 rrockru
|
c0b4e7701f
|
Fix docs
|
2019-04-11 17:54:10 +03:00 |
|
|
rrockru
|
eab1f6ca54
|
Added Atlassian Confluence exploit documentation
|
2019-04-11 17:52:08 +03:00 |
|
|
rrockru
|
7881d627ca
|
Add Atlassian Confluence RCE exploit
|
2019-04-11 15:55:51 +03:00 |
|
|
Shelby Pace
|
4d0a41ff1a
|
Land #11657, add Horde form file upload
|
2019-04-09 13:47:59 -05:00 |
|
|
Shelby Pace
|
4018d47b65
|
changed if not to unless
|
2019-04-09 13:43:54 -05:00 |
|
|
RatioSec Research
|
b56e171172
|
Fix extraction of session tokens
|
2019-04-09 09:28:52 +01:00 |
|
|
Shelby Pace
|
fff129ae9f
|
Land #11587, add Wordpress core RCE module
|
2019-04-04 15:22:56 -05:00 |
|
|
Shelby Pace
|
6efd80e139
|
added note in info
|
2019-04-04 15:19:58 -05:00 |
|
|
Shelby Pace
|
2884d9afcb
|
modified checks, added function
|
2019-04-04 15:09:12 -05:00 |
|
|
Shelby Pace
|
d5ac1e3a33
|
minor adjustments to indentation and requests
|
2019-04-03 19:03:47 -05:00 |
|
|
wilfried
|
3081b13a1f
|
Adding payload in exploit code
|
2019-04-02 10:24:48 +02:00 |
|
|
Brent Cook
|
82b7c926fe
|
Land #11579, Add support for splunk 7.2.4 to splunk_upload_app_exec
|
2019-03-29 16:22:26 -05:00 |
|
|
RatioSec Research
|
5c84e9e61a
|
Remove web root guessing since not reliable
|
2019-03-29 16:16:06 +00:00 |
|
|
William Vu
|
269cb4bca6
|
Land #11635, Authors check for msftidy
|
2019-03-29 10:45:31 -05:00 |
|
|
William Vu
|
af494300ec
|
Add timwr as an author to his own modules
|
2019-03-29 10:44:58 -05:00 |
|
|
RatioSec Research
|
f8c5852902
|
Add Horde Form File Upload
|
2019-03-29 12:31:14 +00:00 |
|
|
Wei Chen
|
927d20cb95
|
Land #11592, Add CMS Made Simple (CMSMS) Showtime2 File Upload RCE
|
2019-03-27 15:21:07 -05:00 |
|
|
Wei Chen
|
38bdccb91a
|
Use instance variables instead of datastore options
|
2019-03-27 15:17:32 -05:00 |
|
|
fabiocogno
|
fdb1f4adea
|
Update cmsms_showtime2_rce.rb
Fix to CSRF Token stealing function for older versions of CMSMS
|
2019-03-27 20:09:14 +01:00 |
|
|
Shelby Pace
|
d185e8a018
|
indentation fix
|
2019-03-25 14:54:46 -05:00 |
|
|
Shelby Pace
|
3a8b09f08e
|
added checks on scan method
|
2019-03-25 14:48:19 -05:00 |
|
|
Shelby Pace
|
59f5c291c9
|
removed spare spaces and modified some indentation
|
2019-03-25 14:25:09 -05:00 |
|
|
wilfried
|
8853d6d5b5
|
Adding documentation + cleaning files from the exploit
|
2019-03-22 17:37:04 +01:00 |
|
|
William Vu
|
4524707437
|
Fix rebase regressions in jenkins_metaprogramming
Ugh.
|
2019-03-21 11:20:21 -05:00 |
|
|
fabiocogno
|
be5ec3379b
|
Update cmsms_showtime2_rce.rb
|
2019-03-20 15:50:30 +01:00 |
|
|
bcoles
|
c18ab91054
|
Update modules/exploits/multi/http/cmsms_showtime2_rce.rb
Co-Authored-By: fabiocogno <fabio.cogno@gmail.com>
|
2019-03-20 14:13:38 +01:00 |
|
|
bcoles
|
e0a3e01d26
|
Update modules/exploits/multi/http/cmsms_showtime2_rce.rb
Co-Authored-By: fabiocogno <fabio.cogno@gmail.com>
|
2019-03-20 14:13:25 +01:00 |
|
|
bcoles
|
365e032452
|
Update modules/exploits/multi/http/cmsms_showtime2_rce.rb
Co-Authored-By: fabiocogno <fabio.cogno@gmail.com>
|
2019-03-20 14:13:12 +01:00 |
|
|
bcoles
|
49bb5a1624
|
Update modules/exploits/multi/http/cmsms_showtime2_rce.rb
Co-Authored-By: fabiocogno <fabio.cogno@gmail.com>
|
2019-03-20 14:13:00 +01:00 |
|
|
bcoles
|
050aa7a98c
|
Update modules/exploits/multi/http/cmsms_showtime2_rce.rb
Co-Authored-By: fabiocogno <fabio.cogno@gmail.com>
|
2019-03-20 14:12:47 +01:00 |
|
|
bcoles
|
fe0d5e0c97
|
Update modules/exploits/multi/http/cmsms_showtime2_rce.rb
Co-Authored-By: fabiocogno <fabio.cogno@gmail.com>
|
2019-03-20 14:12:35 +01:00 |
|
|
Fabio Cogno
|
43f74b1cf2
|
Add CMS Made Simple (CMSMS) Showtime2 File Upload RCE
|
2019-03-19 23:48:46 +01:00 |
|
|
Matteo Malvica
|
a2d6c77fb8
|
indentation fixes
|
2019-03-19 15:28:24 +01:00 |
|
|
Matteo Malvica
|
985f3748e5
|
Update splunk_upload_app_exec.rb
|
2019-03-19 15:08:51 +01:00 |
|
|
Matteo Malvica
|
c9dcdf1b66
|
new error logic
|
2019-03-19 14:58:31 +01:00 |
|
|
Matteo Malvica
|
98a7938837
|
Update splunk_upload_app_exec.rb
|
2019-03-19 14:42:56 +01:00 |
|
|
bcoles
|
aff77e58bf
|
Update modules/exploits/multi/http/splunk_upload_app_exec.rb
Co-Authored-By: avanzo <matteo@malvica.com>
|
2019-03-19 13:57:19 +01:00 |
|
|
bcoles
|
109b2bcf7e
|
Update modules/exploits/multi/http/splunk_upload_app_exec.rb
Co-Authored-By: avanzo <matteo@malvica.com>
|
2019-03-19 13:46:57 +01:00 |
|
|
bcoles
|
f98ad82583
|
Update modules/exploits/multi/http/splunk_upload_app_exec.rb
Co-Authored-By: avanzo <matteo@malvica.com>
|
2019-03-19 13:46:44 +01:00 |
|
|
Matteo Malvica
|
983442d690
|
Update splunk_upload_app_exec.rb
|
2019-03-18 19:04:45 +01:00 |
|
|
Matteo Malvica
|
3316e8c4bf
|
fixed standard payload syntax
|
2019-03-18 19:00:33 +01:00 |
|
|
Matteo Malvica
|
2f1ee95073
|
Update splunk_upload_app_exec.rb
|
2019-03-18 15:11:04 +01:00 |
|
|
Matteo Malvica
|
7a31fc2d17
|
added splunk 7.2.4 support
|
2019-03-18 09:12:00 +01:00 |
|
|
William Vu
|
a1e6d4d19a
|
Update note about staging payloads over HTTPS
|
2019-03-16 13:36:58 -05:00 |
|
|
William Vu
|
621fa8e4db
|
Fix issues and refactor module
|
2019-03-16 00:38:48 -05:00 |
|
|
William Vu
|
0fa2d985e7
|
Add Jenkins ACL bypass and metaprogramming RCE
|
2019-03-16 00:32:36 -05:00 |
|
|
William Vu
|
f35a13d795
|
Fix exploit/multi/http/oracle_ats_file_upload
|
2019-02-25 11:35:34 -06:00 |
|
|
William Vu
|
f534fd9755
|
Fix exploit/multi/http/apache_jetspeed_file_upload
|
2019-02-25 11:32:06 -06:00 |
|
|
William Vu
|
53bf15b184
|
Fix exploit/multi/http/struts2_rest_xstream
|
2019-02-25 11:18:27 -06:00 |
|
|
Wei Chen
|
3a12592976
|
Land #11072, Add nuuo_nvrmini_upgrade_rce
|
2019-02-06 22:30:45 -06:00 |
|