Commit Graph

30968 Commits

Author SHA1 Message Date
adfoster-r7 34002bcf72 Land #15291, remove unneeded Msf::Post::File mixin from FortiOS module 2021-06-03 16:07:37 +01:00
Shelby Pace 8b737c2c60 Land #15231, add SuiteCRM log file rce 2021-06-03 09:11:00 -05:00
Grant Willcox bd8a96aa23 Apply minor RuboCop edit 2021-06-03 07:57:31 -05:00
Grant Willcox 107a6a3ce2 Fix up module by removing an import that was causing crashes 2021-06-03 07:48:12 -05:00
William Vu 6498554084 Clean up NetMotion Mobility exploit and docs
Refactor target selection once again.
2021-06-02 23:47:01 -05:00
William Vu 37a7ee2e28 Clean up f5_icontrol_rest_ssrf_rce
Escalate a warning and prefer a variable.
2021-06-02 20:32:47 -05:00
mcorybillington d2b539e3c9 authentication fix from add cookie jar merge 2021-06-02 16:54:09 -05:00
Shelby Pace 3056e8f946 add cookie jar and AutoCheck 2021-06-02 13:09:33 -05:00
Shelby Pace 187ab078c0 Land #15122, add Cacti sqli to rce exploit 2021-06-01 11:40:23 -05:00
Shelby Pace 598f925fd3 remove extra spaces 2021-06-01 11:37:45 -05:00
Spencer McIntyre 74e324e8c1 Land #15260, Add #pidof to Msf::Post::Process
Add the #pidof method to Msf::Post::Process and update #get_processes to
fallback to the shell version if it fails for some reason.
2021-06-01 09:53:08 -04:00
pingport80 fe8e586b22 fall to shell when meterpreter fails get_processes
shift `pidof` to `Msf::Post::Process`
2021-06-01 18:51:39 +05:30
h00die d849376ae6 rebase and rubocop 2021-05-29 15:56:50 -04:00
h00die 7e758f8b74 review comments 2021-05-29 15:55:24 -04:00
h00die 825cc9d284 upgraded to meterp 2021-05-29 15:55:24 -04:00
h00die 95331c9ada set default payload 2021-05-29 15:55:24 -04:00
h00die 94d122f573 more suggestions 2021-05-29 15:55:24 -04:00
Alan Foster 38929227d7 Update cacti rce to use cookie jar api 2021-05-29 15:55:24 -04:00
h00die fde3334b70 some review comments 2021-05-29 15:55:24 -04:00
h00die 721a47ad7f cacti 1.2.12 sql to rce 2021-05-29 15:55:24 -04:00
mcorybillington dea7f50d36 Cover log file restoriation in all failure cases 2021-05-29 09:25:10 -05:00
M. Cory Billington 1451e9b56b Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-05-27 11:59:32 -05:00
M. Cory Billington fa1ad1b32e Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-05-27 11:59:28 -05:00
M. Cory Billington b4f699fb15 Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
2021-05-27 11:59:23 -05:00
Spencer McIntyre 4ae442496b Land #15267, Shodan search fix for max pages 2021-05-27 09:21:09 -04:00
owein 733cd73cfc Fix the shodan search module max pages 2021-05-27 08:53:54 -04:00
mcorybillington 2d9fdb97ad Check that initial request is valid 2021-05-26 12:23:36 -05:00
mcorybillington 57ef94cfdf Remove non boolean return from authentication 2021-05-25 22:55:28 -05:00
mcorybillington 91284db05d Check returned responses on each stage and output status info 2021-05-25 22:49:27 -05:00
mcorybillington ed1f5db48d Check method and authentication fixes 2021-05-25 20:38:32 -05:00
adfoster-r7 f26d0b676a Land #14984 - OSX Post exploitation .gitignore retrieval 2021-05-26 00:50:43 +01:00
Spencer McIntyre 64eeedf218 Land #15246, Refactor as Msf::Post::Process 2021-05-25 13:07:21 -04:00
Spencer McIntyre 8d834afeae Land #15236, Add additional Xen check to checkvm 2021-05-25 11:15:14 -04:00
Jeffrey Martin 5b3edd4cb2 still need to include Msf::Post::File
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com>
2021-05-25 08:35:55 -05:00
cgranleese-r7 dbd85a8795 Land #15243, Add check method to tomcat ghostcat module 2021-05-25 13:12:22 +01:00
Jeffrey Martin 0cefd8eaa6 refactor post API for process lists 2021-05-24 18:39:16 -05:00
Shelby Pace 9f2dae38c8 Land #15079, add meterpreter compat requirements 2021-05-24 16:00:08 -05:00
Shelby Pace 8e4a33f2a2 Land #15223, move TokenMagic validation logic 2021-05-24 14:51:13 -05:00
Alan Foster 275b5b85e1 Add check method to tomcat ghostcat module 2021-05-24 19:10:10 +01:00
Sean M c484391949 Update checkvm.rb
Removed spaces at end of lines 99/110 from msftidy complaints
2021-05-23 13:16:22 -04:00
M. Cory Billington 01a8a6ab30 Remove unrequired reference to msfcore 2021-05-23 12:12:35 -05:00
Sean M 5d61ce4a0b Update checkvm.rb
Extended Xen VM identification - AWS Xen VMs are now detected new  kernel modules.
2021-05-23 10:23:56 -04:00
M. Cory Billington 2757e7163c Remove trailing white space found during msftidy 2021-05-22 18:44:15 -05:00
M. Cory Billington 81c056df3b Removed unused return value 2021-05-22 01:32:17 -05:00
M. Cory Billington 963cea939f Changed request method to preferred method 2021-05-22 01:29:24 -05:00
M. Cory Billington ab5256a106 Use more robust version checking and add missing return statements. 2021-05-22 01:26:28 -05:00
M. Cory Billington 64f9ea0848 Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
Change Metasploit download link to https

Co-authored-by: bcoles <bcoles@gmail.com>
2021-05-22 00:59:23 -05:00
M. Cory Billington f27c0a481c Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
Co-authored-by: bcoles <bcoles@gmail.com>
2021-05-22 00:56:44 -05:00
M. Cory Billington e62efe0690 Added module and documentation for SuiteCRM Log File RCE 2021-05-22 00:11:19 -05:00
bwatters 6b42fa7d20 Land #15220, Added OS version info to ntlm_info_enumeration.rb
Merge branch 'land-15220' into upstream-master
2021-05-21 15:59:21 -05:00