 Brendan Coles
|
3da8fce9cf
|
Add Microsoft Windows RRAS Service MIBEntryGet Overflow
|
2021-03-03 02:50:42 +00:00 |
|
|
Grant Willcox
|
2124ec25ba
|
Rename files and update the exploit module title to better reflect its purpose. Also fix a minor RuboCop related change
Fix up documentation to reflect recent file renaming changes.
|
2021-02-26 14:32:37 -06:00 |
|
|
RAMELLA Sébastien
|
801164a244
|
fix. separator for creds collector.
|
2021-02-26 14:32:29 -06:00 |
|
|
RAMELLA Sébastien
|
eb5f418fe2
|
fix. some rubocop recommendations
|
2021-02-26 14:32:21 -06:00 |
|
|
RAMELLA Sébastien
|
b84909fe67
|
change parsing method
|
2021-02-26 14:32:20 -06:00 |
|
|
RAMELLA Sébastien
|
82c8b55be9
|
fix. remove call to eval and some minor change
|
2021-02-26 14:32:19 -06:00 |
|
|
RAMELLA Sébastien
|
7eb91e76ab
|
add. fortios path traversal (cve-2018-13379)
|
2021-02-26 14:32:13 -06:00 |
|
|
Grant Willcox
|
6d939c16ce
|
Land #14783, Update KarjaSoft Sami FTP Server v2.0.2 USER Overflow module
|
2021-02-26 11:17:05 -06:00 |
|
|
Brendan Coles
|
743248d993
|
Update KarjaSoft Sami FTP Server v2.0.2 USER Overflow module
|
2021-02-25 20:53:30 +00:00 |
|
|
dwelch-r7
|
319f15d938
|
Handle nil versions for rubygems 4
|
2021-02-25 16:47:49 +00:00 |
|
|
Grant Willcox
|
ff16c24d03
|
Land #14806, Rubocop recently landed modules continued
|
2021-02-25 10:36:50 -06:00 |
|
|
Alan Foster
|
b06c5c12aa
|
Rubocop recently landed modules continued
|
2021-02-25 14:13:40 +00:00 |
|
|
bwatters
|
7cdd41df76
|
Land #14544, RDP Web Login User Enumeration Auxiliary Module
Merge branch 'land-14544' into upstream-master
|
2021-02-24 16:10:41 -06:00 |
|
|
bwatters
|
18f6245637
|
Land #14648, Process Herpaderping evasion module
Merge branch 'land-14648' into upstream-master
|
2021-02-24 11:39:47 -06:00 |
|
|
bwatters
|
1acfa55dcd
|
rubocop -a fixes
|
2021-02-24 11:38:06 -06:00 |
|
|
Spencer McIntyre
|
8c1721b845
|
Land #14766, Add Apache Flink JobManager Traversal
|
2021-02-23 10:16:42 -05:00 |
|
|
Spencer McIntyre
|
f176f6b5de
|
Use CheckCode::Unknown when the HTTP response is nil
|
2021-02-23 10:16:20 -05:00 |
|
|
Spencer McIntyre
|
1d5a6e4a0b
|
Land #14771, Add Apache Flink JAR Upload Java Code Execution
|
2021-02-23 09:19:56 -05:00 |
|
|
Brendan Coles
|
8a6c6d18fb
|
Add Apache Flink JobManager Traversal
|
2021-02-22 23:03:58 +00:00 |
|
|
Brendan Coles
|
69031fa91f
|
Add Apache Flink JAR Upload Java Code Execution
|
2021-02-22 23:00:57 +00:00 |
|
|
Spencer McIntyre
|
4d20e382a0
|
Land #14784, Update ScadaBR Credentials Dumper module
|
2021-02-22 15:55:14 -05:00 |
|
|
Spencer McIntyre
|
4f089c3004
|
Base64 encode stored hash data for JtR
|
2021-02-22 15:52:12 -05:00 |
|
|
Brendan Coles
|
bc1ffec2c1
|
Update ScadaBR Credentials Dumper module
|
2021-02-22 20:32:55 +00:00 |
|
|
Tim W
|
edea755096
|
Land #14740, CVE-2021-3156 Sudo LPE (AKA: Baron Samedit) Improvements
|
2021-02-22 17:48:33 +00:00 |
|
|
Spencer McIntyre
|
9ef6bf384e
|
Update payload cached sizes
|
2021-02-19 15:35:36 -05:00 |
|
|
agalway-r7
|
8a339f54c1
|
Land #14734, updates and runs rubocop against recent modules
Rubocop recently landed modules
|
2021-02-19 13:48:47 +00:00 |
|
|
agalway-r7
|
275e9c5454
|
Land #14696, Further Zeitwerk lands to improve boot speed
Zeitwerk rex folder
|
2021-02-19 10:33:37 +00:00 |
|
|
Christophe De La Fuente
|
bbdaf23672
|
Land #14576, Wordpress Plugin: Chopslider 3 SQLi
|
2021-02-18 11:49:07 +01:00 |
|
|
k0pak4
|
8a4b6461e8
|
Final pylint updates to module
|
2021-02-17 08:16:11 -05:00 |
|
|
Alan Foster
|
5b3fde7735
|
Rubocop recently landed modules
|
2021-02-16 15:08:08 +00:00 |
|
|
Christophe De La Fuente
|
ab9dd177b7
|
Add kernel file version check to avoid BSOD on Win10 x86
|
2021-02-15 21:10:10 +01:00 |
|
|
adfoster-r7
|
b0758eb120
|
Land #14738, fix multi/manage/shell_to_meterpreter on macOS
|
2021-02-15 14:46:41 +00:00 |
|
|
A Galway
|
f227e82600
|
Land #14730, OBM Local PrivEsc to SYSTEM
|
2021-02-15 10:24:34 +00:00 |
|
|
Jeffrey Martin
|
dbce3982fd
|
Land #14067, [GSoC] Module for CVE-2019-13375, and PostgreSQL support for the library
|
2021-02-14 12:11:09 -06:00 |
|
|
h00die
|
28aa29fcab
|
updates from review
|
2021-02-13 15:11:39 -05:00 |
|
|
Brendan Coles
|
a1c316c679
|
msftidy: Fix exploit module checks for author and stack buffer overflow
|
2021-02-13 04:10:13 +00:00 |
|
|
Shelby Pace
|
c1e2cfd9e7
|
Land #14744, add Klog Server unauth cmd injection
|
2021-02-12 11:40:57 -06:00 |
|
|
Brendan Coles
|
bdc2041c83
|
Add Klog Server authenticate.php user Unauthenticated Command Injection
|
2021-02-12 17:07:52 +00:00 |
|
|
dwelch-r7
|
f6c3de5732
|
Land #14733, Add latest Rubocop rules
|
2021-02-12 16:18:13 +00:00 |
|
|
Spencer McIntyre
|
01593f21b4
|
Add the Ubuntu 19.04 target for CVE-2021-3156
|
2021-02-12 10:06:47 -05:00 |
|
|
Spencer McIntyre
|
20067d183e
|
Use single quotes for escaping arguments consistently
|
2021-02-12 08:59:38 -05:00 |
|
|
Alan Foster
|
bed7ae2c78
|
Add latest rubocop rules
|
2021-02-12 13:31:51 +00:00 |
|
|
Spencer McIntyre
|
f31c7846d2
|
Escape shell arguments even more thoroughly
|
2021-02-11 12:25:28 -05:00 |
|
|
Christophe De La Fuente
|
88eaf97e79
|
Land #14607, Updates for Exchange ECP DLP Policy Exploit
|
2021-02-11 15:15:34 +01:00 |
|
|
Brendan Coles
|
9cbf25347e
|
Land #14708, safari_proxy_object_type_confusion: Add offsets: 10.13.1 + 10.13.2
Add offsets for OSX 10.13.1 and 10.13.2
|
2021-02-11 13:17:53 +00:00 |
|
|
Tim W
|
40dd113d3b
|
fix whitespace
|
2021-02-11 12:43:47 +00:00 |
|
|
Tim W
|
0ab4213630
|
use & disown
|
2021-02-11 12:26:27 +00:00 |
|
|
Tim W
|
c5ba97100f
|
fix osx shell_to_meterpreter to use python reflection
|
2021-02-11 11:38:43 +00:00 |
|
|
Spencer McIntyre
|
944e8d572d
|
Register missing files for cleanup
|
2021-02-10 18:05:20 -05:00 |
|
|
Spencer McIntyre
|
6562f309ce
|
Handle whitespace in the target path
|
2021-02-10 17:40:42 -05:00 |
|