Commit Graph

626 Commits

Author SHA1 Message Date
Carter Brainerd (thecarterb) b51ecda9d6 Fix CUSTOMTEMPLATE option format 2018-02-02 14:27:09 -05:00
Carter Brainerd (thecarterb) a65604b09d Add introduction header to web_delivery 2018-02-02 14:19:25 -05:00
Carter Brainerd (thecarterb) 2d8a249a56 Add intro header to office_ms17_11882 2018-02-02 14:12:36 -05:00
Carter Brainerd (thecarterb) a7e9772e25 A few fixes for office_word_hta
- Add introduction header
- Fix `Vulnerable Application` header and make it plural (multiple apps)
- Remove unnecessary console line for example
2018-02-02 14:11:05 -05:00
Carter Brainerd (thecarterb) daedf2a089 Fix word choice in cve_2017_8464_lnk_rce
- Also remove an unnecessary example step
2018-02-02 14:06:03 -05:00
Carter Brainerd (thecarterb) 0739fab092 Clarify testing environments for hp_dataprotector 2018-02-02 14:03:01 -05:00
Carter Brainerd (thecarterb) acf7f7747d Fix double backslashes in panda_psevents 2018-02-02 13:32:55 -05:00
Carter Brainerd (thecarterb) 67682bd243 Make webdav.md look a little better 2018-02-02 13:31:30 -05:00
Carter Brainerd (thecarterb) d4c70a3beb Fix md header in bypassuac_fodhelper 2018-02-02 13:28:47 -05:00
Carter Brainerd (thecarterb) 3de576a0df Fix md header in vxsrchs_bof doc 2018-02-02 13:24:35 -05:00
Carter Brainerd (thecarterb) 9dde5ebf92 Update eternalblue docs
- Add a reference for OS protection rings
- Uncomment some windows versions
- Fix a word choice issue
2018-02-02 13:21:43 -05:00
William Vu c9473f8cbc Land #9473, new MS17-010 aux and exploit modules 2018-02-01 23:56:29 -06:00
h00die 7cb0a118c1 Land #9399 a linux priv esc against apport and abrt 2018-02-01 21:54:54 -05:00
Brendan Coles 3c21eb8111 Update documentation 2018-02-02 02:27:13 +00:00
Brendan Coles 0d80ca6f79 Change documentation extension from rb to md 2018-01-31 23:26:30 +00:00
bwatters-r7 8be2b1f59e Land # 9407, Add BMC Server Automation RSCD Agent RCE exploit module
Merge branch 'land-9407' into upstream-master
2018-01-31 13:35:29 -06:00
Jacob Robles d4a0372238 Land #9457, Dup Scout Enterprise v10.4.16 - Import Command Buffer Overflow 2018-01-29 11:40:54 -06:00
zerosum0x0 8627f6b834 added docs 2018-01-29 01:34:25 -07:00
Brendan Coles 23f4bf1583 Add documentation 2018-01-27 03:15:06 +00:00
Aaron Soto c390696ddf Land #9379, Oracle Weblogic RCE exploit and documentation 2018-01-25 21:47:18 -06:00
Daniel Teixeira c1ff0c1e00 Dup Scout XML documentation 2018-01-24 20:47:02 +00:00
Kevin Kirsche 7b01785347 Add documentation to pull request
Added credit to @asoto-r7 for the documentation
2018-01-24 14:36:16 -05:00
bwatters-r7 a27cfeaea9 Land #9416, Sync Breeze Enterprise 9.5.16 Import Command buffer overflow
Merge branch 'land-9416' into upstream-master
2018-01-23 16:35:51 -06:00
bwatters-r7 8eb6df41e3 Land #9205, Documentation for Kaltura <= 13.1.0 RCE (CVE-2017-14143)
Merge branch 'land-9205' into upstream-master
2018-01-23 12:45:59 -06:00
bwatters-r7 04806bc84a Updates to documentation per h00die 2018-01-23 12:44:39 -06:00
Brent Cook aae77fc1a4 Land #9349, GoAhead LD_PRELOAD CGI Module 2018-01-22 23:10:36 -06:00
Brent Cook 7ee77a27a6 Land #9389, Update commvault_cmd_exec module documentation 2018-01-18 11:05:51 -06:00
Daniel Teixeira 5fef8b43f6 Update and rename syncbreeze_xml.rb to syncbreeze_xml.md 2018-01-16 06:07:15 +00:00
Brady Sullivan 593813cdef Fix small grammar issues in ms08_067 and ms17_010
Also includes very small changes to improve punctuation consistency
within CONTRIBUTING.md
2018-01-15 19:32:44 -08:00
Daniel Teixeira ac724926db Sync Breeze Import Command BOF Doc 2018-01-15 20:45:34 +00:00
Nicky Bloor 333ee893d3 Tidied up platform detection, check method, and minor typos. 2018-01-14 18:28:40 +00:00
Nicky Bloor 6568d29b67 Add BMC Server Automation RSCD Agent RCE exploit module. 2018-01-14 01:12:55 +00:00
Wei Chen e6c4fb1dab Land #9269, Add a new target for Sync Breeze Enterprise GET BoF
Land #9269
2018-01-11 16:54:23 -06:00
Wei Chen f395e07fc6 Land #9269, add new target for Sync Breeze Enterprise GET BoF
Land #9269
2018-01-11 16:53:02 -06:00
Wei Chen 6510ee53bc Land #9204, Add exploit for Samsung SRN-1670D (CVE-2017-16524)
Land #9204
2018-01-10 20:15:29 -06:00
Wei Chen 18c179a091 Update module and add documentation
This updates the module to pass:

* msftidy
* Ruby style guidelines
* Proper usage of Metasploit API
* Mostly other cosmetic fixes

A documentation is also added.
2018-01-10 20:13:42 -06:00
Wei Chen 7e2c7837e5 Land #9325, Add CVE-2017-6090 phpCollab 2.5.1 file upload exploit module
Land #9325
2018-01-10 17:39:50 -06:00
Wei Chen b1f3f471f3 Update phpcollab_upload_exec code (also module documentation) 2018-01-10 17:38:52 -06:00
Wei Chen 8d77f35b16 Land #9373, Add LabF nfsAxe FTP Client 3.7 Stack Buffer Overflow
Land #9373
2018-01-09 22:40:50 -06:00
Wei Chen 25280e3319 Update labf_nfsaxe and module documentation 2018-01-09 22:39:40 -06:00
Wei Chen 777e383568 Land #9377, Add HPE iMC dbman RestoreDBase Unauthenticated RCE exploit
Land #9377
2018-01-09 13:56:53 -06:00
Wei Chen a0c9cdd73d Land #9376, Add HPE iMC dbman RestartDB Unauthenticated RCE exploit
Land #9376
2018-01-09 13:28:03 -06:00
Wei Chen b06db60a56 Fix typos 2018-01-09 11:20:02 -06:00
Wei Chen 7b6a8af387 Update commvault_cmd_exec module documentation 2018-01-08 15:42:01 -06:00
Wei Chen d138f1508c Land #9340, Add exploit for Commvault Remote Command Injection
Land #9340
2018-01-07 12:17:26 -06:00
Brendan Coles a1a594d1f8 Add documentation 2018-01-06 05:09:24 +00:00
Brendan Coles 9ec17bdd54 Add documentation 2018-01-06 05:08:33 +00:00
Daniel Teixeira 160f960f78 Add files via upload 2018-01-04 20:25:41 +00:00
h00die 65f444ddcc land #9362 exploit for pfsense graph injection 2018-01-04 14:35:52 -05:00
Brent Cook 520e890520 Land #8581, VMware Workstation ALSA Config File Local Privilege Escalation 2018-01-03 21:35:57 -06:00