 Christophe De La Fuente
|
6c57ee376a
|
Land #15755, Azure Active Directory Login Scanner Module
|
2021-11-17 15:53:22 +01:00 |
|
|
Spencer McIntyre
|
a100cd77ae
|
Land #15858, Add exploit for CVE-2021-42237
|
2021-11-15 14:24:47 -05:00 |
|
|
space-r7
|
b6dcb03b45
|
Land #15843, add Jetty WEB-INF file disclosure
|
2021-11-12 11:31:27 -06:00 |
|
|
bwatters
|
4505d7e834
|
Land #15700, Add Aerohive NetConfig <= 10.0r8a RCE (CVE-2020-16152) module
Merge branch 'land-15700' into upstream-master
|
2021-11-11 17:03:54 -06:00 |
|
|
bwatters
|
5e670638f3
|
Add a line suggesting TryToFork on Meterpreter might prevent the hang after exploitation
|
2021-11-11 16:59:09 -06:00 |
|
|
Grant Willcox
|
8d55b16ade
|
Fix one more mistake and rename document and module to a more easy to find name
|
2021-11-11 16:42:58 -06:00 |
|
|
space-r7
|
f055429189
|
Land #15806, add BillQuick SQLi module
|
2021-11-11 11:51:19 -06:00 |
|
|
Grant Willcox
|
27310dc002
|
Add in exploit and documentation for CVE-2021-42237
|
2021-11-10 15:52:22 -06:00 |
|
|
Grant Willcox
|
3af93cbacc
|
Fix up changes from timwr's review so long
|
2021-11-09 10:36:50 -06:00 |
|
|
Grant Willcox
|
780a9370a2
|
First draft of code, documentation, and exploit DLL plus exploit code
|
2021-11-09 10:36:40 -06:00 |
|
|
space-r7
|
1dd26bca03
|
Land #15802, add OMIGOD LPE
|
2021-11-09 10:30:50 -06:00 |
|
|
h00die
|
0fe49cce22
|
review comments
|
2021-11-09 04:04:16 -05:00 |
|
|
h00die
|
23ba4a1f3a
|
jetty updates
|
2021-11-08 14:09:43 -05:00 |
|
|
h00die
|
ea59e89cba
|
jetty web-inf file disclosure
|
2021-11-08 14:04:08 -05:00 |
|
|
h00die
|
e067535b72
|
billquick review updates
|
2021-11-06 06:29:56 -04:00 |
|
|
h00die
|
258f38090d
|
no more duplicate text
|
2021-11-05 15:04:33 -04:00 |
|
|
Christophe De La Fuente
|
836422f9ac
|
Land #15776, Wordpress automatic plugin aux module
|
2021-11-05 12:47:27 +01:00 |
|
|
h00die
|
b39196fd0f
|
review comments
|
2021-11-04 15:28:05 -04:00 |
|
|
Spencer McIntyre
|
6f4aa55022
|
Land #15816, GitLab Unauth Command Injection
|
2021-11-03 16:57:57 -04:00 |
|
|
Jake Baines
|
4b7c5acc5b
|
Changed qx delimiter to # and added it to badchars. Defaulted to a staged payload
|
2021-11-03 10:51:37 -07:00 |
|
|
Jake Baines
|
68cae90f45
|
Fix spelling error
|
2021-11-03 08:51:07 -07:00 |
|
|
Jake Baines
|
116e2b0c1d
|
Enabled use of cmdstager::flavor printf. Tested against a CentOS install. Updated docs. Default to MeterpreterTryToFork and enabled autocheck
|
2021-11-03 08:49:09 -07:00 |
|
|
kalba-security
|
728965b3c6
|
fix typos in docs
|
2021-11-02 20:04:06 -04:00 |
|
|
kalba-security
|
f778f5f00a
|
add cleanup, add new info and warning messages, update docs, small improvements
|
2021-11-02 19:58:16 -04:00 |
|
|
Jake Baines
|
beb30f2b6a
|
Expanded cmdstager flavors. Removed bad variable name
|
2021-11-02 12:01:36 -07:00 |
|
|
Jake Baines
|
10bb77ea4b
|
Addressed a wide variety of spelling and formatting issues. Added a reference. Registered TARGETURI. Randomized the image payload in check. Added additional options information to documentation.
|
2021-11-02 09:50:06 -07:00 |
|
|
Jake Baines
|
b3a6d09b86
|
Fix wrong extension for documentation
|
2021-11-02 08:07:56 -07:00 |
|
|
space-r7
|
0681c8780e
|
Land #15761, add pie-register code exec
|
2021-11-02 09:17:50 -05:00 |
|
|
space-r7
|
8185b26a12
|
change should to must in referring to id option
|
2021-11-02 09:15:59 -05:00 |
|
|
adfoster-r7
|
79314e6006
|
Land #15782, Add CVE-2002-0422 Coverage to iis_internal_ip Auxiliary Module
|
2021-11-02 13:31:34 +00:00 |
|
|
Jake Baines
|
3aadb6000b
|
Initial version of CVE-2021-22205 GitLab Unauth RCE
|
2021-11-02 01:46:51 -07:00 |
|
|
Christophe De La Fuente
|
43207ebf81
|
Land #15765, wordpress plugin bulletproofsecurity info disclosure (cve-2021-39327)
|
2021-10-29 18:33:51 +02:00 |
|
|
h00die
|
25c15dc56c
|
sqlmap in docs
|
2021-10-28 22:53:32 -04:00 |
|
|
h00die
|
d0335ff2df
|
working module
|
2021-10-28 22:45:07 -04:00 |
|
|
Spencer McIntyre
|
1ca9f48266
|
Land #15783, Add Sophos UTM CVE-2020-25223 exploit
|
2021-10-28 09:00:08 -04:00 |
|
|
adfoster-r7
|
1a38441c1a
|
Land #15803, Add f5_bigip_virtual_server Scanner Documentation
|
2021-10-28 10:12:53 +01:00 |
|
|
Matthew Dunn
|
f074d3a927
|
Add documentation for f5_bigip_virtual_server scanner module
|
2021-10-27 23:05:54 -04:00 |
|
|
William Vu
|
2a36287d9d
|
Add more words to module doc
|
2021-10-27 19:31:03 -05:00 |
|
|
William Vu
|
76aa872ff5
|
Add (empty) Options header to module doc
For consistency.
|
2021-10-27 19:31:03 -05:00 |
|
|
William Vu
|
7bbf0305c0
|
Fix elapsed time calculation using monotonic clock
Hat tip @adfoster-r7.
|
2021-10-27 19:31:03 -05:00 |
|
|
William Vu
|
365365bfb0
|
Add module doc
|
2021-10-27 19:31:03 -05:00 |
|
|
Spencer McIntyre
|
9635110050
|
Add documentation for CVE-2021-38648
|
2021-10-27 12:06:01 -04:00 |
|
|
Spencer McIntyre
|
21c45b3733
|
Update module metadata
|
2021-10-27 11:58:53 -04:00 |
|
|
Spencer McIntyre
|
60b17b5c6f
|
Add the module docs for OMIGOD
|
2021-10-26 12:08:48 -04:00 |
|
|
h00die
|
7a0295238f
|
Land #15778, docs for http trace scanner
|
2021-10-25 16:39:35 -04:00 |
|
|
h00die
|
8b2fed3fda
|
final fixes
|
2021-10-25 16:38:43 -04:00 |
|
|
Christophe De La Fuente
|
1befd545e3
|
Land #15558, add module to access a sessions filesystem in a browser
|
2021-10-25 18:37:42 +02:00 |
|
|
Spencer McIntyre
|
7fc38d1b50
|
Land #15754, add apache2 path traversal modules
|
2021-10-22 12:40:57 -04:00 |
|
|
Spencer McIntyre
|
ced61f989b
|
Tweak the verbiage for clarity, update docs
|
2021-10-22 12:38:03 -04:00 |
|
|
Matthew Dunn
|
cbb0e38549
|
fix code blocks
|
2021-10-21 20:51:26 -04:00 |
|