Commit Graph

4011 Commits

Author SHA1 Message Date
Brendan Coles 3da8fce9cf Add Microsoft Windows RRAS Service MIBEntryGet Overflow 2021-03-03 02:50:42 +00:00
Grant Willcox 2124ec25ba Rename files and update the exploit module title to better reflect its purpose. Also fix a minor RuboCop related change
Fix up documentation to reflect recent file renaming changes.
2021-02-26 14:32:37 -06:00
Grant Willcox 32ad2908d6 Update documentation file to point out this only grabs info on logged in users, and to fix some msftidy_docs.rb issues and clear up some explanations 2021-02-26 14:32:36 -06:00
RAMELLA Sébastien eb5f418fe2 fix. some rubocop recommendations 2021-02-26 14:32:21 -06:00
RAMELLA Sébastien a0f5da45e3 update module documentation 2021-02-26 14:32:20 -06:00
RAMELLA Sébastien 7eb91e76ab add. fortios path traversal (cve-2018-13379) 2021-02-26 14:32:13 -06:00
Grant Willcox 6d939c16ce Land #14783, Update KarjaSoft Sami FTP Server v2.0.2 USER Overflow module 2021-02-26 11:17:05 -06:00
Brendan Coles 743248d993 Update KarjaSoft Sami FTP Server v2.0.2 USER Overflow module 2021-02-25 20:53:30 +00:00
bwatters 7cdd41df76 Land #14544, RDP Web Login User Enumeration Auxiliary Module
Merge branch 'land-14544' into upstream-master
2021-02-24 16:10:41 -06:00
bwatters 18f6245637 Land #14648, Process Herpaderping evasion module
Merge branch 'land-14648' into upstream-master
2021-02-24 11:39:47 -06:00
Spencer McIntyre 8c1721b845 Land #14766, Add Apache Flink JobManager Traversal 2021-02-23 10:16:42 -05:00
Spencer McIntyre 1d5a6e4a0b Land #14771, Add Apache Flink JAR Upload Java Code Execution 2021-02-23 09:19:56 -05:00
Brendan Coles 8a6c6d18fb Add Apache Flink JobManager Traversal 2021-02-22 23:03:58 +00:00
Brendan Coles 69031fa91f Add Apache Flink JAR Upload Java Code Execution 2021-02-22 23:00:57 +00:00
Spencer McIntyre 4d20e382a0 Land #14784, Update ScadaBR Credentials Dumper module 2021-02-22 15:55:14 -05:00
Brendan Coles bc1ffec2c1 Update ScadaBR Credentials Dumper module 2021-02-22 20:32:55 +00:00
Tim W edea755096 Land #14740, CVE-2021-3156 Sudo LPE (AKA: Baron Samedit) Improvements 2021-02-22 17:48:33 +00:00
Christophe De La Fuente bbdaf23672 Land #14576, Wordpress Plugin: Chopslider 3 SQLi 2021-02-18 11:49:07 +01:00
k0pak4 9391480cb7 Update documentation with additional options and reference 2021-02-15 18:34:23 -05:00
Christophe De La Fuente ab9dd177b7 Add kernel file version check to avoid BSOD on Win10 x86 2021-02-15 21:10:10 +01:00
A Galway f227e82600 Land #14730, OBM Local PrivEsc to SYSTEM 2021-02-15 10:24:34 +00:00
Jeffrey Martin dbce3982fd Land #14067, [GSoC] Module for CVE-2019-13375, and PostgreSQL support for the library 2021-02-14 12:11:09 -06:00
h00die 28aa29fcab updates from review 2021-02-13 15:11:39 -05:00
Shelby Pace c1e2cfd9e7 Land #14744, add Klog Server unauth cmd injection 2021-02-12 11:40:57 -06:00
Brendan Coles bdc2041c83 Add Klog Server authenticate.php user Unauthenticated Command Injection 2021-02-12 17:07:52 +00:00
Spencer McIntyre 77cc799974 Fix a target version discrepancy in the CVE-2020-17132 docs 2021-02-11 18:04:03 -05:00
Spencer McIntyre cb8cd89a90 Update the module docs for cve-2021-3156 2021-02-11 11:57:05 -05:00
Christophe De La Fuente 88eaf97e79 Land #14607, Updates for Exchange ECP DLP Policy Exploit 2021-02-11 15:15:34 +01:00
Christophe De La Fuente 85b7e85d0b Land #14671, Micro Focus Multiple Products Authenticated RCE (CVE-2020-11853) 2021-02-09 18:24:57 +01:00
Pedro Ribeiro d884df96e2 fix msftidy docs 2021-02-09 14:37:35 +07:00
Pedro Ribeiro 79cac47ba3 add suggestions by cdelafuente-r7 2021-02-09 14:24:49 +07:00
firefart f9e8ac8f58 update more references 2021-02-08 17:48:54 +01:00
bwatters 434c54da33 Land #14715, CVE-2021-3156 Sudo LPE (AKA: Baron Samedit)
Merge branch 'land-14715' into upstream-master
2021-02-04 11:06:30 -06:00
Shelby Pace 87af571107 Land #14578, add wp abandoned cart sqli 2021-02-04 10:56:12 -06:00
Shelby Pace 4c4df29f25 change vulnerable version number 2021-02-04 10:50:13 -06:00
Spencer McIntyre 7281d00938 Implement feedback from PR review 2021-02-04 09:25:40 -05:00
Spencer McIntyre c33c08bae9 Add a check method using the version information 2021-02-03 18:16:13 -05:00
Spencer McIntyre c590d7b1bb Add module docs and be more permissive with Length formatting 2021-02-03 18:16:13 -05:00
Grant Willcox 8eb75b0c13 Land #14713, Add documentation for auxiliary/scanner/redis/redis_login 2021-02-03 10:47:22 -06:00
Grant Willcox 7f31ac9f2b Fix up issues in review so this can be landed 2021-02-03 10:44:59 -06:00
yogeshwarram 54f76fba21 Update redis_login.md 2021-02-03 15:29:02 +05:30
yogeshwarram 664feb8c8d Documentation for auxiliary/scanner/redis/redis_login module.
This commit adds a documentation for auxiliary/scanner/redis/redis_login module.
2021-02-02 14:04:56 +05:30
Pedro Ribeiro 90f8c1f7b9 add tested for 2019.11 too 2021-01-30 21:54:48 +07:00
Pedro Ribeiro 33edfaa8f6 mention that it has been tested on 2019.11 too 2021-01-30 21:47:31 +07:00
Grant Willcox a8b1bf17d0 Land #14593, OneDrive Sync Targets Enumeration Module 2021-01-29 10:20:01 -06:00
Grant Willcox 0a5646d59b Fix minor msftidy_docs.rb error 2021-01-29 10:19:33 -06:00
Grant Willcox fce3cf2ba2 Add in documentation updates and improve some areas of the module to remove false statements and clean up output and code styling 2021-01-29 10:17:48 -06:00
Pedro Ribeiro 137664818d add obm windows privesc sploit 2021-01-29 18:45:33 +07:00
Pedro Ribeiro b8fe5fabf8 fix typo another typo 2021-01-28 22:50:05 +07:00
Pedro Ribeiro 446316ef6c fix typo at the end of app list 2021-01-28 22:49:32 +07:00