Will Porter
f1f9597222
Update modules/auxiliary/sqli/openemr/openemr_sqli_dump.rb
...
Use `normalize_uri` to construct the vulnerable URI.
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-09-10 12:27:22 -04:00
Metasploit
e66179a0e7
automatic module_metadata_base.json update
2019-09-10 11:24:33 -05:00
bwatters-r7
ee660d61ea
Land #12275 , Update payloads to 1.3.77
...
Merge branch 'land-12275' into upstream-master
2019-09-10 11:14:56 -05:00
Brent Cook
73eab2c34a
Land #12286 , RDP lib: lower SSL security level for compatibility with older implementations
2019-09-09 23:11:15 -05:00
Brent Cook
902ff4f573
Land #12301 , fix a few issues using/building Docker images
2019-09-09 23:04:10 -05:00
Brent Cook
f24c689d84
fix compatibility with --chown flag with COPY
2019-09-09 23:02:26 -05:00
Brent Cook
d874f1899d
update lock for unpinned gem
2019-09-09 22:52:54 -05:00
Wei Chen
2cd8125a40
Add zip skip
2019-09-09 12:00:53 -05:00
Wei Chen
5e65685167
Update documentation for zip slip
2019-09-09 12:00:05 -05:00
Matúš Bursa
9297809b41
fix permissions bug Gemfile.lock
...
There was an error while trying to write to /usr/src/metasploit-framework/Gemfile.lock. It is likely that you need to grant write permissions for that path.
2019-09-09 12:59:19 +02:00
Metasploit
0cbfaccc7d
automatic module_metadata_base.json update
2019-09-08 00:09:39 -05:00
Brendan Coles
aaad280e13
Land #12294 , Fix References Array for bypassuac modules
2019-09-08 05:04:03 +00:00
AZSG
a990191f99
Update modbusclient.rb
2019-09-07 23:54:43 -05:00
h00die
054a092eb2
fix references in bypassuac modules
2019-09-08 00:42:21 -04:00
h00die
78c4bfee95
add url for fodhelper
2019-09-08 00:33:16 -04:00
h00die
f60e8a3dbd
less indents
2019-09-08 00:11:11 -04:00
h00die
ce5f8d8d2f
add datastore option
2019-09-08 00:06:49 -04:00
h00die
d6cfe021dc
Land #12291 log errors on payload loading issues
2019-09-07 23:55:39 -04:00
h00die
d25d8e77b8
12291 sempervictus words
2019-09-07 23:54:19 -04:00
Clément Notin
579ea56f3b
RDP_TLS_SECURITY_LEVEL default value is 0 (less secure)
2019-09-07 18:39:59 +02:00
Clément Notin
49a991891c
Add RDP_TLS_SECURITY_LEVEL advanced option
2019-09-07 17:19:59 +02:00
Brent Cook
a985da9318
expand scope of errors caught to include all StandardErrors
2019-09-07 07:38:37 -04:00
Brent Cook
1d91e7f53c
make payload generation failures at boot time non-fatal
...
Currently, if any payload fails to generate that has a dynamic size, it causes a Framework instance to throw an exception on start. This can happen for a number of reasons, and more often than not it is enviromental (files missing, Y2k38 bugs, etc.). Instead of failing entirely, catch the exception and log as an error, don't register the payload, but continue booting.
2019-09-07 07:21:40 -04:00
gkweb76
795e0ebeb5
Restore a "print" to "print_good"
...
Aesthetics modification
2019-09-07 09:02:04 +02:00
AZSG
edcddf2736
Update modbusclient.rb
2019-09-06 22:40:31 -05:00
Clément Notin
d4e2ac696a
RDP lib: lower SSL security level for compatibility with stock Win7
2019-09-07 01:17:22 +02:00
Metasploit
9a6830c0ad
automatic module_metadata_base.json update
2019-09-06 12:10:24 -05:00
bwatters-r7
25b56c410d
Land #12189 , Add module for LibreNMS CVE-2019-10669
...
Merge branch 'land-12189' into upstream-master
2019-09-06 12:01:09 -05:00
Metasploit
2ec2ecb969
automatic module_metadata_base.json update
2019-09-06 10:22:57 -05:00
Shelby Pace
c4bd91f505
Land #12272 , add October CMS file upload
2019-09-06 10:13:33 -05:00
Shelby Pace
b0625012c4
add vulnerable software version
2019-09-06 10:12:08 -05:00
Shelby Pace
5f7c243b48
add filedropper, fix check, add to docs
2019-09-06 09:49:09 -05:00
Metasploit
788e3b4363
automatic module_metadata_base.json update
2019-09-06 09:33:59 -05:00
bwatters-r7
17acaf9720
Land #12226 , fix #11574 , add WSReset.exe UAC Bypass
...
Merge branch 'land-12226' into upstream-master
2019-09-06 09:19:24 -05:00
Touhid M Shaikh
aaebec01a4
Update References
...
Added CVE and Blog link
2019-09-06 18:26:28 +05:30
bwatters-r7
e2815a997b
Land #12251 , Unify SSL cert generate interfaces
...
Merge branch 'land-12251' into upstream-master
2019-09-05 16:45:31 -05:00
gkweb76
a2d2475618
Fixed wrong previous commit
2019-09-05 22:12:33 +02:00
gkweb76
88d424cf3f
Make the modification suggested by @acammack-r7
...
Directly insert the new value in the "table", instead of modifying the screen output manually. Simpler and cleaner, thanks @acammack-r7 !
2019-09-05 21:44:18 +02:00
Metasploit
22182d5c8d
automatic module_metadata_base.json update
2019-09-05 13:25:28 -05:00
Touhid M Shaikh
cf4c10783a
Update modules/exploits/multi/http/october_upload_bypass_exec.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-09-05 23:50:18 +05:30
Touhid M Shaikh
4b416bf530
Update modules/exploits/multi/http/october_upload_bypass_exec.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-09-05 23:48:43 +05:30
Touhid M Shaikh
a7e205e252
Update modules/exploits/multi/http/october_upload_bypass_exec.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-09-05 23:48:32 +05:30
Touhid M Shaikh
0e4e7dd9d9
Update modules/exploits/multi/http/october_upload_bypass_exec.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-09-05 23:48:22 +05:30
Touhid M Shaikh
bc1610ec46
Update modules/exploits/multi/http/october_upload_bypass_exec.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-09-05 23:48:14 +05:30
Tim W
9f03db4582
Land #12280 , add WSReset.exe UAC bypass via registry
2019-09-06 02:14:54 +08:00
Tim W
1a717a5624
minor fixes
2019-09-06 02:11:06 +08:00
Metasploit
ea6ab34c32
Bump version of framework to 5.0.47
2019-09-05 12:13:53 -05:00
bwatters-r7
20216ac81a
Fix documentation to new module name
2019-09-05 12:08:12 -05:00
Tim W
5123fdbb5e
s/pkexec_helper_ptrace/ptrace_traceme_pkexec_helper/g
2019-09-06 01:00:44 +08:00
bwatters-r7
a1f39e519f
Move documentation
2019-09-05 11:57:51 -05:00