 William Vu
|
5e04ab2e66
|
Add lokiuox to bypassuac_silentcleanup authors
Looks like they were removed by accident.
|
2019-07-02 12:36:07 -05:00 |
|
|
h00die
|
a42c7ea736
|
land #11990 windows tomcat cmdlinearguments
|
2019-07-01 17:29:02 -04:00 |
|
|
asoto-r7
|
d3056723e1
|
Land #12030, CVE-2019-12181: Serv-U FTP Server prepareinstallation privesc
|
2019-07-01 16:01:04 -05:00 |
|
|
Brent Cook
|
e50ab5cd13
|
Land #11726, add exploit for CVE-2019-8513, macOS TimeMachine cmd injection
|
2019-06-29 05:36:12 -05:00 |
|
|
Brent Cook
|
4e544fe733
|
Land #11968, only enable UDP stagers for compatible payloads
|
2019-06-29 03:34:15 -05:00 |
|
|
Brent Cook
|
83e2c71b44
|
Land #11923, Set sockaddr_len with x64 shell_find_port payload
|
2019-06-29 03:26:52 -05:00 |
|
|
bcoles
|
c7ff78c277
|
Remove spaces at EOL
|
2019-06-29 14:01:18 +10:00 |
|
|
Brendan Coles
|
203e3b74db
|
Add Serv-U FTP Server prepareinstallation Privilege Escalation
|
2019-06-29 03:52:53 +00:00 |
|
|
William Vu
|
0a00f3851a
|
Land #12007, true 0s timeout in send_request_*
|
2019-06-28 12:32:32 -05:00 |
|
|
William Vu
|
49176a3606
|
Land #11952, Supra Smart Cloud TV RFI module
|
2019-06-28 12:12:15 -05:00 |
|
|
William Vu
|
baa17290e4
|
Adjust name :)
|
2019-06-28 12:08:27 -05:00 |
|
|
Dhiraj Mishra
|
09d6ae3458
|
Removing comments
Thanks wvu-r7 for your support.
|
2019-06-28 16:17:08 +05:30 |
|
|
William Vu
|
d7a5eae146
|
Fix bug, adjust prints, and check body for "OK"
|
2019-06-28 04:12:57 -05:00 |
|
|
William Vu
|
7a26e1c257
|
Fix sshexec hanging on exec! and blocking close
|
2019-06-27 22:07:37 -05:00 |
|
|
James Barnett
|
2ed8e6db97
|
Deregister PASSWORD_SPRAY option for LoginScanner modules
|
2019-06-27 17:06:32 -05:00 |
|
|
William Vu
|
1503dcd168
|
Land #11997, SilentCleanup UAC bypass
|
2019-06-27 11:52:56 -05:00 |
|
|
William Vu
|
6f1aaac70e
|
Add enigma0x3 and fix nyshone69 researchers
|
2019-06-27 11:38:34 -05:00 |
|
|
asoto-r7
|
26cd53efb6
|
Land #11977, AWS EC2, S3, and IAM Enumeration
|
2019-06-27 11:29:05 -05:00 |
|
|
William Vu
|
7b0aac72ec
|
Fix missing is_in_admin_group? method
This was missed in the refactor, since admin_group was removed.
|
2019-06-27 11:16:49 -05:00 |
|
|
Jeff McJunkin
|
2927fd5dc8
|
Update bypassuac_sluihijack: Fix typo
|
2019-06-26 14:25:32 -07:00 |
|
|
asoto-r7
|
0c83e55b00
|
enum_iam: Update 'Console Login' output to accurately reflect Disabled status
|
2019-06-26 14:57:32 -05:00 |
|
|
William Vu
|
61f09d0538
|
Land #12017, xdebug_unauth_exec nil fix
|
2019-06-26 12:26:30 -05:00 |
|
|
William Vu
|
cc3fd747aa
|
Add Pen Test Partners reference
Did we somehow miss this?
|
2019-06-26 11:05:22 -05:00 |
|
|
Patrick Webster
|
8d6f36e05c
|
Minor fix for xdebug_unauth_exec
Avoid triggering error where res.headers may not exist.
|
2019-06-27 01:00:49 +10:00 |
|
|
William Vu
|
933b5f0413
|
Tidy up send_request_cgi
|
2019-06-26 00:59:53 -05:00 |
|
|
William Vu
|
00530031fd
|
Try not encoding the GET parameters
|
2019-06-26 00:55:23 -05:00 |
|
|
William Vu
|
f3b509a1bc
|
Implement on_request_uri
|
2019-06-25 23:47:19 -05:00 |
|
|
William Vu
|
fe11eabe62
|
Merge remote-tracking branch 'upstream/master' into pr/11952
|
2019-06-25 23:47:06 -05:00 |
|
|
Wei Chen
|
2fb129ad41
|
Allow check in exploit to be optional
|
2019-06-25 17:13:55 -05:00 |
|
|
asoto-r7
|
84b6f05947
|
Fix 'bucket' typo
|
2019-06-25 16:35:44 -05:00 |
|
|
Wei Chen
|
685fb55179
|
Land #11987, Add Nagios XI 5.5.6 magpie_debug Root Exploit
|
2019-06-25 16:17:50 -05:00 |
|
|
Wei Chen
|
23dbc4d90d
|
Change file name
|
2019-06-25 16:10:44 -05:00 |
|
|
Wei Chen
|
e9fc9970ba
|
Make names more random. Also, make metadata changes
|
2019-06-25 16:09:15 -05:00 |
|
|
William Vu
|
5c14aea1a0
|
Fix target_platform check (it's empty, not nil)
|
2019-06-25 12:56:36 -05:00 |
|
|
William Vu
|
cf140f0840
|
Make SRVHOST the callback address
|
2019-06-25 12:43:04 -05:00 |
|
|
William Vu
|
44ad25ae34
|
Land #12008, struts2_content_type_ognl 302 fix
|
2019-06-25 00:40:58 -05:00 |
|
|
Carter Brainerd
|
5e8b076714
|
Final review changes
|
2019-06-25 07:21:08 +02:00 |
|
|
James Lee
|
303bfaa7eb
|
Don't worry about response code
I found one that returned a 302
|
2019-06-24 13:53:31 -05:00 |
|
|
William Vu
|
7739e9f43e
|
Update my modules
|
2019-06-24 13:38:14 -05:00 |
|
|
Jacob Robles
|
8be8aa603c
|
Adjust logic
Early return to reduce nesting ifs
|
2019-06-24 12:43:26 -05:00 |
|
|
Jacob Robles
|
3d143f366c
|
Remove LIMIT and adjust quotes
|
2019-06-24 12:40:01 -05:00 |
|
|
Carter Brainerd
|
d2dc5f6077
|
Review changes
|
2019-06-22 00:18:44 -04:00 |
|
|
Carter Brainerd
|
d90dba5d6e
|
Hopefully final msftidy fixes
|
2019-06-20 17:03:38 -04:00 |
|
|
asoto-r7
|
358ff635dd
|
Renamed modules per @wvu's offline suggestion
|
2019-06-20 15:08:30 -05:00 |
|
|
Carter Brainerd
|
1a877abe09
|
Msftidy was not happy
|
2019-06-20 14:50:56 -04:00 |
|
|
Carter Brainerd
|
534e2bc405
|
Make the darn thing work
|
2019-06-20 14:40:46 -04:00 |
|
|
Carter Brainerd
|
fded7fb922
|
Create bypassuac_silentcleanup.rb
|
2019-06-20 13:53:54 -04:00 |
|
|
Wei Chen
|
8920152eca
|
Add a ZDI reference for CVE-2019-5420 Rails exploit
|
2019-06-20 10:43:21 -05:00 |
|
|
Jeffrey Martin
|
e1b982dfa9
|
Land #11993, Explicitly require 'rc4' in the BlueKeep scanner.
|
2019-06-19 14:42:01 -05:00 |
|
|
Wei Chen
|
a93a520c3a
|
Land #11960, Add LPE for Cisco Prime Infrastructure's runrshell exe
|
2019-06-19 10:49:17 -05:00 |
|