William Vu
|
e60aeca2db
|
Pass in session to CWD check
Oops, used to this being accessible universally. Not the case here.
|
2018-01-31 16:19:43 -06:00 |
|
William Vu
|
199a7cc134
|
Check for subdirectories and relative paths
|
2018-01-31 16:19:43 -06:00 |
|
William Vu
|
09d931e392
|
Split assignment across two lines for clarity
https://github.com/bbatsov/ruby-style-guide#use-if-case-returns
|
2018-01-31 16:19:43 -06:00 |
|
William Vu
|
15ff70fbda
|
Add warning to FileDropper for deleting CWD
|
2018-01-31 16:19:43 -06:00 |
|
bwatters-r7
|
8be2b1f59e
|
Land # 9407, Add BMC Server Automation RSCD Agent RCE exploit module
Merge branch 'land-9407' into upstream-master
|
2018-01-31 13:35:29 -06:00 |
|
h00die
|
08dcb5cc49
|
Land #9445 fixes for ssl labs scanner module
|
2018-01-29 20:51:05 -05:00 |
|
Jacob Robles
|
d4a0372238
|
Land #9457, Dup Scout Enterprise v10.4.16 - Import Command Buffer Overflow
|
2018-01-29 11:40:54 -06:00 |
|
Christian Mehlmauer
|
73b2b8dab1
|
Land #9470, Update docker image dependencies
fix #8211
|
2018-01-28 15:14:33 +01:00 |
|
Brent Cook
|
0408dd89a4
|
bump travis and rvm ruby versions
|
2018-01-28 03:09:34 -06:00 |
|
Brent Cook
|
f681077818
|
update dockerfile to include newer
|
2018-01-28 02:47:09 -06:00 |
|
William Vu
|
617545527d
|
Land #9466, metasploit-payloads bump to 1.3.28
|
2018-01-26 17:57:26 -06:00 |
|
Brent Cook
|
d82b8cbf63
|
bump payloads, fix php meterpreter
a syntax error slipped in, let's fix it
|
2018-01-26 17:48:11 -06:00 |
|
Aaron Soto
|
c390696ddf
|
Land #9379, Oracle Weblogic RCE exploit and documentation
|
2018-01-25 21:47:18 -06:00 |
|
William Vu
|
309deb9ee7
|
Land #9446, Post API fix for setuid_nmap
|
2018-01-25 16:00:40 -06:00 |
|
Jeffrey Martin
|
dee1ef0185
|
Land #9462, add missing payload tests
|
2018-01-25 12:34:36 -06:00 |
|
Jeffrey Martin
|
159de817f7
|
add missing payload tests
|
2018-01-25 11:09:41 -06:00 |
|
Daniel Teixeira
|
4cd5801e6f
|
Dup Scout Import Command Buffer Overflow
|
2018-01-24 20:47:46 +00:00 |
|
Daniel Teixeira
|
c1ff0c1e00
|
Dup Scout XML documentation
|
2018-01-24 20:47:02 +00:00 |
|
Kevin Kirsche
|
7b01785347
|
Add documentation to pull request
Added credit to @asoto-r7 for the documentation
|
2018-01-24 14:36:16 -05:00 |
|
bwatters-r7
|
fd4d5756bf
|
Land #9335, Added socket bind port option for reverse tcp payload.
Merge branch 'land-9335' into upstream-master
|
2018-01-24 11:50:10 -06:00 |
|
Matthew Kienow
|
6caba521d3
|
Land #9424, Add SharknAT&To external scanner
|
2018-01-24 12:40:29 -05:00 |
|
Brent Cook
|
a947f89960
|
add missing gemfile.lock update
|
2018-01-24 07:18:47 -06:00 |
|
Pearce Barry
|
eb572a3ef5
|
Land #8632, colorado ftp fixes
|
2018-01-23 17:45:07 -06:00 |
|
bwatters-r7
|
a27cfeaea9
|
Land #9416, Sync Breeze Enterprise 9.5.16 Import Command buffer overflow
Merge branch 'land-9416' into upstream-master
|
2018-01-23 16:35:51 -06:00 |
|
bwatters-r7
|
3922844650
|
ninja style changes
|
2018-01-23 16:34:49 -06:00 |
|
Adam Cammack
|
d81d50b491
|
Land #9430, Improve Hyper-V checkvm checks
|
2018-01-23 15:22:12 -06:00 |
|
bwatters-r7
|
fdefa4b244
|
Land #9449, bump metasploit-payloads from 1.3.25 to 1.3.27
rapid7/metasploit-payloads#264
rapid7/metasploit-payloads#263
Merge branch 'land-9449' into upstream-master
|
2018-01-23 13:41:28 -06:00 |
|
bwatters-r7
|
8eb6df41e3
|
Land #9205, Documentation for Kaltura <= 13.1.0 RCE (CVE-2017-14143)
Merge branch 'land-9205' into upstream-master
|
2018-01-23 12:45:59 -06:00 |
|
bwatters-r7
|
04806bc84a
|
Updates to documentation per h00die
|
2018-01-23 12:44:39 -06:00 |
|
bwatters-r7
|
685a950077
|
Land #9114, Add module for Kaltura <= 13.1.0 RCE (CVE-2017-14143)
Merge branch 'land-9114' into upstream-master
|
2018-01-23 12:35:59 -06:00 |
|
Adam Cammack
|
d08510596f
|
Keep reading external messages on stderr eof
|
2018-01-23 10:46:06 -06:00 |
|
William Vu
|
5684b9ed7c
|
Readd dropped return during refactoring
|
2018-01-23 10:12:15 -06:00 |
|
Brent Cook
|
17bf0dcdfb
|
Land #9452, expose linux/osx meterpreter process hiding
|
2018-01-23 10:07:58 -06:00 |
|
Brent Cook
|
df633247bb
|
expose linux/osx process rename functionality
|
2018-01-23 09:56:12 -06:00 |
|
Adam Cammack
|
be08af5404
|
More Python style fixes
|
2018-01-23 09:17:22 -06:00 |
|
bwatters-r7
|
d62d61667d
|
bump metasploit-payloads
|
2018-01-23 07:26:08 -06:00 |
|
William Vu
|
d3b3946669
|
Use Msf::Post::File#setuid? in setuid_nmap
|
2018-01-23 02:05:26 -06:00 |
|
William Vu
|
18b8fc2e0e
|
Add Msf::Post::File#setuid?
|
2018-01-23 02:05:26 -06:00 |
|
Brent Cook
|
03d1523d43
|
Land #6611, add native DNS to Rex, MSF mixin, sample modules
|
2018-01-22 23:54:32 -06:00 |
|
Brent Cook
|
afaf832034
|
remove verbose error from library, bubble consistent exceptions to the module instead
|
2018-01-22 23:52:20 -06:00 |
|
Brent Cook
|
a6e5944ec5
|
fix msftidy, add nicer errors on bind failure
|
2018-01-22 23:37:39 -06:00 |
|
Brent Cook
|
84b463f785
|
dnsruby is already a dependency
|
2018-01-22 23:37:15 -06:00 |
|
Brent Cook
|
aae77fc1a4
|
Land #9349, GoAhead LD_PRELOAD CGI Module
|
2018-01-22 23:10:36 -06:00 |
|
Adam Cammack
|
670055da4b
|
Prevent leaked sockets in edge cases
|
2018-01-22 22:14:16 -06:00 |
|
Adam Cammack
|
c76fa2c58f
|
Vendor async_timeout
|
2018-01-22 22:12:28 -06:00 |
|
Adam Cammack
|
964810146a
|
Python library style fixes
|
2018-01-22 22:10:32 -06:00 |
|
Brent Cook
|
9a35c324c0
|
Land #9352, Pull out HTTP-specific code from PacketDispatcher
|
2018-01-22 16:52:24 -06:00 |
|
Brent Cook
|
d1569f8280
|
Land #9413, Expand the number of class names searched when checking for an exploitable JMX server
|
2018-01-22 16:49:01 -06:00 |
|
Brent Cook
|
10fde42adc
|
Land #9431, Fix owa_login to handle inserting credentials for a hostname
|
2018-01-22 16:46:39 -06:00 |
|
Brent Cook
|
b12953fa85
|
Land #9404, update module author
|
2018-01-22 16:41:50 -06:00 |
|