5a837d1ef6
fix a typo
2024-12-02 18:16:43 -08:00
d22c6996be
Merge pull request #18877 from h00die/xspy
...
New module to replicate xspy tool (and X11 library)
2024-12-02 13:38:37 -05:00
a230a353e4
Land #19613 Asterisk authenticated rce via AMI (CVE-2024-42365)
2024-12-02 08:21:35 -08:00
a46b2f437f
Use TARGET_URI when checking the redirection URI
2024-12-02 16:45:12 +01:00
3dcb9d58ab
Code review
2024-12-02 14:02:07 +01:00
c943cc6378
Add module and documentation
2024-12-02 14:02:07 +01:00
b5fbc9a8ae
MSFTidy fixes
2024-12-02 12:35:00 +11:00
eaf277e418
Lint
2024-11-30 14:24:33 +01:00
a7e17d09c9
Update modules/exploits/unix/webapp/cyberpanel_preauth_rce_multi_cve.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2024-11-30 13:55:16 +01:00
6adf17f5f7
Update modules/exploits/unix/webapp/cyberpanel_preauth_rce_multi_cve.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2024-11-30 13:55:09 +01:00
c4b7954f15
Land #19596 , Wordpress Plugin Post SMTP Account Takeover
2024-11-29 09:05:03 -08:00
3167a6c73c
fix(payloads): re-wrote reverse_https_proxy stager
2024-11-29 07:57:51 -05:00
d13bccca05
peer review
2024-11-28 20:24:25 -05:00
1906646e67
peer review
2024-11-28 13:18:47 -05:00
65acafacfd
Apply suggestions from code review
2024-11-28 08:57:21 -08:00
4d19535ca0
fix(payloads): removing hardcoded block-api asm and hashes from x86 messagebox module
2024-11-28 06:41:32 -05:00
2115c81654
update using acronis_cyber mixin
2024-11-27 22:21:27 +00:00
a945a54fc3
Merge remote-tracking branch 'origin/master' into acronis-rce
2024-11-27 21:50:53 +00:00
3a2aa0f31c
module prep to use acronis_cyber mixin
2024-11-27 21:31:40 +00:00
e41f5ad577
needrestart exploit updates
2024-11-27 15:41:23 -05:00
cd4899da00
Refactor some X11 code around
...
Consistently refer to replys as responses
2024-11-27 15:19:26 -05:00
7de3d117b8
Land #19582 Acronis Cyber Backup/Protect Info Disclosure
2024-11-27 07:50:16 -08:00
acb022c18f
fix(payloads): update cachedsize for x64 messagebox module
2024-11-27 08:15:57 -05:00
46292b8b9a
fix(payloads): removing hardcoded block-api asm and hashes from x64 messagebox module
2024-11-27 08:08:31 -05:00
d778f5469b
needrestart improvements
2024-11-26 18:22:48 -05:00
eb58072034
fix(payloads): update cachedsize
2024-11-26 12:07:32 -05:00
9bfb67444d
fix(payloads): fixing typo on block-api hashing function
2024-11-26 12:07:31 -05:00
55515441d2
fix(payloads): update cachedsize reverse_hop_http
2024-11-26 12:07:30 -05:00
e7c23e4a65
fix(payloads): removing hardcoded block-api hashes
2024-11-26 12:07:30 -05:00
3fe1ffb6f3
fix(payloads): removing hardcoded block-api hashes
2024-11-26 12:07:29 -05:00
18c4e9c2f6
moved get_machine_info to the acronis_cyber mixin
2024-11-26 16:10:14 +00:00
b6595eeaf0
added acronis cyber mixin
2024-11-26 15:49:57 +00:00
6c76dcb20c
Merge pull request #19651 from smashery/smb_version_update
...
Give likely Windows versions for SMB v2-3
2024-11-26 09:05:10 -05:00
c1c74a0959
Do not fail on document creation
...
Since we attempt to create the document in multiple APIs, we want to avoid exiting on a failed creation attempt. This will allow us to retry the document creation on the next available API.
2024-11-26 11:56:50 +01:00
19394960cd
needrestart improvements
2024-11-25 16:40:00 -05:00
d4bd00d48e
needrestart improvements
2024-11-25 16:38:18 -05:00
566e12b69e
Add error_callback to SSH Command Stream
2024-11-25 16:43:59 +00:00
492ccca1aa
review
2024-11-23 12:43:35 -05:00
dc445ed1ac
Apply suggestions from code review
2024-11-23 00:57:08 +01:00
7fd82b89df
offload files to data
2024-11-22 15:57:18 -05:00
7025871d34
ubuntu needrestart lpe
2024-11-22 15:44:52 -05:00
94e5e49052
ubuntu needrestart lpe
2024-11-22 15:44:45 -05:00
e772c7adaa
Apply suggestions from code review
...
Co-authored-by: Simon Janusz <85949464+sjanusz-r7@users.noreply.github.com >
2024-11-22 16:56:50 +01:00
502e415344
Merge pull request #19630 from remmons-r7/cups_ipp_rce
...
Exploit module for IPP attributes remote code execution - OpenPrinting CUPS
2024-11-22 09:22:21 -05:00
68e9b39ffa
register teh Rex socket we create via add_socket. This lets teh frameowkr close the socket after we get a session, and will wait up to WfsDelay for that to happen. This lets us remove the other timeout we had, and teh user can always adjust WfsDelay if needed. (Thanks Spencer)
2024-11-22 12:42:08 +00:00
e5cdf6097d
favor File.binread over File.read
2024-11-22 12:40:19 +00:00
f59bfe98a3
remove the default payload and the default fetch command, and let the framework choose them for us.
2024-11-22 12:39:34 +00:00
2ba112a5a4
We can use OptPath here instead of OptString. Also are these are optional, and we dont specify a default, we can omit the nil default value.
2024-11-22 12:38:46 +00:00
000ffb2406
make the check routine return a message for Detected.
2024-11-22 12:37:50 +00:00
de599a4407
rework how we calculate the chunk size, we now consume the maximum available space a chunk can take, relative to the size of teh command needed to write the chunk to disk. We also rework the logic to ensure the files are sequential. Finally as the size of a chunk may be less the more chunks we write, we impose a max Payload Space valuecalculated to be 5670 chars.
2024-11-22 10:28:27 +00:00
jheysel-r7