 h00die
|
271171f6d2
|
unified now with invisible feature
|
2022-09-18 19:02:59 -04:00 |
|
|
h00die
|
ae91cfa9c5
|
unified_remote exploit
|
2022-09-08 17:09:31 -04:00 |
|
|
Christophe De La Fuente
|
8ba621a291
|
Land #16923, Cisco ASA-X with FirePOWER Services Authenticated Command Injection (CVE-2022-20828)
|
2022-09-02 18:37:37 +02:00 |
|
|
space-r7
|
53b25d7d69
|
Land #16934, support dumping mem by process name
|
2022-09-01 12:58:01 -05:00 |
|
|
Grant Willcox
|
a41ec9388f
|
Land #16725, Add ManageEngine ADAudit Plus and DataSecurity Plus Xnode enum modules, docs and mixin (CVE-2020–11532)
|
2022-09-01 08:46:36 -05:00 |
|
|
Spencer McIntyre
|
35c2a2cc7a
|
Land #16903, enum_shares Cleanup and shell support
enum_shares: Cleanup and support non-meterpreter sessions
|
2022-08-31 13:21:31 -04:00 |
|
|
Spencer McIntyre
|
6965115c8e
|
Land #16786, Zyxel Firewall LPE (CVE-2022-30526)
|
2022-08-31 08:40:23 -04:00 |
|
|
Spencer McIntyre
|
69cc144e04
|
Add module docs
|
2022-08-30 11:12:36 -04:00 |
|
|
Spencer McIntyre
|
ae5a9bd41b
|
Land #16734, Add rtf support to cve-2022-30190
Add rtf support to cve-2022-30190 AKA Follina
|
2022-08-25 17:26:46 -04:00 |
|
|
Spencer McIntyre
|
68eae1664e
|
Tweak the follina docs
|
2022-08-25 17:10:59 -04:00 |
|
|
Christophe De La Fuente
|
1b5338da06
|
Land #16701, Rewrite of Cisco ASA Clientless VPN Brute-force
|
2022-08-25 16:04:48 +02:00 |
|
|
bcoles
|
8939d09efa
|
post/windows/gather/memory_dump: Support dumping processes by name
|
2022-08-24 18:04:29 +10:00 |
|
|
Grant Willcox
|
70e006c493
|
Initial updates from personal review, sans module adjustments
|
2022-08-23 20:48:15 -05:00 |
|
|
Grant Willcox
|
2369e1562c
|
Add in documentation on how to install the target from scratch
|
2022-08-23 11:44:09 -05:00 |
|
|
Ron Bowes
|
abd392c372
|
Add in changes from review
|
2022-08-23 11:44:03 -05:00 |
|
|
Grant Willcox
|
5b61b5097f
|
RuboCop documentation, add in Verification steps, and fix up minor issues
|
2022-08-23 11:44:02 -05:00 |
|
|
Ron Bowes
|
0e6647c7f9
|
Add scenarios
|
2022-08-23 11:43:53 -05:00 |
|
|
Ron Bowes
|
97f8ec9367
|
Documentation, output cleanup
|
2022-08-23 11:43:51 -05:00 |
|
|
Christophe De La Fuente
|
847cd97927
|
Land #16925, Fix a payload bug in unrar_cve_2022_30333
|
2022-08-23 12:59:37 +02:00 |
|
|
Ron Bowes
|
13d8c41f98
|
Clean up and better documentation
|
2022-08-22 11:46:50 -07:00 |
|
|
Spencer McIntyre
|
07fdc1f1ec
|
Land #16907, ms10_092_schelevator: Cleanup
|
2022-08-22 11:53:02 -04:00 |
|
|
Jake Baines
|
b4fe31757d
|
Added module for CVE-2022-20828
|
2022-08-19 12:29:37 -07:00 |
|
|
Jake Baines
|
2242272ef4
|
Added CSRF token support. Fixed an issue with HTTP Keep-Alive 👀
|
2022-08-19 10:51:33 -07:00 |
|
|
Grant Willcox
|
97bce45e69
|
Land #16915, Add exploit for CVE-2022-23277 (Exchange RCE)
|
2022-08-19 11:11:46 -05:00 |
|
|
bcoles
|
666a3efcfd
|
ms10_092_schelevator: Cleanup
|
2022-08-19 15:19:28 +10:00 |
|
|
bcoles
|
28a599804e
|
enum_shares: Cleanup and support non-meterpreter sessions
|
2022-08-19 14:08:59 +10:00 |
|
|
Christophe De La Fuente
|
d49b74d164
|
Land #16809, Add exploit module for Advantech iView command injection - CVE-2022-2143
|
2022-08-18 17:19:14 +02:00 |
|
|
Christophe De La Fuente
|
5cf7a2de92
|
Fix minor typos in the doc
|
2022-08-18 13:32:00 +02:00 |
|
|
Spencer McIntyre
|
7c1dd17c86
|
Add a missing verison, fix typos
|
2022-08-17 17:36:31 -04:00 |
|
|
bwatters
|
115955591b
|
Fix up the Unicode coversions and update docs
|
2022-08-17 13:21:56 -05:00 |
|
|
Spencer McIntyre
|
62ab42b797
|
Update vulnerable version numbers and docs
|
2022-08-17 08:55:46 -04:00 |
|
|
Jake Baines
|
f093794864
|
Added Cisco ASA ASDM/HTTP brute force module
|
2022-08-16 06:31:25 -07:00 |
|
|
space-r7
|
dc4d3ff21b
|
Land #16881, fix crash in forward_pageant module
|
2022-08-11 17:40:33 -05:00 |
|
|
space-r7
|
a68986599d
|
Land #16841, add enum_powershell_env cleanup
|
2022-08-10 14:00:59 -05:00 |
|
|
Jack Heysel
|
c54658b035
|
Land #16878, Clean up enum_logged_on_users
Adds support for non-Meterpreter sessions, fixes
rubo-cop and msftidy_docs violations
|
2022-08-10 14:17:50 -04:00 |
|
|
Jack Heysel
|
06f0fffc20
|
Land #16856, Webmin package updates RCE module
This module exploits an arbitrary command injection
in Webmin versions prior to 1.997.
|
2022-08-09 16:13:19 -04:00 |
|
|
Jack Heysel
|
0be211025e
|
Land #16873, Cleanup and support non-meterpreter
This PR cleans up and adds support for non-meterpreter
sessions as well as adds documentation and error-handling
|
2022-08-09 15:34:21 -04:00 |
|
|
Spencer McIntyre
|
0e148d6ba4
|
Update and rename the module
|
2022-08-09 13:32:09 -04:00 |
|
|
bwatters
|
a8e73d9fa9
|
Land #16807, New module for 0-day Zimbra privilege escalation
Merge branch 'land-16807' into upstream-master
|
2022-08-09 11:18:21 -05:00 |
|
|
Christophe De La Fuente
|
38b845f247
|
Fix from code review
- Documentation typos
- Adding ARM64 support
|
2022-08-09 15:09:25 +02:00 |
|
|
bcoles
|
0ac1a9d704
|
forward_pageant: Cleanup and fix default UNIX socket path
|
2022-08-08 12:56:52 +10:00 |
|
|
bcoles
|
b2683981dc
|
enum_logged_on_users: Cleanup
|
2022-08-08 01:50:36 +10:00 |
|
|
bcoles
|
6380c69775
|
enum_artifacts: Cleanup and support non-meterpreter sessions
|
2022-08-07 16:01:45 +10:00 |
|
|
Jeffrey Martin
|
c45262cd46
|
Land #16800, Add support for OpenSSL 3
|
2022-08-05 14:20:51 -05:00 |
|
|
Ron Bowes
|
be25e1fc77
|
Add documentation
|
2022-08-05 13:55:05 -05:00 |
|
|
bwatters
|
74eff9ffac
|
Land #16851, Add Cassandra Web file read auxiliary module
Merge branch 'land-16851' into upstream-master
|
2022-08-05 13:04:07 -05:00 |
|
|
space-r7
|
0334beada2
|
Land #16758, add ManageEngine ADAudit Plus exploit
|
2022-08-05 12:19:42 -05:00 |
|
|
space-r7
|
4202502992
|
make some prints vprints, add steps
|
2022-08-05 11:34:46 -05:00 |
|
|
Ron Bowes
|
7c21c57564
|
Merge branch 'master' into manageengine-adauditplus-cve-2022-28219
|
2022-08-04 14:07:50 -07:00 |
|
|
Christophe De La Fuente
|
9c6a198453
|
Land #16796, Path traversal vulnerability in RARLAB UnRAR < 6.12 with Zimbra RCE module
|
2022-08-04 19:44:57 +02:00 |
|