da3ca9eb90
update some documentation
2017-08-03 17:09:44 -05:00
67dddd2402
Typo reported by @nixawk
2017-08-02 15:47:21 -05:00
3229320ba9
Code review feedback from @nixawk
2017-08-02 15:46:51 -05:00
565a3355be
CVE-2017-8464 LNK Remote Code Execution Vulnerability
...
This module exploits a vulnerability in the handling of Windows
Shortcut files (.LNK) that contain a dynamic icon, loaded from a
malicious DLL.
This vulnerability is a variant of MS15-020 (CVE-2015-0096). The
created LNK file is similar except in an additional
SpecialFolderDataBlock is included. The folder ID set in this
SpecialFolderDataBlock is set to the Control Panel. This is enought to
bypass the CPL whitelist. This bypass can be used to trick Windows into
loading an arbitrary DLL file.
2017-08-02 15:46:30 -05:00
7c55cdc1c8
fix some module documentation
...
3 modules got documentation landed in the wrong spot. This also fixes a few
typos and improves formatting.
2017-07-23 07:46:52 -07:00
6bb745744b
Land #8471 , Add VICIdial user_authorization Unauthenticated Command Execution module
2017-07-21 15:57:08 -05:00
ffad0d1bbf
Land #8559 , Ipfire oinkcode exec
2017-07-19 14:31:18 -05:00
8f6cac9c37
Land #8652 , rpc console write exploit
...
lands pr for the metasploit rpc console write exploit
2017-07-14 14:47:35 -05:00
e3f95954ba
Minor doc update.
2017-07-07 16:54:56 -05:00
95ba5d61ce
Move documentation to correct folder
2017-07-07 16:54:56 -05:00
8e2ff7a4c5
Add command stager and code cleanup
2017-07-07 16:54:56 -05:00
f4820d24fb
add a few more AKA references
2017-07-06 22:43:46 -05:00
baff473cae
Add Metasploit RPC Console Command Execution module
2017-07-05 08:48:35 +00:00
a2602bf514
Land #8600 , Add GoAutoDial 3.3 RCE Command Injection / SQL injection module
2017-06-30 17:32:51 -05:00
6349026134
Land #8442 , Exploit module for Backup Exec Windows Agent UaF
2017-06-28 10:39:28 -05:00
18410d8230
Land #8540 , Add Symantec Messaging Gateway RCE
2017-06-22 19:00:32 -05:00
4fdd77f19a
Land #8051 , Add Netgear DGN2200v1/v2/v3/v4 Command Injection Module
2017-06-22 11:46:40 -05:00
24d9bec0ae
Land #8260 , OpManager Version Check
2017-06-20 17:58:10 -05:00
700d392106
Add markdown docs.
2017-06-20 17:45:44 -05:00
58cd432120
Added docs, minor code tweak to remove duplication.
2017-06-19 17:35:41 -05:00
19ceb53304
Modified payload handling and uploaded documentation
2017-06-18 02:04:22 +10:00
46ffd250a0
module working and docs
2017-06-14 21:15:56 -04:00
0766f92013
Add option for workspace
2017-06-13 12:46:36 +00:00
6ae540d889
Adding Symantec messaging gateway rce
2017-06-10 12:23:12 +03:00
99fa52e660
Land #8434 , Add Windows 10 Bypassuac fodhelper module
2017-06-07 11:15:01 -05:00
bac17a8e80
Land #8053 , Add DC/OS Marathon UI Exploit
2017-06-06 09:29:26 -05:00
385daddb9d
Land #8499 , doc header consistency fixes
2017-06-05 17:40:15 -05:00
1c23be91a7
sample output to scenarios conversion in docs
2017-05-31 21:21:38 -04:00
609b131e46
Land #8482 docs for processmaker_exec
2017-05-31 20:39:43 -04:00
31975b49ec
Update docs
2017-05-31 02:04:40 +00:00
bac23757a4
Updated based on busterb comments
2017-05-30 09:33:03 -04:00
475510787d
Add documentation
2017-05-30 08:40:57 +00:00
a01a2ead1a
Land #8467 , Samba CVE-2017-7494 Improvements
2017-05-30 00:15:03 -05:00
28fb5cc7da
spelling
2017-05-30 00:14:33 -05:00
dfb5806dcb
Add documentation
2017-05-28 03:08:45 +00:00
d4ba28a20b
Land #8457 , Update multi/fileformat/office_word_macro to allow custom templates
2017-05-26 15:09:23 -05:00
b3a5a8840b
added ubuntu information
2017-05-26 14:10:26 -04:00
ee13195760
Update office_word_macro exploit to support template injection
2017-05-25 15:53:45 -05:00
e8a34c5797
updates to docs
2017-05-25 16:53:39 -04:00
98ad754475
updated OJ info and wvu ubuntu box
2017-05-25 08:09:37 -04:00
b1514fcbc0
docs
2017-05-24 22:18:46 -04:00
d530c49645
Add documentation for CVE-2017-8895 exploit module
2017-05-24 00:28:37 +12:00
b7b1995238
Land #8274 , Wordpress admin upload check
2017-05-22 22:08:32 -05:00
2fbbc98b5d
document little trick for those who read :)
2017-05-22 19:50:40 +01:00
93bb47d546
msftidy fix
2017-05-22 19:27:15 +01:00
6f1f630b0e
add documentation
2017-05-22 19:17:26 +01:00
467f1ce0ca
Land #8411 , Buffer overflow in VXSearch Enterprise v9.5.12
2017-05-22 07:37:31 -05:00
ca6b00161d
VX Search Enterprise GET Buffer Overflow Doc
2017-05-18 17:12:10 +01:00
c0bf2cc6e7
Land #8401 , Buffer Overflow on Sync Breeze Enterprise 9.4.28
2017-05-17 23:39:50 -05:00
3360171977
Land #8319 , Add exploit module for Mediawiki SyntaxHighlight extension
2017-05-17 23:23:50 -05:00
Brent Cook