Martin Sutovsky
|
0a39f6670a
|
Fixing payload execution
|
2025-06-25 12:44:37 +02:00 |
|
msutovsky-r7
|
fde78bf73f
|
Land #20324, adds exploit for UNC path in .url files (CVE-2025-33053)
Adds exploit module for Internet Shortcut UNC path vulnerability (CVE-2025-33053)
|
2025-06-25 11:23:23 +02:00 |
|
Diego Ledda
|
6d843385ec
|
Merge pull request #20301 from msutovsky-r7/exploit/cve-2021-25094
Adds module for Tatsu WP plugin (CVE-2021-25094)
|
2025-06-25 10:58:22 +02:00 |
|
cgranleese-r7
|
40ca2b3b1b
|
Adds sentinel notes to modules that are missing stability, reliability or side effects
|
2025-06-25 09:32:01 +01:00 |
|
Spencer McIntyre
|
6334996e60
|
Use the smaller base64 encoder
|
2025-06-24 15:58:17 -04:00 |
|
Martin Sutovsky
|
13cd2d2e51
|
Minor code changes, updates documentation
|
2025-06-24 16:22:42 +02:00 |
|
DevBuiHieu
|
fa0d01f55c
|
Update modules/exploits/windows/fileformat/cve_2025_33053.rb
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
|
2025-06-24 19:24:06 +07:00 |
|
cgranleese-r7
|
a454217bd4
|
Update info -d markdown
|
2025-06-24 11:21:49 +01:00 |
|
Martin Sutovsky
|
dd6bb2c8dc
|
Remove debug statements
|
2025-06-24 12:10:46 +02:00 |
|
Martin Sutovsky
|
3d9cc6063d
|
Adds SMB server to send payload
|
2025-06-24 12:10:19 +02:00 |
|
Martin Sutovsky
|
6aa24a0762
|
Adds researchers in author section, base for WebDAV server
|
2025-06-23 15:38:09 +02:00 |
|
cgranleese-r7
|
37388ca1be
|
Adds sentinel values to modules missing notes
|
2025-06-23 12:24:58 +01:00 |
|
adfoster-r7
|
be8864fe84
|
Merge pull request #20339 from bcoles/exploit-windows-fileformat-ms_visual_basic_vbp
exploit/windows/fileformat/ms_visual_basic_vbp: Add offsets, cleanup, document
|
2025-06-23 10:41:14 +01:00 |
|
bcoles
|
b483312eca
|
Modules: Convert SSL default option to Boolean in several modules
|
2025-06-23 19:38:36 +10:00 |
|
cgranleese-r7
|
ade9b54d94
|
Runs Style/TrailingCommaInArguments Rubocop against modules
|
2025-06-23 09:30:35 +01:00 |
|
Martin Sutovsky
|
ca142599e8
|
Module init
|
2025-06-23 10:27:27 +02:00 |
|
bcoles
|
e1dec29ef9
|
exploit/windows/browser/ms08_070_visual_studio_msmask: Cleanup and add documentation
|
2025-06-23 00:38:44 +10:00 |
|
bcoles
|
c0baf1888b
|
exploit/windows/fileformat/ms_visual_basic_vbp: Add offsets, cleanup, document
|
2025-06-23 00:11:54 +10:00 |
|
adfoster-r7
|
b8c375d087
|
Merge pull request #20337 from bcoles/exploit-linux-http-opentsdb_key_cmd_injection
opentsdb_key_cmd_injection: Set Arch to ARCH_CMD
|
2025-06-22 14:51:04 +01:00 |
|
Chocapikk
|
2a008c83d1
|
Add auxiliary and exploit modules for Xorcom CompletePBX 5.2.35 CVEs (2025-2292, 30004, 30005, 30006)
|
2025-06-22 09:07:20 +02:00 |
|
bcoles
|
cede07596f
|
opentsdb_key_cmd_injection: Set Arch to ARCH_CMD
|
2025-06-22 12:39:04 +10:00 |
|
Ahmed Ezzat
|
0307bab692
|
Update opennms_horizon_authenticated_rce.rb
Fix Arch
|
2025-06-21 20:37:33 +03:00 |
|
cgranleese-r7
|
a4b14d8b64
|
Runs Rubocop to fix layout in modules
|
2025-06-20 15:18:01 +01:00 |
|
cgranleese-r7
|
42f31c0fce
|
Fixes some conditionals in modules
|
2025-06-20 14:57:03 +01:00 |
|
DevBuiHieu
|
dd51952b67
|
Update cve_2025_33053.rb
|
2025-06-19 21:32:34 +07:00 |
|
DevBuiHieu
|
f3c4d9519f
|
Update modules/exploits/windows/fileformat/cve_2025_33053.rb
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
|
2025-06-19 19:57:08 +07:00 |
|
DevBuiHieu
|
a0f1b0c5b3
|
Update modules/exploits/windows/fileformat/cve_2025_33053.rb
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
|
2025-06-19 19:53:49 +07:00 |
|
DevBuiHieu
|
efc0c2539d
|
Update cve_2025_33053.rb
|
2025-06-19 19:53:22 +07:00 |
|
DevBuiHieu
|
600ffdb9b9
|
Update modules/exploits/windows/fileformat/cve_2025_33053.rb
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
|
2025-06-19 19:44:35 +07:00 |
|
DevBuiHieu
|
4fde40a96b
|
Update modules/exploits/windows/fileformat/cve_2025_33053.rb
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
|
2025-06-19 19:43:56 +07:00 |
|
Diego Ledda
|
c0dfbf43f2
|
Merge pull request #20235 from Chocapikk/vbulletin_replace_ad_template_rce
vBulletin replaceAdTemplate Remote Code Execution
|
2025-06-19 14:20:16 +02:00 |
|
DevBuiHieu
|
1d27be2c1d
|
Final code for CVE-2025-33053 exploit module
|
2025-06-18 03:53:08 -04:00 |
|
DevBuiHieu
|
20b8a9fcd3
|
Add some features and fix bugs for CVE-2025-33053 exploit module
|
2025-06-17 22:59:34 -04:00 |
|
DevBuiHieu
|
58609f3ff9
|
Add some features and fix bugs for CVE-2025-33053 exploit module
|
2025-06-17 22:32:57 -04:00 |
|
DevBuiHieu
|
cb7badbfad
|
Add some features and fix bugs for CVE-2025-33053 exploit module
|
2025-06-17 21:41:44 -04:00 |
|
DevBuiHieu
|
fda69e0a74
|
Add some features and fix all errors for CVE-2025-33053 exploit module
|
2025-06-17 11:15:09 -04:00 |
|
DevBuiHieu
|
20629fe6b8
|
Add some features and fix all errors for CVE-2025-33053 exploit module
|
2025-06-17 02:49:10 -04:00 |
|
DevBuiHieu
|
9e5dd0962a
|
Add some features and delete old files for CVE-2025-33053 exploit module
|
2025-06-17 01:32:07 -04:00 |
|
DevBuiHieu
|
7ad7c62f03
|
Add some features and delete old files for CVE-2025-33053 exploit module
|
2025-06-17 01:20:09 -04:00 |
|
DevBuiHieu
|
f81ddf82f1
|
Add some features for CVE-2025-33053 exploit module
|
2025-06-17 01:00:35 -04:00 |
|
Martin Sutovsky
|
776379876d
|
Fixing check method
|
2025-06-16 16:00:14 +02:00 |
|
bcoles
|
91d3675c3b
|
modules/exploits/linux/samba: Resolve RuboCop violations
|
2025-06-15 00:09:09 +10:00 |
|
Martin Sutovsky
|
3abe9b46c0
|
Addressing comments
|
2025-06-13 10:32:39 +02:00 |
|
cgranleese-r7
|
1c72a3adc3
|
Fixes duplicate notes in a couple of modules
|
2025-06-12 14:32:12 +01:00 |
|
msutovsky-r7
|
663cf4af24
|
Land #20303, resolves Rubocop violations in modules/exploits/linux/postgres
modules/exploits/linux/postgres: Resolve RuboCop violations
|
2025-06-12 15:20:05 +02:00 |
|
bcoles
|
bf68b56f88
|
modules/exploits/linux/pptp: Resolve RuboCop violations
|
2025-06-12 21:14:25 +10:00 |
|
bcoles
|
e0e5e4157a
|
modules/exploits/linux/postgres: Resolve RuboCop violations
|
2025-06-12 21:03:41 +10:00 |
|
msutovsky-r7
|
2e3b66612b
|
Update modules/exploits/multi/http/wp_tatsu_rce.rb
|
2025-06-12 11:38:01 +02:00 |
|
msutovsky-r7
|
cb9f5e8743
|
Update modules/exploits/multi/http/wp_tatsu_rce.rb
|
2025-06-12 11:35:01 +02:00 |
|
Martin Sutovsky
|
0b2e4bc337
|
Adds module for CVE-2021-25094
|
2025-06-11 19:03:00 +02:00 |
|