Commit Graph

26497 Commits

Author SHA1 Message Date
William Vu 622e67d20a Land #11900, normalize_uri style fix 2019-05-30 00:16:16 -05:00
William Vu a0c6035380 Prefer initial slash in normalize_uri
I missed the indirect call in check. This decides on a style.

If a URI part contains a slash, we begin with a slash.
2019-05-30 00:08:17 -05:00
Brent Cook 810d5e356f Land #11865, expand utility for allegro_rompager_auth_bypass 2019-05-29 23:40:37 -05:00
Jeffrey Martin 1833c97c8c more require for pdf-reader
In ruby 2,5+ on windows the ttfunk dependency loading causes ruby to crash so
only load this only when specifically required.
2019-05-29 22:36:50 -05:00
William Vu 6580f14c3a Once more, with feeling 2019-05-29 12:19:52 -05:00
William Vu 78fca9f91a Suggest CASTV2 is unsupported 2019-05-29 11:50:53 -05:00
William Vu 9ba1ac075a Add word 2019-05-29 11:46:45 -05:00
William Vu ba0ce74a35 Don't downcase anymore 2019-05-29 11:45:52 -05:00
William Vu 6aac15b539 Add note about CASTV2 protocol 2019-05-29 11:39:19 -05:00
William Vu 472f2c0d0b Deprecate DIAL protocol in chromecast_youtube 2019-05-29 11:31:14 -05:00
Jacob Robles ff6350183e Land #11882, oracle_login verbose message 2019-05-28 11:35:08 -05:00
bwatters-r7 efaacbeb2a Land #11797, Added to code to remove payload once run.
Merge branch 'land-11797' into upstream-master
2019-05-28 11:12:00 -05:00
苇子 8af7ed9526 Update shell_bind_tcp.rb
fix a mistake in payloads/singles/linux/armle/shell_bind_tcp.rb
2019-05-25 17:51:30 +08:00
William Vu 54eb73f8b8 Address @egypt's rdp_scanner review 2019-05-24 17:31:22 -05:00
Clément Notin 0c38780692 fix msftidy 2019-05-24 23:56:27 +02:00
asoto-r7 11b3feeaff Land #11869, auxiliary/scanner/rdp/cve_2019_0708_bluekeep 2019-05-24 16:01:45 -05:00
Clément Notin fe0cb19333 oracle_login: add verbose print error when login fails 2019-05-24 20:02:01 +02:00
zerosum0x0 82debcbada remove useless debug print 2019-05-24 11:23:25 -06:00
William Vu e3be9d2871 Restore syntactic sugar 2019-05-24 11:41:19 -05:00
Jacob Robles 55dcdace03 Land #11846, OATS Console War Deployment 2019-05-24 11:27:36 -05:00
William Vu d158cd131c Add metadata and style fixes 2019-05-24 11:25:58 -05:00
Wei Chen fcd360891f Check #attributes for nil, and make sure target is oats console 2019-05-24 10:06:47 -05:00
Jacob Robles 527658dfbc Land #11822, Add CVE-2019-2557 OATS Directory Traversal 2019-05-24 06:40:25 -05:00
William Vu 9d0cf0661c Land #11857, cmd/unix/reverse_bash_udp payload 2019-05-24 02:19:44 -05:00
bcoles 2d6847ab5e Add alternative cmd payload 2019-05-24 16:33:44 +10:00
William Vu eb006fd2b3 Send to the socket to initiate the session 2019-05-24 00:01:06 -05:00
William Vu 380c639ef3 Land #11794, postgres_payload Postgres 8.2+ update 2019-05-23 18:23:58 -05:00
zerosum0x0 8067893d16 added FIXME for other info leaks 2019-05-23 13:57:49 -06:00
zerosum0x0 e91301f2b7 remove user0 from cookie 2019-05-23 13:49:23 -06:00
William Vu 3f6530481d Add service to MS17-010 scanner 2019-05-23 14:37:12 -05:00
Brent Cook 0559fda9db Land #11873, allow calling methods across related modules 2019-05-23 13:56:27 -05:00
zerosum0x0 b511ff05fa change exception to an existing type 2019-05-23 12:42:40 -06:00
zerosum0x0 92cef57f04 remove hex_to_bin 2019-05-23 12:39:21 -06:00
Jacob Robles c36a72875c Fix end line 2019-05-23 12:35:45 -05:00
Jacob Robles 1fe981b8e2 Land #11843, Update MSB references 2019-05-23 08:07:46 -05:00
bwatters-r7 1371c360e2 Land #11863, Bump mettle 0.5.13
Merge branch 'land-11863' into upstream-master
2019-05-23 07:56:10 -05:00
Jacob Robles db353a7ba1 Fix MS reference number 2019-05-23 07:03:23 -05:00
Jacob Robles a0e90c0848 Remove references to doc.microsoft.com bulletin
MSB references point to this location
2019-05-23 07:01:21 -05:00
Jacob Robles 0a2371a4b8 Land #11864, Add RCE vector to Jenkins ACL bypass 2019-05-23 06:09:56 -05:00
Jan Gocník e62cb4cc44 Bluekeep: RSA check 2019-05-23 10:57:22 +02:00
zerosum0x0 3ec0d7966f msftidy yelled at me 2019-05-23 00:05:02 -06:00
zerosum0x0 6745c70878 return status 2019-05-22 23:36:36 -06:00
zerosum0x0 2863120c9f change exception nesting and check messages 2019-05-22 22:58:25 -06:00
William Vu e836bdceca Force check only in ETERNALBLUE 2019-05-22 20:07:56 -05:00
William Vu 49c91c5171 Land #11860, pipe_auditor backslash normalization 2019-05-22 19:50:56 -05:00
William Vu 5064f2ce01 Add ForceExploit 2019-05-22 17:50:31 -05:00
William Vu 78fb72fea3 Update ms17_010_psexec 2019-05-22 17:31:24 -05:00
William Vu c7ba2ade65 Convert to mixin 2019-05-22 17:27:11 -05:00
William Vu d0a2d9533f Use CheckCode 2019-05-22 16:51:33 -05:00
William Vu db299b71ce Add datastore option 2019-05-22 16:45:01 -05:00