d50ac2972d
Land #14222 , Update php_fpm_rce.rb to replace depreciated URI.encode calls with Rex::Text::uri_encode
2020-11-04 14:04:28 -06:00
79384e85f3
remove old .keep files in non-empty directories
2020-10-24 09:41:55 -04:00
849dbeca5c
Fix up bad merge commit
2020-10-15 11:53:39 -05:00
87104a7236
Update docs and make them msftidy_docs.rb compliant
2020-10-15 10:59:46 -05:00
f2899186e4
Add in first round of initial updates to fix review comments
2020-10-15 10:59:40 -05:00
dcc322436b
Update documentation files and module description to more accurately describe what the cause of the LPE bug for CVE-2019-1458 is. also apply RuboCop edits.
2020-10-15 10:58:58 -05:00
c38064b022
Apply rubocop edits and update documentation
2020-10-15 10:58:38 -05:00
a3772d43d4
set InitialAutoRunScript to post/windows/manage/priv_migrate
2020-10-15 10:58:08 -05:00
12c5f4f916
CVE-2019-1458 chrome sandbox escape initial commit
2020-10-15 10:57:46 -05:00
a2675c13e8
Land #14213 , Add disclosure date rubocop linting rule - enforce iso8601 disclosure dates
2020-10-07 12:09:59 -05:00
2c391e9edc
Fix up last of the module that had incorrect disclosure dates
2020-10-07 12:09:35 -05:00
a1164dbe9e
Update php_fpm_rce.rb
...
URI.encode/URI.escape is obsolete. Replaced with CGI.escape.
2020-10-05 11:57:17 -04:00
15bb690308
fix vulnerability spelling
2020-10-04 13:00:48 -04:00
30809787c4
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
26ff912291
Fix invalid disclosure date formats
2020-10-02 12:20:05 +01:00
33b3d6efcc
Use register_for_cleanup instead of on_new_session for cleanup
2020-09-25 08:11:02 -04:00
5b48bae4b0
Use keep_cookies instead of @cookie variable
2020-09-24 16:36:01 -04:00
45d13bf85e
Simplify shash checks, use cgi request instead of raw, fix ctype header placement
2020-09-24 07:49:55 -04:00
e026c74108
Improve Failure:: categories and remove empty parameters from POST requests
2020-09-23 13:27:19 -04:00
1133f76722
Improve feedback when authentication fails
2020-09-23 07:51:11 -04:00
e65083c092
Add maracms_upload_exec.rb exploit module and docs
2020-09-22 16:53:29 -04:00
149566b30e
Run rubocop
2020-09-02 17:14:30 -05:00
62d3d9bc9a
fix: reverts misuse of in zip_slip exploit
2020-09-01 21:49:55 +01:00
788244150c
Add support for zip generation in zip_slip exploit
2020-08-31 13:18:14 +01:00
f08349982d
Use CheckModule scanner in java_rmi_server exploit
2020-08-24 10:11:03 -05:00
a6f7c0c0de
Backport miscellaneous fixes to my modules
2020-08-14 13:40:23 -05:00
f401f48138
Update vbulletin module with correct CVE
...
Apparently someone snarfed the CVE for this out from under me. Since they were faster
to publish, we should use that number instead of the one out of our block.
2020-08-14 08:25:57 -05:00
24b1235cf7
Whitespace adjustment and remove superfluous return statements
2020-08-12 13:59:25 -04:00
0b1efd0fe9
Update modules/exploits/multi/http/vbulletin_widget_template_rce.rb
...
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com >
2020-08-12 09:33:16 -07:00
e334217636
Fix from bad merge for vbulletin_widget_template_rce module.
2020-08-11 19:09:14 -05:00
8db34ea91b
vBulletin_widget_template_rce merge
2020-08-11 18:40:09 -05:00
3ef01c468f
Ran vBulletin_widget_template_rce through rubocop, cleaned up results.
2020-08-11 18:38:41 -05:00
19618d9bd2
Add CVE-2020-7373 in the references
2020-08-11 14:22:11 -05:00
0dab52ef35
A few last changes from msftidy and msftidy_docs.
2020-08-09 18:25:13 -05:00
661e2a680b
Initial push of exploit and module for vbulletin_widget_template_rce vulnerability.
2020-08-09 17:38:52 -05:00
d2b1d97b62
Land #13940 , Compliance and Typo Edits for baldr_upload_exec
2020-08-06 11:25:31 -05:00
2ca508c08e
Further edits for RuboCop and msftidy_docs.rb compliance
2020-08-06 11:18:39 -05:00
5c6530d9e5
Update module description and documentation to have a better description of what is going on and to also fix further copies of the typos that were pointed out.
2020-08-06 10:50:47 -05:00
41e22992ff
typo and touch-ups to desc
...
typo and touch-ups to desc
2020-08-04 16:59:57 -06:00
9aa26d1208
Merge upstream into 6.x
2020-08-03 11:43:47 -05:00
768d104f12
randomize os, delete payload
2020-07-28 17:19:26 -05:00
99cf54977f
rubocop
2020-07-28 16:48:32 -05:00
c79c9fc280
reverse xor arguments
2020-07-28 16:47:35 -05:00
26f869f860
Update modules/exploits/multi/http/baldr_upload_exec.rb
2020-07-28 11:07:46 +03:00
fb745f78cc
Update modules/exploits/multi/http/baldr_upload_exec.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2020-07-28 10:53:16 +03:00
5d49367726
Update modules/exploits/multi/http/baldr_upload_exec.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2020-07-28 10:52:37 +03:00
fef9a23692
Update modules/exploits/multi/http/baldr_upload_exec.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2020-07-28 10:51:03 +03:00
7985eafda0
Add Baldr Botnet Panel RCE Module
2020-07-24 07:45:43 +03:00
65039a5091
Merge upstream into 6.x
2020-07-15 09:58:07 -05:00
5ec31d2e41
Update recent modules to use prepend
2020-07-01 14:43:15 -05:00
Grant Willcox