bc7840ea7f
Add wp_givewp_rce exploit module
2024-08-27 19:50:35 +02:00
63ac22950f
Adds support to test custom payload branches
2024-08-21 15:02:19 +01:00
636c72965c
Land #19084 , Add CVE-2022-1373 and CVE-2022-2334 exploit chain
...
Merge branch 'land-19084' into upstream-master
2024-07-19 12:22:25 -05:00
1881d4e8b4
commit and sign binary
2024-07-19 12:07:59 -05:00
e9c511c979
Add documentation and some updates
2024-07-16 16:34:28 +02:00
1abc42a873
Add module
2024-07-09 18:34:27 +02:00
bea708d24c
Add exploit module for CVE-2024-5084: WordPress Hash Form Plugin RCE
2024-05-28 18:27:02 +02:00
26a108aadc
Land #19046 , Apache Solr Backup Restore RCE [CVE-2023-50386]
2024-04-23 14:08:33 -04:00
afd4b8af2e
Remove x86 things, include AutoCheck
2024-04-19 22:49:40 +08:00
854d22e5db
Land #17294 , Add additional reliability metadata
2024-04-18 15:26:34 -04:00
0e1961d7e9
Add additional reliability metadata
2024-04-17 21:47:27 +01:00
6b2bdc893b
chore: remove repetitive words
...
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net >
2024-04-15 11:06:50 +08:00
6268235cd3
Add CVE-2022-1373 and CVE-2022-2334 exploit chain
2024-04-13 18:10:45 +08:00
705cfb5016
Fix empty banner (never set) issue
2024-04-05 19:24:19 +03:00
7f62dd2143
Responded to comments
2024-04-04 13:39:22 -07:00
059cfd9a48
Reduced conf folder txt files
2024-04-02 11:40:00 -07:00
03fced404a
Apache Solr Backup Restore RCE
...
Writing file to disk working
working on linux
wip authentcaiton
Consolodated conf folders into one
Renamed conf1 to conf in msf data dir
Randomize the configuration name
Docs plus finishing touches
rubocop
Updated exploit file location
Removed unused external dir
Reduced conf folder
2024-04-02 11:33:52 -07:00
3dc638909f
Land #18906 , Add template data files for ESC2 and ESC3
...
Merge branch 'land-18906' into upstream-master
2024-03-29 15:29:52 -05:00
abb2eb7ffd
Land #18891 , Add RCE module for wp bricks builder
...
This PR adds the wp_bricks_builder_rce exploit module that targets a
known vulnerability in the WordPress Bricks Builder Theme, versions
prior to 1.9.6.
2024-03-26 14:46:35 -07:00
d03dfe8991
Land #18841 , Update sap_icm_paths.txt wordlist
...
This PR updates the sap_icm_paths.txt wordlist with the newest enteries.
2024-03-19 16:40:09 -07:00
88ea9af859
Add ESC2 and ESC3 templates too
2024-02-29 16:15:39 -05:00
97f75c19e4
Show the objectSID of groups as well
2024-02-26 17:28:41 -05:00
f04b66d6dd
Add wp_bricks_builder_rce
2024-02-26 22:09:38 +01:00
8cddffa3d1
Land #18700 , Add Kafka-ui Unauth RCE module
...
This PR adds an exploit module for CVE-2023-52251 which
is an unauthenticated rce vulnerability in Kafka's UI.
2024-02-16 15:38:52 -05:00
7b56d012e8
Land #18678 , add LDAP capture capabilities
2024-02-15 22:11:04 +00:00
564c3f8e02
merge sap_icm_paths.txt with seclists sap.txt wordlist and add paths related to potential information leak
2024-02-15 16:03:31 +01:00
f5c71d09c2
using data/kafka_ui_versions.json for the version check
2024-02-14 20:57:46 +00:00
a75013e51a
Land #18616 , Fix aarch64 elf shared SIGBUS error
...
Fix aarch64 elf shared object bus error
2024-02-14 13:30:29 -05:00
d20ef7a08b
add LDAP to capture plugin
2024-01-23 13:52:35 -06:00
b8aa55c322
Land #18633 , WordPress Backup Migration Plugin PHP Filter Chain RCE (CVE-2023-6553)
2024-01-17 18:42:52 +01:00
1ba704b1cb
Land #18398 , Update deprecated report_auth_info in various modules
2024-01-16 19:30:56 +00:00
fb26c93291
Land #18541 , Glibc Tunables Privilege Escalation CVE-2023-4911 (Looney Tunables)
2023-12-20 20:04:21 +01:00
b86df4820c
Responded to comments from jvoisin
2023-12-19 13:50:09 -05:00
2ed3b771ed
Updated python exploit
2023-12-19 00:26:54 -05:00
c895364675
Initial commit, files created
2023-12-18 19:26:14 -05:00
45d2c7f4e0
Land #18566 , CVE-2023-22518: Confluence Auth Bypass Restore From Backup RCE
2023-12-18 18:51:36 +01:00
e9ff2e55dc
Remove useless include of Report mixin in psnuffle.rb
2023-12-17 22:53:19 +05:30
a58f7f0558
Minor fixes to modules to use report_cred
2023-12-16 23:40:30 +05:30
d9aa7f914e
Added newline to PoC and removed empty file
2023-12-14 18:42:09 -05:00
df111afb06
Glibc Tunables Exploit
2023-12-14 18:28:43 -05:00
4e106c2a73
Fix aarch64 elf shared object bus error
2023-12-13 00:26:53 +00:00
7b74b758ad
Removed unnecessary files in zip backup
2023-12-11 18:23:22 -05:00
3bad98afc6
Land #18488 , add kerberos_tickets post module
...
Adds a module to manage kerberos tickets from a compromised
host. This PR also includes rail gun enhancements.
2023-12-07 19:12:48 -05:00
02c892c3fc
Add hierarchical search table support
2023-11-30 16:32:29 +00:00
65ea1188e2
Add suggested changes
2023-11-23 18:22:36 +01:00
c0be4c2f72
working end to end unix confluence 7.18
2023-11-22 19:49:38 -05:00
e6e2106140
Auth bypass, auth, shell upload, working
2023-11-21 22:14:27 -05:00
54bce7fcb5
Add module docs
2023-10-27 12:47:19 -04:00
b3b1595ef4
vmware aria ssh keys exploit
2023-10-16 13:06:17 -04:00
5a6dc7f9a6
Initial commit of CVE-2023-43654
2023-10-12 09:27:26 -04:00
Chocapikk