 William Vu
|
a0c6035380
|
Prefer initial slash in normalize_uri
I missed the indirect call in check. This decides on a style.
If a URI part contains a slash, we begin with a slash.
|
2019-05-30 00:08:17 -05:00 |
|
|
Jacob Robles
|
55dcdace03
|
Land #11846, OATS Console War Deployment
|
2019-05-24 11:27:36 -05:00 |
|
|
Wei Chen
|
fcd360891f
|
Check #attributes for nil, and make sure target is oats console
|
2019-05-24 10:06:47 -05:00 |
|
|
William Vu
|
380c639ef3
|
Land #11794, postgres_payload Postgres 8.2+ update
|
2019-05-23 18:23:58 -05:00 |
|
|
Brent Cook
|
0559fda9db
|
Land #11873, allow calling methods across related modules
|
2019-05-23 13:56:27 -05:00 |
|
|
Jacob Robles
|
1fe981b8e2
|
Land #11843, Update MSB references
|
2019-05-23 08:07:46 -05:00 |
|
|
Jacob Robles
|
db353a7ba1
|
Fix MS reference number
|
2019-05-23 07:03:23 -05:00 |
|
|
Jacob Robles
|
a0e90c0848
|
Remove references to doc.microsoft.com bulletin
MSB references point to this location
|
2019-05-23 07:01:21 -05:00 |
|
|
William Vu
|
e836bdceca
|
Force check only in ETERNALBLUE
|
2019-05-22 20:07:56 -05:00 |
|
|
William Vu
|
5064f2ce01
|
Add ForceExploit
|
2019-05-22 17:50:31 -05:00 |
|
|
William Vu
|
78fb72fea3
|
Update ms17_010_psexec
|
2019-05-22 17:31:24 -05:00 |
|
|
William Vu
|
c7ba2ade65
|
Convert to mixin
|
2019-05-22 17:27:11 -05:00 |
|
|
William Vu
|
d0a2d9533f
|
Use CheckCode
|
2019-05-22 16:51:33 -05:00 |
|
|
William Vu
|
db299b71ce
|
Add datastore option
|
2019-05-22 16:45:01 -05:00 |
|
|
William Vu
|
fdec7613c0
|
Update comment
|
2019-05-22 16:30:10 -05:00 |
|
|
William Vu
|
df425d33b5
|
Update constant name
|
2019-05-22 16:29:27 -05:00 |
|
|
William Vu
|
3a8baf0dec
|
Add comment
|
2019-05-22 16:28:04 -05:00 |
|
|
William Vu
|
ac8b1fdb7e
|
Add some more error checking
|
2019-05-22 16:26:27 -05:00 |
|
|
William Vu
|
b99de521c4
|
Add more comments
|
2019-05-22 16:14:02 -05:00 |
|
|
William Vu
|
a994f728dd
|
Update comment
|
2019-05-22 16:10:32 -05:00 |
|
|
William Vu
|
51fc705cb3
|
Add ForceExploit
|
2019-05-22 16:06:04 -05:00 |
|
|
William Vu
|
486caa7e69
|
Add some error checking
|
2019-05-22 15:58:26 -05:00 |
|
|
William Vu
|
0f0faee680
|
Add check method to ms17_010_eternalblue
|
2019-05-22 15:42:57 -05:00 |
|
|
Wei Chen
|
388a391b9a
|
Update oats_weblogic_console and its doc
|
2019-05-22 15:14:17 -05:00 |
|
|
William Vu
|
0b4cc5b547
|
Update go_go_gadget2
|
2019-05-22 15:03:44 -05:00 |
|
|
William Vu
|
6d004862e4
|
Update go_go_gadget1
|
2019-05-22 15:03:44 -05:00 |
|
|
William Vu
|
be89a4d9c5
|
Update exploit method
|
2019-05-22 15:03:05 -05:00 |
|
|
William Vu
|
f70b3d13a0
|
Update metadata
|
2019-05-22 15:03:05 -05:00 |
|
|
William Vu
|
f14ab6e2db
|
Land #11868, iis_webdav_upload_asp disclosure date
|
2019-05-22 14:28:29 -05:00 |
|
|
William Vu
|
73aabd1adc
|
Land #11861, WebLogic AsyncResponseService updates
|
2019-05-22 14:23:45 -05:00 |
|
|
Tod Beardsley
|
5523dce897
|
Fix disclosure date for WebDAV module
|
2019-05-22 09:05:56 -04:00 |
|
|
Shelby Pace
|
0d6008862b
|
Land #11805, add bsd targets to sshexec
|
2019-05-20 14:16:10 -05:00 |
|
|
Wei Chen
|
6847fcc199
|
Update CVE reference and datastore options for WebLogic exploit
|
2019-05-20 13:10:06 -05:00 |
|
|
bwatters-r7
|
966582a10c
|
Land #11833, moodle_cmd_exec nil check
Merge branch 'land-11833' into upstream-master
|
2019-05-20 13:08:11 -05:00 |
|
|
Brendan Coles
|
b76507f1f3
|
Add FreeBSD rtld execl() Privilege Escalation module
|
2019-05-20 13:03:20 -05:00 |
|
|
Wei Chen
|
cb1333de45
|
Land #11818, Add CVE-2019-8565 OSX Feedback Assistant local root exploit
|
2019-05-20 12:51:42 -05:00 |
|
|
Wei Chen
|
efa00cd2d0
|
Update module description
|
2019-05-20 12:43:54 -05:00 |
|
|
William Vu
|
581b20794c
|
Land #11859, struts2_rest_xstream style fix
|
2019-05-20 12:39:48 -05:00 |
|
|
Wei Chen
|
40bc0770f3
|
Update title
|
2019-05-20 12:37:46 -05:00 |
|
|
Wei Chen
|
eaaf1dd6c0
|
Update session types and platform metadata
|
2019-05-20 12:36:43 -05:00 |
|
|
William Vu
|
0328814241
|
Indent ternary statement in struts2_rest_xstream
|
2019-05-20 12:35:52 -05:00 |
|
|
bwatters-r7
|
e1f898fe52
|
Land #11834, Fix ams_hndlrsvc
Merge branch 'land-11834' into upstream-master
|
2019-05-20 12:29:45 -05:00 |
|
|
Wei Chen
|
6cd943e0ce
|
Sometimes attributes could be nil if hitting an unexpected page
|
2019-05-20 10:48:29 -05:00 |
|
|
Wei Chen
|
5a46fdf535
|
Find frsc value from hidden input instead of using rkelly (js)
|
2019-05-18 19:25:44 -05:00 |
|
|
Wei Chen
|
592b8302ab
|
Make sure to calls super for setup, also update doc for output
|
2019-05-18 18:08:25 -05:00 |
|
|
Wei Chen
|
c2567f2ee3
|
Fix bug on cleanup ready status & more verbose
|
2019-05-18 17:50:29 -05:00 |
|
|
Wei Chen
|
ad08c4e56b
|
Land #11828, Add CVE-2017-18357: Shopware Object Instantiation
|
2019-05-17 18:22:48 -05:00 |
|
|
Wei Chen
|
9b46e7a347
|
Normalize PHP payload path
|
2019-05-17 18:20:59 -05:00 |
|
|
Wei Chen
|
40d4b3dfd3
|
Add doc and update the module title
|
2019-05-16 16:31:25 -05:00 |
|
|
Wei Chen
|
39b8dce342
|
Update the description
|
2019-05-16 16:25:23 -05:00 |
|