H00die.Gr3y
d7fa23f30f
Apply suggestions from code review
...
Co-authored-by: bcoles <bcoles@gmail.com >
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2024-09-17 19:00:48 +02:00
Spencer McIntyre
409b1aed45
Land #19461 , Modernize NetWkstaUserEnum
...
Modernize NetWkstaUserEnum in smb scanner
2024-09-17 10:14:02 -04:00
Spencer McIntyre
7abfb6c205
Return nil on error to avoid another exception
2024-09-17 09:59:42 -04:00
dledda-r7
0bf524482c
Land #19345 , Post module Windows LPE CVE-2024-30088
2024-09-17 08:13:21 -04:00
dledda-r7
6e696e24e5
Land #19457 , WP Plugin LiteSpeed Cache Account Take Over Module
2024-09-17 06:30:33 -04:00
NtAlexio2
d4378d6c82
change output format to old style
2024-09-16 18:28:01 -04:00
jvoisin
862acbdbae
Improve screensaver management
...
- Add modern ways to unlock Linux machines remotely
- Use proper `register_options`
- Clarify the actions: lock/unlock, start/stop
- Add more platforms
- Add a couple of checks before running the commands
2024-09-16 23:41:37 +02:00
Jack Heysel
84a8eb7273
Respond to comments
2024-09-16 09:46:57 -07:00
h00die-gr3y
455c5b2391
second release module
2024-09-15 20:01:27 +00:00
h00die-gr3y
1ba05ac88a
first release module
2024-09-15 19:47:32 +00:00
Takah1ro
30704c494a
Remove unnecessary strip_comments
2024-09-15 10:00:43 +09:00
NtAlexio2
92234641bc
modernize enumuser_domain in smb scanner
2024-09-13 16:12:01 -04:00
Jack Heysel
96e506d9f5
Fix cookie regex
2024-09-13 09:36:18 -07:00
Jack Heysel
e7da81c271
Fix AdminCookieError admin_cookie check
2024-09-13 09:35:43 -07:00
jheysel-r7
300d2f5aa9
Apply suggestions from code review
...
Co-authored-by: Valentin Lobstein <88535377+Chocapikk@users.noreply.github.com >
2024-09-13 11:58:08 -04:00
dledda-r7
83a31c8a2a
Land #19454 , Persistence post module using motd
2024-09-13 09:02:22 -04:00
Chocapikk
04711c4416
Add suggestions
2024-09-12 22:58:44 +02:00
jvoisin
6d659e3aa8
Add modules/exploits/linux/local/motd_persistence.rb
2024-09-12 17:41:47 +02:00
dledda-r7
41a354372c
Land #19449 , Fix an exception when the target is not Ubuntu
2024-09-12 11:10:41 -04:00
h4x-x0r
05f591d005
Cleanup and check method added
...
Cleanup and check method added
2024-09-12 15:43:20 +01:00
Jack Heysel
38a3e7696d
Responded to comments
2024-09-12 07:36:16 -07:00
h4x-x0r
30e6af7791
cleanup
...
Code cleanup and better handling of different use cases.
2024-09-12 14:34:45 +01:00
Jack Heysel
c80a03fece
WP LiteSpeed exploit CVE-2024-44000
2024-09-11 23:31:26 -07:00
Chocapikk
17838e66cd
Add VICIdial Authenticated RCE module (CVE-2024-8504)
2024-09-12 01:37:44 +02:00
Jack Heysel
dd5dd54af1
beta commit module working
2024-09-11 15:23:46 -07:00
Chocapikk
644b15e421
Add header
2024-09-11 21:31:52 +02:00
Chocapikk
550a376210
Add suggestions + documentation
2024-09-11 21:17:44 +02:00
dledda-r7
5e2bf5aaca
fix(modules): spip_bigup_unauth_rce minor fix
2024-09-11 11:46:52 -04:00
dledda-r7
62e852176d
Land #19444 , SPIP BigUp Plugin Unauthenticated RCE
2024-09-11 10:29:12 -04:00
dwelch-r7
9de9b525d9
Land #19432 , Refactoring SPIP Modules for Windows Compatibility and Incorporating SPIP Mixin
2024-09-11 14:57:48 +01:00
Chocapikk
4140808c68
Add VICIdial Time-based SQL Injection Module for Admin Credential Enumeration
2024-09-11 02:25:31 +02:00
jvoisin
8f61e957a8
Improve modules/nops/php/generic.rb
...
```irb
irb(main):001> length = 10
=> 10
irb(main):002> Array.new(length) { ["\t", " ", "\n", "\r"].sample }.join
=> " \r\t\n\t\t\n\t\r"
irb(main):003>
```
2024-09-10 21:28:43 +02:00
Spencer McIntyre
5e71490b66
Fix a typo when the kernel is not Ubuntu
2024-09-09 14:19:20 -04:00
Chocapikk
af5c7ecc8f
Fix bug
2024-09-08 07:54:11 +02:00
Chocapikk
4f859f129c
Fix bug
2024-09-08 07:52:40 +02:00
Chocapikk
59faa1bf0c
Change version fingerprinting
2024-09-08 07:01:23 +02:00
Chocapikk
43fabb07e5
Update doc + module + (mixin see #19444 )
2024-09-08 06:56:13 +02:00
Chocapikk
289f47fac1
Update documentation with docker setup, working mixin now, update module
2024-09-08 05:59:11 +02:00
Takah1ro
8ddf8a04ff
Remove options
2024-09-07 12:44:37 +09:00
Takah1ro
8366252ba2
Not call payload directory
2024-09-07 12:28:40 +09:00
Takah1ro
692531bb87
Call payload directory
2024-09-07 12:16:04 +09:00
Chocapikk
cc6127897f
Add suggestions
2024-09-07 04:00:25 +02:00
Takah1ro
2b63f8bb88
Rename exploit
2024-09-07 10:29:41 +09:00
Takah1ro
731780ca1a
Formatting
2024-09-07 09:21:30 +09:00
Takah1ro
9e832eb483
Use exploit_path variable
2024-09-07 09:19:17 +09:00
Valentin Lobstein
0b768791d6
Update modules/exploits/multi/http/spip_bigup_unauth_rce.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2024-09-07 01:56:21 +02:00
Valentin Lobstein
484cdc940f
Update modules/exploits/multi/http/spip_bigup_unauth_rce.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2024-09-07 01:56:09 +02:00
Valentin Lobstein
c90f9b1ae5
Update modules/exploits/multi/http/spip_bigup_unauth_rce.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2024-09-07 01:55:54 +02:00
Chocapikk
92a25e5a29
Add source (oopsie)
2024-09-07 03:11:49 +02:00
Chocapikk
8b1e1dab1b
Add some comments and CVE ID
2024-09-07 03:09:42 +02:00