Commit Graph

31240 Commits

Author SHA1 Message Date
Shelby Pace 183caff15c Land #15418, add modern events calendar rce 2021-07-26 09:45:05 -05:00
Shelby Pace 38ae82155e modify info, fix spacing 2021-07-26 09:43:34 -05:00
Shelby Pace 9e95eb7be1 Land #15408, add Wordpress sp doc file upload 2021-07-23 12:36:29 -05:00
Shelby Pace d207f994c0 modify doc description
randomize form data, formatting
2021-07-23 12:33:41 -05:00
cgranleese-r7 9e7859ed25 Reformats some modules so they can be run with new meterpreter_commands_dependencies.rb Rubocop rule 2021-07-23 14:40:19 +01:00
Hakyac 0f8e256d52 Update modules/exploits/multi/http/wp_plugin_sp_project_document_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-23 10:12:57 +02:00
Hakyac 13678f5140 Update modules/exploits/multi/http/wp_plugin_sp_project_document_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-23 10:12:51 +02:00
Hakyac 9cdddac5cd Update modules/exploits/multi/http/wp_plugin_sp_project_document_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-23 10:11:26 +02:00
Hakyac 877ac006f8 Update modules/exploits/multi/http/wp_plugin_sp_project_document_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-23 10:11:21 +02:00
Hakyac 73995ac8d1 Update modules/exploits/multi/http/wp_plugin_modern_events_calendar_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-23 10:09:44 +02:00
Hakyac 5e2776411d Update modules/exploits/multi/http/wp_plugin_modern_events_calendar_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-23 10:09:25 +02:00
Hakyac 8a3f5affe8 Update modules/exploits/multi/http/wp_plugin_modern_events_calendar_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-23 10:09:13 +02:00
Shelby Pace 7a39f4c4dd Land #15211, add apache tapestry gatherer 2021-07-22 11:58:03 -05:00
Shelby Pace a83bb187e4 add reliability trait 2021-07-22 10:52:16 -05:00
Shelby Pace 58891313c8 add notes 2021-07-22 10:46:37 -05:00
Shelby Pace 6203499684 fix rubocop offenses 2021-07-22 10:27:17 -05:00
Shelby Pace bc1f106bcb change method of retrieving key
add checks on responses, update docs
2021-07-21 17:56:41 -05:00
Yann Castel a3e5bd527b use of vars_get + delete payload after use 2021-07-21 09:59:05 +02:00
Hakyac 53214e8792 Update modules/exploits/multi/http/wp_plugin_modern_events_calendar_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-21 09:41:46 +02:00
Hakyac 09ca7751c0 Update modules/exploits/multi/http/wp_plugin_modern_events_calendar_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-21 09:41:38 +02:00
Hakyac 815a6d4d95 Update modules/exploits/multi/http/wp_plugin_modern_events_calendar_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-21 09:41:28 +02:00
Yann Castel c169c78f03 use of vars_get 2021-07-21 09:38:36 +02:00
Hakyac 7e3281dfcf Update modules/exploits/multi/http/wp_plugin_sp_project_document_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-21 09:08:30 +02:00
Hakyac 40220052da Update modules/exploits/multi/http/wp_plugin_sp_project_document_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-21 09:07:12 +02:00
William Vu af0092f290 Land #15400, Sage X3 modules 2021-07-20 20:36:48 -05:00
William Vu 0ba430c8c4 Fix a bunch of things
Mostly RuboCop and refactoring.
2021-07-20 20:07:08 -05:00
Shelby Pace 79d49a6857 Land #15402, add Wordpress Backup Guard rce 2021-07-20 15:53:57 -05:00
Shelby Pace f738383b98 rename docs, modify privileged to false
use vars_get in upload request
2021-07-20 15:31:38 -05:00
Yann Castel 4a9bef2e9f various suggestions 2021-07-20 19:10:39 +02:00
Yann Castel 010d3e5a4a various suggestions 2021-07-20 18:22:37 +02:00
William Vu 8b5071326e Merge remote-tracking branch 'upstream/master' into pr/15400 2021-07-20 11:11:45 -05:00
Grant Willcox 49bf54dcf8 Land #15449, Binom3 add CVE 2021-07-20 09:48:45 -05:00
guly ab3214dfc5 Binom3 add CVE
Binom3 add CVE
2021-07-20 14:23:05 +02:00
Hakyac 2bf1c1ac26 Update modules/exploits/multi/http/wp_plugin_backup_guard_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-20 09:28:01 +02:00
Hakyac 7c14882510 Update modules/exploits/multi/http/wp_plugin_backup_guard_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-20 09:27:40 +02:00
Hakyac 2c51c2b6e4 Update modules/exploits/multi/http/wp_plugin_backup_guard_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-07-20 09:27:09 +02:00
Hakyac ce9a00492c Update modules/exploits/multi/http/wp_plugin_modern_events_calendar_rce.rb
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com>
2021-07-20 09:11:58 +02:00
Hakyac 5bf1a7847e Update modules/exploits/multi/http/wp_plugin_sp_project_document_rce.rb
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
2021-07-20 09:09:23 +02:00
Hakyac f78c503f9f Update wp_plugin_sp_project_document_rce.rb 2021-07-20 09:04:12 +02:00
dwelch-r7 4141349106 Fix python3 compatibility with wmiexec module 2021-07-19 14:47:39 +01:00
Grant Willcox b27676ca0a Land #15409, Improved PrintNightmare Check and DCERPC Library Bug Fixes 2021-07-16 08:54:42 -05:00
Spencer McIntyre 3098e2fcdd Update the module notes regarding instability 2021-07-16 09:03:40 -04:00
William Vu a6b4d203e5 Fix build 2021-07-15 02:10:24 -05:00
William Vu aebdc0ddfc Update module credits
Clarified contributions.
2021-07-14 15:10:25 -05:00
Spencer McIntyre ed979992fd Remove a redundant print status statement 2021-07-13 10:14:16 -04:00
adfoster-r7 57dc806522 Land #15420, Load Net::SSH for eaton xpert backdoor module 2021-07-13 09:46:49 +01:00
William Vu 6a6c08c773 Fix edge case in method overloading 2021-07-12 20:29:56 -05:00
Alan Foster ad20954e0d Load Net::SSH for eaton xpert backdoor module 2021-07-12 22:11:20 +01:00
William Vu d29532d4c4 Add VMware vCenter Server CVE-2021-21985 exploit 2021-07-12 13:07:05 -05:00
Spencer McIntyre 32eab49428 Fix a typo in the module description 2021-07-12 12:20:37 -04:00