 Brendan Coles
|
6cdb484d7c
|
Add Aerospike Database UDF Lua Code Execution exploit
|
2020-12-05 14:15:22 +00:00 |
|
|
Pedro Ribeiro
|
a99ce581dd
|
Update TP-Link AC1750 Pwn2Own 2019 module
|
2020-11-26 12:56:02 +00:00 |
|
|
A Galway
|
0328e3f815
|
Land #14359, gives preference to default target options
|
2020-11-13 14:44:13 +00:00 |
|
|
William Vu
|
67ae309896
|
Set plat/arch in saltstack_salt_unauth_rce targets
Looks like I forgot this, and it affects compatible payloads.
|
2020-11-11 13:09:26 -06:00 |
|
|
Alan Foster
|
5b438fd933
|
Preference target values when registering options
|
2020-11-05 23:16:37 +00:00 |
|
|
Spencer McIntyre
|
659137da94
|
Remove the DRuby remote code execution module
|
2020-11-02 08:32:52 -05:00 |
|
|
Spencer McIntyre
|
ba17a5d67f
|
Apply rubocop fixes for the DRuby RCE module
|
2020-10-22 12:35:35 -04:00 |
|
|
Spencer McIntyre
|
8aca08f80b
|
Add the DRuby RCE check method
|
2020-10-22 12:34:51 -04:00 |
|
|
Spencer McIntyre
|
34e41e66ec
|
Fix the syscall DRuby target by adding a small delay before execve
|
2020-10-22 12:18:12 -04:00 |
|
|
Spencer McIntyre
|
49145bfd31
|
Don't start the DRuby service, it appears unnecessary
|
2020-10-22 12:15:39 -04:00 |
|
|
Alan Foster
|
30809787c4
|
Convert disclosure dates to iso8601
|
2020-10-02 21:00:37 +01:00 |
|
|
William Vu
|
36b5d237fa
|
Make cmd/unix target types consistent to :unix_cmd
There were some using :unix_command, and it was just an oversight.
|
2020-07-05 11:16:47 -05:00 |
|
|
Spencer McIntyre
|
a27bf9df38
|
Fix some grammatical mistakes and set a default target for anydesk
|
2020-07-01 15:27:33 -04:00 |
|
|
Spencer McIntyre
|
bb33bc9c62
|
Randomize the bad unicode character used to trigger the vulnerability
|
2020-06-26 13:05:43 -04:00 |
|
|
Spencer McIntyre
|
fb4ec60a30
|
Apply rubocop linting and add an Ubuntu 20.04 target
|
2020-06-25 16:18:17 -04:00 |
|
|
Spencer McIntyre
|
f1c4cecf6d
|
Add module docs for CVE-2020-13160
|
2020-06-17 11:30:41 -04:00 |
|
|
Spencer McIntyre
|
3edae89496
|
Add an exploit for CVE-2020-13160
|
2020-06-17 10:14:35 -04:00 |
|
|
William Vu
|
f60e569c1b
|
Add Cisco CML and VIRL-PE advisory to Salt modules
Hat tip @brudis-r7!
|
2020-05-29 15:24:00 -05:00 |
|
|
William Vu
|
06f9099d7f
|
Add BASE_DN and ROOT_KEY to vmdir and Salt modules
|
2020-05-22 11:16:58 -05:00 |
|
|
William Vu
|
06cae74d51
|
Note what CheckModule is used to provide a check
Hat tip @ccondon-r7 for making me realize my standard comment needs to
be reapplied.
|
2020-05-11 12:28:02 -05:00 |
|
|
William Vu
|
83dde571a2
|
Add VMware vRealize Operations Manager advisory
Hat tip @brudis-r7!
|
2020-05-11 12:05:38 -05:00 |
|
|
William Vu
|
6e8abd7a40
|
Add SaltStack Salt unauthenticated RCE module
|
2020-05-11 12:05:38 -05:00 |
|
|
Alan Foster
|
f2c3fc5f00
|
Rubocop recently landed modules
|
2020-04-17 11:55:04 +01:00 |
|
|
Pedro Ribeiro
|
a0c472b039
|
add comments about reference table
|
2020-04-09 23:01:27 +07:00 |
|
|
Pedro Ribeiro
|
600f4efe4a
|
Fix advisory link
|
2020-04-09 19:05:49 +07:00 |
|
|
Pedro Ribeiro
|
4ae9c65ecf
|
Optimise exploit
|
2020-04-09 18:15:27 +07:00 |
|
|
Pedro Ribeiro
|
a90d745fa4
|
Fix typo and make it Aggressive
|
2020-04-08 20:05:19 +07:00 |
|
|
Radek Domanski
|
d6755b7221
|
Remove SSL option
Busybox wget on the target doesn't support https connections.
|
2020-04-08 14:49:49 +02:00 |
|
|
Pedro Ribeiro
|
33e1c8ffdb
|
Fix issues
|
2020-04-08 12:26:37 +07:00 |
|
|
Radek Domanski
|
e2e69a5053
|
Adding exploit for tplink_archer_a7_c7_lan
|
2020-04-07 19:57:34 +02:00 |
|
|
Brent Cook
|
8489bcdfd9
|
This fixes broken links to the community.rapid7.com blog
Performed mechanically with sed, spot-checked that the new blog can consume these links.
|
2020-02-18 09:06:11 -06:00 |
|
|
h00die
|
9f29f5f419
|
fix spelling received
|
2019-10-05 14:40:27 -04:00 |
|
|
William Vu
|
32334c2386
|
Update all module splats from http:// to https://
|
2019-08-15 18:10:44 -05:00 |
|
|
William Vu
|
fc9245fa66
|
Fix author names in a couple modules
It me.
|
2019-02-22 17:02:15 -06:00 |
|
|
Brendan Coles
|
24f807490f
|
revisionism
|
2019-01-10 19:19:14 +00:00 |
|
|
William Vu
|
4c036e70c1
|
Fix http://seclists.org links to https://
I have no idea how this happened in my own code. I was seeing https://.
|
2018-09-15 18:54:45 -05:00 |
|
|
William Vu
|
6df235062b
|
Land #10505, post-auth and default creds info
|
2018-08-24 18:08:15 -05:00 |
|
|
Matthew Kienow
|
ecc6c473d8
|
Add note about unauthenticated telnetd service
|
2018-08-23 15:50:41 -04:00 |
|
|
Matthew Kienow
|
56433c8ed2
|
Functional decomposition refactor and cleanup
|
2018-08-23 15:23:42 -04:00 |
|
|
Matthew Kienow
|
961769c346
|
Fix SNMP Null class comparison
|
2018-08-23 15:23:42 -04:00 |
|
|
Matthew Kienow
|
9c05f14a70
|
Modify SNMP null and error handling
|
2018-08-23 15:23:42 -04:00 |
|
|
Matthew Kienow
|
934bb38a44
|
Omit parentheses for no argument method calls
|
2018-08-23 15:23:41 -04:00 |
|
|
Matthew Kienow
|
c5958c6e38
|
Restore original rport value
|
2018-08-23 15:23:41 -04:00 |
|
|
Matthew Kienow
|
70a0b9b1be
|
Remove payload RequiredCmd and reformat info
|
2018-08-23 15:23:41 -04:00 |
|
|
Matthew Kienow
|
dafa62dec4
|
Use string interpolation over concatenation
|
2018-08-23 15:23:40 -04:00 |
|
|
Matthew Kienow
|
7c03454a0b
|
Remove unnecessary explicit msf/core require
|
2018-08-23 15:23:40 -04:00 |
|
|
Matthew Kienow
|
b1a308f3ae
|
Remove final debug output
|
2018-08-23 15:23:40 -04:00 |
|
|
Matthew Kienow
|
e21ea4180f
|
Clean up module and payload
Update module info, remove intermediate ARCH_ARMLE target, simply
options and add cleanup command so that the payload kills telnetd
|
2018-08-23 15:23:40 -04:00 |
|
|
Matthew Kienow
|
81f1555439
|
Rename module, exploits multiple printer models
|
2018-08-23 15:23:40 -04:00 |
|
|
Matthew Kienow
|
df18e354e1
|
Add bind_busybox_telnetd payload, misc cleanup
|
2018-08-23 15:23:39 -04:00 |
|