Commit Graph

9779 Commits

Author SHA1 Message Date
Grant Willcox cd1f0780de Fix up a minor typo. 2021-01-27 10:14:52 -06:00
Sebastian Tauchert edde3b8fa2 Hide negative results as default 2021-01-27 15:16:55 +01:00
Grant Willcox 57bb3fbc1c Land #14383, Add exploit and auxiliary Python module examples and update executable loader accordingly 2021-01-22 13:03:57 -06:00
adfoster-r7 ff6a1f135c Land #14629, migrate msf folder to Zeitwerk 2021-01-22 14:21:26 +00:00
Brendan Coles abb0decc7a wordpress_ghost_scanner: Update reference URLs 2021-01-21 20:51:29 +00:00
Spencer McIntyre 3ee642a589 Land #14597, gather/external_ip: set Host header 2021-01-19 09:19:48 -05:00
dwelch-r7 d437a32374 remove msf/util requires 2021-01-18 14:21:54 +00:00
adfoster-r7 da7a51fbca Land #14584, implement the zeitwerk autoloader within lib/msf/base 2021-01-18 13:11:08 +00:00
Andrey Arapov 5ec5db828e gather/external_ip: set Host header
http://ifconfig.me replies with 404 when Host header isn't set.
2021-01-11 15:59:57 +01:00
Shelby Pace 7cab5568ab Land #14568, add total upkeep backup download 2021-01-05 14:01:04 -06:00
dwelch-r7 bad5ccbc49 Remove msf/base requires 2021-01-05 14:59:46 +00:00
h00die c64d0038ab review step 1 2020-12-31 12:54:33 -05:00
h00die ff3dd7b73a first go of wp_total_upkeep 2020-12-30 16:34:12 -05:00
Spencer McIntyre 8701a2e6e8 Remove the deprecated SOCKS modules in favor of the new unified one 2020-12-29 13:33:06 -05:00
Grant Willcox 2c66beac17 Land #14429, Create shodan_host.rb, a module to grab ports from a given IP using Shodan 2020-12-21 15:58:17 -06:00
Grant Willcox 12277d3020 Apply RuboCop changes to the exploit module and also make final adjustments to the exploit code to handle some edge cases and fix review comments 2020-12-21 15:26:48 -06:00
Spencer McIntyre 11faafa4e9 Land #14474, Wordpress 2-day: easy-wp-smtp arbitrary wordpress user password reset 2020-12-18 17:07:46 -05:00
Spencer McIntyre 764efbeac3 Fixup a typo, an unnecessary statement and clarify a statement 2020-12-18 17:07:16 -05:00
h00die 3cb39c2fca Land #14497, wordpress uplicator plugin arbitrary file read 2020-12-18 17:05:40 -05:00
h00die bee11c7d6e add cve 2020-12-18 15:32:35 -05:00
h00die 9e6d20a83c create aggressive mode and some review 2020-12-18 15:30:45 -05:00
h00die a1702e8b53 rubocop and minor adjustments 2020-12-17 06:39:43 -05:00
Natto e4678b82c5 Update shodan_host.rb 2020-12-16 19:39:43 +08:00
Natto 45a9609fc8 Update shodan_host.rb 2020-12-14 17:47:50 +08:00
Natto 51fd4033e8 Update shodan_host.rb 2020-12-14 17:45:19 +08:00
Natto 8126ec4cb5 Update shodan_host.rb 2020-12-14 16:39:15 +08:00
SunCSR Team 65be04ebf9 Update wp_duplicator_file_read.rb 2020-12-13 21:07:21 -05:00
SunCSR Team 3dcd963c9a Update wp_duplicator_file_read.rb 2020-12-13 21:05:34 -05:00
SunCSR Team 64f597a43a Update wp_duplicator_file_read.rb 2020-12-12 23:44:50 +07:00
SunCSR Team 5fc8bb1d7b Update wp_duplicator_file_read.rb 2020-12-12 21:39:59 +07:00
SunCSR Team 8ede2be299 Add module wp_duplicator_file_read.rb
Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download
2020-12-10 23:40:32 -05:00
SunCSR Team 4b3a5fa2c8 Delete wp_duplicator_file_read.rb 2020-12-10 23:39:38 -05:00
SunCSR Team ee541a31ae Add files via upload
Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download
2020-12-10 23:37:32 -05:00
William Vu 9452c1dcfa Fix merge conflict from #14202, in linear history 2020-12-09 17:24:29 -06:00
Spencer McIntyre 59339f3337 Land #14418, Wordpress plugin Email Subscribers & Newsletters sqli (CVE-2019-20361) 2020-12-09 10:29:32 -05:00
Spencer McIntyre 90a99ae7c3 Land #14423, Expand wordpress_scanner to look for themes & plugins 2020-12-09 09:12:28 -05:00
h00die 13967a40d2 updates to easy wp smtp module 2020-12-08 20:51:54 -05:00
h00die 3b9183f198 working 2020-12-08 16:49:45 -05:00
h00die 4d36a107e6 reverse logic 2020-12-07 18:47:45 -05:00
dwelch-r7 49a6b1b257 Remove requires that sneaked in while the PR was up 2020-12-07 11:02:10 +00:00
dwelch-r7 1617b3ec9b Use zeitwerk for lib/msf/core folder 2020-12-07 10:31:45 +00:00
William Vu e5941cc4a8 Refactor aux/scanner/ssh/ssh_version for CheckCode 2020-12-07 01:35:13 -06:00
h00die b21fccebaa updates from review 2020-12-04 21:50:31 -05:00
Alan Foster 76e967353e Add auxiliary support to autocheck mixin 2020-12-03 01:09:06 +00:00
dwelch-r7 3824f3923f Land #14394, Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion
Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion
2020-11-30 05:15:29 +00:00
SunCSR Team 3fbe851d71 Update tomcat_ghostcat.rb 2020-11-30 08:33:32 +07:00
SunCSR Team 4dce7c070b Update tomcat_ghostcat.rb 2020-11-26 16:24:49 +07:00
Natto 8f35e3c627 Create shodan_host.rb 2020-11-25 12:57:48 +08:00
h00die 0832fe17f0 use fail_with 2020-11-22 09:02:54 -05:00
h00die 7138f6e48b cleanup 2020-11-22 07:51:03 -05:00