cgranleese-r7
|
de17261926
|
Removes session types from module with session type mixin
|
2024-02-19 10:34:16 +00:00 |
|
Dean Welch
|
fa5c4c0193
|
lowercase session types
|
2024-02-14 15:45:34 +00:00 |
|
Dean Welch
|
0d4e1ed755
|
Use mssql option session mixin with mssql modules
|
2024-02-14 15:37:11 +00:00 |
|
Dean Welch
|
587a8690a1
|
Use individual session mixins
|
2024-02-14 15:37:11 +00:00 |
|
Dean Welch
|
08872d0211
|
Add session type to info hash in the mixin
|
2024-02-14 15:37:11 +00:00 |
|
Dean Welch
|
0f319bdfb9
|
Extract SMB and PostgreSQL optional sessions into their own mixins
|
2024-02-14 15:37:11 +00:00 |
|
adfoster-r7
|
1794a5fbee
|
Land #18763, Mssql session modules
|
2024-02-14 10:54:04 +00:00 |
|
Zach Goldman
|
d18520adc6
|
update rhost and rport calls
|
2024-02-13 13:00:38 -06:00 |
|
Zach Goldman
|
c05c6773df
|
adjust session logic in modules
|
2024-02-13 11:59:09 -06:00 |
|
Spencer McIntyre
|
202db99004
|
Land #18801, Fix revision number checks
Fix revision number checks in cve_2022_26904_superprofile.rb
|
2024-02-12 15:52:16 -05:00 |
|
Spencer McIntyre
|
45365c8666
|
Land #18800, Fix revision number checks
Fix revision number checks for cve_2021_40449.rb
|
2024-02-12 15:19:56 -05:00 |
|
Spencer McIntyre
|
ce0498377d
|
Land #18798, fix version checks
windows/local/cve_2020_0787_bits_arbitrary_file_move (and similar) fails due to incorrect revision_number checks
|
2024-02-12 15:11:07 -05:00 |
|
Spencer McIntyre
|
8eb5aa6aa6
|
Land #18799, Fix revision number checks
Fix revision number checks for cve_2020_17136.rb
|
2024-02-12 15:01:45 -05:00 |
|
Zach Goldman
|
94223f05fc
|
update relevant modules to work with sessions
separate out optional session logic
fixing session handling
|
2024-02-09 13:18:49 -06:00 |
|
sjanusz-r7
|
30fc29e0f5
|
Use PostgreSQL session type for modules
|
2024-02-09 15:38:06 +00:00 |
|
upsidedwn
|
4b5d04e59e
|
Fix revision number checks in cve_2022_26904_superprofile.rb
|
2024-02-07 11:30:42 +08:00 |
|
upsidedwn
|
ccb446f2ae
|
Fix revision number checks for cve_2021_40449.rb
|
2024-02-07 11:28:00 +08:00 |
|
upsidedwn
|
436efad4ca
|
Fix revision number checks
|
2024-02-07 11:25:41 +08:00 |
|
upsidedwn
|
47d30696bc
|
Fix revision_number checks
|
2024-02-07 11:20:12 +08:00 |
|
cgranleese-r7
|
e80f0ef8cd
|
Removes session logic from mixins and uses client instead of datastore for rhost and rport
|
2024-02-06 14:11:16 +00:00 |
|
cgranleese-r7
|
577304cf7c
|
Updates more modules
|
2024-02-02 14:59:56 +00:00 |
|
adfoster-r7
|
7ac4387d35
|
Land #18696, Convert MSSQL mixin to class
|
2024-02-02 14:14:34 +00:00 |
|
Zach Goldman
|
35778e92b2
|
client consolidation
convert first module from remote to client
move client to rex
remove metasploit mixin
|
2024-02-01 17:23:55 -06:00 |
|
Dean Welch
|
1abaef4945
|
Move new session information alerts behind a feature flag
|
2024-01-30 16:38:00 +00:00 |
|
Dean Welch
|
9a2ec90c16
|
Add alert to show user the new session options available in Metasploit 6.4
|
2024-01-29 17:06:21 +00:00 |
|
adfoster-r7
|
8c5628826f
|
Land #18735, update iis_webdav_scstoragepathfromurl module metadata
|
2024-01-23 15:56:01 +00:00 |
|
aleksa
|
67e402e1be
|
Added Notes
|
2024-01-22 19:12:21 -05:00 |
|
adfoster-r7
|
094d6ee36b
|
Add additional reliability and stability notes to modules
|
2024-01-22 23:29:57 +00:00 |
|
aleksa
|
e9e5a44522
|
Updated with side effects
|
2024-01-22 18:03:28 -05:00 |
|
aleksa
|
8e3fbcae26
|
notes added to storage path exploit.
|
2024-01-22 17:55:26 -05:00 |
|
bwatters
|
46a0052286
|
Land #18568, added exploit for CVE-2023-32781 - PRTG authenticated RCE
Merge branch 'land-18568' into upstream-master
|
2024-01-22 11:35:38 -06:00 |
|
Kevin Joensen
|
dfa54d02b9
|
Update modules/exploits/windows/http/prtg_authenticated_rce_cve_2023_32781.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2024-01-22 10:10:14 +01:00 |
|
adfoster-r7
|
0075212fa9
|
Land #18596, Update smb modules to work with smb sessions
|
2024-01-15 12:07:07 +00:00 |
|
bwatters
|
f341f72c72
|
add AKA
|
2024-01-04 11:11:23 -06:00 |
|
Spencer McIntyre
|
97c3ccc8af
|
Keep the service running when a session is opened
|
2023-12-29 14:03:27 -05:00 |
|
Spencer McIntyre
|
d67d39ace6
|
Add error checking to #setup
|
2023-12-29 14:03:23 -05:00 |
|
Kevin Joensen
|
3b8f684d08
|
Fixed check module function
|
2023-12-29 16:18:50 +01:00 |
|
Kevin Joensen
|
2f023f7315
|
Update modules/exploits/windows/http/prtg_authenticated_rce_cve_2023_32781.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2023-12-29 14:50:47 +01:00 |
|
bwatters
|
ce43db0904
|
Fix TBDs and give better documentation.
|
2023-12-21 16:18:36 -06:00 |
|
bwatters
|
6f17088e33
|
Fix some linting
|
2023-12-20 16:44:49 -06:00 |
|
Spencer McIntyre
|
3ac9c0c38a
|
Patch in the theme version to the MSStyles file
|
2023-12-19 17:05:01 -05:00 |
|
Kevin Joensen
|
5de0e4e234
|
Update modules/exploits/windows/http/prtg_authenticated_rce_cve_2023_32781.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2023-12-13 14:30:00 +01:00 |
|
Kevin Joensen
|
52a23e3afb
|
Update modules/exploits/windows/http/prtg_authenticated_rce_cve_2023_32781.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
|
2023-12-13 14:29:49 +01:00 |
|
bwatters
|
95eb4cc304
|
Pull in changes from Spencer's branch, but not the Gemfile changes.
|
2023-12-12 10:09:13 -06:00 |
|
bwatters
|
3534181067
|
rename file
|
2023-12-12 10:09:13 -06:00 |
|
bwatters
|
d3b0c538a1
|
Probably need to figure out how to get the requested filename....
|
2023-12-12 10:09:13 -06:00 |
|
bwatters
|
62d3cfa72d
|
Still not working, but closer
|
2023-12-12 10:09:13 -06:00 |
|
bwatters
|
ce55c1cd78
|
Fix silly file name disagreement
|
2023-12-12 10:09:13 -06:00 |
|
bwatters
|
486f42896f
|
Non-Working Draft Module
|
2023-12-12 10:09:13 -06:00 |
|
Dean Welch
|
cf24bca946
|
Add smb session support to smb_relay module
|
2023-12-12 11:59:07 +00:00 |
|