 Shelby Pace
|
e7e42b7a59
|
Land #12768, add dlink command injection module
|
2020-01-21 07:37:43 -06:00 |
|
|
mattaberegg
|
c1b66aac77
|
Updated check function and description
|
2020-01-20 17:16:45 -08:00 |
|
|
mattaberegg
|
4af14109f5
|
Grammar change in exploit name
|
2020-01-19 14:15:11 -08:00 |
|
|
mattaberegg
|
d91a166034
|
Made changes from comments on PR #12858
|
2020-01-19 13:46:47 -08:00 |
|
|
Brendan Coles
|
19b1f567b2
|
Update AF_PACKET chocobo_root Privilege Escalation module
|
2020-01-19 11:51:01 +00:00 |
|
|
mattaberegg
|
fc1b337c58
|
Add Apache James 2.3.2 Insecure User Creation Command Injection exploit module.
|
2020-01-18 19:05:27 -08:00 |
|
|
William Vu
|
972cb545f0
|
Restore the original PLUGIN_FILE contents
|
2020-01-18 14:57:41 -06:00 |
|
|
Brendan Coles
|
36b6ceb56f
|
Add rds_atomic_free_op_null_pointer_deref_priv_esc (CVE-2018-5333)
|
2020-01-18 08:34:52 +00:00 |
|
|
William Vu
|
cbd949927d
|
Add WordPress InfiniteWP Client plugin exploit
|
2020-01-17 20:12:21 -06:00 |
|
|
Brent Cook
|
7f74d28245
|
Land #12845, check for SSL when SSL is not enabled
|
2020-01-16 16:12:53 -06:00 |
|
|
William Vu
|
60b787bde1
|
Use new immutable? method in modules
|
2020-01-16 15:05:11 -06:00 |
|
|
William Vu
|
a31e4034c8
|
Check SSL in exploit/linux/http/webmin_backdoor
|
2020-01-16 14:49:13 -06:00 |
|
|
William Vu
|
6712458dbd
|
Land #12758, attributes and immutable? methods
|
2020-01-16 14:01:29 -06:00 |
|
|
bwatters-r7
|
ee5e9dc922
|
Land #12832, DisablePayloadHandler replace strings with bools
Merge branch 'land-12832' into upstream-master
|
2020-01-16 12:10:34 -06:00 |
|
|
Spencer McIntyre
|
033a0d1868
|
Land #12782, add the Plantronics LPE module
|
2020-01-15 11:17:41 -05:00 |
|
|
Dave York
|
7b14442ab0
|
replace strings with bools
|
2020-01-14 20:47:27 -05:00 |
|
|
William Vu
|
491c36ccaa
|
Land #12827, credit updates to Citrix exploit
|
2020-01-14 10:54:57 -06:00 |
|
|
William Vu
|
eaeaae7607
|
Reformat credit
|
2020-01-14 10:46:04 -06:00 |
|
|
Jeffrey Martin
|
1cd75d9f40
|
document additional PoC authors
|
2020-01-14 10:22:26 -06:00 |
|
|
Shelby Pace
|
429329c45d
|
Land #12801, add WePresent cmd injection module
|
2020-01-14 08:29:40 -06:00 |
|
|
Jacob Baines
|
009ec162de
|
Use string interpolation and removed rundant namespace and return statement
|
2020-01-14 07:52:30 -05:00 |
|
|
Jacob Baines
|
ea6263e6bb
|
Removed redundant return statement
|
2020-01-14 06:52:24 -05:00 |
|
|
Jacob Baines
|
ecb825ea71
|
Remove redundant parameters.
|
2020-01-14 06:40:40 -05:00 |
|
|
Jacob Baines
|
fa661e58ca
|
Unified the POST request into one function. Fixed hardcoding of SSL. Fixed Author formatting. Fixed connection failure check in check function
|
2020-01-14 06:22:00 -05:00 |
|
|
Jacob Baines
|
0308f76bbd
|
Switched to vars_post in send_request_cgi and removed unnecessary documentation
|
2020-01-14 05:42:06 -05:00 |
|
|
William Vu
|
5c4189fdb4
|
Move unix/webapp/webmin_backdoor to linux/http
|
2020-01-14 00:50:04 -06:00 |
|
|
William Vu
|
3a8b630262
|
Set a sane default HttpClientTimeout
Totally forgot I did this for Pulse Secure.
|
2020-01-13 22:26:26 -06:00 |
|
|
William Vu
|
cd65efb259
|
Revert tuned timeout in favor of HttpClientTimeout
Bad habit!
|
2020-01-13 22:02:12 -06:00 |
|
|
William Vu
|
c71a75950a
|
Make cmd/unix/generic timeout configurable
|
2020-01-13 21:35:10 -06:00 |
|
|
William Vu
|
93c69b3a96
|
Bump send_request_cgi timeout to 3.5s for shells
|
2020-01-13 21:29:28 -06:00 |
|
|
William Vu
|
a635676604
|
Update wording in module description
|
2020-01-13 21:04:07 -06:00 |
|
|
William Vu
|
af4505f007
|
Clean up module
|
2020-01-13 20:48:18 -06:00 |
|
|
William Vu
|
04084f84f7
|
Run rubocop -a
|
2020-01-13 20:25:07 -06:00 |
|
|
William Vu
|
a45821b706
|
Rename module
|
2020-01-13 20:25:07 -06:00 |
|
|
William Vu
|
b4a08503f8
|
Merge remote-tracking branch 'upstream/master' into pr/12816
|
2020-01-13 20:25:00 -06:00 |
|
|
secenv
|
1429a496da
|
Remove _telnet from filename
No need to keep it, it drops meterpreter as payload now.
|
2020-01-13 13:18:43 -03:00 |
|
|
secenv
|
eab0bd5755
|
Randomize "Callback" header URL
|
2020-01-13 11:39:23 -03:00 |
|
|
RAMELLA Sébastien
|
5d3ad626e6
|
add. documentation
|
2020-01-13 18:22:09 +04:00 |
|
|
Brent Cook
|
20cf419e18
|
Land #12797, improve BlueKeep over remote networks
|
2020-01-12 17:15:29 -06:00 |
|
|
RAMELLA Sébastien
|
1570118a14
|
fix: again chmod 644 WTF!
|
2020-01-13 01:43:15 +04:00 |
|
|
RAMELLA Sébastien
|
a64b0fa9e7
|
add. python staged meterpreter support
|
2020-01-13 01:25:29 +04:00 |
|
|
RAMELLA Sébastien
|
c323df180a
|
fix. file perms to 664
|
2020-01-12 22:10:23 +04:00 |
|
|
RAMELLA Sébastien
|
50637d0d91
|
add initial source code
|
2020-01-12 21:12:14 +04:00 |
|
|
Brent Cook
|
33dadefd53
|
move rdp_move_mouse to rdp library, add GROOMDELAY
|
2020-01-12 08:19:44 -06:00 |
|
|
Tim W
|
2ea5bd139a
|
Land #12792, Fix #12791, check for nil response on connection failure in efs_fmws_userid_bof
|
2020-01-10 16:31:32 +08:00 |
|
|
Francesco Soncina
|
abb95ef465
|
feat(web_delivery): use disown on linux too
|
2020-01-09 15:02:04 +01:00 |
|
|
Francesco Soncina
|
1f191bc73e
|
feat: support osx in web_delivery
|
2020-01-09 14:59:47 +01:00 |
|
|
Jacob Baines
|
caa02c7d2e
|
Added exploit module for CVE-2019-3929
|
2020-01-09 08:03:52 -05:00 |
|
|
Francesco Soncina
|
542f582fed
|
fix: ignore SSL cert in python web_delivery
|
2020-01-08 13:22:03 +01:00 |
|
|
zerosum0x0
|
b76f2a9e08
|
inject mouse move events, verbose groom progress/elapsed time, danger zone warnings
|
2020-01-06 23:42:01 -07:00 |
|