 William Vu
|
9e6f425427
|
Move exploit/linux/http/citrix_dir_traversal_rce
To exploit/freebsd/http/citrix_dir_traversal_rce. It's actually FreeBSD.
|
2021-04-15 19:13:25 -05:00 |
|
|
Grant Willcox
|
832ca92f42
|
Land #14700, Add Nagios XI Plugins Filename Authenticate RCE module and docs (CVE-2020-35578)
|
2021-04-14 16:58:55 -05:00 |
|
|
Grant Willcox
|
61395f3cb1
|
Update scenarios in documentation and also update the module to handle cases where the version number may not be in a format that Rex::Text can immediately handle.
|
2021-04-14 16:32:53 -05:00 |
|
|
Grant Willcox
|
154e237edd
|
Add in fixes to documentation and module that were covered in the review process
|
2021-04-14 15:33:42 -05:00 |
|
|
Grant Willcox
|
a59e7e196d
|
Land #14701, Rename Nagios XI authenticated RCE module and integrate Nagios XI mixin
|
2021-04-13 18:58:29 -05:00 |
|
|
Grant Willcox
|
9379f0356b
|
Add in 5.6.5 exploitation scenario to documentation
|
2021-04-13 17:42:47 -05:00 |
|
|
Grant Willcox
|
0aada27128
|
Update the documentation to account for the fact that the plugin name has to be check_ping and also update the module to randomize some of the fields where possible.
|
2021-04-13 17:15:34 -05:00 |
|
|
Grant Willcox
|
cdd589f592
|
Update documentation to wrap some overly long lines to meet msftidy_docs.rb requirements.
|
2021-04-13 16:36:38 -05:00 |
|
|
Grant Willcox
|
ead9d73dc5
|
Add in fixes from review to documentation and module
|
2021-04-13 16:34:13 -05:00 |
|
|
Tim W
|
7c575cd38f
|
Land #15007, add a chrome renderer exploit (CVE-2020-16040)
|
2021-04-08 22:18:20 +01:00 |
|
|
Shelby Pace
|
926f051377
|
Land #14978, add Gitea and Gogs exploit modules
|
2021-04-07 13:44:43 -05:00 |
|
|
adfoster-r7
|
258b9d3e28
|
Land #14998, Change CVE references from CVE Details to NVD
|
2021-04-07 10:10:55 +01:00 |
|
|
rajvardhan agarwal
|
c863c324ae
|
Add exploit for CVE-2020-16040
|
2021-04-06 17:25:27 +05:30 |
|
|
William Vu
|
4020813b42
|
Correct broken or redundant CVE references
|
2021-04-05 13:06:50 -05:00 |
|
|
Shelby Pace
|
cfc6b0a8ba
|
Land #14971, add Apache OFBiz SOAP Deser rce
|
2021-04-05 11:44:40 -05:00 |
|
|
Shelby Pace
|
a803e1e932
|
remove spare comma
|
2021-04-05 09:33:20 -05:00 |
|
|
Shelby Pace
|
71914a1ddb
|
Land #14813, additional dup scout bof targets
|
2021-04-01 13:03:57 -05:00 |
|
|
kalba-security
|
02b9e5c939
|
rebase, use latest mixin code, correct vulnerable versions, update docs
|
2021-04-01 12:18:46 -04:00 |
|
|
kalba-security
|
3b7e612541
|
Add Nagios XI Plugins Filename Authenticate RCE module and docs
|
2021-04-01 11:23:52 -04:00 |
|
|
kalba-security
|
2df90d8d23
|
Rebase, rename module to nagios_xi_plugins_check_plugin_authenticated_rce, update check to take advantage of mixin, minor improvements
|
2021-04-01 11:07:49 -04:00 |
|
|
Shelby Pace
|
2cbd1a6be9
|
Land #14935, add F5 iControl REST API SSRF RCE
|
2021-04-01 08:40:38 -05:00 |
|
|
kalba-security
|
0e7c11ada3
|
Rename module and modify it to use the Nagios XI mixin, add autocheck, fix syntax and linting, also update docs
|
2021-04-01 09:26:16 -04:00 |
|
|
Shelby Pace
|
8cdaf9791d
|
Land #14950, add saltstack salt api rce
|
2021-03-31 14:50:30 -05:00 |
|
|
Shelby Pace
|
9eacda5552
|
add wait time line to test output
|
2021-03-31 14:47:34 -05:00 |
|
|
William Vu
|
69a0c9420b
|
Add module doc
|
2021-03-31 14:02:32 -05:00 |
|
|
Christophe De La Fuente
|
9806026ab9
|
Update from code review
|
2021-03-31 17:48:35 +02:00 |
|
|
Christophe De La Fuente
|
73a8b7aa5f
|
Add Gitea and Gogs RCE modules and documentations
|
2021-03-31 16:47:29 +02:00 |
|
|
William Vu
|
151b8f2f92
|
Update vmware_vcenter_uploadova_rce module doc
|
2021-03-30 21:08:21 -05:00 |
|
|
Spencer McIntyre
|
a0a4bc079a
|
Add the exploit module for CVE-2021-26295
|
2021-03-30 18:18:16 -04:00 |
|
|
Spencer McIntyre
|
9d85af51cb
|
Land #14945, Proxylogon RCE (Praetorian update)
|
2021-03-29 12:04:19 -04:00 |
|
|
Spencer McIntyre
|
11f4946817
|
Tweak some ProxyLogon verbiage for clarity
|
2021-03-29 10:07:43 -04:00 |
|
|
RAMELLA Sébastien
|
02b240b22a
|
code review
|
2021-03-29 14:23:39 +04:00 |
|
|
Christophe De La Fuente
|
00698d20bf
|
Add waiting status message and update doc
|
2021-03-26 14:59:27 +01:00 |
|
|
Christophe De La Fuente
|
b069fec866
|
Add module and doc for Saltstack Salt API wheel_async RCE
|
2021-03-26 13:54:06 +01:00 |
|
|
Spencer McIntyre
|
006faaab9a
|
Land #14924, Add auxiliary and exploit modules for CVE-2020-6207 in SAP Solution Manager
|
2021-03-25 17:48:56 -04:00 |
|
|
Vladimir Ivanov
|
b066145cf1
|
Minor updates
Updated documentation auxiliary module cve_2020_6207_solman_rce.md
Updated documentation in exploit module cve_2020_6207_solman_rs.md
|
2021-03-25 17:07:20 +03:00 |
|
|
bwatters
|
6505f9ccbd
|
Land #14830, Adding FortiLogger 4.4.2.2 - Unauthenticated Arbitrary File Upload (CVE-2021-3378)
Merge branch 'land-14830' into upstream-master
|
2021-03-24 17:41:10 -05:00 |
|
|
bwatters
|
e2dfca86f9
|
Add warning for failures after rebooting to the documentation.
|
2021-03-24 17:32:08 -05:00 |
|
|
Grant Willcox
|
f01b434160
|
Land #14896, Fix apache_activemq_upload_jsp exploit module for Java 8
|
2021-03-24 10:22:03 -05:00 |
|
|
Grant Willcox
|
9d7e9990f4
|
Update documentation wording a bit to be more appropriate
|
2021-03-24 09:17:22 -05:00 |
|
|
Christophe De La Fuente
|
2dcd0fad04
|
Land #14860, Auxiliary/Exploit Scanner/Gather/RCE for Exchange ProxyLogon (CVE-2021-26855)
|
2021-03-23 13:10:15 +01:00 |
|
|
Vladimir Ivanov
|
d76224066f
|
Rename option URIPATH to TARGETURI
|
2021-03-23 13:33:39 +03:00 |
|
|
RAMELLA Sébastien
|
37b0552803
|
last code review before land
|
2021-03-22 23:20:40 +04:00 |
|
|
William Vu
|
d4d9001c84
|
Fix typos
|
2021-03-22 14:16:45 -05:00 |
|
|
Spencer McIntyre
|
8605fe4529
|
Use POST for the check method and write the module docs
|
2021-03-22 15:04:21 -04:00 |
|
|
Vladimir Ivanov
|
6e13a26fd3
|
Delete links to launchpad.support.sap.com in doc files
|
2021-03-22 11:03:53 +03:00 |
|
|
RAMELLA Sébastien
|
c543b44fc2
|
fix: CmdStagerFlavor, add: Powershell target, ...
|
2021-03-21 22:47:27 +04:00 |
|
|
Vladimir Ivanov
|
42726a70c0
|
client.rb - library for auxiliary and exploit modules
cve_2020_6207_solman_rce.rb - auxiliary module
cve_2020_6207_solman_rce.md - documentation for auxiliary module
cve_2020_6207_solman_rs.rb - exploit module
cve_2020_6207_solman_rs.md - documentation for exploit module
|
2021-03-21 16:51:21 +03:00 |
|
|
alanfoster
|
308a42e95b
|
Fix apache_activemq_upload_jsp exploit module for Java 8
|
2021-03-20 15:26:34 +00:00 |
|
|
RAMELLA Sébastien
|
f5c807590c
|
a last round of review + rubocop
|
2021-03-20 01:23:43 +04:00 |
|