a76600f4a9
Land #16462 , add support for armle/aarch64 architectures
2022-05-03 15:48:50 +01:00
253cb8580a
Responded to comments added retry_until_true
2022-04-27 09:45:18 -07:00
266d3bb9ca
Apply suggestions from @bcoles code review
...
Co-authored-by: bcoles <bcoles@gmail.com >
2022-04-26 13:40:25 -07:00
ca0be9c145
Add WSO2 file upload RCE module
2022-04-26 12:29:12 -07:00
02d911e655
gdb_server_exec: Cleanup and add support for armle/aarch64 architectures
2022-04-25 19:25:06 +00:00
66fe338297
Move getsimplecms_unauth_code_exec.md documentation to http dir
2022-04-16 16:53:34 +00:00
211626e7ce
Fix the check method, add docs
2022-03-31 09:01:08 -04:00
42e0c027ab
Land #16248 , Added Apache APISIX RCE module
2022-03-07 09:47:04 -05:00
9ef50a2d23
Fixup typos
2022-03-04 12:34:14 -05:00
4d5716d891
Updated documentation
2022-03-04 02:21:42 +01:00
236efab669
Update documentation
...
Add referece to CVE-2022-24112
msftidy_docs
2022-03-03 02:20:56 +01:00
a6d33ea98e
Add module documentation
2022-03-01 12:54:17 +01:00
0081811c52
Land #16185 , Firefox CVE-2020-26950 use after free browser exploit
...
Merge branch 'land-16185' into upstream-master
2022-02-28 14:38:23 -06:00
579811418f
update documentation with note about Firefox 82.0.1
2022-02-26 12:35:38 +00:00
90a06a1cb9
fix docs
2022-02-16 08:37:01 +00:00
fb53ca0ac2
actually add support for Windows
2022-02-16 08:33:24 +00:00
6b64c6b393
Add module documentation
2022-02-08 15:29:11 +01:00
5bbe934db9
Add QEMU Monitor HMP 'migrate' Command Execution module
2022-02-07 17:48:27 +00:00
e2c91ebf30
Land #16010 , zabbix_script_exec improvements
...
This updates the zabbix_script_exec module to work with versions 5.0 and
newer as well as adds a new item-based execution technique.
2022-02-04 15:13:13 -05:00
ae278d0568
Cleanup some minor typos
2022-02-04 15:12:57 -05:00
8838d9cb66
Added timeout system, fixed a bug with TLS_PSK, linted
2022-02-04 04:01:23 -08:00
645ef5e71f
Fixed few bugs
2022-02-02 14:30:02 -08:00
de32cc0e97
Linted with Rubocop, factorized API call, fixed some grammmar
2022-02-01 13:29:30 -08:00
458d584f83
Add details to check codes and PR feedback
2022-01-21 09:40:23 -05:00
579627f5c7
Update docs, note OS X support
2022-01-20 10:47:11 -05:00
ba469a4b2c
Add version detection to the Unifi exploit
2022-01-20 09:26:48 -05:00
ef344d9d12
Add the Unifi Log4Shell RCE exploit
2022-01-19 17:51:31 -05:00
3f04b80d8b
Add vCenter Log4Shell docs
2022-01-13 14:50:28 -05:00
877bab6f2a
Land #15969 , Log4j2 HTTP Header Injection Exploit
2022-01-11 16:52:08 -05:00
7b64383040
Preemptively tweak references to ysoserial
2022-01-11 16:25:21 -05:00
53c2400be9
Added cleaning procedure + fixed few mistakes/error mesage, removed unused docs
2022-01-08 10:56:31 -08:00
ccc90b0330
Linted doc+module, added support for 6.x version, aded support for TLS and item RCE, improved payload management
2022-01-07 17:40:15 -08:00
3f15c9ecc1
Writeup the module docs
2022-01-07 17:30:39 -05:00
c6372ecdf1
more wp catch themes doc and error handling
2022-01-04 04:34:42 -05:00
7843b1bb99
Add files via upload
2022-01-02 00:30:07 +01:00
d8255978ac
Wordpress Plugin Catch Themes Demo Import cve-2021-39352
2021-12-24 11:56:51 -05:00
4e0fc5a4e5
Wordpress Plugin Catch Themes Demo Import cve-2021-39352
2021-12-21 20:04:09 -05:00
22ecedf135
wp_popular_posts_rce
2021-12-08 16:45:19 -05:00
4b7c5acc5b
Changed qx delimiter to # and added it to badchars. Defaulted to a staged payload
2021-11-03 10:51:37 -07:00
68cae90f45
Fix spelling error
2021-11-03 08:51:07 -07:00
116e2b0c1d
Enabled use of cmdstager::flavor printf. Tested against a CentOS install. Updated docs. Default to MeterpreterTryToFork and enabled autocheck
2021-11-03 08:49:09 -07:00
beb30f2b6a
Expanded cmdstager flavors. Removed bad variable name
2021-11-02 12:01:36 -07:00
10bb77ea4b
Addressed a wide variety of spelling and formatting issues. Added a reference. Registered TARGETURI. Randomized the image payload in check. Added additional options information to documentation.
2021-11-02 09:50:06 -07:00
b3a6d09b86
Fix wrong extension for documentation
2021-11-02 08:07:56 -07:00
3aadb6000b
Initial version of CVE-2021-22205 GitLab Unauth RCE
2021-11-02 01:46:51 -07:00
7fc38d1b50
Land #15754 , add apache2 path traversal modules
2021-10-22 12:40:57 -04:00
ced61f989b
Tweak the verbiage for clarity, update docs
2021-10-22 12:38:03 -04:00
2f86b332f5
Land #15733 , Add Module For Kubernetes Pod Authenticated Code Execution
2021-10-21 10:46:20 +01:00
1e1b1982b2
Improve image selection when creating a pod
...
The module will now iterate over identified image names by default and
also allows an explicit image name to be specified using the new
PodImage advanced option.
2021-10-20 15:52:23 -04:00
42ed1b6eef
Add Windows support to CVE-2021-26084 exploit
2021-10-14 16:58:04 -05:00
dwelch-r7