Commit Graph

44903 Commits

Author SHA1 Message Date
William Vu e60aeca2db Pass in session to CWD check
Oops, used to this being accessible universally. Not the case here.
2018-01-31 16:19:43 -06:00
William Vu 199a7cc134 Check for subdirectories and relative paths 2018-01-31 16:19:43 -06:00
William Vu 09d931e392 Split assignment across two lines for clarity
https://github.com/bbatsov/ruby-style-guide#use-if-case-returns
2018-01-31 16:19:43 -06:00
William Vu 15ff70fbda Add warning to FileDropper for deleting CWD 2018-01-31 16:19:43 -06:00
bwatters-r7 8be2b1f59e Land # 9407, Add BMC Server Automation RSCD Agent RCE exploit module
Merge branch 'land-9407' into upstream-master
2018-01-31 13:35:29 -06:00
h00die 08dcb5cc49 Land #9445 fixes for ssl labs scanner module 2018-01-29 20:51:05 -05:00
Jacob Robles d4a0372238 Land #9457, Dup Scout Enterprise v10.4.16 - Import Command Buffer Overflow 2018-01-29 11:40:54 -06:00
Christian Mehlmauer 73b2b8dab1 Land #9470, Update docker image dependencies
fix #8211
2018-01-28 15:14:33 +01:00
Brent Cook 0408dd89a4 bump travis and rvm ruby versions 2018-01-28 03:09:34 -06:00
Brent Cook f681077818 update dockerfile to include newer 2018-01-28 02:47:09 -06:00
William Vu 617545527d Land #9466, metasploit-payloads bump to 1.3.28 2018-01-26 17:57:26 -06:00
Brent Cook d82b8cbf63 bump payloads, fix php meterpreter
a syntax error slipped in, let's fix it
2018-01-26 17:48:11 -06:00
Aaron Soto c390696ddf Land #9379, Oracle Weblogic RCE exploit and documentation 2018-01-25 21:47:18 -06:00
William Vu 309deb9ee7 Land #9446, Post API fix for setuid_nmap 2018-01-25 16:00:40 -06:00
Jeffrey Martin dee1ef0185 Land #9462, add missing payload tests 2018-01-25 12:34:36 -06:00
Jeffrey Martin 159de817f7 add missing payload tests 2018-01-25 11:09:41 -06:00
Daniel Teixeira 4cd5801e6f Dup Scout Import Command Buffer Overflow 2018-01-24 20:47:46 +00:00
Daniel Teixeira c1ff0c1e00 Dup Scout XML documentation 2018-01-24 20:47:02 +00:00
Kevin Kirsche 7b01785347 Add documentation to pull request
Added credit to @asoto-r7 for the documentation
2018-01-24 14:36:16 -05:00
bwatters-r7 fd4d5756bf Land #9335, Added socket bind port option for reverse tcp payload.
Merge branch 'land-9335' into upstream-master
2018-01-24 11:50:10 -06:00
Matthew Kienow 6caba521d3 Land #9424, Add SharknAT&To external scanner 2018-01-24 12:40:29 -05:00
Brent Cook a947f89960 add missing gemfile.lock update 2018-01-24 07:18:47 -06:00
Pearce Barry eb572a3ef5 Land #8632, colorado ftp fixes 2018-01-23 17:45:07 -06:00
bwatters-r7 a27cfeaea9 Land #9416, Sync Breeze Enterprise 9.5.16 Import Command buffer overflow
Merge branch 'land-9416' into upstream-master
2018-01-23 16:35:51 -06:00
bwatters-r7 3922844650 ninja style changes 2018-01-23 16:34:49 -06:00
Adam Cammack d81d50b491 Land #9430, Improve Hyper-V checkvm checks 2018-01-23 15:22:12 -06:00
bwatters-r7 fdefa4b244 Land #9449, bump metasploit-payloads from 1.3.25 to 1.3.27
rapid7/metasploit-payloads#264
rapid7/metasploit-payloads#263

Merge branch 'land-9449' into upstream-master
2018-01-23 13:41:28 -06:00
bwatters-r7 8eb6df41e3 Land #9205, Documentation for Kaltura <= 13.1.0 RCE (CVE-2017-14143)
Merge branch 'land-9205' into upstream-master
2018-01-23 12:45:59 -06:00
bwatters-r7 04806bc84a Updates to documentation per h00die 2018-01-23 12:44:39 -06:00
bwatters-r7 685a950077 Land #9114, Add module for Kaltura <= 13.1.0 RCE (CVE-2017-14143)
Merge branch 'land-9114' into upstream-master
2018-01-23 12:35:59 -06:00
Adam Cammack d08510596f Keep reading external messages on stderr eof 2018-01-23 10:46:06 -06:00
William Vu 5684b9ed7c Readd dropped return during refactoring 2018-01-23 10:12:15 -06:00
Brent Cook 17bf0dcdfb Land #9452, expose linux/osx meterpreter process hiding 2018-01-23 10:07:58 -06:00
Brent Cook df633247bb expose linux/osx process rename functionality 2018-01-23 09:56:12 -06:00
Adam Cammack be08af5404 More Python style fixes 2018-01-23 09:17:22 -06:00
bwatters-r7 d62d61667d bump metasploit-payloads 2018-01-23 07:26:08 -06:00
William Vu d3b3946669 Use Msf::Post::File#setuid? in setuid_nmap 2018-01-23 02:05:26 -06:00
William Vu 18b8fc2e0e Add Msf::Post::File#setuid? 2018-01-23 02:05:26 -06:00
Brent Cook 03d1523d43 Land #6611, add native DNS to Rex, MSF mixin, sample modules 2018-01-22 23:54:32 -06:00
Brent Cook afaf832034 remove verbose error from library, bubble consistent exceptions to the module instead 2018-01-22 23:52:20 -06:00
Brent Cook a6e5944ec5 fix msftidy, add nicer errors on bind failure 2018-01-22 23:37:39 -06:00
Brent Cook 84b463f785 dnsruby is already a dependency 2018-01-22 23:37:15 -06:00
Brent Cook aae77fc1a4 Land #9349, GoAhead LD_PRELOAD CGI Module 2018-01-22 23:10:36 -06:00
Adam Cammack 670055da4b Prevent leaked sockets in edge cases 2018-01-22 22:14:16 -06:00
Adam Cammack c76fa2c58f Vendor async_timeout 2018-01-22 22:12:28 -06:00
Adam Cammack 964810146a Python library style fixes 2018-01-22 22:10:32 -06:00
Brent Cook 9a35c324c0 Land #9352, Pull out HTTP-specific code from PacketDispatcher 2018-01-22 16:52:24 -06:00
Brent Cook d1569f8280 Land #9413, Expand the number of class names searched when checking for an exploitable JMX server 2018-01-22 16:49:01 -06:00
Brent Cook 10fde42adc Land #9431, Fix owa_login to handle inserting credentials for a hostname 2018-01-22 16:46:39 -06:00
Brent Cook b12953fa85 Land #9404, update module author 2018-01-22 16:41:50 -06:00