83de041894
Land #12243 , cisco_ucs_rce exploit
2019-08-30 13:35:29 -05:00
b0b72892be
Deprecate/delete cisco_rv130_rmi_rce by alias
2019-08-30 12:03:43 -05:00
49b3af3870
Merge remote-tracking branch 'upstream/master' into pr/12133
2019-08-30 12:01:48 -05:00
40b0d02f39
make some adjustments
2019-08-29 19:49:37 +07:00
c88ce55013
Add github link
2019-08-28 11:08:35 +07:00
d6f47fd03a
s/Directory/Director
2019-08-28 10:58:41 +07:00
1aad95f7c4
Add exploit for Cisco UCS RCE
2019-08-28 10:55:49 +07:00
8aa00d97aa
Add new moved_from to moved module
2019-08-22 17:58:20 -05:00
901943c90f
Move Ubiquiti AirOS exploit from SSH to HTTP
2019-08-22 17:58:20 -05:00
32334c2386
Update all module splats from http:// to https://
2019-08-15 18:10:44 -05:00
f317987e02
Land #12175 , hadoop_unauth_exec NoMethodError fix
2019-08-07 22:44:55 -05:00
b5fd9b4fed
Fix whitespace
2019-08-07 22:44:38 -05:00
6cf0ff0678
Fix #12156 , NoMethodError in hadoop exploit.
2019-08-08 10:06:40 +08:00
cf9b94a964
Set needs_cleanup flag for exploits that need it
...
The `needs_cleanup` flag needs to be set per-module when an exploit
needs an interactive session to clean up. Some `FileDropper` exploits
need additional cleanup to what the mixin provides, but since all
`FileDropper`s already mark themselves as needing cleanup those are not
covered here. A few of these could potentially be refactored to use the
original exploitation method to clean up or to compile the list of
files/commands to clean up ahead of time, but that is out of the scope
of this fix.
2019-08-02 10:23:53 -05:00
8085ad3046
Set default payload based on chosen target.
2019-08-02 10:47:28 +02:00
610bed8fd9
&& is preferred over and.
2019-08-02 10:41:14 +02:00
34c5277e4e
Deprecate module.
2019-07-27 10:49:59 +02:00
413da527ab
Module renaming.
2019-07-27 10:47:58 +02:00
18f7ae379b
Add support for RV110W and RV215W + check method to fingerprint devices.
2019-07-27 10:45:31 +02:00
0a00f3851a
Land #12007 , true 0s timeout in send_request_*
2019-06-28 12:32:32 -05:00
cc3fd747aa
Add Pen Test Partners reference
...
Did we somehow miss this?
2019-06-26 11:05:22 -05:00
685fb55179
Land #11987 , Add Nagios XI 5.5.6 magpie_debug Root Exploit
2019-06-25 16:17:50 -05:00
23dbc4d90d
Change file name
2019-06-25 16:10:44 -05:00
e9fc9970ba
Make names more random. Also, make metadata changes
2019-06-25 16:09:15 -05:00
7739e9f43e
Update my modules
2019-06-24 13:38:14 -05:00
c637755ebd
Land #11956 - Add Cisco Prime Infrastructure Health Monitor Tar RCE
2019-06-19 10:46:35 -05:00
ddf7eadeee
modified version check
2019-06-19 08:31:48 -05:00
384cfc7db5
update checkcode
2019-06-18 15:58:57 -05:00
d4d2eab770
removed some whitespace, added a check
2019-06-17 15:29:08 -05:00
a5020b8f30
Fix spaces at EOL
2019-06-17 13:16:56 +03:00
b5e34cb783
Converting version check request to vars_get
...
We also need to add the "testing = 1" cookie to the login request. Otherwise, the browser displays a No-Cookie error.
2019-06-17 10:46:46 +03:00
e13456ce0d
Add root to the filename
2019-06-16 23:32:57 +01:00
17f686a87d
Adding module documentation
2019-06-16 18:27:01 -04:00
8faa138289
Change targets and default http delay
2019-06-16 23:13:45 +01:00
3d463a1e20
Adding correction of Check and Payload definitions
2019-06-16 17:58:31 -04:00
863beaea92
First commit for module Nagios XI RCE
2019-06-16 22:10:32 +01:00
414c614b55
CVE-2019-12840 - Add Webmin 1.910 RCE Module
2019-06-16 11:26:00 -04:00
d74881a3c0
Update based on bcole's feedback
2019-06-10 12:12:49 -05:00
6693e3e347
add cve to trueonline v2
2019-06-08 17:41:04 +07:00
903ea5ebce
add cve to p660hn v1
2019-06-08 17:38:44 +07:00
c763f84348
add cve to billion module
2019-06-08 17:37:05 +07:00
4d6d06c9f9
Update disclosure date
2019-06-07 15:59:59 -05:00
2053513dc5
Minotr update for cpi_tararchive_upload
2019-06-07 13:12:14 -05:00
69492d2a25
Add Cisco Prime Infrastructure Health Monitor TarArchive Exploit
2019-06-07 03:08:57 -05:00
c93c65cef5
Update date format
2019-06-04 12:24:00 -05:00
c2786eb87c
made suggested changes
2019-05-30 14:09:40 -05:00
74812ffe4d
Update modules/exploits/linux/http/librenms_addhost_cmd_inject.rb
...
Co-Authored-By: @shellfail <jrobles@rapid7.com >
2019-05-30 10:52:34 -05:00
8c11a1c95a
Update modules/exploits/linux/http/librenms_addhost_cmd_inject.rb
...
Co-Authored-By: @shellfail <jrobles@rapid7.com >
2019-05-30 10:51:57 -05:00
590b9748c1
changed file name and documentation
2019-05-29 18:30:39 -05:00
6606e1fed4
Update modules/exploits/linux/http/librenms_cmd_injection.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-05-29 18:00:59 -05:00
William Vu