Spencer McIntyre
|
edee95bbb2
|
Update the check to not fail if a COOKIE is used
|
2021-06-10 11:29:07 -04:00 |
|
Spencer McIntyre
|
3afe3ebfa3
|
Add the module docs
|
2021-06-08 15:23:24 -04:00 |
|
William Vu
|
6498554084
|
Clean up NetMotion Mobility exploit and docs
Refactor target selection once again.
|
2021-06-02 23:47:01 -05:00 |
|
William Vu
|
1f9a3d99bb
|
Add module doc
|
2021-05-17 13:58:03 -05:00 |
|
Shelby Pace
|
71914a1ddb
|
Land #14813, additional dup scout bof targets
|
2021-04-01 13:03:57 -05:00 |
|
Spencer McIntyre
|
11f4946817
|
Tweak some ProxyLogon verbiage for clarity
|
2021-03-29 10:07:43 -04:00 |
|
RAMELLA Sébastien
|
02b240b22a
|
code review
|
2021-03-29 14:23:39 +04:00 |
|
bwatters
|
6505f9ccbd
|
Land #14830, Adding FortiLogger 4.4.2.2 - Unauthenticated Arbitrary File Upload (CVE-2021-3378)
Merge branch 'land-14830' into upstream-master
|
2021-03-24 17:41:10 -05:00 |
|
bwatters
|
e2dfca86f9
|
Add warning for failures after rebooting to the documentation.
|
2021-03-24 17:32:08 -05:00 |
|
Christophe De La Fuente
|
2dcd0fad04
|
Land #14860, Auxiliary/Exploit Scanner/Gather/RCE for Exchange ProxyLogon (CVE-2021-26855)
|
2021-03-23 13:10:15 +01:00 |
|
RAMELLA Sébastien
|
37b0552803
|
last code review before land
|
2021-03-22 23:20:40 +04:00 |
|
William Vu
|
d4d9001c84
|
Fix typos
|
2021-03-22 14:16:45 -05:00 |
|
Spencer McIntyre
|
8605fe4529
|
Use POST for the check method and write the module docs
|
2021-03-22 15:04:21 -04:00 |
|
RAMELLA Sébastien
|
c543b44fc2
|
fix: CmdStagerFlavor, add: Powershell target, ...
|
2021-03-21 22:47:27 +04:00 |
|
RAMELLA Sébastien
|
f5c807590c
|
a last round of review + rubocop
|
2021-03-20 01:23:43 +04:00 |
|
RAMELLA Sébastien
|
6e34a80693
|
fix. OAB + code review
|
2021-03-19 10:19:57 +04:00 |
|
RAMELLA Sébastien
|
59955f0a32
|
add. timeout and fix. CmdStagerFLavor
|
2021-03-15 01:10:56 +04:00 |
|
RAMELLA Sébastien
|
dcf2b69d6d
|
add. exploitation module doc and some changes
|
2021-03-14 22:49:41 +04:00 |
|
Grant Willcox
|
8dce1acd64
|
Land #14794, dup_scout_enterprise_login_bof: Add v9.9.14 target and auto targeting
|
2021-03-12 12:07:57 -06:00 |
|
Grant Willcox
|
514d46bd4d
|
Rubocop module again and also update the documentation to reflect recent changes
|
2021-03-08 16:08:36 -06:00 |
|
Berkan
|
8b149a2c9b
|
Fixed line numbers of verification steps
|
2021-03-06 22:50:12 +03:00 |
|
Grant Willcox
|
59d7288773
|
RuboCop module and fix small spelling mistake in documentation
|
2021-03-04 18:48:19 -06:00 |
|
Grant Willcox
|
f193caa48e
|
Also make sure that the default option is to use Windows Powershell since this supports Meterpreter and is generally a lot more reliable
|
2021-03-04 18:40:21 -06:00 |
|
Grant Willcox
|
3ef8fcd996
|
Update module to fix an extra print statement and write documentation
|
2021-03-03 10:14:41 -06:00 |
|
Berkan
|
9617801bfd
|
Edited document.
|
2021-03-02 15:05:48 +03:00 |
|
erberkan
|
d3338e7380
|
fortilogger_arbitrary_fileupload
|
2021-03-01 19:30:39 +03:00 |
|
erberkan
|
648489cfe5
|
fortilogger_arbitrary_fileupdate
|
2021-03-01 17:55:55 +03:00 |
|
Brendan Coles
|
f89d67df19
|
dup_scout_enterprise_login_bof: Add v9.9.14 target and auto targeting
|
2021-02-25 17:14:25 +00:00 |
|
Brendan Coles
|
1f00ad011c
|
dupscts_bof: Add additional targets and auto targeting
|
2021-02-25 17:12:27 +00:00 |
|
Spencer McIntyre
|
77cc799974
|
Fix a target version discrepancy in the CVE-2020-17132 docs
|
2021-02-11 18:04:03 -05:00 |
|
Christophe De La Fuente
|
88eaf97e79
|
Land #14607, Updates for Exchange ECP DLP Policy Exploit
|
2021-02-11 15:15:34 +01:00 |
|
JulienBedel
|
8f6dd43025
|
Add documentation
|
2021-01-18 12:02:46 +01:00 |
|
Spencer McIntyre
|
7936ce8b5e
|
Update the documentation with additional information
|
2021-01-13 09:53:10 -05:00 |
|
Shelby Pace
|
8e1cab0131
|
Land #14339, add flexdotnetcms rce
|
2020-12-07 14:28:01 -06:00 |
|
William Vu
|
20a90557bf
|
Update module doc
|
2020-11-18 15:08:12 -06:00 |
|
kalba-security
|
0a9589166f
|
Add CVE ID
|
2020-11-05 06:55:37 -05:00 |
|
kalba-security
|
8aceea1872
|
Add flexdotnetcms_upload_exec module and docs
|
2020-11-03 09:50:28 -05:00 |
|
William Vu
|
e4fb76d74f
|
Add version check to exchange_ecp_dlp_policy
And update modules/exploits/windows/http/sharepoint_ssi_viewstate.rb.
|
2020-10-20 14:32:43 -05:00 |
|
William Vu
|
3970b69734
|
Land #14229, Telerik UI for ASP.NET AJAX exploit
CVE-2017-11317 && CVE-2019-18935
|
2020-10-20 13:24:35 -05:00 |
|
William Vu
|
253928570b
|
Update module doc
|
2020-10-19 11:18:00 -05:00 |
|
William Vu
|
4cb08f7426
|
Address outstanding issues
|
2020-10-15 13:24:08 -05:00 |
|
William Vu
|
1a341ae931
|
Add SharePoint SSI and ViewState RCE
CVE-2020-16952
|
2020-10-14 17:45:15 -05:00 |
|
Spencer McIntyre
|
fb569a24ee
|
Add module documentation for Telerik RAU Deserialization
|
2020-10-07 13:40:10 -04:00 |
|
bwatters
|
3a6293357e
|
Land #14190, Add the DOMAIN option to the CVE-2020-0688 Exploit
Merge branch 'land-14190' into upstream-master
|
2020-10-05 12:12:21 -05:00 |
|
Spencer McIntyre
|
e7d2b73600
|
Add a DOMAIN option to CVE-2020-0688 for consistency with other modules
|
2020-09-28 09:24:39 -04:00 |
|
William Vu
|
03e0b9098c
|
Add more words about Exchange role groups
|
2020-09-16 12:55:08 -05:00 |
|
William Vu
|
e118ff1509
|
Add Microsoft Exchange Server DLP Policy RCE
CVE-2020-16875
|
2020-09-16 02:41:08 -05:00 |
|
Shelby Pace
|
6e2a7001a9
|
Land #13994, add Dlink Wifi manager rce
|
2020-08-18 09:34:19 -05:00 |
|
Niboucha Redouane
|
aec83d54cd
|
fix case of first character of sentence
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2020-08-17 21:06:18 +02:00 |
|
Niboucha Redouane
|
5487552afd
|
Fix some ponctuation, and character case
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2020-08-17 21:05:58 +02:00 |
|