1e69086d24
Land #18365 , TOTOLINK X5000R Wireless GigaBit Router Unauthenticed RCE [CVE-2023-30013]
2023-09-21 11:27:19 +02:00
6e11f4353b
Updates addressing cdelafuente-r7 comments
2023-09-20 22:14:48 +00:00
525c957af2
Land #18333 , Lexmark Device Embedded Web Server RCE (CVE-2023-26068)
2023-09-19 10:32:59 +02:00
f9cdfef304
Move module and documentation from multi/http to linux/http
...
* Update documentation scenarios for Docker on Debian 10 and Kali Linux 6.4
* Slightly modify the documentation scenario for Docker on Windows 10
2023-09-17 22:42:26 +08:00
46832abd49
Land #18358 , Add a Thrift RPC client
...
This PR adds a Thrift RPC client and updates
two modules to make use of the new addition.
2023-09-14 19:01:13 -04:00
21cab0eccd
updated documentation
2023-09-14 18:38:34 +00:00
784f3118f0
third release module and documentation
2023-09-14 17:59:59 +00:00
e82bff37e1
Land #18330 , Ivanti Sentry MICSLogService Auth Bypass resulting in RCE (CVE-2023-38035)
2023-09-13 10:15:59 +01:00
b83a49e573
Thanks to Spencer improved execute_command method
2023-09-12 15:14:10 -04:00
fbf95ecd92
Add and use a Thrift client object
2023-09-11 14:37:38 -04:00
f1aea836f3
Land #18273 , Add VMware vRealize Log Insight RCE
...
Add VMware vRealize Log Insight unauthenticated RCE exploit
2023-09-08 17:17:23 -04:00
21dde19511
Make some final tweaks
...
Change strings to reference `VMware` using the proper case. Don't
include CmdStager (because it's unnecessary). Set PrependFork to fix
shell payloads. Move CamelCase options to advanced.
2023-09-08 16:55:42 -04:00
57f3b8a352
Land #18350 , Add opentsdb_key_cmd_injection exploit module and docs
2023-09-08 16:50:46 +01:00
18103b032d
Add docs for opentsdb_key_cmd_injection
2023-09-08 16:08:18 +01:00
7302394ffa
Land #18316 , Kibana Timelion Prototype Pollution RCE (CVE-2019-7609)
2023-09-08 11:50:47 +01:00
2cda3fab50
Update options
2023-09-07 19:50:10 +02:00
15908b9721
Merge branch 'ivanti-sentry-misc-log-service' of github.com:jheysel-r7/metasploit-framework into ivanti-sentry-misc-log-service
2023-09-07 12:40:26 -04:00
fd6a2fa64a
Updated docs
2023-09-07 12:19:11 -04:00
7944df2b87
Apply suggestions from code review
...
Co-authored-by: cgranleese-r7 <69522014+cgranleese-r7@users.noreply.github.com >
2023-09-07 11:46:24 -04:00
482fdefb2c
Land #18313 , SolarView Compact unauth RCE module
...
This PR adds a SolarView Compact unauth RCE module.
2023-09-05 17:49:28 -04:00
03ccb3cce0
Apply grammatical suggestions from code review
2023-09-05 17:06:01 -04:00
7b8debd58f
Tidy up, last minute rubocop
2023-08-31 02:17:35 -04:00
9779b1eeae
Lexmark Device Embedded Web Server RCE (CVE-2023-26068)
2023-08-30 20:30:14 -04:00
8217745a85
Land #18257 , Apache nifi h2 rce (CVE-2023-34468)
2023-08-30 13:37:37 +02:00
fe8cb3398f
Another docs update
2023-08-29 17:33:51 -04:00
47f621106c
Updated docs
2023-08-29 17:11:33 -04:00
a3a7454f74
Ivanti Sentry MICSLogService Auth Bypass resulting in RCE (CVE-2023-38035)
2023-08-29 15:24:04 -04:00
77a1bbef79
Second release module and documentation
2023-08-28 07:49:40 +00:00
eaeb2024d3
Merge branch 'master' into vmware_vrli_rce
...
Merge for ThriftMessageType
2023-08-26 22:42:25 +02:00
5382eb22d1
kibana exploit
2023-08-24 16:08:08 -04:00
a037d16b66
Land #18233 , Chamilo unauthenticed RCE [CVE-2023-34960]
2023-08-24 11:49:40 +02:00
f64b67968f
Final minor updates
2023-08-23 11:38:07 +00:00
1db284dcaa
Apply suggestions from code review
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2023-08-22 18:46:25 +02:00
900e418796
Land #18226 , H2 Web Interface RCE
...
This PR adds a module to exploit an RCE feature in
the H2 databases Web Interface.
2023-08-15 16:23:09 -04:00
7b024f21bd
apache nifi h2 rce
2023-08-08 17:44:35 -04:00
9516592eb6
metabase setup token rce
2023-08-08 17:16:56 -04:00
ec5317a789
h2 doc addition
2023-08-08 17:15:22 -04:00
97daf47269
h2 web interface shell
2023-08-08 17:15:22 -04:00
d1f9f540c6
Add VMware vRealize Log Insight RCE exploit
2023-08-08 20:32:38 +02:00
19ef0cc4f9
Added documentation and fixed a typo in the module description
2023-07-28 21:30:24 +00:00
40ef9d496a
add docs for wd_mycloud_unauthenticated_cmd_injection
2023-07-28 10:16:50 +03:00
c7f8ce5acd
Land #18199 , VMWare vRealize Network Insight pre-authenticated RCE CVE-2023-20887
2023-07-25 17:45:30 +02:00
586971c1fd
Fix incomplete copy pasta in docs
2023-07-21 14:38:07 -04:00
ee26e7f926
Rubocop fixes
2023-07-20 16:40:28 -04:00
421b06119f
Update docs
2023-07-20 14:55:27 -04:00
d03157fcc1
Installation instructions
2023-07-19 14:23:17 -04:00
530934f78a
review comments
2023-07-19 11:42:47 -04:00
7af22bfd41
Land #18077 , add Symmetricom unauth cmd injection
2023-06-13 17:07:16 -05:00
0d85c9e380
add module documentation
2023-06-13 13:14:51 -05:00
4479d94658
Updates based on review comments from space-r7 and jvoisin
2023-06-12 19:28:08 +00:00
Christophe De La Fuente