370 Commits

Author	SHA1	Message	Date
cgranleese-r7	adff497bd2	Updates msf5 as well	2025-07-17 11:51:29 +01:00
cgranleese-r7	469f102596	Updates docs to reflect new default prompt	2025-07-17 09:53:40 +01:00
Brendan	36675ccd9a	Merge pull request #20349 from sfewer-r7/0day-cve-2024-51978 ... Add auxiliary module for multiple Brother devices authentication bypass (CVE-2024-51978)	2025-07-09 13:07:25 -05:00
sfewer-r7	34952d73f6	display the AuthCookie if one is received	2025-07-09 10:15:30 +01:00
sfewer-r7	a7e4b5601f	update the docs to use AUTO for the enum option	2025-07-01 15:06:44 +01:00
sfewer-r7	83a03efa3b	aux module for CVE-2024-51978	2025-06-20 16:41:39 +01:00
Brendan	cc98ef58d4	Merge pull request #20140 from h4x-x0r/CVE-2023-2915 ... ThinManager Path Traversal Delete (CVE-2023-2915) Module	2025-06-05 10:08:42 -05:00
Brendan	312d052a5c	Merge pull request #20141 from h4x-x0r/CVE-2023-2917 ... ThinManager Path Traversal Upload (CVE-2023-2917) Module	2025-06-04 16:48:39 -05:00
Brendan	10d443d5d9	Merge pull request #20138 from h4x-x0r/CVE-2023-27855 ... ThinManager Path Traversal Upload (CVE-2023-27855) Module	2025-06-04 12:41:34 -05:00
Simon Janusz	d497156f84	Merge pull request #20258 from zeroSteiner/fix/issue/20251 ... Update the ldap options for shadow credentials	2025-06-03 17:45:18 +01:00
Simon Janusz	043f8cb6b4	Merge pull request #20260 from zeroSteiner/fix/issue/20252 ... Update the ldap/change_password module	2025-06-03 17:44:26 +01:00
Spencer McIntyre	3057f80a1b	Update the ldap options for shadow credentials	2025-06-03 12:29:04 -04:00
bwatters-r7	e282bbda99	Update datastore option names in module and docs	2025-05-28 09:23:36 -05:00
Spencer McIntyre	dae8c9b43a	Update the ldap/change_password module	2025-05-28 10:19:30 -04:00
h4x-x0r	1cc0269edf	more versions tested	2025-05-07 18:05:57 +01:00
h4x-x0r	b5989070d0	path update	2025-05-07 18:05:04 +01:00
h4x-x0r	9ab2acc50f	updated	2025-05-07 18:03:58 +01:00
h4x-x0r	60668f3e26	CVE-2023-2917	2025-05-07 04:12:53 +01:00
h4x-x0r	8b94a560e7	Adjusted path	2025-05-07 03:53:36 +01:00
h4x-x0r	0491d3894e	CVE-2023-2915	2025-05-07 03:45:59 +01:00
jheysel-r7	08e227faca	Merge pull request #19934 from sfewer-r7/bugfix-cisco-iosxe-rce ... Improve exploit/linux/misc/cisco_ios_xe_rce (CVE-2023-20198 + CVE-2023-20273)	2025-03-27 16:51:16 -07:00
sfewer-r7	efb0d5da4c	fix typo, C1000v should be CSR1000v. Be consistant with IOS XE and not IOS-XE.	2025-03-04 09:09:32 +00:00
jheysel-r7	b1d0eedc26	Merge pull request #19712 from smashery/naa_creds ... NAA creds from SCCM	2025-03-03 13:50:31 -08:00
sfewer-r7	45dfa5fda9	update docs for auxiliary/admin/http/cisco_ios_xe_cli_exec_cve_2023_20198 to show it working on C1000v and C8000v targets.	2025-03-03 20:23:55 +00:00
sfewer-r7	e71a851e3f	mention that the C8000v series appliance version 17.6.5 was observed to not be vulnerable to CVE-2023-20273. Inspecting the Lua code shows this appliance has additional command injection filtering in place (see pexec_setsid in /usr/binos/openresty/nginx/conf/pexec.lua) which prevents the injection from working	2025-03-03 20:22:46 +00:00
h4x-x0r	41a0e089ea	CVE-2025-24865 & CVE-2025-22896 ... CVE-2025-24865 & CVE-2025-22896	2025-02-08 02:22:11 +00:00
Ashley Donaldson	556e52d1d2	Add missing option docs	2024-12-17 17:01:27 +11:00
Ashley Donaldson	c2495aff58	Properly support there being no NAA creds	2024-12-17 17:01:27 +11:00
Ashley Donaldson	d52874ac46	Allow sessions to be not required. Added documentation.	2024-12-17 17:01:26 +11:00
Spencer McIntyre	f36d786736	Merge pull request #19696 from smashery/add_user_module ... Add user module	2024-12-10 11:26:49 -05:00
Spencer McIntyre	f05145dd1e	Tweak the documentation verbiage slightly	2024-12-10 10:58:17 -05:00
Spencer McIntyre	8b93f1a087	Merge branch 'master' into smb_change_pw	2024-12-09 09:37:45 -05:00
Spencer McIntyre	909476ee64	Merge pull request #19671 from smashery/ldap_change_pw ... LDAP Change Password module	2024-12-06 17:13:50 -05:00
Ashley Donaldson	75a334ca0a	Changes from code review	2024-12-06 16:05:53 +11:00
Ashley Donaldson	7c46d4d02d	Updated text to be clearer about the AES kerberos behaviour	2024-12-06 14:28:44 +11:00
Ashley Donaldson	d5b2d760e8	Updated ancillary documentation	2024-12-06 07:53:19 +11:00
h00die	1906646e67	peer review	2024-11-28 13:18:47 -05:00
Ashley Donaldson	cd780e4339	Added documentation	2024-11-22 13:12:38 +11:00
Ashley Donaldson	afc735f4a4	Add documentation	2024-11-20 15:36:36 +11:00
Ashley Donaldson	d396d06e35	Enable adding Users, not just computers (if permissions allow) ... Also added extra error handling for when password is wrong or expired	2024-11-12 12:33:29 +11:00
h00die	2b593bcf54	wp_post_smtp_acct_takeover peer review	2024-11-03 13:52:55 -05:00
h00die	65efd07935	docs for wp_post_smtp	2024-10-30 15:38:46 -04:00
Christophe De La Fuente	ae213813b5	Updates from code review	2024-10-22 14:41:02 +02:00
Spencer McIntyre	6ca0bb74fd	Add workflow docs	2024-10-17 11:23:31 -04:00
Spencer McIntyre	2e4315b3c9	Add support to icpr_cert for ESC15	2024-10-17 11:23:31 -04:00
jheysel-r7	05ff8359b8	Merge pull request #19436 from h4x-x0r/CVE-2024-6670 ... WhatsUp Gold SQL Injection (CVE-2024-6670) Module	2024-09-26 17:04:30 -04:00
jheysel-r7	d11c2be4ea	Merge pull request #19375 from h4x-x0r/CVE-2024-20419 ... Cisco Smart Software Manager (SSM) On-Prem Account Takeover (CVE-2024-20419) Module	2024-09-24 12:19:54 -04:00
h4x-x0r	64f595c431	cleanup, version check, documentation ... cleanup, version check, documentation	2024-09-02 15:41:08 +01:00
bwatters	4af2294709	Land #19386, Ivanti Virtual Traffic Manager (vTM) Authentication Bypass (CVE-2024-7593) Module ... Merge branch 'land-19386' into upstream-master	2024-08-27 09:39:10 -05:00
bwatters	84431b0a4e	Land #19380, Control iD iDSecure Authentication Bypass (CVE-2023-6329) Module ... Merge branch 'land-19380' into upstream-master	2024-08-26 18:09:09 -05:00