 Tim W
|
7c575cd38f
|
Land #15007, add a chrome renderer exploit (CVE-2020-16040)
|
2021-04-08 22:18:20 +01:00 |
|
|
Shelby Pace
|
926f051377
|
Land #14978, add Gitea and Gogs exploit modules
|
2021-04-07 13:44:43 -05:00 |
|
|
adfoster-r7
|
258b9d3e28
|
Land #14998, Change CVE references from CVE Details to NVD
|
2021-04-07 10:10:55 +01:00 |
|
|
rajvardhan agarwal
|
c863c324ae
|
Add exploit for CVE-2020-16040
|
2021-04-06 17:25:27 +05:30 |
|
|
William Vu
|
4020813b42
|
Correct broken or redundant CVE references
|
2021-04-05 13:06:50 -05:00 |
|
|
Shelby Pace
|
cfc6b0a8ba
|
Land #14971, add Apache OFBiz SOAP Deser rce
|
2021-04-05 11:44:40 -05:00 |
|
|
Shelby Pace
|
a803e1e932
|
remove spare comma
|
2021-04-05 09:33:20 -05:00 |
|
|
Shelby Pace
|
71914a1ddb
|
Land #14813, additional dup scout bof targets
|
2021-04-01 13:03:57 -05:00 |
|
|
kalba-security
|
34a5f7906c
|
Rebase so we can use the latest mixin code,update the version range, update docs
|
2021-04-01 13:29:44 -04:00 |
|
|
kalba-security
|
faab100d9a
|
Add Nagios XI Mibs.php Authenticated RCE module and docs
|
2021-04-01 13:06:33 -04:00 |
|
|
kalba-security
|
f76f58eb51
|
Rebase, use latest mixin code in check, update version and docs
|
2021-04-01 12:43:44 -04:00 |
|
|
kalba-security
|
dd5c747584
|
Add Nagios XI snmptrap RCE and docs
|
2021-04-01 12:26:06 -04:00 |
|
|
kalba-security
|
02b9e5c939
|
rebase, use latest mixin code, correct vulnerable versions, update docs
|
2021-04-01 12:18:46 -04:00 |
|
|
kalba-security
|
3b7e612541
|
Add Nagios XI Plugins Filename Authenticate RCE module and docs
|
2021-04-01 11:23:52 -04:00 |
|
|
kalba-security
|
2df90d8d23
|
Rebase, rename module to nagios_xi_plugins_check_plugin_authenticated_rce, update check to take advantage of mixin, minor improvements
|
2021-04-01 11:07:49 -04:00 |
|
|
Shelby Pace
|
2cbd1a6be9
|
Land #14935, add F5 iControl REST API SSRF RCE
|
2021-04-01 08:40:38 -05:00 |
|
|
kalba-security
|
0e7c11ada3
|
Rename module and modify it to use the Nagios XI mixin, add autocheck, fix syntax and linting, also update docs
|
2021-04-01 09:26:16 -04:00 |
|
|
Shelby Pace
|
8cdaf9791d
|
Land #14950, add saltstack salt api rce
|
2021-03-31 14:50:30 -05:00 |
|
|
Shelby Pace
|
9eacda5552
|
add wait time line to test output
|
2021-03-31 14:47:34 -05:00 |
|
|
William Vu
|
69a0c9420b
|
Add module doc
|
2021-03-31 14:02:32 -05:00 |
|
|
Christophe De La Fuente
|
9806026ab9
|
Update from code review
|
2021-03-31 17:48:35 +02:00 |
|
|
Christophe De La Fuente
|
73a8b7aa5f
|
Add Gitea and Gogs RCE modules and documentations
|
2021-03-31 16:47:29 +02:00 |
|
|
je5442804
|
9776a87d32
|
docs
|
2021-03-31 20:41:51 +08:00 |
|
|
William Vu
|
151b8f2f92
|
Update vmware_vcenter_uploadova_rce module doc
|
2021-03-30 21:08:21 -05:00 |
|
|
Spencer McIntyre
|
a0a4bc079a
|
Add the exploit module for CVE-2021-26295
|
2021-03-30 18:18:16 -04:00 |
|
|
Spencer McIntyre
|
9d85af51cb
|
Land #14945, Proxylogon RCE (Praetorian update)
|
2021-03-29 12:04:19 -04:00 |
|
|
Spencer McIntyre
|
11f4946817
|
Tweak some ProxyLogon verbiage for clarity
|
2021-03-29 10:07:43 -04:00 |
|
|
RAMELLA Sébastien
|
02b240b22a
|
code review
|
2021-03-29 14:23:39 +04:00 |
|
|
Christophe De La Fuente
|
00698d20bf
|
Add waiting status message and update doc
|
2021-03-26 14:59:27 +01:00 |
|
|
Christophe De La Fuente
|
b069fec866
|
Add module and doc for Saltstack Salt API wheel_async RCE
|
2021-03-26 13:54:06 +01:00 |
|
|
Spencer McIntyre
|
006faaab9a
|
Land #14924, Add auxiliary and exploit modules for CVE-2020-6207 in SAP Solution Manager
|
2021-03-25 17:48:56 -04:00 |
|
|
Rob V
|
7854981730
|
breaking up lines in documentation
|
2021-03-25 16:40:16 -04:00 |
|
|
Rob V
|
748ff19ef4
|
attempt to please linting
|
2021-03-25 16:11:43 -04:00 |
|
|
Rob V
|
3d32b48148
|
adding documentation
|
2021-03-25 14:39:00 -04:00 |
|
|
Vladimir Ivanov
|
b066145cf1
|
Minor updates
Updated documentation auxiliary module cve_2020_6207_solman_rce.md
Updated documentation in exploit module cve_2020_6207_solman_rs.md
|
2021-03-25 17:07:20 +03:00 |
|
|
bwatters
|
6505f9ccbd
|
Land #14830, Adding FortiLogger 4.4.2.2 - Unauthenticated Arbitrary File Upload (CVE-2021-3378)
Merge branch 'land-14830' into upstream-master
|
2021-03-24 17:41:10 -05:00 |
|
|
bwatters
|
e2dfca86f9
|
Add warning for failures after rebooting to the documentation.
|
2021-03-24 17:32:08 -05:00 |
|
|
Grant Willcox
|
f01b434160
|
Land #14896, Fix apache_activemq_upload_jsp exploit module for Java 8
|
2021-03-24 10:22:03 -05:00 |
|
|
Grant Willcox
|
9d7e9990f4
|
Update documentation wording a bit to be more appropriate
|
2021-03-24 09:17:22 -05:00 |
|
|
Christophe De La Fuente
|
2dcd0fad04
|
Land #14860, Auxiliary/Exploit Scanner/Gather/RCE for Exchange ProxyLogon (CVE-2021-26855)
|
2021-03-23 13:10:15 +01:00 |
|
|
Vladimir Ivanov
|
d76224066f
|
Rename option URIPATH to TARGETURI
|
2021-03-23 13:33:39 +03:00 |
|
|
RAMELLA Sébastien
|
37b0552803
|
last code review before land
|
2021-03-22 23:20:40 +04:00 |
|
|
William Vu
|
d4d9001c84
|
Fix typos
|
2021-03-22 14:16:45 -05:00 |
|
|
Spencer McIntyre
|
8605fe4529
|
Use POST for the check method and write the module docs
|
2021-03-22 15:04:21 -04:00 |
|
|
Vladimir Ivanov
|
6e13a26fd3
|
Delete links to launchpad.support.sap.com in doc files
|
2021-03-22 11:03:53 +03:00 |
|
|
RAMELLA Sébastien
|
c543b44fc2
|
fix: CmdStagerFlavor, add: Powershell target, ...
|
2021-03-21 22:47:27 +04:00 |
|
|
Vladimir Ivanov
|
42726a70c0
|
client.rb - library for auxiliary and exploit modules
cve_2020_6207_solman_rce.rb - auxiliary module
cve_2020_6207_solman_rce.md - documentation for auxiliary module
cve_2020_6207_solman_rs.rb - exploit module
cve_2020_6207_solman_rs.md - documentation for exploit module
|
2021-03-21 16:51:21 +03:00 |
|
|
alanfoster
|
308a42e95b
|
Fix apache_activemq_upload_jsp exploit module for Java 8
|
2021-03-20 15:26:34 +00:00 |
|
|
RAMELLA Sébastien
|
f5c807590c
|
a last round of review + rubocop
|
2021-03-20 01:23:43 +04:00 |
|
|
RAMELLA Sébastien
|
6e34a80693
|
fix. OAB + code review
|
2021-03-19 10:19:57 +04:00 |
|