Commit Graph

2578 Commits

Author SHA1 Message Date
Meatballs a0f47f6b2b Correct error check logic 2014-02-07 22:06:53 +00:00
Meatballs 443a51bbf5 Undo revert from merge 2014-02-07 21:28:04 +00:00
Meatballs 56359aa99f Merge changes from other dev machine 2014-02-07 21:22:44 +00:00
Meatballs a4cc75bf98 Potential .pdf support 2014-02-07 20:37:44 +00:00
Meatballs e13520d7fb Handle a blank filename 2014-02-07 20:15:32 +00:00
Meatballs 103780c3da Merge remote-tracking branch 'upstream/master' into mediawiki 2014-02-07 20:07:04 +00:00
grimmlin 2d93b38e2a Fixed java_signed_applet for Java 7u51 2014-02-07 16:29:50 +01:00
Meatballs 0a3cb3377f AppendEncoder 2014-02-04 15:41:10 +00:00
Meatballs 26c506da42 Naming of follow method 2014-02-04 15:25:51 +00:00
Meatballs f5fa3fb5ce Windows compat, fixed PHP-CLI 2014-02-04 14:27:10 +00:00
Meatballs 64d11e58c2 Use semicolon for win compat 2014-02-04 13:53:33 +00:00
Meatballs 2fd8257c7e Use bperry's trigger 2014-02-04 00:51:34 +00:00
Meatballs a8ff6eb429 Refactor send_request_cgi_follow_redirect 2014-02-03 21:49:49 +00:00
Meatballs 83925da2f1 Refactor form_data code 2014-02-03 21:16:58 +00:00
Tod Beardsley d34020115a Fix up on apache descs and print_* methods 2014-02-03 13:13:57 -06:00
Meatballs 67c18d8d2d I had a problem, then I used regex. 2014-02-02 22:19:54 +00:00
Meatballs 57f4998568 Better failures and handle unconfigured server 2014-02-02 16:26:22 +00:00
Meatballs 9fa9402eb2 Better check and better follow redirect 2014-02-02 16:07:46 +00:00
Meatballs 0d3a40613e Add auto 30x redirect to send_request_cgi 2014-02-02 15:03:44 +00:00
Meatballs 8b33ef1874 Not html its form-data... 2014-02-02 13:57:29 +00:00
Meatballs 7ddc6bcfa5 Final tidyup 2014-02-01 01:05:02 +00:00
Meatballs 486a9d5e19 Use msf branded djvu 2014-02-01 00:37:28 +00:00
Meatballs fd1a507fda Rename file 2014-02-01 00:27:32 +00:00
Meatballs 700c6545f0 Polished 2014-02-01 00:26:55 +00:00
Mekanismen 5a883a4477 updated 2014-01-31 21:59:26 +01:00
Meatballs 7fa1522299 Initial commit 2014-01-31 18:51:18 +00:00
sinn3r b67ac39a33 Land #2921 - Apache Struts Developer Mode OGNL Execution 2014-01-31 12:06:58 -06:00
sinn3r 60ead5de43 Explain why we flag the vuln as "Appears" instead of vulnerable 2014-01-31 12:05:58 -06:00
jvazquez-r7 2fca2da9f7 Add an vprint message on check 2014-01-31 11:57:20 -06:00
jvazquez-r7 356692f2f5 Land #2923, @rangercha tomcat deploy module compatible with tomcat8 2014-01-31 10:53:53 -06:00
Mekanismen f6291eb9a8 updated 2014-01-31 14:33:18 +01:00
jvazquez-r7 93db1c59af Do small fixes 2014-01-30 17:16:43 -06:00
jvazquez-r7 9daacf8fb1 Clean exploit method 2014-01-30 16:58:17 -06:00
jvazquez-r7 4458dc80a5 Clean the find_csrf mehtod 2014-01-30 16:39:19 -06:00
jvazquez-r7 697a86aad7 Organize a little bit the code 2014-01-30 16:29:45 -06:00
jvazquez-r7 50317d44d3 Do more easy clean 2014-01-30 16:23:17 -06:00
jvazquez-r7 1a9e6dfb2a Allow check to detect platform and arch 2014-01-30 15:17:20 -06:00
jvazquez-r7 b2273dce2e Delete Automatic target
It isn't usefull at all, when auto targeting is done, the payload (java platform and arch)
has been already selected.
2014-01-30 15:04:08 -06:00
jvazquez-r7 cebbe71dba Do easy cleanup of exploit 2014-01-30 14:42:02 -06:00
jvazquez-r7 c336133a8e Do a first clean related to auto_target 2014-01-30 14:27:20 -06:00
jvazquez-r7 57b8b49744 Clean query_manager 2014-01-30 14:20:02 -06:00
jvazquez-r7 148e51a28b Clean metadata and use TARGETURI 2014-01-30 14:03:52 -06:00
William Vu 56287e308d Clean up unused variables 2014-01-30 11:20:21 -06:00
Mekanismen e7ab77c736 added module for Oracle Forms and Reports 2014-01-30 14:45:17 +01:00
RangerCha a49473181c Added new module. Abuses tomcat manager upload page. Tested on tomcat 5.5.36, 6.0.37, 7.0.50, 8.0.0rc10 2014-01-27 09:04:59 -05:00
jvazquez-r7 8fe74629fe Allow send_request_cgi to take care of the uri encoding 2014-01-26 00:06:41 -06:00
jvazquez-r7 37adf1251c Delete privileged flag because is configuration dependant 2014-01-25 18:25:31 -06:00
jvazquez-r7 038cb7a981 Add module for CVE-2012-0394 2014-01-25 18:17:01 -06:00
William Vu 7c5229e2eb Use opts hash for glassfish_deployer
https://dev.metasploit.com/redmine/issues/8498
2014-01-24 20:17:02 -06:00
sinn3r cdc425e4eb Update some checks 2014-01-24 12:08:23 -06:00