 Spencer McIntyre
|
e2c91ebf30
|
Land #16010, zabbix_script_exec improvements
This updates the zabbix_script_exec module to work with versions 5.0 and
newer as well as adds a new item-based execution technique.
|
2022-02-04 15:13:13 -05:00 |
|
|
Spencer McIntyre
|
ae278d0568
|
Cleanup some minor typos
|
2022-02-04 15:12:57 -05:00 |
|
|
lap1nou
|
8838d9cb66
|
Added timeout system, fixed a bug with TLS_PSK, linted
|
2022-02-04 04:01:23 -08:00 |
|
|
lap1nou
|
645ef5e71f
|
Fixed few bugs
|
2022-02-02 14:30:02 -08:00 |
|
|
lap1nou
|
de32cc0e97
|
Linted with Rubocop, factorized API call, fixed some grammmar
|
2022-02-01 13:29:30 -08:00 |
|
|
Spencer McIntyre
|
458d584f83
|
Add details to check codes and PR feedback
|
2022-01-21 09:40:23 -05:00 |
|
|
Spencer McIntyre
|
579627f5c7
|
Update docs, note OS X support
|
2022-01-20 10:47:11 -05:00 |
|
|
Spencer McIntyre
|
ba469a4b2c
|
Add version detection to the Unifi exploit
|
2022-01-20 09:26:48 -05:00 |
|
|
Spencer McIntyre
|
ef344d9d12
|
Add the Unifi Log4Shell RCE exploit
|
2022-01-19 17:51:31 -05:00 |
|
|
Spencer McIntyre
|
3f04b80d8b
|
Add vCenter Log4Shell docs
|
2022-01-13 14:50:28 -05:00 |
|
|
Spencer McIntyre
|
877bab6f2a
|
Land #15969, Log4j2 HTTP Header Injection Exploit
|
2022-01-11 16:52:08 -05:00 |
|
|
Spencer McIntyre
|
7b64383040
|
Preemptively tweak references to ysoserial
|
2022-01-11 16:25:21 -05:00 |
|
|
lap1nou
|
53c2400be9
|
Added cleaning procedure + fixed few mistakes/error mesage, removed unused docs
|
2022-01-08 10:56:31 -08:00 |
|
|
lap1nou
|
ccc90b0330
|
Linted doc+module, added support for 6.x version, aded support for TLS and item RCE, improved payload management
|
2022-01-07 17:40:15 -08:00 |
|
|
Spencer McIntyre
|
3f15c9ecc1
|
Writeup the module docs
|
2022-01-07 17:30:39 -05:00 |
|
|
h00die
|
c6372ecdf1
|
more wp catch themes doc and error handling
|
2022-01-04 04:34:42 -05:00 |
|
|
lapinou
|
7843b1bb99
|
Add files via upload
|
2022-01-02 00:30:07 +01:00 |
|
|
h00die
|
d8255978ac
|
Wordpress Plugin Catch Themes Demo Import cve-2021-39352
|
2021-12-24 11:56:51 -05:00 |
|
|
h00die
|
4e0fc5a4e5
|
Wordpress Plugin Catch Themes Demo Import cve-2021-39352
|
2021-12-21 20:04:09 -05:00 |
|
|
h00die
|
22ecedf135
|
wp_popular_posts_rce
|
2021-12-08 16:45:19 -05:00 |
|
|
Jake Baines
|
4b7c5acc5b
|
Changed qx delimiter to # and added it to badchars. Defaulted to a staged payload
|
2021-11-03 10:51:37 -07:00 |
|
|
Jake Baines
|
68cae90f45
|
Fix spelling error
|
2021-11-03 08:51:07 -07:00 |
|
|
Jake Baines
|
116e2b0c1d
|
Enabled use of cmdstager::flavor printf. Tested against a CentOS install. Updated docs. Default to MeterpreterTryToFork and enabled autocheck
|
2021-11-03 08:49:09 -07:00 |
|
|
Jake Baines
|
beb30f2b6a
|
Expanded cmdstager flavors. Removed bad variable name
|
2021-11-02 12:01:36 -07:00 |
|
|
Jake Baines
|
10bb77ea4b
|
Addressed a wide variety of spelling and formatting issues. Added a reference. Registered TARGETURI. Randomized the image payload in check. Added additional options information to documentation.
|
2021-11-02 09:50:06 -07:00 |
|
|
Jake Baines
|
b3a6d09b86
|
Fix wrong extension for documentation
|
2021-11-02 08:07:56 -07:00 |
|
|
Jake Baines
|
3aadb6000b
|
Initial version of CVE-2021-22205 GitLab Unauth RCE
|
2021-11-02 01:46:51 -07:00 |
|
|
Spencer McIntyre
|
7fc38d1b50
|
Land #15754, add apache2 path traversal modules
|
2021-10-22 12:40:57 -04:00 |
|
|
Spencer McIntyre
|
ced61f989b
|
Tweak the verbiage for clarity, update docs
|
2021-10-22 12:38:03 -04:00 |
|
|
William Vu
|
42ed1b6eef
|
Add Windows support to CVE-2021-26084 exploit
|
2021-10-14 16:58:04 -05:00 |
|
|
dwelch-r7
|
dcb42da269
|
Land #15612, Add multiple moodle modules
|
2021-10-11 23:18:55 +01:00 |
|
|
RAMELLA Sébastien
|
60b2b0f009
|
update modules and docs
|
2021-10-10 17:01:15 +04:00 |
|
|
RAMELLA Sébastien
|
256b4edf78
|
update modules to CVE-2021-42013
|
2021-10-08 15:22:47 +04:00 |
|
|
space-r7
|
327aefd3f5
|
add older path, fix typo
|
2021-09-20 12:14:42 -05:00 |
|
|
Spencer McIntyre
|
fd0f565095
|
Add automatic targeting for the CVEs
|
2021-09-16 15:15:52 -04:00 |
|
|
Spencer McIntyre
|
d82ed7d4a2
|
Write up the module docs
|
2021-09-14 09:10:44 -04:00 |
|
|
h00die
|
65aae010ce
|
more libs for moodle and teacher priv esc to rce module
|
2021-09-04 13:31:11 -04:00 |
|
|
h00die
|
5ea2cf9e5a
|
moodle_admin_shell_upload working and minor other fixes
|
2021-08-29 16:59:44 -04:00 |
|
|
h00die
|
176c1f0751
|
moodle lib and module
|
2021-08-29 10:50:25 -04:00 |
|
|
h00die
|
a35be13958
|
moodle 3.8.0 tested
|
2021-08-28 08:10:28 -04:00 |
|
|
h00die
|
c0a8535764
|
moodle spellcheck rce
|
2021-08-27 19:51:52 -04:00 |
|
|
space-r7
|
c9bdd96c76
|
remove GIT_HOOK option
post-checkout is the only hook that will work
with this exploit, so no option is needed. Also update
the documentation to reflect that.
|
2021-08-12 10:18:13 -05:00 |
|
|
Shelby Pace
|
0fe761b838
|
modify options and add documentation
|
2021-08-12 10:18:12 -05:00 |
|
|
Grant Willcox
|
ade653f0bf
|
Final fixup edits to change the timeout value to be an advanced option and also to use send_req_cgi
|
2021-08-05 13:10:24 -05:00 |
|
|
Grant Willcox
|
00cfdc4f17
|
Use Faker to generate a fake app name, add in option to specify timeout to server, and also fix Alan's remaining review comments
|
2021-08-05 09:46:34 -05:00 |
|
|
Grant Willcox
|
0d7d5ab93f
|
Switch over to Rex::MIME::Message to use our built in mixins, and also fix last remaining review comments
|
2021-08-02 11:17:26 -05:00 |
|
|
Grant Willcox
|
27f70af1b3
|
Fix up some of the mistakes wvu pointed out
|
2021-07-30 15:28:10 -05:00 |
|
|
Grant Willcox
|
3427571887
|
Push up working CVE-2019-11580 exploit and associated documentation
|
2021-07-30 12:07:12 -05:00 |
|
|
Shelby Pace
|
183caff15c
|
Land #15418, add modern events calendar rce
|
2021-07-26 09:45:05 -05:00 |
|
|
Shelby Pace
|
38ae82155e
|
modify info, fix spacing
|
2021-07-26 09:43:34 -05:00 |
|