8e534ffc22
Split scenarios to separate blocks for each target
...
As suggested in https://github.com/rapid7/metasploit-framework/pull/14216#discussion_r512868894 .
2020-11-26 13:46:01 +01:00
536e1a1a02
Fix typo in documentation
2020-11-26 13:46:01 +01:00
c280bb67e7
Wrap at 140 characters to appease msftidy_docs.rb.
2020-11-26 13:46:01 +01:00
4dc564e62b
Added documentation for module.
2020-11-26 13:46:01 +01:00
95665e916c
Land #14416 , wordpress plugin 'simple file list' rce
2020-11-25 09:58:26 -05:00
94c157bc95
Tweak the documentation and module output just a little for clarity
2020-11-25 09:58:07 -05:00
31426576e0
Land #14264 , Add exploit/multi/http/kong_gateway_admin_api_rce
2020-11-25 11:09:02 +00:00
92c92f1573
simple file list rce
2020-11-21 08:51:07 -05:00
dcd8ec1d70
Lock JDK to 8u131 to be safe
2020-11-18 15:17:12 -06:00
bcdf5aa586
Clarify Windows target setup further
2020-11-18 14:25:10 -06:00
4d610b5500
Clarify using the generic installer for examples
2020-11-18 14:06:13 -06:00
83beae731f
Add WebLogic Administration Console Handle RCE
...
CVE-2020-14882
CVE-2020-14883
2020-11-18 10:56:02 -06:00
d6b412c58e
Land #14340 , Add HorizontCMS 1.0.0-beta exploit module and documentation
2020-11-13 13:03:04 +01:00
e7a20ec47c
Add CVE ID to module and docs
2020-11-05 07:05:32 -05:00
cf954888da
Add horizontcms_upload_exec module and documentation
2020-11-02 13:01:13 -05:00
bb9464801e
Make changes suggested in review
...
* Add better explanation of public-api-port option in documentation
* Add example in scenarios where admin API is on different host to
public API (therefore public-api-port option must be used)
* Add targeturi option
* Add version number that has been tested in 2 places in documentation
2020-10-27 21:13:45 +00:00
8d43fa4848
Module can now use mkfile+put method to exploit vulnerability.
2020-10-15 17:46:40 +08:00
f6b5053666
Add exploit/multi/http/kong_gateway_admin_api_rce
2020-10-13 16:56:34 +01:00
b9df68cbb6
Fix module according to Rubocop, make documentation follow standard.
2020-10-11 19:04:06 +08:00
57b0f30e37
Add new module for WordPress File Manager unauth RCE (CVE-2020-25213)
2020-10-11 01:20:28 +08:00
15bb690308
fix vulnerability spelling
2020-10-04 13:00:48 -04:00
e65083c092
Add maracms_upload_exec.rb exploit module and docs
2020-09-22 16:53:29 -04:00
24b1235cf7
Whitespace adjustment and remove superfluous return statements
2020-08-12 13:59:25 -04:00
0dab52ef35
A few last changes from msftidy and msftidy_docs.
2020-08-09 18:25:13 -05:00
661e2a680b
Initial push of exploit and module for vbulletin_widget_template_rce vulnerability.
2020-08-09 17:38:52 -05:00
2ca508c08e
Further edits for RuboCop and msftidy_docs.rb compliance
2020-08-06 11:18:39 -05:00
5c6530d9e5
Update module description and documentation to have a better description of what is going on and to also fix further copies of the typos that were pointed out.
2020-08-06 10:50:47 -05:00
7985eafda0
Add Baldr Botnet Panel RCE Module
2020-07-24 07:45:43 +03:00
2b1af9acaa
Land #13610 , add atutor auth dir trav / rce
2020-06-29 11:58:34 -05:00
57f40053da
Improve autoselect (incorporate suggestions from code review)
2020-06-18 16:39:11 -04:00
199d7db222
Fix up items mentioned by @space-r7 during her review
2020-06-18 09:56:20 -05:00
a26977c6fa
Finish up rest of msftidy_docs.rb documentation
2020-06-17 16:11:56 -05:00
22c76d94c3
Fix most of the msftidy_docs.rb errors
2020-06-17 16:06:16 -05:00
eebacb8fbb
Make adjustments so that this module only supports Windows so that we can land this for now. Linux support may be added in the future.
2020-06-17 14:56:40 -05:00
813a23cec8
More fixes to documentation, but not sure if these work yet or not
2020-06-17 12:34:44 -05:00
b6f4210bd2
Fix some typos in the Linux documentation
2020-06-17 11:29:30 -05:00
cd76b1dca0
Add in initial updates to the Linux documentation
2020-06-16 19:06:32 -05:00
d8c0f23df0
Add in documentation for the WebPanel1 panel on Windows
2020-06-16 16:14:01 -05:00
5d768f266c
Add in documentation for the WebPanel3 panel on Windows
2020-06-16 15:27:25 -05:00
b25d94b9d5
Remove excess information from documentation, and remove references as these are in the module itself and thats generally the place where we put them
2020-06-16 12:29:19 -05:00
67727c45b1
Removing excess option information from documentation
2020-06-16 12:16:20 -05:00
8d0bc615d4
Correcting intra-document links within the documentation
2020-06-16 12:04:46 -05:00
7d197c3168
Remove extra detail from IornCube installation steps and make it simpler to read.
2020-06-16 11:44:59 -05:00
d84a74605a
Update description section within the module docs and tidy up the areas surrounding this to make it easier to read. Also update the Windows installation instructions
2020-06-16 11:27:33 -05:00
df5373bc1d
update documentation file
2020-06-16 10:47:51 -05:00
876836bcce
update doc and fix module syntax.
2020-06-16 10:47:51 -05:00
624c69bebf
add. authenticated exploitation
2020-06-16 10:47:50 -05:00
c704dba44c
add. agent tesla panel rce exploit module
2020-06-16 10:47:49 -05:00
b5ad7a8511
Use session_created, update documentation
2020-06-15 13:37:59 -04:00
e4351d37b8
Add ATutor 2.2.4 directory traversal / RCE module and docs
2020-06-12 16:02:00 -04:00
Graeme Robinson