ec7347cd49
Land #17509 , tomcat 7 priv esc on rhel based systems (cve-2016-5425)
2023-03-14 10:16:18 +00:00
8dfe58e617
review comment
...
Co-authored-by: cgranleese-r7 <69522014+cgranleese-r7@users.noreply.github.com >
2023-03-13 14:42:26 -04:00
3a7da2ad8a
Revert "Added new Datastore options to ssh_login"
2023-03-13 10:05:22 -05:00
4866c2b8b8
Land #17686 , Additional PetitPotam Methods
2023-03-09 19:29:16 +01:00
beb9f87d53
Land #17507 , SugarCRM webshell upload RCE [CVE-2023-22952] + Mixin for PNG embedded web shells
2023-03-09 10:16:57 -06:00
9961fffaa2
Land #17756 , Update secrets dump to generate kerberos rc4 key for machine account
2023-03-09 16:12:52 +00:00
01399e4818
Land #17749 , Add nthashes to keytab export
2023-03-09 16:09:13 +00:00
fc711131a2
added MIME, added break in mixin and added link with installation instructions
2023-03-09 09:28:46 -06:00
deafceed00
Update documentation, library, and Gemspec from review
2023-03-09 09:28:27 -06:00
d3f84af790
Included mixin for PHP code injection at PNGs
2023-03-09 09:28:14 -06:00
dc8ebb722a
Added support for native PHP payloads and reengineered webshells
2023-03-09 09:28:03 -06:00
c844d4d714
removed check and fix up some code
2023-03-09 09:27:29 -06:00
771f32bd8a
Add documentation and apply code updates
2023-03-09 09:27:03 -06:00
378a667f76
init commit module
2023-03-09 09:26:55 -06:00
5c1fcc3a72
Update secrets dump to generate kerberos rc4 key for machine account
2023-03-09 14:05:12 +00:00
bbc071d254
Land #17737 , Add Gather Wowza Streaming Engine Credentials
2023-03-08 19:13:21 +01:00
3bc4639235
Add nthashes to keytab export
2023-03-08 18:03:44 +00:00
599642bbb9
Updated variable names to be more specific
2023-03-08 10:53:24 -06:00
71e142a5ee
updated variable names
2023-03-08 10:53:23 -06:00
2c3005fee3
Added new Datastore options to ssh_login
2023-03-08 10:53:23 -06:00
f62994b4c0
Add Gather Wowza Streaming Engine Credentials
2023-03-09 01:31:23 +11:00
6ef92915d2
Land #17741 , Add in missing EDB reference to pfsense_pfblockerng_webshell
2023-03-08 14:53:09 +01:00
ecbeceb817
Land #17733 , Add Gather Wowza Streaming Engine Credentials
2023-03-07 15:27:52 +01:00
3f781de8e9
Add Wowza Streaming Engine Manager Login Utility
2023-03-07 23:42:42 +11:00
5c4d730cd3
Add in missing EDB reference
2023-03-06 14:32:01 -06:00
9dcaf93b29
Replace deprecated File.exists? with File.exist?
2023-03-05 14:30:47 +11:00
6579dcc977
Land #17723 , Fix PHP Base64 encoding
2023-03-03 11:53:46 -06:00
252012f48d
Land #17675 , Add support for forging inter-realm Kerberos tickets
2023-03-03 14:17:48 +00:00
6259f02051
Land #17684 , Add rbcd exploitation documentation to docs site
2023-03-03 13:31:53 +00:00
efd79eb638
Add support for forging inter-realm Kerberos tickets
2023-03-03 13:20:39 +00:00
0047ce5d3a
Add rbcd exploitation documentation to docs site
2023-03-03 13:18:29 +00:00
975de9d479
Supply exception message when raising BadcharError and fix typo
2023-03-02 17:46:21 -06:00
5b82c952ba
Rubocop pass
2023-03-02 21:43:41 +01:00
ae549ce1d4
Fix PHP base64 encoding
2023-03-02 21:40:27 +01:00
5b4962e2bd
Land #17721 , Fix adapted payload stage encoding
...
Merge branch 'land-17721' into upstream-master
2023-03-02 14:03:06 -06:00
a418bd9c65
Land #17638 , Lucee Scheduled Job RCE
2023-03-02 08:57:19 -05:00
088f359cee
Make stage encoding optional
2023-03-01 12:24:46 -05:00
3fabcc3421
Use coldfusion to decode base64 data
...
This means we don't need to rely on base64 being in the path. Also
invoke ARCH_CMD payloads on Windows through cmd.exe and not
powershell.exe.
2023-02-28 17:32:56 -05:00
c8aa491378
Fail with Unreachable when res is nil
2023-02-28 17:05:59 -05:00
3abd62076c
Land #17624 , Oracle E-Business Suite Module
...
This pull request adds an exploit module for CVE-2022-21587
an arbitrary file upload vulnerability in Oracle Web Applications
Desktop Integrator as shipped with 12.2.3 through to 12.2.11
which results in RCE
2023-02-28 17:04:20 -05:00
a916163b49
Cleanup files and fixup messages
2023-02-28 16:41:57 -05:00
b3e6767125
Land #17676 , add SIS login module
2023-02-28 15:41:24 -06:00
380a66916f
use print instead of vprint
2023-02-28 15:40:03 -06:00
2be54376bc
Land #17699 , Add in SCHANNEL support for LDAP
2023-02-27 16:35:30 -05:00
87f046f351
Land #17629 , Fix #17629 #query_ldap issues
...
Merge branch 'land-17698' into upstream-master
2023-02-27 14:39:19 -06:00
8b03f2fda8
Reworked payload execution logic
2023-02-27 11:09:34 -06:00
2f08cf6c46
Improved version check, review round 1
2023-02-26 17:23:54 +08:00
f6bfa6a61b
Add in SCHANNEL support, and update modules to fix a hang when using to_json instead of get_operation_result.
2023-02-24 13:50:04 -06:00
26d9026fc2
Fix a filter error
...
When FILTER was nil, the check would fail causing `()` to be appended to
the LDAP query filter which would cause it to fail.
2023-02-24 13:51:58 -05:00
ca6faed172
Check method enhancement
2023-02-24 13:33:10 -05:00
cgranleese-r7