690d22f759
Rapid7 compiled binary
2023-02-01 10:08:13 -05:00
2c72cc145a
updates to module
2023-01-31 20:05:33 -05:00
fa687d3614
argv instead of hardcoded payload path
2023-01-31 16:02:25 -05:00
5a374533af
cve-2022-1043
2023-01-31 16:02:25 -05:00
8d58eb6279
cve-2022-1043
2023-01-31 16:02:25 -05:00
022760d24a
Land #17300 , linux LPE cve-2022-22942 module
...
This PR adds a linux priv esc against VMWare virtual machines
with kernel 4.14-rc1 - 5.17-rc1 due to a VMWare driver bug.
2023-01-31 14:07:55 -05:00
56728fc7c2
Land #17573 , modules/exploits/linux/ssh Resolve Rubocop violations
2023-01-31 14:12:03 +00:00
bbf17c167c
Land #17511 , add exploit for CVE-2022-44877 command injection in CentOS Control Web Panel
2023-01-31 14:05:19 +00:00
11cf391da8
modules/exploits/linux/ssh: Resolve Rubocop violations
2023-01-31 23:59:22 +11:00
672fb9ce9f
Land #17460 , add support for feature kerberos authentication
2023-01-26 17:47:27 +00:00
f81195d0cc
Fix a typo
2023-01-25 13:45:18 -05:00
153af9fb68
Land #17407 , add Cacti unauth command injection
2023-01-23 13:06:46 -06:00
58cd5bb003
specify command stager flavors
2023-01-23 11:53:19 -06:00
6fe0933c1e
Add exploit for CVE-2022-44877
2023-01-20 09:04:24 -05:00
3a0b694790
better engrish
2023-01-18 20:12:49 -05:00
c823295915
cleanup better
2023-01-18 16:19:48 -05:00
158c557d58
Update LICENSE file and location of source file
2023-01-17 17:28:22 -05:00
e28ff3b160
minor fixes
2023-01-17 15:30:36 -05:00
be7ca91a8f
cve-2022-22942
2023-01-17 15:30:36 -05:00
7e23c34e6c
Apply fixes per code review
2023-01-17 12:44:22 -06:00
541dab9365
simplified messaging
2023-01-17 12:44:20 -06:00
77687bff3f
init module
2023-01-17 12:44:20 -06:00
eddac9321c
Merge 6.2.36 master into kerberos feature branch
2023-01-13 17:31:02 +00:00
8472efed02
fix typos, add reference, don't use methods to wrap datastore options
2023-01-13 14:53:29 +02:00
725f83601f
Land #17435 , Restore raw_send_recv for module using SMTP mixin
2023-01-05 11:29:53 -06:00
f39973de86
Fix up missing option in documentation and also add some additional validation on server response.
2023-01-04 17:02:05 -06:00
11b95b2094
added additional response check
2023-01-04 17:02:04 -06:00
c7b59b4815
updates based on gwillcox-r7 review comments
2023-01-04 17:02:04 -06:00
f9ecaa92ae
updated references section
2023-01-04 17:02:03 -06:00
4db15346e1
init commit module
2023-01-04 17:01:58 -06:00
6b5948a69d
restore raw_send_recv for module using SMTP mixin
...
changes in #16153 adjusted modules that were not utilizing
`Exploit::Remote::SMTPDeliver` in error restore calls to `raw_send_recv`
that is no longer shadowed by in `SMTPDeliver`.
2023-01-04 14:45:58 -06:00
95d361754f
Merge branch 'upstream-master' into merge-6.2.33-master-into-kerberos-feature-branch
2022-12-28 13:59:42 +00:00
20d70799a7
Land #17298 , Add opentsdb_yrange_cmd_injection module and docs
2022-12-23 13:38:58 +01:00
83b11a69a8
Make rubocop happy
2022-12-23 13:38:16 +01:00
7fa557805e
add final code review suggestions
2022-12-23 11:29:29 +02:00
8f96746551
fix typo and add credit for discovery
2022-12-23 11:11:31 +02:00
4c2dfe0279
add cacti_unauthenticated_cmd_injection
2022-12-22 17:55:45 +02:00
a9ccfe31b7
Merge branch 'upstream-master' into merge-msf-6.2.31-into-kerberos-feature-branch
2022-12-13 19:40:39 +00:00
e7e2849f6d
Land #17183 , Zimbra fixes
2022-12-06 15:38:37 +01:00
ddaf5a3f0d
Remove unecessary return statement
2022-12-06 15:07:28 +01:00
54cd055276
Land #17286 , CVE-2021-22015 vCenter priv esc
...
Merge branch 'land-17286' into upstream-master
2022-12-05 09:31:01 -06:00
431804ef15
Fix typos: Replace 'the the' with 'the'
2022-12-04 17:41:24 +11:00
867059efe5
add super to cleanup command
2022-12-01 14:55:43 -05:00
62b484fdc7
blank over empty
2022-12-01 14:34:09 -05:00
039b611fae
fix enlightenment check method
2022-11-30 17:06:50 -05:00
25a0d0ff0e
Fixes #17227 - polkit_dbus_auth_bypass module when run from a command shell
2022-11-25 15:13:57 +11:00
78dfaa12ef
add opentsdb_yrange_cmd_injection module and docs
2022-11-24 21:37:24 +02:00
6350daf2d8
Land #17273 , F5 exploit module CVE-2022-41800
...
F5 exploit module CVE-2022-41800 (authenticated RCE in RPM code)
2022-11-23 17:57:18 -05:00
b7cf112d42
Fix an issue where the session handler would close too early on Zimbra modules
2022-11-23 13:09:47 -08:00
ffbf8b303a
Change a 'return 0' to 'fail_with', per Christophe's request
2022-11-23 12:51:51 -08:00
Jack Heysel