Commit Graph

37979 Commits

Author SHA1 Message Date
Brendan cb6495e5bc Merge pull request #20146 from Chocapikk/wp_suretriggers_auth_bypass
Add WP SureTriggers ≤1.0.78 admin-creation & RCE module (CVE-2025-3102)
2025-05-13 10:53:44 -05:00
Brendan 5faa0a5b6b Merge pull request #19777 from msutovsky-r7/linqpad_deserialization
Linqpad deserialization persistence
2025-05-13 08:03:30 -05:00
Diego Ledda 619a284408 Land #20156, modules/post: Resolve RuboCop violations and typos
Land #20156, modules/post: Resolve RuboCop violations and typos
2025-05-13 12:24:41 +02:00
bcoles 81a405355c modules/post: Resolve RuboCop violations and typos 2025-05-13 09:23:28 +10:00
adfoster-r7 0b0132c11a Update web crawlers to support HTTP logging 2025-05-12 17:46:20 +01:00
Spencer McIntyre 9363dc4759 Merge pull request #20143 from bcoles/rubocop-modules-auxiliary-analyze
modules/auxiliary/analyze: Resolve RuboCop violations
2025-05-12 10:05:17 -04:00
msutovsky-r7 cbb4934882 Land #20133, resolves Rubocop violations for modules/auxiliary/cloud
modules/auxiliary/cloud: Resolve RuboCop violations
2025-05-12 12:30:14 +02:00
msutovsky-r7 8c647cd1ad Land #20118, changes target option for smb_to_ldap module
Fix the smb_to_ldap module's missing target option
2025-05-12 09:56:06 +02:00
Chocapikk 40002f87f4 Apply suggestion to store created WordPress admin creds 2025-05-11 17:53:06 +02:00
Valentin Lobstein 604672433a Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2025-05-11 17:19:12 +02:00
Valentin Lobstein ca6e413bea Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2025-05-11 17:18:51 +02:00
Valentin Lobstein 04915c8c95 Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2025-05-11 17:18:37 +02:00
Valentin Lobstein 5c8013ad92 Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2025-05-11 17:18:29 +02:00
Spencer McIntyre db75455d2b Merge pull request #20128 from bcoles/rubocop-modules-auxiliary-bnat
modules/auxiliary/bnat: Resolve RuboCop violations
2025-05-09 10:02:49 -04:00
Spencer McIntyre 9ee2ec861f Merge pull request #20120 from bcoles/rubocop-modules-post-windows
modules/post/windows: Resolve RuboCop violations
2025-05-09 09:33:17 -04:00
bcoles 45336dd612 modules/post/windows: Resolve RuboCop violations 2025-05-09 10:51:17 +10:00
Chocapikk 21a9fa848c Add credits 2025-05-07 23:59:06 +02:00
Chocapikk 879027bd5a Update 2025-05-07 23:50:20 +02:00
Valentin Lobstein 2e9d7db238 Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
2025-05-07 23:34:58 +02:00
Valentin Lobstein 23809f0d08 Update modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
2025-05-07 23:34:51 +02:00
Chocapikk 4d0c7bb71a Add WP SureTriggers ≤1.0.78 admin-creation & RCE module (CVE-2025-3102) 2025-05-07 17:45:30 +02:00
cgranleese-r7 eb88eb5bc1 Merge pull request #20119 from bcoles/rubocop-modules-post-linux
modules/post/linux: Resolve RuboCop violations
2025-05-07 13:56:34 +01:00
bcoles 126682d72e modules/auxiliary/analyze: Resolve RuboCop violations 2025-05-07 21:38:27 +10:00
cgranleese-r7 5127207dc1 Land #20134, modules/auxiliary/parser: Resolve RuboCop violations 2025-05-07 10:24:59 +01:00
cgranleese-r7 49c041f291 Land #20137, modules/exploits/unix/dhcp: Resolve RuboCop violations 2025-05-07 09:55:41 +01:00
Spencer McIntyre b52340440d Merge pull request #20135 from bcoles/rubocop-modules-auxiliary-voip
modules/auxiliary/voip: Resolve RuboCop violations
2025-05-06 13:02:24 -04:00
bcoles 5c4108d7c5 modules/auxiliary/voip: Resolve RuboCop violations 2025-05-07 00:47:05 +10:00
Spencer McIntyre ba9ecec381 Merge pull request #19952 from jheysel-r7/get_naa_creds_via_relay
Add SMB to HTTP relay support for get_naa_creds
2025-05-06 10:43:10 -04:00
Spencer McIntyre 4ed90bb73a Merge pull request #20136 from bcoles/rubocop-modules-exploits-unix-fileformat
modules/exploits/unix/fileformat: Resolve RuboCop violations
2025-05-06 10:22:56 -04:00
bcoles 37c52bb4c7 modules/exploits/unix/dhcp: Resolve RuboCop violations 2025-05-07 00:22:34 +10:00
msutovsky-r7 c431ae830c Land #20130, resolves Rubocop violations in auxiliary/client
modules/auxiliary/client: Resolve RuboCop violations
2025-05-06 15:36:06 +02:00
bcoles e5138fcd01 modules/exploits/unix/fileformat: Resolve RuboCop violations 2025-05-06 23:30:37 +10:00
bcoles 6db17f03be modules/auxiliary/parser: Resolve RuboCop violations 2025-05-06 22:56:58 +10:00
bcoles fd8343a706 modules/auxiliary/cloud: Resolve RuboCop violations 2025-05-06 22:49:03 +10:00
Martin Sutovsky 24a86cd74a Refactoring based on comments 2025-05-06 08:43:57 +02:00
msutovsky-r7 2635b8fab4 Land #20124, adds auxiliary module for path traversal in Sante PACS Server
Sante PACS Server Path Traversal (CVE-2025-2264) Module
2025-05-06 08:31:36 +02:00
msutovsky-r7 0cbe2cb6b6 Land #20129, resolves Rubocop violations in modules/exploits/unix/x11
modules/exploits/unix/x11: Resolve RuboCop violations
2025-05-06 08:28:51 +02:00
h4x-x0r 0c2ba466c6 Update pacsserver_traversal.rb 2025-05-06 04:02:33 +01:00
adfoster-r7 355dfdda1f Merge pull request #20122 from bcoles/rubocop-modules-auxiliary-vsploit
modules/auxiliary/vsploit: Resolve RuboCop violations
2025-05-05 22:56:29 +01:00
Spencer McIntyre ae412f0154 Promote the DOMAIN option
LDAP now uses the LDAPDomain option but this module intends to use it
for both LDAP and HTTP so deregister LDAPDomain, and reregister DOMAIN
as a non-advanced, required option.
2025-05-05 11:16:35 -04:00
Spencer McIntyre d95146e315 Use retry to speed things up but also wait longer 2025-05-05 11:06:09 -04:00
msutovsky-r7 e4d03ad3e0 Land #20125, removes quotes around constant
Modules: Remove quotes surrounding quoted license constant
2025-05-05 08:49:15 +02:00
bcoles f73e982d23 modules/auxiliary/client: Resolve RuboCop violations 2025-05-04 23:26:52 +10:00
bcoles 127e4c553f modules/exploits/unix/x11: Resolve RuboCop violations 2025-05-04 16:24:31 +10:00
bcoles 0589879271 modules/auxiliary/bnat: Resolve RuboCop violations 2025-05-04 12:09:08 +10:00
h4x-x0r 832c725b93 Update pacsserver_traversal.rb 2025-05-03 20:36:10 +01:00
bcoles a99333a9ca Modules: Remove quotes surrounding quoted license constant 2025-05-03 12:57:40 +10:00
h4x-x0r 60387de6c9 cleanup
cleanup
2025-05-02 23:28:29 +01:00
h4x-x0r 514f51d7dc CVE-2025-2264
CVE-2025-2264
2025-05-02 22:56:30 +01:00
jheysel-r7 90417306bb Merge branch 'master' into add-opnsense-login-scanner 2025-05-02 07:20:01 -07:00