 sfewer-r7
|
bf9b3f1d2a
|
add documentation
|
2024-06-10 17:41:55 +01:00 |
|
|
sfewer-r7
|
c6de00968f
|
typo
|
2024-06-10 17:17:39 +01:00 |
|
|
sfewer-r7
|
3a19a54c59
|
remove dead link
|
2024-06-10 17:17:28 +01:00 |
|
|
sfewer-r7
|
998724f683
|
first commit for cve-2024-4577
|
2024-06-07 15:44:05 +01:00 |
|
|
sfewer-r7
|
e325d23526
|
first commit for cve-2024-4577
|
2024-06-07 15:43:40 +01:00 |
|
|
adfoster-r7
|
1281f4726f
|
Land #19209, update fileformat modules to show the default template datastore values
|
2024-05-31 15:12:48 +01:00 |
|
|
Zach Goldman
|
847b29178a
|
change nil guards to default values, nil or blank guards for certain datastore options
|
2024-05-29 09:34:58 -05:00 |
|
|
Jack Heysel
|
6e9e4a5aed
|
Land #19102, Northstar C2 Stored XSS to Agent RCE
Add exploit module for CVE-2024-28741, Northstar C2 Stored XSS to Agent
RCE
|
2024-05-21 14:57:44 -04:00 |
|
|
h00die
|
9ed9ea8c38
|
add event_dependent to northstar_c2
|
2024-04-24 16:54:58 -04:00 |
|
|
h00die
|
dd5a8c629f
|
northstar_c2 adjustments
|
2024-04-24 16:54:02 -04:00 |
|
|
h00die
|
9fb217fb59
|
northstar c2 exploit
|
2024-04-24 16:54:02 -04:00 |
|
|
Zach Goldman
|
d0a714d1e8
|
refactor packet parsing code
|
2024-04-24 15:06:36 -04:00 |
|
|
Zach Goldman
|
488653d942
|
Land #19082, FortiNet FortiClient EMS SQLi to RCE [CVE-2023-48788]
|
2024-04-19 15:03:22 -04:00 |
|
|
Spencer McIntyre
|
727849202d
|
Land #19087, chore: remove repetitive words
|
2024-04-17 09:59:46 -04:00 |
|
|
sjanusz-r7
|
010f044117
|
Add https prefix to module URL references
|
2024-04-17 13:00:41 +01:00 |
|
|
fanqiaojun
|
6b2bdc893b
|
chore: remove repetitive words
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net>
|
2024-04-15 11:06:50 +08:00 |
|
|
Jack Heysel
|
dae9657433
|
FortiClient EMS Exploit Module
|
2024-04-12 10:00:07 -07:00 |
|
|
Noam Rathaus
|
e75043f00e
|
Module indentation was wrong
|
2024-03-30 16:50:48 +03:00 |
|
|
bwatters
|
e58c6b9df2
|
Land #18721, SharePoint Unauth RCE Exploit Chain (CVE-2023-29357 & CVE-2023-24955)
Merge branch 'land-18721' into upstream-master
|
2024-03-26 12:42:22 -05:00 |
|
|
cgranleese-r7
|
9b4114eda0
|
Land #18961, Adds session documentation
|
2024-03-25 11:23:05 +00:00 |
|
|
adfoster-r7
|
decba4350e
|
Additional changes to documentation
|
2024-03-25 10:53:08 +00:00 |
|
|
Spencer McIntyre
|
0f9986c787
|
Land #18947, Fix inconsistent casing
Fix inconsistent casing in windows/local/wmi_persistence
|
2024-03-19 12:40:34 -04:00 |
|
|
cgranleese-r7
|
4e0e3da74c
|
Land #18835, clean up code duplication
|
2024-03-12 14:09:22 +00:00 |
|
|
Adrian Șendroiu
|
2007e6d8fb
|
Fix inconsistent casing in windows/local/wmi_persistence
|
2024-03-12 12:17:46 +02:00 |
|
|
Zach Goldman
|
7ce91df66e
|
clean up code duplication
|
2024-03-11 09:09:46 -05:00 |
|
|
Christophe De La Fuente
|
1e8e6d3bc4
|
Land #18796, Enhance ManageEngine Endpoint Central and ServiceDesk Plus CVE-2022-47966
|
2024-03-04 20:35:22 +01:00 |
|
|
sjanusz-r7
|
3c8f43e23e
|
Align SQL sessions peerhost and peerport
|
2024-03-04 13:11:32 +00:00 |
|
|
sjanusz-r7
|
b423241e6b
|
Use Rex Post MySQL Client for lib, specs & modules
|
2024-02-28 18:19:50 +00:00 |
|
|
errorxyz
|
97513d473f
|
Update manageengine_endpoint_central and servicedesk_plus default payloads
|
2024-02-23 00:00:18 +05:30 |
|
|
cgranleese-r7
|
d52220cccb
|
Fixes the create session datastore option from appearing for payloads
|
2024-02-22 14:58:41 +00:00 |
|
|
Gaurav Jain
|
b2cb102c9b
|
Merge branch 'rapid7:master' into manageengine
|
2024-02-22 17:20:28 +05:30 |
|
|
cgranleese-r7
|
de17261926
|
Removes session types from module with session type mixin
|
2024-02-19 10:34:16 +00:00 |
|
|
Jack Heysel
|
4e4303c274
|
Fixed backup_bdc_metadata initialization
|
2024-02-15 09:26:54 -05:00 |
|
|
Dean Welch
|
fa5c4c0193
|
lowercase session types
|
2024-02-14 15:45:34 +00:00 |
|
|
Dean Welch
|
0d4e1ed755
|
Use mssql option session mixin with mssql modules
|
2024-02-14 15:37:11 +00:00 |
|
|
Dean Welch
|
587a8690a1
|
Use individual session mixins
|
2024-02-14 15:37:11 +00:00 |
|
|
Dean Welch
|
08872d0211
|
Add session type to info hash in the mixin
|
2024-02-14 15:37:11 +00:00 |
|
|
Dean Welch
|
0f319bdfb9
|
Extract SMB and PostgreSQL optional sessions into their own mixins
|
2024-02-14 15:37:11 +00:00 |
|
|
adfoster-r7
|
1794a5fbee
|
Land #18763, Mssql session modules
|
2024-02-14 10:54:04 +00:00 |
|
|
Zach Goldman
|
d18520adc6
|
update rhost and rport calls
|
2024-02-13 13:00:38 -06:00 |
|
|
Zach Goldman
|
c05c6773df
|
adjust session logic in modules
|
2024-02-13 11:59:09 -06:00 |
|
|
Spencer McIntyre
|
202db99004
|
Land #18801, Fix revision number checks
Fix revision number checks in cve_2022_26904_superprofile.rb
|
2024-02-12 15:52:16 -05:00 |
|
|
Spencer McIntyre
|
45365c8666
|
Land #18800, Fix revision number checks
Fix revision number checks for cve_2021_40449.rb
|
2024-02-12 15:19:56 -05:00 |
|
|
Spencer McIntyre
|
ce0498377d
|
Land #18798, fix version checks
windows/local/cve_2020_0787_bits_arbitrary_file_move (and similar) fails due to incorrect revision_number checks
|
2024-02-12 15:11:07 -05:00 |
|
|
Spencer McIntyre
|
8eb5aa6aa6
|
Land #18799, Fix revision number checks
Fix revision number checks for cve_2020_17136.rb
|
2024-02-12 15:01:45 -05:00 |
|
|
Zach Goldman
|
94223f05fc
|
update relevant modules to work with sessions
separate out optional session logic
fixing session handling
|
2024-02-09 13:18:49 -06:00 |
|
|
sjanusz-r7
|
30fc29e0f5
|
Use PostgreSQL session type for modules
|
2024-02-09 15:38:06 +00:00 |
|
|
Gaurav Jain
|
184ed3a162
|
Add suggested changes
|
2024-02-09 02:22:20 +05:30 |
|
|
Gaurav Jain
|
4dc21bae45
|
Merge branch 'rapid7:master' into manageengine
|
2024-02-08 15:11:15 +05:30 |
|
|
Gaurav Jain
|
25804edbf4
|
Add java targets for manageengine cve-2022-47966 modules
|
2024-02-08 01:55:52 +05:30 |
|