d3056723e1
Land #12030 , CVE-2019-12181: Serv-U FTP Server prepareinstallation privesc
2019-07-01 16:01:04 -05:00
9539408e33
Add support for retrieving xymonpasswd
2019-07-01 10:51:34 +00:00
51fe61838d
Create xor_context.rb
2019-07-01 10:36:08 +02:00
1a7fb79cfc
Add config retrieval
2019-06-30 04:03:17 +00:00
a4da66fabe
Add Xymon Daemon Gather Client Host Information module
2019-06-29 16:48:39 +00:00
e50ab5cd13
Land #11726 , add exploit for CVE-2019-8513, macOS TimeMachine cmd injection
2019-06-29 05:36:12 -05:00
4e544fe733
Land #11968 , only enable UDP stagers for compatible payloads
2019-06-29 03:34:15 -05:00
83e2c71b44
Land #11923 , Set sockaddr_len with x64 shell_find_port payload
2019-06-29 03:26:52 -05:00
c7ff78c277
Remove spaces at EOL
2019-06-29 14:01:18 +10:00
203e3b74db
Add Serv-U FTP Server prepareinstallation Privilege Escalation
2019-06-29 03:52:53 +00:00
0a00f3851a
Land #12007 , true 0s timeout in send_request_*
2019-06-28 12:32:32 -05:00
49176a3606
Land #11952 , Supra Smart Cloud TV RFI module
2019-06-28 12:12:15 -05:00
baa17290e4
Adjust name :)
2019-06-28 12:08:27 -05:00
09d6ae3458
Removing comments
...
Thanks wvu-r7 for your support.
2019-06-28 16:17:08 +05:30
d7a5eae146
Fix bug, adjust prints, and check body for "OK"
2019-06-28 04:12:57 -05:00
7a26e1c257
Fix sshexec hanging on exec! and blocking close
2019-06-27 22:07:37 -05:00
dc81adb417
Add GatherProof advanced option to ssh_login*
2019-06-27 21:04:20 -05:00
2ed8e6db97
Deregister PASSWORD_SPRAY option for LoginScanner modules
2019-06-27 17:06:32 -05:00
229e46f8cb
cmd/unix/pingback_bind: Add resiliency to netcat, per wvu's suggestion
2019-06-27 15:48:22 -05:00
1503dcd168
Land #11997 , SilentCleanup UAC bypass
2019-06-27 11:52:56 -05:00
6f1aaac70e
Add enigma0x3 and fix nyshone69 researchers
2019-06-27 11:38:34 -05:00
26cd53efb6
Land #11977 , AWS EC2, S3, and IAM Enumeration
2019-06-27 11:29:05 -05:00
7b0aac72ec
Fix missing is_in_admin_group? method
...
This was missed in the refactor, since admin_group was removed.
2019-06-27 11:16:49 -05:00
2927fd5dc8
Update bypassuac_sluihijack: Fix typo
2019-06-26 14:25:32 -07:00
0c83e55b00
enum_iam: Update 'Console Login' output to accurately reflect Disabled status
2019-06-26 14:57:32 -05:00
258f631f84
remove echo cmdstagerflavor
2019-06-26 13:56:13 -05:00
2f29c914ab
add changes, remove db backup delete code
2019-06-26 13:48:14 -05:00
61f09d0538
Land #12017 , xdebug_unauth_exec nil fix
2019-06-26 12:26:30 -05:00
cc3fd747aa
Add Pen Test Partners reference
...
Did we somehow miss this?
2019-06-26 11:05:22 -05:00
efc61a4934
Use cmdstager
2019-06-26 10:15:25 -05:00
7c3e566a23
Update check
...
Handle nil error code and fix version extraction based
on both of the possible Apache Tika return pages.
2019-06-26 10:15:25 -05:00
8d6f36e05c
Minor fix for xdebug_unauth_exec
...
Avoid triggering error where res.headers may not exist.
2019-06-27 01:00:49 +10:00
933b5f0413
Tidy up send_request_cgi
2019-06-26 00:59:53 -05:00
00530031fd
Try not encoding the GET parameters
2019-06-26 00:55:23 -05:00
f3b509a1bc
Implement on_request_uri
2019-06-25 23:47:19 -05:00
fe11eabe62
Merge remote-tracking branch 'upstream/master' into pr/11952
2019-06-25 23:47:06 -05:00
f874f50748
Update Author fields for several modules
...
Add hirura to authors list for the Ruby reverse_ssh payloads.
Update all modules with author-per-line name references to be
consistent (useful given the difference in names between commiter
in git log and GitHub account).
Next steps:
See if HrrRbSsh client-side implementation can be fleshed out
enough to create alternative payload outputs for both of the Ruby
modules (using TARGET/ACTION to select between net/ or hrr_).
2019-06-25 20:49:26 -04:00
2fb129ad41
Allow check in exploit to be optional
2019-06-25 17:13:55 -05:00
84b6f05947
Fix 'bucket' typo
2019-06-25 16:35:44 -05:00
685fb55179
Land #11987 , Add Nagios XI 5.5.6 magpie_debug Root Exploit
2019-06-25 16:17:50 -05:00
23dbc4d90d
Change file name
2019-06-25 16:10:44 -05:00
e9fc9970ba
Make names more random. Also, make metadata changes
2019-06-25 16:09:15 -05:00
94dd2b1800
Fix disclosure date format.
...
Co-Authored-By: @shellfail <jrobles@rapid7.com >
2019-06-25 20:50:56 +02:00
5c14aea1a0
Fix target_platform check (it's empty, not nil)
2019-06-25 12:56:36 -05:00
cf140f0840
Make SRVHOST the callback address
2019-06-25 12:43:04 -05:00
2af76c1997
add documentation and finished module
2019-06-25 11:21:15 -05:00
44ad25ae34
Land #12008 , struts2_content_type_ognl 302 fix
2019-06-25 00:40:58 -05:00
5e8b076714
Final review changes
2019-06-25 07:21:08 +02:00
303bfaa7eb
Don't worry about response code
...
I found one that returned a 302
2019-06-24 13:53:31 -05:00
7739e9f43e
Update my modules
2019-06-24 13:38:14 -05:00
asoto-r7