c03ee656a3
Merge remote-tracking branch 'upstream/master' into HEAD
2019-04-16 16:02:11 -05:00
6f92b98ba2
Update modules/exploits/multi/postgres/postgres_copy_from_program_cmd_exec.rb
...
Co-Authored-By: Greenwolf <48361984+Greenwolf@users.noreply.github.com >
2019-04-12 21:25:13 +01:00
2c3464c93a
Update modules/exploits/multi/postgres/postgres_copy_from_program_cmd_exec.rb
...
Co-Authored-By: Greenwolf <48361984+Greenwolf@users.noreply.github.com >
2019-04-12 17:49:20 +01:00
4989498722
Update postgres_copy_from_program_cmd_exec.rb
2019-04-12 17:48:32 +01:00
755da3482e
Update modules/exploits/multi/postgres/postgres_copy_from_program_cmd_exec.rb
...
Co-Authored-By: Greenwolf <48361984+Greenwolf@users.noreply.github.com >
2019-04-12 17:43:19 +01:00
7daa52af4f
Update modules/exploits/multi/postgres/postgres_copy_from_program_cmd_exec.rb
...
Co-Authored-By: Greenwolf <48361984+Greenwolf@users.noreply.github.com >
2019-04-12 17:42:51 +01:00
e057c7e129
Update modules/exploits/multi/postgres/postgres_copy_from_program_cmd_exec.rb
...
Co-Authored-By: Greenwolf <48361984+Greenwolf@users.noreply.github.com >
2019-04-12 17:42:37 +01:00
5c68ad5a13
Update postgres_copy_from_program_cmd_exec.rb
2019-04-12 11:52:15 +01:00
11385ae29a
Update postgres_copy_from_program_cmd_exec.rb
2019-04-08 00:19:55 +01:00
ddbd7ba080
Case insensitive match
2019-04-01 18:58:14 +00:00
592cc6cc2d
Update postgres_copy_from_program_cmd_exec.rb
2019-03-27 10:40:14 +00:00
3c66b4fad2
Update postgres_copy_from_program_cmd_exec.rb
2019-03-26 20:22:55 +00:00
242f48744e
Update postgres_copy_from_program_cmd_exec.rb
2019-03-26 20:18:50 +00:00
d9fc7af68e
Fix version detection
2019-03-26 20:17:34 +00:00
4ef10013db
COMMAND removed
2019-03-26 18:59:52 +00:00
0d6cbc90c5
Update postgres_copy_from_program_cmd_exec.rb
2019-03-26 18:54:20 +00:00
91e869a970
Update postgres_copy_from_program_cmd_exec.rb
2019-03-24 22:48:42 +00:00
3b0f399730
Update postgres_copy_from_program_cmd_exec.rb
2019-03-24 22:44:31 +00:00
55939a64a0
Update modules/exploits/multi/postgres/postgres_copy_from_program_cmd_exec.rb
...
Co-Authored-By: Greenwolf <48361984+Greenwolf@users.noreply.github.com >
2019-03-24 19:32:29 +00:00
74464a2087
Update postgres_copy_from_program_cmd_exec.rb
2019-03-24 18:17:43 +00:00
3c0a9d0748
Update postgres_copy_from_program_cmd_exec.rb
2019-03-24 15:37:10 +00:00
f14b213725
Update modules/exploits/multi/postgres/postgres_copy_from_program_cmd_exec.rb
...
Co-Authored-By: Greenwolf <48361984+Greenwolf@users.noreply.github.com >
2019-03-24 15:36:25 +00:00
27b3717add
Update postgres_copy_from_program_cmd_exec.rb
2019-03-24 15:35:59 +00:00
567be6fa11
Update modules/exploits/multi/postgres/postgres_copy_from_program_cmd_exec.rb
...
Co-Authored-By: Greenwolf <48361984+Greenwolf@users.noreply.github.com >
2019-03-22 11:18:07 +00:00
00cf0a7bea
Update postgres_copy_from_program_cmd_exec.rb
2019-03-21 14:23:00 +00:00
91758cd94b
Update postgres_copy_from_program_cmd_exec.rb
2019-03-21 11:11:03 +00:00
98638b6000
Update postgres_copy_from_program_cmd_exec.rb
2019-03-21 11:09:57 +00:00
03775228fe
Update and rename postgres_cmd_execution_nine_three.rb to postgres_copy_from_program_cmd_exec.rb
2019-03-21 11:08:53 +00:00
f651836a20
final suggested fixes to module
2019-03-21 10:24:47 +00:00
9c4b9239e5
Update postgres_cmd_execution_nine_three.rb
2019-03-21 10:08:56 +00:00
32bf2e134f
Fixes suggested by bcoles
2019-03-21 10:08:04 +00:00
7b8f59d7bc
Update modules/exploits/multi/postgres/postgres_cmd_execution_nine_three.rb
...
Co-Authored-By: Greenwolf <48361984+Greenwolf@users.noreply.github.com >
2019-03-21 09:33:29 +00:00
7e91235551
Adding new Postgres_cmd_execution module
...
PostgreSQL from 9.3 to latest has functionality allowing the database superuser & users in the 'pg_read_server_files' group to execute OS commands.
Explanation:
https://medium.com/greenwolf-security/authenticated-arbitrary-command-execution-on-postgresql-9-3-latest-cd18945914d5
This is my first run through of a Metasploit module so I would appreciate anyone helping me clean it up. It currently works on OSX & Linux by providing a cmd stager (like cmd/unix/reverse_perl), and on windows by first starting up a PowerShell download cradle, then putting the command in the COMMAND parameter. It feels a little hacky though 😁
2019-03-20 17:38:12 +00:00
6300758c46
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
ef826b3f2c
OCD - print_good & print_error
2017-07-19 12:48:52 +01:00
64452de06d
Fix msf/core and self.class msftidy warnings
...
Also fixed rex requires.
2017-05-03 15:44:51 -05:00
7d44bd5ba4
Clean up module
2016-09-06 23:30:58 -05:00
015b790295
Added default rport.
2016-09-07 14:24:07 +10:00
6b4dd8787b
Fix #6764 , nil SQL error in lib/msf/core/exploit/postgres
...
Fix #6764
2016-04-08 15:20:04 -05:00
28875313be
Change class name to MetasploitModule
2016-04-08 14:27:52 -05:00
138e48b202
Fix vuln_version?
2016-02-22 00:39:44 +08:00
53a52fafd5
make code to be readable / rebuild / testing
2016-02-22 00:34:49 +08:00
3e22de116f
Changes to fix peer and style as recommended by jhart-r7.
2016-02-20 13:53:32 -08:00
b049debef0
Fixes as recommended in the PR discussion.
2016-01-28 23:29:01 -08:00
436ea85b18
Further cleanup and fixes
2016-01-05 21:11:08 -08:00
5c9c27691e
Execute commands on postgres through built-in functionality
2016-01-01 04:26:20 -08:00
2fd796a699
Execute commands on postgres through built-in functionality
2016-01-01 03:51:00 -08:00
814bf2a102
Execute commands on postgres through built-in functionality
2016-01-01 02:43:56 -08:00
fa3431c732
Pushing now. Still working on it.
2015-12-26 17:53:52 -05:00
William Vu