Commit Graph

38478 Commits

Author SHA1 Message Date
H00die.Gr3y d7fa23f30f Apply suggestions from code review
Co-authored-by: bcoles <bcoles@gmail.com>
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
2024-09-17 19:00:48 +02:00
Spencer McIntyre 409b1aed45 Land #19461, Modernize NetWkstaUserEnum
Modernize NetWkstaUserEnum in smb scanner
2024-09-17 10:14:02 -04:00
Spencer McIntyre 7abfb6c205 Return nil on error to avoid another exception 2024-09-17 09:59:42 -04:00
dledda-r7 0bf524482c Land #19345, Post module Windows LPE CVE-2024-30088 2024-09-17 08:13:21 -04:00
dledda-r7 6e696e24e5 Land #19457, WP Plugin LiteSpeed Cache Account Take Over Module 2024-09-17 06:30:33 -04:00
NtAlexio2 d4378d6c82 change output format to old style 2024-09-16 18:28:01 -04:00
jvoisin 862acbdbae Improve screensaver management
- Add modern ways to unlock Linux machines remotely
- Use proper `register_options`
- Clarify the actions: lock/unlock, start/stop
- Add more platforms
- Add a couple of checks before running the commands
2024-09-16 23:41:37 +02:00
Jack Heysel 84a8eb7273 Respond to comments 2024-09-16 09:46:57 -07:00
h00die-gr3y 455c5b2391 second release module 2024-09-15 20:01:27 +00:00
h00die-gr3y 1ba05ac88a first release module 2024-09-15 19:47:32 +00:00
Takah1ro 30704c494a Remove unnecessary strip_comments 2024-09-15 10:00:43 +09:00
NtAlexio2 92234641bc modernize enumuser_domain in smb scanner 2024-09-13 16:12:01 -04:00
Jack Heysel 96e506d9f5 Fix cookie regex 2024-09-13 09:36:18 -07:00
Jack Heysel e7da81c271 Fix AdminCookieError admin_cookie check 2024-09-13 09:35:43 -07:00
jheysel-r7 300d2f5aa9 Apply suggestions from code review
Co-authored-by: Valentin Lobstein <88535377+Chocapikk@users.noreply.github.com>
2024-09-13 11:58:08 -04:00
dledda-r7 83a31c8a2a Land #19454, Persistence post module using motd 2024-09-13 09:02:22 -04:00
Chocapikk 04711c4416 Add suggestions 2024-09-12 22:58:44 +02:00
jvoisin 6d659e3aa8 Add modules/exploits/linux/local/motd_persistence.rb 2024-09-12 17:41:47 +02:00
dledda-r7 41a354372c Land #19449, Fix an exception when the target is not Ubuntu 2024-09-12 11:10:41 -04:00
h4x-x0r 05f591d005 Cleanup and check method added
Cleanup and check method added
2024-09-12 15:43:20 +01:00
Jack Heysel 38a3e7696d Responded to comments 2024-09-12 07:36:16 -07:00
h4x-x0r 30e6af7791 cleanup
Code cleanup and better handling of different use cases.
2024-09-12 14:34:45 +01:00
Jack Heysel c80a03fece WP LiteSpeed exploit CVE-2024-44000 2024-09-11 23:31:26 -07:00
Chocapikk 17838e66cd Add VICIdial Authenticated RCE module (CVE-2024-8504) 2024-09-12 01:37:44 +02:00
Jack Heysel dd5dd54af1 beta commit module working 2024-09-11 15:23:46 -07:00
Chocapikk 644b15e421 Add header 2024-09-11 21:31:52 +02:00
Chocapikk 550a376210 Add suggestions + documentation 2024-09-11 21:17:44 +02:00
dledda-r7 5e2bf5aaca fix(modules): spip_bigup_unauth_rce minor fix 2024-09-11 11:46:52 -04:00
dledda-r7 62e852176d Land #19444, SPIP BigUp Plugin Unauthenticated RCE 2024-09-11 10:29:12 -04:00
dwelch-r7 9de9b525d9 Land #19432, Refactoring SPIP Modules for Windows Compatibility and Incorporating SPIP Mixin 2024-09-11 14:57:48 +01:00
Chocapikk 4140808c68 Add VICIdial Time-based SQL Injection Module for Admin Credential Enumeration 2024-09-11 02:25:31 +02:00
jvoisin 8f61e957a8 Improve modules/nops/php/generic.rb
```irb
irb(main):001> length = 10
=> 10
irb(main):002>  Array.new(length) { ["\t", " ", "\n", "\r"].sample }.join
=> "  \r\t\n\t\t\n\t\r"
irb(main):003>
```
2024-09-10 21:28:43 +02:00
Spencer McIntyre 5e71490b66 Fix a typo when the kernel is not Ubuntu 2024-09-09 14:19:20 -04:00
Chocapikk af5c7ecc8f Fix bug 2024-09-08 07:54:11 +02:00
Chocapikk 4f859f129c Fix bug 2024-09-08 07:52:40 +02:00
Chocapikk 59faa1bf0c Change version fingerprinting 2024-09-08 07:01:23 +02:00
Chocapikk 43fabb07e5 Update doc + module + (mixin see #19444) 2024-09-08 06:56:13 +02:00
Chocapikk 289f47fac1 Update documentation with docker setup, working mixin now, update module 2024-09-08 05:59:11 +02:00
Takah1ro 8ddf8a04ff Remove options 2024-09-07 12:44:37 +09:00
Takah1ro 8366252ba2 Not call payload directory 2024-09-07 12:28:40 +09:00
Takah1ro 692531bb87 Call payload directory 2024-09-07 12:16:04 +09:00
Chocapikk cc6127897f Add suggestions 2024-09-07 04:00:25 +02:00
Takah1ro 2b63f8bb88 Rename exploit 2024-09-07 10:29:41 +09:00
Takah1ro 731780ca1a Formatting 2024-09-07 09:21:30 +09:00
Takah1ro 9e832eb483 Use exploit_path variable 2024-09-07 09:19:17 +09:00
Valentin Lobstein 0b768791d6 Update modules/exploits/multi/http/spip_bigup_unauth_rce.rb
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
2024-09-07 01:56:21 +02:00
Valentin Lobstein 484cdc940f Update modules/exploits/multi/http/spip_bigup_unauth_rce.rb
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
2024-09-07 01:56:09 +02:00
Valentin Lobstein c90f9b1ae5 Update modules/exploits/multi/http/spip_bigup_unauth_rce.rb
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
2024-09-07 01:55:54 +02:00
Chocapikk 92a25e5a29 Add source (oopsie) 2024-09-07 03:11:49 +02:00
Chocapikk 8b1e1dab1b Add some comments and CVE ID 2024-09-07 03:09:42 +02:00