 Jacob Robles
|
1b2b752bef
|
Remove rescue that is handled in HttpClient mixin
|
2019-04-11 06:20:48 -05:00 |
|
|
Jacob Robles
|
9385fbc3b7
|
Change date format
|
2019-04-11 06:18:52 -05:00 |
|
|
asoto-r7
|
b32d116e9a
|
Land #11669, exploit/windows/fileformat/microsoft_windows_contact
|
2019-04-10 17:18:33 -05:00 |
|
|
asoto-r7
|
94785dabbb
|
Renamed module from 'microsoft_windows_contact_remote_code_execution' to 'microsoft_windows_contact'
|
2019-04-10 17:17:50 -05:00 |
|
|
asoto-r7
|
62bf38d530
|
Simplified user options, recreated CONTACT template from a clean file
|
2019-04-10 17:14:04 -05:00 |
|
|
William Vu
|
d72672feed
|
Land #11672, Zimbra XXE and SSRF exploit
|
2019-04-10 09:58:45 -05:00 |
|
|
ct5595
|
a8535b9b20
|
Merge branch 'master' of github.com:ct5595/metasploit-framework into cisco_running_config
|
2019-04-10 08:42:59 -04:00 |
|
|
Shelby Pace
|
4d0a41ff1a
|
Land #11657, add Horde form file upload
|
2019-04-09 13:47:59 -05:00 |
|
|
Shelby Pace
|
4018d47b65
|
changed if not to unless
|
2019-04-09 13:43:54 -05:00 |
|
|
ct5595
|
517cc36841
|
restore variables ciscoFlashCopyEntryStatus
and ciscoFlashCopyCommand for checking if the host is alive and
that the community is valid to prevent putting these in every action
|
2019-04-09 09:01:33 -04:00 |
|
|
Synacktiv
|
e9dd2f4f06
|
Store the whole JSON response
|
2019-04-09 13:59:44 +02:00 |
|
|
Synacktiv
|
b2422ab661
|
Remove use of service_details
|
2019-04-09 13:45:17 +02:00 |
|
|
Synacktiv
|
3d51fdb003
|
Improve send_sql_request
|
2019-04-09 13:42:43 +02:00 |
|
|
Quentin Kaiser
|
3517a4e237
|
Adapt ranking and mention potential stability issue.
|
2019-04-09 11:31:15 +02:00 |
|
|
RatioSec Research
|
b56e171172
|
Fix extraction of session tokens
|
2019-04-09 09:28:52 +01:00 |
|
|
ct5595
|
56c38b8205
|
Merge branch 'master' of github.com:ct5595/metasploit-framework into cisco_running_config
|
2019-04-08 16:34:17 -04:00 |
|
|
ct5595
|
2412aa7472
|
fixed EOL errors from msftidy
|
2019-04-08 16:29:36 -04:00 |
|
|
ct5595
|
403cf825a8
|
modify cisco_upload_file to include actions
default action is Upload_File, which was the original function
the new action Override_Config will override the running config
|
2019-04-08 16:12:21 -04:00 |
|
|
ct5595
|
f34314547b
|
update description to reflect upcoming changes and add ct5595 to list of authors
|
2019-04-08 13:55:13 -04:00 |
|
|
Brent Cook
|
e32bb9e915
|
Land #11682, don't check 'localhost' unconditionally, fix headers
|
2019-04-08 10:39:18 -05:00 |
|
|
ct5595
|
9a7d5d96f5
|
remove previous changes
|
2019-04-08 09:39:35 -04:00 |
|
|
ct5595
|
d848361dc6
|
Added ct5595 to the list of authors
|
2019-04-08 09:19:17 -04:00 |
|
|
ct5595
|
8762bd0842
|
Merge branch 'master' of github.com:ct5595/metasploit-framework into cisco_running_config
|
2019-04-08 09:13:55 -04:00 |
|
|
Synacktiv
|
ab1926b7ee
|
Create wp_google_maps_sql_injection.rb
|
2019-04-08 10:50:41 +02:00 |
|
|
Jacob
|
11385ae29a
|
Update postgres_copy_from_program_cmd_exec.rb
|
2019-04-08 00:19:55 +01:00 |
|
|
Fabio Cogno
|
20a8324d8e
|
Add Pimcore from 4.0.0 to 5.6.6 Unserialize RCE
|
2019-04-07 22:44:02 +02:00 |
|
|
Pearce Barry
|
7e62a69e16
|
Land #11660, Update use_single_quotes to wrap_double_quotes
|
2019-04-06 15:44:39 -05:00 |
|
|
h00die
|
ba4990041d
|
osx support for unifi
|
2019-04-06 11:08:17 -04:00 |
|
|
Shelby Pace
|
fff129ae9f
|
Land #11587, add Wordpress core RCE module
|
2019-04-04 15:22:56 -05:00 |
|
|
Shelby Pace
|
6efd80e139
|
added note in info
|
2019-04-04 15:19:58 -05:00 |
|
|
Shelby Pace
|
2884d9afcb
|
modified checks, added function
|
2019-04-04 15:09:12 -05:00 |
|
|
ct5595
|
8786150bdf
|
Added functionality for OVERRIDE_CONFIG option
|
2019-04-04 10:43:08 -04:00 |
|
|
ct5595
|
b5449b7035
|
Added OVERRIDE_CONFIG option to cisco_upload_file.rb
|
2019-04-04 09:47:42 -04:00 |
|
|
William Vu
|
e164c2350c
|
Properly encode command input with XML entities
REXML would make this less ghetto.
|
2019-04-03 19:10:27 -05:00 |
|
|
Shelby Pace
|
d5ac1e3a33
|
minor adjustments to indentation and requests
|
2019-04-03 19:03:47 -05:00 |
|
|
Javan Rasokat
|
8350effaa5
|
Fixed wrong check (did never work)
* HOST was always localhost
* Now sends both Range and the legacy 'Request-Range'
TODO: Method HEAD is not always sufficient, should be editable
|
2019-04-03 16:23:58 +02:00 |
|
|
Ben Schmeckpeper
|
7d1f6afd4a
|
Remove trailing space from CVE reference
|
2019-04-03 09:21:55 -05:00 |
|
|
todb-r7
|
9e3984ea51
|
Remove duplicate CVE for Mailcleaner module
See #11304
|
2019-04-02 12:51:09 -05:00 |
|
|
cbrnrd
|
18286ca2f7
|
Use start_with? instead of [0]
|
2019-04-02 13:43:30 -04:00 |
|
|
cbrnrd
|
f353df952c
|
Use fail_with() instead of return
|
2019-04-02 13:42:07 -04:00 |
|
|
wilfried
|
3081b13a1f
|
Adding payload in exploit code
|
2019-04-02 10:24:48 +02:00 |
|
|
surefire
|
1b6cd64016
|
Land #11136, exploit/multi/misc/weblogic_deserialize_unicastref
|
2019-04-01 18:15:26 -05:00 |
|
|
surefire
|
40191e5a01
|
Dissected JSOs, randomized strings, copied T3 header breakdown from @acamro
|
2019-04-01 18:05:45 -05:00 |
|
|
Jacob Robles
|
3d662bd962
|
Fix words because words...
|
2019-04-01 17:21:23 -05:00 |
|
|
Jacob Robles
|
69062bb220
|
Syntax fixes
|
2019-04-01 17:05:42 -05:00 |
|
|
William Vu
|
06397bb087
|
Land #11636, postgres_createlang version check fix
|
2019-04-01 15:21:57 -05:00 |
|
|
surefire
|
f292befed4
|
Land #11134, exploit/multi/misc/weblogic_serialize_marshalledobject
|
2019-04-01 14:11:30 -05:00 |
|
|
surefire
|
4d0e47044b
|
Fixed a hardcoded payload length resulting in 40% failures
|
2019-04-01 14:05:39 -05:00 |
|
|
Brendan Coles
|
ddbd7ba080
|
Case insensitive match
|
2019-04-01 18:58:14 +00:00 |
|
|
Aaron Ringo
|
28983df234
|
Addition of yum package manager module and documentation
|
2019-04-01 13:26:45 -05:00 |
|