
|
Grant Willcox
|
db5ac81ecf
|
Fix up mistakes bcoles pointed out and also add in a check to ensure we are only targetting x64 systems
|
2021-08-23 13:23:40 -05:00 |
|
|
kensh1ro
|
3bf8a5c1ba
|
Change Alloction from RWX to RW
|
2021-08-21 11:10:07 +03:00 |
|