5a40c6dc00
move config_changes
2020-07-27 15:35:05 -04:00
bf4d0bf6ee
Land #13828 , add Zentao Pro rce
2020-07-22 09:42:11 -05:00
be95c0e17e
include autocheck
2020-07-22 09:40:25 -05:00
6c066a97ed
add bcoles suggestions
2020-07-22 09:39:17 -05:00
368adc26ef
Update zentao_pro_rce.rb
2020-07-17 18:12:27 -04:00
eb863048f0
Land #13741 , CVE-2020-5741: Plex rce on Windows
...
Merge branch 'land-13741' into upstream-master
2020-07-16 10:20:50 -05:00
9c32b45ca2
remove CheckCode returns in login
2020-07-15 20:06:15 -05:00
637b9ab51d
Add CVE-2020-7361 reference
2020-07-15 15:40:51 -05:00
2d3588c0ad
Add suggestions from code review
2020-07-13 12:51:57 -04:00
1f631e20ad
Add zentao_pro_rce Windows exploit and docs
2020-07-08 15:13:45 -04:00
456bf6b948
update escapes
2020-07-07 01:17:26 -04:00
89332d0056
native python for plex unpickle
2020-07-03 19:37:18 -04:00
b841246536
Update autocheck to use prepend instead of include, add ForceExploit functionality
2020-06-30 11:40:46 +01:00
a99a3c2d75
working albumn_name length thanks to acammack
2020-06-30 00:28:57 -04:00
94cc286689
update docs and 401 handling code
2020-06-24 21:05:23 -04:00
fceb96e659
Land #13608 , update elog calls to be consistent across
2020-06-23 09:47:01 +01:00
1a2bf98222
creates standard elog & updates exisiting usages
2020-06-22 12:48:39 +01:00
533bed6b51
pre review updates
2020-06-22 06:30:44 -04:00
9defe33d9a
docs and working module
2020-06-20 00:06:46 -04:00
9f424a8cbb
cleanup getting through it
2020-06-19 22:59:19 -04:00
40e6551b8b
works with cmd payload calc
2020-06-19 21:16:55 -04:00
c2c931030f
review comments
2020-06-17 11:47:11 -04:00
655a323467
Add CVE-2020-7356 for Cayin xPost
2020-06-17 09:57:29 -05:00
aec1f77b70
wip
2020-06-10 20:42:22 -04:00
b5c90ea20c
xpost working
2020-06-09 13:07:00 -04:00
d6aea635c7
Update authors in Netsweeper/myLittleAdmin modules
...
Edits for accuracy and precision.
2020-05-22 17:05:12 -05:00
afe7ef5d9a
Bump WfsDelay for first exploit attempt
2020-05-22 09:32:22 -05:00
e471efa399
Whitelist :certutil and :vbs CmdStagers
...
These worked for @smcintyre-r7 on Windows Server 2019.
2020-05-22 09:24:16 -05:00
16886fa41e
Move generate_viewstate_payload to mixin
2020-05-21 18:37:13 -05:00
d1a07e9403
Use ViewState mixin in module
2020-05-21 18:37:13 -05:00
11030dff84
Add CVE references (they weren't there before)
2020-05-21 18:12:57 -05:00
889a4cd6e0
Add Plesk/myLittleAdmin ViewState deserialization
2020-05-21 18:12:57 -05:00
12d4ad68e3
Fix things in ThinkPHP and ManageEngine exploits
...
Current pattern is print_good instead of vprint_good for this particular
message directly or indirectly called by execute_command.
CmdStagerFlavor is checked at the top level, but it is also checked per
target. Moving this to where it's more appropriate.
2020-05-20 22:47:03 -05:00
655088bb0d
Fix punctuation typo in exchange_ecp_viewstate
2020-05-20 09:47:11 -05:00
30b17c6323
Remove some whitespace for msftidy compliance
2020-05-04 10:14:00 -04:00
7fb17ecf17
Update some module metadata for the Kentico RCE exploit
2020-05-04 10:12:21 -04:00
c128a3ba92
Add CmdStager and Powershell targets to the Kentico RCE exploit
2020-05-04 10:07:10 -04:00
60b83d536e
Update modules/exploits/windows/http/kentico_staging_syncserver.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2020-05-04 09:26:14 -04:00
c5adcbfd43
Update modules/exploits/windows/http/kentico_staging_syncserver.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2020-05-04 09:26:13 -04:00
0679f1b317
Update modules/exploits/windows/http/kentico_staging_syncserver.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2020-05-04 09:26:13 -04:00
376c61bc46
Added exploit module kentico_staging_syncserver.
2020-05-04 09:26:13 -04:00
e5857d5544
Comments for the comment god
2020-04-27 20:58:39 -05:00
3e9f7d5f0a
Comment the absolute path prepended to traversal
2020-04-27 20:57:02 -05:00
f18ec9929b
Remove directory traversal prefix altogether
2020-04-27 20:23:29 -05:00
1318faa992
Clarify the quote is from the vendor's advisory
2020-04-27 16:53:34 -05:00
cefeb9ffde
Randomize dir in desktopcentral_deserialization
...
Also apply RuboCop.
2020-04-27 16:13:22 -05:00
af239303d2
Land #13257 , .NET Deserialization Library Improvements
2020-04-27 13:05:38 +02:00
e248e2ed43
Consolidate CmdStager flavors to symbols
...
As per the API. Strings are fine, but they're supposed to be symbols.
2020-04-15 15:47:51 -05:00
6523dd81c9
Add comment clarifying build number
2020-04-15 15:47:51 -05:00
3aa95f98eb
Move RPORT back to where I prefer it
...
It was next to SSL before because I wanted to indicate the port was SSL.
2020-04-15 15:47:51 -05:00
h00die