Commit Graph

505 Commits

Author SHA1 Message Date
Brendan Coles 24f807490f revisionism 2019-01-10 19:19:14 +00:00
Jacob Robles 3de07f1bff Add Notes metadata and warning 2018-11-29 06:35:37 -06:00
Jacob Robles bfaa6cb416 Add module suggestion 2018-11-29 06:23:45 -06:00
Jacob Robles 6845f44a2e Logic... 2018-11-28 20:26:27 -06:00
Jacob Robles 2864c30965 Fix fail_with issue 2018-11-28 20:18:03 -06:00
Jacob Robles e142f5716e Update documentation 2018-11-28 19:08:01 -06:00
Jacob Robles 1af7cf2b3b Update print statements 2018-11-28 18:03:55 -06:00
Jacob Robles c4959da77f Email validation and user registration 2018-11-28 17:56:55 -06:00
Jacob Robles 9c0c9b3ba9 Use warnings when changing config options 2018-11-28 17:44:02 -06:00
Jacob Robles 43cef24f6b Fix version check 2018-11-28 17:43:33 -06:00
thomas.labadie 11a2fa7f0d Space at EOL removed from description 2018-11-13 00:23:21 +01:00
thomas.labadie 9d1554498d WP GDPR Compliance plugin exploit - privsec to admin registering 2018-11-12 23:33:47 +01:00
Brendan Coles 02c916b1b4 Update modules/auxiliary/admin/http/tomcat_utf8_traversal.rb 2018-10-19 04:16:26 +11:00
Patrick Webster 175e5e5adf Added module TARGETURI support. 2018-10-19 03:55:45 +11:00
Rob 6f5a8f8f42 Fix outdated metadata 2018-10-01 18:59:09 +01:00
William Vu 4c036e70c1 Fix http://seclists.org links to https://
I have no idea how this happened in my own code. I was seeing https://.
2018-09-15 18:54:45 -05:00
William Vu 6df235062b Land #10505, post-auth and default creds info 2018-08-24 18:08:15 -05:00
Brent Cook 51c024982c Land #8914, refactor auxiliary/admin/http credential storage 2018-08-24 13:18:32 -05:00
Brent Cook 0141fc109d don't backtrace if there is not a response 2018-08-24 13:17:06 -05:00
Wei Chen 2780ae6ba9 Update false negatives 2018-08-21 08:50:26 -05:00
asoto-r7 1a3a4ef5e4 Revised 88 aux and exploit modules to add CVEs / references 2018-07-12 17:34:52 -05:00
Wei Chen aff39e65d5 Update missing CVE references for auxiliary modules
Based on existing references such as BID, OSVDB, blog posts, etc
2018-07-08 19:00:11 -05:00
Jan Rude 567e2dbc7e Update telpho10_credential_dump.rb
Current version still vulnerable, developer ignores mails. It seems like this is going to be a 'won´t fix'
2018-05-23 09:32:41 +02:00
Wei Chen f9a804e7d8 Bring the PR up to date 2018-04-23 08:52:05 -05:00
William Vu 1f31bcd26f Update telpho10_credential_dump 2018-03-27 14:57:57 -05:00
Jacob Robles ba0d990273 Documentation added and Error Checks 2018-03-15 10:46:08 -05:00
Jacob Robles 9e23997c3d Added Error Handling 2018-03-14 08:16:17 -05:00
Jacob Robles 1d51cf6d24 Implement Suggested Changes 2018-03-14 06:15:49 -05:00
Jacob Robles 64a51c1bd7 Save Credentials and IP 2018-03-13 08:47:08 -05:00
Mzack9999 5ee50c5fab Username and password reported as credentials 2018-03-12 07:01:03 -05:00
Mzack9999 3d6af4c7ee Removed mail from author section 2018-03-12 07:01:03 -05:00
Mzack9999 b0ed8c4702 code cleanup 2018-03-12 07:01:03 -05:00
Mzack9999 7b781d53c9 Small code refactoring, added verbose output 2018-03-12 07:01:03 -05:00
Mzack9999 fe89e2d391 Corrected check method, warning in case of absence of news and TARGETURI parameter 2018-03-12 07:01:03 -05:00
Mzack9999 f09d9a8994 Solved msftidy.rb issues 2018-03-12 07:01:02 -05:00
Mzack9999 dbba27cc97 Fixed minor issues and added automatic detection of Patten1/Pattern2 2018-03-12 07:01:02 -05:00
Mzack9999 63444a2c43 Corrected wrong label in password hash message 2018-03-12 07:01:02 -05:00
Mzack9999 4a40f40c14 Typo3 News Module Sql Injection exploit 2018-03-12 07:00:45 -05:00
Jacob Robles ea78e21961 Documentation accuracy 2018-03-09 07:43:12 -06:00
Jacob Robles 5a2f197c47 Remove redundant RPORT 2018-03-07 14:41:51 -06:00
Jacob Robles f6ebce2440 Update User List 2018-03-06 06:38:06 -06:00
Jacob Robles 5fde6bf5d3 Update Code 2018-03-05 22:39:16 -06:00
Jacob Robles a344ffadd8 Modified Code, Added additional check 2018-02-26 07:29:08 -06:00
Jacob Robles 4e4aeb7b4d Add GitStack v2.3.10 Unauth REST API Aux Module 2018-02-26 06:04:38 -06:00
Wei Chen 949b474a0a Avoid target_uri.path
It doesn't look like target_uri.path is suitable for this scenario,
because it causes our input to be modified and hard to use.
2018-02-15 16:31:09 -06:00
Wei Chen 5467f4c97e Add header 2018-02-15 16:19:54 -06:00
Jacob Robles c9a3894bdb Removed require statements 2018-02-08 12:00:47 -06:00
Jacob Robles 724a0e29f6 Update Parsing, Added Rescue 2018-02-07 19:19:58 -06:00
Jacob Robles 1de8ec1073 Implemented Suggested Changes
Updated documentation headings and function/filename formatting.
Updated module options and formatting. Added check for file to parse.
2018-02-07 08:01:54 -06:00
Jacob Robles 1233bb855c msftidy checks 2018-02-05 22:54:03 -06:00