bea42876ee
Land #13067 , PlaySMS template injection RCE
2020-04-03 10:22:35 -04:00
bd835e8f2d
Cleanup more status methods and move the module
2020-04-03 10:21:27 -04:00
859eda92bb
Land #12759 , Apache Solr Remote Code Execution via Velocity Template
...
Merge branch 'land-12759' into upstream-master
2020-04-02 11:23:33 -05:00
8209a4e6af
Clean up module doc
2020-03-30 10:50:43 -05:00
861b79bce7
Added new targets and made documentation consistent
2020-03-29 00:33:24 +08:00
a197b5a891
make changes as requested
2020-03-27 16:20:49 +07:00
bdfe3b3be1
Update documentation/modules/exploit/multi/misc/ibm_tm1_unauth_rce.md
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2020-03-27 16:14:56 +07:00
9b61a02d04
Update documentation/modules/exploit/multi/misc/ibm_tm1_unauth_rce.md
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2020-03-27 16:13:59 +07:00
ef86d9f74c
Update documentation/modules/exploit/multi/misc/ibm_tm1_unauth_rce.md
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2020-03-27 16:13:51 +07:00
b9d2b73e3a
Update ibm_tm1_unauth_rce.md
2020-03-27 15:23:04 +07:00
db9c718459
add link to advisory
2020-03-27 14:52:00 +07:00
ebf19051a4
add docs
2020-03-27 14:41:38 +07:00
fd8420cef7
fix install lines
2020-03-24 09:36:17 -04:00
e7da6e77a5
remove and check for instruction text
2020-03-24 09:15:04 -04:00
0b4c047411
doc cleanup
2020-03-24 08:47:21 -04:00
126f5ca05d
Add 'Horde CSV import arbitrary PHP code execution' (CVE-2020-8518)
2020-03-14 16:07:51 +01:00
0e163c69ab
Land #12975 , exploits RCE backdoor in PHPStudy
2020-03-10 11:56:26 +00:00
9840951f0d
Land #12574 , Chrome CVE-2019-5825 exploit
2020-03-05 13:44:40 -06:00
87b8182131
Land #12384 , Chrome CVE-2018-17463 exploit
2020-03-05 13:44:27 -06:00
eb90bee4a7
Land #12863 , add exploit for PHP-FPM Underflow RCE
2020-03-05 11:43:43 -05:00
9f55e4163f
add documentation
2020-03-04 21:31:14 +08:00
327917c015
add documentation
2020-02-29 15:07:49 +08:00
889f91241a
add documentation
2020-02-29 14:30:59 +08:00
adaa9e239a
Add phpstudy backdoor exploit module
2020-02-23 10:23:32 +08:00
ac482a0d31
Typo in documentation
2020-02-19 23:32:07 +08:00
828d974db5
Update code and documentation
...
- Add `OperationMaxRetries` option documentation
- Add default value to `TARGETURI` and update the documentation
- Remove `PosOffset` advanced option and hardcode the value
- Update `Description`
- Move URI encoding logic to `send_crafted_request`
- Refactor `send_crafted_request` to handle the HTTP parameter and final & (%26)
2020-02-17 18:25:10 +01:00
226f4b0a53
Line wrap to 80 columns and small fix
...
- Line wrap documentation to 80 columns
- Line wrap `Description` field to 80 columns
- Remove unnecessary unless statement
2020-02-17 13:06:32 +01:00
9193ace50b
Add documentation
2020-02-14 17:17:45 -06:00
7a0bf69eb0
Major refactor, and more complete testing with cmd/unix payloads
2020-02-07 19:34:18 +08:00
bd48588fd5
catch false positive spaces at eol from code indent
2020-01-28 14:28:18 -05:00
bc312420ca
module doc standardizations
2020-01-20 21:41:32 -05:00
ca59b06fd3
module doc standardizations
2020-01-20 21:26:59 -05:00
50881c899a
h1 to h2
2020-01-16 11:46:36 -05:00
f970ea7963
example output to scenarios
2020-01-16 11:41:12 -05:00
e4013846d3
more standardizations
2020-01-16 11:32:02 -05:00
947102e2fe
sample output to scenarios
2020-01-16 11:15:06 -05:00
a1978c76a6
fix up spaces on options header
2020-01-16 10:52:13 -05:00
4b0ab94043
module options to options
2020-01-16 10:49:22 -05:00
2fff1f66e9
vulnerable application h1 to h2
2020-01-16 10:44:35 -05:00
3a4209a092
verification to verification steps
2020-01-16 10:41:12 -05:00
c904b9d2f2
scenario to scenarios
2020-01-16 10:36:38 -05:00
fa73709b3e
documentation standardization
2020-01-14 21:02:53 -05:00
44489f0326
Using heredoc, streamlined check for PowerShell, improved docs.
2019-12-29 12:00:50 +08:00
046d8cbedc
REALLY added documentation.
...
Made module work with base64.
Cleaned up template as per @acammack-r7 's suggestions.
2019-12-26 23:35:34 +08:00
e1e668d7da
Land #12651 , add OpenMRS deserialization exploit
2019-12-16 11:31:24 -06:00
a4ed143af6
Land #12364 , add vBulletin widgetconfig RCE
2019-12-10 12:12:47 -06:00
3ddef6091c
update scenarios section
2019-12-04 12:19:58 -06:00
c7125b1b5f
remove options section
2019-12-03 12:06:44 -06:00
6f153a885a
add tested version
2019-12-02 08:42:45 -06:00
eb2817b51f
fix. typo into the documentation.
2019-11-22 20:10:29 +04:00
Spencer McIntyre