5f0c9942d2
Land #12756 , add dlink dwl2600 exploit
2020-03-27 12:38:35 -05:00
8aa4d7a944
remove mixins, add CVE
2020-03-27 12:37:40 -05:00
bb21c8f6d8
Finishing Touches on DLINK DWL 2600 Module
...
These last finishing touches complete the DLINK DWL 2600 Module. The
fixes include making renaming token to @token and adding the noconcat
CmdStager option.
2020-03-26 20:13:55 -05:00
dc9e215318
remove unused code / add option
2020-03-26 16:05:56 -05:00
f191eb00c9
add command stager
2020-03-26 16:05:56 -05:00
5ce4929834
Fix has_check? conflict in redis_unauth_exec
...
Importing `Msf::Auxiliary::Scanner` at all will override the default
`has_check?` check and add a its own `check` method. This redefines
`has_check?` to allow usage of the Redis mixin while using an
exploit-style `check` method.
Fixes #13095
2020-03-25 10:07:08 -05:00
922f1ec708
Land #12901 , add Centreon poller rce
2020-03-17 12:16:29 -05:00
2717683825
change message
2020-03-17 12:15:06 -05:00
98f4642c2d
remove comments / check
2020-03-17 10:33:12 -05:00
5d9d3926e4
Land #13066 , add rConfig 3.9 RCE module
2020-03-16 11:18:59 +00:00
0efe53d869
fix somes code review comments.
2020-03-15 13:30:23 +04:00
ff2421163b
Fix Travis-CI errors
2020-03-13 10:42:40 +01:00
5bbabd6f2a
Add tips to description.
2020-03-13 10:03:27 +01:00
7874308fae
Last typo fixes. No priv required on webapp.
2020-03-13 09:18:50 +01:00
a8e881452b
Add greetz to my colleagues who tested this module
2020-03-13 06:42:48 +01:00
885c8b8a56
Fix formatting issues, and add EDB link for SQLi
2020-03-12 16:17:53 +01:00
e6b9610841
Update modules/exploits/linux/http/rconfig_ajaxarchivefiles_rce.rb
...
Co-Authored-By: acammack-r7 <adam_cammack@rapid7.com >
2020-03-12 15:59:09 +01:00
2cac8f4e3a
Update modules/exploits/linux/http/rconfig_ajaxarchivefiles_rce.rb
...
Co-Authored-By: acammack-r7 <adam_cammack@rapid7.com >
2020-03-12 15:58:38 +01:00
3f7aed3c0a
Fix Travis-CI errors
2020-03-12 13:44:47 +01:00
60d86cf25d
Update rconfig_ajaxarchivefiles_rce.rb
2020-03-12 11:44:05 +01:00
94f082fe4a
Create rconfig_ajaxarchivefiles_rce.rb
2020-03-12 11:41:12 +01:00
7c54066b0e
Land #13004 , Nagios XI RCE module
2020-03-09 15:57:58 +01:00
96ae2cf9a2
Incorporate additional suggestions from code review.
2020-03-09 11:56:15 +02:00
8b778bffc0
Incorporate suggestions from code review
2020-03-06 15:50:34 +02:00
3a046f01da
Run rubocop -a on subset of files
2020-03-06 10:41:45 +00:00
12faf3fad5
Land #12959 , add eyes of network rce module
2020-03-02 15:22:51 -06:00
c16edad4e6
add verify_api method, checks on data
2020-03-02 15:10:46 -06:00
f60f60db7f
Set stance to aggressive to prevent the HTTPServer mixing from trying to make this a job
2020-02-28 13:01:51 +02:00
5ee7fcaf4a
Add simple changes suggested in code review.
2020-02-28 12:14:38 +02:00
99ed3afab3
Change filenames for consistency with existing modules
2020-02-27 17:08:23 +02:00
280d1767b4
Add Nagios XI < 5.6.6. exploit module and documentation
2020-02-27 16:58:15 +02:00
af9d2a28de
Fix msftidy warnings
2020-02-26 14:56:08 +00:00
6bac1ec2aa
Remove executable flags from exploit files
2020-02-26 10:39:50 +00:00
578bf9999f
Land #12955 , Update logic for ForceExploit in modules
2020-02-21 15:45:12 -06:00
f484e6c83c
Land #12862 , Apache James 2.3.2 arbitrary file write exploit module
2020-02-20 10:41:13 +01:00
c2f13d906b
fix sqli get request syntax
2020-02-20 11:38:43 +02:00
a861ad3f21
Payload handler/cleanup improvement
2020-02-19 18:57:08 -08:00
db8555e007
Land #12942 , add Diamorphine privilege escalation
2020-02-19 10:36:39 -06:00
9980a96917
Move documentation to correct directory
2020-02-19 16:57:38 +02:00
0d0bd865c8
add eyesofnetwork module and docs
2020-02-19 16:33:04 +02:00
7dc1315dac
Update logic for ForceExploit in my modules
...
This lets the user opt out of running check completely.
2020-02-19 01:06:50 -06:00
8489bcdfd9
This fixes broken links to the community.rapid7.com blog
...
Performed mechanically with sed, spot-checked that the new blog can consume these links.
2020-02-18 09:06:11 -06:00
ac6d0e4391
Add Diamorphine Rootkit Signal Privilege Escalation module
2020-02-16 14:53:16 +00:00
27effc1b56
typo. cmdstager command
2020-02-14 12:25:56 +04:00
a0b6584d19
Added password randomization
2020-02-07 19:14:56 -08:00
e2f2d55ecc
Updated check message
2020-02-07 18:34:27 -08:00
cb372a54f4
Added info to cleanup message
2020-02-07 16:41:27 -08:00
a05611d756
Improve cleanup functionality
2020-02-07 16:13:25 -08:00
4dcb2fbd96
Land #12889 , Add OpenSMTPD MAIL FROM RCE
2020-02-07 11:43:18 +00:00
e053ed7a1e
Add Msf::Exploit::Expect mixin and refactor again
2020-02-05 21:16:24 -06:00
Shelby Pace