 bwatters
|
fb658fbb13
|
Land #16245, pfSense Authenticated File Write (CVE-2021-41282)
Merge branch 'land-16245' into upstream-master
|
2022-03-03 15:08:34 -06:00 |
|
|
Spencer McIntyre
|
6be3443680
|
Land #16103, LPE in polkit's pkexec (CVE-2021-4034)
|
2022-03-03 09:24:11 -05:00 |
|
|
bwatters
|
e649fe3f69
|
Fix some markdown issues, update docs and add arch check for payloads
|
2022-03-02 16:30:52 -06:00 |
|
|
bwatters
|
06e897436c
|
Add Fedora results to docs and some minor final cleanup
|
2022-03-02 09:12:01 -06:00 |
|
|
bwatters
|
58aed837b2
|
Update docs and options
|
2022-03-01 14:48:48 -06:00 |
|
|
bwatters
|
0081811c52
|
Land #16185, Firefox CVE-2020-26950 use after free browser exploit
Merge branch 'land-16185' into upstream-master
|
2022-02-28 14:38:23 -06:00 |
|
|
space-r7
|
0d10409d67
|
Land #16131, add modern events calendar sqli
|
2022-02-28 12:27:45 -06:00 |
|
|
Jake Baines
|
65e16a1a72
|
Initial implementation of pfSense auth file creation bug (CVE-2021-41282)
|
2022-02-27 18:12:54 -08:00 |
|
|
Tim W
|
579811418f
|
update documentation with note about Firefox 82.0.1
|
2022-02-26 12:35:38 +00:00 |
|
|
bwatters
|
ecaf8b1ba9
|
Land #16204, Hikvision Unauthenticated RCE (CVE-2021-36260)
Merge branch 'land-16204' into upstream-master
|
2022-02-25 16:37:08 -06:00 |
|
|
bwatters
|
b69db83398
|
Land #16202, Add exploit for CVE-2022-21882 (Win32k LPE)
Merge branch 'land-16202' into upstream-master
|
2022-02-25 15:55:48 -06:00 |
|
|
Grant Willcox
|
217afa0f3b
|
Land #16190, Axis Camera App RCE (No CVE)
|
2022-02-25 11:35:03 -06:00 |
|
|
Jake Baines
|
d055a7d811
|
Altered some randomization, the json extracted by check, and fixed some wording
|
2022-02-24 18:48:21 -08:00 |
|
|
Grant Willcox
|
a500435080
|
Land #16182, wordpress Secure Copy COntent Protection and Content Locking Unauthenticated SQLi (CVE-2021-24931)
|
2022-02-24 15:55:29 -06:00 |
|
|
Grant Willcox
|
9b53ed5f5c
|
Add final randomization parts before landing
|
2022-02-24 15:43:21 -06:00 |
|
|
Grant Willcox
|
8d080135bb
|
First round of review edits
|
2022-02-24 13:46:33 -06:00 |
|
|
Spencer McIntyre
|
544f8e161a
|
Land #16164, Create Module For CVE-2021-42321
|
2022-02-24 11:36:12 -05:00 |
|
|
Jake Baines
|
e1616a520f
|
Fixed a couple of typos. Changed a CheckCode. Randomized the replaced tmp file name
|
2022-02-24 06:38:36 -08:00 |
|
|
Grant Willcox
|
fddd3f15c2
|
Fix up code so that it will not block on attempting to delete the configuration on the folder, just in case the configuration doesn't exist in the first place. Instead print a warning and continue.
|
2022-02-22 17:52:29 -06:00 |
|
|
adfoster-r7
|
dc301a12bd
|
Land #16156, Authenticated Microweber v1.2.10 Local File Inclusion
|
2022-02-22 18:20:59 +00:00 |
|
|
Jake Baines
|
4cd3563bc7
|
Initial commit of exploit for CVE-2021-36260
|
2022-02-19 13:13:24 -08:00 |
|
|
bwatters
|
3ea032472d
|
Updated exploit with better check method, added OnSessionCmd option
to run a command when a session is bootstrapped, added more
documentation.
|
2022-02-18 16:30:47 -06:00 |
|
|
Spencer McIntyre
|
443bf1249a
|
Remove all the old CVE-2021-1732 data
|
2022-02-18 15:25:39 -05:00 |
|
|
Spencer McIntyre
|
bcd7cb1122
|
Writeup the module metadata and docs
|
2022-02-18 15:23:44 -05:00 |
|
|
Tim W
|
90a06a1cb9
|
fix docs
|
2022-02-16 08:37:01 +00:00 |
|
|
Tim W
|
fb53ca0ac2
|
actually add support for Windows
|
2022-02-16 08:33:24 +00:00 |
|
|
Tim W
|
841af2c6e1
|
add support for Windows
|
2022-02-16 08:30:07 +00:00 |
|
|
Tim W
|
11f2c5201d
|
add documentation
|
2022-02-16 08:19:25 +00:00 |
|
|
bwatters
|
1086926b2e
|
Land #16159, Add module for CVE-2021-3129
Merge branch 'land-16159' into upstream-master
|
2022-02-15 17:14:01 -06:00 |
|
|
bwatters
|
0239ef1cc6
|
Land #16117, Updates for Log4Shell
|
2022-02-15 16:39:00 -06:00 |
|
|
Grant Willcox
|
e203548213
|
Land #16087, Grandstream UCM62xx IP PBX Websocket Blind SQL Injection Credential Dump
|
2022-02-15 11:11:11 -06:00 |
|
|
Jake Baines
|
14234e467a
|
Moved to aux/gather. Implemented autocheck. Added failure on websocket error
|
2022-02-15 06:23:19 -08:00 |
|
|
Jake Baines
|
5ac3330802
|
Initial commit of Axis camera app install exploit
|
2022-02-14 17:54:18 -08:00 |
|
|
Grant Willcox
|
a7ace66b3f
|
Use send_request_cgi and update options to use HttpUsername and HttpPassword accordingly. This simplifies code. Also update documentation accordingly
|
2022-02-14 18:19:00 -06:00 |
|
|
Grant Willcox
|
c49591cf11
|
Add in changes to use targets array as per Spencer's suggestion so we can now spawn Meterpreter shells. Also remove ACCOUNT_LOCKOUTS and fix a call that should have been .get_xml_document
|
2022-02-14 17:38:10 -06:00 |
|
|
Grant Willcox
|
c8f63e30cb
|
Fix minor issues from review
|
2022-02-14 14:15:17 -06:00 |
|
|
h00die
|
864ce9471f
|
wp_secure_copy sqli
|
2022-02-13 15:04:17 -05:00 |
|
|
Grant Willcox
|
4c1b2478fa
|
Add in exploit and documentation
|
2022-02-11 13:58:56 -06:00 |
|
|
space-r7
|
db00991f26
|
Land #16150, add nagios xi web shell upload
|
2022-02-11 11:45:06 -06:00 |
|
|
talhak08
|
1ad54ba48d
|
The documentation edited and the defanged mode fixed
|
2022-02-10 21:13:31 +03:00 |
|
|
Jake Baines
|
0a78dd78ec
|
Used suggested method for defining user webshell, used suggested depth configuration, and used vars_get in a couple of places
|
2022-02-08 18:20:03 -08:00 |
|
|
space-r7
|
bed067dda0
|
Land #16125, add ARCH_CMD for GXV3140 support
|
2022-02-08 12:24:42 -06:00 |
|
|
Heyder Andrade
|
6b64c6b393
|
Add module documentation
|
2022-02-08 15:29:11 +01:00 |
|
|
talhak08
|
c3a9b9a7c5
|
Edited the documentation
|
2022-02-08 04:17:43 +03:00 |
|
|
talhak08
|
138856765f
|
changed datastore's variable names and edited the documentation.
|
2022-02-08 04:14:45 +03:00 |
|
|
talhak08
|
b5e575dd1d
|
Documentation's been added
|
2022-02-08 03:53:12 +03:00 |
|
|
Spencer McIntyre
|
2f3e4742f4
|
Land #16151, Add QEMU Monitor HMP exec module
|
2022-02-07 16:43:08 -05:00 |
|
|
Brendan Coles
|
5bbe934db9
|
Add QEMU Monitor HMP 'migrate' Command Execution module
|
2022-02-07 17:48:27 +00:00 |
|
|
Christophe De La Fuente
|
fa849e51c3
|
Land #16137, Update PrintNightmare to use the moved DCERPC definitions
|
2022-02-07 16:54:09 +01:00 |
|
|
Christophe De La Fuente
|
f99438b9d1
|
Add target security settings info to the documentation
|
2022-02-07 16:48:34 +01:00 |
|