cd081cd0e6
Fixes from code review
2022-11-02 14:04:42 +01:00
83d15c48d7
Add Password Manager Pro password recovery module
2022-11-02 14:04:42 +01:00
e83a7c5c6d
Update identify hash library and call
2022-11-01 17:33:14 -05:00
197b37751b
Land #17174 , add FLIR AX8 command injection module
2022-11-01 12:41:01 -05:00
c4c4e736d9
Land #17142 , Apache CouchDB Erlang RCE module CVE-2022-24706
2022-11-01 12:26:49 -05:00
f61136dd6d
Fixed powershell taget
2022-11-01 10:55:50 -05:00
757c0da639
Review updates
...
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com >
2022-11-01 10:55:20 -05:00
b31c0f6987
Added check method, refactored, updated docs
2022-11-01 10:54:27 -05:00
a0babb354a
Apache CouchDB Erlang module initial commit
2022-11-01 10:54:19 -05:00
c4c2c7c0c1
Beta commit, injection working
2022-11-01 10:54:12 -05:00
45ddcf02c9
Remove unused mix in, add low bound to check
2022-11-01 10:42:43 -05:00
2ed8dbc08d
Rubocop
2022-11-01 10:42:43 -05:00
4587691d64
Fixed module to work over SSL
2022-11-01 10:42:42 -05:00
3b645ad9f4
Moved get variables from uri to vars_get
2022-11-01 10:42:42 -05:00
c810a1f5aa
Update modules/exploits/linux/http/webmin_file_manager_rce.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-11-01 10:42:42 -05:00
ebf7496ee2
Update modules/exploits/linux/http/webmin_file_manager_rce.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-11-01 10:42:41 -05:00
0ede1ca94f
Update modules/exploits/linux/http/webmin_file_manager_rce.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-11-01 10:40:01 -05:00
d79515c3fe
Fix file cleanup
2022-11-01 10:40:00 -05:00
d1e1350ef9
Updated author
2022-11-01 10:40:00 -05:00
ad5b03ed96
Finished TODOs and added docs
2022-11-01 10:40:00 -05:00
9af689e130
draft module no docs
2022-11-01 10:40:00 -05:00
c400a97b63
beta commit
2022-11-01 10:39:59 -05:00
236f65a948
Land #17188 , Fix the Python Meterpreter for v3.1-3.3
2022-10-31 20:18:37 +00:00
52197f544f
Print the added account SID
2022-10-31 10:56:17 -04:00
b00f706c0b
Handle missing accounts when resolving SIDs
2022-10-31 10:56:17 -04:00
af9e4f0fa9
Update how sAMAccountName is looked up.
...
This tweaks how the objects are looked up by the sAMAccountName field.
The sAMAccountName can contain values not ending in $, so lookup what the
user specified first, and then check with the $ suffix if it's not
found.
2022-10-31 10:56:17 -04:00
fa7d677d45
Consolidate and improve LDAP error handling
2022-10-31 10:56:17 -04:00
2269fec099
Initial working RBCD module
2022-10-31 10:56:17 -04:00
31e2ab683c
Update samr_computer to show the SID when adding
2022-10-31 10:56:17 -04:00
603e710804
Update payloads sizes
2022-10-31 10:35:28 -04:00
3346ddec2c
Land #17155 , Remote mouse version updates
...
Also add a vulnerable download link to the docs
2022-10-27 16:32:23 -04:00
40fca92b38
Land #16871 , Add vcenter_secrets_dump post module
...
Merge branch 'land-16871' into upstream-master
2022-10-27 11:05:07 -05:00
06e0be0a3d
Land #17128 , Adds support to specify a shared directory to iterate through and highlight keywords
2022-10-27 16:07:12 +01:00
9e7c887347
Land #17187 , update aerohive_netconfig_lfi_log_poison_rce to support 10.0r8
2022-10-27 15:53:03 +01:00
2bd90079a2
Adds support to specify a shared directory to iterate through and highlighting keywords
2022-10-27 12:49:02 +01:00
0e72307d36
aerohive_version_fix
2022-10-27 13:33:18 +03:00
9c5d82e00f
Land #17147 , add Vargrant Breakout module
...
This PR adds a module that exploits a default
Vagrant shared folder to append a Ruby payload
to the Vagrant project Vagrantfile config file.
2022-10-26 17:11:03 -04:00
eee8f49695
Land #17176 , Python Meterpreter AES Constants
2022-10-26 16:29:28 -04:00
13baaad30e
Update cached payload sizes
2022-10-26 14:38:06 -04:00
154edfc6f8
Land #16979 , Add in support for LDAP type decoding
...
Add in support for GUIDs, Certificate Handling, and SIDs to ldap_query Module
2022-10-26 13:49:58 -04:00
01fa2e1041
Add Vagrant Synced Folder Vagrantfile Breakout module
2022-10-26 17:33:44 +11:00
35e4d829d8
Land #17164 , add THEME_DIR option to wp_crop_rce
2022-10-25 12:23:50 -05:00
7c64b0ba93
add option in documentation and add notes
2022-10-25 12:22:00 -05:00
3d8e18c1cb
updated module with code suggestions space-r7
2022-10-25 16:38:15 +00:00
51829c5ce9
Add in inital copy of ms_dtyp.rb library and use the definitions there to replace our custom unpack solutions with proper BinData approaches. Also rename some variables to use more appropriate names
2022-10-25 11:29:22 -05:00
982cfb97c2
Refactor: check for THEME_DIR as ternary
...
Suggested by @space-r7
2022-10-25 17:38:30 +02:00
8bc2e647eb
More updates
2022-10-25 10:14:41 -05:00
87aa5d5266
Handle attributes with whitespace better. Also handle isSingleValue correctly now for the certificate values we have at the moment
2022-10-25 10:12:37 -05:00
42463ac3b6
Rework logic so we can now only query once to retrieve the info on the attributes we are examining, instead of once per entry returned
2022-10-25 10:12:37 -05:00
78f5ae47d4
Fix up some improper practices and convert entry_list to a hash
2022-10-25 10:12:36 -05:00
Christophe De La Fuente