Wei Chen
|
6765ed80d6
|
Land #11077, Improvements and documentation for wing_ftp_admin_exec
|
2019-03-05 12:42:33 -06:00 |
|
Jacob Robles
|
5214b90fdf
|
Land #11292, Add exploit for Nuuo CMS SQL injection
|
2019-02-21 11:05:53 -06:00 |
|
Jacob Robles
|
1cd7dc8bc9
|
Update rank, add note
|
2019-02-21 10:12:02 -06:00 |
|
Jacob Robles
|
696640a340
|
Timeout and cleanup files
|
2019-02-21 06:48:10 -06:00 |
|
Jacob Robles
|
4a4637d7a3
|
Move execute shell
|
2019-02-21 06:48:09 -06:00 |
|
Jacob Robles
|
1acc565335
|
Land #11290, Add Nuuo CMS file upload exploit
|
2019-02-20 07:43:37 -06:00 |
|
Jacob Robles
|
73048edd97
|
Minor updates
exploit:nuuo_cms_sqli
|
2019-02-19 12:26:31 -06:00 |
|
Jacob Robles
|
2b71410807
|
Minor updates
exploit:nuuo_cms_fu
|
2019-02-19 12:11:50 -06:00 |
|
Wei Chen
|
c5bff76dc7
|
Cosmetic changes for office_exel_slk module and documentation
|
2019-02-11 12:37:17 -06:00 |
|
Wei Chen
|
18afc8f546
|
Bring PR 11249 up to date with upstream master
|
2019-02-11 12:19:21 -06:00 |
|
Imran E. Dawoodjee
|
6d0797986b
|
PowerShell check less strict, updated docs.
|
2019-02-10 14:26:13 +08:00 |
|
Pedro Ribeiro
|
9070435603
|
Change to support the new nuuo lib
|
2019-01-30 21:32:33 +07:00 |
|
William Vu
|
b7bc52d20b
|
Fix HTTP/SMB mixin order to restore SSL option
Mixin order matters. Mixins kinda suck.
|
2019-01-29 11:09:34 -06:00 |
|
Pedro Ribeiro
|
f5afe98111
|
Add github and full disc URL
|
2019-01-24 22:01:02 +07:00 |
|
Pedro Ribeiro
|
2bf663cf7d
|
Add full disclosure URL
|
2019-01-24 21:59:45 +07:00 |
|
Carter Brainerd
|
2d1cecd4d5
|
Fix request pattern matching
|
2019-01-23 13:39:52 -05:00 |
|
Carter Brainerd
|
47fd066a29
|
Msftidy
|
2019-01-22 21:06:11 -05:00 |
|
Carter Brainerd
|
1f56bccf31
|
Small improvements from review
|
2019-01-22 20:46:28 -05:00 |
|
Pedro Ribeiro
|
f4aaf6c816
|
Add https to msf link
|
2019-01-22 19:14:52 +07:00 |
|
Pedro Ribeiro
|
fbde697e3f
|
Update nuuo_cms_fu.rb
|
2019-01-22 18:57:02 +07:00 |
|
Pedro Ribeiro
|
f336f41182
|
Update nuuo_cms_sqli.rb
|
2019-01-22 12:50:02 +07:00 |
|
Pedro Ribeiro
|
4e1d79ac4b
|
Update nuuo_cms_fu.rb
|
2019-01-22 12:45:47 +07:00 |
|
Pedro Ribeiro
|
da4bd2e9b8
|
Remove peer
|
2019-01-22 12:10:45 +07:00 |
|
Pedro Ribeiro
|
0685ebed76
|
Remove peer as that is not needed
|
2019-01-22 12:08:41 +07:00 |
|
Pedro Ribeiro
|
9a068e9221
|
Repair CMS installation and use getsystem
|
2019-01-22 11:57:54 +07:00 |
|
Pedro Ribeiro
|
688ee3d579
|
Remove tested versions since that is already on the docs
|
2019-01-22 11:43:33 +07:00 |
|
Pedro Ribeiro
|
100fd7b80a
|
Make description shorter
|
2019-01-21 17:40:50 +07:00 |
|
Pedro Ribeiro
|
15d4ca9070
|
Add CMS link and manual ranking
|
2019-01-21 17:33:58 +07:00 |
|
bcoles
|
f8de99422d
|
Add correct rand call
Co-Authored-By: pedrib <pedrib@gmail.com>
|
2019-01-21 17:31:23 +07:00 |
|
bcoles
|
5b699768fb
|
Add correct rand call
Co-Authored-By: pedrib <pedrib@gmail.com>
|
2019-01-21 17:31:08 +07:00 |
|
bcoles
|
88c74fcd40
|
add https for link
Co-Authored-By: pedrib <pedrib@gmail.com>
|
2019-01-21 17:30:54 +07:00 |
|
bcoles
|
01e510b48f
|
add failure tag
Co-Authored-By: pedrib <pedrib@gmail.com>
|
2019-01-21 17:30:35 +07:00 |
|
Pedro Ribeiro
|
bd3d6ee6bf
|
Create nuuo_cms_sqli.rb
|
2019-01-21 17:14:41 +07:00 |
|
Pedro Ribeiro
|
9ffff16e95
|
Add Nuuo CMS file upload exploit
|
2019-01-21 17:06:10 +07:00 |
|
Carter Brainerd
|
1121ce1127
|
Change default filename to random
|
2019-01-17 20:12:53 -05:00 |
|
Clément Notin
|
31a7b13c19
|
ms17_010_psexec: fix RHOST in "authenticating..." message
|
2019-01-16 11:23:21 +01:00 |
|
Brent Cook
|
1947bae45b
|
Land #11230, add JuicyPotato local privilege escalation
|
2019-01-15 21:20:25 -06:00 |
|
Wei Chen
|
27d6fffdad
|
Land #11125, Import/generate ysoserial Java serialization objects
|
2019-01-15 17:09:56 -06:00 |
|
Carter Brainerd
|
8cd26b74d7
|
Please msftidy gods
|
2019-01-13 19:22:51 -05:00 |
|
Carter Brainerd
|
171d46db9b
|
Add disclosure date, more references, and authors
|
2019-01-13 19:11:05 -05:00 |
|
Carter Brainerd
|
89e8ff9c80
|
Update office_excel_slk.rb
|
2019-01-13 18:08:51 -05:00 |
|
Carter Brainerd
|
d88d1d0f1d
|
Create office_excel_slk.rb
|
2019-01-13 17:31:34 -05:00 |
|
phra
|
e69d509bdf
|
chore: update description and ranking
|
2019-01-12 04:32:21 +01:00 |
|
phra
|
3a865a0c05
|
feat: spawn as NT AUTHORITY\SYSTEM
|
2019-01-12 04:03:26 +01:00 |
|
William Vu
|
e9a8d5708a
|
Land #11234, @bcoles revisionism
|
2019-01-11 20:15:34 -06:00 |
|
phra
|
149f895329
|
feat: add LOGFILE support for debug
|
2019-01-11 18:21:54 +01:00 |
|
phra
|
dca99552e6
|
feat: pass payload length to the dll
|
2019-01-11 16:28:49 +01:00 |
|
phra
|
7653d64c4a
|
fix: improve exploit check
|
2019-01-11 15:38:57 +01:00 |
|
Brendan Coles
|
24f807490f
|
revisionism
|
2019-01-10 19:19:14 +00:00 |
|
phra
|
dc2d3c5774
|
feat: add juicy potato post module, fixes #11229
|
2019-01-10 17:20:43 +01:00 |
|