Shelby Pace
e21b25b20f
Land #12302 , add zip slip exploit
2019-09-12 07:45:51 -05:00
Shelby Pace
644988750e
change permission on payload
2019-09-12 07:43:54 -05:00
Metasploit
469f848b22
automatic module_metadata_base.json update
2019-09-11 16:06:43 -05:00
Shelby Pace
408d01cef4
Land #12276 , add OpenEMR auxiliary module
2019-09-11 15:58:01 -05:00
Shelby Pace
8bfdaf6ab7
change metadata indentation
2019-09-11 15:56:46 -05:00
Brent Cook
3a4887cb3a
Land #12315 , update code climate banners
2019-09-11 13:37:31 -05:00
Jeffrey Martin
c088ec9ee8
update code climate banners
2019-09-11 12:48:57 -05:00
Metasploit
c2790d44f6
automatic module_metadata_base.json update
2019-09-11 11:54:31 -05:00
sinn3r
cfeaca6de8
Land #12310 , Add CVE info for jboss_vulnscan and jboss_status
...
jboss_vulnscan and jboss_status: add CVE information
2019-09-11 11:47:05 -05:00
Will Porter
3ed9fb0383
Fix a bug caused by writing python code in a ruby file.
2019-09-11 15:39:15 +00:00
Metasploit
3483881b19
automatic module_metadata_base.json update
2019-09-11 10:36:39 -05:00
Wei Chen
a63357c460
Land #12177 , Add evasion module applocker_evasion_workflow_compiler
2019-09-11 10:28:16 -05:00
Clément Notin
b460dc113d
jboss_vulnscan & status: add CVE ref
2019-09-11 14:05:21 +02:00
William Porter
11021e3bc1
Update the documentation to reflect recent changes.
2019-09-10 21:53:06 -04:00
William Porter
262e574fe2
Add the .csv extension to the loot file.
2019-09-10 21:32:03 -04:00
William Porter
7a8eb76a12
Use the same gsub pattern to create the ltype as is used by store_loot to sanitize characters.
2019-09-10 21:14:15 -04:00
bwatters-r7
6703e9b06b
Land #11984 , add meterpreter keyevent api for virtual key strokes
...
Merge branch 'land-11984' into upstream-master
2019-09-10 14:32:43 -05:00
Wei Chen
8fe1f9d172
Rephrase
2019-09-10 12:12:46 -05:00
William Porter
832d2e4300
Remove unneccesary comment.
2019-09-10 12:29:55 -04:00
Will Porter
3fc0467484
Update modules/auxiliary/sqli/openemr/openemr_sqli_dump.rb
...
Remove unused path variable.
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-09-10 12:27:48 -04:00
Will Porter
f1f9597222
Update modules/auxiliary/sqli/openemr/openemr_sqli_dump.rb
...
Use `normalize_uri` to construct the vulnerable URI.
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-09-10 12:27:22 -04:00
Metasploit
e66179a0e7
automatic module_metadata_base.json update
2019-09-10 11:24:33 -05:00
bwatters-r7
ee660d61ea
Land #12275 , Update payloads to 1.3.77
...
Merge branch 'land-12275' into upstream-master
2019-09-10 11:14:56 -05:00
Brent Cook
73eab2c34a
Land #12286 , RDP lib: lower SSL security level for compatibility with older implementations
2019-09-09 23:11:15 -05:00
Brent Cook
902ff4f573
Land #12301 , fix a few issues using/building Docker images
2019-09-09 23:04:10 -05:00
Brent Cook
f24c689d84
fix compatibility with --chown flag with COPY
2019-09-09 23:02:26 -05:00
Brent Cook
d874f1899d
update lock for unpinned gem
2019-09-09 22:52:54 -05:00
Wei Chen
2cd8125a40
Add zip skip
2019-09-09 12:00:53 -05:00
Wei Chen
5e65685167
Update documentation for zip slip
2019-09-09 12:00:05 -05:00
Matúš Bursa
9297809b41
fix permissions bug Gemfile.lock
...
There was an error while trying to write to /usr/src/metasploit-framework/Gemfile.lock. It is likely that you need to grant write permissions for that path.
2019-09-09 12:59:19 +02:00
Metasploit
0cbfaccc7d
automatic module_metadata_base.json update
2019-09-08 00:09:39 -05:00
Brendan Coles
aaad280e13
Land #12294 , Fix References Array for bypassuac modules
2019-09-08 05:04:03 +00:00
h00die
054a092eb2
fix references in bypassuac modules
2019-09-08 00:42:21 -04:00
h00die
78c4bfee95
add url for fodhelper
2019-09-08 00:33:16 -04:00
h00die
d6cfe021dc
Land #12291 log errors on payload loading issues
2019-09-07 23:55:39 -04:00
h00die
d25d8e77b8
12291 sempervictus words
2019-09-07 23:54:19 -04:00
Clément Notin
579ea56f3b
RDP_TLS_SECURITY_LEVEL default value is 0 (less secure)
2019-09-07 18:39:59 +02:00
Clément Notin
49a991891c
Add RDP_TLS_SECURITY_LEVEL advanced option
2019-09-07 17:19:59 +02:00
Brent Cook
a985da9318
expand scope of errors caught to include all StandardErrors
2019-09-07 07:38:37 -04:00
Brent Cook
1d91e7f53c
make payload generation failures at boot time non-fatal
...
Currently, if any payload fails to generate that has a dynamic size, it causes a Framework instance to throw an exception on start. This can happen for a number of reasons, and more often than not it is enviromental (files missing, Y2k38 bugs, etc.). Instead of failing entirely, catch the exception and log as an error, don't register the payload, but continue booting.
2019-09-07 07:21:40 -04:00
Clément Notin
d4e2ac696a
RDP lib: lower SSL security level for compatibility with stock Win7
2019-09-07 01:17:22 +02:00
Metasploit
9a6830c0ad
automatic module_metadata_base.json update
2019-09-06 12:10:24 -05:00
bwatters-r7
25b56c410d
Land #12189 , Add module for LibreNMS CVE-2019-10669
...
Merge branch 'land-12189' into upstream-master
2019-09-06 12:01:09 -05:00
Metasploit
2ec2ecb969
automatic module_metadata_base.json update
2019-09-06 10:22:57 -05:00
Shelby Pace
c4bd91f505
Land #12272 , add October CMS file upload
2019-09-06 10:13:33 -05:00
Shelby Pace
b0625012c4
add vulnerable software version
2019-09-06 10:12:08 -05:00
Shelby Pace
5f7c243b48
add filedropper, fix check, add to docs
2019-09-06 09:49:09 -05:00
Metasploit
788e3b4363
automatic module_metadata_base.json update
2019-09-06 09:33:59 -05:00
bwatters-r7
17acaf9720
Land #12226 , fix #11574 , add WSReset.exe UAC Bypass
...
Merge branch 'land-12226' into upstream-master
2019-09-06 09:19:24 -05:00
Touhid M Shaikh
aaebec01a4
Update References
...
Added CVE and Blog link
2019-09-06 18:26:28 +05:30