Jacob Robles
4ace73a3f9
Added references, fixed code
2018-03-05 22:00:28 -06:00
William Vu
176fb13c84
Fix #9650 , missed code from TelnetEnable refactor
...
1. Functionality was added incrementally, and I missed an opportunity to
consolidate a few methods under @do_exploit.
2. The Capture mixin can raise RuntimeError for a number of different
reasons, not just a lack of root privileges.
tl;dr Fix my incompetence and laziness. :-)
I don't think EDB and friends usually get these updates. :(
2018-03-05 14:46:27 -06:00
Jacob Robles
57118e1265
msftidy fix
2018-03-05 13:37:32 -06:00
Jacob Robles
a4f48eb80f
Add GitStack v2.3.10 RCE
2018-03-05 13:25:41 -06:00
Luis Hernandez
d945734f43
Add 2017-8917 RCE for Joomla 3.0.7
2018-03-04 22:17:49 -05:00
h00die
ea62497385
Land #9658 spelling and grammar fixes
2018-03-04 06:24:59 -05:00
Biswajit Roy
3925686173
Fixed error in my correction
...
Changed from `an username` to `a username`
2018-03-03 10:16:44 +05:30
William Vu
6dbf9445c9
Add MAC address discovery
2018-03-02 19:18:30 -06:00
William Vu
107512498c
Add check method
2018-03-02 19:16:37 -06:00
William Vu
25f36fb926
Refactor code into new methods
2018-03-02 19:16:37 -06:00
William Vu
109bc87ffb
Check for nil, EOFError, and zero-length response
2018-03-02 19:15:20 -06:00
William Vu
bcdfebf93c
Add a vprint for creds we chose
2018-03-02 19:15:19 -06:00
William Vu
4418a0de02
Enhance detection of telnetenabled vs. telnetd
2018-03-02 19:15:19 -06:00
William Vu
fba30d47a2
Use default creds specific to protocol
2018-03-02 19:15:18 -06:00
William Vu
1f40afea9c
Add automatic target for detection of TCP or UDP
2018-03-02 19:15:18 -06:00
William Vu
a5e5b618fd
Add print statements I forgot
2018-03-02 19:15:17 -06:00
William Vu
e87681f2c4
Add NETGEAR TelnetEnable
2018-03-02 19:15:17 -06:00
Auxilus
ad7a2418df
move exploit to windows/browser
2018-03-03 01:35:25 +05:30
Biswajit Roy
38c42f3b10
Fixed Typos
...
Fixed minor typing errors.
2018-03-02 17:38:19 +05:30
Sonny Gonzalez
883654f0ea
Land #9653 , fix Y2k38 issue (until Jan 1, 2038)
2018-03-01 09:13:41 -06:00
Brent Cook
27bd2a4a9f
workaround Y2k38 issues in java certificate generation
2018-03-01 08:41:28 -06:00
Daniel Teixeira
c84ece15a3
Update exodus.rb
2018-02-28 11:04:16 +00:00
Daniel Teixeira
c366f94017
Update exodus.rb
2018-02-28 10:35:05 +00:00
Auxilus
5ef3522286
Update getgo_bof.rb
2018-02-28 04:45:55 +05:30
Auxilus
4bb5ef65c6
Update getgo_bof.rb
2018-02-28 04:44:59 +05:30
Auxilus
d0fb122efd
Update getgo_bof.rb
2018-02-28 04:07:38 +05:30
Auxilus
cd86b98e09
Add GetGo Download Manager bof exploit
...
GetGo Download Manager 5.3.0.2712 - Buffer Overflow
https://www.exploit-db.com/exploits/44187/
[Not Tested]
2018-02-28 04:00:50 +05:30
Brent Cook
325ad7256e
if multi/handler is disabled, exit
2018-02-27 04:30:09 -06:00
attackdebris
2939695991
Add ARCH_CMD and general fixup
2018-02-26 16:59:36 -05:00
Daniel Teixeira
15bd45cee3
Exodus Module
2018-02-26 21:31:13 +00:00
Alex Gonzalez
624f1afb31
Fixed errors in jira_plugin_upload.rb
...
Added default port 2990 to arguments, removed unnecessary variables in HTTP requests, added good_cookie variable, and included null response check in check method
2018-02-26 11:09:47 -05:00
William Vu
7663e5c1f6
Land #9601 , ms17_010_eternalblue reliability fixes
2018-02-22 15:30:45 -06:00
bwatters-r7
4b8a8fa2b1
Land #9441 , Create exploit for AsusWRT LAN RCE
...
Merge branch 'land-9441' into upstream-master
2018-02-22 10:40:45 -06:00
Alex Gonzalez
b43eac624e
Add Jira Authenticated Plugin Upload Module
...
Add Jira Authenticated Plugin Upload Module
2018-02-22 10:43:36 -05:00
Brendan Coles
f98b4b0540
require 'rubygems/package'
2018-02-22 04:28:56 +00:00
Aaron Soto
af45c1764b
Tweak exception handling and timing of ms17_010_eternalblue
2018-02-21 13:40:04 -06:00
Brent Cook
78822fd799
Land #9524 , prefer 'shell' channels over 'exec' channels for ssh CommandStream
2018-02-21 06:59:09 -06:00
Jacob Robles
b2cb4c425d
Land #9594 , CloudMe Sync v1.10.9 Buffer Overflow
2018-02-20 17:49:19 -06:00
Jacob Robles
6a62ca15e7
Remove NOPS
...
[ticket: #9594 ]
2018-02-20 17:40:33 -06:00
Daniel Teixeira
745ad4d727
CloudMe Sync Client BoF
2018-02-20 21:57:13 +00:00
Jacob Robles
107a41a4ce
Land #9561 , Disk Savvy Enterprise v10.4.18 built-in server buffer overflow
2018-02-20 15:42:12 -06:00
Jacob Robles
d02bf40d69
Modified Exploit
...
Remove NOPS that weren't needed and freed up space for a larger payload.
[ticket: #9561 ]
2018-02-20 15:35:43 -06:00
Chris Higgins
74c6e21f49
Lands #9504 , MagniComp SysInfo privilege escalation
2018-02-19 22:47:33 -06:00
Quentin Kaiser
9e3f12665e
Plaintext for console type to see what's going on.
2018-02-17 20:11:05 +01:00
Quentin Kaiser
e877151895
Attempt at clarifying network exchange using Telnet class IAC related constants.
2018-02-17 14:00:57 +01:00
Quentin Kaiser
e86169c217
Clean up Telnet IAC negotation and xplain obscure hex bytes.
2018-02-15 23:08:17 +01:00
Steve
f7271d0086
Added curl flavor
2018-02-15 13:11:25 +00:00
Daniel Teixeira
651ddbb7eb
Disk Savvy Server Buffer Overflow
2018-02-15 10:09:07 +00:00
Daniel Teixeira
929027ab96
Disk Savvy Server Buffer Overflow
2018-02-14 20:35:32 +00:00
Steve
8976b52216
Handle error stating that SNMP has timed out
2018-02-14 17:35:19 +00:00