7bc30ecf39
add version check
2020-03-27 18:01:43 -04:00
eda3653a51
tidy
2020-03-27 18:01:43 -04:00
4f6e2fe84e
vmware fusion osx lpe
2020-03-27 18:01:43 -04:00
5f0c9942d2
Land #12756 , add dlink dwl2600 exploit
2020-03-27 12:38:35 -05:00
360e3ef039
Fixing DLINK DWL-2600 Scenarios
2020-03-27 11:57:39 -05:00
beb53254c7
Land #13122 , Add Exploit Module For CVE-2020-0646 (SharePoint Workflows XOML RCE)
...
Merge branch 'land-13122' into upstream-master
2020-03-25 11:24:15 -05:00
a69f3eb946
Use the correct its instead of it's
2020-03-24 16:44:18 -04:00
a0cd00dac7
Cleanup module doc and comments for CVE-2020-0646
2020-03-24 10:15:58 -04:00
fd8420cef7
fix install lines
2020-03-24 09:36:17 -04:00
e7da6e77a5
remove and check for instruction text
2020-03-24 09:15:04 -04:00
0b4c047411
doc cleanup
2020-03-24 08:47:21 -04:00
0832604131
Finish up the CVE-2020-0646 SharePoint RCE
2020-03-23 18:14:28 -04:00
fd8ceb0db2
Land #13082 , add Horde Groupware Webmail RCE
2020-03-23 07:32:53 -05:00
922f1ec708
Land #12901 , add Centreon poller rce
2020-03-17 12:16:29 -05:00
5d9d3926e4
Land #13066 , add rConfig 3.9 RCE module
2020-03-16 11:18:59 +00:00
0efe53d869
fix somes code review comments.
2020-03-15 13:30:23 +04:00
126f5ca05d
Add 'Horde CSV import arbitrary PHP code execution' (CVE-2020-8518)
2020-03-14 16:07:51 +01:00
0806e9ef42
Add CmdStager target back in so we can debug it
2020-03-13 11:17:37 -05:00
5f4de7044f
Create rconfig_ajaxarchivefiles_rce.md
2020-03-13 10:07:39 +01:00
83387212a7
Update language to address different patches
2020-03-12 17:50:13 -05:00
0b117849d0
Note specific patch versions
...
Hat tip @sranjit-r7.
2020-03-12 17:40:46 -05:00
ed5dd4dd20
Add module doc
2020-03-12 17:36:53 -05:00
f7d8c43722
Land #13040 , SQL Server Reporting Services ViewState deserialization RCE
2020-03-12 18:26:01 +01:00
77e21de4bd
Add additional docs for setting up an environment
2020-03-11 15:05:51 -04:00
0e163c69ab
Land #12975 , exploits RCE backdoor in PHPStudy
2020-03-10 11:56:26 +00:00
7c54066b0e
Land #13004 , Nagios XI RCE module
2020-03-09 15:57:58 +01:00
96ae2cf9a2
Incorporate additional suggestions from code review.
2020-03-09 11:56:15 +02:00
4c004d51a7
Add an exploit for CVE-2020-0618
2020-03-06 16:21:37 -05:00
8b778bffc0
Incorporate suggestions from code review
2020-03-06 15:50:34 +02:00
9840951f0d
Land #12574 , Chrome CVE-2019-5825 exploit
2020-03-05 13:44:40 -06:00
87b8182131
Land #12384 , Chrome CVE-2018-17463 exploit
2020-03-05 13:44:27 -06:00
eb90bee4a7
Land #12863 , add exploit for PHP-FPM Underflow RCE
2020-03-05 11:43:43 -05:00
4fe7678b01
Land #12910 , Add exploit module for apache activemq traversal
2020-03-05 15:05:13 +00:00
5698f6e51f
Land #13003 , add OpenSMTPD LPE module
2020-03-04 13:32:25 -06:00
83132dd733
Land #13008 , module for Chrome 80 JScreate exploit
2020-03-04 14:49:59 +00:00
9f55e4163f
add documentation
2020-03-04 21:31:14 +08:00
865d15975b
Add automatic grammar selection by version number
2020-03-03 18:44:48 -06:00
975eb742cb
Add old grammar target and refactor check
2020-03-03 17:41:04 -06:00
260aa0533a
Add check method and reorder mixins for super
...
Also fix copypasta'd vulnerable commit.
2020-03-03 17:41:04 -06:00
9be6b0a81e
Add module doc
2020-03-03 17:41:04 -06:00
ba924b3047
Land #13014 , Exchange ECP ViewState exploit
2020-03-03 17:23:17 -06:00
cd6c01ae9d
Add suggestions from code review.
2020-03-03 20:17:13 +02:00
12faf3fad5
Land #12959 , add eyes of network rce module
2020-03-02 15:22:51 -06:00
b3867dc200
Finish up the cve-2020-0688 module
2020-03-02 10:51:25 -05:00
327917c015
add documentation
2020-02-29 15:07:49 +08:00
889f91241a
add documentation
2020-02-29 14:30:59 +08:00
e92b9ef97c
Use AutoCheck mixin in OpenSMTPD CVE-2020-7247
...
Also updates the check to be more precise. I had originally copied the
check method from the Morris worm Sendmail exploit:
220 simh Sendmail 5.51/5.17 ready at Wed, 18 Dec 85 11:14:07 PST
Note that there was no "ESMTP" string in 1985's Sendmail.
2020-02-28 10:42:02 -06:00
5ee7fcaf4a
Add simple changes suggested in code review.
2020-02-28 12:14:38 +02:00
a4ded39d62
Remove unnecessary empty lines in docs. Mostly to restart the Travis CI build check because it got stuck.
2020-02-28 10:34:14 +02:00
99ed3afab3
Change filenames for consistency with existing modules
2020-02-27 17:08:23 +02:00
h00die