Jeffrey Martin
21a6a18d92
trade URI.encode & URI.escape for Ruby 3
...
Ruby 3 removed the `URI.escape` methods however access to
the a parse for the same RFC is stil available at `URI::DEFAULT_PARSER.escape`.
Per the Ruby forum [comment](https://bugs.ruby-lang.org/issues/17309#note-1 ) this should equal.
2021-11-22 14:11:03 -06:00
Spencer McIntyre
9fa65092d1
Switch to the new Rex stopwatch function
2021-11-16 10:12:57 -05:00
dwelch-r7
73e55fcaee
Land #15665 , Add Meterpreter compatibility metadata
2021-10-29 12:45:26 +01:00
William Vu
78ebc89106
Improve sleep timeout using science
2021-10-27 22:49:41 -05:00
William Vu
3c4bc600f7
Link to open() in perldoc
2021-10-27 19:31:03 -05:00
William Vu
c419ca04bd
Warn when LPORT isn't 443
2021-10-27 19:31:03 -05:00
William Vu
14421ed5f5
Refactor elapsed time calculation
2021-10-27 19:31:03 -05:00
William Vu
7bbf0305c0
Fix elapsed time calculation using monotonic clock
...
Hat tip @adfoster-r7.
2021-10-27 19:31:03 -05:00
William Vu
3f9b22dbb7
Add Sophos UTM CVE-2020-25223 exploit
2021-10-27 19:31:03 -05:00
wvu
64654a3134
Merge branch 'master' into suitecrm_log_file_rce
2021-10-22 22:11:51 -05:00
M. Cory Billington
e90a2a9274
Added CVE
2021-10-22 18:55:37 -05:00
William Vu
f270d3ef7a
Comment path traversals
2021-10-20 14:16:46 -05:00
William Vu
83500a17d4
Update vmware_vcenter_analytics_file_upload
2021-10-14 16:58:04 -05:00
William Vu
42ed1b6eef
Add Windows support to CVE-2021-26084 exploit
2021-10-14 16:58:04 -05:00
William Vu
262b5e09f0
Add VMware vCenter Server CVE-2021-22005 exploit
2021-10-06 16:43:57 -05:00
adfoster-r7
28eab4d871
Add Meterpreter compatibility metadata
2021-10-06 13:54:51 +01:00
space-r7
12af64c4d8
Land #15604 , add buffer overflow G-Cam module
2021-09-16 13:02:57 -05:00
Your Name
a2f83c22ba
Add Pattern Create
2021-09-16 08:22:57 +01:00
Spencer McIntyre
480dec9a1e
Land #15658 , Add module for CVE-2021-32682
2021-09-14 14:09:27 -04:00
space-r7
278807be98
check contents of json after attempted upload
2021-09-14 11:36:28 -05:00
adfoster-r7
1499b1988e
Land #15609 , Add Meterpreter compatibility commands
2021-09-13 15:21:03 +01:00
adfoster-r7
46718e3390
Run Rubocop layout rules on modules
2021-09-10 12:53:39 +01:00
space-r7
91ae50eb27
escapeshellcmd -> escapeshellarg
2021-09-09 17:28:05 -05:00
space-r7
0095613a94
add completed module and documentation
2021-09-09 16:58:40 -05:00
adfoster-r7
059e39a6f0
Specify meterpreter compatibility command requirements
2021-09-08 22:59:25 +01:00
William Vu
8c4e5d262c
Add Atlassian Confluence CVE-2021-26084 exploit
2021-09-08 06:57:31 -05:00
space-r7
80dc8b9502
add elfinder module
2021-09-03 18:26:18 -05:00
Your Name
41690d6e1d
Linting again
2021-09-02 17:33:57 +01:00
Your Name
f336f7a4d6
Removed global vars & Fixed linting
2021-09-02 17:30:18 +01:00
Grant Willcox
0e0e3bbcfb
Land #15603 , Add Geutebruck CVE_2021_335XX command injection module
2021-09-01 10:59:22 -05:00
adfoster-r7
ded8200396
Land #15537 , Add support for ruby 3
2021-09-01 10:30:54 +01:00
Grant Willcox
d83ede6306
Fix up some check method issues and some XML data validation issues identified during review
2021-08-31 18:25:01 -05:00
Your Name
5599929b6a
Fixed Randomization
2021-08-31 18:25:00 -05:00
Grant Willcox
0a57641aa4
Add in documentation and module code cleanness improvements and also make the output easier for readers to understand should something fail midway through.
2021-08-31 18:24:57 -05:00
Your Name
cd74e34e3c
Fixed Authors
2021-08-31 18:24:51 -05:00
Your Name
b5b0b3087a
Fixed References and Description
2021-08-31 18:24:50 -05:00
Your Name
56cde3eaba
Add Geutebruck CVE_2021_335XX command injections module
2021-08-31 18:24:14 -05:00
Your Name
690af9f956
Fixed CVE Number
2021-08-30 08:18:19 +01:00
Your Name
70f3f9d731
Fixed CVE Number
2021-08-28 11:33:42 +01:00
adfoster-r7
4a9a15e638
Run Rubocop layout rules on modules
2021-08-27 17:19:43 +01:00
Your Name
8d28dece69
Added Notes
2021-08-27 16:42:54 +01:00
Your Name
6a501a37ff
Add CVE-2021-33549 exploit for Geutebruck G-CAM
2021-08-27 01:28:26 +01:00
William Vu
521ca14773
Add Lucee Administrator CVE-2021-21307 exploit
2021-08-16 10:09:34 -05:00
Alan Foster
03400991af
Update uses of open ssl
2021-08-10 15:40:23 +01:00
Jack Heysel
29b193406e
Fix for file clean up in the Cisco Hyperflex file upload RCE module
2021-07-30 14:59:52 -04:00
William Vu
6a6c08c773
Fix edge case in method overloading
2021-07-12 20:29:56 -05:00
William Vu
d29532d4c4
Add VMware vCenter Server CVE-2021-21985 exploit
2021-07-12 13:07:05 -05:00
William Vu
6fbaecf919
Backport print changes to recent modules
2021-07-08 21:26:35 -05:00
William Vu
af986380d3
Fix CheckCode
...
It's closer to CheckCode::Appears than CheckCode::Vulnerable.
2021-07-06 22:22:27 -05:00
Shelby Pace
3c7d96695e
Land #15349 , add rConfig vendors auth rce
2021-06-24 10:43:18 -05:00