Commit Graph

7358 Commits

Author SHA1 Message Date
Brendan d1c9410a95 Merge pull request #20594 from HamzaSahin61/feat/redoc-exposed-scanner
auxiliary(scanner/http/redoc_exposed): detect exposed ReDoc API docs UI
2025-10-24 11:19:13 -05:00
msutovsky-r7 d8357ce329 Land #20564, adds persistence suggester module
persistence suggester
2025-10-24 15:29:54 +02:00
HamzaSahin61 e17b2a0598 Remove 'How It Works' section from redoc_exposed.md
Removed the 'How It Works' section detailing the probing process for REDOC.
2025-10-23 01:45:38 +03:00
HamzaSahin61 9640152f25 Update redoc_exposed.md 2025-10-23 01:31:09 +03:00
adfoster-r7 f24552cdfd Merge pull request #20632 from h00die/linqpad_cleanup
Linqpad cleanup
2025-10-22 13:23:32 +01:00
HamzaSahin61 49c1481687 Update redoc_exposed.md 2025-10-22 02:04:27 +03:00
vognik 74c7f98ad9 code review changes from @msutovsky-r7 2025-10-20 09:00:24 -07:00
h00die 8490ce844d linqpad persistence cleanup 2025-10-19 10:08:33 -04:00
h00die 287cba7436 linqpad persistence cleanup 2025-10-19 10:05:36 -04:00
vognik 9ad83f6454 Add Vvveb CMS Authenticated RCE (CVE-2025-8518) 2025-10-18 17:12:05 -07:00
adfoster-r7 52f07b6820 Merge pull request #20627 from h00die/fix_post_docs_options
Update post docs to use modern h3 for options instead of original spec (bold)
2025-10-17 21:09:59 +01:00
h00die c86aefa328 remove 4 space indents in options 2025-10-16 19:34:39 -04:00
h00die 976c208414 remove 4 space indents in options 2025-10-16 19:31:50 -04:00
jheysel-r7 2d5f10d965 Merge pull request #20626 from h00die/fix_payload_docs_options
Update payload docs to use modern h3 for options instead of original spec (bold)
2025-10-16 08:42:07 -07:00
Diego Ledda 644bcfabbb Merge pull request #20522 from h00die/modern_persistence_sysvinit
update systemvinit to persistence mixin
2025-10-16 16:35:16 +02:00
h00die 40f3d4b72e fix doc options bold to h3 2025-10-15 16:38:17 -04:00
h00die 6cc4465f6f fix doc options bold to h3 2025-10-15 16:28:24 -04:00
jheysel-r7 677af06c9f Merge pull request #20621 from h00die/modern_periodic_script
update periodic_script to persistence mixin
2025-10-15 10:23:56 -07:00
h00die c629dc408c replace some bolds 2025-10-14 20:44:00 -04:00
h00die 1f479ddedc update doc options to h3 from bold 2025-10-14 20:23:50 -04:00
h00die 55583bd2c8 review for sysv persistence 2025-10-14 19:30:06 -04:00
h00die 1e9dd04505 update periodic_script to new persistence mechanism 2025-10-13 17:48:00 -04:00
h00die 058e858e82 update systemvinit to persistence mixin 2025-10-13 13:42:41 -04:00
HamzaSahin61 bbd2767fe1 Update redoc_exposed.md 2025-10-10 00:10:38 +03:00
Brendan 91c0adb17f Merge pull request #20585 from vognik/CVE_2025_60787
Add MotionEye Authenticated RCE (CVE-2025-60787)
2025-10-09 13:50:25 -05:00
Vognik 267a26b763 code review changes from smcintyre-r7@ 2025-10-09 21:51:31 +04:00
jheysel-r7 a8ec46f2b2 Merge pull request #20579 from nakkouchtarek/listmonk_env_disclosure
Add Listmonk Template Function Environment Variable Disclosure Auxiliary Module (CVE-2025-49136)
2025-10-08 14:00:37 -07:00
Tarek Nakkouch 7c840a1bac Add Listmonk environment disclosure auxiliary module 2025-10-08 21:02:24 +01:00
HamzaSahin61 db6dbf4f8e Update redoc_exposed.md 2025-10-08 21:19:35 +03:00
HamzaSahin61 941f3f3b72 Update redoc_exposed.md 2025-10-08 03:42:06 +03:00
HamzaSahin61 43526ee0e0 Update redoc_exposed.md 2025-10-08 03:37:43 +03:00
HamzaSahin61 67490e4244 Create redoc_exposed.md 2025-10-08 01:46:56 +03:00
Vognik c05a9d3f7f code review changes from @bwatters-r7 2025-10-07 03:07:26 +04:00
jheysel-r7 f61a321dcd Merge pull request #20591 from survivant/feature/fix-typos-hacktoberfest
Fix typos in documentation / hacktoberfest
2025-10-06 13:43:32 -07:00
jheysel-r7 dbf84abec3 Merge pull request #20586 from bcoles/windows_script_host_wsf
Add Malicious Windows Script Host Script File (.wsf) module
2025-10-06 13:21:56 -07:00
Vognik 25624e9ae0 code review changes 2025-10-06 15:46:59 +04:00
Sebastien Dionne 77f760c1bf Fix typos in documentation 2025-10-05 12:01:16 -04:00
bcoles 9a8d1473d8 Add Malicious Windows Script Host Script File (.wsf) module 2025-10-05 20:16:00 +11:00
Vognik 6d295b993a Add MotionEye Unauthenticated RCE (CVE-2025-60787) 2025-10-05 05:32:32 +04:00
msutovsky-r7 1491edeeb0 Land #20563, adds automatic identifying and checking of CAs when running registry check
Update reg checks when DC and CA are separate
2025-10-03 16:45:09 +02:00
Jack Heysel 74d229e11f Multiple CA testing 2025-10-02 18:14:00 -07:00
msutovsky-r7 b5c9547cc0 Land #20456, adds documentation for wordpress_cp_calendar_sqli auxiliary module
Add documentation for auxiliary/scanner/http/wordpress_cp_calendar_sqli
2025-10-02 08:02:12 +02:00
Martin Sutovsky 3cc91f544e Fixes msftidy_docs issues 2025-10-02 07:39:48 +02:00
Martin Sutovsky 103ae28696 Addressing comments 2025-10-02 07:36:10 +02:00
msutovsky-r7 6e06963495 Land #20566, adds support to esc_update_ldap module when shadow credentials are not required
Update esc_update_ldap module so shadow creds not required
2025-10-01 08:39:26 +02:00
msutovsky-r7 81127918fe Land #20518, adds NTLM leak/LNK padding fileformat modules
Adds fileformat NTLM leak/LNK padding modules
2025-09-29 15:34:40 +02:00
Martin Sutovsky c044db677d Cleares up docs 2025-09-29 14:29:11 +02:00
msutovsky-r7 a23473a103 Land #20565, moves image exec module to persistence category and mixin
Modern persistence image exec
2025-09-29 09:32:25 +02:00
msutovsky-r7 79ff667d5e Land #20538, adds systemd override persistence module
persistence: systemd service override
2025-09-26 15:57:31 +02:00
h00die 09475fc2b9 peer review 2025-09-25 16:38:50 -04:00