e3662034ea
Update documentation/modules/exploit/linux/http/gravcms_exec.md
...
Making consistent with documentation template.
Co-authored-by: cdelafuente-r7 <56716719+cdelafuente-r7@users.noreply.github.com >
2021-05-03 20:38:17 +03:00
686f8c309a
Fix the module documentation
2021-05-03 12:17:24 +03:00
9e04805c0e
Adding check method to gravcms exec
2021-05-03 11:14:43 +03:00
e3d05395de
Add GravCMS exec
2021-05-03 11:14:42 +03:00
a2047071e2
Refine vmware_vrops_mgr_ssrf_rce module doc again
...
I've used this Markdown trick before, but I wasn't sure it'd work here.
2021-05-02 21:18:53 -05:00
8b4a763eb1
Add words to vmware_vrops_mgr_ssrf_rce module doc
...
I had dropped this sentence for brevity, but now I realize it's useful.
2021-05-02 17:24:58 -05:00
4a93f15c80
Land #15136 , Set microfocus_ucmdb_unauth_deser default payload to reverse_python
2021-05-02 10:27:05 +00:00
e6b605369e
UCMDB: remove warning from docs and change Linux target to reverse_python
2021-05-02 16:53:02 +07:00
a79ddb5b3c
Fix "apache_ofbiz_deserialiation" typo in its doc
2021-05-01 17:23:52 -05:00
14e22bee37
Land #15105 , CVE-2021-21220 - Chrome V8 XOR typer mismatch OOB access RCE
2021-04-30 22:56:07 +01:00
165b25275a
minor documentation fix
2021-04-30 22:32:47 +01:00
0535489703
Land #14947 , add IGEL OS RCE
2021-04-30 15:49:11 -05:00
a59eebc937
remove systemd limit modification info
2021-04-30 15:44:22 -05:00
de22236902
add AutoCheck and update docs output
2021-04-30 15:38:57 -05:00
f267f0866c
Fix up documentation typos and improve JavaScript using comments from @timwr's review.
2021-04-30 10:54:09 -05:00
45a8e1f49f
Land #15087 , Operations Bridge Reporter support
2021-04-30 08:41:35 -05:00
994825dcc9
Land #15090 , Add exploit for CVE-2021-22502
2021-04-29 14:09:28 -04:00
b2142aada7
Land #15086 , Add exploit for CVE-2020-11857
2021-04-29 11:47:17 -04:00
4373b464ce
Update the markdown module docs a bit
2021-04-29 11:46:40 -04:00
9b528645b1
Fix minor typo on the Pwn2Own year
2021-04-27 13:26:27 -05:00
5541988d10
Upload working exploit and documentation for CVE-2021-21220
2021-04-27 13:23:35 -05:00
a4af80d3e1
Land #15005 , add VMware vRealize SSRF RCE
2021-04-27 09:19:55 -05:00
363db0e271
Land #14977 , add Apache Druid js rce
2021-04-26 12:01:19 -05:00
9b984ddbed
Update microfocus_obr_cmd_injection.md
2021-04-25 11:02:54 +08:00
651a34af53
add sploit for MF OBR cmd injection
2021-04-23 21:04:36 +07:00
02656a2c31
add clarification - it's for linux only
2021-04-23 19:23:18 +07:00
dcf457f7e9
Fix a typo in Eclipse Equinox product name
...
The osgi_console_exec module docs had a few stray characters for the
product name and description. The product name confused me when
googling for this module.
2021-04-23 11:57:48 +01:00
62ba64375c
fix typos and add default rport
2021-04-23 17:38:06 +07:00
8b3687b9e6
update privesc sploit
2021-04-23 16:38:25 +07:00
30c333b30d
fix typo in shrboadmin
2021-04-23 15:03:34 +07:00
71f5955b42
add OBR SSH module
2021-04-23 15:00:06 +07:00
a62d1dfbcd
Add some details back in
2021-04-21 16:02:21 -05:00
5111caf536
Address @gwillcox-r7 review
...
New words from @gwillcox-r7.
2021-04-21 13:10:21 -05:00
d4041cb5f4
Add module doc
2021-04-21 10:42:10 -05:00
93c7727622
Land #15058 , Cockpit CMS RCE
2021-04-21 13:21:55 +01:00
e0f13e44d1
Land #14699 , Add Nagios XI snmptrap RCE and docs (CVE-2020-5792)
2021-04-20 14:30:45 -05:00
13d3e4ae89
Add in CentOS 7 with NagiosXI 5.6.5 scenario
2021-04-20 14:12:56 -05:00
f241a050b8
Apply review comments and fixes to documentation and the module
2021-04-20 12:38:34 -05:00
51f9e1ae73
cockpit cms rce
2021-04-18 18:52:04 -04:00
4ac9304ca2
Land #14968 - Add Nagios XI Mibs.php Authenticated RCE module and docs (CVE-2020-5791)
2021-04-16 14:37:15 -05:00
496e074ec8
Add in fixes to documentation and module from review
2021-04-16 13:14:17 -05:00
97425602e9
fix typo and docs in chrome_simplifiedlowering_overflow
2021-04-16 14:59:43 +01:00
9e6f425427
Move exploit/linux/http/citrix_dir_traversal_rce
...
To exploit/freebsd/http/citrix_dir_traversal_rce. It's actually FreeBSD.
2021-04-15 19:13:25 -05:00
832ca92f42
Land #14700 , Add Nagios XI Plugins Filename Authenticate RCE module and docs (CVE-2020-35578)
2021-04-14 16:58:55 -05:00
61395f3cb1
Update scenarios in documentation and also update the module to handle cases where the version number may not be in a format that Rex::Text can immediately handle.
2021-04-14 16:32:53 -05:00
154e237edd
Add in fixes to documentation and module that were covered in the review process
2021-04-14 15:33:42 -05:00
a59e7e196d
Land #14701 , Rename Nagios XI authenticated RCE module and integrate Nagios XI mixin
2021-04-13 18:58:29 -05:00
9379f0356b
Add in 5.6.5 exploitation scenario to documentation
2021-04-13 17:42:47 -05:00
0aada27128
Update the documentation to account for the fact that the plugin name has to be check_ping and also update the module to randomize some of the fields where possible.
2021-04-13 17:15:34 -05:00
cdd589f592
Update documentation to wrap some overly long lines to meet msftidy_docs.rb requirements.
2021-04-13 16:36:38 -05:00
Mehmet INCE