 tastyrce
|
e62038cfe5
|
improve version parsing
|
2025-03-27 02:01:03 -04:00 |
|
|
tastyrce
|
cbfcc5bd13
|
add condition for http code
|
2025-03-27 00:40:13 -04:00 |
|
|
tastyrce
|
f1175420f8
|
remove get and post wrappers
|
2025-03-27 00:37:40 -04:00 |
|
|
tastyrce
|
e70c8aa921
|
RuboCop Fixes
|
2025-03-22 02:37:41 -04:00 |
|
|
tastyrce
|
d0bd559602
|
add cmsms exploit module
|
2025-03-22 02:35:27 -04:00 |
|
|
msutovsky-r7
|
c7c0047ea2
|
Land #19802, module for CVE-2024-30085
Working Draft for cve-2024-30085
|
2025-03-20 21:46:26 +01:00 |
|
|
e2002e
|
584d7dad35
|
fix resolvable()
|
2025-03-20 16:26:33 +01:00 |
|
|
e2002e
|
d16c3e93ba
|
Merge https://github.com/rapid7/metasploit-framework
|
2025-03-20 16:25:13 +01:00 |
|
|
e2002e
|
4be6f49f6d
|
use a variable for the domain; use .present? for resolvable
|
2025-03-20 16:23:09 +01:00 |
|
|
bwatters-r7
|
ec67435de9
|
Rebase and squash for CVE-2024-30085
|
2025-03-20 09:03:28 -05:00 |
|
|
cgranleese-r7
|
4764ebbe39
|
Land #19932, Fix crash when running mssql payload against sessions
|
2025-03-20 11:20:06 +00:00 |
|
|
Brendan
|
413c1931f7
|
Merge pull request #19832 from cdelafuente-r7/mod/relay/smb_to_ldap
SMB to LDAP relay module
|
2025-03-17 11:14:24 -05:00 |
|
|
adfoster-r7
|
9917f574c0
|
Merge pull request #19913 from h00die/hash_validator
hash_cracker_validator script to verify hash cracking
|
2025-03-17 15:50:07 +00:00 |
|
|
msutovsky-r7
|
e484855c05
|
Land #19960, adding more robust check for CVE-2024-30038
Fix check method for Windows Kernel Time of Check Time of Use LPE (CVE-2024-30038)
|
2025-03-17 10:13:14 +01:00 |
|
|
e2002e
|
7bbd6406e7
|
use new domain name.
|
2025-03-15 03:18:44 +01:00 |
|
|
Christophe De La Fuente
|
5305e04891
|
Add a check for the LDAP session feature
|
2025-03-14 15:28:39 +01:00 |
|
|
Christophe De La Fuente
|
f8760a9e3b
|
Update from code review
|
2025-03-14 15:28:39 +01:00 |
|
|
Christophe De La Fuente
|
d4fd890fed
|
Add the smb_to_ldap relay module and documentation
|
2025-03-14 15:28:39 +01:00 |
|
|
e2002e
|
5e24b8448d
|
Merge https://github.com/rapid7/metasploit-framework
|
2025-03-14 15:22:59 +01:00 |
|
|
e2002e
|
d982678154
|
update info
|
2025-03-14 13:20:32 +01:00 |
|
|
msutovsky-r7
|
741a222e9a
|
Land #19961, fixing incorrect URL in the InvoiceNinja module
BUGFIX invoiceninja module - fixed invalid attackerkb reference
|
2025-03-14 11:15:23 +01:00 |
|
|
msutovsky-r7
|
9961bfbc58
|
Land #19950, module for InvoiceShelf unauthenticated PHP deserialization
InvoiceShelf unauthenticated PHP deserialization vulnerability [CVE-2024-55556]
|
2025-03-14 10:21:56 +01:00 |
|
|
h00die-gr3y
|
84012fd60c
|
fixed invalid attackerkb reference
|
2025-03-14 08:23:10 +00:00 |
|
|
h00die-gr3y
|
0ca2599f48
|
update based on review comments
|
2025-03-14 08:04:22 +00:00 |
|
|
Jack Heysel
|
cf08a4e533
|
Readd missing checks
|
2025-03-13 13:14:13 -07:00 |
|
|
Jack Heysel
|
82f07c171b
|
Fix check method
|
2025-03-13 13:00:24 -07:00 |
|
|
Spencer McIntyre
|
f3d644cd84
|
Use real SiteReference instances
This fixes an issue in how the vulnerabilities are reported
|
2025-03-12 16:26:54 -04:00 |
|
|
h00die-gr3y
|
1ca57c86fc
|
added base64 encoding in php payload execution
|
2025-03-11 21:30:32 +00:00 |
|
|
h00die-gr3y
|
e341398871
|
small update on module and documentation
|
2025-03-10 19:35:37 +00:00 |
|
|
h00die-gr3y
|
281b728000
|
initial module and documentation
|
2025-03-07 17:34:22 +00:00 |
|
|
msutovsky-r7
|
196d95b2bf
|
Land #19944, adding dynamic session for module CVE-2025-0655
Update dtale_rce_cve_2025_0655.rb to use dynamically generated session
|
2025-03-07 14:35:51 +01:00 |
|
|
Takah1ro
|
edb47d968c
|
Update function name after applied suggestion
|
2025-03-07 08:05:00 +09:00 |
|
|
Takahiro Yokoyama
|
233c710d82
|
Update modules/exploits/linux/http/dtale_rce_cve_2025_0655.rb
Co-authored-by: Simon Janusz <85949464+sjanusz-r7@users.noreply.github.com>
|
2025-03-07 07:54:50 +09:00 |
|
|
Spencer McIntyre
|
f6c8b98bd6
|
Finish up the ESC8 check after more research
|
2025-03-05 13:44:33 -05:00 |
|
|
Spencer McIntyre
|
04842eaaee
|
Add a check method to the smb_relay module
|
2025-03-05 13:44:33 -05:00 |
|
|
Spencer McIntyre
|
b43dc8be08
|
Switch relay modules, add ESC8 check method
|
2025-03-05 13:44:33 -05:00 |
|
|
Spencer McIntyre
|
7950d866f3
|
Use the existing #validate method for options
|
2025-03-05 13:44:33 -05:00 |
|
|
Diego Ledda
|
c698979dd3
|
Land #19935, SonicWall NSv HTTP Login Module
Land #19935, SonicWall NSv HTTP Login Module
|
2025-03-05 18:27:34 +01:00 |
|
|
adfoster-r7
|
8604c72ef4
|
Merge pull request #19895 from cgranleese-r7/update-dead-module-references
Update dead module references
|
2025-03-05 16:57:05 +00:00 |
|
|
Takah1ro
|
bf5ae87a3d
|
Use dynamically generated session
|
2025-03-05 12:56:01 +09:00 |
|
|
Martin Sutovsky
|
8d7bbdd84f
|
Sonicwall module
|
2025-03-04 08:20:22 +01:00 |
|
|
jheysel-r7
|
b1d0eedc26
|
Merge pull request #19712 from smashery/naa_creds
NAA creds from SCCM
|
2025-03-03 13:50:31 -08:00 |
|
|
Jack Heysel
|
4d57710d92
|
Make timeout configurable and nil check content
|
2025-03-03 11:47:10 -08:00 |
|
|
adfoster-r7
|
2f958c21af
|
Fix crash when running mssql payload against sessions
|
2025-03-03 19:20:56 +00:00 |
|
|
msutovsky-r7
|
3c4d0aae2f
|
Land #19899, D-Tale remote code execution module
Add D-Tale RCE module (CVE-2024-3408, CVE-2025-0655)
|
2025-03-03 13:04:45 +01:00 |
|
|
Takah1ro
|
47351e4959
|
Use FETCH_DELETE as default
|
2025-03-03 20:52:55 +09:00 |
|
|
Takah1ro
|
65d2b6380b
|
Update vulnerable version
|
2025-03-02 12:14:25 +09:00 |
|
|
Takah1ro
|
77c3ce52e0
|
Improve:
* Support the prior to 3.13.0 versions
* CVE-2024-3408 bypass for authentication
|
2025-03-01 11:58:28 +09:00 |
|
|
Takah1ro
|
316ecd4d04
|
Use FETCH_FILELESS as default
|
2025-03-01 11:55:43 +09:00 |
|
|
Spencer McIntyre
|
b3602b2ade
|
Merge pull request #19919 from jheysel-r7/fix/nil_check/esc_cert_finder
Ldap vulnerable cert finder minor fix for ESC13 detection
|
2025-02-28 07:46:06 -05:00 |
|