e7a20ec47c
Add CVE ID to module and docs
2020-11-05 07:05:32 -05:00
cf954888da
Add horizontcms_upload_exec module and documentation
2020-11-02 13:01:13 -05:00
bb9464801e
Make changes suggested in review
...
* Add better explanation of public-api-port option in documentation
* Add example in scenarios where admin API is on different host to
public API (therefore public-api-port option must be used)
* Add targeturi option
* Add version number that has been tested in 2 places in documentation
2020-10-27 21:13:45 +00:00
8d43fa4848
Module can now use mkfile+put method to exploit vulnerability.
2020-10-15 17:46:40 +08:00
f6b5053666
Add exploit/multi/http/kong_gateway_admin_api_rce
2020-10-13 16:56:34 +01:00
b9df68cbb6
Fix module according to Rubocop, make documentation follow standard.
2020-10-11 19:04:06 +08:00
57b0f30e37
Add new module for WordPress File Manager unauth RCE (CVE-2020-25213)
2020-10-11 01:20:28 +08:00
15bb690308
fix vulnerability spelling
2020-10-04 13:00:48 -04:00
e65083c092
Add maracms_upload_exec.rb exploit module and docs
2020-09-22 16:53:29 -04:00
24b1235cf7
Whitespace adjustment and remove superfluous return statements
2020-08-12 13:59:25 -04:00
0dab52ef35
A few last changes from msftidy and msftidy_docs.
2020-08-09 18:25:13 -05:00
661e2a680b
Initial push of exploit and module for vbulletin_widget_template_rce vulnerability.
2020-08-09 17:38:52 -05:00
2ca508c08e
Further edits for RuboCop and msftidy_docs.rb compliance
2020-08-06 11:18:39 -05:00
5c6530d9e5
Update module description and documentation to have a better description of what is going on and to also fix further copies of the typos that were pointed out.
2020-08-06 10:50:47 -05:00
7985eafda0
Add Baldr Botnet Panel RCE Module
2020-07-24 07:45:43 +03:00
2b1af9acaa
Land #13610 , add atutor auth dir trav / rce
2020-06-29 11:58:34 -05:00
57f40053da
Improve autoselect (incorporate suggestions from code review)
2020-06-18 16:39:11 -04:00
199d7db222
Fix up items mentioned by @space-r7 during her review
2020-06-18 09:56:20 -05:00
a26977c6fa
Finish up rest of msftidy_docs.rb documentation
2020-06-17 16:11:56 -05:00
22c76d94c3
Fix most of the msftidy_docs.rb errors
2020-06-17 16:06:16 -05:00
eebacb8fbb
Make adjustments so that this module only supports Windows so that we can land this for now. Linux support may be added in the future.
2020-06-17 14:56:40 -05:00
813a23cec8
More fixes to documentation, but not sure if these work yet or not
2020-06-17 12:34:44 -05:00
b6f4210bd2
Fix some typos in the Linux documentation
2020-06-17 11:29:30 -05:00
cd76b1dca0
Add in initial updates to the Linux documentation
2020-06-16 19:06:32 -05:00
d8c0f23df0
Add in documentation for the WebPanel1 panel on Windows
2020-06-16 16:14:01 -05:00
5d768f266c
Add in documentation for the WebPanel3 panel on Windows
2020-06-16 15:27:25 -05:00
b25d94b9d5
Remove excess information from documentation, and remove references as these are in the module itself and thats generally the place where we put them
2020-06-16 12:29:19 -05:00
67727c45b1
Removing excess option information from documentation
2020-06-16 12:16:20 -05:00
8d0bc615d4
Correcting intra-document links within the documentation
2020-06-16 12:04:46 -05:00
7d197c3168
Remove extra detail from IornCube installation steps and make it simpler to read.
2020-06-16 11:44:59 -05:00
d84a74605a
Update description section within the module docs and tidy up the areas surrounding this to make it easier to read. Also update the Windows installation instructions
2020-06-16 11:27:33 -05:00
df5373bc1d
update documentation file
2020-06-16 10:47:51 -05:00
876836bcce
update doc and fix module syntax.
2020-06-16 10:47:51 -05:00
624c69bebf
add. authenticated exploitation
2020-06-16 10:47:50 -05:00
c704dba44c
add. agent tesla panel rce exploit module
2020-06-16 10:47:49 -05:00
b5ad7a8511
Use session_created, update documentation
2020-06-15 13:37:59 -04:00
e4351d37b8
Add ATutor 2.2.4 directory traversal / RCE module and docs
2020-06-12 16:02:00 -04:00
51fca24a38
Land #13545 , add drag / drop file upload rce
2020-06-04 10:35:03 -05:00
329ba1091f
add session_created, fix typo
2020-06-04 10:32:17 -05:00
ff067088fd
docs
2020-06-02 16:24:04 -04:00
a6b6d7b14d
make markdown not ruby
2020-05-30 21:21:31 -04:00
41b512ecda
dnd multi file upload rce
2020-05-30 21:07:46 -04:00
e5dcb2e23c
Switch to use res.get_json_document from JSON.parse and more cleanup.
2020-05-28 11:16:44 -05:00
7ef7af0d30
Ran msftidy across documentation and made recommended changes to clean up module for MSF pull request.
2020-05-26 17:31:02 -05:00
e7d7ddc213
Initial push of vbulletin_getIndexableContent auxillary and exploit modules + documentation.
2020-05-23 03:20:46 -05:00
2c61fd0aff
Update Apache Shiro RCE module docs
2020-04-28 14:24:17 -04:00
70ad79dbcc
change ip
2020-04-27 10:50:09 -05:00
b283442845
Add shiro_rememberme_v124_deserialize documentation
2020-04-27 10:50:09 -05:00
823c29a127
Update post-RuboCop style in my recent modules
...
Mostly 80 columns (yeah, I know) and additional whitespace to complement
the lack of alignment.
2020-04-22 10:52:00 -05:00
c5df5355ac
Update my module documentation to the new standard
...
Also update CheckModule to match current style and best practices.
2020-04-20 20:06:52 -05:00
kalba-security