Commit Graph

239 Commits

Author SHA1 Message Date
Jacob Robles 6921b79890 Land #11089, Erlang cookie rce exploit module 2018-12-19 08:02:40 -06:00
Jacob Robles 5bfdc7009c Minor Doc Changes 2018-12-19 07:58:32 -06:00
Milton-Valencia bb758f9a61 I didn't forget msftidy I swear 2018-12-18 14:55:12 -06:00
Milton-Valencia 8a2a605a99 added targets 2018-12-18 14:50:57 -06:00
Milton-Valencia 2e26ceac8f added comments 2018-12-13 10:55:09 -06:00
Shelby Pace ae089ce573 Land #10960, add wp duplicator code inject module 2018-12-11 12:02:07 -06:00
Shelby Pace b82e3469a2 renamed module and doc 2018-12-11 11:59:19 -06:00
Milton-Valencia f6bfbddb8d twks 2018-12-09 15:59:58 -06:00
Milton-Valencia 15aaaa4f21 removed 0 just saw... 2018-12-09 15:39:27 -06:00
Milton-Valencia 2beddf1012 req changes 2018-12-09 15:01:09 -06:00
Julien Legras 2735c71bda Fixed typos, removed not working cleaning 2018-12-04 18:42:54 +01:00
Julien Legras 2b61c4e118 Fixes for PR 2018-11-29 15:02:03 +01:00
Shelby Pace 6712363bb5 Land #10737, add TeamCity XML-RPC exploit module 2018-11-27 14:59:37 -06:00
Shelby Pace 064c79a4ae note about cmd_stager flavor 2018-11-27 14:46:19 -06:00
Brendan Coles be6cfde921 Land #11015, Fix payload and console check for Xorg_privesc Linux targets 2018-11-25 04:51:27 +00:00
Aaron Ringo 1783617770 consolelock check updated to use id, payload upload changed, documentation updated, misc formatting 2018-11-24 15:10:21 -06:00
Brent Cook a59913434d Land #10916, Xorg SUID privesc 2018-11-21 19:46:11 -06:00
Jacob Robles 795aa3c99c Land #10828, git submodule url exec CVE-2018-17456 2018-11-14 12:39:13 -06:00
Julien Legras 5f9570cbcf Added WordPress Duplicator <= 1.2.40 and documentation 2018-11-14 16:39:42 +01:00
Aaron Ringo 4fc047db87 Added advanced option to check console lock on linux systems, default true & updated docs 2018-11-13 22:33:12 -06:00
Shelby Pace ac8932c144 update 9631 to a current branch 2018-11-13 15:15:25 -06:00
Aaron Ringo 538055c406 Initial documentation for Xorg Privesc Module
killed white spaces
2018-11-12 15:44:13 -06:00
Tim W 1e5f3f2f7b add documentation 2018-10-18 12:45:53 +08:00
William Vu 5b14d94957 Land #10671, struts2_namespace_ognl updates
There are still some outstanding concerns, but I want to unblock this.
2018-10-12 11:08:33 -05:00
Jacob Robles 8b955f8ec5 Land #10704, Navigate CMS Unauthenticated RCE 2018-10-04 06:44:21 -05:00
Dylan Pindur 11d9b44922 Add exploit module for TeamCity Agent XMLRPC 2018-10-03 18:33:10 +08:00
Jacob Robles 97729727d8 Minor modifications 2018-10-02 06:57:04 -05:00
Pyriphlegethon 2b86297138 Refactor 2018-09-27 11:16:54 +02:00
Pyriphlegethon 2d568f884e Add documentation for Navigate CMS Unauthenticated Remote Code Execution 2018-09-26 22:44:20 +02:00
Brent Cook 1607c2b890 Land #10428, Update Windows MySQL UDF files, add docs 2018-09-24 21:11:52 -05:00
asoto-r7 d981530f78 Update documentation with correct module name and detailed notes about Tomcat versions 2018-09-24 12:47:58 -05:00
Wei Chen 718aaca0f4 Land #10546, Add Apache Struts exploit: CVE-2018-11776 2018-09-07 14:54:23 -05:00
William Vu f34146b288 Add module doc 2018-09-05 19:57:15 -05:00
asoto-r7 da7a29f715 Documentation update 2018-08-31 13:57:41 -05:00
Jacob Robles e49435a766 Update weblogic module docs
Update the module docs to match the new name
of the module.
2018-08-31 06:00:41 -05:00
asoto-r7 b373dcc5d4 First draft of module and documentation for struts_namespace_rce against CVE-2018-11776 2018-08-28 16:53:26 -05:00
Jacob Robles 94e8cdac37 Move files to correct location 2018-08-28 12:38:54 -05:00
h00die d299831efe updated windows udf files and documentation 2018-08-07 14:50:47 -04:00
Jacob Robles 952ab801e8 Land #10060, vTiger CRM v6.3.0 Upload RCE 2018-07-30 12:32:24 -05:00
Jacob Robles fe9315dc89 Update module, Add documentation 2018-07-30 12:11:08 -05:00
Wei Chen 72d634b10b Update module and its documentation 2018-07-26 23:08:20 -05:00
Shelby Pace 6accca4181 added documentation and check method 2018-07-26 15:32:37 -05:00
Brendan Coles 19239c72c0 Update cmsms_upload_rename_rce check and docs 2018-07-19 18:26:42 +00:00
Wei Chen 28e3f3a5f0 Land #10327, Add CMS Made Simple Upload/Rename Authenticated RCE 2018-07-19 12:18:12 -05:00
Jacob Robles 1e004769ca CMS Made Simple Upload/Rename Authenticated RCE 2018-07-17 09:00:39 -05:00
William Vu 9a7c34e6e9 Land #10064, Claymore Dual Miner API RCE 2018-07-16 18:02:20 -05:00
Shelby Pace 1ded8ffb29 Land #10260, Add phpMyAdmin v4.8.1/4.8.0 LFI RCE 2018-07-11 11:10:52 -05:00
Shelby Pace 10cd6c99d9 Land #10231, Monstra Fileupload Exec 2018-07-10 14:23:15 -05:00
Shelby Pace 476a3a276f modified capitalization and wording 2018-07-10 14:12:02 -05:00
Jacob Robles fe1b17684a Add Targets and Session file inclusion 2018-07-06 12:17:26 -05:00