 Spencer McIntyre
|
4c817ce1de
|
Land #17946, CVE-2023-21839 - Oracle Weblogic RCE
CVE-2023-21839 - Oracle Weblogic PreAuth Remote Command Execution via ForeignOpaqueReference IIOP Deserialization
|
2023-06-09 14:55:43 -04:00 |
|
|
Christophe De La Fuente
|
82c8b5418e
|
Land #17936, PaperCutNG Authentication Bypass with RCE
|
2023-06-07 15:05:51 +02:00 |
|
|
Christophe De La Fuente
|
991b9604e5
|
Add options to the documentation
|
2023-06-07 15:05:12 +02:00 |
|
|
catatonicprime
|
a03603d076
|
Documentation linting.
|
2023-06-06 15:35:20 +00:00 |
|
|
Grant Willcox
|
e78cf054b8
|
Add in EITW notes
|
2023-05-24 13:17:49 -05:00 |
|
|
Grant Willcox
|
84961e6e09
|
Add in documentation
|
2023-05-24 13:17:49 -05:00 |
|
|
catatonicprime
|
c43eaf86bc
|
Adding documentation.
|
2023-05-11 05:09:35 +00:00 |
|
|
Grant Willcox
|
9f0a6503b7
|
require.js is not the only way, account for this new discovery in code
|
2023-05-10 13:02:02 -05:00 |
|
|
Grant Willcox
|
5d4e68d36c
|
Add Metasploit payload example and remove message that may suggest successful exploitation occurred even when it didn't
|
2023-05-10 10:36:29 -05:00 |
|
|
Grant Willcox
|
1b8f1de7c8
|
Add in fixes from review, add archive of software, and use uri_encode_mode for encoding parameters.
|
2023-05-10 10:16:08 -05:00 |
|
|
Jack Heysel
|
07056a74bc
|
Pentaho Business Server Auth Bypass and SSTI
|
2023-05-09 14:24:51 -05:00 |
|
|
sfewer-r7
|
5d05754d9b
|
update the AKB URL to reference the changed CVE
|
2023-04-14 17:44:38 +01:00 |
|
|
sfewer-r7
|
e6211175b3
|
rename the files to the correct CVE
|
2023-04-14 15:52:13 +01:00 |
|
|
sfewer-r7
|
b5ea420760
|
On April 12 Adobe reclassified CVE-2023-26360 from an Improper Access Controll vuln to a Deserialization of Untrusted Data vuln. A private report has confirmed that CVE-2023-26359 is a similar yet seperate vuln, so I am changing the CVE associated with these two modules from CVE-2023-26359 to CVE-2023-26360 as we now beliee this is the correct CVE.
|
2023-04-14 15:49:10 +01:00 |
|
|
sfewer-r7
|
ae87f35944
|
fix two typos in documentation
|
2023-04-13 15:57:48 +01:00 |
|
|
sfewer-r7
|
375d9b34f1
|
make on_request_uri compatible with both command staget and teh generic java target
|
2023-04-11 14:25:07 +01:00 |
|
|
sfewer-r7
|
43fe41bea5
|
RCE exploit for CVE-2023-26359 and an auxiliary module for arbitrary file read via the same vuln.
|
2023-04-06 14:02:01 +01:00 |
|
|
space-r7
|
67ac2dc584
|
Land #17771, add monitorr file upload rce
|
2023-03-22 13:00:38 -05:00 |
|
|
h00die-gr3y
|
c5ed25cd6c
|
small update to documentation on vulnerable releases
|
2023-03-20 21:12:49 +00:00 |
|
|
h00die-gr3y
|
e3df74ee5b
|
Updates addressing review points of space-r7
|
2023-03-20 21:04:58 +00:00 |
|
|
Christophe De La Fuente
|
0df12fd694
|
Land #17754, Open web analytics 1.7.3 remote code execution
|
2023-03-17 10:15:33 +01:00 |
|
|
Christophe De La Fuente
|
daadb4f523
|
Land #17775 - Add exploit for Bitbucket env var RCE (CVE-2022-43781)
|
2023-03-16 11:01:07 +01:00 |
|
|
space-r7
|
8a76dab0bd
|
update line numbers
|
2023-03-15 13:24:33 -05:00 |
|
|
space-r7
|
22c05105d3
|
address review comments
reduces some code duplication, sets privileged to true,
and modifies documentation to reflect lhost / rhost opts
|
2023-03-15 11:18:03 -05:00 |
|
|
Pflegusch
|
3bf60a57ae
|
Fix typo
|
2023-03-15 01:54:36 +01:00 |
|
|
Pflegusch
|
cea8aa8e02
|
Update open_web_analytics_rce.md to work with latest code changes
|
2023-03-15 01:34:02 +01:00 |
|
|
space-r7
|
fddcae3d93
|
don't always create repo
|
2023-03-14 19:03:58 -05:00 |
|
|
Pflegusch
|
bb9e214282
|
Fix line too long in open_web_analytics_rce docs
|
2023-03-15 00:01:15 +01:00 |
|
|
Pflegusch
|
e160e51711
|
Fix typos, update docs with advanced option SearchLimit, implement SearchLimit into module
|
2023-03-14 23:29:55 +01:00 |
|
|
Pflegusch
|
3196a52bdf
|
fix msftidy_docs.rb issues
|
2023-03-14 21:43:07 +01:00 |
|
|
space-r7
|
4bb843fe70
|
add documentation, adjust method of getting ids
|
2023-03-13 15:31:41 -05:00 |
|
|
h00die-gr3y
|
015d79a4c2
|
added documentation
|
2023-03-13 18:05:08 +00:00 |
|
|
Pflegusch
|
ddd594ac62
|
Update example in docs for latest code changes
|
2023-03-11 17:26:21 +01:00 |
|
|
Pflegusch
|
85185633b7
|
Use single back ticks and 3 instead of 4 at the end
|
2023-03-09 16:58:04 +01:00 |
|
|
h00die-gr3y
|
fc711131a2
|
added MIME, added break in mixin and added link with installation instructions
|
2023-03-09 09:28:46 -06:00 |
|
|
Grant Willcox
|
deafceed00
|
Update documentation, library, and Gemspec from review
|
2023-03-09 09:28:27 -06:00 |
|
|
h00die-gr3y
|
dc8ebb722a
|
Added support for native PHP payloads and reengineered webshells
|
2023-03-09 09:28:03 -06:00 |
|
|
Pflegusch
|
14b5c08a62
|
Fix the double slash in the shell url
|
2023-03-09 14:28:15 +01:00 |
|
|
Pflegusch
|
ae7ca169fe
|
Use the same IP as in the example
|
2023-03-09 14:08:50 +01:00 |
|
|
Pflegusch
|
3847c410b0
|
Small changes to the open_web_analytics_rce documentation
|
2023-03-09 14:05:06 +01:00 |
|
|
Pflegusch
|
7b0a54bb56
|
Add the documentation for the module
|
2023-03-09 13:59:27 +01:00 |
|
|
Spencer McIntyre
|
a418bd9c65
|
Land #17638, Lucee Scheduled Job RCE
|
2023-03-02 08:57:19 -05:00 |
|
|
JBince
|
1245124afa
|
updated docs to reflect changes from smcintyre-r7
|
2023-02-28 19:58:39 -06:00 |
|
|
Spencer McIntyre
|
a916163b49
|
Cleanup files and fixup messages
|
2023-02-28 16:41:57 -05:00 |
|
|
JBince
|
8b03f2fda8
|
Reworked payload execution logic
|
2023-02-27 11:09:34 -06:00 |
|
|
JBince
|
ce9933fc4c
|
Feedback changes + rubocop & msftidy changes
|
2023-02-17 08:16:49 -06:00 |
|
|
JBince
|
a3a6ae9c4a
|
feedback fixes
|
2023-02-16 14:33:03 -06:00 |
|
|
Spencer McIntyre
|
ac9d60ce9e
|
Land #17281, Added module for CVE-2022-2992
Added module for CVE-2022-2992 - Gitlab Remote Command Execution via Github import
|
2023-02-14 16:57:29 -05:00 |
|
|
JBince
|
1dadd113dd
|
msftidy changes to documentation
|
2023-02-13 15:27:07 -06:00 |
|
|
JBince
|
9c3cfd8bdb
|
Added documentation, cleaned up functions, rubocop fixes
|
2023-02-13 15:19:45 -06:00 |
|