Commit Graph

517 Commits

Author SHA1 Message Date
Jeffrey Martin 310ee3b46b add advanced force to rompager 2019-05-21 15:52:32 -05:00
Jacob Robles 5559de2458 Update documentation 2019-04-15 07:06:27 -05:00
Jacob Robles 51cb4358d6 Randomize check number 2019-04-12 14:47:34 -05:00
Jacob Robles 236a3ee2f5 Rename files 2019-04-11 07:04:57 -05:00
Jacob Robles 91fec97cd7 Update run logic, fix create_credential usage 2019-04-11 06:54:19 -05:00
Jacob Robles 54abfcbc2c Update check logic 2019-04-11 06:21:40 -05:00
Jacob Robles 1b2b752bef Remove rescue that is handled in HttpClient mixin 2019-04-11 06:20:48 -05:00
Jacob Robles 9385fbc3b7 Change date format 2019-04-11 06:18:52 -05:00
Synacktiv e9dd2f4f06 Store the whole JSON response 2019-04-09 13:59:44 +02:00
Synacktiv b2422ab661 Remove use of service_details 2019-04-09 13:45:17 +02:00
Synacktiv 3d51fdb003 Improve send_sql_request 2019-04-09 13:42:43 +02:00
Synacktiv ab1926b7ee Create wp_google_maps_sql_injection.rb 2019-04-08 10:50:41 +02:00
Brendan Coles 24f807490f revisionism 2019-01-10 19:19:14 +00:00
Jacob Robles 3de07f1bff Add Notes metadata and warning 2018-11-29 06:35:37 -06:00
Jacob Robles bfaa6cb416 Add module suggestion 2018-11-29 06:23:45 -06:00
Jacob Robles 6845f44a2e Logic... 2018-11-28 20:26:27 -06:00
Jacob Robles 2864c30965 Fix fail_with issue 2018-11-28 20:18:03 -06:00
Jacob Robles e142f5716e Update documentation 2018-11-28 19:08:01 -06:00
Jacob Robles 1af7cf2b3b Update print statements 2018-11-28 18:03:55 -06:00
Jacob Robles c4959da77f Email validation and user registration 2018-11-28 17:56:55 -06:00
Jacob Robles 9c0c9b3ba9 Use warnings when changing config options 2018-11-28 17:44:02 -06:00
Jacob Robles 43cef24f6b Fix version check 2018-11-28 17:43:33 -06:00
thomas.labadie 11a2fa7f0d Space at EOL removed from description 2018-11-13 00:23:21 +01:00
thomas.labadie 9d1554498d WP GDPR Compliance plugin exploit - privsec to admin registering 2018-11-12 23:33:47 +01:00
Brendan Coles 02c916b1b4 Update modules/auxiliary/admin/http/tomcat_utf8_traversal.rb 2018-10-19 04:16:26 +11:00
Patrick Webster 175e5e5adf Added module TARGETURI support. 2018-10-19 03:55:45 +11:00
Rob 6f5a8f8f42 Fix outdated metadata 2018-10-01 18:59:09 +01:00
William Vu 4c036e70c1 Fix http://seclists.org links to https://
I have no idea how this happened in my own code. I was seeing https://.
2018-09-15 18:54:45 -05:00
William Vu 6df235062b Land #10505, post-auth and default creds info 2018-08-24 18:08:15 -05:00
Brent Cook 51c024982c Land #8914, refactor auxiliary/admin/http credential storage 2018-08-24 13:18:32 -05:00
Brent Cook 0141fc109d don't backtrace if there is not a response 2018-08-24 13:17:06 -05:00
Wei Chen 2780ae6ba9 Update false negatives 2018-08-21 08:50:26 -05:00
asoto-r7 1a3a4ef5e4 Revised 88 aux and exploit modules to add CVEs / references 2018-07-12 17:34:52 -05:00
Wei Chen aff39e65d5 Update missing CVE references for auxiliary modules
Based on existing references such as BID, OSVDB, blog posts, etc
2018-07-08 19:00:11 -05:00
Jan Rude 567e2dbc7e Update telpho10_credential_dump.rb
Current version still vulnerable, developer ignores mails. It seems like this is going to be a 'won´t fix'
2018-05-23 09:32:41 +02:00
Wei Chen f9a804e7d8 Bring the PR up to date 2018-04-23 08:52:05 -05:00
William Vu 1f31bcd26f Update telpho10_credential_dump 2018-03-27 14:57:57 -05:00
Jacob Robles ba0d990273 Documentation added and Error Checks 2018-03-15 10:46:08 -05:00
Jacob Robles 9e23997c3d Added Error Handling 2018-03-14 08:16:17 -05:00
Jacob Robles 1d51cf6d24 Implement Suggested Changes 2018-03-14 06:15:49 -05:00
Jacob Robles 64a51c1bd7 Save Credentials and IP 2018-03-13 08:47:08 -05:00
Mzack9999 5ee50c5fab Username and password reported as credentials 2018-03-12 07:01:03 -05:00
Mzack9999 3d6af4c7ee Removed mail from author section 2018-03-12 07:01:03 -05:00
Mzack9999 b0ed8c4702 code cleanup 2018-03-12 07:01:03 -05:00
Mzack9999 7b781d53c9 Small code refactoring, added verbose output 2018-03-12 07:01:03 -05:00
Mzack9999 fe89e2d391 Corrected check method, warning in case of absence of news and TARGETURI parameter 2018-03-12 07:01:03 -05:00
Mzack9999 f09d9a8994 Solved msftidy.rb issues 2018-03-12 07:01:02 -05:00
Mzack9999 dbba27cc97 Fixed minor issues and added automatic detection of Patten1/Pattern2 2018-03-12 07:01:02 -05:00
Mzack9999 63444a2c43 Corrected wrong label in password hash message 2018-03-12 07:01:02 -05:00
Mzack9999 4a40f40c14 Typo3 News Module Sql Injection exploit 2018-03-12 07:00:45 -05:00