b36c191fc7
With feeling...
2019-12-18 14:33:13 -06:00
f9fbe96145
more bcoles suggestions
2019-12-18 14:25:43 -06:00
c0da9e2202
Rename exploit/linux/local/rds_priv_esc -> exploit/linux/local/rds_rds_page_copy_user_priv_esc
2019-12-18 20:05:19 +00:00
b81d78c7a5
Fix style in bsd/vax/shell_reverse_tcp payload
2019-12-18 12:11:56 -06:00
671f80896a
Update payload_inject.rb
2019-12-18 16:06:26 +01:00
988971bd94
Update shellcode_inject.rb
2019-12-18 16:05:37 +01:00
f22c6f2f63
add support for PPID spoofing to migrate
2019-12-17 16:39:18 +01:00
58bf71d555
simplify amsi resource url
2019-12-17 17:35:29 +08:00
7ce2c63935
Land #12702 , has_check? for modules
2019-12-16 19:50:19 -06:00
f9d2f9fa2e
Update shellcode_inject.rb
2019-12-17 01:42:52 +01:00
664b196388
Update payload_inject.rb
2019-12-17 01:35:24 +01:00
cbd225dfed
Update shellcode_inject.rb
2019-12-17 01:34:12 +01:00
5c7c071094
add support for PPID spoofing to shellcode_inject
2019-12-17 01:31:40 +01:00
64c1f557c6
add support for PPID spoofing to payload_inject
2019-12-17 01:19:45 +01:00
fde942bc37
Land #12517 , replace CheckScanner mixin with CheckModule, which works with anything
2019-12-16 17:40:10 -06:00
66dcbc5d99
Stupid typo...
2019-12-16 12:54:48 -06:00
06bcef3670
bcoles suggested chganges
2019-12-16 12:50:41 -06:00
9cc02cb51f
Land #12643 , add additional example exploit modules
2019-12-16 11:34:33 -06:00
e1e668d7da
Land #12651 , add OpenMRS deserialization exploit
2019-12-16 11:31:24 -06:00
42a60034f2
Land #12725 , Bash profile persistence module
2019-12-16 09:19:08 +01:00
1ff925eac9
Land #12727 , netfilter_priv_esc_ipv4 improvements
2019-12-15 07:07:40 -05:00
eb8814d5fe
Land #12697 , module docs
2019-12-15 06:25:44 -05:00
dd41892123
Update netfilter_priv_esc_ipv4 exploit
2019-12-15 07:17:42 +00:00
c43330934b
New module: Bash Profile Persistence
2019-12-14 21:40:18 -05:00
3257b8b4cc
enum_patches
2019-12-14 15:58:45 -07:00
a3a25b193e
serve AMSI/SBL bypass separately
2019-12-14 19:49:53 +01:00
548abf4364
Rename modules/exploits/multi/http/opennetadmin_ping_cmd_injection.rb to modules/exploits/unix/webapp/opennetadmin_ping_cmd_injection.rb
2019-12-14 16:26:19 +03:00
44636f4975
Update opennetadmin_ping_cmd_injection.rb
2019-12-14 16:24:27 +03:00
5fc561e916
Land #12661 , more docs
2019-12-13 17:42:36 -05:00
6538a4188d
Space-suggested updates
2019-12-13 15:25:01 -06:00
7730c5359d
Update modules/exploits/multi/http/opennetadmin_ping_cmd_injection.rb
...
Co-Authored-By: acammack-r7 <adam_cammack@rapid7.com >
2019-12-13 16:39:17 +03:00
f8b8dc1c80
improve dertermining module check support
2019-12-13 11:02:21 +00:00
4dda0a8e40
Land #12714 , fix encrypted_shell warning
2019-12-13 13:42:59 +08:00
6be4729a02
Land #12391 , Add shellcode_inject post module
...
Merge branch 'land-12391' into upstream-master
2019-12-12 15:20:51 -06:00
fb5c896d40
Streamline Checks and error for channelized comms before injection
2019-12-12 15:19:17 -06:00
87373ccc84
Land #12486 , Small changes to the host_header_injection aux module
2019-12-12 20:11:37 +01:00
15294550ed
add require
2019-12-12 12:24:47 -06:00
1e3158e129
Land #12699 , add payload uuid/temp file fixes
2019-12-12 10:49:15 -06:00
35075d5c7f
add strip and update payload cached sizes
2019-12-12 10:43:04 -06:00
e416f0d886
Land #12363 , Adding Chrome Debugger Gather Auxiliary Module
2019-12-12 10:13:51 -06:00
db05b11fae
Uppercasing Parameters and Dregistering Options
...
This commit uppercases all default parameters and de-registers
certain options like SSL and VHOST.
2019-12-12 09:57:10 -06:00
d7f1c9a4a9
Land #12696 , Add AKA references to several modules
2019-12-12 15:28:21 +00:00
b3bb0efa62
update payload sizes (apparently this is a compiler version-dependent)
2019-12-12 09:23:25 -06:00
0257861c4f
Remove debug statements and extra c/ruby libraries
2019-12-11 18:42:36 -06:00
c4e304574c
Update enum_applications.rb
2019-12-11 14:10:48 -07:00
0a31e3b909
Update bitlocker_fvek.rb
...
Fix spelling errors.
2019-12-11 13:39:25 -07:00
f31930748b
Remove RHOST from solarwinds_lem_exec
...
This doubles as a test.
2019-12-11 13:42:41 -06:00
5eb90d758f
Update modules/exploits/linux/ssh/solarwinds_lem_exec.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-12-11 13:44:37 -05:00
02a87befc3
Added OpenNetAdmin 18.1.1 exploit
...
OpenNetAdmin provides a database managed inventory of your IP network. Each subnet, host, and IP can be tracked via a centralized AJAX enabled web interface that can help reduce tracking errors.
This module exploits a command injection in OpenNetAdmin.
2019-12-11 21:05:02 +03:00
002b9e5b90
Fix typo and lacking RHOST
...
Kinda need a RHOST to use a RCE...
2019-12-11 12:17:53 -05:00
bwatters-r7