Commit Graph

13654 Commits

Author SHA1 Message Date
Mehmet İnce 4c1c2e9288 Adding Micro Focus Secure Messaging Gateway RCE 2018-07-04 17:47:13 +01:00
William Vu 41b0adad88 Use uninstall action command injection 2018-07-03 18:07:22 -05:00
Shelby Pace 7d0b8dee4a making request for Gitlist source 2018-07-03 14:27:46 -05:00
William Vu a25a656d28 Add "E" to HP to make HPE for better searches
We'll stick with calling it HP everywhere else.
2018-07-03 10:29:09 -05:00
Brent Cook 5946245d87 avoid using SMBv2 on Windows XP Native Upload targets 2018-07-02 16:07:27 -05:00
Wei Chen 2ec091931a Land #10237, Add Boxoft WAV to MP3 Converter exploit module 2018-07-02 14:01:27 -05:00
Wei Chen 3e33a6f0a4 Update moduel boxoft_wav_to_mp3 2018-07-02 14:00:33 -05:00
William Vu 1bf94ac448 Spruce up check method and related 2018-07-02 13:59:24 -05:00
Wei Chen 12141136d7 Land #9896, Java JMX Package Name Randomization
Land #9896
2018-07-02 13:41:39 -05:00
William Vu 6e090acc76 Stop joking with timeouts 2018-07-02 13:18:31 -05:00
William Vu 78ca4d4217 Finally use Msf::Util::EXE.to_zip 8) 2018-07-02 13:04:59 -05:00
Kacper Szurek 2196640de4 Add manageengine_adshacluster_rce
Manage Engine Exchange Reporter Plus <= 5310 Unauthenticated RCE
2018-07-02 19:11:08 +02:00
Shelby Pace 54fce378fa added target versions to documentation 2018-07-02 09:20:17 -05:00
Green-m aa3fcea377 update check method to print error message normaliy 2018-07-01 23:17:34 -04:00
Green-m c3b71d4642 Update mismatch indentation and others 2018-07-01 22:43:07 -04:00
Ishaq Mohammed 70eb943b5a Update monstra_fileupload_exec.rb 2018-06-30 13:40:12 +05:30
Ishaq Mohammed 89ba960309 username and password values removed
username and password values removed
2018-06-30 12:47:13 +05:30
Ishaq Mohammed 128438f444 Merge pull request #2 from touhidshaikh/monstra_fileupload_exec
Monstra fileupload exec
2018-06-30 12:03:14 +05:30
Pedro Ribeiro 6ace45e312 Add correct IBM CVE
Turns out IBM decided to revisit the advisory and attribute 3 different CVE numbers intead of 1.
2018-06-30 12:06:16 +07:00
Brent Cook 85dc81a58b Land #10185, add SMBv1/2 support in psexec 2018-06-29 17:49:27 -05:00
Shelby Pace 3b5555542c add exploit module and documentation 2018-06-29 15:17:12 -05:00
William Vu 78cefe0528 Clarify original exploit credit
It's definitely more than a PoC (exploit). It's weaponized.
2018-06-29 13:02:40 -05:00
William Vu 34f303187f Drop privesc retval, since it's obsoleted by print 2018-06-29 12:53:59 -05:00
Jacob Robles fc3199259b Land #9958, Nagios xi 2 electric 2018-06-29 12:16:18 -05:00
William Vu dbb502ae19 Refactor code and address review comments 2018-06-29 12:13:15 -05:00
Jacob Robles 675a736ab7 Update Docs 2018-06-29 11:08:31 -05:00
Jacob Robles 574c47cba6 Change Ranking
Command to change the database user
account could cause a DoS condition
if the credentials are incorrect.
2018-06-29 10:56:18 -05:00
Jacob Robles 57b89444f3 Additional style fixes 2018-06-29 10:53:57 -05:00
Brendan Coles c508a5f7f3 Land #10213, Add FTPShell client 6.70 Stack Buffer Overflow exploit 2018-06-29 14:40:51 +00:00
Daniel Teixeira 1e148a8862 Update ftpshell_cli_bof.rb 2018-06-29 14:22:40 +01:00
Jacob Robles 7532490a1e Style/Whitespace fixes 2018-06-29 07:02:45 -05:00
William Vu 40ac79ced0 Land #10218, MS17-010 Windows Embedded Standard 7 2018-06-28 16:11:56 -05:00
Daniel Teixeira 1854793253 Update ftpshell_cli_bof.rb 2018-06-28 13:01:13 +01:00
Daniel Teixeira bd2fb56adf Update ftpshell_cli_bof.rb 2018-06-28 12:55:48 +01:00
William Vu 36a37cf6ab Add HP VAN SDN Controller exploit 2018-06-28 02:14:04 -05:00
Touhid M Shaikh f3e3d0c30b monstra_fileupload_exec.rb
Monstra CMS - Authenticated  Arbitrary File Upload / Remote Code Execution CVE 2017-18048
2018-06-28 10:55:41 +05:30
zerosum0x0 a5c0881c08 add Windows Embedded Standard 7 support 2018-06-27 19:17:18 -06:00
phra 54c2bc36e9 fix: invert if else order 2018-06-28 01:33:56 +02:00
phra e614805948 chore: fix msftidy 2018-06-28 01:27:51 +02:00
Daniel Teixeira 837427ccae Update ftpshell_cli_bof.rb 2018-06-27 16:42:29 +01:00
Daniel Teixeira 4a4e38a7b0 FTPShell client 6.70 (Enterprise edition) 2018-06-27 16:37:22 +01:00
phra da22b36997 chore: fix typo 2018-06-27 17:16:38 +02:00
phra 53f158ef4f refactor: universal check, payload platform check 2018-06-27 17:11:47 +02:00
William Vu 9c38c9f63c Land #10207, msftidy fixes 2018-06-26 14:38:57 -05:00
Jacob Robles 00102a7413 oscommerce msftidy fix 2018-06-26 08:21:10 -05:00
Jacob Robles 2fd0d797ac psexec smb2 support 2018-06-25 15:06:23 -05:00
Brendan Coles 6d3c141553 Update patched version check 2018-06-22 15:08:19 +00:00
Brendan Coles a71a5a10d5 Add Quest KACE Systems Management Command Injection 2018-06-22 08:07:18 +00:00
Adam Cammack 6dafb13f28 Module metadata cleanup 2018-06-21 15:10:47 -05:00
Jeffrey Martin 2f40b2cb45 address missed impacket dependency check 2018-06-21 13:56:17 -05:00