87eba681e0
Land #14365 , Update TP-Link AC1750 Pwn2Own 2019 module
2020-11-26 19:55:00 +00:00
a99ce581dd
Update TP-Link AC1750 Pwn2Own 2019 module
2020-11-26 12:56:02 +00:00
8e534ffc22
Split scenarios to separate blocks for each target
...
As suggested in https://github.com/rapid7/metasploit-framework/pull/14216#discussion_r512868894 .
2020-11-26 13:46:01 +01:00
536e1a1a02
Fix typo in documentation
2020-11-26 13:46:01 +01:00
c280bb67e7
Wrap at 140 characters to appease msftidy_docs.rb.
2020-11-26 13:46:01 +01:00
4dc564e62b
Added documentation for module.
2020-11-26 13:46:01 +01:00
95665e916c
Land #14416 , wordpress plugin 'simple file list' rce
2020-11-25 09:58:26 -05:00
94c157bc95
Tweak the documentation and module output just a little for clarity
2020-11-25 09:58:07 -05:00
31426576e0
Land #14264 , Add exploit/multi/http/kong_gateway_admin_api_rce
2020-11-25 11:09:02 +00:00
efdc7f062e
Land #14241 , OpenMediaVault 5.5.11 Authenticated Remote Code Execution
2020-11-24 13:42:53 -06:00
92c92f1573
simple file list rce
2020-11-21 08:51:07 -05:00
1031b12c57
Land #14206 , Rockwell FactoryTalk CVE-2020-12027 RCE
2020-11-20 08:49:39 -05:00
e7196256d4
Update rockwell_factorytalk_rce.md
2020-11-19 17:53:25 +07:00
d3f16c7061
Land #14361 , COOKIE for sharepoint_ssi_viewstate
2020-11-18 15:55:19 -06:00
dcd8ec1d70
Lock JDK to 8u131 to be safe
2020-11-18 15:17:12 -06:00
20a90557bf
Update module doc
2020-11-18 15:08:12 -06:00
bcdf5aa586
Clarify Windows target setup further
2020-11-18 14:25:10 -06:00
4d610b5500
Clarify using the generic installer for examples
2020-11-18 14:06:13 -06:00
83beae731f
Add WebLogic Administration Console Handle RCE
...
CVE-2020-14882
CVE-2020-14883
2020-11-18 10:56:02 -06:00
f73a88a39c
Land #14396 , hadoop_unauth_exec clarification
2020-11-16 12:44:13 -06:00
0feff932f2
Change docs to reflect the truth of the "vuln"
2020-11-16 11:38:00 -06:00
d6b412c58e
Land #14340 , Add HorizontCMS 1.0.0-beta exploit module and documentation
2020-11-13 13:03:04 +01:00
fcb507e412
Fix AutoCheck
...
I'm a big dummy.
2020-11-11 15:57:38 -06:00
04bcbd0253
Update module doc
2020-11-11 15:57:29 -06:00
42bdae919b
Add SaltStack Salt REST API RCE (CVE-2020-16846)
...
Leveraging CVE-2020-25592.
2020-11-11 13:09:26 -06:00
65e1ef4cb8
Land #14253 , add wp-file-manager rce for wordpress
2020-11-10 08:48:33 -06:00
34697ecc11
Apply further fixes from the review process
2020-11-09 12:11:25 -06:00
2ee9b47023
Minor update regrarding Options section
2020-11-09 08:59:14 +02:00
ad5b0af9c6
Fixes n' updates
2020-11-08 10:26:31 +02:00
e7a20ec47c
Add CVE ID to module and docs
2020-11-05 07:05:32 -05:00
34715de016
Add jdk to msfvenom's APK template dependencies
2020-11-05 20:13:52 +10:00
cf954888da
Add horizontcms_upload_exec module and documentation
2020-11-02 13:01:13 -05:00
cb14287cb2
Add metasploit_msfvenom_apk_template_cmd_injection
2020-10-31 11:28:28 +10:00
bb9464801e
Make changes suggested in review
...
* Add better explanation of public-api-port option in documentation
* Add example in scenarios where admin API is on different host to
public API (therefore public-api-port option must be used)
* Add targeturi option
* Add version number that has been tested in 2 places in documentation
2020-10-27 21:13:45 +00:00
6258d5b561
Land #14296 , Move mercury_login module docs to documentation directory
2020-10-22 13:24:54 +00:00
5890bc45b5
move docs out of exploits folder
2020-10-21 16:37:02 -04:00
e4fb76d74f
Add version check to exchange_ecp_dlp_policy
...
And update modules/exploits/windows/http/sharepoint_ssi_viewstate.rb.
2020-10-20 14:32:43 -05:00
3970b69734
Land #14229 , Telerik UI for ASP.NET AJAX exploit
...
CVE-2017-11317 && CVE-2019-18935
2020-10-20 13:24:35 -05:00
1e568a6d1b
Merge branch 'land-14179' into upstream-master
2020-10-19 15:55:25 -05:00
253928570b
Update module doc
2020-10-19 11:18:00 -05:00
0f344b0661
Land #14265 , Add SharePoint Server-Side Include (SSI) and ViewState RCE (CVE-2020-16952)
2020-10-19 10:27:58 -04:00
4cb08f7426
Address outstanding issues
2020-10-15 13:24:08 -05:00
87104a7236
Update docs and make them msftidy_docs.rb compliant
2020-10-15 10:59:46 -05:00
59f74438da
Rename the LPE exploit to a more appropriate name since their could be future bugs in NtUserMessageCall and also update the description info a bit more
2020-10-15 10:59:44 -05:00
f2899186e4
Add in first round of initial updates to fix review comments
2020-10-15 10:59:40 -05:00
dcc322436b
Update documentation files and module description to more accurately describe what the cause of the LPE bug for CVE-2019-1458 is. also apply RuboCop edits.
2020-10-15 10:58:58 -05:00
00d209425b
add documentation
2020-10-15 10:58:08 -05:00
8d43fa4848
Module can now use mkfile+put method to exploit vulnerability.
2020-10-15 17:46:40 +08:00
1a341ae931
Add SharePoint SSI and ViewState RCE
...
CVE-2020-16952
2020-10-14 17:45:15 -05:00
f6b5053666
Add exploit/multi/http/kong_gateway_admin_api_rce
2020-10-13 16:56:34 +01:00
Tim W