Commit Graph

23594 Commits

Author SHA1 Message Date
h00die 80c4d59560 Land #9702 exploit for clipbucket 2018-03-24 19:59:17 -04:00
h00die 0028e2c5ba documentation update 2018-03-24 19:25:59 -04:00
Touhid M Shaikh 230c0a295f Delete playsms_uploadcsv_exec.rb 2018-03-23 12:29:07 +05:30
Touhid M Shaikh a506efe0b6 playsms_uploadcsv_exec.rb
PlaySMS 1.4 Remote Code Execution using Phonebook import Function in import.php
2018-03-21 14:13:52 +05:30
Jacob Robles ca7caae622 Change External Module Type Names
Change the a couple of external module type names
to be consistent with the template files.
2018-03-20 10:19:57 -05:00
Touhid M Shaikh f012916742 Delete playsms_uploadcsv_exec.rb 2018-03-18 13:57:53 +05:30
Touhid M Shaikh 0e0fcdf727 PlaySMS 1.4 RCE
PlaySMS 1.4 Remote Code Execution using Phonebook import Function in import.php
2018-03-18 13:46:30 +05:30
Jeffrey Martin 4801021aba Land #9613, add bind_named_pipe x86 2018-03-17 15:53:06 -05:00
Brent Cook 44d5022380 Land #9529, Add module for HP iLO CVE-2017-12542 authentication bypass 2018-03-16 16:50:54 -05:00
Brent Cook d1722d507b handle reset from the target on exploit 2018-03-16 16:46:50 -05:00
Brent Cook 65ae1e33e1 Land #9694, move ssh platforms to lib 2018-03-16 12:49:57 -05:00
Jacob Robles 1b2f1ced02 Land #8422, Typo3 News Module Sql Injection exploit 2018-03-15 10:55:04 -05:00
Jacob Robles ba0d990273 Documentation added and Error Checks 2018-03-15 10:46:08 -05:00
Jacob Robles 9e23997c3d Added Error Handling 2018-03-14 08:16:17 -05:00
Jacob Robles 1d51cf6d24 Implement Suggested Changes 2018-03-14 06:15:49 -05:00
Jacob Robles 64a51c1bd7 Save Credentials and IP 2018-03-13 08:47:08 -05:00
Touhid M Shaikh ea3378753b syntax error fixed on 70 line
improve check payload was uploaded or not condition using AND condition on line 121
2018-03-13 14:15:03 +05:30
Tim W 39e2cddf70 update python payload cached size 2018-03-13 15:30:54 +08:00
h00die 97dbc1273a copy pasta 2018-03-12 20:14:08 -04:00
Brent Cook 1587b5b682 Land #9686, add ipv6 to slowloris, rhost to non-scanner modules 2018-03-12 16:13:21 -05:00
Touhid M Shaikh 5e30982184 check fucktion and some words fixed
all changes done which is bcoles suggested
2018-03-12 21:03:34 +05:30
Brent Cook d86dcbc237 Land #9632, owa_login and auth_brute enhancements 2018-03-12 10:31:20 -05:00
Mzack9999 5ee50c5fab Username and password reported as credentials 2018-03-12 07:01:03 -05:00
Mzack9999 3d6af4c7ee Removed mail from author section 2018-03-12 07:01:03 -05:00
Mzack9999 b0ed8c4702 code cleanup 2018-03-12 07:01:03 -05:00
Mzack9999 7b781d53c9 Small code refactoring, added verbose output 2018-03-12 07:01:03 -05:00
Mzack9999 fe89e2d391 Corrected check method, warning in case of absence of news and TARGETURI parameter 2018-03-12 07:01:03 -05:00
Mzack9999 f09d9a8994 Solved msftidy.rb issues 2018-03-12 07:01:02 -05:00
Mzack9999 dbba27cc97 Fixed minor issues and added automatic detection of Patten1/Pattern2 2018-03-12 07:01:02 -05:00
Mzack9999 63444a2c43 Corrected wrong label in password hash message 2018-03-12 07:01:02 -05:00
Mzack9999 4a40f40c14 Typo3 News Module Sql Injection exploit 2018-03-12 07:00:45 -05:00
Touhid M Shaikh 9b0ba4a6fa clipbucket_fileupload_exec 2018-03-12 14:17:13 +05:30
Jacob Robles 615f6b02af varnish no auth file read 2018-03-09 11:25:13 -06:00
Jacob Robles 1fd0087a97 Land #7654, varnish file read 2018-03-09 10:59:04 -06:00
Jacob Robles a458cb9ebc varnish file read msftidy fixes 2018-03-09 10:56:52 -06:00
Jacob Robles 037559023a Update connect/disconnect varnish
[ticket: #7654]
2018-03-09 10:37:14 -06:00
h00die ec7a62bc4c move ssh platforms to lib 2018-03-08 21:23:11 -05:00
Jeffrey Martin b9ad1f2872 Land #9687, bump payloads, fix PHP meterpreter message parsing 2018-03-07 18:48:56 -06:00
Jeffrey Martin 26481d503e one more payload size adjustment 2018-03-07 18:48:10 -06:00
Brent Cook b977b1c951 bump payload sizes 2018-03-07 17:41:58 -06:00
Adam Cammack 9a8f1ace2d Add slowloris support for IPv6 and hostnames
Replace manual socket creation with `socket.create_connection` to get
auto-detection goodness.
2018-03-07 17:06:04 -06:00
Jacob Robles 15269ec3ce Land #9678, Add memcached UDP version scanner 2018-03-07 10:14:29 -06:00
Jacob Robles 86dd382e6a Land #9554, Eclipse Equinoxe OSGi console RCE 2018-03-07 08:41:31 -06:00
Fab e8a227b1a6 Changes as requested by jhart-r7:
- Default Username / Password are now random
- Doc fixed
- REST typo fixed
2018-03-07 10:48:05 +01:00
Jon Hart a69c2e29d2 Correct comment 2018-03-06 18:16:22 -08:00
Jon Hart 1e04fa009f Fix style 2018-03-06 18:13:50 -08:00
Jon Hart 74ec9f00e7 Add WIP memcached UDP version scanner 2018-03-06 17:54:00 -08:00
Jon Hart e72372d6d8 Add disclosure date and correct CVE for memcached amp 2018-03-06 16:04:00 -08:00
Brent Cook d6871f5733 Land #9614, Juniper post enum module 2018-03-06 10:29:56 -06:00
bwatters-r7 e878e19bbd Land #9665, Add missing reverse_tcp_rc4 payload tests.
Merge branch 'land-9665' into upstream-master
2018-03-05 17:18:04 -06:00