69690ef09e
Fix RuboCop issues with sudo_baron_samedit.rb that were causing failures in some builds
2021-06-04 12:03:13 -05:00
78f97d2fa7
Land #15281 , Add Cisco HyperFlex exploit
2021-06-03 17:24:27 -04:00
8b737c2c60
Land #15231 , add SuiteCRM log file rce
2021-06-03 09:11:00 -05:00
6efd312430
Add Cisco HyperFlex HX Data Platform exploit
...
CVE-2021-1497
CVE-2021-1498
2021-06-03 00:43:56 -05:00
37a7ee2e28
Clean up f5_icontrol_rest_ssrf_rce
...
Escalate a warning and prefer a variable.
2021-06-02 20:32:47 -05:00
d2b539e3c9
authentication fix from add cookie jar merge
2021-06-02 16:54:09 -05:00
3056e8f946
add cookie jar and AutoCheck
2021-06-02 13:09:33 -05:00
fe8e586b22
fall to shell when meterpreter fails get_processes
...
shift `pidof` to `Msf::Post::Process`
2021-06-01 18:51:39 +05:30
dea7f50d36
Cover log file restoriation in all failure cases
2021-05-29 09:25:10 -05:00
1451e9b56b
Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2021-05-27 11:59:32 -05:00
fa1ad1b32e
Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2021-05-27 11:59:28 -05:00
b4f699fb15
Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2021-05-27 11:59:23 -05:00
2d9fdb97ad
Check that initial request is valid
2021-05-26 12:23:36 -05:00
57ef94cfdf
Remove non boolean return from authentication
2021-05-25 22:55:28 -05:00
91284db05d
Check returned responses on each stage and output status info
2021-05-25 22:49:27 -05:00
ed1f5db48d
Check method and authentication fixes
2021-05-25 20:38:32 -05:00
01a8a6ab30
Remove unrequired reference to msfcore
2021-05-23 12:12:35 -05:00
2757e7163c
Remove trailing white space found during msftidy
2021-05-22 18:44:15 -05:00
81c056df3b
Removed unused return value
2021-05-22 01:32:17 -05:00
963cea939f
Changed request method to preferred method
2021-05-22 01:29:24 -05:00
ab5256a106
Use more robust version checking and add missing return statements.
2021-05-22 01:26:28 -05:00
64f9ea0848
Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
...
Change Metasploit download link to https
Co-authored-by: bcoles <bcoles@gmail.com >
2021-05-22 00:59:23 -05:00
f27c0a481c
Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
...
Co-authored-by: bcoles <bcoles@gmail.com >
2021-05-22 00:56:44 -05:00
e62efe0690
Added module and documentation for SuiteCRM Log File RCE
2021-05-22 00:11:19 -05:00
133b40de30
Land #15212 , Converts Python shebangs over to Python 3
2021-05-19 10:39:09 -05:00
56388cd696
Land #15146 , Add support for extra OSes for CVE-2021-3156 (Baron Samedit)
2021-05-18 18:02:30 -04:00
a8a1cf75b8
Reorder the Fedora targets to be descending
2021-05-18 18:02:12 -04:00
a894b8cc29
Updates Python shebangs to Python 3
2021-05-18 12:43:04 +01:00
e7983c3b6f
Land #15192 , Enforce Style/RedundantBegin for new modules
2021-05-17 09:51:57 -05:00
ac2c467121
Land #15011 , Enhance analyze command API to understand modules' needs
2021-05-14 14:30:33 +01:00
100da2f1b1
Enforce Style/RedundantBegin for new modules
2021-05-13 04:01:03 +01:00
637e9cff48
Update vmware_vrops_mgr_ssrf_rce documentation
2021-05-06 18:30:20 -05:00
5dc8d0e684
Added automatic cleanup for exploit scripts that modify /etc/passwd
2021-05-06 21:50:03 +10:00
832813f057
If the exploit is completed but no session is created, tell the user if they have alternative exploits they could try.
2021-05-06 12:37:18 +10:00
000546e551
Rubocop changes
2021-05-04 16:24:00 +10:00
fbc291bc22
Tested on various other Fedora's
2021-05-04 14:18:16 +10:00
7f89ac44ce
Tested module on Fedora 25
...
Also verify user does not already exist when adding a new user
2021-05-04 10:38:28 +10:00
bf0551979f
Fix the module according to the review
2021-05-03 12:29:00 +03:00
06157601df
Remove SCREEN_EFFECTS from sideeffects
2021-05-03 11:14:43 +03:00
9e04805c0e
Adding check method to gravcms exec
2021-05-03 11:14:43 +03:00
e3d05395de
Add GravCMS exec
2021-05-03 11:14:42 +03:00
0435e281d9
Updated CVE-2021-3156 documentation to reflect code changes.
2021-05-03 16:45:50 +10:00
d433c0fd12
Fix typo
2021-04-30 23:29:24 -05:00
0535489703
Land #14947 , add IGEL OS RCE
2021-04-30 15:49:11 -05:00
de22236902
add AutoCheck and update docs output
2021-04-30 15:38:57 -05:00
41fe16463d
switching to CmdStager
...
- had to switch away from python payload to appease CmdStager
- removed systemd service adjustments preferring to use sleep to avoid rate limits
- updated check function to accomodate more current vulnerable version information in vendor advisory
2021-04-30 12:53:33 -04:00
3722435a25
Tested and verified exploitability of second CVE-2021-3156 exploit on three platforms
2021-04-30 18:51:06 +10:00
b1d2c39c98
Added second CentOS 7 exploit
2021-04-30 18:30:19 +10:00
124d157a1c
Added CVE-2021-3156 exploits for CentOS 7 and 8
2021-04-30 17:25:59 +10:00
994825dcc9
Land #15090 , Add exploit for CVE-2021-22502
2021-04-29 14:09:28 -04:00
Grant Willcox