83943adf8b
Land #14466 , add Aerospike UDF rce
2020-12-10 11:07:56 -06:00
d337d832b8
Land #14422 , add GitLab file read/rce
2020-12-09 11:34:14 -06:00
fb9b1c5de4
Land #14409 , add weak services technique to the service permissions LPE
2020-12-09 17:16:53 +00:00
6d7c6c054a
Update the module docs with more details for the registry technique
2020-12-08 17:39:34 -05:00
8e1cab0131
Land #14339 , add flexdotnetcms rce
2020-12-07 14:28:01 -06:00
835059f00c
[CVE-2020-10977] Gitlab arbitrary file read to RCE
2020-12-07 01:26:54 +00:00
6cdb484d7c
Add Aerospike Database UDF Lua Code Execution exploit
2020-12-05 14:15:22 +00:00
87eba681e0
Land #14365 , Update TP-Link AC1750 Pwn2Own 2019 module
2020-11-26 19:55:00 +00:00
a99ce581dd
Update TP-Link AC1750 Pwn2Own 2019 module
2020-11-26 12:56:02 +00:00
8e534ffc22
Split scenarios to separate blocks for each target
...
As suggested in https://github.com/rapid7/metasploit-framework/pull/14216#discussion_r512868894 .
2020-11-26 13:46:01 +01:00
536e1a1a02
Fix typo in documentation
2020-11-26 13:46:01 +01:00
c280bb67e7
Wrap at 140 characters to appease msftidy_docs.rb.
2020-11-26 13:46:01 +01:00
4dc564e62b
Added documentation for module.
2020-11-26 13:46:01 +01:00
95665e916c
Land #14416 , wordpress plugin 'simple file list' rce
2020-11-25 09:58:26 -05:00
94c157bc95
Tweak the documentation and module output just a little for clarity
2020-11-25 09:58:07 -05:00
31426576e0
Land #14264 , Add exploit/multi/http/kong_gateway_admin_api_rce
2020-11-25 11:09:02 +00:00
efdc7f062e
Land #14241 , OpenMediaVault 5.5.11 Authenticated Remote Code Execution
2020-11-24 13:42:53 -06:00
92c92f1573
simple file list rce
2020-11-21 08:51:07 -05:00
1031b12c57
Land #14206 , Rockwell FactoryTalk CVE-2020-12027 RCE
2020-11-20 08:49:39 -05:00
cbc5899edf
Add module docs for the Service Permissions LPE module
2020-11-19 14:17:20 -05:00
e7196256d4
Update rockwell_factorytalk_rce.md
2020-11-19 17:53:25 +07:00
d3f16c7061
Land #14361 , COOKIE for sharepoint_ssi_viewstate
2020-11-18 15:55:19 -06:00
dcd8ec1d70
Lock JDK to 8u131 to be safe
2020-11-18 15:17:12 -06:00
20a90557bf
Update module doc
2020-11-18 15:08:12 -06:00
bcdf5aa586
Clarify Windows target setup further
2020-11-18 14:25:10 -06:00
4d610b5500
Clarify using the generic installer for examples
2020-11-18 14:06:13 -06:00
83beae731f
Add WebLogic Administration Console Handle RCE
...
CVE-2020-14882
CVE-2020-14883
2020-11-18 10:56:02 -06:00
f73a88a39c
Land #14396 , hadoop_unauth_exec clarification
2020-11-16 12:44:13 -06:00
0feff932f2
Change docs to reflect the truth of the "vuln"
2020-11-16 11:38:00 -06:00
d6b412c58e
Land #14340 , Add HorizontCMS 1.0.0-beta exploit module and documentation
2020-11-13 13:03:04 +01:00
fcb507e412
Fix AutoCheck
...
I'm a big dummy.
2020-11-11 15:57:38 -06:00
04bcbd0253
Update module doc
2020-11-11 15:57:29 -06:00
42bdae919b
Add SaltStack Salt REST API RCE (CVE-2020-16846)
...
Leveraging CVE-2020-25592.
2020-11-11 13:09:26 -06:00
65e1ef4cb8
Land #14253 , add wp-file-manager rce for wordpress
2020-11-10 08:48:33 -06:00
34697ecc11
Apply further fixes from the review process
2020-11-09 12:11:25 -06:00
2ee9b47023
Minor update regrarding Options section
2020-11-09 08:59:14 +02:00
ad5b0af9c6
Fixes n' updates
2020-11-08 10:26:31 +02:00
e7a20ec47c
Add CVE ID to module and docs
2020-11-05 07:05:32 -05:00
0a9589166f
Add CVE ID
2020-11-05 06:55:37 -05:00
34715de016
Add jdk to msfvenom's APK template dependencies
2020-11-05 20:13:52 +10:00
8aceea1872
Add flexdotnetcms_upload_exec module and docs
2020-11-03 09:50:28 -05:00
cf954888da
Add horizontcms_upload_exec module and documentation
2020-11-02 13:01:13 -05:00
cb14287cb2
Add metasploit_msfvenom_apk_template_cmd_injection
2020-10-31 11:28:28 +10:00
bb9464801e
Make changes suggested in review
...
* Add better explanation of public-api-port option in documentation
* Add example in scenarios where admin API is on different host to
public API (therefore public-api-port option must be used)
* Add targeturi option
* Add version number that has been tested in 2 places in documentation
2020-10-27 21:13:45 +00:00
6258d5b561
Land #14296 , Move mercury_login module docs to documentation directory
2020-10-22 13:24:54 +00:00
5890bc45b5
move docs out of exploits folder
2020-10-21 16:37:02 -04:00
e4fb76d74f
Add version check to exchange_ecp_dlp_policy
...
And update modules/exploits/windows/http/sharepoint_ssi_viewstate.rb.
2020-10-20 14:32:43 -05:00
3970b69734
Land #14229 , Telerik UI for ASP.NET AJAX exploit
...
CVE-2017-11317 && CVE-2019-18935
2020-10-20 13:24:35 -05:00
1e568a6d1b
Merge branch 'land-14179' into upstream-master
2020-10-19 15:55:25 -05:00
253928570b
Update module doc
2020-10-19 11:18:00 -05:00
Shelby Pace