 Spencer McIntyre
|
1915b1395e
|
Land #15742, Added module for CVE-2021-40444
|
2021-12-08 17:46:02 -05:00 |
|
|
Spencer McIntyre
|
2f6710e02e
|
Remove the Not_Hosted target
It's not currently working and Metasploit should just handle everything
|
2021-12-08 17:22:44 -05:00 |
|
|
Spencer McIntyre
|
75deb69eab
|
Reformat the CVE-2021-40444 module docs
|
2021-12-08 16:45:22 -05:00 |
|
|
bwatters
|
852230c739
|
Fix bug brought in by importing Msf::Post::File
Split out javascript to a file and deobfuscate it
Update documentation for new targets
Fix other small suggestions
|
2021-12-08 10:36:27 -06:00 |
|
|
Christophe De La Fuente
|
389fd55952
|
Land #15808, Fix #15804 powershell read_file on Windows Server 2012
|
2021-12-07 11:59:11 +01:00 |
|
|
adfoster-r7
|
7dd5d5d3c2
|
Land #1585, Fix SMB SpiderShare Enum
|
2021-12-03 13:07:09 +00:00 |
|
|
bwatters
|
77812ae4c4
|
Update documentation for multiple binaries, add targeting data,
other bcoles improvements
|
2021-12-02 09:57:48 -06:00 |
|
|
bwatters
|
1f33305ce1
|
Add documentation
|
2021-12-01 14:54:48 -06:00 |
|
|
bwatters
|
999ffa36cc
|
Actually delete extra files
|
2021-11-30 10:10:30 -06:00 |
|
|
Tim W
|
7eab662674
|
update documentation
|
2021-11-30 06:30:59 +00:00 |
|
|
Tim W
|
1fbaca0de2
|
add documentation
|
2021-11-30 06:30:58 +00:00 |
|
|
bwatters
|
14064ff3f9
|
Update module description and remove extra module.
|
2021-11-29 15:23:02 -06:00 |
|
|
Brendan Coles
|
5fab1da09b
|
ms03_026_dcom: cleanup
|
2021-11-28 08:25:31 +00:00 |
|
|
William Vu
|
344bdacae4
|
Remove preferred payload
We'll add it back to Framework later.
|
2021-11-24 10:44:59 -06:00 |
|
|
William Vu
|
d2c322e875
|
Revert option name styling in module doc
Bug in our local renderer's styling. GitHub renders it just fine.
|
2021-11-23 19:05:26 -06:00 |
|
|
William Vu
|
053dc70782
|
Add words to module doc
|
2021-11-23 19:05:09 -06:00 |
|
|
William Vu
|
a8daed1e79
|
Add module doc
|
2021-11-23 19:05:09 -06:00 |
|
|
Spencer McIntyre
|
3175494084
|
Fix a module doc formatting issue
|
2021-11-23 09:00:10 -05:00 |
|
|
sjanusz
|
107dadf68c
|
Change readme file to show new module changes
|
2021-11-22 12:36:59 +00:00 |
|
|
Matthew Dunn
|
888a69b911
|
Update documentation with blog post link and SSO details
|
2021-11-21 22:35:15 -05:00 |
|
|
Grant Willcox
|
7f6d661ff7
|
Land #15866, Add Exploit For CVE-2021-38294 (Apache Storm Nimbus getTopologyHistory RCE)
|
2021-11-18 17:02:50 -06:00 |
|
|
Grant Willcox
|
725c5f8d8c
|
Add in another scenario into documentation and add additional detail to one setup step
|
2021-11-18 17:01:25 -06:00 |
|
|
Grant Willcox
|
a915c3ce5c
|
Add fixes for some of the issues raised during the review process on both the documentation and module side of things
|
2021-11-17 17:25:50 -06:00 |
|
|
Christophe De La Fuente
|
6c57ee376a
|
Land #15755, Azure Active Directory Login Scanner Module
|
2021-11-17 15:53:22 +01:00 |
|
|
Spencer McIntyre
|
a100cd77ae
|
Land #15858, Add exploit for CVE-2021-42237
|
2021-11-15 14:24:47 -05:00 |
|
|
Spencer McIntyre
|
0b3f95abca
|
Writeup the module docs and move the protocol code
|
2021-11-12 15:15:51 -05:00 |
|
|
space-r7
|
b6dcb03b45
|
Land #15843, add Jetty WEB-INF file disclosure
|
2021-11-12 11:31:27 -06:00 |
|
|
bwatters
|
4505d7e834
|
Land #15700, Add Aerohive NetConfig <= 10.0r8a RCE (CVE-2020-16152) module
Merge branch 'land-15700' into upstream-master
|
2021-11-11 17:03:54 -06:00 |
|
|
bwatters
|
5e670638f3
|
Add a line suggesting TryToFork on Meterpreter might prevent the hang after exploitation
|
2021-11-11 16:59:09 -06:00 |
|
|
Grant Willcox
|
8d55b16ade
|
Fix one more mistake and rename document and module to a more easy to find name
|
2021-11-11 16:42:58 -06:00 |
|
|
space-r7
|
f055429189
|
Land #15806, add BillQuick SQLi module
|
2021-11-11 11:51:19 -06:00 |
|
|
Grant Willcox
|
27310dc002
|
Add in exploit and documentation for CVE-2021-42237
|
2021-11-10 15:52:22 -06:00 |
|
|
Grant Willcox
|
3af93cbacc
|
Fix up changes from timwr's review so long
|
2021-11-09 10:36:50 -06:00 |
|
|
Grant Willcox
|
780a9370a2
|
First draft of code, documentation, and exploit DLL plus exploit code
|
2021-11-09 10:36:40 -06:00 |
|
|
space-r7
|
1dd26bca03
|
Land #15802, add OMIGOD LPE
|
2021-11-09 10:30:50 -06:00 |
|
|
RAMELLA Sébastien
|
38973510f7
|
update modules (auxiliary and exploit)
|
2021-11-09 15:18:58 +04:00 |
|
|
h00die
|
0fe49cce22
|
review comments
|
2021-11-09 04:04:16 -05:00 |
|
|
h00die
|
23ba4a1f3a
|
jetty updates
|
2021-11-08 14:09:43 -05:00 |
|
|
h00die
|
ea59e89cba
|
jetty web-inf file disclosure
|
2021-11-08 14:04:08 -05:00 |
|
|
h00die
|
e067535b72
|
billquick review updates
|
2021-11-06 06:29:56 -04:00 |
|
|
h00die
|
258f38090d
|
no more duplicate text
|
2021-11-05 15:04:33 -04:00 |
|
|
Christophe De La Fuente
|
836422f9ac
|
Land #15776, Wordpress automatic plugin aux module
|
2021-11-05 12:47:27 +01:00 |
|
|
h00die
|
b39196fd0f
|
review comments
|
2021-11-04 15:28:05 -04:00 |
|
|
Spencer McIntyre
|
6f4aa55022
|
Land #15816, GitLab Unauth Command Injection
|
2021-11-03 16:57:57 -04:00 |
|
|
Jake Baines
|
4b7c5acc5b
|
Changed qx delimiter to # and added it to badchars. Defaulted to a staged payload
|
2021-11-03 10:51:37 -07:00 |
|
|
Jake Baines
|
68cae90f45
|
Fix spelling error
|
2021-11-03 08:51:07 -07:00 |
|
|
Jake Baines
|
116e2b0c1d
|
Enabled use of cmdstager::flavor printf. Tested against a CentOS install. Updated docs. Default to MeterpreterTryToFork and enabled autocheck
|
2021-11-03 08:49:09 -07:00 |
|
|
kalba-security
|
728965b3c6
|
fix typos in docs
|
2021-11-02 20:04:06 -04:00 |
|
|
kalba-security
|
f778f5f00a
|
add cleanup, add new info and warning messages, update docs, small improvements
|
2021-11-02 19:58:16 -04:00 |
|
|
Jake Baines
|
beb30f2b6a
|
Expanded cmdstager flavors. Removed bad variable name
|
2021-11-02 12:01:36 -07:00 |
|