Commit Graph

24374 Commits

Author SHA1 Message Date
Matthew Kienow dac5780feb Land #10176, creds data service CRUD operations 2018-07-23 23:36:32 -04:00
Brent Cook 5d7f40d459 Land #10362, Fix reporting in backup_file, add more docs 2018-07-23 18:22:35 -05:00
James Barnett e3da0a6828 Merge branch 'master' into remote_creds_data 2018-07-23 16:39:13 -05:00
Adam Cammack d2ed78570a Land #10364, Handle nil for shell_reverse_tcp_ipv6
This makes things like `msfvenom --list-options` or `info` when options
are not set work.
2018-07-23 14:02:14 -05:00
William Vu 086af80509 Specify address family in shell_reverse_tcp_ipv6 2018-07-23 13:39:40 -05:00
asoto-r7 cb0b90435d Land #10349, deconflict the method names in mix-ins 2018-07-23 13:38:46 -05:00
h00die 83ae5cb14d fix backup_file.rb and add a few docs 2018-07-22 20:50:22 -04:00
bwatters-r7 0c906ed8d3 Update cached payload sizes 2018-07-19 17:58:45 -05:00
bwatters-r7 658267849b deconflict the method names in mix-ins 2018-07-19 17:01:40 -05:00
James Barnett 65d42380d3 Merge branch 'master' into remote_creds_data 2018-07-19 16:25:06 -05:00
Brendan Coles 19239c72c0 Update cmsms_upload_rename_rce check and docs 2018-07-19 18:26:42 +00:00
Wei Chen 28e3f3a5f0 Land #10327, Add CMS Made Simple Upload/Rename Authenticated RCE 2018-07-19 12:18:12 -05:00
Wei Chen c5ac4c791f Make changes based on community feedback 2018-07-19 12:17:02 -05:00
Brent Cook 08290b81c0 Land #10282, Add support for running external modules outside of msfconsole 2018-07-18 17:38:40 -05:00
Brent Cook b90583d07c don't throw an exception in haraka checks if we cannot connect 2018-07-18 17:17:45 -05:00
Adam Cammack 0024cca3bf Land #10328, Log errors in Python ETERNALBLUE 2018-07-18 14:50:40 -05:00
Tim W 70a1df70a1 Land #9753, Linux BPF sign extension local privesc 2018-07-18 18:44:14 +08:00
Jacob Robles 08e33cad0c Spelling fix 2018-07-17 20:12:37 -05:00
William Vu e5efa4faac Make failures consistent 2018-07-17 17:35:52 -05:00
William Vu 96f9e60e84 Swap return for sys.exit(1) 2018-07-17 17:25:38 -05:00
William Vu 09d347ca33 Add missed sys.exit(1) 2018-07-17 16:31:57 -05:00
William Vu e1be94e568 Pass RPORT to sess_port in Impacket 2018-07-17 13:49:38 -05:00
William Vu 0bdaa0e23a Catch connection errors and module.log them 2018-07-17 13:49:34 -05:00
William Vu 5650412cc2 Land #10317, nil fix for enum_dns 2018-07-17 13:03:06 -05:00
Jacob Robles 677b22698d Land #10273, [clean up] iis_webdav_scstoragepathfromurl 2018-07-17 09:33:32 -05:00
Jacob Robles 1e004769ca CMS Made Simple Upload/Rename Authenticated RCE 2018-07-17 09:00:39 -05:00
Brendan Coles 6bf184dbcf Update tested versions 2018-07-17 06:24:16 +00:00
William Vu 9a7c34e6e9 Land #10064, Claymore Dual Miner API RCE 2018-07-16 18:02:20 -05:00
Brendan Coles 7524af35ec Check if IPRANGE was supplied - Fix #10316 2018-07-15 15:38:56 +00:00
Jacob Robles 134417b598 Account for nil 2018-07-14 10:44:09 -05:00
Jacob Robles 6e450973b9 Land #10295, Add QNAP Q'Center change_passwd Command Execution exploit 2018-07-14 10:09:46 -05:00
Jacob Robles 18e65abc54 Fix link 2018-07-14 10:03:01 -05:00
Brendan Coles 9bdec97b2e Fix bpf_sign_extension_priv_esc 2018-07-13 23:01:17 +00:00
Brent Cook 72e5b94eb8 Land #10293, fixup php/base64 and add docs for cmd/unix/reverse_bash 2018-07-13 17:15:22 -05:00
Brendan Coles 4e72dff791 Update module references 2018-07-14 05:03:13 +10:00
Wei Chen b40a146723 Land #10297, Add priv escalation mod for CVE-2018-8897 2018-07-13 10:54:25 -05:00
bwatters-r7 f33d12676f Added License, make msftidy happy, and include original cve project
readme document.
2018-07-13 10:19:41 -05:00
bwatters-r7 4fa2a4775d Update the target check and added cleanup 2018-07-13 09:27:41 -05:00
Wei Chen 9ba0a72ea1 Rename file 2018-07-13 01:11:37 -05:00
Wei Chen e1e8444188 Clean up ruby code for CVE-2018-8897 2018-07-13 01:06:21 -05:00
Brendan Coles a020d48caf Move module documentation to documentation directory 2018-07-13 04:46:25 +00:00
Wei Chen f02c05e530 This one is the same as cve_2018_8897_exe.rb 2018-07-12 22:09:44 -05:00
William Vu c9001699cd Land #10027, Hadoop unauthed command execution 2018-07-12 21:58:49 -05:00
William Vu 50252c75d6 Clean up module
With a little rubocop -a.
2018-07-12 21:58:00 -05:00
William Vu 2f37482535 Land #10278, gitlist_arg_injection fixes 2018-07-12 19:03:52 -05:00
Wei Chen e613b2570a Land #10299, Add 88 CVEs to various auxiliary and exploit modules 2018-07-12 18:26:07 -05:00
William Vu 88bbc50104 Utilize uniq to make char array more readable
Hat tip @bcoles.
2018-07-12 17:59:12 -05:00
bwatters-r7 cfcb77afd0 Rename to please msftidy 2018-07-12 17:41:06 -05:00
William Vu 3546286049 Add missed ARCH_CMD to top-level Arch array
It's not necessary because of targets, but it's required for printing.
2018-07-12 17:37:06 -05:00
asoto-r7 1a3a4ef5e4 Revised 88 aux and exploit modules to add CVEs / references 2018-07-12 17:34:52 -05:00