Brendan
cb6495e5bc
Merge pull request #20146 from Chocapikk/wp_suretriggers_auth_bypass
...
Add WP SureTriggers ≤1.0.78 admin-creation & RCE module (CVE-2025-3102)
2025-05-13 10:53:44 -05:00
Brendan
5faa0a5b6b
Merge pull request #19777 from msutovsky-r7/linqpad_deserialization
...
Linqpad deserialization persistence
2025-05-13 08:03:30 -05:00
Diego Ledda
619a284408
Land #20156 , modules/post: Resolve RuboCop violations and typos
...
Land #20156 , modules/post: Resolve RuboCop violations and typos
2025-05-13 12:24:41 +02:00
bcoles
81a405355c
modules/post: Resolve RuboCop violations and typos
2025-05-13 09:23:28 +10:00
adfoster-r7
0b0132c11a
Update web crawlers to support HTTP logging
2025-05-12 17:46:20 +01:00
Spencer McIntyre
9363dc4759
Merge pull request #20143 from bcoles/rubocop-modules-auxiliary-analyze
...
modules/auxiliary/analyze: Resolve RuboCop violations
2025-05-12 10:05:17 -04:00
msutovsky-r7
cbb4934882
Land #20133 , resolves Rubocop violations for modules/auxiliary/cloud
...
modules/auxiliary/cloud: Resolve RuboCop violations
2025-05-12 12:30:14 +02:00
msutovsky-r7
8c647cd1ad
Land #20118 , changes target option for smb_to_ldap module
...
Fix the smb_to_ldap module's missing target option
2025-05-12 09:56:06 +02:00
Chocapikk
40002f87f4
Apply suggestion to store created WordPress admin creds
2025-05-11 17:53:06 +02:00
Valentin Lobstein
604672433a
Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
...
Co-authored-by: bcoles <bcoles@gmail.com >
2025-05-11 17:19:12 +02:00
Valentin Lobstein
ca6e413bea
Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
...
Co-authored-by: bcoles <bcoles@gmail.com >
2025-05-11 17:18:51 +02:00
Valentin Lobstein
04915c8c95
Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
...
Co-authored-by: bcoles <bcoles@gmail.com >
2025-05-11 17:18:37 +02:00
Valentin Lobstein
5c8013ad92
Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
...
Co-authored-by: bcoles <bcoles@gmail.com >
2025-05-11 17:18:29 +02:00
Spencer McIntyre
db75455d2b
Merge pull request #20128 from bcoles/rubocop-modules-auxiliary-bnat
...
modules/auxiliary/bnat: Resolve RuboCop violations
2025-05-09 10:02:49 -04:00
Spencer McIntyre
9ee2ec861f
Merge pull request #20120 from bcoles/rubocop-modules-post-windows
...
modules/post/windows: Resolve RuboCop violations
2025-05-09 09:33:17 -04:00
bcoles
45336dd612
modules/post/windows: Resolve RuboCop violations
2025-05-09 10:51:17 +10:00
Chocapikk
21a9fa848c
Add credits
2025-05-07 23:59:06 +02:00
Chocapikk
879027bd5a
Update
2025-05-07 23:50:20 +02:00
Valentin Lobstein
2e9d7db238
Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2025-05-07 23:34:58 +02:00
Valentin Lobstein
23809f0d08
Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
...
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2025-05-07 23:34:51 +02:00
Chocapikk
4d0c7bb71a
Add WP SureTriggers ≤1.0.78 admin-creation & RCE module (CVE-2025-3102)
2025-05-07 17:45:30 +02:00
cgranleese-r7
eb88eb5bc1
Merge pull request #20119 from bcoles/rubocop-modules-post-linux
...
modules/post/linux: Resolve RuboCop violations
2025-05-07 13:56:34 +01:00
bcoles
126682d72e
modules/auxiliary/analyze: Resolve RuboCop violations
2025-05-07 21:38:27 +10:00
cgranleese-r7
5127207dc1
Land #20134 , modules/auxiliary/parser: Resolve RuboCop violations
2025-05-07 10:24:59 +01:00
cgranleese-r7
49c041f291
Land #20137 , modules/exploits/unix/dhcp: Resolve RuboCop violations
2025-05-07 09:55:41 +01:00
Spencer McIntyre
b52340440d
Merge pull request #20135 from bcoles/rubocop-modules-auxiliary-voip
...
modules/auxiliary/voip: Resolve RuboCop violations
2025-05-06 13:02:24 -04:00
bcoles
5c4108d7c5
modules/auxiliary/voip: Resolve RuboCop violations
2025-05-07 00:47:05 +10:00
Spencer McIntyre
ba9ecec381
Merge pull request #19952 from jheysel-r7/get_naa_creds_via_relay
...
Add SMB to HTTP relay support for get_naa_creds
2025-05-06 10:43:10 -04:00
Spencer McIntyre
4ed90bb73a
Merge pull request #20136 from bcoles/rubocop-modules-exploits-unix-fileformat
...
modules/exploits/unix/fileformat: Resolve RuboCop violations
2025-05-06 10:22:56 -04:00
bcoles
37c52bb4c7
modules/exploits/unix/dhcp: Resolve RuboCop violations
2025-05-07 00:22:34 +10:00
msutovsky-r7
c431ae830c
Land #20130 , resolves Rubocop violations in auxiliary/client
...
modules/auxiliary/client: Resolve RuboCop violations
2025-05-06 15:36:06 +02:00
bcoles
e5138fcd01
modules/exploits/unix/fileformat: Resolve RuboCop violations
2025-05-06 23:30:37 +10:00
bcoles
6db17f03be
modules/auxiliary/parser: Resolve RuboCop violations
2025-05-06 22:56:58 +10:00
bcoles
fd8343a706
modules/auxiliary/cloud: Resolve RuboCop violations
2025-05-06 22:49:03 +10:00
Martin Sutovsky
24a86cd74a
Refactoring based on comments
2025-05-06 08:43:57 +02:00
msutovsky-r7
2635b8fab4
Land #20124 , adds auxiliary module for path traversal in Sante PACS Server
...
Sante PACS Server Path Traversal (CVE-2025-2264) Module
2025-05-06 08:31:36 +02:00
msutovsky-r7
0cbe2cb6b6
Land #20129 , resolves Rubocop violations in modules/exploits/unix/x11
...
modules/exploits/unix/x11: Resolve RuboCop violations
2025-05-06 08:28:51 +02:00
h4x-x0r
0c2ba466c6
Update pacsserver_traversal.rb
2025-05-06 04:02:33 +01:00
adfoster-r7
355dfdda1f
Merge pull request #20122 from bcoles/rubocop-modules-auxiliary-vsploit
...
modules/auxiliary/vsploit: Resolve RuboCop violations
2025-05-05 22:56:29 +01:00
Spencer McIntyre
ae412f0154
Promote the DOMAIN option
...
LDAP now uses the LDAPDomain option but this module intends to use it
for both LDAP and HTTP so deregister LDAPDomain, and reregister DOMAIN
as a non-advanced, required option.
2025-05-05 11:16:35 -04:00
Spencer McIntyre
d95146e315
Use retry to speed things up but also wait longer
2025-05-05 11:06:09 -04:00
msutovsky-r7
e4d03ad3e0
Land #20125 , removes quotes around constant
...
Modules: Remove quotes surrounding quoted license constant
2025-05-05 08:49:15 +02:00
bcoles
f73e982d23
modules/auxiliary/client: Resolve RuboCop violations
2025-05-04 23:26:52 +10:00
bcoles
127e4c553f
modules/exploits/unix/x11: Resolve RuboCop violations
2025-05-04 16:24:31 +10:00
bcoles
0589879271
modules/auxiliary/bnat: Resolve RuboCop violations
2025-05-04 12:09:08 +10:00
h4x-x0r
832c725b93
Update pacsserver_traversal.rb
2025-05-03 20:36:10 +01:00
bcoles
a99333a9ca
Modules: Remove quotes surrounding quoted license constant
2025-05-03 12:57:40 +10:00
h4x-x0r
60387de6c9
cleanup
...
cleanup
2025-05-02 23:28:29 +01:00
h4x-x0r
514f51d7dc
CVE-2025-2264
...
CVE-2025-2264
2025-05-02 22:56:30 +01:00
jheysel-r7
90417306bb
Merge branch 'master' into add-opnsense-login-scanner
2025-05-02 07:20:01 -07:00