adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
77,217 Commits 27 Branches 1,043 Tags
72ae91e4bc763da378bbd5be104f642f9d7eebc1
Commit Graph

77217 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
jenkins-metasploit 72ae91e4bc automatic module_metadata_base.json update 2025-05-15 10:41:52 +00:00
msutovsky-r7 c598d8b4b0 Land #20020, adds module for Nextcloud Workflow Remote Code Execution 
Add exploit module for the nextcloud workflow vulnerability CVE-2023-26482
 2025-05-15 12:31:51 +02:00
whotwagner 97ecaa7c30 Refactoring indentations 2025-05-15 09:16:26 +00:00
whotwagner 61dc956bb3 Update modules/exploits/unix/webapp/nextcloud_workflows_rce.rb 
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
 2025-05-15 11:15:05 +02:00
whotwagner 72c9d5b038 Update modules/exploits/unix/webapp/nextcloud_workflows_rce.rb 
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
 2025-05-15 11:14:25 +02:00
whotwagner 9b619cbc58 Update modules/exploits/unix/webapp/nextcloud_workflows_rce.rb 
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
 2025-05-15 11:12:05 +02:00
jenkins-metasploit 59a8798dd5 automatic module_metadata_base.json update 2025-05-15 09:01:16 +00:00
Diego Ledda 6c39f9331f Land #20162, modules/auxiliary/sqli: Resolve RuboCop violations 
Land #20162, modules/auxiliary/sqli: Resolve RuboCop violations
 2025-05-15 10:52:37 +02:00
Metasploit 308c794c8f Bump version of framework to 6.4.65 2025-05-15 03:33:18 -05:00
jenkins-metasploit f83d155570 automatic module_metadata_base.json update 6.4.64 2025-05-15 08:31:24 +00:00
Diego Ledda f7e7b5ad14 Land #20154, modules/auxiliary/dos: Resolve RuboCop violations 
Land #20154, modules/auxiliary/dos: Resolve RuboCop violations
 2025-05-15 10:22:51 +02:00
jenkins-metasploit 0093512369 automatic module_metadata_base.json update 2025-05-15 05:30:47 +00:00
msutovsky-r7 e3649b31fe Land #20123, adds module for path traversal and credential harvester in PowerCom UPSMON Pro 
POWERCOM UPSMON PRO Path Traversal (CVE-2022-38120) and Credential Harvester (CVE-2022-38121) Module
 2025-05-15 07:23:07 +02:00
h4x-x0r 3f4c8a5161 Update upsmon_traversal.rb 2025-05-15 04:28:53 +01:00
adfoster-r7 520b9dfc0a Merge pull request #20111 from cdelafuente-r7/fix/exploit_attempts 
Fix issue that prevented to correctly register exploit attempts
 2025-05-15 00:20:12 +01:00
bcoles 8ea5d3214f modules/auxiliary/dos: Resolve RuboCop violations 2025-05-15 08:43:24 +10:00
Spencer McIntyre 1c94b2c8dc Merge pull request #20181 from bwatters-r7/fix/wordpress_login 
Change check for redirect in wordpress_login to be less specific
 2025-05-14 12:50:43 -04:00
whotwagner 0e0b84d252 Error message if nextcloud-upload fails 2025-05-14 13:53:59 +00:00
jenkins-metasploit ba25dd48b3 automatic module_metadata_base.json update 2025-05-14 13:41:16 +00:00
whotwagner 2259de33c1 Fixed a txpo in nextcloud_workflows_rce.md 2025-05-14 13:40:47 +00:00
msutovsky-r7 fe5f56cac0 Land #20159, adds module for privilege escalation in Wordpress (CVE-2025-2563) 
Add Unauthenticated privesc for WP User Registration & Membership plugin (CVE-2025-2563)
 2025-05-14 15:33:30 +02:00
jenkins-metasploit 90f04f6fb5 automatic module_metadata_base.json update 2025-05-14 08:58:46 +00:00
Diego Ledda 1f230f3731 Land #20153, modules/auxiliary/dos/http: Resolve RuboCop violations 
Land #20153, modules/auxiliary/dos/http: Resolve RuboCop violations
 2025-05-14 10:45:03 +02:00
Diego Ledda 621840e9df Land #20152, modules/auxiliary/dos/windows: Resolve RuboCop violations 
Land #20152, modules/auxiliary/dos/windows: Resolve RuboCop violations
 2025-05-14 10:42:58 +02:00
jenkins-metasploit d294cc6029 automatic module_metadata_base.json update 2025-05-14 06:10:17 +00:00
msutovsky-r7 7d8d0230cb Land #20026, adds module for CVE-2024-57487 
New Exploit Module & Documentation for CVE-2024-57487
 2025-05-14 08:00:20 +02:00
Brendan 13d18f2c83 Update lib/msf/core/exploit/remote/http/wordpress/login.rb 
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
 2025-05-13 17:32:48 -05:00
jenkins-metasploit 33e3e0851f automatic module_metadata_base.json update 2025-05-13 21:58:13 +00:00
Brendan 1982d81e22 Merge pull request #20098 from smashery/execute-assembly32 
Execute assembly32
 2025-05-13 16:49:25 -05:00
jenkins-metasploit a041b21cc2 automatic module_metadata_base.json update 2025-05-13 20:11:39 +00:00
Spencer McIntyre 3d67f9ef55 Merge pull request #20161 from bcoles/rubocop-modules-auxiliary-fuzzers 
modules/auxiliary/fuzzers: Resolve RuboCop violations
 2025-05-13 16:04:00 -04:00
Chocapikk 88ffe892e0 Remove lower bound 2025-05-13 21:48:49 +02:00
Valentin Lobstein 7f98f2fad7 Update modules/exploits/multi/http/wp_user_registration_membership_escalation.rb 
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
 2025-05-13 21:42:10 +02:00
Chocapikk c415675c39 Reduce wordpress_version calls 2025-05-13 21:42:10 +02:00
Chocapikk a2ff0c1f92 Apply suggestion to store created WordPress admin creds 2025-05-13 21:42:09 +02:00
Chocapikk e335841bb0 Add Unauthenticated privesc for WP User Registration & Membership plugin (CVE-2025-2563) 2025-05-13 21:42:09 +02:00
aaryan-11-x 1e523e4e0b MsfTidy Fixes again 2025-05-13 23:54:36 +05:30
jenkins-metasploit 9379a2af4f automatic module_metadata_base.json update 2025-05-13 16:34:11 +00:00
Brendan b41f0a4430 Merge pull request #20178 from bcoles/modules-post-windows-gather-credentials 
modules/post/windows/gather/credentials: Update PackRat module descriptions
 2025-05-13 11:25:50 -05:00
jenkins-metasploit 432c7e8607 automatic module_metadata_base.json update 2025-05-13 16:01:34 +00:00
bwatters-r7 ce8ceaddbc Change check for redirect to be less specific 2025-05-13 10:59:16 -05:00
Brendan cb6495e5bc Merge pull request #20146 from Chocapikk/wp_suretriggers_auth_bypass 
Add WP SureTriggers ≤1.0.78 admin-creation & RCE module (CVE-2025-3102)
 2025-05-13 10:53:44 -05:00
whotwagner 22b80bbef3 Added modules_metadata_base 2025-05-13 13:52:14 +00:00
whotwagner 09fc435346 Removed db/modules_metadata_base.json from 2025-05-13 13:51:05 +00:00
whotwagner 09aaf5865c Rearranged code and removed wait_for_payload_session 2025-05-13 13:48:56 +00:00
whotwagner ad9651db5d Update modules/exploits/unix/webapp/nextcloud_workflows_rce.rb 
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
 2025-05-13 13:48:56 +00:00
whotwagner 9b0aee41f4 Update modules/exploits/unix/webapp/nextcloud_workflows_rce.rb 
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
 2025-05-13 13:48:56 +00:00
whotwagner 83786100b3 Update modules/exploits/unix/webapp/nextcloud_workflows_rce.rb 
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
 2025-05-13 13:48:56 +00:00
whotwagner 2ba8e1c255 Update modules/exploits/unix/webapp/nextcloud_workflows_rce.rb 
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
 2025-05-13 13:48:56 +00:00
whotwagner 6aa2170fbc Update modules/exploits/unix/webapp/nextcloud_workflows_rce.rb 
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
 2025-05-13 13:48:56 +00:00