c8d50bda0f
Add documentation for the new DNS command
2024-03-12 08:59:08 -04:00
4fcb4a4e3a
Land #18863 , Expose MSSQL initial connection info in client
2024-02-20 14:17:34 +00:00
200d03c417
Expose MSSQL initial connection info in client
2024-02-20 11:36:10 +00:00
a3d8b0f77a
automatic module_metadata_base.json update
2024-02-19 10:41:33 -06:00
e66f6c106b
Land #18847 , Add Proxies support to creating a session with postgres_login
2024-02-19 16:20:09 +00:00
3be5988679
Land #18848 , Add Proxies support to creating a session with mssql_login
2024-02-19 16:10:37 +00:00
2cc8281db7
automatic module_metadata_base.json update
2024-02-19 08:42:51 -06:00
c2a217efcd
Land #18854 , Add Proxies support to creating a session with mysql_login
2024-02-19 14:27:22 +00:00
5735c7cb89
Land #18857 , Documentation: Updated instructions for setting up msfdb
2024-02-19 13:38:03 +00:00
6db865a46c
Land #18850 , Fix failing ldap server tests
2024-02-19 12:39:52 +00:00
b2f36e41c4
Add Proxies support to creating a session with mysql_login
2024-02-19 12:22:51 +00:00
66696d201b
automatic module_metadata_base.json update
2024-02-19 05:33:15 -06:00
db3b2de3f3
Land #18855 , Use database_name for SQL sessions
2024-02-19 11:10:02 +00:00
0108f1f214
Land #18861 , Removes SessionType values from modules with OptionalSession mixin
2024-02-19 10:57:41 +00:00
de17261926
Removes session types from module with session type mixin
2024-02-19 10:34:16 +00:00
64ab62f2c3
Use database_name for SQL sessions
2024-02-17 03:31:58 +00:00
ca367bc87b
Fix failing LDAP server tests
2024-02-16 23:43:07 +00:00
19c1a35592
automatic module_metadata_base.json update
2024-02-16 14:55:39 -06:00
8cddffa3d1
Land #18700 , Add Kafka-ui Unauth RCE module
...
This PR adds an exploit module for CVE-2023-52251 which
is an unauthenticated rce vulnerability in Kafka's UI.
2024-02-16 15:38:52 -05:00
eef29a5100
automatic module_metadata_base.json update
2024-02-16 14:31:32 -06:00
bc6bf1c4f3
Add Proxies support to creating a session with mssql_login
2024-02-16 20:22:11 +00:00
a1b0ff0fcf
Land #18681 , Update Apache Ofbiz w. Auth-Bypass
...
This PR updates the pre-existing apache_ofbiz_deserialization
module to include functionality that will bypass authentication by
using the newly discovered CVE-2023-51467.
2024-02-16 15:02:34 -05:00
fc963bd8bb
Add Proxies support to creating a session with postgres_login
2024-02-16 14:45:17 +00:00
94f0d243c7
Land #18846 , msftidy_docs.rb add TARGETURI to universal option list
2024-02-16 14:23:33 +00:00
da9164fcc6
Add targeturi to universal option list
2024-02-16 12:58:49 +01:00
90ed3cd00a
Merge pull request #1 from jlownie/jlownie-patch-1
...
Documentation: Updated instructions for setting up msfdb
2024-02-16 13:50:43 +11:00
0e98da39c2
Updated instructions for setting up msfdb
...
Added some missing information
2024-02-16 13:43:40 +11:00
bbe1098b13
Land #18842 , update docker image bundler args
2024-02-15 23:22:57 +00:00
e15fd1a782
automatic module_metadata_base.json update
2024-02-15 16:35:11 -06:00
7b56d012e8
Land #18678 , add LDAP capture capabilities
2024-02-15 22:11:04 +00:00
40701bf59a
Fix auhtentication typo in lib/rex/proto/ldap/auth.rb
2024-02-15 21:26:45 +00:00
8dcb409d25
Fix BUNDLER_CONFIG_ARGS variable mismatch in Dockerfile
...
Previous version of Dockerfile used `set clean 'true'`. However, this no longer works with "newer" versions of Ruby gems (rubygems/rubygems#3271 ), which now requires a force option when cleaning system gems.
Since there is no way to set the force flag through config, a new ARG (BUNDLER_FORCE_CLEAN) is used to provide the option of whether to run bundle clean --force on system gems.
2024-02-16 02:16:42 +08:00
1d9a08f405
automatic module_metadata_base.json update
2024-02-15 07:43:02 -06:00
e49c6a792a
Land #18770 , Extract SMB, PostgreSQL, MySQL and MSSQL optional sessions into their own mixins
2024-02-15 13:19:37 +00:00
8e3daa5179
Bump version of framework to 6.3.57
2024-02-15 03:37:54 -06:00
1d406cfc2a
Land #18809 , DNS command improvements
2024-02-14 22:12:30 +00:00
d716e60cf2
added base64 encoder module of zerosteiner
2024-02-14 21:33:50 +00:00
f5c71d09c2
using data/kafka_ui_versions.json for the version check
2024-02-14 20:57:46 +00:00
8b70cefd83
Update modules/exploits/linux/http/kafka_ui_unauth_rce_cve_2023_52251.rb
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2024-02-14 20:57:46 +00:00
996ca8a7c9
Update documentation/modules/exploit/linux/http/kafka_ui_unauth_rce_cve_2023_52251.md
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2024-02-14 20:57:46 +00:00
f75722ecf2
Small updates to module and documentation
2024-02-14 20:57:46 +00:00
dde7e3c5d3
Small tweaks to verbose messages
2024-02-14 20:57:46 +00:00
eafdb8495b
Added documentation
2024-02-14 20:57:46 +00:00
d5f30befbb
Second release of module
2024-02-14 20:57:46 +00:00
3db32da70f
First release of module.
2024-02-14 20:57:45 +00:00
5f703b2e28
First draft. Not ready for review
2024-02-14 20:57:45 +00:00
eca99e2c77
Refactor resolver types
2024-02-14 14:40:22 -05:00
27ccb26de1
Adjust the confirmation logic before resetting
2024-02-14 14:27:05 -05:00
a75013e51a
Land #18616 , Fix aarch64 elf shared SIGBUS error
...
Fix aarch64 elf shared object bus error
2024-02-14 13:30:29 -05:00
7228a2ad20
automatic module_metadata_base.json update
2024-02-14 10:52:51 -06:00
Spencer McIntyre