Graeme Robinson
8e534ffc22
Split scenarios to separate blocks for each target
...
As suggested in https://github.com/rapid7/metasploit-framework/pull/14216#discussion_r512868894 .
2020-11-26 13:46:01 +01:00
Graeme Robinson
536e1a1a02
Fix typo in documentation
2020-11-26 13:46:01 +01:00
Graeme Robinson
c280bb67e7
Wrap at 140 characters to appease msftidy_docs.rb.
2020-11-26 13:46:01 +01:00
Graeme Robinson
4dc564e62b
Added documentation for module.
2020-11-26 13:46:01 +01:00
Spencer McIntyre
95665e916c
Land #14416 , wordpress plugin 'simple file list' rce
2020-11-25 09:58:26 -05:00
Spencer McIntyre
94c157bc95
Tweak the documentation and module output just a little for clarity
2020-11-25 09:58:07 -05:00
cgranleese-r7
31426576e0
Land #14264 , Add exploit/multi/http/kong_gateway_admin_api_rce
2020-11-25 11:09:02 +00:00
h00die
92c92f1573
simple file list rce
2020-11-21 08:51:07 -05:00
William Vu
dcd8ec1d70
Lock JDK to 8u131 to be safe
2020-11-18 15:17:12 -06:00
William Vu
bcdf5aa586
Clarify Windows target setup further
2020-11-18 14:25:10 -06:00
William Vu
4d610b5500
Clarify using the generic installer for examples
2020-11-18 14:06:13 -06:00
William Vu
83beae731f
Add WebLogic Administration Console Handle RCE
...
CVE-2020-14882
CVE-2020-14883
2020-11-18 10:56:02 -06:00
Christophe De La Fuente
d6b412c58e
Land #14340 , Add HorizontCMS 1.0.0-beta exploit module and documentation
2020-11-13 13:03:04 +01:00
Shelby Pace
65e1ef4cb8
Land #14253 , add wp-file-manager rce for wordpress
2020-11-10 08:48:33 -06:00
kalba-security
e7a20ec47c
Add CVE ID to module and docs
2020-11-05 07:05:32 -05:00
kalba-security
cf954888da
Add horizontcms_upload_exec module and documentation
2020-11-02 13:01:13 -05:00
Graeme Robinson
bb9464801e
Make changes suggested in review
...
* Add better explanation of public-api-port option in documentation
* Add example in scenarios where admin API is on different host to
public API (therefore public-api-port option must be used)
* Add targeturi option
* Add version number that has been tested in 2 places in documentation
2020-10-27 21:13:45 +00:00
Tim W
87104a7236
Update docs and make them msftidy_docs.rb compliant
2020-10-15 10:59:46 -05:00
ide0x90
8d43fa4848
Module can now use mkfile+put method to exploit vulnerability.
2020-10-15 17:46:40 +08:00
Graeme Robinson
f6b5053666
Add exploit/multi/http/kong_gateway_admin_api_rce
2020-10-13 16:56:34 +01:00
ide0x90
b9df68cbb6
Fix module according to Rubocop, make documentation follow standard.
2020-10-11 19:04:06 +08:00
ide0x90
57b0f30e37
Add new module for WordPress File Manager unauth RCE (CVE-2020-25213)
2020-10-11 01:20:28 +08:00
h00die
15bb690308
fix vulnerability spelling
2020-10-04 13:00:48 -04:00
kalba-security
e65083c092
Add maracms_upload_exec.rb exploit module and docs
2020-09-22 16:53:29 -04:00
Spencer McIntyre
24b1235cf7
Whitespace adjustment and remove superfluous return statements
2020-08-12 13:59:25 -04:00
Zenofex
0dab52ef35
A few last changes from msftidy and msftidy_docs.
2020-08-09 18:25:13 -05:00
Zenofex
661e2a680b
Initial push of exploit and module for vbulletin_widget_template_rce vulnerability.
2020-08-09 17:38:52 -05:00
gwillcox-r7
d2b1d97b62
Land #13940 , Compliance and Typo Edits for baldr_upload_exec
2020-08-06 11:25:31 -05:00
gwillcox-r7
2ca508c08e
Further edits for RuboCop and msftidy_docs.rb compliance
2020-08-06 11:18:39 -05:00
gwillcox-r7
5c6530d9e5
Update module description and documentation to have a better description of what is going on and to also fix further copies of the typos that were pointed out.
2020-08-06 10:50:47 -05:00
h00die
9663d3378f
add sqlmap decloak
2020-08-04 08:48:30 -04:00
Ege Balcı
7985eafda0
Add Baldr Botnet Panel RCE Module
2020-07-24 07:45:43 +03:00
Shelby Pace
2b1af9acaa
Land #13610 , add atutor auth dir trav / rce
2020-06-29 11:58:34 -05:00
Christophe De La Fuente
77276ee3e2
Land #13604 , Ignition Automation RCE module
2020-06-25 18:14:57 +02:00
Christophe De La Fuente
2203310d64
Remove spaces at EOL
2020-06-25 18:12:29 +02:00
Pedro Ribeiro
b630524703
Update inductive_ignition_rce.md
2020-06-25 22:48:35 +07:00
kalba-security
57f40053da
Improve autoselect (incorporate suggestions from code review)
2020-06-18 16:39:11 -04:00
gwillcox-r7
199d7db222
Fix up items mentioned by @space-r7 during her review
2020-06-18 09:56:20 -05:00
gwillcox-r7
a26977c6fa
Finish up rest of msftidy_docs.rb documentation
2020-06-17 16:11:56 -05:00
gwillcox-r7
22c76d94c3
Fix most of the msftidy_docs.rb errors
2020-06-17 16:06:16 -05:00
gwillcox-r7
eebacb8fbb
Make adjustments so that this module only supports Windows so that we can land this for now. Linux support may be added in the future.
2020-06-17 14:56:40 -05:00
gwillcox-r7
813a23cec8
More fixes to documentation, but not sure if these work yet or not
2020-06-17 12:34:44 -05:00
gwillcox-r7
b6f4210bd2
Fix some typos in the Linux documentation
2020-06-17 11:29:30 -05:00
gwillcox-r7
cd76b1dca0
Add in initial updates to the Linux documentation
2020-06-16 19:06:32 -05:00
gwillcox-r7
d8c0f23df0
Add in documentation for the WebPanel1 panel on Windows
2020-06-16 16:14:01 -05:00
gwillcox-r7
5d768f266c
Add in documentation for the WebPanel3 panel on Windows
2020-06-16 15:27:25 -05:00
gwillcox-r7
b25d94b9d5
Remove excess information from documentation, and remove references as these are in the module itself and thats generally the place where we put them
2020-06-16 12:29:19 -05:00
gwillcox-r7
67727c45b1
Removing excess option information from documentation
2020-06-16 12:16:20 -05:00
gwillcox-r7
8d0bc615d4
Correcting intra-document links within the documentation
2020-06-16 12:04:46 -05:00
gwillcox-r7
7d197c3168
Remove extra detail from IornCube installation steps and make it simpler to read.
2020-06-16 11:44:59 -05:00