bfc45359ff
More documentation updates and address PR feedback
2021-07-06 11:27:06 -04:00
0a43ec7e4a
Add module for CVE-2021-35464; pre-auth RCE in ForgeRock OpenAM server
2021-07-02 16:05:39 -05:00
b85031ff6a
Fallback to Python3 in sshexec when it's available
2021-06-18 13:35:23 -04:00
537a7763f5
Land #15337 , Update apache_activemq_upload_jsp.rb to fix missing checks and add missing slashes to some requests
2021-06-14 15:28:40 -05:00
5b274770ef
Update exploit code to add missing slashes to certain important parts of the code where the exploit might fail if a custom path is supplied, and also improve the error handling in the code overall
2021-06-14 15:02:38 -05:00
1789c7b070
Adding notes to Nomad Module
2021-06-14 10:39:23 -05:00
8eddecc858
Update apache_activemq_upload_jsp.rb
...
Corrected a minor error where the URI and filesystem path were not separated.
2021-06-13 07:27:56 +01:00
eb76aae2a7
Merge branch 'master' of github.com:rapid7/metasploit-framework into hashicorp_nomad
2021-05-25 15:56:13 -05:00
359b47a146
AutoCheck + JSON Parsing + WfsDelay
2021-05-19 13:42:59 -05:00
47633ac9e6
Land #15205 , Fix TLS bug for gitlab file read RCE module to work on TLS enabled GitLab servers
2021-05-18 16:02:04 -05:00
20415172a4
Support additional payload parameters
2021-05-18 09:39:46 -05:00
7427c68057
Add HashiCorp Nomad Job Exploit
2021-05-17 16:16:21 -05:00
aee65a6d8d
Fix indentation
2021-05-17 23:31:49 +08:00
5e04eec4fc
Update fix
...
Changing the regex to solve the bug
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2021-05-17 23:27:12 +08:00
e0f6700a7e
Add empty line
2021-05-17 23:10:29 +08:00
ce4748494a
Fix whitespace issue
2021-05-17 23:07:05 +08:00
e7983c3b6f
Land #15192 , Enforce Style/RedundantBegin for new modules
2021-05-17 09:51:57 -05:00
69b1f4bbc7
Bug fix
...
Fix bug that prevent the module from working on SSL enabled GitLab server
2021-05-16 14:23:16 +08:00
ac2c467121
Land #15011 , Enhance analyze command API to understand modules' needs
2021-05-14 14:30:33 +01:00
100da2f1b1
Enforce Style/RedundantBegin for new modules
2021-05-13 04:01:03 +01:00
5a0360228f
Update cockpit cms module
2021-05-12 17:20:31 +01:00
a9859af870
prints all cookies instead of just one
2021-05-07 14:52:26 +01:00
bf02dea70f
rubocop
2021-05-07 13:28:17 +01:00
ba6584f761
altered login & rce requests to use cookie_jar api
2021-05-07 13:11:17 +01:00
4a93f15c80
Land #15136 , Set microfocus_ucmdb_unauth_deser default payload to reverse_python
2021-05-02 10:27:05 +00:00
e6b605369e
UCMDB: remove warning from docs and change Linux target to reverse_python
2021-05-02 16:53:02 +07:00
14e22bee37
Land #15105 , CVE-2021-21220 - Chrome V8 XOR typer mismatch OOB access RCE
2021-04-30 22:56:07 +01:00
360fee153f
use 2 space indentation
2021-04-30 22:32:05 +01:00
27a9b797b1
location.reload() on failure
2021-04-30 22:31:50 +01:00
f267f0866c
Fix up documentation typos and improve JavaScript using comments from @timwr's review.
2021-04-30 10:54:09 -05:00
6c6d7699ed
Land #14831 , Add CookieJar support to http_client
2021-04-30 14:08:04 +01:00
5541988d10
Upload working exploit and documentation for CVE-2021-21220
2021-04-27 13:23:35 -05:00
dcf457f7e9
Fix a typo in Eclipse Equinox product name
...
The osgi_console_exec module docs had a few stray characters for the
product name and description. The product name confused me when
googling for this module.
2021-04-23 11:57:48 +01:00
93c7727622
Land #15058 , Cockpit CMS RCE
2021-04-21 13:21:55 +01:00
e39b065e06
vprint to print
2021-04-20 15:26:47 -04:00
51f9e1ae73
cockpit cms rce
2021-04-18 18:52:04 -04:00
88f17c5128
cleanup and removes cookies filtering
2021-04-16 17:31:11 +01:00
d155702356
Add in Notes section to chrome_simplifiedlowering_overflow.rb
2021-04-16 11:02:52 -05:00
c6464313d4
Update modules/exploits/multi/browser/chrome_simplifiedlowering_overflow.rb
...
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com >
2021-04-16 16:46:43 +01:00
97425602e9
fix typo and docs in chrome_simplifiedlowering_overflow
2021-04-16 14:59:43 +01:00
fc55d74b80
http-client cookie jar support and tests
2021-04-16 12:24:21 +01:00
7c575cd38f
Land #15007 , add a chrome renderer exploit (CVE-2020-16040)
2021-04-08 22:18:20 +01:00
53b739277a
do location.reload() if exploit fails
2021-04-08 21:21:06 +01:00
8019eda667
fix 0x2000 shellcode limit
2021-04-08 21:17:40 +01:00
bd32f686bc
remove dataview allocation
2021-04-08 21:17:01 +01:00
6b86f6c881
remove 0x150 shellcode limit
2021-04-08 21:06:15 +01:00
c12f098c45
cosmetic fixes
2021-04-08 20:54:54 +01:00
1dfdb619a9
Update from code review
...
- Set RPORT default value to 3000
- Use ternary operator
2021-04-07 19:40:59 +02:00
6096d0f135
Remove superfluous default_cred? methods
2021-04-07 06:12:25 -05:00
b1c5afc55b
fix rubocop warning
2021-04-06 18:46:07 +05:30
Spencer McIntyre