 space-r7
|
837fdf7c5e
|
Land #16128, add cisco rv unauth rce
|
2022-02-01 10:34:57 -06:00 |
|
|
Jake Baines
|
78312fb300
|
Update documentation/modules/exploit/linux/http/cisco_rv_series_authbypass_and_rce.md
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2022-02-01 06:41:26 -05:00 |
|
|
Jake Baines
|
ccedcfefab
|
Added exploit for CVE-2021-1472/CVE-2021-1473
|
2022-01-29 18:56:53 -08:00 |
|
|
Grant Willcox
|
44f040ad78
|
Land #16056, Exploit Module for Grandstream UCM62xx IP PBX (CVE-2020-5722)
|
2022-01-24 21:03:46 -06:00 |
|
|
Grant Willcox
|
15751a0f78
|
Minor langauge fix and final typo
|
2022-01-24 21:01:34 -06:00 |
|
|
Jake Baines
|
2c989ec714
|
Addressed multiple review comments (spelling, doc details, randomization, etc)
|
2022-01-22 14:09:58 -08:00 |
|
|
Grant Willcox
|
8bb3e39fd7
|
Land #16036, Add Grandstream GXV3175 'settimezone' Unauthenticated Command Execution
|
2022-01-19 10:58:42 -06:00 |
|
|
Brendan Coles
|
ee2feb1207
|
Add Grandstream GXV3175 'settimezone' Unauthenticated Command Execution
|
2022-01-19 00:04:15 +00:00 |
|
|
Jake Baines
|
4ebb702405
|
Added an exploit for Grandstream UCM62xx IP PBX (CVE-2020-5722)
|
2022-01-15 12:46:56 -08:00 |
|
|
Jake Baines
|
d4ee9a0183
|
Initial commit of CVE-2021-20039 exploit
|
2022-01-10 12:43:50 -08:00 |
|
|
William Vu
|
2a36287d9d
|
Add more words to module doc
|
2021-10-27 19:31:03 -05:00 |
|
|
William Vu
|
76aa872ff5
|
Add (empty) Options header to module doc
For consistency.
|
2021-10-27 19:31:03 -05:00 |
|
|
William Vu
|
7bbf0305c0
|
Fix elapsed time calculation using monotonic clock
Hat tip @adfoster-r7.
|
2021-10-27 19:31:03 -05:00 |
|
|
William Vu
|
365365bfb0
|
Add module doc
|
2021-10-27 19:31:03 -05:00 |
|
|
William Vu
|
42ed1b6eef
|
Add Windows support to CVE-2021-26084 exploit
|
2021-10-14 16:58:04 -05:00 |
|
|
William Vu
|
78ba617aef
|
Add module doc
|
2021-10-06 16:43:57 -05:00 |
|
|
space-r7
|
12af64c4d8
|
Land #15604, add buffer overflow G-Cam module
|
2021-09-16 13:02:57 -05:00 |
|
|
Spencer McIntyre
|
480dec9a1e
|
Land #15658, Add module for CVE-2021-32682
|
2021-09-14 14:09:27 -04:00 |
|
|
space-r7
|
91ae50eb27
|
escapeshellcmd -> escapeshellarg
|
2021-09-09 17:28:05 -05:00 |
|
|
space-r7
|
0095613a94
|
add completed module and documentation
|
2021-09-09 16:58:40 -05:00 |
|
|
William Vu
|
5ed5bc3903
|
Add module doc
|
2021-09-08 09:37:02 -05:00 |
|
|
Grant Willcox
|
0a57641aa4
|
Add in documentation and module code cleanness improvements and also make the output easier for readers to understand should something fail midway through.
|
2021-08-31 18:24:57 -05:00 |
|
|
Grant Willcox
|
30a7ee1bf2
|
Final very minor documentation fixes for better clarity
|
2021-08-31 18:24:56 -05:00 |
|
|
Your Name
|
56cde3eaba
|
Add Geutebruck CVE_2021_335XX command injections module
|
2021-08-31 18:24:14 -05:00 |
|
|
Your Name
|
6a501a37ff
|
Add CVE-2021-33549 exploit for Geutebruck G-CAM
|
2021-08-27 01:28:26 +01:00 |
|
|
William Vu
|
e480e868b9
|
Remove dead cisco_rv130_rmi_rce documentation
It is now cve_2019_1663_cisco_rmi_rce.
|
2021-08-20 05:06:00 -05:00 |
|
|
William Vu
|
521ca14773
|
Add Lucee Administrator CVE-2021-21307 exploit
|
2021-08-16 10:09:34 -05:00 |
|
|
William Vu
|
2164d7ed5a
|
Add log IOC
|
2021-07-12 20:54:54 -05:00 |
|
|
William Vu
|
1812a71d3d
|
Add module doc
|
2021-07-12 13:07:05 -05:00 |
|
|
William Vu
|
6fbaecf919
|
Backport print changes to recent modules
|
2021-07-08 21:26:35 -05:00 |
|
|
William Vu
|
8cd00bcb91
|
Update module doc
|
2021-07-06 22:25:35 -05:00 |
|
|
Shelby Pace
|
3c7d96695e
|
Land #15349, add rConfig vendors auth rce
|
2021-06-24 10:43:18 -05:00 |
|
|
Shelby Pace
|
df1faf85ff
|
rename files, change version check, use cookie jar
|
2021-06-24 09:47:38 -05:00 |
|
|
Spencer McIntyre
|
397c9ef140
|
Land #15333, Cisco HyperFlex File Upload RCE
|
2021-06-17 13:40:39 -04:00 |
|
|
Jack Heysel
|
281fce0c94
|
Cisco HyperFlex File Upload RCE module
beta draft
RCE working with linux/x64/meterpreter_reverse_tcp
rubocop
Updated title, removed newlines
Responded to comments
Rubo cop offenses
Update documentation/modules/exploit/linux/http/cisco_hyperflex_file_upload_rce.md
Co-authored-by: wvu <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/cisco_hyperflex_file_upload_rce.rb
Co-authored-by: wvu <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/cisco_hyperflex_file_upload_rce.rb
Co-authored-by: wvu <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/cisco_hyperflex_file_upload_rce.rb
Co-authored-by: wvu <wvu-r7@users.noreply.github.com>
Update modules/exploits/linux/http/cisco_hyperflex_file_upload_rce.rb
Co-authored-by: wvu <wvu-r7@users.noreply.github.com>
Responded to comments
Rubocop offenses
Added support for Java Dropper
Made changes to Linux Dropper
Rubocop
Improved check method, changed to default staged paylod, removed TODO
Switched to single-quoted strings
|
2021-06-17 12:38:47 -04:00 |
|
|
Yann Castel
|
dca4f3f471
|
fix download link
|
2021-06-17 15:19:42 +02:00 |
|
|
Yann Castel
|
0fda6b348d
|
initial commit
|
2021-06-17 15:15:59 +02:00 |
|
|
MucahitSaratar
|
ea7eaba7a9
|
added cve
Signed-off-by: MucahitSaratar <trregen222@gmail.com>
|
2021-06-10 09:35:42 -05:00 |
|
|
MucahitSaratar
|
4796779a29
|
Add more fixes to the module and documentation
|
2021-06-10 09:35:10 -05:00 |
|
|
MucahitSaratar
|
8e16d4a1c7
|
ipfire 2.25 core 156 remote code execution
Signed-off-by: MucahitSaratar <trregen222@gmail.com>
|
2021-06-10 09:34:13 -05:00 |
|
|
Spencer McIntyre
|
78f97d2fa7
|
Land #15281, Add Cisco HyperFlex exploit
|
2021-06-03 17:24:27 -04:00 |
|
|
William Vu
|
6efd312430
|
Add Cisco HyperFlex HX Data Platform exploit
CVE-2021-1497
CVE-2021-1498
|
2021-06-03 00:43:56 -05:00 |
|
|
M. Cory Billington
|
e62efe0690
|
Added module and documentation for SuiteCRM Log File RCE
|
2021-05-22 00:11:19 -05:00 |
|
|
William Vu
|
637e9cff48
|
Update vmware_vrops_mgr_ssrf_rce documentation
|
2021-05-06 18:30:20 -05:00 |
|
|
Christophe De La Fuente
|
7f667fab4e
|
Update documentation
|
2021-05-04 14:12:48 +02:00 |
|
|
Mehmet INCE
|
e3662034ea
|
Update documentation/modules/exploit/linux/http/gravcms_exec.md
Making consistent with documentation template.
Co-authored-by: cdelafuente-r7 <56716719+cdelafuente-r7@users.noreply.github.com>
|
2021-05-03 20:38:17 +03:00 |
|
|
Mehmet INCE
|
686f8c309a
|
Fix the module documentation
|
2021-05-03 12:17:24 +03:00 |
|
|
Mehmet INCE
|
9e04805c0e
|
Adding check method to gravcms exec
|
2021-05-03 11:14:43 +03:00 |
|
|
Mehmet INCE
|
e3d05395de
|
Add GravCMS exec
|
2021-05-03 11:14:42 +03:00 |
|
|
William Vu
|
a2047071e2
|
Refine vmware_vrops_mgr_ssrf_rce module doc again
I've used this Markdown trick before, but I wasn't sure it'd work here.
|
2021-05-02 21:18:53 -05:00 |
|