Jacob Robles
4bc871c499
Add CmdStager to erlang_cookie_rce
2018-12-21 07:33:37 -06:00
Jacob Robles
6921b79890
Land #11089 , Erlang cookie rce exploit module
2018-12-19 08:02:40 -06:00
Milton-Valencia
bb758f9a61
I didn't forget msftidy I swear
2018-12-18 14:55:12 -06:00
Milton-Valencia
8a2a605a99
added targets
2018-12-18 14:50:57 -06:00
William Vu
38bdee19e8
Fix TARGETURI support in struts2_namespace_ognl
2018-12-14 13:08:50 -06:00
Milton-Valencia
3f1aa425b4
msftidy....lol
2018-12-13 11:03:41 -06:00
Milton-Valencia
2e26ceac8f
added comments
2018-12-13 10:55:09 -06:00
William Vu
aa0c206b4b
Land #11107 , double negative logic cleanup
2018-12-11 20:29:53 -06:00
Shelby Pace
ae089ce573
Land #10960 , add wp duplicator code inject module
2018-12-11 12:02:07 -06:00
Shelby Pace
b82e3469a2
renamed module and doc
2018-12-11 11:59:19 -06:00
Julien Legras
7e953e34b9
Added the clean_up function
2018-12-11 18:13:46 +01:00
bwatters
b109321b44
Kill unless not
2018-12-11 10:16:16 -06:00
Milton-Valencia
565f2e3e38
wait wrong
2018-12-09 19:23:54 -06:00
Milton-Valencia
ee2ed46143
added date based on man page
2018-12-09 19:17:22 -06:00
Milton-Valencia
f6bfbddb8d
twks
2018-12-09 15:59:58 -06:00
Milton-Valencia
2beddf1012
req changes
2018-12-09 15:01:09 -06:00
Milton-Valencia
39229125b7
tweak
2018-12-09 00:22:49 -06:00
Milton-Valencia
02f3d4688f
changes
2018-12-09 00:10:54 -06:00
Julien Legras
224e782772
Cleaned the create_wp_config_file function
2018-12-05 10:56:22 +01:00
Julien Legras
2774c17ca1
Replaced print_error and return with a fail_with
2018-12-05 10:11:09 +01:00
Julien Legras
2735c71bda
Fixed typos, removed not working cleaning
2018-12-04 18:42:54 +01:00
Julien Legras
b58342843b
Refactored check
2018-12-04 12:03:49 +01:00
Julien Legras
6874dddc55
Fix space at EOL and sed replace
2018-11-30 15:26:14 +01:00
Julien Legras
a4ee221333
Fixed the timeout for web requests
2018-11-30 14:47:41 +01:00
Julien Legras
160015d3a7
Check the HTTP response first
2018-11-29 18:54:07 +01:00
Julien Legras
984354194f
Check the HTTP response first
2018-11-29 18:49:41 +01:00
Julien Legras
2b61c4e118
Fixes for PR
2018-11-29 15:02:03 +01:00
Shelby Pace
6712363bb5
Land #10737 , add TeamCity XML-RPC exploit module
2018-11-27 14:59:37 -06:00
Shelby Pace
56f14733a9
changed cmd_stager flavor to printf
2018-11-27 14:23:56 -06:00
Brendan Coles
be6cfde921
Land #11015 , Fix payload and console check for Xorg_privesc Linux targets
2018-11-25 04:51:27 +00:00
Aaron Ringo
93db7b399f
Using Wfsdelay instead of sleep loop, users get shells ASAP
2018-11-24 22:26:04 -06:00
Aaron Ringo
1783617770
consolelock check updated to use id, payload upload changed, documentation updated, misc formatting
2018-11-24 15:10:21 -06:00
Brent Cook
a59913434d
Land #10916 , Xorg SUID privesc
2018-11-21 19:46:11 -06:00
William Vu
90b9204703
Update DisclosureDate to ISO 8601 in my modules
...
Basic msftidy fixer:
diff --git a/tools/dev/msftidy.rb b/tools/dev/msftidy.rb
index 9a21b9e398..e9ff2b21e5 100755
--- a/tools/dev/msftidy.rb
+++ b/tools/dev/msftidy.rb
@@ -442,6 +442,8 @@ class Msftidy
# Check disclosure date format
if @source =~ /["']DisclosureDate["'].*\=\>[\x0d\x20]*['\"](.+?)['\"]/
d = $1 #Captured date
+ File.write(@full_filepath, @source.sub(d, Date.parse(d).to_s))
+ fixed('Probably updated traditional DisclosureDate to ISO 8601')
# Flag if overall format is wrong
if d =~ /^... (?:\d{1,2},? )?\d{4}$/
# Flag if month format is wrong
2018-11-16 12:18:28 -06:00
Aaron Ringo
a174c606aa
Changed SELINUX check to use built in methods
2018-11-16 04:22:18 -06:00
Jacob Robles
795aa3c99c
Land #10828 , git submodule url exec CVE-2018-17456
2018-11-14 12:39:13 -06:00
Julien Legras
02f2a2828e
Fix references CVE and WPVDB
2018-11-14 18:19:12 +01:00
Julien Legras
3daec992c8
Fix indentation
2018-11-14 18:08:31 +01:00
Jacob Robles
798d3156bc
Print git command for module
2018-11-14 10:57:36 -06:00
Julien Legras
b9348bd579
Added the CVE number in the references
2018-11-14 16:52:57 +01:00
Julien Legras
5f9570cbcf
Added WordPress Duplicator <= 1.2.40 and documentation
2018-11-14 16:39:42 +01:00
Aaron Ringo
4fc047db87
Added advanced option to check console lock on linux systems, default true & updated docs
2018-11-13 22:33:12 -06:00
Shelby Pace
5e85683228
removed to_s from string
2018-11-13 15:28:55 -06:00
Shelby Pace
ac8932c144
update 9631 to a current branch
2018-11-13 15:15:25 -06:00
Alex Gonzalez
da134f06e3
Updated check method
...
Fixed check method and redundant variable declarations
2018-11-13 16:01:40 -05:00
Aaron Ringo
538055c406
Initial documentation for Xorg Privesc Module
...
killed white spaces
2018-11-12 15:44:13 -06:00
Aaron Ringo
ef7fc783be
Added Selinux check, changed version check, retested on all platforms
2018-11-11 12:34:30 -06:00
Brendan Coles
a5429d21a6
Update modules/exploits/multi/local/xorg_x11_suid_server.rb
...
Co-Authored-By: aringo <ringo.aaron@gmail.com >
2018-11-11 07:39:32 -06:00
Brendan Coles
2a7b18bcbf
Update modules/exploits/multi/local/xorg_x11_suid_server.rb
...
Co-Authored-By: aringo <ringo.aaron@gmail.com >
2018-11-11 07:38:42 -06:00
Aaron Ringo
e6f548c5f4
added meterpreter, took out in session, moved to exploits/multi/local
2018-11-11 01:43:36 -06:00