e709a18128
Merge pull request #19404 from bwatters-r7/smb2http_relay
...
SMB to NTLM HTTP Relay with ESC8 module
2024-11-05 14:12:08 -05:00
006ed90f1c
Move the ESC8 module and document the attack
2024-11-04 09:37:12 -05:00
1bfa0755a8
Land #19518 , Add support for RISC-V 32-bit / 64-bit Little Endian payloads
2024-11-01 11:18:30 +00:00
87af327507
Merge branch 'master' into wp_ultimate_member_sorting_sqli
2024-10-29 16:34:10 -04:00
05a149dadc
Merge pull request #19572 from cdelafuente-r7/fix/mod/ldap/ad_cs_cert_template
...
Fix UPDATE certificate templates with `admin/ldap/ad_cs_cert_template`
2024-10-22 15:03:31 -04:00
ae213813b5
Updates from code review
2024-10-22 14:41:02 +02:00
9c0efc67fb
Merge pull request #19567 from bcoles/wordlists
...
data/wordlists: Add default passwords for common single-board computers
2024-10-21 11:58:23 +01:00
43f13c7e90
Add the msPKI-Template-Schema-Version attribute to ESC1, ESC2 and ESC3 templates
2024-10-18 18:57:50 +02:00
e50767bb6f
data/wordlists: Add default passwords for common single-board computers
2024-10-19 00:49:14 +11:00
8e38010d6e
Add an ESC15 template
2024-10-17 11:23:31 -04:00
1c748d376a
Add RISC-V 32-bit/64-bit ELF templates
2024-10-15 22:51:32 +11:00
668424a444
Add unauth SQLi exploit module for Ultimate Member plugin (CVE-2024-1071)
2024-10-14 18:14:10 +02:00
8553f625a4
Add auxiliary/scanner/http/wp_fastest_cache_sqli
2024-10-14 18:03:46 +02:00
dbc020a745
Merge pull request #19441 from Takahiro-Yoko/cve_2023_0386_priv_esc
...
Land #19441 , Add module: Linux Priv Esc (OverlayFS copying bug) CVE-2023-0386
2024-09-26 14:07:17 -05:00
3e6572abde
Update binary
2024-09-26 13:45:44 -05:00
e89e573160
Update exploit binary
2024-09-24 19:36:39 +09:00
755830024c
Update exploit binary and remove unnecessary
2024-09-24 08:37:20 +09:00
44efbc21a8
Add automated acceptance tests for cmd_exec
2024-09-19 11:09:14 +01:00
0bf524482c
Land #19345 , Post module Windows LPE CVE-2024-30088
2024-09-17 08:13:21 -04:00
dd932844b6
Remove unused variables
2024-09-09 08:15:08 +09:00
8366252ba2
Not call payload directory
2024-09-07 12:28:40 +09:00
692531bb87
Call payload directory
2024-09-07 12:16:04 +09:00
2b63f8bb88
Rename exploit
2024-09-07 10:29:41 +09:00
fd7321dd3f
Strip_comments
2024-09-06 22:58:31 +09:00
72a9164024
Update pre-compiled binary
2024-09-06 22:29:09 +09:00
3d20dd6ddf
Add module:
...
Linux Priv Esc (OverlayFS copying bug) CVE-2023-0386
2024-09-05 22:54:55 +09:00
7bfd814297
Removed memory polling
2024-08-30 12:52:18 -07:00
b011b67f80
Responded to comments
2024-08-29 22:25:20 -07:00
bc7840ea7f
Add wp_givewp_rce exploit module
2024-08-27 19:50:35 +02:00
6689614d8f
Responded to comments
2024-08-22 13:06:29 -07:00
31348dac33
Windows LPE CVE-2024-30088
2024-08-21 23:16:37 -07:00
63ac22950f
Adds support to test custom payload branches
2024-08-21 15:02:19 +01:00
636c72965c
Land #19084 , Add CVE-2022-1373 and CVE-2022-2334 exploit chain
...
Merge branch 'land-19084' into upstream-master
2024-07-19 12:22:25 -05:00
1881d4e8b4
commit and sign binary
2024-07-19 12:07:59 -05:00
e9c511c979
Add documentation and some updates
2024-07-16 16:34:28 +02:00
1abc42a873
Add module
2024-07-09 18:34:27 +02:00
bea708d24c
Add exploit module for CVE-2024-5084: WordPress Hash Form Plugin RCE
2024-05-28 18:27:02 +02:00
26a108aadc
Land #19046 , Apache Solr Backup Restore RCE [CVE-2023-50386]
2024-04-23 14:08:33 -04:00
afd4b8af2e
Remove x86 things, include AutoCheck
2024-04-19 22:49:40 +08:00
854d22e5db
Land #17294 , Add additional reliability metadata
2024-04-18 15:26:34 -04:00
0e1961d7e9
Add additional reliability metadata
2024-04-17 21:47:27 +01:00
6b2bdc893b
chore: remove repetitive words
...
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net >
2024-04-15 11:06:50 +08:00
6268235cd3
Add CVE-2022-1373 and CVE-2022-2334 exploit chain
2024-04-13 18:10:45 +08:00
705cfb5016
Fix empty banner (never set) issue
2024-04-05 19:24:19 +03:00
7f62dd2143
Responded to comments
2024-04-04 13:39:22 -07:00
059cfd9a48
Reduced conf folder txt files
2024-04-02 11:40:00 -07:00
03fced404a
Apache Solr Backup Restore RCE
...
Writing file to disk working
working on linux
wip authentcaiton
Consolodated conf folders into one
Renamed conf1 to conf in msf data dir
Randomize the configuration name
Docs plus finishing touches
rubocop
Updated exploit file location
Removed unused external dir
Reduced conf folder
2024-04-02 11:33:52 -07:00
3dc638909f
Land #18906 , Add template data files for ESC2 and ESC3
...
Merge branch 'land-18906' into upstream-master
2024-03-29 15:29:52 -05:00
abb2eb7ffd
Land #18891 , Add RCE module for wp bricks builder
...
This PR adds the wp_bricks_builder_rce exploit module that targets a
known vulnerability in the WordPress Bricks Builder Theme, versions
prior to 1.9.6.
2024-03-26 14:46:35 -07:00
d03dfe8991
Land #18841 , Update sap_icm_paths.txt wordlist
...
This PR updates the sap_icm_paths.txt wordlist with the newest enteries.
2024-03-19 16:40:09 -07:00
Spencer McIntyre