39299c0fb8
randomize submodule path
2017-08-29 16:54:08 +08:00
a40429158f
40% done
2017-08-28 20:17:58 -04:00
8f17d536a7
Update phpmailer_arg_injection.rb
...
Removed second parameter as it was not necessary. Only changed needed was to change "send_request_cgi" to "send_request_cgi!"
2017-08-24 00:29:28 -06:00
c49b72a470
Follow 301 re-direct
...
I found that in some cases, the trigger URL cannot be accessed directly. For example, if the uploaded file was example.php, browsing to "example.php" would hit a 301 re-direct to "/example". It isn't until hitting "/example" that the php is executed. This small change will just allow the trigger to follow one 301 redirect.
2017-08-23 18:53:54 -06:00
eabe4001c2
Land #8492 , Add IBM OpenAdmin Tool SOAP welcomeServer PHP Code Execution module
2017-08-20 18:48:22 -05:00
7881a7ddc4
git submodule command exec
2017-08-13 11:47:44 +08:00
7e860571ae
fix bug where api_token auth was being used without token being set
2017-08-09 12:30:26 -04:00
9bb102d72d
add jenkins v2 cookie support
2017-08-09 12:29:31 -04:00
4845b4b1fa
Orientdb 2.2.x RCE - Fix regular expression for version detection
2017-07-26 14:35:05 +01:00
30664924c8
Orientdb 2.2.x RCE - Reverted to send_request_raw due to issues exploiting windows boxes
2017-07-26 13:59:14 +01:00
6300758c46
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
6c22f785e9
Orientdb 2.2.x RCE - Fine tune vulnerable version detection; removed redundant uri normalization checking; Swapped send_request_raw for send_request_cgi; using vars_get;
2017-07-24 09:52:47 +01:00
968fc45b11
Update struts2_code_exec_showcase.rb
...
Remove debug code
2017-07-22 11:57:03 -04:00
524373bb48
OCD - Removed un-needed full stop
2017-07-21 07:41:51 -07:00
ef826b3f2c
OCD - print_good & print_error
2017-07-19 12:48:52 +01:00
b8d80d87f1
Remove last newline after class - Make @wvu-r7 happy
2017-07-19 11:19:49 +01:00
3d4feffc62
OCD - Spaces & headings
2017-07-19 11:04:15 +01:00
f3f96babb9
Orientdb 2.2.x RCE - Changed the java_craft_runtime_exec function; Tested the module against Win7-Pro-x64 with OrientDB v2.2.20 with StagerCmd flavors vbs and certutil with success
2017-07-19 10:46:10 +01:00
219987726f
Orientdb 2.2.x RCE - Changed the CmdStager flavor to VBS script
2017-07-18 17:18:14 +01:00
5ca523e2ce
Orientdb 2.2.x RCE - Add warning about windows
2017-07-18 17:11:54 +01:00
af0a9c2f86
Orientdb 2.2.x RCE tidy stuff
2017-07-18 17:07:29 +01:00
99ba645034
Orientdb 2.2.x RCE
2017-07-18 16:53:44 +01:00
034736019b
Update struts2_code_exec_showcase.rb
...
Add additional references
2017-07-17 14:20:11 -04:00
b0a95c8455
Update struts2_code_exec_showcase.rb
...
Update method check with new OGNL expression
2017-07-16 21:30:07 -04:00
0be6ce30e8
Update struts2_code_exec_showcase.rb
...
Add datastore option POSTPARAM
2017-07-16 12:28:24 -04:00
ffbc12d404
Update struts2_code_exec_showcase.rb
...
Update to ARCH_CMD module
2017-07-15 23:33:01 -04:00
c7fcdceb56
Update struts2_code_exec_showcase.rb
...
Remote trailing whitespaces
2017-07-15 21:37:38 -04:00
27d2d7e31f
Update struts2_code_exec_showcase.rb
...
Update Authors
2017-07-15 21:27:50 -04:00
d5ba6ea157
Update struts2_code_exec_showcase.rb
...
Remove trailing whitespace
2017-07-15 19:52:29 -04:00
60af2c8a7b
Update struts2_code_exec_showcase.rb
...
Remove trailing whitespace
2017-07-15 19:34:44 -04:00
6af2192f39
Update struts2_code_exec_showcase.rb
...
Add Author credit
2017-07-15 19:25:07 -04:00
0c52f0cb55
Update struts2_code_exec_showcase.rb
...
Remove trailing spaces
2017-07-15 17:48:34 -04:00
3d9d1e49fa
Update struts2_code_exec_showcase.rb
...
Add vuln check
2017-07-15 17:18:11 -04:00
c3e07e0770
Create struts2_code_exec_showcase.rb
...
Add module for CVE-2017-9791
2017-07-15 16:55:47 -04:00
4720d1a31e
OCD fixes - Spaces
2017-07-14 08:46:59 +01:00
fd843f364b
Removed extra lines
2017-07-14 08:17:16 +01:00
424522147e
OCD fixes - Start of *.rb files
2017-07-13 23:53:59 +01:00
df024bb594
Remove duplicate setting of suhosin.simulation
2017-07-10 00:46:05 +03:00
7e1b50ab3b
Land #8629 , AKA (also known as) module reference
2017-06-28 19:15:45 -05:00
d20036e0fb
revise spelling, add heartbleed and tidy checks
2017-06-28 18:50:20 -04:00
43d8c4c5e7
Land #8519 , Apache ActiveMQ file upload exploit
2017-06-28 17:19:39 -05:00
461ab4501d
add 'Also known as', AKA 'AKA', to module references
2017-06-28 15:53:00 -04:00
b51fc0a34e
Land #8489 , more httpClient modules use store_valid_credential
2017-06-21 17:18:34 -05:00
58cd432120
Added docs, minor code tweak to remove duplication.
2017-06-19 17:35:41 -05:00
49d998f7d9
catch invalid tokens
2017-06-15 21:45:29 -04:00
f4ffade406
add ability to specify API token instead of password
2017-06-15 21:05:53 -04:00
0766f92013
Add option for workspace
2017-06-13 12:46:36 +00:00
6a4c61456d
Add ProcessMaker Plugin Upload exploit module
2017-06-10 08:59:20 +00:00
d641058f75
Added module to exploit ActiveMQ CVE-2016-3088
2017-06-06 11:33:42 -07:00
218ec96009
Add IBM OpenAdmin Tool SOAP welcomeServer PHP Code Execution module
2017-05-31 13:00:35 +00:00
Tim