 Spencer McIntyre
|
6acdced3f0
|
Land #15506, Add evasion module syscall_inject
|
2021-09-22 10:17:13 -04:00 |
|
|
Spencer McIntyre
|
ca6f957de0
|
Land #15632, Winrm improvements
|
2021-09-21 16:43:24 -04:00 |
|
|
space-r7
|
fee037ac18
|
Land #15670, add opmanager sumpdu deser module
|
2021-09-20 12:15:26 -05:00 |
|
|
space-r7
|
327aefd3f5
|
add older path, fix typo
|
2021-09-20 12:14:42 -05:00 |
|
|
Spencer McIntyre
|
fd0f565095
|
Add automatic targeting for the CVEs
|
2021-09-16 15:15:52 -04:00 |
|
|
space-r7
|
12af64c4d8
|
Land #15604, add buffer overflow G-Cam module
|
2021-09-16 13:02:57 -05:00 |
|
|
Spencer McIntyre
|
56cd43a8b8
|
Land #15624, Add module for CVE-2020-27955
|
2021-09-15 14:54:19 -04:00 |
|
|
space-r7
|
c491687b78
|
Land #14631, add Jira user enum module
|
2021-09-15 12:37:17 -05:00 |
|
|
space-r7
|
c151937226
|
Update versions tested and vulnerable versions
|
2021-09-15 12:35:34 -05:00 |
|
|
Spencer McIntyre
|
480dec9a1e
|
Land #15658, Add module for CVE-2021-32682
|
2021-09-14 14:09:27 -04:00 |
|
|
Grant Willcox
|
cec3a4bc46
|
Land #15601, Add Geutebruck Post Exploitation Module
|
2021-09-14 10:03:21 -05:00 |
|
|
Spencer McIntyre
|
d82ed7d4a2
|
Write up the module docs
|
2021-09-14 09:10:44 -04:00 |
|
|
space-r7
|
91ae50eb27
|
escapeshellcmd -> escapeshellarg
|
2021-09-09 17:28:05 -05:00 |
|
|
space-r7
|
0095613a94
|
add completed module and documentation
|
2021-09-09 16:58:40 -05:00 |
|
|
Grant Willcox
|
7d3d57817f
|
Add in final changes so that we verify what we insert into the database more and only insert valid formats of data, and then also update the documentation accordingly
|
2021-09-08 17:27:53 -05:00 |
|
|
Grant Willcox
|
8057b63329
|
Add in documentation for various scenarios, fix up another database error, and also improve error handling of invalid responses from the server
|
2021-09-08 17:27:51 -05:00 |
|
|
Grant Willcox
|
e1cfc8d956
|
Bring documentation in line with standards and also update the module to fix a bug and to make it more conformant
|
2021-09-08 17:27:46 -05:00 |
|
|
Jeffrey Martin
|
67be4a6519
|
add zoomeye_search documentation
|
2021-09-08 17:27:44 -05:00 |
|
|
William Vu
|
5ed5bc3903
|
Add module doc
|
2021-09-08 09:37:02 -05:00 |
|
|
Jack Heysel
|
abbb994dab
|
Updated docs
|
2021-09-07 13:55:21 -04:00 |
|
|
Jack Heysel
|
7fe44583fe
|
Updated docs
|
2021-09-07 13:32:52 -04:00 |
|
|
bwatters
|
a7d99ebbfc
|
Land # 15611, ProxyShell Improvements
Merge branch 'land-15611' into upstream-master
|
2021-09-07 11:47:13 -05:00 |
|
|
Ashley Donaldson
|
78d6c26ec0
|
Make winrm_cmd module work with the changes
|
2021-09-06 23:36:59 +10:00 |
|
|
kensh1ro
|
1adde377ec
|
Replace XOR with CHACHA and remove unnecassary code
|
2021-09-06 12:23:46 +03:00 |
|
|
Jack Heysel
|
3c43bd409d
|
Added docs an Git User-Agent FP
|
2021-09-03 16:15:39 -05:00 |
|
|
Grant Willcox
|
e94d3bf260
|
Fix minor documentation change
|
2021-09-03 12:55:51 -05:00 |
|
|
Grant Willcox
|
e62f5e3011
|
Update documentation to reflect latest changes and update module to check files exist and bail if they don't, including when uploading a custom image
|
2021-09-03 12:55:45 -05:00 |
|
|
Grant Willcox
|
3334fce5e8
|
Fix up initial documentation concerns
|
2021-09-03 12:55:44 -05:00 |
|
|
Your Name
|
817904a916
|
Add Geutebruck Post Exploitation Module
|
2021-09-03 12:55:39 -05:00 |
|
|
Ashley Donaldson
|
142526904a
|
Moved command shell creation across to winrm_login, rather than winrm_cmd
|
2021-09-03 13:34:07 +10:00 |
|
|
Ashley Donaldson
|
41fb8dc885
|
Updated documentation for winrm_cmd
|
2021-09-02 20:52:20 +10:00 |
|
|
Grant Willcox
|
0e0e3bbcfb
|
Land #15603, Add Geutebruck CVE_2021_335XX command injection module
|
2021-09-01 10:59:22 -05:00 |
|
|
bwatters
|
ff50a94348
|
Land #15567, Add in Exploit for CVE-2021-3490
Merge branch 'land-15567' into upstream-master
|
2021-08-31 18:46:25 -05:00 |
|
|
Grant Willcox
|
0a57641aa4
|
Add in documentation and module code cleanness improvements and also make the output easier for readers to understand should something fail midway through.
|
2021-08-31 18:24:57 -05:00 |
|
|
Grant Willcox
|
30a7ee1bf2
|
Final very minor documentation fixes for better clarity
|
2021-08-31 18:24:56 -05:00 |
|
|
Your Name
|
56cde3eaba
|
Add Geutebruck CVE_2021_335XX command injections module
|
2021-08-31 18:24:14 -05:00 |
|
|
Grant Willcox
|
3bca3b0bcb
|
Update exploit code to use & after the command to execute as root so it executes in the background and doesn't hang Metasploit. Also update the logic of the code to check the response from executing the exploit and respond accordingly and update the documentation to match
|
2021-08-31 15:07:37 -05:00 |
|
|
Spencer McIntyre
|
8317a484a3
|
Land #15548, Overhaul SMB auth capture server
|
2021-08-30 10:01:55 -04:00 |
|
|
Spencer McIntyre
|
95015f0c2b
|
Update the ProxyShell module docs
|
2021-08-27 17:50:28 -04:00 |
|
|
Your Name
|
6a501a37ff
|
Add CVE-2021-33549 exploit for Geutebruck G-CAM
|
2021-08-27 01:28:26 +01:00 |
|
|
Tim W
|
6c0b90eabb
|
Land #15532, add module for CVE-2021-21300 and git mixins
|
2021-08-26 18:26:04 +01:00 |
|
|
Spencer McIntyre
|
674628e600
|
Land #15384, Improve Windows RDLL injection
|
2021-08-26 12:11:44 -04:00 |
|
|
Grant Willcox
|
6f9b06fb4b
|
Add in Manfred Paul's original blog post and chompie1337's original PoC to the list of links. Also add in a relatively detailed description of how to add in new targets to this exploit to the documentation in case that helps anyone down the line
|
2021-08-25 18:09:07 -05:00 |
|
|
space-r7
|
17da80163c
|
fix typo, set COUNT default to 3 as noted in docs
|
2021-08-25 14:17:47 -05:00 |
|
|
Grant Willcox
|
5a80e9678c
|
Address Spencer's comments and remove changes that don't directly use the DLL injection library API change
|
2021-08-24 16:34:01 -05:00 |
|
|
h00die
|
b9db47f873
|
wp_learnpress sqli
|
2021-08-23 19:45:45 -04:00 |
|
|
Grant Willcox
|
bd490d35ed
|
Add support for Linux 5.11.x on Fedora
|
2021-08-23 15:09:10 -05:00 |
|
|
Grant Willcox
|
db5ac81ecf
|
Fix up mistakes bcoles pointed out and also add in a check to ensure we are only targetting x64 systems
|
2021-08-23 13:23:40 -05:00 |
|
|
Grant Willcox
|
e46611cffb
|
Add in support for exploiting Fedora 32 with Linux kernel 5.10.12
|
2021-08-20 18:04:59 -05:00 |
|
|
Grant Willcox
|
75ae2b76f5
|
Add support for Fedora 32 Linux Kernel 5.9.8-100 and also fix an error where the wrong file was being used for Fedora 32 Linux Kernel 5.8.8.
|
2021-08-20 16:50:20 -05:00 |
|