space-r7
1dd26bca03
Land #15802 , add OMIGOD LPE
2021-11-09 10:30:50 -06:00
Spencer McIntyre
278d940fee
Update the Python exploit code to fix a bug
2021-11-02 10:10:18 -04:00
dwelch-r7
73e55fcaee
Land #15665 , Add Meterpreter compatibility metadata
2021-10-29 12:45:26 +01:00
Spencer McIntyre
98528c8ba6
Fail over to default paths
2021-10-28 15:01:12 -04:00
Spencer McIntyre
1ca9f48266
Land #15783 , Add Sophos UTM CVE-2020-25223 exploit
2021-10-28 09:00:08 -04:00
William Vu
78ebc89106
Improve sleep timeout using science
2021-10-27 22:49:41 -05:00
William Vu
3c4bc600f7
Link to open() in perldoc
2021-10-27 19:31:03 -05:00
William Vu
c419ca04bd
Warn when LPORT isn't 443
2021-10-27 19:31:03 -05:00
William Vu
14421ed5f5
Refactor elapsed time calculation
2021-10-27 19:31:03 -05:00
William Vu
7bbf0305c0
Fix elapsed time calculation using monotonic clock
...
Hat tip @adfoster-r7.
2021-10-27 19:31:03 -05:00
William Vu
3f9b22dbb7
Add Sophos UTM CVE-2020-25223 exploit
2021-10-27 19:31:03 -05:00
Spencer McIntyre
ae56ffa934
Initial exploit for CVE-2021-38648
2021-10-27 12:05:56 -04:00
Spencer McIntyre
21c45b3733
Update module metadata
2021-10-27 11:58:53 -04:00
Spencer McIntyre
60b17b5c6f
Add the module docs for OMIGOD
2021-10-26 12:08:48 -04:00
Spencer McIntyre
33bacd2b20
Update references and add a check method
2021-10-26 10:35:13 -04:00
Spencer McIntyre
e9582d1ddb
Initial commit for CVE-2021-38647
2021-10-25 17:36:55 -04:00
wvu
64654a3134
Merge branch 'master' into suitecrm_log_file_rce
2021-10-22 22:11:51 -05:00
M. Cory Billington
e90a2a9274
Added CVE
2021-10-22 18:55:37 -05:00
William Vu
f270d3ef7a
Comment path traversals
2021-10-20 14:16:46 -05:00
William Vu
83500a17d4
Update vmware_vcenter_analytics_file_upload
2021-10-14 16:58:04 -05:00
William Vu
42ed1b6eef
Add Windows support to CVE-2021-26084 exploit
2021-10-14 16:58:04 -05:00
William Vu
262b5e09f0
Add VMware vCenter Server CVE-2021-22005 exploit
2021-10-06 16:43:57 -05:00
adfoster-r7
28eab4d871
Add Meterpreter compatibility metadata
2021-10-06 13:54:51 +01:00
sjanusz
2c7aa022d4
Add PoC for CVE-2021-22555 Netfilter Priv Escalation
2021-10-04 16:48:23 +01:00
Jeffrey Martin
731b3d5ffe
OptRegExp default value as string representation
...
OptRegExp default should be string to utilize in a Regex.
This allows for the object to serialize in metadata and via
rpc bridge when transimiteed using msgpack.
2021-09-17 16:34:46 -05:00
space-r7
12af64c4d8
Land #15604 , add buffer overflow G-Cam module
2021-09-16 13:02:57 -05:00
Your Name
a2f83c22ba
Add Pattern Create
2021-09-16 08:22:57 +01:00
Spencer McIntyre
480dec9a1e
Land #15658 , Add module for CVE-2021-32682
2021-09-14 14:09:27 -04:00
space-r7
278807be98
check contents of json after attempted upload
2021-09-14 11:36:28 -05:00
adfoster-r7
1499b1988e
Land #15609 , Add Meterpreter compatibility commands
2021-09-13 15:21:03 +01:00
adfoster-r7
46718e3390
Run Rubocop layout rules on modules
2021-09-10 12:53:39 +01:00
space-r7
91ae50eb27
escapeshellcmd -> escapeshellarg
2021-09-09 17:28:05 -05:00
space-r7
0095613a94
add completed module and documentation
2021-09-09 16:58:40 -05:00
adfoster-r7
059e39a6f0
Specify meterpreter compatibility command requirements
2021-09-08 22:59:25 +01:00
William Vu
8c4e5d262c
Add Atlassian Confluence CVE-2021-26084 exploit
2021-09-08 06:57:31 -05:00
space-r7
80dc8b9502
add elfinder module
2021-09-03 18:26:18 -05:00
Your Name
41690d6e1d
Linting again
2021-09-02 17:33:57 +01:00
Your Name
f336f7a4d6
Removed global vars & Fixed linting
2021-09-02 17:30:18 +01:00
Grant Willcox
0e0e3bbcfb
Land #15603 , Add Geutebruck CVE_2021_335XX command injection module
2021-09-01 10:59:22 -05:00
adfoster-r7
ded8200396
Land #15537 , Add support for ruby 3
2021-09-01 10:30:54 +01:00
bwatters
ff50a94348
Land #15567 , Add in Exploit for CVE-2021-3490
...
Merge branch 'land-15567' into upstream-master
2021-08-31 18:46:25 -05:00
Grant Willcox
d83ede6306
Fix up some check method issues and some XML data validation issues identified during review
2021-08-31 18:25:01 -05:00
Your Name
5599929b6a
Fixed Randomization
2021-08-31 18:25:00 -05:00
Grant Willcox
0a57641aa4
Add in documentation and module code cleanness improvements and also make the output easier for readers to understand should something fail midway through.
2021-08-31 18:24:57 -05:00
Your Name
cd74e34e3c
Fixed Authors
2021-08-31 18:24:51 -05:00
Your Name
b5b0b3087a
Fixed References and Description
2021-08-31 18:24:50 -05:00
Your Name
56cde3eaba
Add Geutebruck CVE_2021_335XX command injections module
2021-08-31 18:24:14 -05:00
Grant Willcox
488f58a068
Attempt to fix RuboCop errors
2021-08-31 15:36:00 -05:00
Grant Willcox
3bca3b0bcb
Update exploit code to use & after the command to execute as root so it executes in the background and doesn't hang Metasploit. Also update the logic of the code to check the response from executing the exploit and respond accordingly and update the documentation to match
2021-08-31 15:07:37 -05:00
Your Name
690af9f956
Fixed CVE Number
2021-08-30 08:18:19 +01:00