edee95bbb2
Update the check to not fail if a COOKIE is used
2021-06-10 11:29:07 -04:00
3afe3ebfa3
Add the module docs
2021-06-08 15:23:24 -04:00
325ecfedff
Add some error handling while extracting the key
2021-06-08 14:58:58 -04:00
64077e1395
Add and use a new sharepoint mixin
2021-06-07 15:25:07 -04:00
8cc220ccbc
Initial commit of CVE-2021-31181
2021-06-07 13:37:28 -04:00
69690ef09e
Fix RuboCop issues with sudo_baron_samedit.rb that were causing failures in some builds
2021-06-04 12:03:13 -05:00
1d003e9dee
Land #15293 , Redis extractor improvements
2021-06-04 10:23:07 -04:00
eea2f10f2e
Use ALL_CAPS for normal datastore options
2021-06-04 10:22:42 -04:00
0903fc8b37
Land #15284 , fix a localization issue
2021-06-04 09:39:49 -04:00
78f97d2fa7
Land #15281 , Add Cisco HyperFlex exploit
2021-06-03 17:24:27 -04:00
34002bcf72
Land #15291 , remove unneeded Msf::Post::File mixin from FortiOS module
2021-06-03 16:07:37 +01:00
8b737c2c60
Land #15231 , add SuiteCRM log file rce
2021-06-03 09:11:00 -05:00
bd8a96aa23
Apply minor RuboCop edit
2021-06-03 07:57:31 -05:00
107a6a3ce2
Fix up module by removing an import that was causing crashes
2021-06-03 07:48:12 -05:00
6efd312430
Add Cisco HyperFlex HX Data Platform exploit
...
CVE-2021-1497
CVE-2021-1498
2021-06-03 00:43:56 -05:00
6498554084
Clean up NetMotion Mobility exploit and docs
...
Refactor target selection once again.
2021-06-02 23:47:01 -05:00
3920c0873c
Fix bugs in redis_extractor module
...
- Long values were truncated because the network didn't pull enough data, so parsing failed
- Race condition if value was deleted between scan and retrieval of value
- Also support retrieving a subset of keys (e.g. it stores session IDs, there are thousands of them and we only need a few)
2021-06-03 11:54:02 +10:00
37a7ee2e28
Clean up f5_icontrol_rest_ssrf_rce
...
Escalate a warning and prefer a variable.
2021-06-02 20:32:47 -05:00
d2b539e3c9
authentication fix from add cookie jar merge
2021-06-02 16:54:09 -05:00
3056e8f946
add cookie jar and AutoCheck
2021-06-02 13:09:33 -05:00
187ab078c0
Land #15122 , add Cacti sqli to rce exploit
2021-06-01 11:40:23 -05:00
598f925fd3
remove extra spaces
2021-06-01 11:37:45 -05:00
8d57d9cfec
fix localization issue in module linux/gather/ppp_chap_secrets
2021-06-01 21:33:33 +05:30
74e324e8c1
Land #15260 , Add #pidof to Msf::Post::Process
...
Add the #pidof method to Msf::Post::Process and update #get_processes to
fallback to the shell version if it fails for some reason.
2021-06-01 09:53:08 -04:00
fe8e586b22
fall to shell when meterpreter fails get_processes
...
shift `pidof` to `Msf::Post::Process`
2021-06-01 18:51:39 +05:30
d849376ae6
rebase and rubocop
2021-05-29 15:56:50 -04:00
7e758f8b74
review comments
2021-05-29 15:55:24 -04:00
825cc9d284
upgraded to meterp
2021-05-29 15:55:24 -04:00
95331c9ada
set default payload
2021-05-29 15:55:24 -04:00
94d122f573
more suggestions
2021-05-29 15:55:24 -04:00
38929227d7
Update cacti rce to use cookie jar api
2021-05-29 15:55:24 -04:00
fde3334b70
some review comments
2021-05-29 15:55:24 -04:00
721a47ad7f
cacti 1.2.12 sql to rce
2021-05-29 15:55:24 -04:00
dea7f50d36
Cover log file restoriation in all failure cases
2021-05-29 09:25:10 -05:00
1451e9b56b
Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2021-05-27 11:59:32 -05:00
fa1ad1b32e
Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2021-05-27 11:59:28 -05:00
b4f699fb15
Update modules/exploits/linux/http/suitecrm_log_file_rce.rb
...
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2021-05-27 11:59:23 -05:00
4ae442496b
Land #15267 , Shodan search fix for max pages
2021-05-27 09:21:09 -04:00
733cd73cfc
Fix the shodan search module max pages
2021-05-27 08:53:54 -04:00
2d9fdb97ad
Check that initial request is valid
2021-05-26 12:23:36 -05:00
57ef94cfdf
Remove non boolean return from authentication
2021-05-25 22:55:28 -05:00
91284db05d
Check returned responses on each stage and output status info
2021-05-25 22:49:27 -05:00
ed1f5db48d
Check method and authentication fixes
2021-05-25 20:38:32 -05:00
f26d0b676a
Land #14984 - OSX Post exploitation .gitignore retrieval
2021-05-26 00:50:43 +01:00
64eeedf218
Land #15246 , Refactor as Msf::Post::Process
2021-05-25 13:07:21 -04:00
8d834afeae
Land #15236 , Add additional Xen check to checkvm
2021-05-25 11:15:14 -04:00
5b3edd4cb2
still need to include Msf::Post::File
...
Co-authored-by: Spencer McIntyre <58950994+smcintyre-r7@users.noreply.github.com >
2021-05-25 08:35:55 -05:00
dbd85a8795
Land #15243 , Add check method to tomcat ghostcat module
2021-05-25 13:12:22 +01:00
0cefd8eaa6
refactor post API for process lists
2021-05-24 18:39:16 -05:00
9f2dae38c8
Land #15079 , add meterpreter compat requirements
2021-05-24 16:00:08 -05:00
Spencer McIntyre