 Takah1ro
|
edcc30699a
|
Make user be able to specify a particular endpoint
|
2025-04-16 21:47:31 +09:00 |
|
|
Takahiro Yokoyama
|
8dc4beba7f
|
Update documentation/modules/exploit/linux/http/bentoml_rce_cve_2025_27520.md
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
|
2025-04-16 20:48:34 +09:00 |
|
|
Takah1ro
|
a33a8d91fe
|
Update the document
|
2025-04-16 12:52:15 +09:00 |
|
|
Takah1ro
|
e51cd24383
|
Add BentoML RCE module (CVE-2025-27520)
|
2025-04-15 22:46:42 +09:00 |
|
|
msutovsky-r7
|
fe9a0ad25b
|
Land #20008, PandoraFMS Auth RCE module
Pandora FMS authenticated RCE [CVE-2024-12971]
|
2025-04-08 07:50:28 +02:00 |
|
|
h00die-gr3y
|
76fb34a5db
|
small update in description of the module and documentation
|
2025-04-06 10:49:03 +00:00 |
|
|
h00die-gr3y
|
8a72fd6861
|
init module and documentation
|
2025-04-06 10:33:56 +00:00 |
|
|
Takah1ro
|
139dd50333
|
Add Appsmith RCE module (CVE-2024-55964)
|
2025-04-05 14:56:04 +09:00 |
|
|
jheysel-r7
|
08e227faca
|
Merge pull request #19934 from sfewer-r7/bugfix-cisco-iosxe-rce
Improve exploit/linux/misc/cisco_ios_xe_rce (CVE-2023-20198 + CVE-2023-20273)
|
2025-03-27 16:51:16 -07:00 |
|
|
Spencer McIntyre
|
bf1f919d9f
|
Merge pull request #19957 from msutovsky-r7/auxmodule-eramba-update
Auxmodule eramba update
|
2025-03-25 13:54:24 -04:00 |
|
|
Martin Sutovsky
|
d922976ea4
|
Adding more clear installation steps
|
2025-03-20 19:54:57 +01:00 |
|
|
Martin Sutovsky
|
df027f3fdd
|
Update documentation, adding more precise check, removing unnecessary characters
|
2025-03-20 15:18:55 +01:00 |
|
|
Martin Sutovsky
|
9886f78575
|
Upgrade Eramba RCE module
|
2025-03-13 12:34:50 +01:00 |
|
|
h00die-gr3y
|
e341398871
|
small update on module and documentation
|
2025-03-10 19:35:37 +00:00 |
|
|
H00die.Gr3y
|
44bdc5b44f
|
Update documentation/modules/exploit/linux/http/invoiceshelf_unauth_rce_cve_2024_55556.md
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
|
2025-03-10 19:29:12 +01:00 |
|
|
h00die-gr3y
|
281b728000
|
initial module and documentation
|
2025-03-07 17:34:22 +00:00 |
|
|
sfewer-r7
|
efb0d5da4c
|
fix typo, C1000v should be CSR1000v. Be consistant with IOS XE and not IOS-XE.
|
2025-03-04 09:09:32 +00:00 |
|
|
sfewer-r7
|
edd36a8182
|
update the docs for exploit/linux/misc/cisco_ios_xe_rce after retesting the changes
|
2025-03-03 20:39:53 +00:00 |
|
|
sfewer-r7
|
e71a851e3f
|
mention that the C8000v series appliance version 17.6.5 was observed to not be vulnerable to CVE-2023-20273. Inspecting the Lua code shows this appliance has additional command injection filtering in place (see pexec_setsid in /usr/binos/openresty/nginx/conf/pexec.lua) which prevents the injection from working
|
2025-03-03 20:22:46 +00:00 |
|
|
msutovsky-r7
|
3c4d0aae2f
|
Land #19899, D-Tale remote code execution module
Add D-Tale RCE module (CVE-2024-3408, CVE-2025-0655)
|
2025-03-03 13:04:45 +01:00 |
|
|
Takah1ro
|
47351e4959
|
Use FETCH_DELETE as default
|
2025-03-03 20:52:55 +09:00 |
|
|
Takah1ro
|
65d2b6380b
|
Update vulnerable version
|
2025-03-02 12:14:25 +09:00 |
|
|
Takah1ro
|
77c3ce52e0
|
Improve:
* Support the prior to 3.13.0 versions
* CVE-2024-3408 bypass for authentication
|
2025-03-01 11:58:28 +09:00 |
|
|
Diego Ledda
|
8dd032e529
|
Land #19897, Invoice Ninja unauthenticated RCE (CVE-2024-55555) and Laravel Crypto Killer mixin
Land #19897, Invoice Ninja unauthenticated RCE (CVE-2024-55555) and Laravel Crypto Killer mixin
|
2025-02-25 13:14:18 +01:00 |
|
|
Diego Ledda
|
1c27e2a958
|
docs: update docs for rubocop
|
2025-02-25 12:15:52 +01:00 |
|
|
H00die.Gr3y
|
2d55f5c16e
|
Update documentation/modules/exploit/linux/http/invoiceninja_unauth_rce_cve_2024_55555.md
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2025-02-24 15:51:06 +01:00 |
|
|
h00die-gr3y
|
41e690445e
|
simplified some code sections
|
2025-02-23 12:59:52 +00:00 |
|
|
h00die-gr3y
|
ece33ee8ec
|
added documentation
|
2025-02-23 09:54:26 +00:00 |
|
|
Takah1ro
|
4d4b88c94e
|
Add D-Tale unauth RCE module (CVE-2025-0655)
|
2025-02-23 09:33:42 +09:00 |
|
|
h00die-gr3y
|
215957465c
|
added default options and updated documentation
|
2025-02-20 13:19:41 -06:00 |
|
|
h00die-gr3y
|
15c20272ea
|
removed linux dropper code and tested with PR 19850
|
2025-02-20 13:19:41 -06:00 |
|
|
h00die-gr3y
|
fcc929e228
|
updated documentation with Linux Dropper (x86_64) target scenario
|
2025-02-20 13:19:41 -06:00 |
|
|
h00die-gr3y
|
f857e5fe67
|
fixed code review and updated documentation
|
2025-02-20 13:19:41 -06:00 |
|
|
h00die-gr3y
|
682be79920
|
first release module and documentation
|
2025-02-20 13:19:41 -06:00 |
|
|
Martin Sutovsky
|
bd42b23ef0
|
Land #19883, module for unauthenticated RCE in InvokeAI
|
2025-02-18 14:01:11 +01:00 |
|
|
msutovsky-r7
|
05c9550d43
|
Land #19877, BeyondTrust Privileged Remote Access & Remote Support RCE Module
Exploit module for BeyondTrust Privileged Remote Access & Remote Support (CVE-2024-12356, CVE-2025-1094)
|
2025-02-17 17:43:15 +01:00 |
|
|
Takah1ro
|
611556571f
|
Update document
|
2025-02-17 20:32:43 +09:00 |
|
|
Takah1ro
|
b454a32f3c
|
Fix typo and update document
|
2025-02-17 12:52:50 +09:00 |
|
|
Takah1ro
|
0945fbba81
|
Add InvokeAI unauth RCE module (CVE-2024-12029)
|
2025-02-16 15:49:56 +09:00 |
|
|
sfewer-r7
|
d93a99c504
|
rename the module
|
2025-02-13 12:51:46 +00:00 |
|
|
sfewer-r7
|
37276446a6
|
improve the description for this option
|
2025-02-12 17:22:43 +00:00 |
|
|
sfewer-r7
|
c9be9b65ec
|
fix typos in docs
|
2025-02-12 17:22:17 +00:00 |
|
|
Takah1ro
|
9f43fcc7ad
|
Update FETCH_COMMAND default to curl
|
2025-02-10 22:00:52 +09:00 |
|
|
Takah1ro
|
8d59201447
|
Update document
|
2025-02-10 21:38:14 +09:00 |
|
|
Takah1ro
|
7149d3f332
|
Leave cleanup as an option
|
2025-02-10 21:31:50 +09:00 |
|
|
Takah1ro
|
b02838a8dd
|
NetAlertx -> NetAlertX
|
2025-02-10 12:52:26 +09:00 |
|
|
Takah1ro
|
00f4f80530
|
Add NetAlertx rce module (CVE-2024-46506)
|
2025-02-08 14:40:31 +09:00 |
|
|
sfewer-r7
|
c6d03069a9
|
add in the documentation
|
2025-01-31 11:02:01 +00:00 |
|
|
Martin Sutovsky
|
34f3957aea
|
Land #19772, adding module for CraftCMS FTP template exploit
|
2025-01-23 20:21:17 +01:00 |
|
|
Takah1ro
|
54bd55b186
|
Update vulnerable version
|
2025-01-18 10:18:10 +09:00 |
|