Commit Graph

6007 Commits

Author SHA1 Message Date
Wei Chen 6765ed80d6 Land #11077, Improvements and documentation for wing_ftp_admin_exec 2019-03-05 12:42:33 -06:00
Jacob Robles 5214b90fdf Land #11292, Add exploit for Nuuo CMS SQL injection 2019-02-21 11:05:53 -06:00
Jacob Robles 1cd7dc8bc9 Update rank, add note 2019-02-21 10:12:02 -06:00
Jacob Robles 696640a340 Timeout and cleanup files 2019-02-21 06:48:10 -06:00
Jacob Robles 4a4637d7a3 Move execute shell 2019-02-21 06:48:09 -06:00
Jacob Robles 1acc565335 Land #11290, Add Nuuo CMS file upload exploit 2019-02-20 07:43:37 -06:00
Jacob Robles 73048edd97 Minor updates
exploit:nuuo_cms_sqli
2019-02-19 12:26:31 -06:00
Jacob Robles 2b71410807 Minor updates
exploit:nuuo_cms_fu
2019-02-19 12:11:50 -06:00
Wei Chen c5bff76dc7 Cosmetic changes for office_exel_slk module and documentation 2019-02-11 12:37:17 -06:00
Wei Chen 18afc8f546 Bring PR 11249 up to date with upstream master 2019-02-11 12:19:21 -06:00
Imran E. Dawoodjee 6d0797986b PowerShell check less strict, updated docs. 2019-02-10 14:26:13 +08:00
Pedro Ribeiro 9070435603 Change to support the new nuuo lib 2019-01-30 21:32:33 +07:00
William Vu b7bc52d20b Fix HTTP/SMB mixin order to restore SSL option
Mixin order matters. Mixins kinda suck.
2019-01-29 11:09:34 -06:00
Pedro Ribeiro f5afe98111 Add github and full disc URL 2019-01-24 22:01:02 +07:00
Pedro Ribeiro 2bf663cf7d Add full disclosure URL 2019-01-24 21:59:45 +07:00
Carter Brainerd 2d1cecd4d5 Fix request pattern matching 2019-01-23 13:39:52 -05:00
Carter Brainerd 47fd066a29 Msftidy 2019-01-22 21:06:11 -05:00
Carter Brainerd 1f56bccf31 Small improvements from review 2019-01-22 20:46:28 -05:00
Pedro Ribeiro f4aaf6c816 Add https to msf link 2019-01-22 19:14:52 +07:00
Pedro Ribeiro fbde697e3f Update nuuo_cms_fu.rb 2019-01-22 18:57:02 +07:00
Pedro Ribeiro f336f41182 Update nuuo_cms_sqli.rb 2019-01-22 12:50:02 +07:00
Pedro Ribeiro 4e1d79ac4b Update nuuo_cms_fu.rb 2019-01-22 12:45:47 +07:00
Pedro Ribeiro da4bd2e9b8 Remove peer 2019-01-22 12:10:45 +07:00
Pedro Ribeiro 0685ebed76 Remove peer as that is not needed 2019-01-22 12:08:41 +07:00
Pedro Ribeiro 9a068e9221 Repair CMS installation and use getsystem 2019-01-22 11:57:54 +07:00
Pedro Ribeiro 688ee3d579 Remove tested versions since that is already on the docs 2019-01-22 11:43:33 +07:00
Pedro Ribeiro 100fd7b80a Make description shorter 2019-01-21 17:40:50 +07:00
Pedro Ribeiro 15d4ca9070 Add CMS link and manual ranking 2019-01-21 17:33:58 +07:00
bcoles f8de99422d Add correct rand call
Co-Authored-By: pedrib <pedrib@gmail.com>
2019-01-21 17:31:23 +07:00
bcoles 5b699768fb Add correct rand call
Co-Authored-By: pedrib <pedrib@gmail.com>
2019-01-21 17:31:08 +07:00
bcoles 88c74fcd40 add https for link
Co-Authored-By: pedrib <pedrib@gmail.com>
2019-01-21 17:30:54 +07:00
bcoles 01e510b48f add failure tag
Co-Authored-By: pedrib <pedrib@gmail.com>
2019-01-21 17:30:35 +07:00
Pedro Ribeiro bd3d6ee6bf Create nuuo_cms_sqli.rb 2019-01-21 17:14:41 +07:00
Pedro Ribeiro 9ffff16e95 Add Nuuo CMS file upload exploit 2019-01-21 17:06:10 +07:00
Carter Brainerd 1121ce1127 Change default filename to random 2019-01-17 20:12:53 -05:00
Clément Notin 31a7b13c19 ms17_010_psexec: fix RHOST in "authenticating..." message 2019-01-16 11:23:21 +01:00
Brent Cook 1947bae45b Land #11230, add JuicyPotato local privilege escalation 2019-01-15 21:20:25 -06:00
Wei Chen 27d6fffdad Land #11125, Import/generate ysoserial Java serialization objects 2019-01-15 17:09:56 -06:00
Carter Brainerd 8cd26b74d7 Please msftidy gods 2019-01-13 19:22:51 -05:00
Carter Brainerd 171d46db9b Add disclosure date, more references, and authors 2019-01-13 19:11:05 -05:00
Carter Brainerd 89e8ff9c80 Update office_excel_slk.rb 2019-01-13 18:08:51 -05:00
Carter Brainerd d88d1d0f1d Create office_excel_slk.rb 2019-01-13 17:31:34 -05:00
phra e69d509bdf chore: update description and ranking 2019-01-12 04:32:21 +01:00
phra 3a865a0c05 feat: spawn as NT AUTHORITY\SYSTEM 2019-01-12 04:03:26 +01:00
William Vu e9a8d5708a Land #11234, @bcoles revisionism 2019-01-11 20:15:34 -06:00
phra 149f895329 feat: add LOGFILE support for debug 2019-01-11 18:21:54 +01:00
phra dca99552e6 feat: pass payload length to the dll 2019-01-11 16:28:49 +01:00
phra 7653d64c4a fix: improve exploit check 2019-01-11 15:38:57 +01:00
Brendan Coles 24f807490f revisionism 2019-01-10 19:19:14 +00:00
phra dc2d3c5774 feat: add juicy potato post module, fixes #11229 2019-01-10 17:20:43 +01:00