9aac803f41
remove a scratchpad line I saved while testing blog link fixes
2020-02-18 09:26:29 -06:00
8489bcdfd9
This fixes broken links to the community.rapid7.com blog
...
Performed mechanically with sed, spot-checked that the new blog can consume these links.
2020-02-18 09:06:11 -06:00
cf9b94a964
Set needs_cleanup flag for exploits that need it
...
The `needs_cleanup` flag needs to be set per-module when an exploit
needs an interactive session to clean up. Some `FileDropper` exploits
need additional cleanup to what the mixin provides, but since all
`FileDropper`s already mark themselves as needing cleanup those are not
covered here. A few of these could potentially be refactored to use the
original exploitation method to clean up or to compile the list of
files/commands to clean up ahead of time, but that is out of the scope
of this fix.
2019-08-02 10:23:53 -05:00
1fe981b8e2
Land #11843 , Update MSB references
2019-05-23 08:07:46 -05:00
db353a7ba1
Fix MS reference number
2019-05-23 07:03:23 -05:00
a0e90c0848
Remove references to doc.microsoft.com bulletin
...
MSB references point to this location
2019-05-23 07:01:21 -05:00
328b4fa860
Addressing Syntax error
2019-05-16 21:06:47 +05:30
c947cd76f6
Removed register_advanced_options
...
Added 'Powershell::wrap_double_quotes' => false in DefaultOptions.
2019-05-16 14:19:52 +05:30
94f904311b
Fix broken links mostly to Microsoft website
2019-05-16 09:50:19 +02:00
053ceed171
Regression fix: Disabling wrap_double_quotes
...
This client side exploit stopped working in current MSF throws an error in client browser.As per the analysis its because of Powershell::wrap_double_quotes=true.
I have just Added "Powershell::wrap_double_quotes" as advance option to override Datastore value.
2019-05-16 12:39:42 +05:30
923d8b8b2e
Fix uri with get_resource
2019-05-08 11:20:36 -05:00
39969e71fa
Initial commit of CVE-2019-5786
2019-05-06 17:05:00 +08:00
b31afb4e3d
Spaces at EOL fixes
2018-11-29 17:29:05 -06:00
8e442cc980
Update documenation
2018-10-15 15:45:39 -05:00
b0313dd25c
Update getgodm_http_response_bof for proper auto targets
2018-10-15 15:25:55 -05:00
ff9f3ed9ff
Add support for v5
2018-10-15 15:14:12 -05:00
5433d2cca9
Sync up upstream master
2018-10-15 14:19:07 -05:00
4927f96f61
Fixed small typo
2018-10-02 15:57:57 +02:00
4c036e70c1
Fix http://seclists.org links to https://
...
I have no idea how this happened in my own code. I was seeing https://.
2018-09-15 18:54:45 -05:00
c4d697a629
Remove trailing space from CVE identifier
...
ASUS Net4Switch ipswcom exploit mistakenly included a trailing space at the end of its CVE reference.
2018-08-29 14:12:49 -05:00
1a3a4ef5e4
Revised 88 aux and exploit modules to add CVEs / references
2018-07-12 17:34:52 -05:00
ad7a2418df
move exploit to windows/browser
2018-03-03 01:35:25 +05:30
c84ece15a3
Update exodus.rb
2018-02-28 11:04:16 +00:00
c366f94017
Update exodus.rb
2018-02-28 10:35:05 +00:00
15bd45cee3
Exodus Module
2018-02-26 21:31:13 +00:00
2f6da89674
Change author name to nick.
2017-11-09 03:00:24 +11:00
7cd532c384
Change targetr to target to fix small typo bug on one failure
...
The target object seems to have a typo where it is referred to as
“targetr” which I’d guess isn’t exactly what we’d like to do in this
case. So, I’ve changed that to “target” in order to work.
So, I’ve simply fixed that small typo.
2017-10-19 19:55:58 -04:00
9d2e8b1e4d
Land #8003 , Evasions for delivering nops/shellcode into memory
2017-10-05 16:44:36 -05:00
8de6fa79c1
Tweakz, yo.
2017-09-22 18:49:09 -05:00
30f833f684
80 pages left
2017-09-13 22:03:34 -04:00
cfbd3c1615
Fix spelling of Honeywell
2017-09-11 13:02:18 -05:00
7339658ba9
224 pages of spelling issues left
2017-09-09 09:52:08 -04:00
0910c482a9
35 pages of spelling done
2017-09-08 22:19:55 -04:00
6300758c46
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
80d18fae6a
update example modules to have zero violations
2017-07-24 06:15:54 -07:00
838b066abe
Merge branch 'master' into land-8716
2017-07-24 05:51:44 -07:00
b8d80d87f1
Remove last newline after class - Make @wvu-r7 happy
2017-07-19 11:19:49 +01:00
3d4feffc62
OCD - Spaces & headings
2017-07-19 11:04:15 +01:00
4720d1a31e
OCD fixes - Spaces
2017-07-14 08:46:59 +01:00
fd843f364b
Removed extra lines
2017-07-14 08:17:16 +01:00
424522147e
OCD fixes - Start of *.rb files
2017-07-13 23:53:59 +01:00
3b248c78f3
resurrect old example modules, integrate into module tree
2017-06-22 11:36:35 -05:00
64452de06d
Fix msf/core and self.class msftidy warnings
...
Also fixed rex requires.
2017-05-03 15:44:51 -05:00
67086966ac
Avoid calling unescape on nops directly
...
Using an intermediate variable will avoid triggering signatures
2017-02-23 18:19:16 -05:00
5d0b532b20
Fix #8002 , Use post/windows/manage/priv_migrate instead of migrate -f
...
Because migrate -f uses a meterpreter script, and meterpreter scripts
are deprecated, we should be replacing with a post module
Fix #8002
2017-02-23 17:04:36 -06:00
8ce10ac591
Avoid String.fromCharCode which gets detected
2017-02-22 14:13:18 -05:00
3c6fa12aca
Update firefox_smil_uaf to use BrowserExploitServer
2017-01-31 16:04:16 -06:00
dd60fc3598
move cisco_webex_ext to exploits/windows/browser/
2017-01-27 16:59:20 -06:00
04648888b3
Be conservative and do NormalRanking
2017-01-23 11:55:30 -06:00
0eb5342d83
disclosure date
2017-01-20 11:57:50 -06:00
Brent Cook