 RAMELLA Sébastien
|
876836bcce
|
update doc and fix module syntax.
|
2020-06-16 10:47:51 -05:00 |
|
|
RAMELLA Sébastien
|
fbffefbdb2
|
add. original module edb reference.
|
2020-06-16 10:47:50 -05:00 |
|
|
RAMELLA Sébastien
|
1ab77af898
|
fix. remove setup function initialization
|
2020-06-16 10:47:50 -05:00 |
|
|
RAMELLA Sébastien
|
624c69bebf
|
add. authenticated exploitation
|
2020-06-16 10:47:50 -05:00 |
|
|
RAMELLA Sébastien
|
1a9431d965
|
fix. json parser and add random number into sqli
|
2020-06-16 10:47:49 -05:00 |
|
|
RAMELLA Sébastien
|
c704dba44c
|
add. agent tesla panel rce exploit module
|
2020-06-16 10:47:49 -05:00 |
|
|
Shelby Pace
|
51fca24a38
|
Land #13545, add drag / drop file upload rce
|
2020-06-04 10:35:03 -05:00 |
|
|
Shelby Pace
|
329ba1091f
|
add session_created, fix typo
|
2020-06-04 10:32:17 -05:00 |
|
|
h00die
|
0df1a2a502
|
more error handling
|
2020-06-04 06:45:29 -04:00 |
|
|
William Vu
|
8ad7b71829
|
Land #13552, WebLogic CVE-2020-2883 exploit
|
2020-06-03 19:52:52 -05:00 |
|
|
h00die
|
434a1f587f
|
rubocop
|
2020-06-03 10:44:48 -04:00 |
|
|
h00die
|
a2e385e565
|
more fixes
|
2020-06-03 10:42:25 -04:00 |
|
|
Zenofex
|
8f587e4c6f
|
A user reported that the CVE-2020-12720 modules were not properly handling cases where a table prefix was not used, this guard clauses was redundant in that the one inside the get_table_prefix method is already checking the result of the SQL injection performed.
|
2020-06-02 19:16:35 -05:00 |
|
|
h00die
|
ff067088fd
|
docs
|
2020-06-02 16:24:04 -04:00 |
|
|
Shelby Pace
|
b7dd7b3f7a
|
remove old version, rubocop
|
2020-06-02 14:24:18 -05:00 |
|
|
Shelby Pace
|
ffd79ff8cc
|
add exploit for most versions
|
2020-06-01 09:41:56 -05:00 |
|
|
h00die
|
41b512ecda
|
dnd multi file upload rce
|
2020-05-30 21:07:46 -04:00 |
|
|
Zenofex
|
7bf2a802b1
|
Check for existance of res in guard clauses through getindexablecontent exploit and aux module.
|
2020-05-28 20:00:19 -05:00 |
|
|
Zenofex
|
e5dcb2e23c
|
Switch to use res.get_json_document from JSON.parse and more cleanup.
|
2020-05-28 11:16:44 -05:00 |
|
|
Zenofex
|
b8e8606977
|
Added actions to module for dumpuser/dumpall option (and removed module option) plus misc syntax formatting.
|
2020-05-28 10:13:18 -05:00 |
|
|
Zenofex
|
7ef7af0d30
|
Ran msftidy across documentation and made recommended changes to clean up module for MSF pull request.
|
2020-05-26 17:31:02 -05:00 |
|
|
Zenofex
|
e7d7ddc213
|
Initial push of vbulletin_getIndexableContent auxillary and exploit modules + documentation.
|
2020-05-23 03:20:46 -05:00 |
|
|
William Vu
|
8473662e32
|
Land #13463, Oracle WebLogic CVE-2020-2555 exploit
|
2020-05-20 23:21:07 -05:00 |
|
|
Shelby Pace
|
abff1cd731
|
change true to false
|
2020-05-19 14:59:47 -05:00 |
|
|
Shelby Pace
|
378fe767b5
|
randomize class name
|
2020-05-19 14:35:36 -05:00 |
|
|
Shelby Pace
|
8f43ffa8e3
|
change title
|
2020-05-19 13:59:27 -05:00 |
|
|
Shelby Pace
|
6657d3480e
|
remove returns, add autocheck
|
2020-05-19 13:47:39 -05:00 |
|
|
Shelby Pace
|
837f307740
|
rubocop fixes
|
2020-05-19 13:12:23 -05:00 |
|
|
Shelby Pace
|
d86e008914
|
Update modules/exploits/multi/misc/weblogic_deserialize_badattrval.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
|
2020-05-19 12:29:56 -05:00 |
|
|
Shelby Pace
|
c51a32eaf2
|
Update modules/exploits/multi/misc/weblogic_deserialize_badattrval.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
|
2020-05-19 12:29:41 -05:00 |
|
|
Shelby Pace
|
5857c80f47
|
Update modules/exploits/multi/misc/weblogic_deserialize_badattrval.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
|
2020-05-19 12:29:17 -05:00 |
|
|
Shelby Pace
|
4ff4676ab9
|
Update modules/exploits/multi/misc/weblogic_deserialize_badattrval.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
|
2020-05-19 12:28:42 -05:00 |
|
|
Shelby Pace
|
32386e0947
|
Update modules/exploits/multi/misc/weblogic_deserialize_badattrval.rb
Co-authored-by: wvu-r7 <wvu-r7@users.noreply.github.com>
|
2020-05-19 12:27:38 -05:00 |
|
|
Shelby Pace
|
9e813b7e1e
|
add archs
|
2020-05-15 10:22:08 -05:00 |
|
|
Shelby Pace
|
91e4328198
|
add documentation, remove some leftover comments
|
2020-05-15 09:44:45 -05:00 |
|
|
Shelby Pace
|
302b7134a3
|
add code for v12.1.3
|
2020-05-14 19:06:03 -05:00 |
|
|
Shelby Pace
|
f7c6699843
|
add code for v12.2.1.3
|
2020-05-14 14:08:05 -05:00 |
|
|
Shelby Pace
|
aaeb5ad5ee
|
mixin madness
|
2020-05-13 08:37:53 -05:00 |
|
|
Shelby Pace
|
76d48281d0
|
add check method
|
2020-05-12 16:12:51 -05:00 |
|
|
Shelby Pace
|
8dde3b6fca
|
add Windows-related code, fix alignment
|
2020-05-12 12:23:55 -05:00 |
|
|
Shelby Pace
|
5e0469ce4f
|
add t3_send comment and cmdstager code
|
2020-05-11 13:18:01 -05:00 |
|
|
Pedro Ribeiro
|
cf25629510
|
Fix advisory link in TM1 module
|
2020-05-09 14:58:46 +07:00 |
|
|
Shelby Pace
|
1851f4bc3c
|
add documented object
|
2020-05-04 10:34:15 -05:00 |
|
|
Spencer McIntyre
|
2c61fd0aff
|
Update Apache Shiro RCE module docs
|
2020-04-28 14:24:17 -04:00 |
|
|
L
|
daf31a3178
|
Avoid server load balancing
|
2020-04-27 10:50:34 -05:00 |
|
|
L
|
64ecd1f95a
|
fixed
|
2020-04-27 10:50:09 -05:00 |
|
|
L
|
5732b0f038
|
fixed
|
2020-04-27 10:50:09 -05:00 |
|
|
L
|
f8f90e5b98
|
Add default payload
|
2020-04-27 10:50:09 -05:00 |
|
|
L
|
6835d2cd9f
|
Replace <tab> to space
|
2020-04-27 10:50:09 -05:00 |
|
|
L
|
1116635477
|
fixed
|
2020-04-27 10:50:09 -05:00 |
|