 Takah1ro
|
e4111cdc97
|
Update to use FETCH_DELETE
|
2024-12-29 12:33:39 +09:00 |
|
|
Takah1ro
|
86bd1c2938
|
Minor improve
* enable fetch_delete
* avoid using single quotes
* update doc
|
2024-12-29 12:19:19 +09:00 |
|
|
Takah1ro
|
af432a3b72
|
Improve stability
|
2024-12-29 12:00:09 +09:00 |
|
|
Jack Heysel
|
94507655ae
|
WIP CraftCMS FTP Template exploit
|
2024-12-28 18:56:47 -08:00 |
|
|
Takah1ro
|
cb34508321
|
Avoid using single quote in payload
|
2024-12-28 20:09:18 +09:00 |
|
|
Takah1ro
|
02ad81066d
|
Add cleanup
|
2024-12-28 18:04:56 +09:00 |
|
|
Takahiro Yokoyama
|
c7d7407179
|
Update modules/exploits/linux/http/selenium_greed_firefox_rce_cve_2022_28108.rb
Co-authored-by: bcoles <bcoles@gmail.com>
|
2024-12-28 18:04:09 +09:00 |
|
|
Takah1ro
|
90d9bb769d
|
Update vulnerable version
|
2024-12-28 15:53:31 +09:00 |
|
|
Takah1ro
|
43230b02a5
|
Review fix
* use send_request_cgi
* add check if sudo without password possible
* base64 encode payload
|
2024-12-28 15:42:15 +09:00 |
|
|
Takah1ro
|
6577a18abb
|
Add response check
|
2024-12-28 15:04:35 +09:00 |
|
|
Takahiro Yokoyama
|
9f20c575e5
|
Update modules/exploits/linux/http/selenium_greed_chrome_rce_cve_2022_28108.rb
Improve version detection messaging
Co-authored-by: bcoles <bcoles@gmail.com>
|
2024-12-28 14:40:44 +09:00 |
|
|
Takah1ro
|
7ecc1cb87b
|
Update vulnerable version
|
2024-12-28 14:39:24 +09:00 |
|
|
Takah1ro
|
9bfccc4293
|
Review fix
* add check if sudo without password possible
* base64 encode payload
|
2024-12-28 14:02:59 +09:00 |
|
|
Takah1ro
|
6c5952d3b6
|
Use send_request_cgi
|
2024-12-28 13:34:10 +09:00 |
|
|
Takah1ro
|
340d4bcd58
|
Add selenium firefox rce module
|
2024-12-28 12:27:18 +09:00 |
|
|
Takah1ro
|
e3d68d4164
|
Update author and fix version detection
|
2024-12-28 11:18:41 +09:00 |
|
|
h00die-gr3y
|
677e8ec9dd
|
updated vulnerable firmware versions in description
|
2024-12-27 22:12:51 +00:00 |
|
|
h00die-gr3y
|
7ca7d71ab4
|
second release module
|
2024-12-27 21:55:44 +00:00 |
|
|
h00die-gr3y
|
d3b4c5becb
|
initial release module
|
2024-12-27 20:36:31 +00:00 |
|
|
Takah1ro
|
38e886f4b6
|
Update payload string formatting
|
2024-12-27 21:58:42 +09:00 |
|
|
Takah1ro
|
e17d7cd161
|
Minor fix
|
2024-12-27 21:50:26 +09:00 |
|
|
Takah1ro
|
64b1832567
|
Update not to use selenium-webdriver
|
2024-12-27 13:00:20 +09:00 |
|
|
Takah1ro
|
390f551df7
|
Fix EDB
|
2024-12-27 00:10:01 +09:00 |
|
|
Takah1ro
|
3defb63763
|
Fix CVE format
|
2024-12-26 23:57:41 +09:00 |
|
|
Takah1ro
|
06af9b0b3d
|
Add selenium chrome rce module
|
2024-12-26 23:44:11 +09:00 |
|
|
h00die-gr3y
|
58c979dc08
|
updated with correct privileged setting
|
2024-12-23 19:45:29 +00:00 |
|
|
Martin Sutovsky
|
789f7cfcd1
|
Land #19731, new feature for recognizing broken SMB session and managing them
|
2024-12-23 12:06:49 +01:00 |
|
|
h00die-gr3y
|
7c8116a2cb
|
Third release of module + Documentation
|
2024-12-22 11:41:05 +00:00 |
|
|
h00die-gr3y
|
cf5b26dd61
|
Second release after testing multiple Pandora FMS versions
|
2024-12-20 20:40:04 +00:00 |
|
|
dledda-r7
|
a27024eb1f
|
fix: updating aarch64/shell to use the new prepends mixin
|
2024-12-20 10:18:25 -05:00 |
|
|
Spencer McIntyre
|
cfb7207a85
|
Fix the ntp_nak_to_the_future module
|
2024-12-20 08:57:24 -05:00 |
|
|
dledda-r7
|
4d304c65b5
|
fix: remove x64 directory flatting in Linux payloads
|
2024-12-20 04:15:41 -05:00 |
|
|
Brendan
|
51bbc76c79
|
Land #19748, Add the timeroast module
Add the timeroast module
|
2024-12-19 16:50:09 -06:00 |
|
|
Spencer McIntyre
|
a365d17055
|
Set the default NTP port
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2024-12-19 17:12:39 -05:00 |
|
|
Spencer McIntyre
|
d0cb6c1e2d
|
Merge pull request #19741 from dledda-r7/remove-reverse-hop-http
Remove reverse_hop_http payload
|
2024-12-19 15:54:33 -05:00 |
|
|
Spencer McIntyre
|
c77ccb1203
|
Merge pull request #19740 from dledda-r7/remove-reverse-https-proxy
Removing reverse_https_proxy payload
|
2024-12-19 15:43:05 -05:00 |
|
|
h00die
|
78984e467f
|
add check for prometheus pprof endpoints
|
2024-12-19 15:40:51 -05:00 |
|
|
dledda-r7
|
753447c7f7
|
fix: updating ppc/shell to use the new mixin structure
|
2024-12-19 12:13:55 -05:00 |
|
|
Spencer McIntyre
|
03f399ee9a
|
Initial commit of the timeroast module
|
2024-12-19 09:29:05 -05:00 |
|
|
Brendan
|
7ddffc790c
|
Merge pull request #19460 from gardnerapp/game_overlay
Land #19460, CVE-2023-2640, CVE-2023-32629 Game Overlay Ubuntu Privilege Escalation
|
2024-12-18 14:44:57 -06:00 |
|
|
adfoster-r7
|
2001469d02
|
Merge pull request #19742 from sjanusz-r7/TeamCity-is-capitalized
Capitalize TeamCity correctly
|
2024-12-18 12:35:12 +00:00 |
|
|
Martin Sutovsky
|
531ed162db
|
Land #19733, exploit module for CVE-2022-40471 - unauthenticated RCE
|
2024-12-18 12:44:34 +01:00 |
|
|
h00die-gr3y
|
2fe0b35384
|
update2 based on comments
|
2024-12-18 08:34:10 +00:00 |
|
|
h00die-gr3y
|
2abde4c923
|
update based on comments
|
2024-12-18 08:32:06 +00:00 |
|
|
Ivan Nikolskiy
|
cdc51228c1
|
Update reverse_tcp.rb
|
2024-12-18 07:26:37 +00:00 |
|
|
bwatters-r7
|
59229ee612
|
Update payload name, fix payload escapes & quotation, add unix cmd support
|
2024-12-17 16:52:24 -06:00 |
|
|
sfewer-r7
|
edf8d186f7
|
use the HttpClient cookie jar. Thank you @jheysel-r7 for this improvement.
|
2024-12-17 17:47:00 +00:00 |
|
|
Stephen Fewer
|
c25b3ceb03
|
typo 4
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2024-12-17 17:26:46 +00:00 |
|
|
Stephen Fewer
|
51908d6621
|
typo 3
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2024-12-17 17:26:31 +00:00 |
|
|
aaryan-11-x
|
f2d723d1d0
|
Modified the code logic as instructed by the reviewer & removed the instance variable
|
2024-12-17 21:39:30 +05:30 |
|