 Brent Cook
|
082a8949e4
|
Land #7694, Initial stageless mettle payloads
|
2016-12-12 13:01:31 -06:00 |
|
|
Jon Hart
|
7aa743b205
|
Land #7682, @godinezj's improvements to #7604
|
2016-12-12 10:54:15 -08:00 |
|
|
Adam Cammack
|
ccba73b324
|
Add stageless mettle for Linux/zarch
|
2016-12-09 18:30:52 -06:00 |
|
|
Adam Cammack
|
24cf756f5b
|
Add stageless mettle for Linux/x86
|
2016-12-09 18:29:34 -06:00 |
|
|
Adam Cammack
|
62a9a31222
|
Add stageless mettle for Linux/x64
|
2016-12-09 18:28:29 -06:00 |
|
|
Adam Cammack
|
7d36d41b20
|
Add stageless mettle for Linux/ppc64le
|
2016-12-09 18:27:22 -06:00 |
|
|
Adam Cammack
|
ee7d5fc0c9
|
Add stageless mettle for Linux/ppc
|
2016-12-09 18:25:57 -06:00 |
|
|
Adam Cammack
|
4570a7198c
|
Add stageless mettle for Linux/mipsle
|
2016-12-09 18:24:12 -06:00 |
|
|
Adam Cammack
|
25b069f6b4
|
Add stageless mettle for Linux/mipsbe
|
2016-12-09 18:23:03 -06:00 |
|
|
Adam Cammack
|
7aec68c1fe
|
Add stageless mettle for Linux/mips64
|
2016-12-09 18:21:52 -06:00 |
|
|
Adam Cammack
|
7a654ca76c
|
Add stageless mettle for Linux/armle
|
2016-12-09 18:19:58 -06:00 |
|
|
Adam Cammack
|
b74482aa6e
|
Add stageless mettle for Linux/armbe
|
2016-12-09 18:18:22 -06:00 |
|
|
Adam Cammack
|
12b296ab1a
|
Add stageless mettle for Linux/aarch64
|
2016-12-09 18:05:34 -06:00 |
|
|
William Vu
|
f0dca7abbf
|
Land #7692, print_error for error_sql_injection
|
2016-12-09 17:09:52 -06:00 |
|
|
William Vu
|
2b0bce6459
|
Land #7690, drupal_views_user_enum user count fix
|
2016-12-09 16:55:01 -06:00 |
|
|
William Vu
|
4e235be484
|
Ensure a trailing slash for base_uri
Technically, the GET parameters should be in vars_get, but we don't want
to refactor the entire module right now.
|
2016-12-09 16:53:58 -06:00 |
|
|
Jin Qian
|
8780c325a7
|
Fixed issues #7691, silent exit.
Add a print statement to alert user what is missing, user could be confused that "show missing" is empty yet something is missing.
|
2016-12-09 16:20:44 -06:00 |
|
|
dmohanty-r7
|
77dd952370
|
Land #7592, check nil return value when using redis_command
|
2016-12-09 16:07:12 -06:00 |
|
|
Jin Qian
|
17c12a78f5
|
Fixed issue #7689, count of found users not accurate
In module drupal_views_user_enum, the count of found users is not accurate.
Fixed it by doing flatten before doing counting.
|
2016-12-09 15:19:43 -06:00 |
|
|
Brent Cook
|
50f95f9940
|
Land #7681, Get ready for stageless mettle
|
2016-12-09 09:31:47 -06:00 |
|
|
Javier Godinez
|
0d41160b03
|
Sanity checks, errors out with nil ptr if API call fails
|
2016-12-08 16:14:10 -08:00 |
|
|
Javier Godinez
|
a17d1a7e19
|
Added options for setting the PASSWORD and GROUPNAME
|
2016-12-08 16:13:31 -08:00 |
|
|
Jon Hart
|
4614b7023d
|
Land #7604, @godinezj's post module for creating AWS IAM accounts
|
2016-12-08 14:26:22 -08:00 |
|
|
Jon Hart
|
aa29fcad80
|
Update docs and pretty print the loot
|
2016-12-08 14:25:07 -08:00 |
|
|
Jon Hart
|
70668c289f
|
Use better loot args
|
2016-12-08 13:14:36 -08:00 |
|
|
Jon Hart
|
162204b338
|
Support creating a password for the user, etc
|
2016-12-08 12:56:00 -08:00 |
|
|
wchen-r7
|
ba9ce3fcfb
|
Land #7665, Add ABORT_ON_LOCKOUT option for smb_login
|
2016-12-07 15:52:50 -06:00 |
|
|
Javier Godinez
|
a9cb08a352
|
Token should be passed as nil if not set
|
2016-12-07 10:16:41 -08:00 |
|
|
OJ
|
b902b4c28a
|
Update payload sizes
|
2016-12-07 15:08:45 +10:00 |
|
|
Rich Whitcroft
|
d3a8409a49
|
prevent further lockouts in smb_login
|
2016-12-06 21:53:08 -05:00 |
|
|
Jon Hart
|
1c3f0437ed
|
Move some options back to non-advanced
|
2016-12-06 17:39:37 -08:00 |
|
|
Jon Hart
|
a13382c80b
|
Address most of rubocop's nits
|
2016-12-06 17:10:34 -08:00 |
|
|
Jon Hart
|
8f21a1f68c
|
move most options to advance, since they never change
Also, doc empty username
|
2016-12-06 16:29:00 -08:00 |
|
|
Adam Cammack
|
c5641c9681
|
Factor out mettle configuration
Also cleans up some stuff: s/url/uri/ and base-64 encodes UUIDs
|
2016-12-06 18:28:48 -06:00 |
|
|
Brent Cook
|
7346223a65
|
update payloads
|
2016-12-06 07:16:44 -06:00 |
|
|
Jin Qian
|
4a35f8449a
|
Fixed issue #7650 by matching Server header using regex as Wei suggested
The suggestion by Wei is simpler than the one I checked in which checks for presence of Server header before calling include method.
|
2016-12-02 20:26:38 -06:00 |
|
|
Jin Qian
|
35fdf1473b
|
Fixed issue #7650 where etherpad_duo_login module may crash
Add check for presence of Server header.
|
2016-12-02 18:07:18 -06:00 |
|
|
William Vu
|
ff8141c1b5
|
Land #7644, cred fix for vbulletin_vote_sqli_exec
|
2016-12-01 15:47:31 -06:00 |
|
|
Jin Qian
|
11906eb540
|
Fix issue #7645 where dolibarr_login module crashed
Add "res" (http response) when trying to retrieve the cookie
|
2016-12-01 15:38:26 -06:00 |
|
|
wchen-r7
|
41355898fa
|
Remove extra def report_cred in vbulletin_vote_sqli_exec
|
2016-12-01 15:31:24 -06:00 |
|
|
wchen-r7
|
9325ef8d8f
|
Land #7573, Add WP Symposium Plugin SQLI aux mod to steal credentials
|
2016-12-01 14:56:30 -06:00 |
|
|
wchen-r7
|
6b5dba72d4
|
Update description
|
2016-12-01 14:55:16 -06:00 |
|
|
wchen-r7
|
64bc029106
|
Fix Ruby style
|
2016-12-01 14:53:55 -06:00 |
|
|
wchen-r7
|
90ec367a99
|
Add method to save creds to database
|
2016-12-01 14:52:51 -06:00 |
|
|
wchen-r7
|
174cd74900
|
Land #7532, Add bypass UAC local exploit via Event Viewer module
|
2016-12-01 11:16:49 -06:00 |
|
|
wchen-r7
|
1e9d80c998
|
Fix another typo
|
2016-12-01 11:16:06 -06:00 |
|
|
wchen-r7
|
b8243b5d10
|
Fix a typo
|
2016-12-01 11:15:26 -06:00 |
|
|
William Vu
|
54684d31bd
|
Land #7641, check_conn? fix for cisco_ssl_vpn
|
2016-11-30 21:14:19 -06:00 |
|
|
William Vu
|
032312d40b
|
Properly check res
|
2016-11-30 21:03:29 -06:00 |
|
|
William Vu
|
1d6ee7192a
|
Land #7427, new options for nagios_xi_chained_rce
|
2016-11-30 17:11:02 -06:00 |
|