a485a786ef
Land #17881 , Zyxel chained RCE using LFI and weak password derivation algorithm
2023-05-10 11:49:51 +02:00
51ab9746fb
Updates based on cdelafuente-r7 comments
2023-05-06 19:05:21 +00:00
c39751094a
Updates based on review comments
2023-04-21 11:46:53 +00:00
4131f1abf1
Fixed some bugs in module and added documentation
2023-04-20 08:23:55 +00:00
6ae00877ed
Land #17854 , VMware Workspace One Access mr_me Hekate RCE
...
Merge branch 'land-17854' into upstream-master
2023-04-18 09:49:41 -05:00
78e80f8e32
docs fix
2023-04-17 16:41:35 -04:00
162fe21659
Documentation copy pasta correction
2023-04-17 16:39:57 -04:00
d4b668e27b
Update documentation/modules/exploit/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.md
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2023-04-17 16:36:31 -04:00
08788d3d82
Update logging with rc script info
2023-04-13 14:28:15 -04:00
056b0a0e8b
LPE and doc updates
2023-04-07 10:41:10 -04:00
b7456e20d5
VMware Workspace One Access mr_me Hekate exploit
2023-04-05 23:10:34 -04:00
bcef7ee357
updated module and documentation with SUDO option
2023-03-26 18:31:25 +00:00
0c87b0b7cf
removed Windows reference from documentation
2023-03-23 10:34:51 +00:00
820e625baa
updated documentation
2023-03-22 21:17:54 +00:00
8226fb9022
fixed small typos documentation
2023-03-22 20:04:34 +00:00
28459c286a
init commit module and documentation
2023-03-22 18:40:50 +00:00
7217a60e41
Update documentation to provide better installation instructions
2023-03-14 10:13:27 -05:00
4a4b2a28d2
Update documentation to provide better installation instructions
2023-03-14 09:21:08 -05:00
3bd4c15704
Correct architecture and do final fixes
2023-03-13 15:46:42 -05:00
2a9ddae531
Updated description
2023-03-09 17:43:14 -05:00
06e7c3d702
Responded to comments updated docs
2023-03-09 17:39:53 -05:00
100cfbccf9
Fix up some more slight things in documentation. Also tidy up some things in the module
2023-03-08 17:25:56 -06:00
eeb30d2426
Fix up some typos etc from review in documentation
2023-03-08 16:44:06 -06:00
dfae7e2fc4
FortiNAC keyUploap.jsp arbitrary file write CVE-2022-39952
2023-03-08 14:06:28 -05:00
3abd62076c
Land #17624 , Oracle E-Business Suite Module
...
This pull request adds an exploit module for CVE-2022-21587
an arbitrary file upload vulnerability in Oracle Web Applications
Desktop Integrator as shipped with 12.2.3 through to 12.2.11
which results in RCE
2023-02-28 17:04:20 -05:00
5311a491e9
Froxlor 2.0.7 is actually vulnerable too
2023-02-24 13:18:34 -05:00
9621f77bac
Land #17640 , add Froxlor RCE
2023-02-22 12:11:38 -06:00
690abcfe1f
improve the documentation, mention some steps required during setup.
2023-02-22 09:42:11 +00:00
f6ec3855b3
Removed space at EOL
2023-02-22 00:35:42 -05:00
0c8df1a67b
Updated docs and module suggetsions
2023-02-22 00:33:40 -05:00
38d8b70873
Make msftidy_docs.rb happy and then also clarify where to find software download links
2023-02-17 14:56:51 -06:00
c713da368d
Add in a few fixes from the review
2023-02-17 14:52:57 -06:00
73e82274dd
changes as per @gwillcox-r7 review
2023-02-17 13:10:53 +00:00
ecd5ad29a7
Add module docs
2023-02-15 16:29:42 -05:00
d1463df3cc
fix documentation issues from msftidy_docs
2023-02-14 10:47:47 +00:00
ca0b1ffe05
Documentation fixes
2023-02-13 19:56:23 -05:00
2e195b2742
Initial commit Froxlor RCE
2023-02-13 19:39:18 -05:00
d012145726
Land #17599 , Cisco RV LAN Exploit - CVE-2022-20705 and CVE-2022-20707
2023-02-13 17:50:06 -06:00
45e453d687
Fix up remaining review comments
2023-02-13 15:07:25 -06:00
6b29b14c46
add in module documentation
2023-02-10 12:41:55 +00:00
f2a86327d0
Minor fixes from review
2023-02-09 15:34:25 -06:00
427c181e9a
Utilized msftidy_docs.rb to clean up missing sections, excessively long lines, spaces at EOL, and space end of file. Removed credit section. Expanded on installation procedure. Modified steps procedure to include Verify options and removed failure status. Removed Targets section. Scenarios have device, target, and architecture.
2023-02-08 19:18:14 -05:00
19bcf8be7f
Working hardcoded payload
2023-02-08 18:14:11 -05:00
35749a000a
Added docs. Performed code linting with rubocop.
2023-02-07 20:27:07 -05:00
52fa2e5be6
Add example for version 5.5.6 with CVE-2021-25297
2023-02-07 14:18:53 -06:00
489ab24876
Add in additional case documentation for the various targets and CVEs and fix a bug in the code
2023-02-07 14:18:45 -06:00
8ba7a28caf
Add quotes to set-time command in docs
2023-02-07 14:18:45 -06:00
90e07ef5ed
Switch to match over scan and add troubleshooting steps
2023-02-07 14:18:37 -06:00
1cb06b11ac
Adjust exploit and docs to support versions 5.5.6-5.7.5
2023-02-07 14:18:09 -06:00
87176f9d7f
Address Review Comments and add CVE-2021-25297 coverage
2023-02-07 14:18:06 -06:00
Christophe De La Fuente