a100cd77ae
Land #15858 , Add exploit for CVE-2021-42237
2021-11-15 14:24:47 -05:00
4505d7e834
Land #15700 , Add Aerohive NetConfig <= 10.0r8a RCE (CVE-2020-16152) module
...
Merge branch 'land-15700' into upstream-master
2021-11-11 17:03:54 -06:00
5e670638f3
Add a line suggesting TryToFork on Meterpreter might prevent the hang after exploitation
2021-11-11 16:59:09 -06:00
8d55b16ade
Fix one more mistake and rename document and module to a more easy to find name
2021-11-11 16:42:58 -06:00
27310dc002
Add in exploit and documentation for CVE-2021-42237
2021-11-10 15:52:22 -06:00
3af93cbacc
Fix up changes from timwr's review so long
2021-11-09 10:36:50 -06:00
780a9370a2
First draft of code, documentation, and exploit DLL plus exploit code
2021-11-09 10:36:40 -06:00
1dd26bca03
Land #15802 , add OMIGOD LPE
2021-11-09 10:30:50 -06:00
6f4aa55022
Land #15816 , GitLab Unauth Command Injection
2021-11-03 16:57:57 -04:00
4b7c5acc5b
Changed qx delimiter to # and added it to badchars. Defaulted to a staged payload
2021-11-03 10:51:37 -07:00
68cae90f45
Fix spelling error
2021-11-03 08:51:07 -07:00
116e2b0c1d
Enabled use of cmdstager::flavor printf. Tested against a CentOS install. Updated docs. Default to MeterpreterTryToFork and enabled autocheck
2021-11-03 08:49:09 -07:00
728965b3c6
fix typos in docs
2021-11-02 20:04:06 -04:00
f778f5f00a
add cleanup, add new info and warning messages, update docs, small improvements
2021-11-02 19:58:16 -04:00
beb30f2b6a
Expanded cmdstager flavors. Removed bad variable name
2021-11-02 12:01:36 -07:00
10bb77ea4b
Addressed a wide variety of spelling and formatting issues. Added a reference. Registered TARGETURI. Randomized the image payload in check. Added additional options information to documentation.
2021-11-02 09:50:06 -07:00
b3a6d09b86
Fix wrong extension for documentation
2021-11-02 08:07:56 -07:00
0681c8780e
Land #15761 , add pie-register code exec
2021-11-02 09:17:50 -05:00
8185b26a12
change should to must in referring to id option
2021-11-02 09:15:59 -05:00
3aadb6000b
Initial version of CVE-2021-22205 GitLab Unauth RCE
2021-11-02 01:46:51 -07:00
1ca9f48266
Land #15783 , Add Sophos UTM CVE-2020-25223 exploit
2021-10-28 09:00:08 -04:00
2a36287d9d
Add more words to module doc
2021-10-27 19:31:03 -05:00
76aa872ff5
Add (empty) Options header to module doc
...
For consistency.
2021-10-27 19:31:03 -05:00
7bbf0305c0
Fix elapsed time calculation using monotonic clock
...
Hat tip @adfoster-r7.
2021-10-27 19:31:03 -05:00
365365bfb0
Add module doc
2021-10-27 19:31:03 -05:00
9635110050
Add documentation for CVE-2021-38648
2021-10-27 12:06:01 -04:00
21c45b3733
Update module metadata
2021-10-27 11:58:53 -04:00
60b17b5c6f
Add the module docs for OMIGOD
2021-10-26 12:08:48 -04:00
7fc38d1b50
Land #15754 , add apache2 path traversal modules
2021-10-22 12:40:57 -04:00
ced61f989b
Tweak the verbiage for clarity, update docs
2021-10-22 12:38:03 -04:00
2f86b332f5
Land #15733 , Add Module For Kubernetes Pod Authenticated Code Execution
2021-10-21 10:46:20 +01:00
1e1b1982b2
Improve image selection when creating a pod
...
The module will now iterate over identified image names by default and
also allows an explicit image name to be specified using the new
PodImage advanced option.
2021-10-20 15:52:23 -04:00
42ed1b6eef
Add Windows support to CVE-2021-26084 exploit
2021-10-14 16:58:04 -05:00
9f0804cbfb
Fix Meterpreter spelling mistake
2021-10-12 23:40:43 +01:00
dcb42da269
Land #15612 , Add multiple moodle modules
2021-10-11 23:18:55 +01:00
b970e38edb
spell betterer
2021-10-11 16:44:32 -04:00
441c1966e2
fix IPs
2021-10-11 15:33:07 -04:00
0745bbe4d8
pie-register on wordpress
2021-10-11 15:25:07 -04:00
60b2b0f009
update modules and docs
2021-10-10 17:01:15 +04:00
256b4edf78
update modules to CVE-2021-42013
2021-10-08 15:22:47 +04:00
78ba617aef
Add module doc
2021-10-06 16:43:57 -05:00
92a0f9034d
add modules docs
2021-10-06 23:51:31 +04:00
2c7aa022d4
Add PoC for CVE-2021-22555 Netfilter Priv Escalation
2021-10-04 16:48:23 +01:00
d8f2b18649
Implement review feedback
2021-10-01 14:44:13 -04:00
8d82bebc3c
Add the kubernetes/exec module docs
2021-10-01 10:32:12 -04:00
6b4aa25490
Add Meterpreter support via Linux target with ARCH_ARMLE and cmdstager
2021-09-23 18:26:13 -04:00
0d42c36655
Specify that newer versions may still be vulnerable as no patch has been confirmed by the vendor
2021-09-23 05:19:07 -04:00
b81d44020a
Add Aerohive NetConfig 10.0r8a LFI and log poisoning to RCE module and docs
2021-09-23 04:57:48 -04:00
fee037ac18
Land #15670 , add opmanager sumpdu deser module
2021-09-20 12:15:26 -05:00
327aefd3f5
add older path, fix typo
2021-09-20 12:14:42 -05:00
Spencer McIntyre