Commit Graph

23791 Commits

Author SHA1 Message Date
Brent Cook 8c2138f13b Land #9742, QNX exploit improvements 2018-04-03 07:50:29 -05:00
Brendan Coles d860d7af5b require 'rex/tar' 2018-04-03 06:34:30 +00:00
Brent Cook bd3c00dfd0 Land #9726, add simple Rex::Tar wrapper for consistency with other archive types 2018-04-02 23:35:22 -05:00
Brent Cook 226ef160ff Land #9748, Convert the smbloris DoS into an external module
Help reliability and performance. This some Ruby-specific external module
tooling as a result as well.
2018-04-02 23:25:10 -05:00
Brent Cook b445583a14 Land #9774, use correct whitespace when patching python meterpreter 2018-04-02 23:07:36 -05:00
r4wd3r d6dc0a2d4f Adjust rid_hijack.rb code style with rubocop recommendations. 2018-04-03 04:57:41 +02:00
Brent Cook fa34f3e0a4 Land #9718, Add get_user_spns 'kerberoasting' module 2018-04-02 10:04:44 -05:00
cbrnrd c401872af6 Fix some logic flaws and other review things
Also make the output more reliable
2018-03-30 19:20:20 -07:00
cbrnrd 76af9d5a15 Add apfs_encrypted_volume_passwd.rb 2018-03-29 23:47:45 -07:00
William Vu e3e12ad924 Land #9782, CheckCode::Safe for ms_ndproxy 2018-03-29 17:07:33 -05:00
Brent Cook 3a54f0d5f8 Land #9776, if data is nil, stop reading the heartbleed socket 2018-03-29 11:23:08 -05:00
Brendan Coles 3aac041dcf Return CheckCode::Safe for unsupported x64 systems 2018-03-29 12:03:33 +00:00
Jon Hart a1e83ce835 Land #9760, @h00die's etcd scanner 2018-03-28 10:41:22 -07:00
Jon Hart 5cdfadd0df Fix more style issues 2018-03-28 09:43:30 -07:00
Jon Hart 7767505678 Fix some style issues 2018-03-28 09:43:22 -07:00
Jacob Robles a1fff486bc Land #9666, Add 2017-8917 RCE for Joomla 3.7.0 2018-03-28 11:08:38 -05:00
Jacob Robles 0fa63ae7b3 Update documentation and module
Included Super User in the documentation.
Implemented changes h00die suggested.
Modified sqli to generate strings used in regex.
2018-03-28 10:57:28 -05:00
h00die c97743925f jhart suggestions 2018-03-27 18:46:31 -04:00
Jeffrey Martin 288bd28d3a if data is nil stop reading the heartbleed socket 2018-03-27 15:51:14 -05:00
Wei Chen 94fd599756 Land #9684, Adding ManageEngine Application Manager RCE
Land #9684
2018-03-27 15:17:20 -05:00
William Vu 1f31bcd26f Update telpho10_credential_dump 2018-03-27 14:57:57 -05:00
Wei Chen 0a0bef0c4f Land #9633, Exodus Wallet Remote Code Execution
Land #9633
2018-03-27 14:51:15 -05:00
Jeffrey Martin 7a76593e1c update payload size cause whitespace is more exact 2018-03-27 14:38:17 -05:00
Wei Chen 8c88c53e5d Land #9670, Gitstack v2.3.10 RCE
Land #9670
2018-03-27 13:00:47 -05:00
Jacob Robles 26463b33a2 Land #9636, Improve post module persistence_exe 2018-03-26 17:48:53 -05:00
Jacob Robles 57b048fbf7 Remove requires, changed in-place modification 2018-03-26 17:46:18 -05:00
William Vu c19fc4c18f Land #9423, PSH for jenkins_xstream_deserialize 2018-03-26 17:09:16 -05:00
William Vu 862a3ff74d Land #9618, pipe auditing improvements 2018-03-26 17:01:48 -05:00
h00die 327b2176c0 change and 2018-03-26 17:35:58 -04:00
Andrew Morris 217dea60fc Update blog link to up-to-date blog post 2018-03-26 15:43:10 -04:00
h00die e462cb49a2 updated docs 2018-03-25 14:53:30 -04:00
h00die d739a9a057 working etcd scanner 2018-03-25 13:54:55 -04:00
h00die 80c4d59560 Land #9702 exploit for clipbucket 2018-03-24 19:59:17 -04:00
h00die 0028e2c5ba documentation update 2018-03-24 19:25:59 -04:00
Brendan Coles 9bb6e72020 Add lastore-daemon D-Bus Privilege Escalation exploit 2018-03-24 23:16:42 +00:00
Brendan Coles fdd2af2d2a Update tested versions 2018-03-24 00:23:12 +00:00
Adam Cammack 5ece14b064 Convert SMBLoris to an external module 2018-03-23 14:55:18 -05:00
Touhid M Shaikh 230c0a295f Delete playsms_uploadcsv_exec.rb 2018-03-23 12:29:07 +05:30
William Vu 09cb4a52df Update smb_ms17_010 scanner with PipeAuditor mixin 2018-03-22 15:37:45 -05:00
William Vu e4c026fffd Update pipe_auditor module with PipeAuditor mixin 2018-03-22 15:37:45 -05:00
Brendan Coles 9d28549e84 Update qnx_qconn_exec 2018-03-22 06:25:44 +00:00
Jacob Robles 8d0e3ada74 Change option names and module type 2018-03-21 06:49:50 -05:00
Jacob Robles fc9005df8a Add External License Support 2018-03-21 06:26:25 -05:00
Jacob Robles 8d12118d1f Add get_user_spns external module and documentation 2018-03-21 06:26:15 -05:00
Touhid M Shaikh a506efe0b6 playsms_uploadcsv_exec.rb
PlaySMS 1.4 Remote Code Execution using Phonebook import Function in import.php
2018-03-21 14:13:52 +05:30
Jacob Robles ca7caae622 Change External Module Type Names
Change the a couple of external module type names
to be consistent with the template files.
2018-03-20 10:19:57 -05:00
Summus6 b865d4fee2 Fix CachedSize for windows/x64/reverse_(win)http(s) payloads 2018-03-20 11:27:43 +01:00
Brendan Coles ac9f506b45 Update tested versions 2018-03-20 02:49:56 +00:00
Mehmet İnce 53eabfc1df Update documentation and add check before exploit 2018-03-19 23:27:18 +03:00
Touhid M Shaikh f012916742 Delete playsms_uploadcsv_exec.rb 2018-03-18 13:57:53 +05:30