Commit Graph

37823 Commits

Author SHA1 Message Date
jheysel-r7 f5aafdcfdf Merge pull request #20046 from Takahiro-Yoko/bentoml_runner_server_rce_cve_2025_32375
Add BentoML's runner server unauth RCE module (CVE-2025-32375)
2025-04-22 12:32:08 -07:00
jheysel-r7 eba2b6c1bf Merge pull request #19760 from cdelafuente-r7/feat/pkcs12/certs_command/pkinit
Add certs command & use pkinit if kerberos tickets are not available in cache
2025-04-22 11:11:54 -07:00
Takah1ro dc8531e37f Fix after applied suggestions (escape ') 2025-04-22 21:57:05 +09:00
Takahiro Yokoyama f579235b95 Apply suggestions from code review
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
2025-04-22 21:53:05 +09:00
adfoster-r7 37136b8550 Merge pull request #20068 from bcoles/exploits-solaris-sadmind
exploit/solaris/sunrpc/sadmind_*: Cleanup and add documentation
2025-04-22 11:09:25 +01:00
bcoles 1da0ebff66 exploit/solaris/sunrpc/sadmind_*: Cleanup and add documentation 2025-04-22 13:33:25 +10:00
msutovsky-r7 bdac31037a Land #20028, pgAdmin modules refactor
Refactor pgAdmin modules to use new lib
2025-04-21 16:03:35 +02:00
bcoles 03f4c46010 modules/payloads/singles: Resolve RuboCop violations 2025-04-20 02:57:34 +10:00
adfoster-r7 6fb76f9b51 Merge pull request #20064 from bcoles/payloads-php-reverse_php_ssl
payloads: cmd/unix/reverse_php_ssl: Resolve RuboCop violations
2025-04-19 17:53:49 +01:00
adfoster-r7 54e2f63c50 Merge pull request #20063 from bcoles/payloads-ruby-pingback
payloads: Ruby pingback: Resolve RuboCop violations
2025-04-19 17:43:44 +01:00
adfoster-r7 d505b968d8 Merge pull request #20062 from bcoles/rubocop-modules-payloads-stagers
modules/payloads/stagers: Resolve RuboCop violations
2025-04-19 17:43:29 +01:00
bcoles c3824e2b72 modules/exploits/hpux: Resolve RuboCop violations 2025-04-19 23:00:07 +10:00
bcoles 6f160d28b4 payloads: cmd/unix/reverse_php_ssl: Resolve RuboCop violations 2025-04-19 20:39:52 +10:00
bcoles 5f5e2782e5 payloads: Ruby pingback: Resolve RuboCop violations 2025-04-19 19:02:28 +10:00
bcoles 991ffe4c5b modules/payloads/stagers: Resolve RuboCop violations 2025-04-19 11:11:01 +10:00
adfoster-r7 5c9119b644 Merge pull request #20059 from bcoles/rubocop-modules-payloads-stages
modules/payloads/stages: Resolve RuboCop violations
2025-04-18 17:48:14 +01:00
adfoster-r7 ba23e4dbde Merge pull request #20055 from bcoles/rubocop-modules-exploits-netware
modules/exploits/netware: Resolve RuboCop violations
2025-04-18 17:46:33 +01:00
adfoster-r7 f131d91776 Update modules/exploits/netware/smb/lsass_cifs.rb 2025-04-18 17:30:59 +01:00
adfoster-r7 b07b6b98ae Merge pull request #20058 from bcoles/rubocop-modules-exploits-apple_ios
modules/exploits/apple_ios: Resolve RuboCop violations
2025-04-18 17:25:28 +01:00
bcoles 332bac8b54 modules/payloads/stages: Resolve RuboCop violations 2025-04-19 02:07:24 +10:00
bcoles 86e8c45baa modules/exploits/netware: Resolve RuboCop violations 2025-04-19 01:51:17 +10:00
adfoster-r7 5f6c6f8b4a Merge pull request #20057 from bcoles/rubocop-modules-examples
modules: examples: Resolve RuboCop violations
2025-04-18 16:50:13 +01:00
bcoles f4f6f012b5 modules/exploits/apple_ios: Resolve RuboCop violations 2025-04-19 01:43:58 +10:00
adfoster-r7 0ff7e4c724 Merge pull request #20056 from bcoles/rubocop-modules-exploits-irix
modules/exploits/irix: Resolve RuboCop violations
2025-04-18 12:59:39 +01:00
adfoster-r7 9fcc234963 Merge pull request #20054 from bcoles/rubocop-modules-exploits-firefox
modules/exploits/firefox: Resolve RuboCop violations
2025-04-18 12:53:04 +01:00
bcoles 0e74591eee modules: examples: Resolve RuboCop violations 2025-04-18 14:13:26 +10:00
bcoles d9d8c7ed36 modules/exploits/irix: Resolve RuboCop violations 2025-04-18 13:36:02 +10:00
bcoles db1c5f4750 modules/exploits/firefox: Resolve RuboCop violations 2025-04-18 13:01:04 +10:00
bcoles 389d84cbf0 modules/exploits/bsd: Resolve RuboCop violations 2025-04-18 12:44:40 +10:00
bcoles 703ff27e81 Move exploit/dialup/multi/login/manyargs to exploit/solaris/dialup/ 2025-04-18 11:36:34 +10:00
adfoster-r7 cd8f32aa13 Merge pull request #20051 from bcoles/rubocop-modules-exploits-dialup
modules/exploits/dialup: Resolve RuboCop violations
2025-04-18 02:17:33 +01:00
adfoster-r7 c231b419c7 Merge pull request #20049 from bcoles/rubocop-modules-exploits-mainframe
modules/exploits/mainframe: Resolve RuboCop violations
2025-04-18 02:15:41 +01:00
adfoster-r7 7f983bdca0 Merge pull request #20048 from bcoles/rubocop-modules-exploits-bsdi
modules/exploits/bsdi: Resolve RuboCop violations
2025-04-18 02:12:35 +01:00
adfoster-r7 195f2f7418 Merge pull request #20047 from bcoles/rubocop-modules-exploits-aix
modules/exploits/aix: Resolve RuboCop violations
2025-04-18 02:11:47 +01:00
bcoles f41e077108 modules/exploits/dialup: Resolve RuboCop violations 2025-04-18 10:49:46 +10:00
Brendan 98702a6326 Merge pull request #20044 from jheysel-r7/cve_2025_21293
Updated service_permissions with action to exploit CVE-2025-21293
2025-04-17 13:24:46 -05:00
Jack Heysel faea5f7933 Responded to comments 2025-04-17 09:43:13 -07:00
bcoles 4f3f9acb51 modules/exploits/mainframe: Resolve RuboCop violations 2025-04-18 01:46:06 +10:00
bcoles fb548c0fb6 modules/exploits/bsdi: Resolve RuboCop violations 2025-04-18 01:31:15 +10:00
bcoles dbb618ed56 modules/exploits/aix: Resolve RuboCop violations 2025-04-18 01:17:56 +10:00
Takah1ro e1b5109c70 Add BentoML RCE module (CVE-2025-32375) 2025-04-17 20:46:43 +09:00
Jack Heysel 3ead0fdf42 Add check for is_uac_enabled? 2025-04-16 17:59:53 -07:00
Jack Heysel 9a95f60df6 Updated service_permissions with action to exploit CVE-2025-21293 2025-04-16 10:55:05 -07:00
msutovsky-r7 7d70005884 Land #20041, BentoML RCE Module
Add BentoML RCE module (CVE-2025-27520)
2025-04-16 15:22:50 +02:00
Takahiro Yokoyama 5945e0db0e Update modules/exploits/linux/http/bentoml_rce_cve_2025_27520.rb
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
2025-04-16 22:05:04 +09:00
Takah1ro edcc30699a Make user be able to specify a particular endpoint 2025-04-16 21:47:31 +09:00
Takah1ro 4463bb2ced Support a pure-python payload 2025-04-16 21:25:36 +09:00
Simon Janusz 2d75b0191f Merge pull request #20043 from adfoster-r7/update-att-open-proxy-error-handling
Update att open proxy error handling
2025-04-16 12:59:01 +01:00
Takah1ro 6d936a72b1 Delete ARTIFACTS_ON_DISK 2025-04-16 20:54:22 +09:00
adfoster-r7 5b38fdb23c Update att open proxy error handling 2025-04-16 11:43:52 +01:00