Commit Graph

38478 Commits

Author SHA1 Message Date
sfewer-r7 c6de00968f typo 2024-06-10 17:17:39 +01:00
sfewer-r7 3a19a54c59 remove dead link 2024-06-10 17:17:28 +01:00
Jack Heysel 12b1936e16 Fixed typo added Options section docs 2024-06-10 07:39:24 -07:00
h00die-gr3y 6a77c2e562 Final tweaks in check method 2024-06-08 11:33:55 +00:00
h00die-gr3y 0e3471d543 Final draft 2024-06-07 19:47:06 +00:00
Spencer McIntyre 13a24d9f5c Update the version extraction regex 2024-06-07 11:27:42 -04:00
sfewer-r7 998724f683 first commit for cve-2024-4577 2024-06-07 15:44:05 +01:00
sfewer-r7 e325d23526 first commit for cve-2024-4577 2024-06-07 15:43:40 +01:00
h00die 99b3b607cc Update azure_cli_creds.rb 2024-06-07 08:53:43 -04:00
h00die-gr3y 55fa94995b Updated check method 2024-06-06 22:23:35 +00:00
h00die 7594a4103c moving azure_cli_files around and stubbing out content
Update azure lib with process_context_contents

Update azure_spec.rb

Update azure.rb

Update azure_spec.rb

Update azure_cli_creds.rb

fix lint warning

add function to print consolehost_history

print_consolehost_history spec updates

fixing azure_cli spec, and errors
2024-06-06 17:31:19 -04:00
Spencer McIntyre d4696c0487 Document the auth bypass module 2024-06-06 15:48:25 -04:00
Spencer McIntyre ba2732fa8a Add the dedicated auth bypass module 2024-06-06 13:46:21 -04:00
softScheck c7509d0a6c junos_phprc: HttpClientTimeout as default 2024-06-06 19:27:59 +02:00
sfewer-r7 c8208704be add in exploit module for CVE-2024-23692 2024-06-06 18:04:14 +01:00
adfoster-r7 bf177642b4 Land #19199, Improves UX for scanner/login modules 2024-06-06 16:03:17 +01:00
e2002e 1b1e215cd6 Merge branch 'rapid7:master' into master 2024-06-06 16:37:42 +02:00
softScheck GmbH 0c69968e4f junos_phprc: removed commented out line
Co-authored-by: Simon Janusz <85949464+sjanusz-r7@users.noreply.github.com>
2024-06-06 16:03:35 +02:00
softScheck GmbH 769eb071cb junos_phprc: use faker IPv4
Co-authored-by: Simon Janusz <85949464+sjanusz-r7@users.noreply.github.com>
2024-06-06 16:03:00 +02:00
e2002e 2a20894a27 Update zoomeye_search.rb
get rid of unnecessary includes
2024-06-05 15:53:50 +02:00
Christophe De La Fuente 120fa0f2fe Land #19208, Add exploit module for CVE-2024-5084: WordPress Hash Form Plugin RCE 2024-06-05 10:17:02 +02:00
Christophe De La Fuente 67ec4baa66 PR-19208: Add DefaultTarget to the info hash 2024-06-05 10:14:48 +02:00
James Otten e8571f23ed Fix typo 2024-06-04 19:52:02 -04:00
James Otten 37f7e17fd0 Add osx support to post/multi/gather/azure_cli_creds 2024-06-04 19:52:02 -04:00
James Otten 1cd1ae5049 Add new module post/multi/gather/azure_cli_creds 2024-06-04 19:52:02 -04:00
Jack Heysel 9d47372fe6 rubocop 2024-06-03 15:43:25 -04:00
jheysel-r7 a8335478c7 Apply suggestions from code review
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
2024-06-03 15:33:46 -04:00
softScheck 00ff617056 junos_phprc: session creation, old version switch, allow ssh root login, working timeouts 2024-06-03 18:33:06 +02:00
cgranleese-r7 60e5393102 Updates login/scanner modules to make use of ReportSummary mixin 2024-06-03 11:02:15 +01:00
cgranleese-r7 48f89a2aad Improves UX for scanner/login modules 2024-06-03 10:56:59 +01:00
e2002e 8f78c20f75 Update zoomeye_search.rb 2024-06-03 05:16:34 +02:00
PizzaHat c0e443e829 Update wp_ajax_load_more_file_upload.rb
Updated original author
2024-06-01 16:00:45 +02:00
remmons-r7 7fdff871e4 Add Ruby module for CVE-2024-24919 2024-05-31 14:29:38 -05:00
Chocapikk 6b127249fa Add suggestions 2024-05-31 20:56:03 +02:00
alanfoster 562e1dc453 Add osx aarch64 bind tcp payload 2024-05-31 18:21:24 +01:00
alanfoster 7955381de5 Add osx aarch64 shell reverse tcp payload 2024-05-31 18:05:15 +01:00
alanfoster dbeeadefc7 Add osx aarch64 exec payload 2024-05-31 17:51:38 +01:00
adfoster-r7 1281f4726f Land #19209, update fileformat modules to show the default template datastore values 2024-05-31 15:12:48 +01:00
Jack Heysel d8d1ea7ffb Added on_new_session method 2024-05-29 16:04:00 -04:00
Jack Heysel 80ee458410 Land #19151, Add Flowmon Priv Esc Feature Module
Privilege escalation module for Progress Flowmon unpatched feature
2024-05-29 11:35:53 -04:00
Zach Goldman 847b29178a change nil guards to default values, nil or blank guards for certain datastore options 2024-05-29 09:34:58 -05:00
Jack Heysel cc7aeb4364 Fix module cleanup 2024-05-29 08:39:06 -04:00
Jack Heysel 72f332aba0 Land #19150, Add Flowmon Command Injection Module
Unauthenticated Command Injection Module for Progress Flowmon
CVE-2024-2389
2024-05-29 08:28:37 -04:00
Jack Heysel e57f4d3cb5 Change xml to html in get_html_document 2024-05-28 16:29:55 -04:00
Jack Heysel 5d2a6aa4a1 Updated authors 2024-05-28 16:03:56 -04:00
Jack Heysel 9955724f0a Fixed check method, responded to comments 2024-05-28 15:54:28 -04:00
Chocapikk bea708d24c Add exploit module for CVE-2024-5084: WordPress Hash Form Plugin RCE 2024-05-28 18:27:02 +02:00
sud0Ru 027d7ae423 Coreccting rubocop issues 2024-05-28 05:42:21 -04:00
sud0Ru 369db16a10 adding domain users enumeration module through ms-nrpc interface 2024-05-27 15:36:31 -04:00
Jack Heysel d13ce0b1b8 rubocop fixes 2024-05-27 15:05:07 -04:00