beb53254c7
Land #13122 , Add Exploit Module For CVE-2020-0646 (SharePoint Workflows XOML RCE)
...
Merge branch 'land-13122' into upstream-master
2020-03-25 11:24:15 -05:00
54edd201e4
Cleanup cmdstager options
2020-03-24 17:14:47 -04:00
a69f3eb946
Use the correct its instead of it's
2020-03-24 16:44:18 -04:00
d32640d179
Land #13133 clean up module documentation
...
Land #13133 clean up module documentation
2020-03-24 12:29:27 -05:00
a0cd00dac7
Cleanup module doc and comments for CVE-2020-0646
2020-03-24 10:15:58 -04:00
0b4c047411
doc cleanup
2020-03-24 08:47:21 -04:00
0832604131
Finish up the CVE-2020-0646 SharePoint RCE
2020-03-23 18:14:28 -04:00
005601f76e
Changing from Remote to Local
...
Using https://github.com/rapid7/metasploit-framework/issues/13116 as the reference
2020-03-23 20:40:25 +03:00
fd8ceb0db2
Land #13082 , add Horde Groupware Webmail RCE
2020-03-23 07:32:53 -05:00
475c24361d
randomize file name
2020-03-23 07:28:04 -05:00
c6eebe4ca3
replace equality with include?
2020-03-20 21:19:29 -05:00
6c24ed4c96
Initial SharePoint WorkFlows XOML RCE module
2020-03-20 17:57:54 -04:00
5b2f744cd8
Land #13070 , fix Cisco DCNM directory search regex
2020-03-19 13:17:27 -04:00
40d6dd14c4
Remove the check method
2020-03-18 20:29:49 +01:00
19e9848592
Remove trailing spaces
2020-03-17 19:06:57 +01:00
bbb152a6d8
Update modules/exploits/multi/http/horde_csv_rce.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2020-03-17 19:02:34 +01:00
eccee07e8b
Update modules/exploits/multi/http/horde_csv_rce.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2020-03-17 19:02:07 +01:00
a60652898f
Update modules/exploits/multi/http/horde_csv_rce.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2020-03-17 19:01:03 +01:00
a4ff847170
Update modules/exploits/multi/http/horde_csv_rce.rb
...
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2020-03-17 18:57:06 +01:00
922f1ec708
Land #12901 , add Centreon poller rce
2020-03-17 12:16:29 -05:00
2717683825
change message
2020-03-17 12:15:06 -05:00
98f4642c2d
remove comments / check
2020-03-17 10:33:12 -05:00
5d9d3926e4
Land #13066 , add rConfig 3.9 RCE module
2020-03-16 11:18:59 +00:00
0efe53d869
fix somes code review comments.
2020-03-15 13:30:23 +04:00
126f5ca05d
Add 'Horde CSV import arbitrary PHP code execution' (CVE-2020-8518)
2020-03-14 16:07:51 +01:00
ddefafab78
Revert "Patch serialVersionUID in the library"
...
This reverts commit eaf8554e69
2020-03-13 17:36:40 -05:00
2a5c43302b
Land #13071 , add ManageEngine Desktop Central RCE
2020-03-13 15:20:57 -04:00
02e2072a87
Update module traits after joint testing
2020-03-13 14:01:54 -05:00
eaf8554e69
Patch serialVersionUID in the library
2020-03-13 13:17:26 -05:00
c11be38e1c
Default to certutil CmdStager
2020-03-13 12:38:07 -05:00
03ff32210e
Fix CmdStager target
2020-03-13 12:26:45 -05:00
0806e9ef42
Add CmdStager target back in so we can debug it
2020-03-13 11:17:37 -05:00
4f6720f962
Add TARGETURI back in
2020-03-13 11:05:14 -05:00
c21b90ea61
Land #13063 , Add PSH-AmsiBypassURI option to allow persistent web_delivery
...
Merge branch 'land-13063' into upstream-master
2020-03-13 09:52:25 -05:00
b1225d4d72
Land #13062 , Remove preceeding whitespace from module name
2020-03-13 13:08:50 +00:00
ff2421163b
Fix Travis-CI errors
2020-03-13 10:42:40 +01:00
5bbabd6f2a
Add tips to description.
2020-03-13 10:03:27 +01:00
7874308fae
Last typo fixes. No priv required on webapp.
2020-03-13 09:18:50 +01:00
a8e881452b
Add greetz to my colleagues who tested this module
2020-03-13 06:42:48 +01:00
83387212a7
Update language to address different patches
2020-03-12 17:50:13 -05:00
0b117849d0
Note specific patch versions
...
Hat tip @sranjit-r7.
2020-03-12 17:40:46 -05:00
a908ceb58a
Add ManageEngine Desktop Central exploit
2020-03-12 17:36:53 -05:00
dfe70ca3fc
Cisco DCNM Module upload directory location regex filter corrected to allow for paths such as C:\Cisco System\
2020-03-12 17:08:33 -04:00
71f2e4c26c
Land #13035 , update PHP web_delivery to SSL context
...
Update the PHP command from web_delivery to ignore invalid SSL
certificates which is required for newer versions of PHP when a
self-signed certificate is used.
2020-03-12 16:35:12 -04:00
f7d8c43722
Land #13040 , SQL Server Reporting Services ViewState deserialization RCE
2020-03-12 18:26:01 +01:00
885c8b8a56
Fix formatting issues, and add EDB link for SQLi
2020-03-12 16:17:53 +01:00
e6b9610841
Update modules/exploits/linux/http/rconfig_ajaxarchivefiles_rce.rb
...
Co-Authored-By: acammack-r7 <adam_cammack@rapid7.com >
2020-03-12 15:59:09 +01:00
2cac8f4e3a
Update modules/exploits/linux/http/rconfig_ajaxarchivefiles_rce.rb
...
Co-Authored-By: acammack-r7 <adam_cammack@rapid7.com >
2020-03-12 15:58:38 +01:00
3f7aed3c0a
Fix Travis-CI errors
2020-03-12 13:44:47 +01:00
60d86cf25d
Update rconfig_ajaxarchivefiles_rce.rb
2020-03-12 11:44:05 +01:00
bwatters-r7