 h00die
|
da70b74954
|
fix version numbers
|
2020-11-08 22:38:53 -05:00 |
|
|
h00die
|
3c4962e9b0
|
working and clean
|
2020-11-08 22:31:26 -05:00 |
|
|
Brendan Coles
|
6258d5b561
|
Land #14296, Move mercury_login module docs to documentation directory
|
2020-10-22 13:24:54 +00:00 |
|
|
h00die
|
5890bc45b5
|
move docs out of exploits folder
|
2020-10-21 16:37:02 -04:00 |
|
|
William Vu
|
e4fb76d74f
|
Add version check to exchange_ecp_dlp_policy
And update modules/exploits/windows/http/sharepoint_ssi_viewstate.rb.
|
2020-10-20 14:32:43 -05:00 |
|
|
William Vu
|
3970b69734
|
Land #14229, Telerik UI for ASP.NET AJAX exploit
CVE-2017-11317 && CVE-2019-18935
|
2020-10-20 13:24:35 -05:00 |
|
|
bwatters
|
1e568a6d1b
|
Merge branch 'land-14179' into upstream-master
|
2020-10-19 15:55:25 -05:00 |
|
|
William Vu
|
253928570b
|
Update module doc
|
2020-10-19 11:18:00 -05:00 |
|
|
Spencer McIntyre
|
0f344b0661
|
Land #14265, Add SharePoint Server-Side Include (SSI) and ViewState RCE (CVE-2020-16952)
|
2020-10-19 10:27:58 -04:00 |
|
|
William Vu
|
4cb08f7426
|
Address outstanding issues
|
2020-10-15 13:24:08 -05:00 |
|
|
Tim W
|
87104a7236
|
Update docs and make them msftidy_docs.rb compliant
|
2020-10-15 10:59:46 -05:00 |
|
|
Grant Willcox
|
59f74438da
|
Rename the LPE exploit to a more appropriate name since their could be future bugs in NtUserMessageCall and also update the description info a bit more
|
2020-10-15 10:59:44 -05:00 |
|
|
Grant Willcox
|
f2899186e4
|
Add in first round of initial updates to fix review comments
|
2020-10-15 10:59:40 -05:00 |
|
|
Tim W
|
dcc322436b
|
Update documentation files and module description to more accurately describe what the cause of the LPE bug for CVE-2019-1458 is. also apply RuboCop edits.
|
2020-10-15 10:58:58 -05:00 |
|
|
Tim W
|
00d209425b
|
add documentation
|
2020-10-15 10:58:08 -05:00 |
|
|
William Vu
|
1a341ae931
|
Add SharePoint SSI and ViewState RCE
CVE-2020-16952
|
2020-10-14 17:45:15 -05:00 |
|
|
youkergav
|
263b6bc070
|
Merge branch 'master' of github.com:rapid7/metasploit-framework into su_login
|
2020-10-09 05:26:48 -04:00 |
|
|
youkergav
|
23c6c415eb
|
Added python alternative and check function
|
2020-10-09 03:58:55 -04:00 |
|
|
Spencer McIntyre
|
fb569a24ee
|
Add module documentation for Telerik RAU Deserialization
|
2020-10-07 13:40:10 -04:00 |
|
|
bwatters
|
3a6293357e
|
Land #14190, Add the DOMAIN option to the CVE-2020-0688 Exploit
Merge branch 'land-14190' into upstream-master
|
2020-10-05 12:12:21 -05:00 |
|
|
h00die
|
15bb690308
|
fix vulnerability spelling
|
2020-10-04 13:00:48 -04:00 |
|
|
bwatters
|
e24a81919a
|
Land #13996, Add module for CVE-2020-9801, CVE-2020-9850 and CVE-2020-9856,
RCE for Safari on macOS 10.15.3 (pwn2own2020)
Merge branch 'land-13996' into upstream-master
|
2020-10-01 09:46:39 -05:00 |
|
|
bwatters
|
3aeeede4a6
|
Land #14187, Added CVE-2020-3433 module
Merge branch 'land-14187' into upstream-master
|
2020-09-29 13:41:33 -05:00 |
|
|
youkergav
|
0bceead907
|
Merge branch 'master' of github.com:rapid7/metasploit-framework into su_login
|
2020-09-29 01:53:50 -04:00 |
|
|
Spencer McIntyre
|
e7d2b73600
|
Add a DOMAIN option to CVE-2020-0688 for consistency with other modules
|
2020-09-28 09:24:39 -04:00 |
|
|
youkergav
|
38fb644169
|
Architecture updates; base64 password; compliance
|
2020-09-25 23:58:48 -04:00 |
|
|
Shelby Pace
|
f0f4da2b1e
|
Land #14157, Windows update orchestrator privesc
|
2020-09-25 16:07:27 -05:00 |
|
|
Antoine GOICHOT
|
fef88f27eb
|
Added CVE-2020-3433 module
|
2020-09-25 23:04:58 +02:00 |
|
|
Shelby Pace
|
2111865acf
|
remove stray backtick
|
2020-09-25 16:04:46 -05:00 |
|
|
bwatters
|
2ed72007e0
|
Typos and cleanup
|
2020-09-25 12:27:55 -05:00 |
|
|
youkergav
|
17483f838e
|
Bug fixes per requests
|
2020-09-25 00:01:52 -04:00 |
|
|
youkergav
|
49a5dfc139
|
Spelling and grammer fixes
|
2020-09-24 03:29:07 -04:00 |
|
|
youkergav
|
35dd9cb517
|
Add Login to User with Su on Linux / Unix Systems
|
2020-09-24 02:36:26 -04:00 |
|
|
kalba-security
|
e65083c092
|
Add maracms_upload_exec.rb exploit module and docs
|
2020-09-22 16:53:29 -04:00 |
|
|
bwatters
|
6cf3c0491f
|
Add documentation
|
2020-09-22 12:16:29 -05:00 |
|
|
Christophe De La Fuente
|
2d1b378a18
|
Land #14122, Jenkins Deserialization RCE (CVE-2017-1000353)
|
2020-09-22 12:32:09 +02:00 |
|
|
Shelby Pace
|
2ae50e9304
|
Land #14025, add Artica Proxy auth bypass / rce
|
2020-09-21 15:27:53 -05:00 |
|
|
h00die
|
ee77cc8e78
|
Land #14123, vyos restricted shell escape and priv escalation
|
2020-09-19 09:13:38 -04:00 |
|
|
Brendan Coles
|
6208f8795a
|
vyos_restricted_shell_privesc: support login as admin user
|
2020-09-18 15:49:25 +00:00 |
|
|
Shelby Pace
|
74669f4052
|
Land #14135, add tp-link command injection
|
2020-09-18 09:47:02 -05:00 |
|
|
Shelby Pace
|
f4bfad0439
|
msftidy_docs changes
|
2020-09-18 09:42:14 -05:00 |
|
|
Pietro Oliva
|
5f204257a5
|
Remove unnecessary comma, fix docs
|
2020-09-18 10:15:23 -04:00 |
|
|
Pietro Oliva
|
d3f68d0fe4
|
Fix double shell issue
|
2020-09-18 09:23:02 -04:00 |
|
|
Shelby Pace
|
c04e8d73c3
|
Land #14023, spooler svc privesc (PrinterDemon)
|
2020-09-17 16:06:29 -05:00 |
|
|
Shelby Pace
|
510d119579
|
add steps for producing serialized object
|
2020-09-17 13:58:48 -05:00 |
|
|
Shelby Pace
|
f5f010a1b0
|
Update documentation/modules/exploit/linux/http/jenkins_cli_deserialization.md
Co-authored-by: cdelafuente-r7 <56716719+cdelafuente-r7@users.noreply.github.com>
|
2020-09-17 09:11:43 -05:00 |
|
|
Pietro Oliva
|
072f35c270
|
-Updated module to work using CmdStager
-Updated documentation accordingly
-Removed unnecessary includes and simplified code
|
2020-09-16 19:51:15 -04:00 |
|
|
Spencer McIntyre
|
c2d101a06b
|
Land #14126, Add Microsoft Exchange Server DLP Policy RCE (CVE-2020-16875)
|
2020-09-16 16:31:13 -04:00 |
|
|
William Vu
|
03e0b9098c
|
Add more words about Exchange role groups
|
2020-09-16 12:55:08 -05:00 |
|
|
bwatters
|
198f3905ae
|
Logic errors and typos
|
2020-09-16 11:17:39 -05:00 |
|