133b9e307a
Land #16563 , Zyxel Firewall Unauthenticated Command Injection (CVE-2022-30525)
2022-05-13 18:55:30 -05:00
39567281bf
Revised setup guidance
2022-05-13 13:41:05 -07:00
2eb31cf765
Add in edits from review
2022-05-13 15:32:12 -05:00
1fe04caadd
Land #16406 , Create get_bookmarks.rb
...
Merge branch 'land-16406' into upstream-master
2022-05-13 13:42:31 -05:00
c0c02e56ba
Land #16430 , Improve kerberos user enum module
2022-05-13 12:17:26 +01:00
934f193dc0
Land #16484 , Add vcenter_forge_saml_token aux module
...
Merge branch 'land-16484' into upstream-master
2022-05-12 17:36:20 -05:00
da133a34c8
Updated affected
2022-05-12 03:22:02 -07:00
617b4ae044
Initial commit of Zyxel unauth command injection (CVE=2022-30525)
2022-05-12 01:43:59 -07:00
6354d7a055
Redo explanation of exploit in documentation to appropriately account for various nuances. Also update exploit title and description accordingly.
2022-05-11 16:43:36 -05:00
8a6dd7152e
Added tested versions reference
2022-05-11 16:43:12 -05:00
77f60eb21e
Added module and documentation for f5 icontrol RCE (CVE-2022-1388)
2022-05-11 16:43:00 -05:00
1c934b87b4
Land #16169 , Add sploit for Cisco RV340 SSL VPN - CVE-2022-20699
2022-05-11 10:15:08 -05:00
68fdb103fe
Add in final touch ups to documentation to fix a typo or two for formatting. Also update exploit ranking since this exploit doesn't retrieve version information before exploiting and is not 100% reliable so Excellent ranking isn't appropriate
2022-05-11 09:39:47 -05:00
5a04f8253c
Land #16551 , Add docker documentation for tomcat mgr upload
2022-05-10 12:03:18 -05:00
6a7be290ff
Add in minor changes to improve overall formatting and presentation of documentation
2022-05-10 12:02:45 -05:00
ff410b23a0
Add documentation for tomcat mgr upload
2022-05-10 17:01:40 +01:00
92715c883f
Land #16423 , Add module for exploit CVE-2022-22965
...
Merge branch 'land-16423' into upstream-master
2022-05-10 08:44:06 -05:00
43f2b4dcf9
Quick update to the vulhub guidance
2022-05-10 08:42:02 -05:00
1f4ee19c05
Expose options for logging to a file in mettle
2022-05-06 14:36:55 +01:00
7646bf9e0a
Update the module docs
2022-05-05 11:26:37 -04:00
e2cefe0750
Land #16514 , add ZoneMinder exploit module
2022-05-04 17:37:08 -05:00
dd0b124e84
fix typo in docs, check some responses
2022-05-04 17:28:37 -05:00
6532365dc8
Deregister VHOST
2022-05-03 11:52:50 -05:00
8c0cd40a19
Fix VMware Workspace ONE Access CVE-2022-22954
2022-05-03 10:39:58 -05:00
a76600f4a9
Land #16462 , add support for armle/aarch64 architectures
2022-05-03 15:48:50 +01:00
0f5e31d593
Apply suggestions from code review
...
Update documentation common default options
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-05-03 15:43:38 +07:00
4ea72bb7a7
Add log IOC
2022-05-03 02:38:29 -05:00
184b1b1e76
Add module doc
2022-05-02 20:41:01 -05:00
c994f8e933
Land #16507 , Add WSO2 file upload RCE module
2022-04-29 09:58:55 -04:00
bb8c130740
Fix docs typo
2022-04-28 21:57:18 +07:00
eba436dd99
Add Zoneminder Language rce module docs
2022-04-28 21:01:00 +07:00
f8887dbf1c
Reflect changes in the console output
2022-04-28 00:22:44 +02:00
21f8494366
Land #16509 , Ensure HTML is escaped in markdown codeblocks
2022-04-27 15:18:50 -04:00
9f6950c6c8
Ensure HTML is escaped in markdown codeblocks
2022-04-27 19:51:05 +01:00
253cb8580a
Responded to comments added retry_until_true
2022-04-27 09:45:18 -07:00
266d3bb9ca
Apply suggestions from @bcoles code review
...
Co-authored-by: bcoles <bcoles@gmail.com >
2022-04-26 13:40:25 -07:00
ca0be9c145
Add WSO2 file upload RCE module
2022-04-26 12:29:12 -07:00
de453b8970
Update documentation/modules/exploit/linux/redis/redis_debian_sandbox_escape.md
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2022-04-26 14:42:57 -04:00
d20fd996bd
Fix spelling mistakes
2022-04-26 03:38:23 -07:00
71a4023c0d
Initial commit of Redis sandbox escape CVE-2022-0543
2022-04-26 03:32:11 -07:00
02d911e655
gdb_server_exec: Cleanup and add support for armle/aarch64 architectures
2022-04-25 19:25:06 +00:00
ab98aee3a4
Remove unrelated module files
2022-04-23 19:50:05 -04:00
3e07b8c99b
Refactor MKI vcenter_forge_saml_token.rb
...
Extensive refactoring to move away from directly manipulating datastore
options and use local variables instead.
The initial template generation method has been redesigned to use an
external file via Erubi::Engine which is much cleaner vs. jamming a
multiline string into the module.
Response HTML from vCenter is now parsed with Nokogiri HTML vs. pulling
it out with regex.
Registered options have been reworked, following suggestions and
feedback. The use of VHOST in particular eliminates the need to pass
RHOSTS to the template and makes the module behave more closely to "real"
vCenter (i.e., always uses FQDN for the destination).
Added advanced datastore options to control the token lifetime
NOT_BEFORE and NOT_AFTER skew, in seconds. This also uncovered a bug with
the way I was deriving Zulu time which skewed based on the local system
time zone offset from Zulu; this has been fixed.
Corrected a stupid typo in the validate_fqdn method (don't need to check
for capital letters if the test string is always downcase...)
validate_idp_options now uses File.binread and can process certs in keys
in DER or PEM instead of just PEM.
Code optimization, particularly around error handling; other minor
tweaks based on improved understanding of the Framework's capabilities.
Many style changes and modifications based on suggestions and feedback.
Documentation was updated to reflect reality.
2022-04-23 19:42:24 -04:00
140c3bfd50
Land #16432 Enumerate Windows AV module
...
Post module that will query WMI via shell
or meterpreter session for deployed AV products
from the root\SecurityCenter2 namespace
2022-04-21 13:07:56 -07:00
7be74eca8b
Updated spacing
2022-04-21 11:52:27 -07:00
f011e923e2
Fixed docs
2022-04-21 11:45:26 -07:00
d8542ad2b5
Changed vprint to print update docs
2022-04-21 11:35:33 -07:00
5411b6b909
Added docs
2022-04-21 09:24:13 -07:00
e2c6c36b2b
Land #1642 , Add module for cve-2022-0995
2022-04-21 09:12:47 -05:00
2e7ae40fcb
Revise vcenter_secrets_dump
2022-04-21 09:51:51 -04:00
Grant Willcox