Commit Graph

9290 Commits

Author SHA1 Message Date
William Vu 58a1b65e60 Update Exploit::CheckCode::Unknown
Brain fart.
2018-10-23 09:34:48 -05:00
William Vu 899238a4e3 Update libssh_auth_bypass with command output 2018-10-23 09:34:42 -05:00
William Vu e6bbc6dbd6 Land #10845, glassfish_traversal typo fix 2018-10-22 15:32:14 -05:00
blue-bird1 6125ef06ad fix small typo 2018-10-23 00:01:13 +08:00
Brent Cook accf9edf89 Land #10835, libssh fingerprint improvements 2018-10-19 19:48:23 -05:00
William Vu abd425c863 Land #10819, os_name population for ssh_login* 2018-10-19 15:53:38 -05:00
William Vu db7bd3d50c Update style 2018-10-19 15:52:26 -05:00
William Vu 2a1dec45ed Land #10832, TARGETURI for tomcat_utf8_traversal 2018-10-19 15:47:37 -05:00
William Vu e4c71265fb Improve banner checking in libssh_auth_bypass
Now we do the right thing when libssh is patched.
2018-10-19 15:21:12 -05:00
William Vu 21397330f8 Refactor fortinet_backdoor copypasta 2018-10-19 00:07:18 -05:00
William Vu 863ab3447f Add libssh auth bypass module 2018-10-18 23:03:23 -05:00
Brendan Coles 02c916b1b4 Update modules/auxiliary/admin/http/tomcat_utf8_traversal.rb 2018-10-19 04:16:26 +11:00
Patrick Webster 175e5e5adf Added module TARGETURI support. 2018-10-19 03:55:45 +11:00
h00die 763506f28d ssh_login now populates the os_name field 2018-10-16 22:02:44 -04:00
h00die 4a06fe1d4b use store_valid_credential instead 2018-10-16 14:01:49 -04:00
h00die f675ba5243 password not username 2018-10-11 17:08:03 -04:00
h00die 20a376130e cat variable name 2018-10-11 17:04:57 -04:00
h00die 7cc46df6db add docs and update cisco_device_manager 2018-10-11 17:01:38 -04:00
Patrick DeSantis c0aff8f134 Description update / typo fix
fix typo in module description (added one word)
2018-10-10 17:56:17 -04:00
William Vu 7bc98e0ea8 Fix formatting and convert a missed AKA reference 2018-10-05 03:22:08 -05:00
William Vu 9f30512532 Land #10707, module traits to augment module rank 2018-10-04 13:26:14 -05:00
William Vu 5af2131fdf Add additional target checks 2018-10-03 02:12:13 -05:00
William Vu c37b6ade84 Add response checking and printing 2018-10-03 00:10:40 -05:00
William Vu 52b0606656 Add internet-connected Crock-Pot remote control 2018-10-02 20:20:09 -05:00
Rob 6f5a8f8f42 Fix outdated metadata 2018-10-01 18:59:09 +01:00
Wei Chen 086e2b311b Update constants 2018-09-27 12:31:04 -05:00
Wei Chen 583874d370 Update use of reliability/side-effects/stability metadata 2018-09-26 18:54:08 -05:00
Wei Chen 04ff0931d7 Add metadata place holders for reliability/side-effects/stability 2018-09-26 17:42:54 -05:00
Tim W 738665e56f Add documentation for #10652 2018-09-24 17:11:24 +08:00
Shaksham Jaiswal 6967f461f1 Fixes 2018-09-22 10:04:59 +05:30
Brendan Coles 56b01dcf00 Land #10534, Add FrontPage Credential Dump Module
This module downloads and parses the '_vti_pvt/service.pwd',
  '_vti_pvt/administrators.pwd', and '_vti_pvt/authors.pwd' files
  used by FrontPage to find credentials.
2018-09-22 04:13:24 +00:00
root 132008cd0e fixes 2018-09-21 17:31:26 +00:00
root 17c7d828c1 fixes 2018-09-21 17:16:04 +00:00
AverageSecurityGuy 02b2559953 Update documentation to match new output. 2018-09-21 12:50:13 -04:00
AverageSecurityGuy 0746ab5847 Create credential table. 2018-09-21 12:44:10 -04:00
AverageSecurityGuy a603c04da5 Create credential table. 2018-09-21 12:42:32 -04:00
AverageSecurityGuy 5842f0c012 Msftidy 2018-09-21 10:15:31 -04:00
William Vu 02f4fc1876 Prefer to_s.empty?
Oh, hell, do it here, too.
2018-09-20 21:26:41 -05:00
William Vu c875f66154 Prefer to_s over || ''
Oops, I wasn't thinking clearly. to_s is cleaner.
2018-09-20 21:26:41 -05:00
William Vu 9da87a600f Add LEAK_COUNT option to Heartbleed
I should have done this in 2014, but I'm a slacker.
2018-09-20 19:49:07 -05:00
William Vu 185931ca91 Land #10625, repeat command to repeat commands 2018-09-20 15:24:03 -05:00
William Vu 6e51eb6c53 Rename Pimcore and Dolibarr SQLi modules 2018-09-19 22:15:14 -05:00
William Vu c5f6d4b8a5 Land #10670, Pimcore SQLi module 2018-09-19 20:50:21 -05:00
William Vu 5477220106 Update documentation 2018-09-19 20:48:42 -05:00
William Vu 53f78cb7c3 Land #10673, dolibarr_list_creds{,_sqli} rename 2018-09-19 18:55:05 -05:00
Adam Cammack dd942ab23c Land #10652, iOS Safari blur denial of service 2018-09-19 15:12:22 -05:00
Shelby Pace 7698b7d7db changed location of dolibarr module/documentation 2018-09-19 11:17:27 -05:00
Shelby Pace b6ca8cac7f renamed/relocated files, changed uri 2018-09-19 08:11:45 -05:00
Shelby Pace 0c842b852b changed available? expression 2018-09-18 15:47:25 -05:00
Shelby Pace e9faf305b2 randomize number, use vars_get 2018-09-18 15:03:32 -05:00