902eaa2562
Add new queries and attributes for ldap_query
2023-01-30 16:24:23 -05:00
1e94adc3ab
Land #17479 , Wordpress paid membership pro unauthenticated sqli (CVE-2023-23488)
2023-01-19 15:36:00 +01:00
82fe7120d4
Update ADCS to be AD CS so we have appropriate spelling
2023-01-18 17:07:48 -06:00
1888264d4d
wordpress paid membership pro
2023-01-14 08:34:10 -05:00
6758c8313f
Land #17258 , Update sharphound
2022-12-21 14:04:09 +01:00
d6a5590c06
Land #17265 , Add Exploit for CVE-2020-25736
2022-12-13 18:49:56 +01:00
cf9e54909c
use 2021 helper name in objective-c code too
2022-12-12 15:55:36 -06:00
024fc87b4c
Land #17272 , Add F5 MCP post module
...
Add F5 MCP post module
2022-12-12 14:20:31 -05:00
aaef7726db
Land #17330 , Fix enumerating emails via ProxyShell
2022-12-06 14:02:53 +01:00
1fec75621c
Fix up documentation from review
2022-12-05 14:04:22 -06:00
96da805014
Fix enumerating emails via ProxyShell
...
The ResolveNames endpoint used to gather emails addresses for targeting
only returns 100 at a time. This updates the module to check if the
search result contains all entries and when it does, it recurses into
itself with a refined search prefix. All results are returned to match
the original functionality instead of enumerating and halting once one
that's suitable for exploitation has been found.
2022-12-02 15:58:50 -05:00
d3057f15b2
Land #17275 , Add Exploit For CVE-2022-41082 (ProxyNotShell)
2022-11-30 18:16:19 +01:00
e981dde15f
Move the mcp-objects out of the class and into a data/ file (per Jeffrey's request)
2022-11-23 12:49:00 -08:00
b866917ee1
review
2022-11-22 16:57:01 -05:00
637ad5f809
make ducky more psh friendly
2022-11-21 17:55:48 -05:00
29b7fa5336
ducky_script format for msfvenom
2022-11-18 17:02:52 -05:00
29d57dde66
Consolidate into ProxyMaybeShell
2022-11-18 17:01:01 -05:00
fc7594dbc8
Add exploit for CVE-2022-41082 AKA ProxyNotShell
2022-11-18 17:00:27 -05:00
d8f2b50b07
add compiled exploit and source
2022-11-17 17:16:08 -06:00
ea486169b4
use erb template for objective-c code
2022-11-17 11:55:19 -06:00
27d4f45e09
add documentation and exploit file
2022-11-15 12:55:00 -06:00
f6eba6a836
updated bloodhound module
2022-11-13 14:29:28 -05:00
7abbdbe567
bloodhound module working with exe with sharphound v4
2022-11-13 10:26:15 -05:00
4c958546b5
update wordpress plugins and themes lists
2022-11-11 10:37:26 -05:00
189cc81abe
Apply autopep8 changes
2022-10-31 10:35:28 -04:00
d8dfee5864
Move the python code into python files
2022-10-31 10:35:28 -04:00
7aa62bfecd
Land #17071 , Add in new LDAP queries
...
Add in new LDAP queries to help with various attack paths
2022-10-24 09:18:41 -04:00
4bc98c6cc5
Fix a YAML syntax issue
2022-10-24 09:18:10 -04:00
01e4701bef
Reorder queries alphabetically and fix up errors identified during review
2022-10-21 11:18:23 -05:00
a9c3c61aa3
Land #17050 , make osx payload fileless
2022-10-20 14:13:32 -05:00
5910afadd9
add new binary
2022-10-20 13:47:54 -05:00
6a682f4fe6
Land #16982 , Update Dell iDRAC login scanner to work with v8 and v9
2022-10-14 01:40:35 +01:00
abd8ad1d7d
Restore ADCS certificate template gathering option and add in some new fields that should prove to be useful
2022-10-07 12:47:19 -05:00
33dc2f1109
Add in DNS zone enumeration option
2022-10-07 12:47:12 -05:00
bbf8017570
Add in references for the various queries
2022-10-07 12:47:10 -05:00
e7fbda96e3
Add in new LDAP queries to help with various attack paths
2022-10-07 12:47:10 -05:00
c6e18ee469
cve-2022-1329
2022-10-02 15:59:58 -04:00
c17c78bc0f
Land #16995 , Add TrustedSec's COFFLoader as Meterpreter Extension
...
Merge branch 'land-16995' into upstream-master
2022-09-30 14:14:39 -05:00
e27dbd2787
Land #16794,Add exploit for CVE-2022-34918
...
Merge branch 'land-16794' into upstream-master
2022-09-27 16:37:52 -05:00
0bcdc3fadb
idrac login updates
2022-09-20 16:20:24 -04:00
37d3c296ad
Add compiler support when mingw is available
2022-09-15 16:06:25 -04:00
a41ec9388f
Land #16725 , Add ManageEngine ADAudit Plus and DataSecurity Plus Xnode enum modules, docs and mixin (CVE-2020–11532)
2022-09-01 08:46:36 -05:00
9dcbf55ea8
Update ldap_query logic to handle binary data
2022-08-29 15:34:18 -05:00
ae5a9bd41b
Land #16734 , Add rtf support to cve-2022-30190
...
Add rtf support to cve-2022-30190 AKA Follina
2022-08-25 17:26:46 -04:00
109065e7c7
Fix up LDAP query syntax for some queries
2022-08-24 16:59:13 -05:00
e03f479659
Add a couple of ADCS related queries
2022-08-24 15:13:19 -04:00
3c495770b8
Allow configuring a base_dn prefix
2022-08-24 15:13:16 -04:00
97bce45e69
Land #16915 , Add exploit for CVE-2022-23277 (Exchange RCE)
2022-08-19 11:11:46 -05:00
62ab42b797
Update vulnerable version numbers and docs
2022-08-17 08:55:46 -04:00
e6d4a80e0f
data: powershell: msflag.ps1: Remove "from Metasploit" from flag message
2022-08-12 17:30:40 +10:00
Spencer McIntyre