Commit Graph

5631 Commits

Author SHA1 Message Date
Brent Cook 4cba6d1df4 suggest a reason if we get no server response 2018-04-25 03:57:12 -05:00
William Vu a0f16b4a66 Prefer print_warning for consistency 2018-04-24 11:17:19 -05:00
William Vu 7ef8b99480 Improve printing in ETERNALBLUE's verify_arch
Now shows the invalid arch instead of showing nothing.
2018-04-24 11:09:54 -05:00
Brendan Coles 3aac041dcf Return CheckCode::Safe for unsupported x64 systems 2018-03-29 12:03:33 +00:00
Wei Chen 94fd599756 Land #9684, Adding ManageEngine Application Manager RCE
Land #9684
2018-03-27 15:17:20 -05:00
Wei Chen 0a0bef0c4f Land #9633, Exodus Wallet Remote Code Execution
Land #9633
2018-03-27 14:51:15 -05:00
Wei Chen 8c88c53e5d Land #9670, Gitstack v2.3.10 RCE
Land #9670
2018-03-27 13:00:47 -05:00
Mehmet İnce 53eabfc1df Update documentation and add check before exploit 2018-03-19 23:27:18 +03:00
Mehmet İnce b55a750fa9 Fix typo and couple tiny nitpicks 2018-03-14 11:51:21 +03:00
Mehmet İnce 889c914b3d Updating documentation and minor code changes 2018-03-13 12:05:27 +03:00
Mehmet İnce ec10a82c56 Make the rubocop happy 2018-03-13 09:44:13 +03:00
Mehmet İnce 2fd9b0b77b Fixing rubocop errors 2018-03-13 01:40:01 +03:00
Jacob Robles 2735ae57cb Documentation accuracy 2018-03-09 07:31:55 -06:00
Mehmet İnce 4b483e079b Adding assigned CVE number 2018-03-09 12:25:19 +03:00
Jacob Robles 24079c345d Style guide and grammar fixes 2018-03-08 07:30:02 -06:00
Mehmet İnce 611b208267 Adding ManageEngine Application Manager RCE 2018-03-07 23:54:01 +03:00
Jacob Robles 9ce6c2ae32 Remove redundant RPORT 2018-03-07 14:31:58 -06:00
Jacob Robles 4ace73a3f9 Added references, fixed code 2018-03-05 22:00:28 -06:00
Jacob Robles 57118e1265 msftidy fix 2018-03-05 13:37:32 -06:00
Jacob Robles a4f48eb80f Add GitStack v2.3.10 RCE 2018-03-05 13:25:41 -06:00
Biswajit Roy 3925686173 Fixed error in my correction
Changed from `an username` to `a username`
2018-03-03 10:16:44 +05:30
Biswajit Roy 38c42f3b10 Fixed Typos
Fixed minor typing errors.
2018-03-02 17:38:19 +05:30
Daniel Teixeira c84ece15a3 Update exodus.rb 2018-02-28 11:04:16 +00:00
Daniel Teixeira c366f94017 Update exodus.rb 2018-02-28 10:35:05 +00:00
Daniel Teixeira 15bd45cee3 Exodus Module 2018-02-26 21:31:13 +00:00
Aaron Soto af45c1764b Tweak exception handling and timing of ms17_010_eternalblue 2018-02-21 13:40:04 -06:00
Jacob Robles b2cb4c425d Land #9594, CloudMe Sync v1.10.9 Buffer Overflow 2018-02-20 17:49:19 -06:00
Jacob Robles 6a62ca15e7 Remove NOPS
[ticket: #9594]
2018-02-20 17:40:33 -06:00
Daniel Teixeira 745ad4d727 CloudMe Sync Client BoF 2018-02-20 21:57:13 +00:00
Jacob Robles d02bf40d69 Modified Exploit
Remove NOPS that weren't needed and freed up space for a larger payload.

[ticket: #9561]
2018-02-20 15:35:43 -06:00
Daniel Teixeira 651ddbb7eb Disk Savvy Server Buffer Overflow 2018-02-15 10:09:07 +00:00
Daniel Teixeira 929027ab96 Disk Savvy Server Buffer Overflow 2018-02-14 20:35:32 +00:00
Brent Cook ca4ad1d0c4 Land #9478, Improve Dup Scout BOF exploit 2018-02-07 23:51:14 -06:00
William Vu c9473f8cbc Land #9473, new MS17-010 aux and exploit modules 2018-02-01 23:56:29 -06:00
zerosum0x0 ffc7e078e2 don't disconnect until cleanup 2018-02-01 21:46:56 -07:00
Jacob Robles bc18389284 Updated Document and Module
Update the documentation based on analysis of the vulnerability.
Slight modifications to the exploit module as well to reduce the
size of the generated file and reduce bad characters.
2018-02-01 10:05:50 -06:00
Jacob Robles 656bb7f567 Modified DupScout Fileformat Exploit 2018-01-30 09:12:05 -06:00
zerosum0x0 7cc00c0e10 fixed padding/offsets for win 10 2018-01-28 21:10:51 -07:00
zerosum0x0 2723b328aa misc tidying, added more randomness 2018-01-28 18:20:18 -07:00
zerosum0x0 6c2d5b1fc2 semi-completed exploit files 2018-01-28 18:13:25 -07:00
Daniel Teixeira 4cd5801e6f Dup Scout Import Command Buffer Overflow 2018-01-24 20:47:46 +00:00
bwatters-r7 a27cfeaea9 Land #9416, Sync Breeze Enterprise 9.5.16 Import Command buffer overflow
Merge branch 'land-9416' into upstream-master
2018-01-23 16:35:51 -06:00
bwatters-r7 3922844650 ninja style changes 2018-01-23 16:34:49 -06:00
Daniel Teixeira aa9b5e4419 Sync Breeze Enterprise Import Command 2018-01-15 20:46:40 +00:00
Agahlot 488f27bf76 Small Typo 2018-01-12 07:05:30 -05:00
Wei Chen e6c4fb1dab Land #9269, Add a new target for Sync Breeze Enterprise GET BoF
Land #9269
2018-01-11 16:54:23 -06:00
Wei Chen f395e07fc6 Land #9269, add new target for Sync Breeze Enterprise GET BoF
Land #9269
2018-01-11 16:53:02 -06:00
Wei Chen dd737c3bc8 Land #9317, remove multiple deprecated modules
Land #9317

The following modules are replaced by the following:

auxiliary/scanner/discovery/udp_probe
is replaced by:
auxiliary/scanner/discovery/udp_sweep

exploit/unix/webapp/wp_ninja_forms_unauthenticated_file_upload
is replaced by:
exploit/multi/http/wp_ninja_forms_unauthenticated_file_upload

exploit/windows/misc/regsvr32_applocker_bypass_server
is replaced by:
exploits/multi/script/web_delivery
2018-01-10 15:47:20 -06:00
Wei Chen 8d77f35b16 Land #9373, Add LabF nfsAxe FTP Client 3.7 Stack Buffer Overflow
Land #9373
2018-01-09 22:40:50 -06:00
Wei Chen 25280e3319 Update labf_nfsaxe and module documentation 2018-01-09 22:39:40 -06:00