 space-r7
|
197b37751b
|
Land #17174, add FLIR AX8 command injection module
|
2022-11-01 12:41:01 -05:00 |
|
|
Grant Willcox
|
c4c4e736d9
|
Land #17142, Apache CouchDB Erlang RCE module CVE-2022-24706
|
2022-11-01 12:26:49 -05:00 |
|
|
Grant Willcox
|
11095c8789
|
Documentation touchups
|
2022-11-01 11:43:01 -05:00 |
|
|
jheysel-r7
|
757c0da639
|
Review updates
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com>
|
2022-11-01 10:55:20 -05:00 |
|
|
Jack Heysel
|
434cb21d27
|
Docs update
|
2022-11-01 10:54:37 -05:00 |
|
|
Jack Heysel
|
b31c0f6987
|
Added check method, refactored, updated docs
|
2022-11-01 10:54:27 -05:00 |
|
|
Jack Heysel
|
a0babb354a
|
Apache CouchDB Erlang module initial commit
|
2022-11-01 10:54:19 -05:00 |
|
|
jheysel-r7
|
cf27c34917
|
Update documentation/modules/exploit/linux/http/webmin_file_manager_rce.md
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2022-11-01 10:40:01 -05:00 |
|
|
jheysel-r7
|
6a1af915f6
|
Update documentation/modules/exploit/linux/http/webmin_file_manager_rce.md
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2022-11-01 10:40:01 -05:00 |
|
|
Jack Heysel
|
d79515c3fe
|
Fix file cleanup
|
2022-11-01 10:40:00 -05:00 |
|
|
Jack Heysel
|
ad5b03ed96
|
Finished TODOs and added docs
|
2022-11-01 10:40:00 -05:00 |
|
|
Jack Heysel
|
3346ddec2c
|
Land #17155, Remote mouse version updates
Also add a vulnerable download link to the docs
|
2022-10-27 16:32:23 -04:00 |
|
|
Jack Heysel
|
9c5d82e00f
|
Land #17147, add Vargrant Breakout module
This PR adds a module that exploits a default
Vagrant shared folder to append a Ruby payload
to the Vagrant project Vagrantfile config file.
|
2022-10-26 17:11:03 -04:00 |
|
|
bcoles
|
01fa2e1041
|
Add Vagrant Synced Folder Vagrantfile Breakout module
|
2022-10-26 17:33:44 +11:00 |
|
|
space-r7
|
35e4d829d8
|
Land #17164, add THEME_DIR option to wp_crop_rce
|
2022-10-25 12:23:50 -05:00 |
|
|
space-r7
|
7c64b0ba93
|
add option in documentation and add notes
|
2022-10-25 12:22:00 -05:00 |
|
|
h00die-gr3y
|
3e78229fc0
|
updated module and documentation
|
2022-10-25 13:33:52 +00:00 |
|
|
Jack Heysel
|
3bf4bd7d7d
|
Land #17162, add RCE module for CVE-2022-35914
This PR adds an RCE module for the php code injection
present in GLPI versions 10.0.2 and below
|
2022-10-24 12:18:34 -04:00 |
|
|
h00die-gr3y
|
c1aed2d274
|
Fixed typos documentation
|
2022-10-21 13:20:37 +00:00 |
|
|
h00die-gr3y
|
1c393dc596
|
init commit module and documentation
|
2022-10-21 12:50:46 +00:00 |
|
|
Christophe De La Fuente
|
4cfbae63ac
|
Land #17114, Add exploit for CVE-2022-41352 (zimbra cpio)
|
2022-10-20 15:10:42 +02:00 |
|
|
Christophe De La Fuente
|
c89569d88c
|
Fix the doc to make msftidy_docs.rb happy
|
2022-10-20 14:33:40 +02:00 |
|
|
bwatters
|
73c879a854
|
Add docs
|
2022-10-19 17:59:54 -05:00 |
|
|
Ron Bowes
|
d8a5629cf4
|
Add Zimbra-installation notes
|
2022-10-19 10:05:20 -07:00 |
|
|
Ron Bowes
|
56d6f7747b
|
Remove some old code and update documentation with version info
|
2022-10-19 10:02:29 -07:00 |
|
|
Christophe De La Fuente
|
c43272985e
|
Land #17141, Zimbra Postfix priv esc
|
2022-10-19 10:33:37 +02:00 |
|
|
Christophe De La Fuente
|
fa67b6973d
|
Documentation fix to follow the template
|
2022-10-18 16:09:57 +02:00 |
|
|
Ron Bowes
|
dea3f72f6b
|
Resolve feedback - get rid of unnecessary directory, add CVE number, let the user choose the path
|
2022-10-17 15:00:56 -07:00 |
|
|
Heyder Andrade
|
26ed9bb053
|
Update documentation/modules/exploit/linux/http/fortinet_authentication_bypass_cve_2022_40684.md
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2022-10-17 22:49:57 +02:00 |
|
|
h00die
|
05b80631f3
|
update remote mouse version checks
|
2022-10-17 15:30:17 -04:00 |
|
|
h00die
|
08deb21ae3
|
update remote mouse version checks
|
2022-10-17 15:29:10 -04:00 |
|
|
Heyder Andrade
|
aece783cee
|
Added reference to user auto-detect method
|
2022-10-17 01:11:27 +02:00 |
|
|
Heyder Andrade
|
0b09e564f1
|
Improved documentation
|
2022-10-16 14:25:54 +02:00 |
|
|
Heyder Andrade
|
835b44ca7a
|
Added documentation
|
2022-10-16 13:42:21 +02:00 |
|
|
Ron Bowes
|
a2a2dcbf6f
|
Check in zimbra_postfix_priv_esc.rb
|
2022-10-14 13:21:41 -07:00 |
|
|
Grant Willcox
|
a3e32ffafa
|
Add TARGET 0 to documentation
|
2022-10-12 20:00:33 -05:00 |
|
|
Grant Willcox
|
e9f54aa5b8
|
Update documentation with better wording, and add randomization of parameter name to module along with cleanup code for deleting uploaded files
|
2022-10-12 19:16:52 -05:00 |
|
|
Jack Heysel
|
9652823393
|
Reverted check method to upload shell
|
2022-10-12 19:16:44 -05:00 |
|
|
Jack Heysel
|
3c27c8e5aa
|
Condensed payload, changed base64 encoding to hex
|
2022-10-12 19:12:35 -05:00 |
|
|
Jack Heysel
|
e4eac96b4b
|
Add Module for pfSense pfBlockerNG unauth RCE as root
|
2022-10-12 19:12:22 -05:00 |
|
|
Grant Willcox
|
f92d913f0c
|
Land #17116, Adding CVE-2022-22947 Spring Cloud Gateway RCE Exploit
|
2022-10-12 11:53:47 -05:00 |
|
|
Grant Willcox
|
487a26ee0f
|
Add in some missing info to examples, set default port, and update IOCs to note we include some IOCs in the logs
|
2022-10-12 11:19:47 -05:00 |
|
|
Ayantaker
|
9abaa00b9e
|
Adding some changes to documentation as per review comments
|
2022-10-12 11:36:35 -04:00 |
|
|
Ayantaker
|
e75438d0b2
|
Documentation fix and minor fixes
Fixed the documentation according to msftidy's suggestion and removed a few unessary parts of code
|
2022-10-11 18:17:52 -04:00 |
|
|
Grant Willcox
|
45aa09411e
|
First round of edits from review
|
2022-10-11 15:46:04 -05:00 |
|
|
JustAnda7
|
412a07df54
|
Fixed #16674
|
2022-10-07 14:35:21 -04:00 |
|
|
Ayantaker
|
c8cd6a7864
|
Adding CVE-2022-22947 Spring Cloud Gateway RCE Exploit
CVE-2022-22947 exploits Spring Cloud Gateway. The module has been tested with Spring Cloud gateway version 3.1.0 on Linux kali 5.18.0-kali5-amd64
|
2022-10-06 15:48:36 -04:00 |
|
|
Ron Bowes
|
48dd4693df
|
Add docs for CVE-2022-41352 (zimbra cpio), and fix some text
|
2022-10-06 10:46:48 -07:00 |
|
|
Jack Heysel
|
0145264046
|
Land #17093, add Enlightenment priv esc module
This PR adds a local priv esc for Enlightenment on Ubuntu
which exploit a simple cmd injection
|
2022-10-04 14:09:18 -04:00 |
|
|
space-r7
|
63af4e3702
|
Land #17067, add remote mouse rce
|
2022-10-04 11:40:33 -05:00 |
|