Commit Graph

4257 Commits

Author SHA1 Message Date
Andres Rodriguez 446144ba8e Metasploit module for CVE 2015-4852, Weblogic serialization RCE Raw Object 2018-12-15 18:26:34 -08:00
Brendan Coles cba195b7d8 Update tested versions 2018-12-15 05:44:32 +00:00
Brendan Coles a7b5737980 Update documentation 2018-12-15 05:41:40 +00:00
Brendan Coles 1cf5c79cc8 Update documentation 2018-12-14 11:00:18 +00:00
Brendan Coles e4fc4e654d Move documentation to correct directory 2018-12-14 10:56:23 +00:00
Brent Cook 673cfe6889 Land #11119, Add WEBUI_PORT to hp_van_sdn_cmd_inject exploit 2018-12-13 16:15:53 -06:00
Wei Chen cc7cb7302e Land #10944, Add macOS Safari exploit from pwn2own2018 2018-12-13 13:50:19 -06:00
William Vu cb5648a1c7 Add WEBUI_PORT to hp_van_sdn_cmd_inject exploit 2018-12-13 12:22:36 -06:00
Milton-Valencia 2e26ceac8f added comments 2018-12-13 10:55:09 -06:00
Wei Chen 8ffd9e47b0 Up to date PR10429 2018-12-12 13:30:58 -06:00
Wei Chen 96c281daef Add send_not_found and module documentation for webdav_delivery 2018-12-12 13:26:46 -06:00
Jacob Robles ea724dec46 Merge in upstream/master 2018-12-12 11:00:31 -06:00
Jacob Robles 3fbfaf2ff5 Documentation Update 2018-12-12 07:00:37 -06:00
Shelby Pace ae089ce573 Land #10960, add wp duplicator code inject module 2018-12-11 12:02:07 -06:00
Shelby Pace b82e3469a2 renamed module and doc 2018-12-11 11:59:19 -06:00
Jacob Robles 1ab69c221c Land #11040, Add CyberLink LabelPrint Local BOF 2018-12-11 08:19:51 -06:00
Jacob Robles 106d6cefe4 Add documentation 2018-12-11 07:55:52 -06:00
Imran E. Dawoodjee 9cc5569ca2 Cleaned up module per @bcoles's recommendations. 2018-12-11 02:56:56 +08:00
Imran E. Dawoodjee bbd0c8be32 Greatly improved check and tidied up documentation. 2018-12-10 21:02:51 +08:00
Auxilus bca4ae03ff Replace WsfDelay with WfsDelay 2018-12-10 16:02:19 +05:30
Milton-Valencia f6bfbddb8d twks 2018-12-09 15:59:58 -06:00
Milton-Valencia 15aaaa4f21 removed 0 just saw... 2018-12-09 15:39:27 -06:00
Milton-Valencia 2beddf1012 req changes 2018-12-09 15:01:09 -06:00
Imran E. Dawoodjee 91d0c8f283 Removed offending code, added warning for users,
and updated documentation.
2018-12-10 01:57:44 +08:00
Imran E. Dawoodjee fdb0a80442 Improved version check, made requests more organic,
and improved made PowerShell work on version 6.0.2.
2018-12-08 19:48:26 +08:00
Imran E. Dawoodjee 2918acc0d2 Added links to functionality and cleaned up check
to make it much cleaner per @bcoles's recommendations.
2018-12-08 03:17:52 +08:00
Imran E. Dawoodjee 92c56472ba Improved module and added documentation. 2018-12-07 03:02:37 +08:00
Julien Legras 2735c71bda Fixed typos, removed not working cleaning 2018-12-04 18:42:54 +01:00
asoto-r7 c27c149a4d Land #10947, HPE Intelligent Management Center Java Deserialization RCE 2018-12-03 17:07:31 -06:00
William Vu ab8df35645 Add module doc 2018-12-01 12:05:08 -06:00
Jacob Robles dec08a0b43 Land #10954, apache spark unauth rce module 2018-11-29 13:56:21 -06:00
Jacob Robles 5180ec4cf8 Update documentation
Fix headers and remove options output
2018-11-29 08:28:39 -06:00
Julien Legras 2b61c4e118 Fixes for PR 2018-11-29 15:02:03 +01:00
h00die e3e7285288 Land #9946 a UEB local priv escalation 2018-11-27 21:19:34 -05:00
h00die 38a99ac90a ueb privesc updates 2018-11-27 21:18:05 -05:00
h00die 4af5ab3089 ueb privesc updates 2018-11-27 21:14:05 -05:00
Brendan Coles 180876d8fc Add check for SMAP 2018-11-27 23:24:02 +00:00
Brent Cook b05bb616bf Land #10987, add exploit for PHP imap_open function against various web apps 2018-11-27 16:44:51 -06:00
Brent Cook 66cae6240f Land #10994, Added exploit for CVE-2018-18955 2018-11-27 16:12:05 -06:00
Shelby Pace 6712363bb5 Land #10737, add TeamCity XML-RPC exploit module 2018-11-27 14:59:37 -06:00
Shelby Pace 064c79a4ae note about cmd_stager flavor 2018-11-27 14:46:19 -06:00
Wei Chen d523124faf Land #10965, Add the macOS LPE from pwn2own2018 (CVE-2018-4237) 2018-11-27 14:00:35 -06:00
Brendan Coles c1722a922f Fix markdown 2018-11-27 19:43:08 +00:00
Brendan Coles aae86241ef Update version check 2018-11-27 18:13:29 +00:00
Brent Cook 0fddb8e31c Land #10768, Exploit for Netgear CVE-2016-1555 2018-11-26 11:45:10 -06:00
h00die e2d58afe13 cleaned up code, added custom 2018-11-25 10:59:53 -05:00
Brendan Coles be6cfde921 Land #11015, Fix payload and console check for Xorg_privesc Linux targets 2018-11-25 04:51:27 +00:00
Brendan Coles 01ed57cbb3 Remove check for nosuid 2018-11-25 01:53:07 +00:00
Brendan Coles f0999e3a7e Add documentation 2018-11-25 00:54:58 +00:00
Aaron Ringo 1783617770 consolelock check updated to use id, payload upload changed, documentation updated, misc formatting 2018-11-24 15:10:21 -06:00