98efac5bfb
Add github link
2019-08-28 11:08:01 +07:00
7fd56f5fb3
Add Cisco UCS scpuser exploit
2019-08-28 11:00:08 +07:00
d6f47fd03a
s/Directory/Director
2019-08-28 10:58:41 +07:00
1aad95f7c4
Add exploit for Cisco UCS RCE
2019-08-28 10:55:49 +07:00
804412f9d6
Merge pull request #10 from rapid7/master
...
AAAA
2019-08-28 10:54:05 +07:00
caafac3455
meterpreter, fs/file.rb: use client's separator instead of '\\'
2019-08-27 18:12:47 +02:00
f8b7100565
meterpreter UI, fs.rb: use client's separator instead of '\\'
2019-08-27 17:58:51 +02:00
bcccfd86b8
Teach module cache about realname
...
Also uses the class refname where appropriate since an instances refname
reflects the alias currently in use and if a module is reloaded while
using an alias the old behavior would generate spurious cache entries
that would not be cleaned up or modified. Specifically, this could
register a self-referential alias that would cause a stack overflow when
trying to `use` such an alias.
Additionally, some other `fullname`s were changed to `realname`s for
clarity.
2019-08-26 13:26:48 -05:00
ec81ee8f08
Update modules/auxiliary/gather/pulse_secure_file_disclosure.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-08-26 08:21:02 -05:00
f796f55cea
Update modules/auxiliary/gather/pulse_secure_file_disclosure.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-08-26 08:20:44 -05:00
e103194ec4
Update modules/auxiliary/gather/pulse_secure_file_disclosure.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-08-26 08:20:36 -05:00
64695f1354
initial commit
2019-08-24 13:42:22 +08:00
ea3e2c1047
fix #11574 , add WSReset UAC Bypass
2019-08-24 13:35:40 +08:00
9ea327ecdd
automatic module_metadata_base.json update
2019-08-23 10:32:40 -07:00
413cd7194d
Land #12064 , add Exim Local Privesc module
2019-08-23 12:23:53 -05:00
d551b88600
automatic module_metadata_base.json update
2019-08-23 07:06:06 -07:00
e628fb4afa
Land #12219 , Add Webmin password_change.cgi backdoor exploit
2019-08-23 08:46:24 -05:00
6a8f6d7a57
Unify spec and lib
2019-08-22 18:03:13 -05:00
8aa00d97aa
Add new moved_from to moved module
2019-08-22 17:58:20 -05:00
901943c90f
Move Ubiquiti AirOS exploit from SSH to HTTP
2019-08-22 17:58:20 -05:00
67b427f277
Remove expired deprecated modules
2019-08-22 17:58:20 -05:00
948918dacb
Use alias when reloading aliased module
...
Also speeds up module reloads by avoiding module instance creating
without a type.
Fixes #12026
2019-08-22 17:58:20 -05:00
d8e8a33b46
Rewrite Msf::Module::Deprecated w/ alerts, aliases
...
Less janky, and allows module moves without copying!
2019-08-22 17:58:20 -05:00
969ad7aa8a
Add Msf::Module::Alert for alerting users
2019-08-22 17:58:20 -05:00
1c4d9cfff6
Bump version of framework to 5.0.43
2019-08-22 10:08:14 -07:00
c000625815
automatic module_metadata_base.json update
2019-08-21 15:58:25 -07:00
dff2aed1ac
Simplify request by combining POST parameters
...
There's no need to discriminate between versions. Send 'em all.
2019-08-21 17:50:48 -05:00
071626ed34
Land #12186 - Add RDP Fingerprinting
2019-08-22 08:44:08 +10:00
d56e7d47b5
Add "analysis"
2019-08-21 17:05:40 -05:00
856bf22597
Add module doc
2019-08-21 16:56:23 -05:00
6b8c0bc589
Simplify targets with automatic targeting
2019-08-21 16:41:41 -05:00
3f4c0e972b
Refactor check and support 1.900-1.920 targets
2019-08-21 16:16:56 -05:00
dbcdfe8332
Create pulse_secure_file_disclosure.rb
2019-08-21 15:58:58 -05:00
227ea6de3a
Fix typo
2019-08-21 15:41:45 -05:00
55b5e6a616
Drop =~ habit
2019-08-21 11:55:03 -05:00
a6d7011efa
Adjust check
2019-08-21 11:42:49 -05:00
d1a510234f
Delete pulse_secure_file_disclosure.rb
2019-08-21 11:35:35 -05:00
5de2b37110
Add diff3 output between 1.{890,930,920}
2019-08-21 11:17:12 -05:00
cb66828b78
Land #12221 , Fix RPC console.create database active check
2019-08-21 09:02:51 -05:00
776c7268f5
Fix database active check
2019-08-21 09:35:15 -04:00
88107648cd
Update pulse_secure_file_disclosure.rb
2019-08-21 07:57:15 -05:00
88a941cbd6
Create pulse_secure_file_disclosure.rb
2019-08-21 07:42:43 -05:00
c6f8dedf45
Add more words and an additional reference
2019-08-21 02:26:17 -05:00
41d4dafdca
Add Webmin password_change.cgi backdoor exploit
2019-08-21 02:02:26 -05:00
931607826a
Land #12218 , explicitly require factory_bot in spec helper
2019-08-20 07:52:18 -05:00
40d11b2fdd
explicitly require factory_bot, see #12181
2019-08-20 06:54:34 -05:00
262cd89859
Land #12168 , fix HTTP client redirects with SSL enabled
2019-08-20 04:03:37 -05:00
bd90241192
set opts['SSL'] above for consistency
2019-08-20 04:03:10 -05:00
d1b482366b
Land #12181 , add Juniper config parser tests
2019-08-20 03:48:16 -05:00
95e69930a1
Land #12214 , enable TLS1.0 support for RDP lib
2019-08-20 03:36:19 -05:00
Pedro Ribeiro