 Matthew Dunn
|
90e07ef5ed
|
Switch to match over scan and add troubleshooting steps
|
2023-02-07 14:18:37 -06:00 |
|
|
Matthew Dunn
|
1cb06b11ac
|
Adjust exploit and docs to support versions 5.5.6-5.7.5
|
2023-02-07 14:18:09 -06:00 |
|
|
Matthew Dunn
|
87176f9d7f
|
Address Review Comments and add CVE-2021-25297 coverage
|
2023-02-07 14:18:06 -06:00 |
|
|
Matthew Dunn
|
b042e71b2a
|
Make Module work for both target url parameters
|
2023-02-07 14:18:04 -06:00 |
|
|
Matthew Dunn
|
b606d1ff6b
|
Add Documentation for Module
Fix CVE format
Add Documentation
|
2023-02-07 14:18:04 -06:00 |
|
|
bwatters
|
53c67653f5
|
Land #17527, ManageEngine ServiceDesk Plus RCE (CVE-2022-47966)
Merge branch 'land-17527' into upstream-master
|
2023-02-06 17:37:31 -06:00 |
|
|
bwatters
|
8b116a7dcd
|
Minor punctuation change
|
2023-02-06 16:32:39 -06:00 |
|
|
h00die
|
a5a7d5dd10
|
correct cleanup and stabilization
|
2023-02-05 08:15:38 -05:00 |
|
|
h00die
|
561b42f105
|
use exploit retry function
|
2023-02-04 18:17:42 -05:00 |
|
|
h00die
|
6aa6f5176b
|
touch up verbiage and stuff
|
2023-02-04 18:17:42 -05:00 |
|
|
h00die
|
2b09af78e1
|
tomcat 8 priv esc on ubuntu
|
2023-02-04 18:17:41 -05:00 |
|
|
cgranleese-r7
|
80dbbca020
|
Land #17371, Lenovo Diagnostics Driver Privilege Escalation (CVE-2022-3699)
|
2023-02-03 13:43:04 +00:00 |
|
|
Jack Heysel
|
6ab7e177f4
|
Land #17392, add F5 Big-IP priv esc module
Add a privilege escalation module for F5 that uses
the unsecured MCP socket to create a new root account
|
2023-02-02 15:10:33 -05:00 |
|
|
Jack Heysel
|
f4ad778bd0
|
Added missing session types
|
2023-02-02 13:29:43 -05:00 |
|
|
Jack Heysel
|
af2ef53462
|
Land #17415, macOS dirty cow priv esc
|
2023-02-02 12:15:19 -05:00 |
|
|
Jack Heysel
|
4de5e44bda
|
Documentation
|
2023-02-02 10:38:26 -05:00 |
|
|
adfoster-r7
|
6870efc34a
|
Land #17426, Update all references to old Wiki to point to new docs site
|
2023-02-01 23:49:20 +00:00 |
|
|
Jack Heysel
|
c90a6f9068
|
Land #17406, veeam_credential_dump post module
Veeam Backup & Recovery and Veeam ONE Monitor credential
capture post module for versions 9.x and 11.x.
|
2023-02-01 17:29:05 -05:00 |
|
|
Ron Bowes
|
cf172d22c8
|
Get rid of #String.hash in favour of UnixCrypt
|
2023-02-01 11:02:04 -08:00 |
|
|
Ron Bowes
|
1094221468
|
Merge branch 'rapid7:master' into f5-createuser-privesc
|
2023-02-01 10:20:43 -08:00 |
|
|
Ron Bowes
|
638a1c519d
|
Update documentation/modules/exploit/linux/local/f5_create_user.md
Better demo exploit
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2023-02-01 10:14:25 -08:00 |
|
|
h00die
|
5a374533af
|
cve-2022-1043
|
2023-01-31 16:02:25 -05:00 |
|
|
h00die
|
8d58eb6279
|
cve-2022-1043
|
2023-01-31 16:02:25 -05:00 |
|
|
Jack Heysel
|
022760d24a
|
Land #17300, linux LPE cve-2022-22942 module
This PR adds a linux priv esc against VMWare virtual machines
with kernel 4.14-rc1 - 5.17-rc1 due to a VMWare driver bug.
|
2023-01-31 14:07:55 -05:00 |
|
|
adfoster-r7
|
bbf17c167c
|
Land #17511, add exploit for CVE-2022-44877 command injection in CentOS Control Web Panel
|
2023-01-31 14:05:19 +00:00 |
|
|
adfoster-r7
|
433099e539
|
Land #17563, modules/exploits/multi/local: Resolve Rubocop and msftidy_docs violations
|
2023-01-30 22:16:41 +00:00 |
|
|
Spencer McIntyre
|
902eaa2562
|
Add new queries and attributes for ldap_query
|
2023-01-30 16:24:23 -05:00 |
|
|
Christophe De La Fuente
|
a5ba1245c2
|
Fix CVE
|
2023-01-30 12:15:14 +01:00 |
|
|
adfoster-r7
|
c68ab9b77f
|
Add Metasploit prompt color highlighting to docs
|
2023-01-28 22:43:33 +00:00 |
|
|
bcoles
|
e11aaa8027
|
modules/exploits/multi/local: Resolve Rubocop and msftidy_docs violations
|
2023-01-28 15:02:24 +11:00 |
|
|
Grant Willcox
|
6043d0ffba
|
Update all links from Wiki site to new docs site.
|
2023-01-27 09:58:53 -06:00 |
|
|
adfoster-r7
|
672fb9ce9f
|
Land #17460, add support for feature kerberos authentication
|
2023-01-26 17:47:27 +00:00 |
|
|
adfoster-r7
|
2d30909a2f
|
Change option name namespacing convention
|
2023-01-26 16:17:50 +00:00 |
|
|
Christophe De La Fuente
|
2be22752be
|
Add Linuc specifics and documentation
|
2023-01-26 16:16:00 +01:00 |
|
|
Spencer McIntyre
|
f81195d0cc
|
Fix a typo
|
2023-01-25 13:45:18 -05:00 |
|
|
dwelch-r7
|
4f574d141a
|
Land #17533, Combine pkinit_login with get_ticket
|
2023-01-25 15:43:12 +00:00 |
|
|
Spencer McIntyre
|
c7ba117fed
|
Land #17534, Update kerberos cipher negotiattion
Update kerberos to negotiate rc4 if aes256 is disabled
|
2023-01-25 10:19:40 -05:00 |
|
|
Spencer McIntyre
|
dbe9ee3a77
|
Update documentation
|
2023-01-25 08:39:52 -05:00 |
|
|
Spencer McIntyre
|
a5e2c5b3b7
|
Unify pkinit_login with get_ticket
|
2023-01-25 08:36:26 -05:00 |
|
|
adfoster-r7
|
4c50456b6a
|
Update docs to support links with anchors
|
2023-01-25 12:16:15 +00:00 |
|
|
adfoster-r7
|
d18beb486d
|
Update kerberos to negotiate rc4 if aes256 is disabled
|
2023-01-25 00:27:00 +00:00 |
|
|
space-r7
|
153af9fb68
|
Land #17407, add Cacti unauth command injection
|
2023-01-23 13:06:46 -06:00 |
|
|
Spencer McIntyre
|
6fe0933c1e
|
Add exploit for CVE-2022-44877
|
2023-01-20 09:04:24 -05:00 |
|
|
adfoster-r7
|
4c17b93ca8
|
Update get ticket module to use aes_key and username convention
|
2023-01-20 10:47:35 +00:00 |
|
|
Jack Heysel
|
4da94325f3
|
Rubocop
|
2023-01-19 13:52:58 -05:00 |
|
|
Christophe De La Fuente
|
1e94adc3ab
|
Land #17479, Wordpress paid membership pro unauthenticated sqli (CVE-2023-23488)
|
2023-01-19 15:36:00 +01:00 |
|
|
Jack Heysel
|
63d9445911
|
Fix for Win Server 2022 and 2019
|
2023-01-19 00:52:38 -05:00 |
|
|
Grant Willcox
|
82fe7120d4
|
Update ADCS to be AD CS so we have appropriate spelling
|
2023-01-18 17:07:48 -06:00 |
|
|
Spencer McIntyre
|
ebfcfd4cb9
|
Land #17066, Add module for Certifried
Add exploit module for Certifried exploit
|
2023-01-18 14:51:03 -05:00 |
|
|
npm-cesium137-io
|
8ed4f59c60
|
veeam_credential_dump refinement
Fixed stupid typo in markdown.
Fixed a bug in the export code that prevented the disposition column
from being exported.
|
2023-01-18 14:27:28 -05:00 |
|