02a87befc3
Added OpenNetAdmin 18.1.1 exploit
...
OpenNetAdmin provides a database managed inventory of your IP network. Each subnet, host, and IP can be tracked via a centralized AJAX enabled web interface that can help reduce tracking errors.
This module exploits a command injection in OpenNetAdmin.
2019-12-11 21:05:02 +03:00
002b9e5b90
Fix typo and lacking RHOST
...
Kinda need a RHOST to use a RCE...
2019-12-11 12:17:53 -05:00
b6ac86dc23
Update group_policy_startup.rb
2019-12-11 09:41:08 -07:00
8cb58be4c0
style
2019-12-11 06:44:35 -05:00
1ebfe6c284
Add Reptile Rootkit reptile_cmd Privilege Escalation
2019-12-11 06:48:51 +00:00
942d1e3962
Trim exploit code and de-pasta-fy module
...
Better check for build number
2019-12-10 18:09:08 -06:00
f0ac300338
h00die review
...
Thanks h00die for the in depth review, as always.
2019-12-10 13:37:13 -07:00
a4ed143af6
Land #12364 , add vBulletin widgetconfig RCE
2019-12-10 12:12:47 -06:00
19169bc9b2
remove executable permissions
2019-12-10 12:10:04 -06:00
ab6f77ce63
add reference
2019-12-10 11:47:48 -06:00
dd2a6f77e3
remove unused opts
2019-12-10 11:32:46 -06:00
3b2a54a599
add aka to some modules
2019-12-10 09:53:13 -05:00
bf99dd820a
remove 50char title line
2019-12-10 09:32:34 -05:00
bef637bc68
Land #12666 , bypassuac_silentcleanup %WINDIR% fix
2019-12-09 20:48:38 -06:00
42c8420f5a
Fix style
2019-12-09 20:09:52 -06:00
7b1d54fc26
Land #12577 , redis_unauth_exec fixes
2019-12-09 19:37:53 -06:00
8a9dd35793
First draft of windows comahawk priv esc
2019-12-09 19:09:15 -06:00
24431f0fae
Merge remote-tracking branch 'upstream/master'
2019-12-09 11:21:52 +01:00
3200781292
Land #12446 , add powershell AMSI bypass to web_delivery
2019-12-09 18:03:54 +08:00
31e7fb3daa
web delivery fix
2019-12-06 12:45:23 +01:00
ce7a33abf5
example module review
2019-12-05 14:47:29 -05:00
2931863a4e
bypassuac_silentcleanup: cleanup %WINDIR% env var before calling powershell payload
...
Fixes #12665
2019-12-05 15:08:50 +01:00
35282b3e35
use printf command stager
2019-12-04 12:17:35 -06:00
cc25a30d1a
Move dpendency to mixin and adjust print statements
2019-12-04 09:00:03 -06:00
faadf8e283
Land #12646 , ms04_007 reliability and stability updates
2019-12-03 20:22:37 -05:00
d65757faa4
further killbill fixes
2019-12-03 20:22:05 -05:00
0864a4840e
Fix requirements in payload inject
2019-12-03 15:58:37 -06:00
713099c997
improve version check
2019-12-03 14:56:44 -06:00
2a14332f20
First try at adding error handling and offloading methods to the
...
Post::Windows::Process mixin for resusability and deduplication
2019-12-03 14:11:50 -06:00
5f149bc51c
Update modules/exploits/multi/http/openmrs_deserialization.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-12-03 13:19:15 -06:00
d8747c3a02
Update modules/exploits/multi/http/openmrs_deserialization.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-12-03 13:19:04 -06:00
9655c33a66
add bcoles' format_payload implementation
2019-12-03 12:24:33 -06:00
263c7bf235
Use CheckModule in pulse_secure_cmd_exec
2019-12-03 10:39:58 -06:00
f56b262eec
Update modules
2019-12-03 10:36:34 -06:00
3e7857d146
Add reliability and stability notes to ms06_040_netapi
2019-12-03 06:32:02 +00:00
f3922d73d8
use encode, replace double quotes
2019-12-02 15:25:52 -06:00
41569b78ba
Land #12503 , Add exploit module for Ajenti 2.1.31
2019-12-01 16:13:06 +00:00
ba05e91d19
Add Reliability notes
2019-11-30 06:28:12 +00:00
a6723c12fb
Add stability notes to ms04_007_killbill
2019-11-30 06:16:41 +00:00
da506c9684
dont load examples and syntax fixes
2019-11-29 09:11:44 -05:00
bad8e24e48
additional example exploits
2019-11-29 06:54:34 -05:00
373d147efd
Land #12555 - Wordpress Plainview Activity Monitor RCE
2019-11-29 11:10:24 +01:00
1cf9a2eb53
Update wp_plainview_activity_monitor_rce.rb
2019-11-28 20:13:21 +01:00
2372f7e40d
Update wp_plainview_activity_monitor_rce.rb
2019-11-28 20:10:17 +01:00
853fea736d
Update wp_plainview_activity_monitor_rce.rb
2019-11-27 22:28:33 +01:00
60b98fd20c
Update wp_plainview_activity_monitor_rce.rb
2019-11-27 21:59:54 +01:00
9b5265f49a
Update wp_plainview_activity_monitor_rce.rb
2019-11-27 21:57:24 +01:00
45bee2d500
Update splunk_upload_app_exec.rb
2019-11-26 15:38:34 +01:00
b22d2a1685
Update prints in DOUBLEPULSAR exploit check method
...
vprint_good should be print_warning, and most vprints should be print,
even if in check, since check is critical functionality.
2019-11-25 18:33:46 -06:00
6e93df1224
fix. DisablePayloadHandler to false in target 0 and add unknown author.
2019-11-22 17:56:50 +04:00
Onur ER