25b56c410d
Land #12189 , Add module for LibreNMS CVE-2019-10669
...
Merge branch 'land-12189' into upstream-master
2019-09-06 12:01:09 -05:00
83de041894
Land #12243 , cisco_ucs_rce exploit
2019-08-30 13:35:29 -05:00
b0b72892be
Deprecate/delete cisco_rv130_rmi_rce by alias
2019-08-30 12:03:43 -05:00
49b3af3870
Merge remote-tracking branch 'upstream/master' into pr/12133
2019-08-30 12:01:48 -05:00
40b0d02f39
make some adjustments
2019-08-29 19:49:37 +07:00
c88ce55013
Add github link
2019-08-28 11:08:35 +07:00
d6f47fd03a
s/Directory/Director
2019-08-28 10:58:41 +07:00
1aad95f7c4
Add exploit for Cisco UCS RCE
2019-08-28 10:55:49 +07:00
8aa00d97aa
Add new moved_from to moved module
2019-08-22 17:58:20 -05:00
901943c90f
Move Ubiquiti AirOS exploit from SSH to HTTP
2019-08-22 17:58:20 -05:00
32334c2386
Update all module splats from http:// to https://
2019-08-15 18:10:44 -05:00
70d5bd4eb3
add default payload, check login
2019-08-13 13:39:15 -05:00
286263c094
add quotes, platform
2019-08-13 11:18:31 -05:00
48333c5d4e
randomize parameter value
2019-08-13 11:14:10 -05:00
da98d3d376
finish documentation and module
2019-08-13 09:47:24 -05:00
71f4eadd18
module rework and some documentation
2019-08-12 15:22:22 -05:00
76da9ea4fc
get shell with test data
2019-08-09 08:40:41 -05:00
f317987e02
Land #12175 , hadoop_unauth_exec NoMethodError fix
2019-08-07 22:44:55 -05:00
b5fd9b4fed
Fix whitespace
2019-08-07 22:44:38 -05:00
6cf0ff0678
Fix #12156 , NoMethodError in hadoop exploit.
2019-08-08 10:06:40 +08:00
cf9b94a964
Set needs_cleanup flag for exploits that need it
...
The `needs_cleanup` flag needs to be set per-module when an exploit
needs an interactive session to clean up. Some `FileDropper` exploits
need additional cleanup to what the mixin provides, but since all
`FileDropper`s already mark themselves as needing cleanup those are not
covered here. A few of these could potentially be refactored to use the
original exploitation method to clean up or to compile the list of
files/commands to clean up ahead of time, but that is out of the scope
of this fix.
2019-08-02 10:23:53 -05:00
8085ad3046
Set default payload based on chosen target.
2019-08-02 10:47:28 +02:00
610bed8fd9
&& is preferred over and.
2019-08-02 10:41:14 +02:00
bc3f87a950
add login and device id code
2019-07-31 16:31:22 -05:00
1faa1786c6
add test request
2019-07-29 10:28:07 -05:00
34c5277e4e
Deprecate module.
2019-07-27 10:49:59 +02:00
413da527ab
Module renaming.
2019-07-27 10:47:58 +02:00
18f7ae379b
Add support for RV110W and RV215W + check method to fingerprint devices.
2019-07-27 10:45:31 +02:00
61d5be5981
add module skeleton and check
2019-07-17 15:51:11 -05:00
0a00f3851a
Land #12007 , true 0s timeout in send_request_*
2019-06-28 12:32:32 -05:00
cc3fd747aa
Add Pen Test Partners reference
...
Did we somehow miss this?
2019-06-26 11:05:22 -05:00
685fb55179
Land #11987 , Add Nagios XI 5.5.6 magpie_debug Root Exploit
2019-06-25 16:17:50 -05:00
23dbc4d90d
Change file name
2019-06-25 16:10:44 -05:00
e9fc9970ba
Make names more random. Also, make metadata changes
2019-06-25 16:09:15 -05:00
7739e9f43e
Update my modules
2019-06-24 13:38:14 -05:00
c637755ebd
Land #11956 - Add Cisco Prime Infrastructure Health Monitor Tar RCE
2019-06-19 10:46:35 -05:00
ddf7eadeee
modified version check
2019-06-19 08:31:48 -05:00
384cfc7db5
update checkcode
2019-06-18 15:58:57 -05:00
d4d2eab770
removed some whitespace, added a check
2019-06-17 15:29:08 -05:00
a5020b8f30
Fix spaces at EOL
2019-06-17 13:16:56 +03:00
b5e34cb783
Converting version check request to vars_get
...
We also need to add the "testing = 1" cookie to the login request. Otherwise, the browser displays a No-Cookie error.
2019-06-17 10:46:46 +03:00
e13456ce0d
Add root to the filename
2019-06-16 23:32:57 +01:00
17f686a87d
Adding module documentation
2019-06-16 18:27:01 -04:00
8faa138289
Change targets and default http delay
2019-06-16 23:13:45 +01:00
3d463a1e20
Adding correction of Check and Payload definitions
2019-06-16 17:58:31 -04:00
863beaea92
First commit for module Nagios XI RCE
2019-06-16 22:10:32 +01:00
414c614b55
CVE-2019-12840 - Add Webmin 1.910 RCE Module
2019-06-16 11:26:00 -04:00
d74881a3c0
Update based on bcole's feedback
2019-06-10 12:12:49 -05:00
6693e3e347
add cve to trueonline v2
2019-06-08 17:41:04 +07:00
903ea5ebce
add cve to p660hn v1
2019-06-08 17:38:44 +07:00
bwatters-r7