Commit Graph

24576 Commits

Author SHA1 Message Date
Jacob Robles 49c5a91fa7 Add linux target to weblogic_deserialize module 2018-08-28 11:51:04 -05:00
Jacob Robles 12e9cf6af7 Version output 2018-08-28 08:20:02 -05:00
Jacob Robles f92d2263d0 Add check to weblogic_deserialize module 2018-08-28 08:09:30 -05:00
William Vu 672dbb7acb Land #9364, HP PJL/SNMP CVE-2017-2741 exploit
Finally!
2018-08-23 22:47:09 -05:00
Wei Chen 2193dd662d Land #10504, add Foxit Reader UAF Module and Docs 2018-08-23 18:56:07 -05:00
Matthew Kienow ecc6c473d8 Add note about unauthenticated telnetd service 2018-08-23 15:50:41 -04:00
Jacob Robles 7ceae8df58 Remove '.exe' from share name 2018-08-23 14:38:46 -05:00
Matthew Kienow 56433c8ed2 Functional decomposition refactor and cleanup 2018-08-23 15:23:42 -04:00
Matthew Kienow 961769c346 Fix SNMP Null class comparison 2018-08-23 15:23:42 -04:00
Matthew Kienow 9c05f14a70 Modify SNMP null and error handling 2018-08-23 15:23:42 -04:00
Matthew Kienow 934bb38a44 Omit parentheses for no argument method calls 2018-08-23 15:23:41 -04:00
Matthew Kienow c5958c6e38 Restore original rport value 2018-08-23 15:23:41 -04:00
Matthew Kienow 70a0b9b1be Remove payload RequiredCmd and reformat info 2018-08-23 15:23:41 -04:00
Matthew Kienow dafa62dec4 Use string interpolation over concatenation 2018-08-23 15:23:40 -04:00
Matthew Kienow 7c03454a0b Remove unnecessary explicit msf/core require 2018-08-23 15:23:40 -04:00
Matthew Kienow b1a308f3ae Remove final debug output 2018-08-23 15:23:40 -04:00
Matthew Kienow e21ea4180f Clean up module and payload
Update module info, remove intermediate ARCH_ARMLE target, simply
options and add cleanup command so that the payload kills telnetd
2018-08-23 15:23:40 -04:00
Matthew Kienow 81f1555439 Rename module, exploits multiple printer models 2018-08-23 15:23:40 -04:00
Matthew Kienow df18e354e1 Add bind_busybox_telnetd payload, misc cleanup 2018-08-23 15:23:39 -04:00
Matthew Kienow c0c3e12c74 WIP - hp officejet pro exploit, enhance PJL lib 2018-08-23 14:53:54 -04:00
William Vu 578d2375d7 Add full disclosure for CVE-2018-15473 2018-08-22 14:49:13 -05:00
Jacob Robles fd6880d0d0 Add Foxit Reader UAF Module and Docs 2018-08-21 08:21:51 -05:00
William Vu 06582a00a0 Add module doc for ssh_enumusers
And update description in module.
2018-08-20 19:26:51 -05:00
Brent Cook 11fee8fa2c Land #10471, Import target DefaultOptions into the datastore 2018-08-20 17:30:27 -05:00
Brent Cook d1b8846f12 Land #10479, Add CVE-2018-15473 to ssh_enumusers 2018-08-20 17:14:58 -05:00
William Vu 819b8504e2 Add a little better randomization 2018-08-20 17:10:14 -05:00
William Vu b38a442bb0 Refactor once more with feeling
Also flesh out malformed-packet auth method. Let's not be lazy here. :-)
2018-08-20 16:25:32 -05:00
Brent Cook e8af2dd67c bool params are truthy, don't cast to a string 2018-08-20 15:53:49 -05:00
Auxilus 7c3810bbff fix match error in ppc simple nop generator
before changes:
```
msf5 nop(ppc/simple) > generate 10
[-] Sled generation failed: undefined method `match' for true:TrueClass.
```

After changes
```
msf5 nop(ppc/simple) > generate 10
buf =
"\x7c\xf6\xc2\x15\x7c\xf6\xc2\x15"
```
2018-08-20 23:16:32 +05:30
Tim W b8b48fd37a Land #10313, add linux autostart persistence module 2018-08-20 18:17:50 +08:00
Tim W 865898cba7 minor fixes 2018-08-20 17:51:41 +08:00
Tim W ac71bc86ee Land #10320, add module for persistence in /etc/rc.local 2018-08-19 15:30:50 +08:00
Tim W e38775b504 minor tweaks 2018-08-19 15:27:04 +08:00
William Vu 75403d7e05 Add testing note about logging 2018-08-17 20:20:12 -05:00
William Vu 7287779555 Make false positive check optional
I couldn't repro this with pubkey-only auth. It also goes to the log.
2018-08-17 20:05:04 -05:00
William Vu 8e3af2dcfc Add CVE-2018-15473 to ssh_enumusers 2018-08-17 18:48:44 -05:00
Eliott Teissonniere 63a58d3378 Code style random name 2018-08-17 14:24:28 +08:00
Eliott Teissonniere eb43e4c0bd Rework status printing 2018-08-17 14:24:28 +08:00
Eliott Teissonniere fc234b09c2 Fix HEREDOC not always supported 2018-08-17 14:24:28 +08:00
Eliott Teissonniere e82bde993f Cleanup indentation 2018-08-17 14:24:28 +08:00
Eliott Teissonniere c1d929f5fb Use an HEREDOC for multiline string 2018-08-17 14:24:28 +08:00
Eliott Teissonniere e4d6eb07ca Remove useless statement 2018-08-17 14:24:28 +08:00
Eliott Teissonniere 9962cbebfd Support perl payload 2018-08-17 14:24:28 +08:00
Eliott Teissonniere 6b4870389d Add autostart module 2018-08-17 14:24:28 +08:00
William Vu 5096eee2ec Land #10120, npm "marked" ReDoS module 2018-08-16 15:01:12 -05:00
William Vu 3c1befdacb Clean up module 2018-08-16 15:00:56 -05:00
William Vu 7e496ae067 Import target DefaultOptions into the datastore 2018-08-16 12:18:02 -05:00
William Vu 7a20d05fa6 Land #10456, known_hosts fix for SSH modules 2018-08-15 21:28:08 -05:00
William Vu 60c0272270 Make style consistent 2018-08-15 21:27:40 -05:00
Kevin Kirsche 45e0b53fc8 Fix spacing issue with rocket 2018-08-15 14:59:52 -07:00